Add the uv release endpoint (#7276)

.github/workflows/check_dependent_pr.yaml

@@ -28,6 +28,7 @@ jobs:
           allowed-endpoints: >
             api.github.com:443 github.com:443 pypi.org:443
             files.pythonhosted.org:443 raw.githubusercontent.com:443
+            releases.astral.sh:443
 
       # Note: pull_request_target checks out the base branch by default.
       # This is safe as it avoids running untrusted code from the PR branch.

.github/workflows/clangd_tidy.yaml

@@ -51,6 +51,7 @@ jobs:
             raw.githubusercontent.com:443
             registry.npmjs.org:443
             release-assets.githubusercontent.com:443
+            releases.astral.sh:443
             releases.bazel.build:443
             storage.googleapis.com:443
             uploads.github.com:443

.github/workflows/pre_commit.yaml

@@ -43,6 +43,7 @@ jobs:
             raw.githubusercontent.com:443
             registry.npmjs.org:443
             release-assets.githubusercontent.com:443
+            releases.astral.sh:443
             releases.bazel.build:443
             storage.googleapis.com:443
             uploads.github.com:443

.github/workflows/tests.yaml

@@ -73,6 +73,7 @@ jobs:
             raw.githubusercontent.com:443
             registry.npmjs.org:443
             release-assets.githubusercontent.com:443
+            releases.astral.sh:443
             releases.bazel.build:443
             storage.googleapis.com:443
             uploads.github.com:443