security: binary dependency updates available (5 stale)

[github-actions]

Binary Dependency Freshness Report

Tool	Pinned	Latest	Status
uv	0.7.12	0.11.19	⚠️ Update available
terraform-docs	0.21.0	0.24.0	⚠️ Update available
tflint	0.61.0	0.63.1	⚠️ Update available
actionlint	1.7.10	1.7.12	⚠️ Update available
golangci-lint	2.11.4	2.12.2	⚠️ Update available

Files Requiring Updates

• setup-dev.sh — uv 0.7.12 → 0.11.19
• training/rl/scripts/train.sh — uv 0.7.12 → 0.11.19
• infrastructure/setup/optional/isaac-sim-vm/scripts/install-dev-deps.sh — uv 0.7.12 → 0.11.19
• setup-dev.sh — terraform-docs 0.21.0 → 0.24.0
• .devcontainer/devcontainer.json — tflint 0.61.0 → 0.63.1
• .devcontainer/devcontainer.json — actionlint 1.7.10 → 1.7.12
• .devcontainer/devcontainer.json — golangci-lint 2.11.4 → 2.12.2

⚠️ Version Inconsistencies

• uv: version mismatch across files (setup-dev.sh, training/rl/scripts/train.sh, infrastructure/setup/optional/isaac-sim-vm/scripts/install-dev-deps.sh)

Update Instructions

Each pinned binary requires:

1. Version bump in source file(s)
2. Download new release asset and compute SHA256 hash
3. Update hash value in source file(s)
4. For multi-architecture tools (uv, terraform-docs): update all architecture variants

---

Workflow Run: https://github.com/microsoft/physical-ai-toolchain/actions/runs/27128662531
Detection Date: 2026-06-08

[github-actions]

🔄 Weekly scan: 5 tool(s) stale as of 2026-06-08. Workflow run.