Auto-update gh-actions (#155)

Co-authored-by: pavelzw <29506042+pavelzw@users.noreply.github.com>
Co-authored-by: Pavel Zwerschke <pavel.zwerschke@quantco.com>

Author: github-actions[bot]

template/.github/workflows/scorecard.yml.jinja

@@ -77,7 +77,7 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           sarif_file: results.sarif
 {%- endraw %}

template/pixi.toml.jinja

@@ -13,6 +13,7 @@ version = "*"
 [package.host-dependencies]
 python = ">={{ minimal_python_version.replace('py3', '3.') }}"
 hatchling = "*"
+uv = "*"
 
 [dependencies]
 {{ project_slug if "." not in project_slug else ('"' ~ project_slug ~ '"') }} = { path = "." }