chore(deps): uv 0.11.30 + refresh code-quality product fact (0.11.2)

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
         with:
-          version: 0.11.29
+          version: 0.11.30
       - name: Install validator dependencies
         run: uv pip install --system --require-hashes -r requirements-ci.txt
       - name: Run static validators

.github/workflows/python-ci.yml

@@ -19,7 +19,7 @@ on:
       uv_version:
         description: 'Exact astral-sh/uv version to pin.'
         type: string
-        default: '0.11.29'
+        default: '0.11.30'
       install_command:
         description: 'Dependency install command (bash). Empty to skip.'
         type: string

.github/workflows/semgrep-ci.yml

@@ -53,7 +53,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
         with:
-          version: 0.11.29
+          version: 0.11.30
 
       - name: Semgrep scan
         env:

.github/workflows/sql-ci.yml

@@ -64,7 +64,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
         with:
-          version: 0.11.29
+          version: 0.11.30
 
       - name: Lint
         if: ${{ inputs.lint }}

.github/workflows/zizmor-no-sarif.yml

@@ -49,7 +49,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
         with:
-          version: 0.11.29
+          version: 0.11.30
 
       - name: Run zizmor (plain, enforced)
         env:

.github/workflows/zizmor-sarif.yml

@@ -56,7 +56,7 @@ jobs:
       - name: Set up uv
         uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
         with:
-          version: 0.11.29
+          version: 0.11.30
 
       - name: Run zizmor (SARIF)
         id: scan

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## [Unreleased]
 
+## [0.11.2] - 2026-07-21
+
+### Changed
+
+- Bump pinned uv `0.11.29` -> `0.11.30` across the setup-uv workflows and examples.
+- Refresh the `github-code-quality-transition` product fact: the GA/paid
+  transition completed 2026-07-20 as scheduled; re-verified 2026-07-21.
+
 ## [0.11.1] - 2026-07-20
 
 Supersedes 0.11.0, whose tag was burned by an accidental immutable pre-release.
@@ -14,11 +22,11 @@ No functional change from 0.11.0.
 - **BREAKING — uv and bun are now the only language/user-space package managers
   used by this library.** Every reusable workflow and self-CI step that
   previously shelled out to `pip`/`pipx`/`poetry` or `npm`/`npx`/`pnpm`/`yarn`
-  now uses `astral-sh/setup-uv` (uv `0.11.29`) for Python and
+  now uses `astral-sh/setup-uv` (uv `0.11.30`) for Python and
   `oven-sh/setup-bun` (bun `1.3.14`) for JavaScript. Callers relying on the
   removed inputs or the old install/lint defaults must update their invocations:
   - `python-ci.yml`: `actions/setup-python` + pip is replaced by `setup-uv`
-    (pinned via the new `uv_version` input, default `0.11.29`) with
+    (pinned via the new `uv_version` input, default `0.11.30`) with
     `enable-cache: true`; Python is provisioned with `uv python install`. The
     `install_command` default changes from `python -m pip install --upgrade pip`
     to `uv sync --frozen`. The pip-specific `cache` and `cache_dependency_path`

VERSION

@@ -1 +1 @@
-0.11.1
+0.11.2

catalog/product-facts.yml

@@ -506,14 +506,14 @@ facts:
   overage: AI usage and Actions minutes may add cost
   status: official
   source_authority: primary
-  verified_at: '2026-07-11'
-  expires_after: '2026-07-20'
+  verified_at: '2026-07-21'
+  expires_after: '2026-10-21'
   source_urls:
   - https://github.blog/changelog/2026-06-16-github-code-quality-generally-available-july-20-2026/
   - https://docs.github.com/en/billing/concepts/product-billing/github-code-quality
   notes:
-  - 'Time-sensitive transition: refresh immediately on or after 2026-07-20.'
-  - 'Verified 2026-07-11 against the changelog and billing docs: GA 2026-07-20, $10/active committer/month, usage-based AI, CodeQL consumes Actions minutes, Team + Enterprise Cloud only (not Enterprise Server).'
+  - 'GA + paid transition completed 2026-07-20 as scheduled; no longer time-critical.'
+  - 'Re-verified 2026-07-21 against the billing docs: standalone per-active-committer license ($10/active committer/month), CodeQL scans consume Actions minutes, AI features consume AI credits at $0.01/credit, independent of Advanced Security licenses; Team + Enterprise Cloud.'
 - id: gitlab-free-hosted
   provider: GitLab
   product: GitLab.com Free compute

docs/generated/free-tier-matrix.md

@@ -29,7 +29,7 @@ past its expiry, so a stale tier claim cannot silently mislead adopters.
 | `github-actions-self-hosted-control-plane` | GitHub | Actions self-hosted runners | public, private, internal | All eligible GitHub plans | zero-license-control-plane | unmetered (github-actions-control-plane-minutes) | official | 2026-07-11 | 2026-08-10 |
 | `github-attestations-private` | GitHub | Artifact attestations | private, internal | Enterprise Cloud | plan-gated | attestations | official | 2026-07-11 | 2026-08-10 |
 | `github-attestations-public` | GitHub | Artifact attestations | public | Free, Pro, Team, Enterprise Cloud | included-feature | attestations | official | 2026-07-11 | 2026-08-10 |
-| `github-code-quality-transition` | GitHub | Code Quality | public, private, internal | Team, Enterprise Cloud | scheduled-paid-transition | 10 usd-per-active-committer/month | official | 2026-07-11 | 2026-07-20 |
+| `github-code-quality-transition` | GitHub | Code Quality | public, private, internal | Team, Enterprise Cloud | scheduled-paid-transition | 10 usd-per-active-committer/month | official | 2026-07-21 | 2026-10-21 |
 | `github-dependabot-private` | GitHub | Dependabot alerts and security updates | private | All eligible plans | included-feature | repository-feature | official | 2026-07-11 | 2026-08-10 |
 | `github-dependency-review-private` | GitHub | Dependency review | private | Team, Enterprise Cloud | add-on-gated | repository-feature | official | 2026-07-11 | 2026-08-10 |
 | `github-dependency-review-public` | GitHub | Dependency review | public | All current plans | included-feature | repository-feature | official | 2026-07-11 | 2026-08-10 |

examples/release/pypi-trusted-publishing.yml

@@ -21,7 +21,7 @@ jobs:
           persist-credentials: false
       - uses: astral-sh/setup-uv@<sha>
         with:
-          version: "0.11.29"
+          version: "0.11.30"
       - run: uv build
       - uses: actions/upload-artifact@<sha>
         with: