Update GitHub Actions (#490)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Anuraag Agrawal <anuraaga@gmail.com>

Author: renovate[bot]

.github/workflows/add-to-project.yaml

@@ -17,5 +17,5 @@ on:
 jobs:
   call-workflow-add-to-project:
     name: Call workflow to add issue to project
-    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit

.github/workflows/ci.yaml

@@ -29,7 +29,7 @@ jobs:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync
@@ -44,7 +44,7 @@ jobs:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync --locked

.github/workflows/emergency-review-bypass.yaml

@@ -9,5 +9,5 @@ jobs:
   approve:
     name: Approve
     if: github.event.label.name == 'Emergency Bypass Review'
-    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit

.github/workflows/notify-approval-bypass.yaml

@@ -1,14 +1,12 @@
 name: Approval bypass notifier
 on:
-  pull_request:
-    types:
-      - closed
+  push:
     branches:
       - main
 permissions:
   pull-requests: read
 jobs:
   notify:
     name: Notify
-    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit

.github/workflows/pr-title.yaml

@@ -15,4 +15,4 @@ on:
       - synchronize
 jobs:
   lint:
-    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main

.github/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
         run: |
           VERSION=${{github.head_ref}}
           echo "VERSION=${VERSION##*/}" >> $GITHUB_ENV
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
       - name: Build release
         run: |
           uv build