v8.3.0 🌈 Support uv.lock as a version-file source

Changes

Thanks to @somaz94 you can now use the pinned version of uv itself in uv.lock. It gets picked up automatically.
If you have pinned another version of uv in your uv.lock you can use the inputs version or version-source to override this.

🐛 Bug fixes

• Strip environment markers from detected uv dependency pins @eifinger (#938)
• Fix cache keys for Python version ranges @eifinger (#937)
• fix: use BUILD_ID as backup for determining os version @hgaiser (#912)

🚀 Enhancements

• feat: support uv.lock as a version-file source @somaz94 (#918)

🧰 Maintenance

• ci: call docs update workflow from release @eifinger (#933)
• chore: update known checksums for 0.11.26 @github-actions[bot] (#930)
• chore: update known checksums for 0.11.25 @github-actions[bot] (#929)
• chore: update known checksums for 0.11.24 @github-actions[bot] (#925)
• chore: update known checksums for 0.11.23 @github-actions[bot] (#922)
• chore: update known checksums for 0.11.22 @github-actions[bot] (#921)
• chore: update known checksums for 0.11.21 @github-actions[bot] (#917)
• chore: update known checksums for 0.11.20 @github-actions[bot] (#915)
• chore: update known checksums for 0.11.19 @github-actions[bot] (#909)

📚 Documentation

• docs: update version references to v8.2.0 @KRRT7 (#932)
• Add a threat model for setup-uv @zsol (#923)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @eifinger (#936)
• chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 @dependabot[bot] (#924)
• chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 @dependabot[bot] (#926)