Merge branch 'fix/dependency-security-2026' into fix/api-security-dependencies

# Conflicts:
#	uv.lock

Author: xianshijing-lk

.github/workflows/check-types.yml

@@ -5,8 +5,6 @@ on:
     branches:
       - main
   pull_request:
-    branches:
-      - main
 
 jobs:
   type-check:
@@ -25,6 +23,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
+          version: "0.12.24"
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 

.github/workflows/ruff.yml

@@ -12,6 +12,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
+          version: "0.12.24"
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 

.github/workflows/test-api.yml

@@ -22,7 +22,6 @@ on:
   push:
     branches: [main]
   pull_request:
-    branches: [main]
 
 jobs:
   failover:
@@ -51,6 +50,8 @@ jobs:
 
       - name: Install uv
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.24"
 
       - name: Install livekit-api (without livekit-rtc)
         run: |
@@ -90,6 +91,8 @@ jobs:
           python-version: ${{ matrix.python-version }}
 
       - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.24"
 
       - name: Build and install distributions
         shell: bash