chore(deps): bump the actions group across 1 directory with 2 updates

[dependabot]

Bumps the actions group with 2 updates in the / directory: astral-sh/setup-uv and wevm/changelogs.

Updates astral-sh/setup-uv from 8.2.0 to 8.3.2

Commits

• 11f9893 chore: roll up Dependabot updates (#948)
• f798556 docs: update version references to v8.3.1 (#946)
• e80544d chore: update known checksums for 0.11.28 (#947)
• f98e069 Change update-docs PR labels from 'update-docs' to 'documentation' (#945)
• cd46263 chore: update known checksums for 0.11.27 (#944)
• 11245c7 docs: update version references to v8.3.0 (#939)
• d31148d Strip environment markers from detected uv dependency pins (#938)
• 17c3989 Fix cache keys for Python version ranges (#937)
• 3cc3c11 chore(deps): roll up Dependabot updates (#936)
• 9225f84 chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#924)
• Additional commits viewable in compare view

Updates wevm/changelogs from 466632795bfca34dc9bb7f7bcab9f50c6e3f3726 to 74f07b39c7c85773575e32472dfd5298ec6baaf4

Changelog

Sourced from wevm/changelogs's changelog.

Changelog

0.8.1 (2026-06-02)

Patch Changes

• Gate PyPI authentication setup to the explicit Python ecosystem so non-Python release workflows that use OIDC for their own registry do not attempt PyPI trusted publishing. (by @​EmmaJamieson-Hoare, #119)

0.8.0 (2026-05-02)

Minor Changes

• Add support for PyPI Trusted Publishing
• (OIDC). When pypi-token is empty and the workflow has id-token: write,
• the action mints a short-lived PyPI API token by exchanging the GitHub
• OIDC ID token at PyPI's _/oidc/mint-token endpoint, removing the need
• for a long-lived static API token. Existing static-token usage is
• unchanged. (by @​BrendanRyan, #116)

0.7.0 (2026-05-02)

Minor Changes

• Added support for a .changelog/instructions.md file to override the default AI prompt, with priority order: --instructions flag > .changelog/instructions.md > built-in default. Updated README with documentation for this feature. (by @​DerekCofausper, #67)

Patch Changes

• Two release-mode fixes:
• Go ecosystem. is_published now treats v0.0.0 as already published, so a Go module with no prior vX.Y.Z tag and no staged changelog entries does not get bootstrap-tagged on every push to the release branch. The previous behavior unconditionally created and pushed a v0.0.0 tag the first time the release workflow ran on an integrated repo.
• GitHub Action. The "Create GitHub releases" step's previous-tag lookup uses git tag --list … | grep -Fxv -- "$tag" | head -1. grep -Fxv exits 1 when every input line matches the excluded pattern (i.e. when the only tag is $tag itself), and under set -e -o pipefail that aborted the whole step before any release was created. Both occurrences are now guarded with { grep -Fxv … || true; }, so the lookup degrades to "no previous tag" instead of failing the step. (by @​BrendanRyan, #111)
• Added Go module ecosystem support. Discovers single-module Go projects via go.mod, persists the bumped version inline as a // changelogs:version X.Y.Z comment between the version and publish CI runs, edits require blocks for dependency updates, queries proxy.golang.org for published-version checks, and emits vX.Y.Z git tags. Auto-detection (go.mod at the repository root) and the go / golang ecosystem aliases are wired through. (by @​BrendanRyan, #109)

0.6.5 (2026-04-25)

Patch Changes

• Update rustls-webpki 0.103.11 → 0.103.13 to fix RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104. (by @​grandizzy, #107)

0.6.4 (2026-04-14)

Patch Changes

• Fixed changelog directory lookup to support hyphenated package names by stripping the first prefix segment as a fallback (e.g., tempo-alloy -> alloy). Also improved release notes extraction to match both backtick-wrapped tag headings and plain version headings. (by @​DerekCofausper, #87)

0.6.3 (2026-03-18)

Patch Changes

• Added support for unified versioning in root changelog format by implicitly treating all workspace packages as a fixed group, merging duplicate version headings and deduplicating changelog entries. Added Rust workspace version inheritance support for reading and writing versions via version.workspace = true. (by @​Kartik, #79)

... (truncated)

Commits

• 74f07b3 chore(deps): bump the actions group across 1 directory with 4 updates (#132)
• d1f5211 chore(deps): bump the cargo group across 1 directory with 5 updates (#133)
• f168e5c fix: render fenced code blocks in changelogs (#135)
• 902b825 fix: use root package version in release messages (#134)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions