ci: bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: astral-sh/setup-uv and errata-ai/vale-action.

Updates astral-sh/setup-uv from 9.0.0 to 10.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

• fix: respect no proxy directive @​mj0nez (#1037)
• Use JSON + a typed wrapper instead of TS codegen @​woodruffw (#1025)

🚀 Enhancements

• Expose a Python "identity" output @​woodruffw (#1036)
• Verify downloads with astral-sh/versions checksums @​zaniebot (#1033)

🧰 Maintenance

• chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)
• chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)
• chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)
• chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)
• chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)
• chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)
• Use self-repo syntax for all in-repo actions/reusable workflows @​woodruffw (#1024)
• Pin one-shot tools @​woodruffw (#1022)
• ci: remove obsolete direct push attempts @​eifinger (#1019)

📚 Documentation

• docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

• chore(deps-dev): roll up Dependabot updates @​eifinger (#1043)
• Harden npm install defaults @​zaniebot (#1026)
• Add dependency cooldowns @​woodruffw (#1021)

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

... (truncated)

Commits

• bec219d chore(deps-dev): roll up Dependabot updates (#1043)
• b90ec40 fix: respect no proxy directive (#1037)
• 421feb6 chore: update known checksums for 0.12.12 (#1041)
• f634bf4 Expose a Python "identity" output (#1036)
• a6772c8 chore: update known checksums for 0.12.10/0.12.11 (#1038)
• e105c8f chore: update known checksums for 0.12.9 (#1035)
• cd13f92 Verify downloads with astral-sh/versions checksums (#1033)
• 3aef7b9 chore: update known checksums for 0.12.7/0.12.8 (#1031)
• d08d816 chore: update known checksums for 0.12.6 (#1030)
• 19b4d1e Harden npm install defaults (#1026)
• Additional commits viewable in compare view

Updates errata-ai/vale-action from 2 to 3

Release notes

Sourced from errata-ai/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

• reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
• The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
• fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
• GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
• Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

• Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
• macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
• New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
• Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
• Downloads are verified against each release's published checksums.

Fixed

• Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
• An empty files list failing with lstat : no such file or directory (#141)
• Pull requests whose diff exceeds 20,000 lines (#153)
• The annotation limit failing runs regardless of fail_on_error (#89, #150)
• A warning failing the workflow under fail_on_error: true (#84)
• Nothing reported on push events (#103)
• The level input being ignored (#106)
• Wildcards in files — use the glob input; the warning now says so (#123)
• Scheduled runs on runners that write a thin event payload (#69)
• vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
• Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

v2.1.2

What's Changed

Full Changelog: vale-cli/vale-action@v2...2.1.2

v2.1.1

[!NOTE] As of this release, you need to install format-specific dependencies on your own. See the updated README for an example.

What's Changed

• Add clarity on not using quotes with flags by @​CollierCZ in errata-ai/vale-action#126

... (truncated)

Commits

• 518a913 Point the README at v3
• dca64de Backtick reviewdog in the README
• 4063152 Add a fail_level input
• 1ef5a5f Move the major tag ourselves, whatever the release is called
• 00a15b5 Treat an empty file list as nothing to lint
• 40967b1 Point wildcard paths at the glob input
• d4af982 Survive reviewdog closing its input early
• febea0f Fail on errors, not on any finding
• b1d1c1f Give reviewdog a repository when the event payload omits one
• 6b637c5 Note what a fork's read-only token can't do
• Additional commits viewable in compare view