From a518efa773370f2b417c9bedb07ac2e848bd8d8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Sep 2026 06:37:29 +0000
Subject: [PATCH 1/2] chore(deps): bump the github-actions group with 3 updates

Bumps the github-actions group with 3 updates: [NDDev-OpenNetwork/ci-workflows/actions/ci-feedback](https://github.com/nddev-opennetwork/ci-workflows), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [NDDev-OpenNetwork/ci-workflows/actions/tool-cache](https://github.com/nddev-opennetwork/ci-workflows).


Updates `NDDev-OpenNetwork/ci-workflows/actions/ci-feedback` from 0.1.23 to 0.1.26
- [Release notes](https://github.com/nddev-opennetwork/ci-workflows/releases)
- [Changelog](https://github.com/NDDev-OpenNetwork/ci-workflows/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nddev-opennetwork/ci-workflows/compare/96215b32fbc751716b5c0b758a7a7ca202246574...a7b90bdf1ac12465cbd07072e3360442cfc8eec6)

Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7)

Updates `NDDev-OpenNetwork/ci-workflows/actions/tool-cache` from 0.1.23 to 0.1.26
- [Release notes](https://github.com/nddev-opennetwork/ci-workflows/releases)
- [Changelog](https://github.com/NDDev-OpenNetwork/ci-workflows/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nddev-opennetwork/ci-workflows/compare/96215b32fbc751716b5c0b758a7a7ca202246574...a7b90bdf1ac12465cbd07072e3360442cfc8eec6)

---
updated-dependencies:
- dependency-name: NDDev-OpenNetwork/ci-workflows/actions/ci-feedback
  dependency-version: 0.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: NDDev-OpenNetwork/ci-workflows/actions/tool-cache
  dependency-version: 0.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci-feedback.yml                    | 2 +-
 .github/workflows/ci.yml                             | 8 ++++----
 .github/workflows/dependabot-catalog-convergence.yml | 2 +-
 .github/workflows/maintenance.yml                    | 2 +-
 .github/workflows/nddev-security-bundle.yml          | 2 +-
 .github/workflows/private-security-bundle-free.yml   | 8 ++++----
 .github/workflows/private-static.yml                 | 2 +-
 .github/workflows/python-ci.yml                      | 2 +-
 .github/workflows/qt-ci.yml                          | 2 +-
 .github/workflows/release.yml                        | 2 +-
 .github/workflows/runtime-fixtures-languages.yml     | 8 ++++----
 .github/workflows/semgrep-ci.yml                     | 2 +-
 .github/workflows/sql-ci.yml                         | 2 +-
 .github/workflows/zizmor-no-sarif.yml                | 2 +-
 .github/workflows/zizmor-sarif.yml                   | 2 +-
 15 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/.github/workflows/ci-feedback.yml b/.github/workflows/ci-feedback.yml
index 9ac9637..be179c0 100644
--- a/.github/workflows/ci-feedback.yml
+++ b/.github/workflows/ci-feedback.yml
@@ -37,7 +37,7 @@ jobs:
       # tree. Either way `./actions/ci-feedback` cannot resolve, which is how
       # 0.1.21 shipped this path broken for every reusable caller. Name the
       # repository explicitly and pin it.
-      - uses: NDDev-OpenNetwork/ci-workflows/actions/ci-feedback@96215b32fbc751716b5c0b758a7a7ca202246574  # 0.1.23
+      - uses: NDDev-OpenNetwork/ci-workflows/actions/ci-feedback@a7b90bdf1ac12465cbd07072e3360442cfc8eec6  # 0.1.26
         with:
           run-id: ${{ inputs.run-id }}
           run-attempt: ${{ inputs.run-attempt }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0e2912f..6641ccd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -68,7 +68,7 @@ jobs:
           python-version: "3.13"
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # Stated, not inherited -- and it does change something. The pinned
@@ -124,7 +124,7 @@ jobs:
           python-version: "3.13"
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # Stated, not inherited -- and it does change something. The pinned
@@ -299,7 +299,7 @@ jobs:
           update-environment: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           enable-cache: false
@@ -396,7 +396,7 @@ jobs:
           update-environment: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           enable-cache: false
diff --git a/.github/workflows/dependabot-catalog-convergence.yml b/.github/workflows/dependabot-catalog-convergence.yml
index b6c928d..6d102fa 100644
--- a/.github/workflows/dependabot-catalog-convergence.yml
+++ b/.github/workflows/dependabot-catalog-convergence.yml
@@ -86,7 +86,7 @@ jobs:
           python-version: "3.13"
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           enable-cache: false
diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml
index cdd1e84..06f864d 100644
--- a/.github/workflows/maintenance.yml
+++ b/.github/workflows/maintenance.yml
@@ -82,7 +82,7 @@ jobs:
           update-environment: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # The sweep decides what maintenance debt exists; it must not
diff --git a/.github/workflows/nddev-security-bundle.yml b/.github/workflows/nddev-security-bundle.yml
index 2a0515b..82d5b7d 100644
--- a/.github/workflows/nddev-security-bundle.yml
+++ b/.github/workflows/nddev-security-bundle.yml
@@ -116,7 +116,7 @@ jobs:
             "$source_root/scripts/run_private_security_bundle.sh" >> "$GITHUB_ENV"
 
