chore(deps): bump astral-sh/setup-uv from 8.3.2 to 10.0.1

[dependabot]

Bumps astral-sh/setup-uv from 8.3.2 to 10.0.1.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

• Tolerate transient manifest timeouts @​arguile- (#1016)

🧰 Maintenance

• chore: update known checksums for 0.12.4 @github-actions[bot] (#1017)

📚 Documentation

• docs: update version references to v10.0.0 @github-actions[bot] (#1014)

v10.0.0 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

• pull_request_target
• workflow_run
• release

You can read the full reasoning in astral-sh/setup-uv#984

version: latest-known

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"
</tr></table> 

... (truncated)

Commits

• 20cfd1b chore: update known checksums for 0.12.4 (#1017)
• d73a0ca Tolerate transient manifest timeouts (#1016)
• ae3b92d docs: update version references to v10.0.0 (#1014)
• ae62891 chore(deps): roll up Dependabot updates (#1013)
• f9cdb47 Reject paths in .tool-versions (#1007)
• 4f6036f Require pull requests for Dependabot rollups (#1005)
• 8d6402c chore(deps): roll up Dependabot updates (#1004)
• 46f427b Read Python version from .tool-versions (#996)
• 8ed89c5 ci: pin Alpine container image (#995)
• 8473c7f chore(deps): roll up Dependabot updates (#994)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

👋 Thanks for opening your first PR to Comet, @dependabot[bot].

Before review, please make sure the PR title follows Conventional Commits, for example fix: handle project-scope init, and that the checklist in the PR template is up to date.

🧪 The most useful local checks are:

pnpm build
pnpm lint
pnpm format:check
pnpm test

🧰 If your change touches assets/skills/comet/scripts/, please also check script portability across macOS, Linux, and Windows Git Bash. Avoid sed -i, support both sha256sum and shasum -a 256, and guard optional grep pipelines with || true.

✨ We appreciate the contribution and will take a look as soon as we can.

[github-actions]

PR template needs attention

Please update this PR to match the current .github/PULL_REQUEST_TEMPLATE.md:

• Missing template section: ## ✨ Summary
• Missing template section: ## 🎯 Scope
• Missing template section: ## 🧪 Testing
• Missing template section: ## ✅ Checklist
• Missing template section: ## 👀 Notes for Reviewers
• Missing template item: CLI commands (init, status, doctor, update)
• Missing template item: Core installer / platform detection
• Missing template item: Comet skills (assets/skills/, assets/skills-zh/)
• Missing template item: Comet shell scripts (assets/skills/comet/scripts/)
• Missing template item: Tests / CI
• Missing template item: Documentation / changelog
• Missing template item: Other:
• Missing template item: pnpm build
• Missing template item: pnpm lint
• Missing template item: pnpm run lint:architecture
• Missing template item: pnpm format:check
• Missing template item: pnpm test
• Missing template item: pnpm test -- test/domains/comet-classic/comet-scripts.test.ts
• Missing template item: Not run:
• Missing template item: PR title follows Conventional Commits, for example fix: handle project-scope init
• Missing template item: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
• Missing template item: CHANGELOG.md is updated when behavior changes
• Missing template item: Skill changes were made in Chinese first when applicable, then synced to English
• Missing template item: New scripts are included in assets/manifest.json and relevant tests
• Missing template item: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
• Missing template item: No unrelated generated files or local artifacts are included
• Checklist item is not checked: PR title follows Conventional Commits, for example fix: handle project-scope init
• Checklist item is not checked: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
• Checklist item is not checked: CHANGELOG.md is updated when behavior changes
• Checklist item is not checked: Skill changes were made in Chinese first when applicable, then synced to English
• Checklist item is not checked: New scripts are included in assets/manifest.json and relevant tests
• Checklist item is not checked: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
• Checklist item is not checked: No unrelated generated files or local artifacts are included