ci: bump setup-uv to maintained tag scheme (#777)

* ci: bump setup-uv to maintained tag scheme

The old vX tags have been dropped to (force) (usually) better security practices. Dependabot will not update, however, leaving this v7 tag forever. Manually updating now.

See astral-sh/setup-uv#830

Committed via https://github.com/asottile/all-repos

* chore: update the rest of the setup-uv mentions

Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>

---------

Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>

Author: henryiii

.github/workflows/bump.yml

@@ -19,7 +19,7 @@ jobs:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
       - uses: actions/checkout@v6
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
       - run: uvx nox -s pc_bump
         env:
           GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/reusable-cookie.yml

@@ -40,7 +40,7 @@ jobs:
           allow-prereleases: true
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.0.0
 
       - name: Install nox
         run: uv tool install nox
@@ -112,7 +112,7 @@ jobs:
           allow-prereleases: true
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.0.0
 
       - name: Install nox
         run: uv tool install nox

.github/workflows/reusable-rr-tests.yml

@@ -28,7 +28,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
           allow-prereleases: true
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       - name: Test package
         run: uv run pytest -ra
@@ -58,7 +58,7 @@ jobs:
         with:
           python-version: "3.13"
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       - name: Rerender README
         run: |
@@ -77,7 +77,7 @@ jobs:
         with:
           python-version: "3.13"
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       - name: Run pylint
         run: uvx nox -s rr_pylint -- --output-format=github

docs/pages/guides/gha_basic.md

@@ -115,7 +115,7 @@ tests:
         allow-prereleases: true
 
     - name: Download uv
-      uses: astral-sh/setup-uv@v7
+      uses: astral-sh/setup-uv@v8.0.0
 
     - name: Test package
       run: uv run pytest

docs/pages/guides/gha_wheels.md

@@ -83,7 +83,7 @@ make_sdist:
       with:
         fetch-depth: 0 # Optional, use if you use setuptools_scm
         submodules: true # Optional, use if you have submodules
-    - uses: astral-sh/setup-uv@v7
+    - uses: astral-sh/setup-uv@v8.0.0
 
     - name: Build SDist
       run: uv build --sdist
@@ -125,7 +125,7 @@ build_wheels:
         fetch-depth: 0
         submodules: true
 
-    - uses: astral-sh/setup-uv@v7
+    - uses: astral-sh/setup-uv@v8.0.0
 
     - uses: pypa/cibuildwheel@v3.4
 

docs/pages/guides/tasks.md

@@ -319,7 +319,7 @@ You can install `uv` with `pipx`, `brew`, etc. If you want to use uv in GitHub
 Actions, one way is to use this:
 
 ```yaml
-- uses: astral-sh/setup-uv@v7
+- uses: astral-sh/setup-uv@v8.0.0
 ```
 
 Check your jobs with `uv`; most things do not need to change. The main

{{cookiecutter.project_name}}/.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
         with:
           python-version: "3.x"
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       - uses: j178/prek-action@v2
 
@@ -67,7 +67,7 @@ jobs:
           python-version: {% raw %}${{ matrix.python-version }}{% endraw %}
           allow-prereleases: true
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       {%- if cookiecutter.backend == "mesonpy" %}
 

{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %}

@@ -54,7 +54,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.0.0
 
       - uses: pypa/cibuildwheel@v3.4