chore(deps): update github actions (#376)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |
|
[softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release)
| action | patch | `v3.0.2` → `v3.0.3` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v3.0.3`](https://redirect.github.com/softprops/action-gh-release/releases/tag/v3.0.3)

[Compare
Source](https://redirect.github.com/softprops/action-gh-release/compare/v3.0.2...v3.0.3)

`3.0.3` is a maintenance release with updated dependencies. It also
safely
classifies malformed GitHub API errors to avoid secondary failures
([#&#8203;822](https://redirect.github.com/softprops/action-gh-release/issues/822)).

#### What's Changed

##### Bug fixes 🐛

- fix: safely classify GitHub API errors by
[@&#8203;chenrui333](https://redirect.github.com/chenrui333) in
[#&#8203;822](https://redirect.github.com/softprops/action-gh-release/pull/822)

##### Other Changes 🔄

- dependency updates

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/DiamondLightSource/python-copier-template).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OS4wIiwidXBkYXRlZEluVmVyIjoiNDQuOTMuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/_dist.yml

@@ -13,7 +13,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.0.1
+        uses: astral-sh/setup-uv@v10.1.0
 
       - name: Build sdist and wheel
         run: >

.github/workflows/_docs.yml

@@ -21,7 +21,7 @@ jobs:
         run: sudo apt-get install graphviz
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.0.1
+        uses: astral-sh/setup-uv@v10.1.0
 
       - name: Build docs
         run: uv run --locked tox -e docs

.github/workflows/_example.yml

@@ -15,7 +15,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.0.1
+        uses: astral-sh/setup-uv@v10.1.0
 
       - name: Regenerate example
         run: |

.github/workflows/_release.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Create GitHub Release
         # We pin to the SHA, not the tag, for security reasons.
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
           files: "*"

.github/workflows/_test.yml

@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.0.1
+        uses: astral-sh/setup-uv@v10.1.0
 
       - name: Run tests
         run: uv run --locked tox -e tests

.github/workflows/_tox.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.0.1
+        uses: astral-sh/setup-uv@v10.1.0
 
       - name: Run tox
         run: uv run --locked tox -e ${{ inputs.tox }}