This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) | final | patch | `0.12.1` → `0.12.8` | --- ### Release Notes <details> <summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary> ### [`v0.12.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0128) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.7...0.12.8) Released on 2026-08-31. ##### Enhancements - Warn about invalid tool directories and continue upgrading valid tools with `uv tool upgrade --all` ([#21368](https://redirect.github.com/astral-sh/uv/pull/21368)) ##### Preview features - Deduplicate identical files within and across cached wheels with the `content-addressed-cache` preview feature ([#21327](https://redirect.github.com/astral-sh/uv/pull/21327)) - Reduce allocations while extracting content-addressed wheels by reusing the hashing buffer across files ([#21340](https://redirect.github.com/astral-sh/uv/pull/21340)) - Speed up content-addressed cache cleanup on macOS by reading hard-link counts in bulk ([#21344](https://redirect.github.com/astral-sh/uv/pull/21344)) ##### Performance - Prevent concurrent uv processes from downloading and extracting the same remote wheel more than once ([#21379](https://redirect.github.com/astral-sh/uv/pull/21379)) - Speed up dependency graph construction from large lockfiles by indexing packages during traversal ([#21373](https://redirect.github.com/astral-sh/uv/pull/21373)) - Extend indexed lockfile traversal to exports, dependency trees, audits, and freshness checks ([#21377](https://redirect.github.com/astral-sh/uv/pull/21377)) - Speed up warm resolutions by reducing repeated marker interner work ([#21300](https://redirect.github.com/astral-sh/uv/pull/21300)) ##### Bug fixes - Do not trust hashes from direct URLs discovered only in wheel metadata when installing with `--require-hashes` ([#21348](https://redirect.github.com/astral-sh/uv/pull/21348)) - Use a compatible Azure Storage API version for anonymous and authenticated requests, allowing credential retries when public access is disabled ([#21366](https://redirect.github.com/astral-sh/uv/pull/21366)) - Redact Azure shared access signature (`sig`) query parameters from displayed URLs ([#21360](https://redirect.github.com/astral-sh/uv/pull/21360)) - Treat projects below one-level workspace member globs as standalone instead of aborting workspace discovery ([#21341](https://redirect.github.com/astral-sh/uv/pull/21341)) ##### Other changes - Update `astral-tokio-tar` to 0.7.0 and use effective sizes when tracking extracted hard links ([#21346](https://redirect.github.com/astral-sh/uv/pull/21346)) ### [`v0.12.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0127) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.6...0.12.7) Released on 2026-08-27. ##### Python - Replace managed Python installations when upgrading to a newer build of the same version ([#21323](https://redirect.github.com/astral-sh/uv/pull/21323)) ##### Enhancements - Support Linux `s390x`, `ppc64le`, and `loongarch64` targets for cross-platform dependency resolution ([#21313](https://redirect.github.com/astral-sh/uv/pull/21313)) - Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via `UV_AZURE_ENDPOINT_URL` ([#21318](https://redirect.github.com/astral-sh/uv/pull/21318)) ##### Preview features - Use content-based directory hashes to deduplicate extracted wheels in the cache with the `content-addressed-cache` preview feature ([#19693](https://redirect.github.com/astral-sh/uv/pull/19693)) ##### Bug fixes - Reject source archives with hash mismatches before persisting their extracted contents to the cache ([#21248](https://redirect.github.com/astral-sh/uv/pull/21248)) ##### Other changes - remove pyx specific features ([#21182](https://redirect.github.com/astral-sh/uv/pull/21182), [#21183](https://redirect.github.com/astral-sh/uv/pull/21183), [#21184](https://redirect.github.com/astral-sh/uv/pull/21184), [#21185](https://redirect.github.com/astral-sh/uv/pull/21185), [#21186](https://redirect.github.com/astral-sh/uv/pull/21186)) ### [`v0.12.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0126) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.5...0.12.6) Released on 2026-08-25. ##### Python - Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 [#21295](https://redirect.github.com/astral-sh/uv/pull/21295)) ##### Enhancements - Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links ([#21261](https://redirect.github.com/astral-sh/uv/pull/21261)) - Limit warnings about unbounded `uv_build` requirements to source-distribution builds ([#21078](https://redirect.github.com/astral-sh/uv/pull/21078)) - Display byte counts below 1 KiB without a fractional part ([#21237](https://redirect.github.com/astral-sh/uv/pull/21237)) ##### Preview features - Add `uv workspace metadata --sync --exact` to remove packages outside the selected resolution ([#21117](https://redirect.github.com/astral-sh/uv/pull/21117)) - Add the `artifact-hash-filtering` preview feature to make `uv pip compile --generate-hashes` honor `--only-binary` and `--no-binary` ([#21235](https://redirect.github.com/astral-sh/uv/pull/21235)) - Respect package-specific `exclude-newer` cutoffs when `uv check` selects its `ty` executable ([#21227](https://redirect.github.com/astral-sh/uv/pull/21227)) - Preserve virtual-environment hints from `tar-codec` source-distribution errors when the base interpreter is outside a `bin` directory ([#21146](https://redirect.github.com/astral-sh/uv/pull/21146)) ##### Performance - Enable profile-guided optimization for Linux x86-64 release binaries ([#21001](https://redirect.github.com/astral-sh/uv/pull/21001)) - Enable profile-guided optimization for Windows x86-64 release binaries ([#21003](https://redirect.github.com/astral-sh/uv/pull/21003)) - Enable profile-guided optimization for macOS ARM64 release binaries ([#21002](https://redirect.github.com/astral-sh/uv/pull/21002)) - Enable profile-guided optimization for Linux ARM64 release binaries ([#21004](https://redirect.github.com/astral-sh/uv/pull/21004)) - Speed up syncing projects with many activated conflict items by reusing their encoded representation ([#21148](https://redirect.github.com/astral-sh/uv/pull/21148)) ##### Bug fixes - Allow explicit `uv build` and non-editable first-party workspace packages when `no-build` is enabled ([#21294](https://redirect.github.com/astral-sh/uv/pull/21294)) - Reuse configured index credentials during `uv tool upgrade` when the tool receipt references the same index ([#21275](https://redirect.github.com/astral-sh/uv/pull/21275)) - Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch ([#21224](https://redirect.github.com/astral-sh/uv/pull/21224)) - Prevent TLS segfaults in riscv64 musl release binaries ([#21158](https://redirect.github.com/astral-sh/uv/pull/21158)) - Preserve dependencies selected by recursive extras when markers mix production and extra conditions ([#21181](https://redirect.github.com/astral-sh/uv/pull/21181)) - Preserve version constraints from transitively referenced recursive extras ([#21209](https://redirect.github.com/astral-sh/uv/pull/21209)) - Resolve repository-relative Git archive dependencies inside the checkout during the initial `uv sync` ([#21264](https://redirect.github.com/astral-sh/uv/pull/21264)) - Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header ([#21282](https://redirect.github.com/astral-sh/uv/pull/21282)) - Do not misclassify package URLs ending in `.py` as local script paths ([#21144](https://redirect.github.com/astral-sh/uv/pull/21144)) - Use directory creation times consistently across libc implementations for directory `cache-keys` entries ([#21137](https://redirect.github.com/astral-sh/uv/pull/21137)) - Promote human-readable sizes to the next unit at rounding boundaries ([#21136](https://redirect.github.com/astral-sh/uv/pull/21136)) ##### Other changes - Add Python 3.15 release-candidate Docker images ([#21293](https://redirect.github.com/astral-sh/uv/pull/21293)) - Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 ([#21258](https://redirect.github.com/astral-sh/uv/pull/21258)) ### [`v0.12.5`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0125) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.4...0.12.5) Released on 2026-08-14. ##### Python - Add CPython 3.10.21, 3.11.16, and 3.12.14 ([#21138](https://redirect.github.com/astral-sh/uv/pull/21138)) - Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters ([#21134](https://redirect.github.com/astral-sh/uv/pull/21134)) ##### Enhancements - Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs ([#21130](https://redirect.github.com/astral-sh/uv/pull/21130)) ##### Preview features - Allow `--index` and `--default-index` to select configured package indexes by name with the `index-by-name` preview feature ([#17455](https://redirect.github.com/astral-sh/uv/pull/17455)) - Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default ([#21131](https://redirect.github.com/astral-sh/uv/pull/21131)) - Fall back to logical file sizes when using `cache-physical-space` on filesystems that do not support physical-space accounting ([#21133](https://redirect.github.com/astral-sh/uv/pull/21133)) ##### Bug fixes - Resolve relative package index paths in PEP 723 scripts against the script directory ([#21097](https://redirect.github.com/astral-sh/uv/pull/21097)) ### [`v0.12.4`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0124) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.3...0.12.4) Released on 2026-08-13. ##### Enhancements - Prefer post-quantum key exchange and enable opt-in TLS diagnostics ([#21054](https://redirect.github.com/astral-sh/uv/pull/21054)) - Accept whitespace before versions in noncompliant wildcard comparisons such as `Requires-Python: >= 3.5.*` ([#21012](https://redirect.github.com/astral-sh/uv/pull/21012)) - Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content ([#20944](https://redirect.github.com/astral-sh/uv/pull/20944)) - Omit source-span carets from diagnostics for empty PEP 508 requirements ([#21094](https://redirect.github.com/astral-sh/uv/pull/21094)) ##### Preview features - Add `uv check --no-install-project` and respect `UV_NO_INSTALL_PROJECT` to install dependencies without building or installing the project ([#21085](https://redirect.github.com/astral-sh/uv/pull/21085)) - Make the ty subprocess invoked by `uv check` honor uv's color and progress settings, including quiet mode ([#21086](https://redirect.github.com/astral-sh/uv/pull/21086)) ##### Performance - Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges ([#20804](https://redirect.github.com/astral-sh/uv/pull/20804)) - Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly ([#21041](https://redirect.github.com/astral-sh/uv/pull/21041)) ##### Bug fixes - Use windowed `pythonw.exe` launchers for virtual environments created from managed Python minor-version links ([#19235](https://redirect.github.com/astral-sh/uv/pull/19235)) - Allow `uv lock` to proceed when `.venv` is an unusable project environment ([#21068](https://redirect.github.com/astral-sh/uv/pull/21068)) - Respect `fork-strategy` when ordering forks created from `environments` or existing lockfile `resolution-markers` ([#21000](https://redirect.github.com/astral-sh/uv/pull/21000)) - Preserve consecutive wildcard Python minor-version exclusions such as `!=3.11.*, !=3.12.*` in `uv.lock` ([#21045](https://redirect.github.com/astral-sh/uv/pull/21045)) - Preserve inline comments on the final item in dependency arrays when `uv add` updates it ([#21008](https://redirect.github.com/astral-sh/uv/pull/21008)) - Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch ([#21073](https://redirect.github.com/astral-sh/uv/pull/21073)) - Prevent interpreter cache reuse across different `PYTHONEXECUTABLE` and `__PYVENV_LAUNCHER__` overrides ([#21075](https://redirect.github.com/astral-sh/uv/pull/21075)) - Show standard styling, usage guidance, and line termination for invalid `uv version --bump` values ([#21076](https://redirect.github.com/astral-sh/uv/pull/21076)) ### [`v0.12.3`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0123) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.2...0.12.3) Released on 2026-08-07. ##### Python - Add CPython 3.13.15 ([#20997](https://redirect.github.com/astral-sh/uv/pull/20997)) ##### Preview features - Add `--output-format` to select automatic, human-readable, or raw-byte output for `uv cache size` ([#20992](https://redirect.github.com/astral-sh/uv/pull/20992)) - Preserve JSON output from `uv workspace metadata --quiet` while suppressing diagnostics ([#20991](https://redirect.github.com/astral-sh/uv/pull/20991)) - Reduce memory usage for large workspaces by streaming `uv workspace metadata` JSON output ([#20990](https://redirect.github.com/astral-sh/uv/pull/20990)) ##### Performance - Reduce Linux startup latency by initializing the workspace cache before spawning another thread ([#20989](https://redirect.github.com/astral-sh/uv/pull/20989)) - Reuse compiled workspace exclusion patterns during workspace discovery ([#20988](https://redirect.github.com/astral-sh/uv/pull/20988)) - Speed up conflict-heavy resolutions by avoiding materialized range complements ([#20982](https://redirect.github.com/astral-sh/uv/pull/20982)) - Avoid slow procfs reads during Python interpreter discovery on Linux ([#20987](https://redirect.github.com/astral-sh/uv/pull/20987)) ##### Documentation - Add PEP 740 attestations to the GitHub Actions publishing example ([#20986](https://redirect.github.com/astral-sh/uv/pull/20986)) - Restrict the GitHub Actions publishing example to Python version tags ([#20973](https://redirect.github.com/astral-sh/uv/pull/20973)) - Correct `--python-pin` to `--pin-python` in the `uv init --bare` example ([#20876](https://redirect.github.com/astral-sh/uv/pull/20876)) ### [`v0.12.2`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0122) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.12.1...0.12.2) Released on 2026-08-05. ##### Python - Add CPython 3.15.0rc1 ([#20948](https://redirect.github.com/astral-sh/uv/pull/20948)) - Add CPython 3.14.7 ([#20971](https://redirect.github.com/astral-sh/uv/pull/20971)) ##### Enhancements - Ensure diagnostic hints end with a newline to prevent malformed terminal output ([#20959](https://redirect.github.com/astral-sh/uv/pull/20959)) ##### Preview features - Audit one or all installed tools with `uv tool audit` ([#20921](https://redirect.github.com/astral-sh/uv/pull/20921)) - Report physically reclaimed disk space during cache cleanup with the `cache-physical-space` preview feature ([#20925](https://redirect.github.com/astral-sh/uv/pull/20925)) ##### Configuration - Add `UV_RUN_RLIMIT_NOFILE` to set the open-file limit for commands launched by `uv run` ([#20926](https://redirect.github.com/astral-sh/uv/pull/20926)) ##### Performance - Speed up `uv.lock` parsing for wheel entries ([#20881](https://redirect.github.com/astral-sh/uv/pull/20881)) - Speed up `uv.lock` parsing for source distribution entries ([#20882](https://redirect.github.com/astral-sh/uv/pull/20882)) - Speed up filename extraction from distribution URLs ([#20879](https://redirect.github.com/astral-sh/uv/pull/20879)) - Reduce filesystem metadata lookups during bytecode compilation ([#20928](https://redirect.github.com/astral-sh/uv/pull/20928)) - Reuse file metadata when building source distributions ([#20927](https://redirect.github.com/astral-sh/uv/pull/20927)) ##### Bug fixes - Preserve compatibility with older uv versions when recording artifact sizes in cached wheels and source distributions ([#20963](https://redirect.github.com/astral-sh/uv/pull/20963)) - Avoid including workspace-root default dependency groups when syncing or exporting a selected workspace member unless explicitly requested ([#20930](https://redirect.github.com/astral-sh/uv/pull/20930)) ##### Documentation - Separate build and publish jobs in the GitHub Actions publishing guide ([#20946](https://redirect.github.com/astral-sh/uv/pull/20946)) - Ensure the GitHub Actions publishing example waits for the build job to finish ([#20957](https://redirect.github.com/astral-sh/uv/pull/20957)) - Correct typos in the Docker integration guide ([#20970](https://redirect.github.com/astral-sh/uv/pull/20970)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month (`* 0-3 1 * *`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate).
-Original file line number
+Diff line change
@@ @@ -1,6 +1,6 @@ @@
 FROM python:3.13-slim
 -COPY --from=ghcr.io/astral-sh/uv:0.12.1 /uv /uvx /bin/
 +COPY --from=ghcr.io/astral-sh/uv:0.12.8 /uv /uvx /bin/
 WORKDIR /app