[WaterPancake]

Summary

• actions/checkout v4 → v7.0.1 (3d3c42e), astral-sh/setup-uv v5 → v10.3.0 (1c37ad0). Both run on Node 24, so the Node 20 deprecation warning goes away.
• Both are pinned by commit SHA with a version comment: setup-uv stopped publishing floating major tags at v8, so @v10 does not exist.

Breaking changes checked against this workflow

• setup-uv v6: python-version no longer activates a venv. No effect, because every step uses uv run --locked.
• setup-uv v7: drops the server-url input. Not used here.
• setup-uv v8: removes the old manifest format. Not used here.
• setup-uv v9: prune-cache now defaults to false. This may use slightly more Actions cache.
• setup-uv v10: caching is disabled for pull_request_target, workflow_run and release. This workflow uses only push and pull_request.
• checkout v6/v7: credentials are persisted to a separate file, and fork checkout is blocked under pull_request_target. No effect.

Review

This touches .github/workflows/test.yml, so AGENTS.md requires line-by-line human review before merge. No tests, baseline, configs or uv.lock change.

🤖 Generated with Claude Code