Update github actions all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv	uses-with	patch	0.10.7 → 0.10.9
renovatebot/github-action	action	patch	v46.1.3 → v46.1.4

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.10.9

Compare Source

Released on 2026-03-06.

Enhancements

• Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list (#​18338)
• Add torchcodec to PyTorch List (#​18336)
• Log the duration we took before erroring (#​18231)
• Warn when using uv_build settings without uv_build (#​15750)
• Add fallback to /usr/lib/os-release on Linux system lookup failure (#​18349)
• Use cargo auditable to include SBOM in uv builds (#​18276)

Configuration

• Add an environment variable for UV_VENV_RELOCATABLE (#​18331)

Performance

• Avoid toml Document overhead (#​18306)
• Use a single global workspace cache (#​18307)

Bug fixes

• Continue on trampoline job assignment failures (#​18291)
• Handle the hard link limit gracefully instead of failing (#​17699)
• Respect build constraints for workspace members (#​18350)
• Revalidate editables and other dependencies in scripts (#​18328)
• Support Python 3.13+ on Android (#​18301)
• Support cp3-none-any (#​17064)
• Skip tool environments with broken links to Python on Windows (#​17176)

Documentation

• Add documentation for common marker values (#​18327)
• Improve documentation on virtual dependencies (#​18346)

v0.10.8

Compare Source

Released on 2026-03-03.

Python

• Add CPython 3.10.20
• Add CPython 3.11.15
• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#​18247)
• Add resolver hint when --exclude-newer filters out all versions of a package (#​18217)
• Configure a real retry minimum delay of 1s (#​18201)
• Expand uv_build direct build compatibility (#​17902)
• Fetch CPython from an Astral mirror by default (#​18207)
• Download uv releases from an Astral mirror in installers by default (#​18191)
• Add SBOM attestations to Docker images (#​18252)
• Improve hint for installing meson-python when missing as build backend (#​15826)

Configuration

• Add UV_INIT_BARE environment variable for uv init (#​18210)

Bug fixes

• Prevent uv tool upgrade from installing excluded dependencies (#​18022)
• Promote authentication policy when saving tool receipts (#​18246)
• Respect exclusions in scripts (#​18269)
• Retain default-branch Git SHAs in pylock.toml files (#​18227)
• Skip installed Python check for URL dependencies (#​18211)
• Respect constraints during --upgrade (#​18226)
• Fix uv tree orphaned roots and premature deduplication (#​17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#​18230)
• Move cache prune in GitLab to after_script (#​18206)

renovatebot/github-action (renovatebot/github-action)

v46.1.4

Compare Source

Documentation

• update references to renovatebot/github-action to v46.1.3 (c2d0816)

Miscellaneous Chores

• deps: update actions/setup-node action to v6.3.0 (da7b52c)
• deps: update dependency @​semantic-release/npm to v13.1.5 (8779a37)
• deps: update dependency @​types/node to v24.10.14 (4058dd8)
• deps: update dependency @​types/node to v24.10.15 (1839180)
• deps: update dependency @​types/node to v24.11.0 (547c751)
• deps: update dependency conventional-changelog-conventionalcommits to v9.2.0 (d2d8688)
• deps: update dependency globals to v17.4.0 (93a1308)
• deps: update dependency lint-staged to v16.3.0 (fb28428)
• deps: update dependency lint-staged to v16.3.1 (a9bd550)
• deps: update dependency typescript-eslint to v8.56.1 (ef0183d)
• deps: update pnpm to v10.30.2 (5d9b1b3)
• deps: update pnpm to v10.30.3 (d38f704)

Build System

• deps: lock file maintenance (00ae3b2)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v43.47.0 (d6044f6)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.48.2 (0c2120b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.48.3 (87c11e9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.48.4 (bc79127)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.49.0 (e0ff889)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.50.0 (82e724d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.51.0 (0784fa3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.51.1 (f005e86)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.52.0 (29f1ae6)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.52.1 (8b92fc0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.53.0 (9939673)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.54.0 (ea19709)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.55.1 (bfc0ac1)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.55.2 (ab0a774)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.56.0 (5a0686d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.56.1 (f840e29)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.57.0 (633ac37)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.58.0 (9f1d38a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.59.1 (8d49f37)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.59.2 (e792068)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.59.3 (527f1d4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.59.4 (7be708e)

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.80%. Comparing base (0d95074) to head (42b21ff).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5189   +/-   ##
=======================================
  Coverage   68.80%   68.80%           
=======================================
  Files         392      392           
  Lines       16373    16373           
  Branches     1846     1846           
=======================================
  Hits        11265    11265           
  Misses       4527     4527           
  Partials      581      581           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud