build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.18 #28

Open
renovate-bot wants to merge 1 commit from renovate/ghcr.io-astral-sh-uv-0.x into main
Member

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv final patch 0.12.130.12.18

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.12.18

Compare Source

Released on 2026-09-22.

Enhancements
  • Add --output-format json to uv pip install and uv pip sync, including for --dry-run and --check (#​21893)
  • Add --check to uv pip install and uv pip sync to report planned changes without modifying the environment (#​21844)
  • Identify failures from get_requires_for_build_* hooks correctly in build errors (#​21881)
Preview features
  • Validate build requirements for uv build --no-build-isolation with --preview-features build-dependency-check; use --skip-dependency-check to opt out (#​21880)
Performance
  • Speed up uv_build editable wheel creation by omitting compression from temporary wheels (#​21918)
Bug fixes
  • Select package versions with wheels compatible with each Python resolution fork, correctly interpreting generic and stable-ABI wheel tags (#​21835, #​21836)
  • Restore project, script, and lock files when uv add, uv remove, or uv version fails or is interrupted (#​21860, #​21856)
  • Use configured dependency-metadata when checking whether installed requirements are satisfied (#​21843)
  • Reject archive entries that normalize to absolute Windows paths (#​21923)
  • Recognize distribution filenames and archive extensions when URL fragments contain ? (#​21920)
  • Generate correctly lowercased platform tags for BSD and Haiku releases (#​21853)
  • Avoid rebuilding a Windows relative path into an absolute form (#​21923)

v0.12.17

Compare Source

Released on 2026-09-18.

Enhancements
  • Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#​21780)
Preview features
  • Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#​21651)
  • Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#​20746)
  • Keep uv workspace metadata read-only unless --sync is provided (#​21821)
  • Apply uv check lock modes when retrieving workspace metadata (#​21821)
Performance
  • Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#​21650)
  • Reduce resolver allocations when deduplicating package and distribution requests (#​21810)
Bug fixes
  • Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#​21825)
Documentation
  • Clarify the 0.12.14 and 0.12.15 release notes (#​21817)

v0.12.16

Compare Source

Released on 2026-09-17.

Python
  • Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#​21741)
Enhancements
  • Verify downloaded wheels and source distributions against hashes supplied by package indexes (#​21562)
  • Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#​21467)
  • Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#​21766)
  • Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#​21779)
Preview features
  • Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#​21163)
  • Honor configured and command-line index settings, including credentials, in uv upgrade (#​21776)
  • Allow uv check to run in projects that are not managed by uv and outside workspaces (#​21777)
  • Respect --python and UV_PYTHON when selecting the Python version for uv check (#​21744)
Bug fixes
  • Redact Azure shared access signatures from displayed and logged URLs (#​21755)
  • Check archive sizes from pylock.toml before reusing cached distributions (#​21609)
  • Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths (#​20631)
  • Use the bundled uv_build backend only when its version matches active version pins (#​21742)
  • Handle malformed index URLs without panicking when credentials are configured (#​21784)
  • Report a configuration error instead of panicking for proxy URLs without a host (#​21781)
  • Return a credential-redacted error instead of panicking when a URL cannot be converted to a path (#​21783)

v0.12.15

Compare Source

Released on 2026-09-15.

Performance
  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#​21675)
Bug fixes
  • Fix regressions in 0.12.14 when installing to symlinked destinations or using uv pip install --target . (#​21699)

v0.12.14

Compare Source

Released on 2026-09-15.

Enhancements
  • Resume interrupted downloads with HTTP Range requests when supported (#​21570)
  • Use a consistent format for error rendering (#​17110)
  • Render error and warning causes with compact cause: labels (#​21599, #​21603)
  • Show underlying causes and hints in user warnings (#​21565)
  • Show resolver hints for failed uv tool upgrade operations (#​21566)
Preview features
  • Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#​21618)
Performance
  • Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#​21619)
  • Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#​21593)
  • Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#​21621)
Bug fixes
  • Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#​21672)
  • Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#​21625)
  • Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#​21639)
  • Redact credentials and signatures from missing-path-segment URL errors (#​21616)
  • Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#​21640)
  • Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#​21559)
  • Classify package-operation exit codes by their underlying cause: return 1 for expected failures and 2 for recognized operational and internal failures (#​17110)
  • Suppress managed-Python fallback warnings under --quiet (#​21565)
  • Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#​21566)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | final | patch | `0.12.13` → `0.12.18` | --- ### Release Notes <details> <summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary> ### [`v0.12.18`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01218) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.17...0.12.18) Released on 2026-09-22. ##### Enhancements - Add `--output-format json` to `uv pip install` and `uv pip sync`, including for `--dry-run` and `--check` ([#&#8203;21893](https://github.com/astral-sh/uv/pull/21893)) - Add `--check` to `uv pip install` and `uv pip sync` to report planned changes without modifying the environment ([#&#8203;21844](https://github.com/astral-sh/uv/pull/21844)) - Identify failures from `get_requires_for_build_*` hooks correctly in build errors ([#&#8203;21881](https://github.com/astral-sh/uv/pull/21881)) ##### Preview features - Validate build requirements for `uv build --no-build-isolation` with `--preview-features build-dependency-check`; use `--skip-dependency-check` to opt out ([#&#8203;21880](https://github.com/astral-sh/uv/pull/21880)) ##### Performance - Speed up `uv_build` editable wheel creation by omitting compression from temporary wheels ([#&#8203;21918](https://github.com/astral-sh/uv/pull/21918)) ##### Bug fixes - Select package versions with wheels compatible with each Python resolution fork, correctly interpreting generic and stable-ABI wheel tags ([#&#8203;21835](https://github.com/astral-sh/uv/pull/21835), [#&#8203;21836](https://github.com/astral-sh/uv/pull/21836)) - Restore project, script, and lock files when `uv add`, `uv remove`, or `uv version` fails or is interrupted ([#&#8203;21860](https://github.com/astral-sh/uv/pull/21860), [#&#8203;21856](https://github.com/astral-sh/uv/pull/21856)) - Use configured `dependency-metadata` when checking whether installed requirements are satisfied ([#&#8203;21843](https://github.com/astral-sh/uv/pull/21843)) - Reject archive entries that normalize to absolute Windows paths ([#&#8203;21923](https://github.com/astral-sh/uv/pull/21923)) - Recognize distribution filenames and archive extensions when URL fragments contain `?` ([#&#8203;21920](https://github.com/astral-sh/uv/pull/21920)) - Generate correctly lowercased platform tags for BSD and Haiku releases ([#&#8203;21853](https://github.com/astral-sh/uv/pull/21853)) - Avoid rebuilding a Windows relative path into an absolute form ([#&#8203;21923](https://github.com/astral-sh/uv/pull/21923)) ### [`v0.12.17`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01217) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.16...0.12.17) Released on 2026-09-18. ##### Enhancements - Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports ([#&#8203;21780](https://github.com/astral-sh/uv/pull/21780)) ##### Preview features - Set minimum glibc and musl versions that universal resolutions must support with `minimum-libc-version` ([#&#8203;21651](https://github.com/astral-sh/uv/pull/21651)) - Reject `pylock.toml` files whose wheel filenames do not match their declared package names or versions ([#&#8203;20746](https://github.com/astral-sh/uv/pull/20746)) - Keep `uv workspace metadata` read-only unless `--sync` is provided ([#&#8203;21821](https://github.com/astral-sh/uv/pull/21821)) - Apply `uv check` lock modes when retrieving workspace metadata ([#&#8203;21821](https://github.com/astral-sh/uv/pull/21821)) ##### Performance - Speed up builds with many exclusion patterns by avoiding quadratic deduplication ([#&#8203;21650](https://github.com/astral-sh/uv/pull/21650)) - Reduce resolver allocations when deduplicating package and distribution requests ([#&#8203;21810](https://github.com/astral-sh/uv/pull/21810)) ##### Bug fixes - Prevent `required-environments` from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline ([#&#8203;21825](https://github.com/astral-sh/uv/pull/21825)) ##### Documentation - Clarify the 0.12.14 and 0.12.15 release notes ([#&#8203;21817](https://github.com/astral-sh/uv/pull/21817)) ### [`v0.12.16`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01216) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.15...0.12.16) Released on 2026-09-17. ##### Python - Add Pyodide 314.0.7, 0.29.5, and 0.27.8 ([#&#8203;21741](https://github.com/astral-sh/uv/pull/21741)) ##### Enhancements - Verify downloaded wheels and source distributions against hashes supplied by package indexes ([#&#8203;21562](https://github.com/astral-sh/uv/pull/21562)) - Allow `build-constraint-dependencies` entries to include hashes for verifying downloaded build dependencies ([#&#8203;21467](https://github.com/astral-sh/uv/pull/21467)) - Honor Darwin `platform_release` markers in `required-environments` using macOS wheel deployment targets ([#&#8203;21766](https://github.com/astral-sh/uv/pull/21766)) - Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports ([#&#8203;21779](https://github.com/astral-sh/uv/pull/21779)) ##### Preview features - Support `lock-without-metadata` across all dependency types while retaining `package.metadata` for remote URL dependencies to enable offline validation ([#&#8203;21163](https://github.com/astral-sh/uv/pull/21163)) - Honor configured and command-line index settings, including credentials, in `uv upgrade` ([#&#8203;21776](https://github.com/astral-sh/uv/pull/21776)) - Allow `uv check` to run in projects that are not managed by uv and outside workspaces ([#&#8203;21777](https://github.com/astral-sh/uv/pull/21777)) - Respect `--python` and `UV_PYTHON` when selecting the Python version for `uv check` ([#&#8203;21744](https://github.com/astral-sh/uv/pull/21744)) ##### Bug fixes - Redact Azure shared access signatures from displayed and logged URLs ([#&#8203;21755](https://github.com/astral-sh/uv/pull/21755)) - Check archive sizes from `pylock.toml` before reusing cached distributions ([#&#8203;21609](https://github.com/astral-sh/uv/pull/21609)) - Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths ([#&#8203;20631](https://github.com/astral-sh/uv/pull/20631)) - Use the bundled `uv_build` backend only when its version matches active version pins ([#&#8203;21742](https://github.com/astral-sh/uv/pull/21742)) - Handle malformed index URLs without panicking when credentials are configured ([#&#8203;21784](https://github.com/astral-sh/uv/pull/21784)) - Report a configuration error instead of panicking for proxy URLs without a host ([#&#8203;21781](https://github.com/astral-sh/uv/pull/21781)) - Return a credential-redacted error instead of panicking when a URL cannot be converted to a path ([#&#8203;21783](https://github.com/astral-sh/uv/pull/21783)) ### [`v0.12.15`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01215) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.14...0.12.15) Released on 2026-09-15. ##### Performance - Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes ([#&#8203;21675](https://github.com/astral-sh/uv/pull/21675)) ##### Bug fixes - Fix regressions in `0.12.14` when installing to symlinked destinations or using `uv pip install --target .` ([#&#8203;21699](https://github.com/astral-sh/uv/pull/21699)) ### [`v0.12.14`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01214) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.13...0.12.14) Released on 2026-09-15. ##### Enhancements - Resume interrupted downloads with HTTP Range requests when supported ([#&#8203;21570](https://github.com/astral-sh/uv/pull/21570)) - Use a consistent format for error rendering ([#&#8203;17110](https://github.com/astral-sh/uv/pull/17110)) - Render error and warning causes with compact `cause:` labels ([#&#8203;21599](https://github.com/astral-sh/uv/pull/21599), [#&#8203;21603](https://github.com/astral-sh/uv/pull/21603)) - Show underlying causes and hints in user warnings ([#&#8203;21565](https://github.com/astral-sh/uv/pull/21565)) - Show resolver hints for failed `uv tool upgrade` operations ([#&#8203;21566](https://github.com/astral-sh/uv/pull/21566)) ##### Preview features - Export multiple dependency selections from a shared lockfile in one `uv export --batch` invocation with the `batch-export` preview feature ([#&#8203;21618](https://github.com/astral-sh/uv/pull/21618)) ##### Performance - