ci: bump the ci-dependencies group across 1 directory with 2 updates

[dependabot[bot]]

Bumps the ci-dependencies group with 2 updates in the /.github/workflows directory: griffe and uv.

Updates griffe from 1.3.1 to 1.3.2

Release notes

Sourced from griffe's releases.

1.3.2

1.3.2 - 2024-10-01

Compare with 1.3.1

Bug Fixes

• Normalize paths of temporary Git worktrees (0821e67 by Timothée Mazzucotelli). Issue-324

Changelog

Sourced from griffe's changelog.

1.3.2 - 2024-10-01

Compare with 1.3.1

Bug Fixes

• Normalize paths of temporary Git worktrees (0821e67 by Timothée Mazzucotelli). Issue-324

Commits

• acc8c6b chore: Prepare release 1.3.2
• 0821e67 fix: Normalize paths of temporary Git worktrees
• See full diff in compare view

Updates uv from 0.4.11 to 0.4.17

Release notes

Sourced from uv's releases.

0.4.17

Release Notes

Enhancements

• Add uv build --all to build all packages in a workspace (#7724)
• Add support for uv init --script (#7565)
• Add support for upgrading build environment for installed tools (uv tool upgrade --python) (#7605)
• Initialize a Git repository in uv init (#5476)
• Respect --quiet flag in uv build (#7674)
• Add context message before listing available tools in uvx (#7641)

Bug fixes

• Don't create Python bytecode files during interpreter discovery (#7707)
• Escape glob patterns in workspace member discovery (#7709)
• Avoid prefetching source distributions with unbounded lower-bound ranges (#7683)

Documentation

• Add uv build and uv publish to features overview (#7716)
• Add documentation on cache versioning (#7693)
• Spell out the names of the Docker images for easier copy-paste (#7706)
• Document uv-with-Jupyter workflows (#7625)
• Note that uv lock --upgrade-package retains locked versions (#7694)

Install uv 0.4.17

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.4.17/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/uv/releases/download/0.4.17/uv-installer.ps1 | iex"

Download uv 0.4.17

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.4.17

Enhancements

• Add uv build --all to build all packages in a workspace (#7724)
• Add support for uv init --script (#7565)
• Add support for upgrading build environment for installed tools (uv tool upgrade --python) (#7605)
• Initialize a Git repository in uv init (#5476)
• Respect --quiet flag in uv build (#7674)
• Add context message before listing available tools in uvx (#7641)

Bug fixes

• Don't create Python bytecode files during interpreter discovery (#7707)
• Escape glob patterns in workspace member discovery (#7709)
• Avoid prefetching source distributions with unbounded lower-bound ranges (#7683)

Documentation

• Add uv build and uv publish to features overview (#7716)
• Add documentation on cache versioning (#7693)
• Spell out the names of the Docker images for easier copy-paste (#7706)
• Document uv-with-Jupyter workflows (#7625)
• Note that uv lock --upgrade-package retains locked versions (#7694)

0.4.16

Enhancements

• Add uv publish (#7475)
• Add a --project argument to run a command from a project directory (#7603)
• Display Python implementation when creating environments (#7652)
• Implement trusted publishing for uv publish (#7548)
• Respect lockfile preferences for --with requirements (#7627)
• Unhide the --directory option (#7653)
• Allow requesting free-threaded Python interpreters (#7431)
• Show a dedicated PubGrub hint for --unsafe-best-match (#7645)
• Add resolver error checking for conflicting distributions (#7595)

Bug fixes

• Avoid adding double-newlines for CRLF (#7640)
• Avoid retaining forks when requires-python range changes (#7624)
• Determine if pre-release Python downloads should be allowed using the version specifiers (#7638)
• Fix link-mode=clone for directories on Linux (#7620)
• Improve Python executable name discovery when using alternative implementations (#7649)
• Require opt-in to use alternative Python implementations (#7650)
• Use the first pre-release discovered when only pre-release Python versions are available (#7666)

Documentation

... (truncated)

Commits

• d2e7b40 Bump version to v0.4.17 (#7742)
• 41dbd97 Tweaks to the uvx help menu when no command is provided (#7740)
• e85cd26 Indicate which package failed in the error message for uv build --all (#7736)
• 805f1bd Add uv build --all option (#7724)
• ed1684a Add uv build --no-build-logs to silence the build backend logs (#7675)
• 3ce3403 uvx/uv tool run: Add context message before listing available tools when no a...
• 5e64dac Remove the typeset plugin (#7721)
• f8fc881 Add uv build and uv publish to features overview (#7716)
• fe88c10 Remove unused thiserror variants in resolver (#7717)
• df45b9a Pin rich==13.7.1 for --exclude-newer in tests (#7713)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @edgarrmondragon.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

---

📚 Documentation preview 📚: https://citric--1197.org.readthedocs.build/en/1197/

[sonarcloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[edgarrmondragon]

@dependabot merge

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (161d645) to head (5d22612). Report is 2 commits behind head on main.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #1197 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 10 10 Lines 482 482 Branches 25 25 ========================================= Hits 482 482 ``` | [Flag](https://app.codecov.io/gh/edgarrmondragon/citric/pull/1197/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Edgar+Ram%C3%ADrez+Mondrag%C3%B3n) | Coverage Δ | | |---|---|---| | [integration](https://app.codecov.io/gh/edgarrmondragon/citric/pull/1197/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Edgar+Ram%C3%ADrez+Mondrag%C3%B3n) | `91.28% <ø> (ø)` | | | [unit](https://app.codecov.io/gh/edgarrmondragon/citric/pull/1197/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Edgar+Ram%C3%ADrez+Mondrag%C3%B3n) | `93.77% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Edgar+Ram%C3%ADrez+Mondrag%C3%B3n#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.