Pin to existing major tags: setup-uv@v7, audit-check@v2.0.0

astral-sh/setup-uv only publishes specific tags past v7 (no v8 alias).
rustsec/audit-check has no moving major tag — pin to v2.0.0.

Author: hardbyte

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8
+        uses: astral-sh/setup-uv@v7
         with:
           version: "latest"
 
@@ -59,7 +59,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8
+        uses: astral-sh/setup-uv@v7
         with:
           version: "latest"
 

.github/workflows/security.yml

@@ -26,12 +26,12 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Run Rust security audit
-        uses: rustsec/audit-check@v2
+        uses: rustsec/audit-check@v2.0.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8
+        uses: astral-sh/setup-uv@v7
         with:
           version: "latest"