From d20f1d58af0d32a3cad56610e36aca3c7cc492a4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 Oct 2026 20:13:58 +0000
Subject: [PATCH] Bump the actions group across 1 directory with 2 updates

Bumps the actions group with 2 updates in the / directory: [gradle/actions/setup-gradle](https://github.com/gradle/actions) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `gradle/actions/setup-gradle` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/9c971963bec38e04b3d30dcc455b5382be2fdbfb...3f5f9adaf7d9fecd50b5935e54106014257a94e6)

Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7)

---
updated-dependencies:
- dependency-name: gradle/actions/setup-gradle
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml   | 6 +++---
 .github/workflows/docs.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 27ea283..a7069ff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
                 with:
                     distribution: temurin
                     java-version: 25
-            -   uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            -   uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
             # setup-gradle caches ~/.gradle but not the Kotlin/Native toolchain that compiling the native targets
             # downloads. The toolchain depends only on the Kotlin version, so that is the whole key: an exact hit, or
             # a fresh download saved under the new version. No restore-keys, which would carry every older toolchain
@@ -107,7 +107,7 @@ jobs:
                     java-version: |
                         ${{ matrix.java }}
                         25
-            -   uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            -   uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
             # Gradle doesn't scan the runner's tool cache, so point it at what setup-java installed. The names
             # are setup-java's JAVA_HOME_<major>_<arch> variables, hence X64 for ubuntu-latest. If a lookup ever
@@ -155,7 +155,7 @@ jobs:
                 with:
                     distribution: temurin
                     java-version: 25
-            -   uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            -   uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
             # setup-gradle caches ~/.gradle but not the Kotlin/Native toolchain that compiling the native targets
             # downloads. The toolchain depends only on the Kotlin version, so that is the whole key: an exact hit, or
             # a fresh download saved under the new version. No restore-keys, which would carry every older toolchain
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ba1cae5..d08f7a3 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -46,7 +46,7 @@ jobs:
             # Build the Zensical documentation site from website/uv.lock, the same resolution `make site`
             # uses locally. uv reads website/.python-version and installs that Python itself. --strict turns
             # warnings, such as a link to a missing anchor, into failures.
-            -   uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+            -   uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
             -   run: uv run --locked zensical build --clean --strict
                 working-directory: website/jev4k
 
@@ -55,7 +55,7 @@ jobs:
                 with:
                     distribution: temurin
                     java-version: 25
-            -   uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            -   uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
             # Dokka documents every source set, the native ones included, so it needs the Kotlin/Native toolchain;
             # setup-gradle doesn't cache it. This only restores ci.yml's cache, under the same key: Dokka finishes
             # first and never downloads the compiler's dependencies, so a save here would claim the key with a