Merge branch 'develop'

.github/workflows/codeql.yml

@@ -18,7 +18,7 @@ jobs:
       contents: read
       packages: read
       security-events: write
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 360
     strategy:
       fail-fast: false

.github/workflows/pipeline.yaml

@@ -59,11 +59,12 @@ jobs:
       - name: Checkout
         uses: actions/[email protected]
 
-      - name: Set up Python
-        uses: actions/setup-[email protected]
+      - name: Set up uv
+        uses: astral-sh/setup-[email protected]
         with:
-          cache: pip
-          python-version: "3.13"
+          enable-cache: true
+          python-version: ${{ matrix.python-version }}
+          version: "0.5.x"
 
       - name: Login to Azure
         uses: Azure/[email protected]
@@ -115,15 +116,12 @@ jobs:
       - name: Checkout
         uses: actions/[email protected]
 
-      - name: Set up Python
-        uses: actions/setup-[email protected]
+      - name: Set up uv
+        uses: astral-sh/setup-[email protected]
         with:
-          cache: pip
+          enable-cache: true
           python-version: "3.13"
-
-      - name: Set up build dependencies
-        run: |
-          python3 -m pip install --upgrade pip build
+          version: "0.5.x"
 
       - name: Write version
         run: |
@@ -162,21 +160,6 @@ jobs:
         with:
           subject-path: dist/*
 
-  attest-dependencies:
-    name: Attest dependencies
-    permissions:
-      contents: write
-      id-token: write
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Checkout
-        uses: actions/[email protected]
-
-      - name: Run attestation
-        uses: advanced-security/[email protected]
-        with:
-          directoryExclusionList: docs
-
   attest-sbom:
     name: Attest SBOM
     permissions:
@@ -226,7 +209,6 @@ jobs:
     runs-on: ubuntu-24.04
     needs:
       - attest-binaries
-      - attest-dependencies
       - attest-sbom
       - test
     if: (github.ref == 'refs/heads/main') || (github.ref == 'refs/heads/develop')
@@ -274,7 +256,6 @@ jobs:
     runs-on: ubuntu-24.04
     needs:
       - attest-binaries
-      - attest-dependencies
       - attest-sbom
       - init
       - test