From 0b06a0a646ba075aca3be7601076ff9e6a6b32c4 Mon Sep 17 00:00:00 2001
From: Nouraldin Farge <144660662+NouraldinFarge@users.noreply.github.com>
Date: Tue, 25 Aug 2026 18:32:21 -0500
Subject: [PATCH 1/2] ci: download uv from GitHub Releases directly

---
 .github/workflows/ci.yml               | 1 +
 .github/workflows/dependency-audit.yml | 1 +
 .github/workflows/release.yml          | 1 +
 3 files changed, 3 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ce7220c..03dc232 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,6 +38,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
+          download-from-astral-mirror: false
           enable-cache: true
 
       - name: Restore JavaScript dependencies
diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml
index b401410..8efced3 100644
--- a/.github/workflows/dependency-audit.yml
+++ b/.github/workflows/dependency-audit.yml
@@ -75,6 +75,7 @@ jobs:
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
           version: "0.11.30"
+          download-from-astral-mirror: false
           enable-cache: true
 
       - name: Export the frozen Python dependency graph
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 94e8127..12d6727 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,6 +42,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
+          download-from-astral-mirror: false
           enable-cache: true
 
       - name: Import required Authenticode certificate

From d053ad4c60d265ea89b73d59442b3ff72b555056 Mon Sep 17 00:00:00 2001
From: Nouraldin Farge <144660662+NouraldinFarge@users.noreply.github.com>
Date: Tue, 25 Aug 2026 18:34:48 -0500
Subject: [PATCH 2/2] ci: pin uv consistently across workflows

---
 .github/workflows/ci.yml               | 1 +
 .github/workflows/dependency-audit.yml | 2 +-
 .github/workflows/release.yml          | 1 +
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 03dc232..d5ebe62 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,6 +38,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
+          version: "0.12.6"
           download-from-astral-mirror: false
           enable-cache: true
 
diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml
index 8efced3..521d5a9 100644
--- a/.github/workflows/dependency-audit.yml
+++ b/.github/workflows/dependency-audit.yml
@@ -74,7 +74,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
-          version: "0.11.30"
+          version: "0.12.6"
           download-from-astral-mirror: false
           enable-cache: true
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 12d6727..82f0910 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,6 +42,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
+          version: "0.12.6"
           download-from-astral-mirror: false
           enable-cache: true