       - name: Set up pinned uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           enable-cache: false
diff --git a/.github/workflows/private-security-bundle-free.yml b/.github/workflows/private-security-bundle-free.yml
index b353bac..23e8b99 100644
--- a/.github/workflows/private-security-bundle-free.yml
+++ b/.github/workflows/private-security-bundle-free.yml
@@ -150,7 +150,7 @@ jobs:
       - name: Restore pinned uv archive
         if: ${{ steps.baked-uv.outputs.available != 'true' }}
         id: uv-archive
-        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@96215b32fbc751716b5c0b758a7a7ca202246574  # 0.1.23
+        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@a7b90bdf1ac12465cbd07072e3360442cfc8eec6  # 0.1.26
         with:
           url: https://github.com/astral-sh/uv/releases/download/0.11.30/uv-x86_64-unknown-linux-gnu.tar.gz
           sha256: 04bc7d180d6138bf6dc08387acf507a823f397a98fea55da36b0ccc7fbce3b68
@@ -173,7 +173,7 @@ jobs:
           printf '%s\n' "$RUNNER_TEMP/private-security-tools/bin" >> "$GITHUB_PATH"
 
       - name: Restore actionlint archive
-        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@96215b32fbc751716b5c0b758a7a7ca202246574  # 0.1.23
+        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@a7b90bdf1ac12465cbd07072e3360442cfc8eec6  # 0.1.26
         with:
           url: https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz
           sha256: 8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8
@@ -181,7 +181,7 @@ jobs:
           max-bytes: '16777216'
 
       - name: Restore OSV-Scanner binary
-        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@96215b32fbc751716b5c0b758a7a7ca202246574  # 0.1.23
+        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@a7b90bdf1ac12465cbd07072e3360442cfc8eec6  # 0.1.26
         with:
           url: https://github.com/google/osv-scanner/releases/download/v2.6.0/osv-scanner_linux_amd64
           sha256: ca69b3d3cd08f889a49dc0a383122f71cc528b83803671df5fd874d97485b108
@@ -189,7 +189,7 @@ jobs:
           max-bytes: '268435456'
 
       - name: Restore gitleaks archive
-        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@96215b32fbc751716b5c0b758a7a7ca202246574  # 0.1.23
+        uses: NDDev-OpenNetwork/ci-workflows/actions/tool-cache@a7b90bdf1ac12465cbd07072e3360442cfc8eec6  # 0.1.26
         with:
           url: https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz
           sha256: 551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb
diff --git a/.github/workflows/private-static.yml b/.github/workflows/private-static.yml
index 1a57e8b..c36020d 100644
--- a/.github/workflows/private-static.yml
+++ b/.github/workflows/private-static.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Set up uv
         if: ${{ inputs.setup_uv }}
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: ${{ inputs.uv_version }}
           # uv provisions our pinned tooling here, not the caller's
diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index caa32fa..8382c4c 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -108,7 +108,7 @@ jobs:
 
