Skip to content

chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.15#1542

Merged
descope[bot] merged 1 commit into
mainfrom
renovate/ghcr.io-astral-sh-uv-0.x
May 18, 2026
Merged

chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.15#1542
descope[bot] merged 1 commit into
mainfrom
renovate/ghcr.io-astral-sh-uv-0.x

Conversation

@descope
Copy link
Copy Markdown
Contributor

@descope descope Bot commented May 18, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
ghcr.io/astral-sh/uv stage patch 0.11.14 -> 0.11.15 OpenSSF Scorecard

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.11.15

Compare Source

Released on 2026-05-18.

Security
Enhancements
  • Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#​18741)
  • Add support for Azure request signing (#​19421)
  • Apply stricter validation to all wheel filename segments (#​19364)
  • Reject empty strings as an invalid package name (#​19435)
  • Use structured errors for signing authentication failures (#​19422)
Preview
Configuration
  • Respect required-environments in uv pip compile (#​19378)
Performance
  • Avoid parsing JSON manifest when local Python is available (#​19398)
  • Avoid walking nested directories in linker conflict registration (#​19382)
  • Optimize async wheel ZIP writing (#​19383)
  • Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#​19425)
Bug fixes
  • Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#​19423)
  • Skip empty directories in uv build outputs (#​19437)
  • Fix Git submodule handling when using relative paths (#​12156)
  • Fix line number reporting in netrc parsing (#​19452)
Documentation
  • Move Bazel auth helper setup into integration guide (#​19392)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope Bot added the renovate label May 18, 2026
@descope descope Bot enabled auto-merge (squash) May 18, 2026 23:01
@github-actions
Copy link
Copy Markdown

Coverage report

The coverage rate went from 98.31% to 98.31% ➡️

None of the new lines are part of the tested code. Therefore, there is no coverage data about them.

@descope descope Bot merged commit 499a211 into main May 18, 2026
33 checks passed
@descope descope Bot deleted the renovate/ghcr.io-astral-sh-uv-0.x branch May 18, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants