Bump astral-sh/setup-uv from 8.3.2 to 9.0.0

[dependabot]

Bumps astral-sh/setup-uv from 8.3.2 to 9.0.0.

Release notes

Sourced from astral-sh/setup-uv's releases.

v9.0.0 🌈 Change prune-cache default to false

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes

• Change prune-cache default to false @​charliermarsh (#967)

🐛 Bug fixes

• fix: fall back to distribution ID when os-release has no version field @​cxzhong (#961)

🚀 Enhancements

• Speed up version client by partial response reads @​eifinger (#807)

🧰 Maintenance

• chore: update known checksums for 0.11.30 @github-actions[bot] (#968)
• chore: update known checksums for 0.11.29 @github-actions[bot] (#960)

📚 Documentation

• docs: update version references to v8.3.2 @github-actions[bot] (#949)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#970)
• chore(deps): roll up Dependabot updates @​eifinger (#962)

Commits

• c771a70 chore(deps): roll up Dependabot updates (#970)
• 2f537ca chore: update known checksums for 0.11.30 (#968)
• 2269552 Speed up version client by partial response reads (#807)
• 47a7f4f Change prune-cache default to false (#967)
• 71966ef chore(deps): roll up Dependabot updates (#962)
• f12b1f0 fix: fall back to distribution ID when os-release has no version field (#961)
• ecd24dd chore: update known checksums for 0.11.29 (#960)
• 6a19136 docs: update version references to v8.3.2 (#949)
• See full diff in compare view

[icebergai-review-bot]

IcebergAutoReview

Verdict: approve

The major upgrade is correctly scoped to four setup-uv references, retains immutable full-SHA pinning, and matches v9.0.0. The documented breaking cache-default change does not affect correctness; current CI exercises cached lint/test jobs and the same uv build path used for releases.

Findings

• No blocking findings.

Validation

• Inspected complete main...HEAD diff and commit ancestry.
• Verified only .github/workflows/ci.yml and release.yml changed, replacing v8.3.2 with v9.0.0.
• Ran git diff --check; no whitespace errors.
• Confirmed setup-uv remains pinned to the immutable 40-character v9.0.0 commit SHA.
• Relied on the supplied fully green current-head GitHub CI as the broad validation baseline.

Residual risks / optional notes

• With v9, cache pruning defaults to false, so the two cache-enabled CI jobs may consume more GitHub Actions cache storage. This is the documented intentional breaking change and is operational rather than correctness-blocking.

Automated review by Codex 196c54062f14 using IcebergAutoReview.

[icebergai-review-bot]

IcebergAutoReview

Verdict: approve

The new head is a clean rebase onto main after actions/checkout v7.0.1 landed. The effective PR delta remains limited to four setup-uv references, all pinned to the documented immutable v9.0.0 SHA. No prior blockers existed, and the rebase introduces no regression.

Findings

• No blocking findings.

Validation

• Inspected 196c540..HEAD; the only changes are the already-merged actions/checkout v7.0.1 updates from main.
• Reconstructed ancestry and confirmed HEAD is based directly on current main; main...HEAD contains only the four intended setup-uv upgrades.
• Compared the old and rebased PR commits with git range-diff and inspected affected workflow context.
• Ran git diff --check for both the follow-up delta and effective PR delta; no whitespace errors.
• Confirmed every setup-uv reference uses the full 40-character v9.0.0 commit SHA c771a70e6277c0a99b617c7a806ffedaca235ff9.
• Relied on the supplied fully green current-head GitHub CI for broad validation.

Residual risks / optional notes

• setup-uv v9 disables cache pruning by default, so cache-enabled jobs may consume more GitHub Actions cache storage. This documented operational change does not affect correctness.

Automated review by Codex ac1d56efa839 using IcebergAutoReview.