fix: uv version pin and caching

[jmeridth]

Pull Request

Proposed Changes

• pin and cache uv in workflow runs
• cancel in progress ci and linting with new pushes

Readiness Checklist

Author/Contributor

• If documentation is needed for this change, has that been included in this pull request
• run make lint and fix any issues that you have introduced
• run make test and ensure you have test coverage for the lines you are introducing

[Copilot]

Pull request overview

This PR standardizes CI tooling by pinning the uv version used in GitHub Actions workflows, enabling uv caching to speed up runs, and adding workflow-level concurrency to cancel superseded CI/lint runs on new pushes.

Changes:

• Pin uv to 0.10.9 across workflows and enable setup-uv caching.
• Add concurrency (cancel-in-progress) to python-ci and super-linter workflows.
• Apply the same uv pinning/caching to the dependabot uv.lock update workflow and Copilot setup workflow.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
.github/workflows/update-uv-lock.yml	Pins uv and enables cache for dependabot-driven uv.lock updates.
.github/workflows/super-linter.yaml	Adds concurrency cancellation and pins/enables cached uv for lint workflow.
.github/workflows/python-ci.yml	Adds concurrency cancellation and pins/enables cached uv for CI workflow.
.github/workflows/copilot-setup-steps.yml	Pins uv and enables cache for Copilot pre-steps.

[Copilot]

astral-sh/setup-uv caching relies on the GitHub Actions cache service; with workflow-level permissions explicitly set to only contents: read, the job will not have actions: write and cache restore/save can fail. Add actions: write (or at least actions: read + actions: write as needed) to the workflow/job permissions when enable-cache: true is used.

[Copilot]

This workflow sets explicit permissions (workflow and job), but neither includes actions: write. With enable-cache: true for setup-uv, cache restore/save can fail due to missing cache permissions. Add actions: write to the job permissions (job-level permissions override workflow-level).

[Copilot]

With enable-cache: true, setup-uv will attempt to use the GitHub Actions cache service. This workflow’s top-level permissions only grants id-token: write, so it likely lacks actions: write needed to save caches. Add actions: write to the workflow (and keep other permissions minimal) or disable caching here.

[Copilot]

This workflow explicitly sets permissions: contents: read; with enable-cache: true for setup-uv, cache restore/save can fail without actions: write permission. Add actions: write to the workflow permissions (or disable caching).