       - name: Set up uv and Python
         if: ${{ inputs.package_manager == 'uv' && !inputs.use_preinstalled_toolchain }}
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: ${{ inputs.uv_version }}
           enable-cache: true
diff --git a/.github/workflows/qt-ci.yml b/.github/workflows/qt-ci.yml
index f50ab12..2855894 100644
--- a/.github/workflows/qt-ci.yml
+++ b/.github/workflows/qt-ci.yml
@@ -98,7 +98,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           # Pinned, not inherited: setup-uv's `version` defaults to the
           # version in pyproject.toml or, absent one, whatever is latest.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c45e7ee..0bb8e64 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -77,7 +77,7 @@ jobs:
           update-environment: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # setup-uv caches by default. On a publishing workflow that turns the
diff --git a/.github/workflows/runtime-fixtures-languages.yml b/.github/workflows/runtime-fixtures-languages.yml
index 0f43fcf..f475595 100644
--- a/.github/workflows/runtime-fixtures-languages.yml
+++ b/.github/workflows/runtime-fixtures-languages.yml
@@ -500,7 +500,7 @@ jobs:
           python-version: '3.13'
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           # Pinned, not inherited: setup-uv's `version` defaults to the
           # version in pyproject.toml or, absent one, whatever is latest.
@@ -544,7 +544,7 @@ jobs:
           python-version: '3.13'
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           # Pinned, not inherited: setup-uv's `version` defaults to the
           # version in pyproject.toml or, absent one, whatever is latest.
@@ -601,7 +601,7 @@ jobs:
           python-version: '3.13'
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           # Pinned, not inherited: setup-uv's `version` defaults to the
           # version in pyproject.toml or, absent one, whatever is latest.
@@ -660,7 +660,7 @@ jobs:
           python-version: '3.13'
           update-environment: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           # Pinned, not inherited: setup-uv's `version` defaults to the
           # version in pyproject.toml or, absent one, whatever is latest.
diff --git a/.github/workflows/semgrep-ci.yml b/.github/workflows/semgrep-ci.yml
index 29d2c9f..bbb4ff0 100644
--- a/.github/workflows/semgrep-ci.yml
+++ b/.github/workflows/semgrep-ci.yml
@@ -57,7 +57,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # uv provisions our pinned analyser here, not the caller's
diff --git a/.github/workflows/sql-ci.yml b/.github/workflows/sql-ci.yml
index 54776c6..10c8713 100644
--- a/.github/workflows/sql-ci.yml
+++ b/.github/workflows/sql-ci.yml
@@ -65,7 +65,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # uv provisions our pinned tooling here, not the caller's
diff --git a/.github/workflows/zizmor-no-sarif.yml b/.github/workflows/zizmor-no-sarif.yml
index 495847f..4700161 100644
--- a/.github/workflows/zizmor-no-sarif.yml
+++ b/.github/workflows/zizmor-no-sarif.yml
@@ -56,7 +56,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # Consumer-facing gate. uv provisions our pinned analyser here,
diff --git a/.github/workflows/zizmor-sarif.yml b/.github/workflows/zizmor-sarif.yml
index 7026a88..5c1b252 100644
--- a/.github/workflows/zizmor-sarif.yml
+++ b/.github/workflows/zizmor-sarif.yml
@@ -57,7 +57,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4  # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7  # v10.2.0
         with:
           version: 0.11.30
           # This workflow backs the `zizmor` job, which is in `ci-gate.needs`.

From e6c68416740ba0643a9219db414290a2cd03e60a Mon Sep 17 00:00:00 2001
From: rldyourmnd <danil@nddev.it.com>
Date: Sun, 4 Oct 2026 08:10:12 +0500
Subject: [PATCH 2/2] chore(deps): synchronize action catalog

Converges catalog/tools.yml to the setup-uv v10.2.0 pin the workflow
files carry. The convergence job for this branch died at its
update-branch guard: the API's 'no new commits on the base branch'
reply did not match the 'already up to date' success pattern.
---
 catalog/tools.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/catalog/tools.yml b/catalog/tools.yml
index d10df09..8d96d04 100644
--- a/catalog/tools.yml
+++ b/catalog/tools.yml
@@ -509,8 +509,8 @@ tools:
     name: astral-sh/setup-uv
     homepage: "https://github.com/astral-sh/setup-uv"
     kind: action
-    current_version: "v10.1.0"
-    pin: "astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4"
+    current_version: "v10.2.0"
+    pin: "astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7"
     used_by:
       - .github/workflows/ci.yml
       - .github/workflows/dependabot-catalog-convergence.yml