From d3b24a57b9cabf3c8e5bfc8d4639f19673ff59d3 Mon Sep 17 00:00:00 2001
From: Aurelio <19254254+Aureliolo@users.noreply.github.com>
Date: Tue, 10 Mar 2026 22:54:58 +0100
Subject: [PATCH] chore: pin setup-uv action to full SHA

Repo policy requires all actions pinned to full-length commit SHA.
Dependabot bumped to v6.0.0 with tag ref only, breaking CI.
---
 .github/actions/setup-python-uv/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/actions/setup-python-uv/action.yml b/.github/actions/setup-python-uv/action.yml
index 0237fd11c9..9fb47e980f 100644
--- a/.github/actions/setup-python-uv/action.yml
+++ b/.github/actions/setup-python-uv/action.yml
@@ -11,7 +11,7 @@ runs:
   using: composite
   steps:
     - name: Install uv
-      uses: astral-sh/setup-uv@v6.0.0
+      uses: astral-sh/setup-uv@c7f87aa956e4c323abf06d5dec078e358f6b4d04 # v6.0.0
       with:
         enable-cache: true