chore: pin uv version and drop --verbose from deploy logs

.tool-versions

@@ -1,2 +1,2 @@
-uv 0.10.9
+uv 0.11.32
 nodejs 20.19.4

action.yml

@@ -32,6 +32,10 @@ runs:
   steps:
     - uses: astral-sh/setup-uv@v7
       with:
+        # Defaults to the consumer's checkout, where setup-uv looks for a uv version
+        # and a Python version that have nothing to do with this action. Pointing it
+        # here lets it find our required-version instead of installing uv latest.
+        working-directory: ${{ github.action_path }}
         enable-cache: true
         cache-dependency-glob: ${{ github.action_path }}/uv.lock
     - name: Install dependencies
@@ -42,7 +46,7 @@ runs:
       id: create-tag
       shell: bash
       working-directory: ${{ github.action_path }}
-      run: uv run --frozen --no-dev python create_tag.py --verbose --prefix ${{ inputs.prefix }} --timestamp-format ${{ inputs.timestamp_format }} --token ${{ inputs.token }} --repository ${{ github.repository }} ${{ inputs.timestamp }} ${{ inputs.deployment_id }}
+      run: uv run --frozen --no-dev python create_tag.py --prefix ${{ inputs.prefix }} --timestamp-format ${{ inputs.timestamp_format }} --token ${{ inputs.token }} --repository ${{ github.repository }} ${{ inputs.timestamp }} ${{ inputs.deployment_id }}
       env:
         GIT_AUTHOR_NAME: "Instrumentl GitHub Actions Bot"
         GIT_COMMITTER_NAME: "Instrumentl GitHub Actions Bot"

pyproject.toml

@@ -18,6 +18,10 @@ dev = [
 
 [tool.uv]
 package = false
+# uv.lock + --frozen pin the dependencies; this pins the tool that installs them.
+# setup-uv reads it, so the runner stops falling back to "whatever shipped today"
+# across every repo consuming this action at @main. Keep in sync with .tool-versions.
+required-version = "==0.11.32"
 
 [tool.ruff]
 line-length = 100

smoke-test.sh

@@ -41,7 +41,6 @@ GITHUB_SHA="$HEAD_SHA" \
 GITHUB_ACTOR="smoke-test" \
 GITHUB_OUTPUT="$SANDBOX/github_output.txt" \
 uv run --frozen --no-dev python create_tag.py \
-  --verbose \
   --prefix v2. \
   --timestamp-format "%Y%m%d%H%M" \
   --token none \