ci-v3.2.0
This is the tag consumers should pin.
All 26 first-party refs (9 in .github/, 17 in examples/) resolve to the composite running astral-sh/setup-uv v9.0.0.
Per the documented release-commit bootstrap, this tagged tree's own refs name ci-v3.1.0 — a commit cannot contain its own SHA. ci-v3.1.0 is the composite fix, so a consumer pinning ci-v3.2.0 gets reusable workflows whose nested composites run v9.0.0.