v4.1.0 🌈 Skip Astral mirror and support uv.lock

Changes

Among some minor bugfixes this release adds the option to skip the astral-sh mirror and download directly from GitHub releases. Useful if the Astral mirror can't or shouldn't be used.

Also big thanks to @somaz94 for adding support for reading the desired ruff version from uv.lock.
This works automatically if you haven't overridden the version discovery by using the inputs version or version-file

🐛 Bug fixes

• Fix wildcard src input @eifinger (#368)

🚀 Enhancements

• Add option to skip Astral mirror downloads @eifinger (#387)
• feat: support uv.lock as version-file @somaz94 (#379)

🧰 Maintenance

• Add Dependabot rollup skill @eifinger (#385)
• chore: update known checksums for 0.15.20 @github-actions[bot] (#383)
• chore: update known checksums for 0.15.19 @github-actions[bot] (#382)
• chore: update known checksums for 0.15.18 @github-actions[bot] (#381)
• chore: update known checksums for 0.15.17 @github-actions[bot] (#380)
• chore: update known checksums for 0.15.16 @github-actions[bot] (#378)
• chore: update known checksums for 0.15.15 @github-actions[bot] (#377)
• chore: update known checksums for 0.15.14 @github-actions[bot] (#376)
• chore: update known checksums for 0.15.13 @github-actions[bot] (#372)
• Update the release process to match setup-uv @zanieb (#364)
• chore: update known checksums for 0.15.12 @github-actions[bot] (#365)
• chore: update known checksums for 0.15.11 @github-actions[bot] (#360)
• Draft commitish releases @eifinger (#359)

📚 Documentation

• Use v4.0.0 in README.md @doctaphred (#371)

⬆️ Dependency updates

• chore: roll up Dependabot updates @eifinger (#386)
• Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 @dependabot[bot] (#356)