⬆️ Update dependency runed to ^0.37.1 - #1004

##### [vv10.0.1](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.1)

##### Changes

Thank you [@arguile-](https://github.com/arguile-) for making this action more resilient.

##### 🐛 Bug fixes

- Tolerate transient manifest timeouts [@arguile-](https://github.com/arguile-) ([#1016](astral-sh/setup-uv#1016))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.4 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1017](astral-sh/setup-uv#1017))

##### 📚 Documentation

- docs: update version references to v10.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1014](astral-sh/setup-uv#1014))
##### [vv10.0.0](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.0)

##### Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

##### Extra security by default

If you use the default `enable-cache: auto` this will now **DISABLE THE CACHE** to protect against cache poisoning for the following events:

- `pull_request_target`
- `workflow_run`
- `release`

You can read the full reasoning in [#984](astral-sh/setup-uv#984)

##### `version: latest-known`

```yaml
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/[email protected]
  with:
    version: "latest-known"
```

This will now install the latest version with a checksum that is known by this action. The [known `uv` checksums](https://github.com/astral-sh/setup-uv/blob/4f6036f71cec78afb113b323f220c9185d983c12/src/download/checksum/known-checksums.ts) are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

##### Read python version from `.tool-versions`

```yaml
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/[email protected]
  with:
    version-file: "pyproject.toml"
```

Will now also set the python version if it is defined in `.tool-versions`. You can read the details [in the docs](https://github.com/astral-sh/setup-uv/blob/main/docs/advanced-version-configuration.md#install-a-version-defined-in-a-requirements-or-config-file)

##### 🚨 Breaking changes

- Disable automatic caching for sensitive events [@eifinger](https://github.com/eifinger) ([#992](astral-sh/setup-uv#992))

##### 🐛 Bug fixes

- Reject paths in .tool-versions [@eifinger](https://github.com/eifinger) ([#1007](astral-sh/setup-uv#1007))

##### 🚀 Enhancements

- Read Python version from .tool-versions [@eifinger](https://github.com/eifinger) ([#996](astral-sh/setup-uv#996))
- Add latest-known version selector [@eifinger](https://github.com/eifinger) ([#993](astral-sh/setup-uv#993))

##### 🧰 Maintenance

- Require pull requests for Dependabot rollups [@eifinger](https://github.com/eifinger) ([#1005](astral-sh/setup-uv#1005))
- ci: pin Alpine container image [@eifinger](https://github.com/eifinger) ([#995](astral-sh/setup-uv#995))
- chore: update known checksums for 0.12.3 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#991](astral-sh/setup-uv#991))
- chore: update known checksums for 0.12.2 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#985](astral-sh/setup-uv#985))
- chore: update known checksums for 0.12.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#982](astral-sh/setup-uv#982))
- chore: update known checksums for 0.12.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#981](astral-sh/setup-uv#981))
- chore: update known checksums for 0.11.31/0.11.32 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#972](astral-sh/setup-uv#972))

##### 📚 Documentation

- docs: update version references to v9.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#971](astral-sh/setup-uv#971))

##### ⬆️ Dependency updates

- chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1013](astral-sh/setup-uv#1013))
- chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1004](astral-sh/setup-uv#1004))
- chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#994](astral-sh/setup-uv#994))
- chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#976](astral-sh/setup-uv#976))
- chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#980](astral-sh/setup-uv#980))

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>