fix: restore extended-data release hygiene

[jbdevprimary]

Summary

• update the publishing checklist to match the merged setup-uv v8.3.2 workflow pin
• refresh uv.lock after the merged mypy/ruff/tox dependency bumps

Verification

• uv lock --check
• uv run pytest packages/extended-data/tests/core/test_release_hygiene.py::test_publishing_checklist_matches_workflow_action_pins -q
• uv run tox -e lint,typecheck,audit,examples,docs,build
• uv run tox -e py311,py312,py313,py314

Summary by CodeRabbit

• Documentation
  • Updated the publishing checklist to reference the latest pinned version of the setup tool.
  • No other publishing guidance or checklist content was changed.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a5f6bcc7-37e9-4bb1-9f5c-fef07b0c88a5

📥 Commits

Reviewing files that changed from the base of the PR and between ae65842 and 3bc94e7.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• packages/extended-data/docs/PUBLISHING_CHECKLIST.rst

---

📝 Walkthrough

Walkthrough

The publishing checklist updates the pinned astral-sh/setup-uv GitHub Action from v8.3.1 to v8.3.2, including its commit SHA.

Changes

Workflow Pin Update

Layer / File(s)	Summary
Update setup-uv checklist pin packages/extended-data/docs/PUBLISHING_CHECKLIST.rst	The workflow action pins table now references astral-sh/setup-uv v8.3.2 and its corresponding commit SHA.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title matches the PR's release-hygiene focus, though it is broader than the specific checklist and lockfile updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/extended-data-release-hygiene-fix

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Code Review

This pull request updates several development dependencies and workflow action pins. Specifically, it bumps the pinned version of astral-sh/setup-uv in the publishing checklist documentation and upgrades multiple packages in uv.lock, including librt, mypy, python-discovery, ruff, and tox to their latest versions. I have no feedback to provide as there are no review comments.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[amazon-q-developer]

The changes in this PR are straightforward and do not introduce any blocking defects. The documentation update adds a useful Git verification step to the publishing checklist, and the dependency lock file updates are routine version bumps managed by the package manager. No critical issues, security vulnerabilities, or logic errors were identified.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.