#3723 chore(deps): bump the actions group with 6 updates Pull request opened by dependabot[bot] Bumps the actions group with 6 updates: | Package | From | To | | ------------------------------------------------------------------------- | ------ | ------ | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | 8.3.2 | 9.0.0 | | [github/codeql-action/init](https://github.com/github/codeql-action) | 4.37.1 | 4.37.3 | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | 4.37.1 | 4.37.3 | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | 4.37.1 | 4.37.3 | | [CodSpeedHQ/action](https://github.com/codspeedhq/action) | 4.18.5 | 4.19.1 | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | 0.6.0 | 0.6.1 | Updates

astral-sh/setup-uv

from 8.3.2 to 9.0.0 Release notes Sourced from astral-sh/setup-uv's releases.

v9.0.0 🌈 Change

prune-cache

default to

false

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes

• Change

prune-cache

default to

false

`@​charliermarsh` (#967)

🐛 Bug fixes

• fix: fall back to distribution ID when os-release has no version field `@​cxzhong` (#961)

🚀 Enhancements

• Speed up version client by partial response reads `@​eifinger` (#807)

🧰 Maintenance

• chore: update known checksums for 0.11.30 @github-actions[bot] (#968)

• chore: update known checksums for 0.11.29 @github-actions[bot] (#960)

📚 Documentation

• docs: update version references to v8.3.2 @github-actions[bot] (#949)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates `@​eifinger` (#970)

• chore(deps): roll up Dependabot updates `@​eifinger` (#962)

Commits • `c771a70` chore(deps): roll up Dependabot updates (#970) • `2f537ca` chore: update known checksums for 0.11.30 (#968) • `2269552` Speed up version client by partial response reads (#807) • `47a7f4f` Change

prune-cache

default to

false

(#967) • `71966ef` chore(deps): roll up Dependabot updates (#962) • `f12b1f0` fix: fall back to distribution ID when os-release has no version field (#961) • `ecd24dd` chore: update known checksums for 0.11.29 (#960) • `6a19136` docs: update version references to v8.3.2 (#949) • See full diff in compare view Updates

github/codeql-action/init

from 4.37.1 to 4.37.3 Release notes Sourced from github/codeql-action/init's releases.

v4.37.3

No user facing changes.

v4.37.2

• The new address format for the

config-file

input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the

remote=

prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023

• The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

Changelog Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the

init

Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the

tools

input for the

codeql-action/init

step to be specified using a

github-codeql-tools

repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to

toolcache

to always use the Cod…

meltano/sdk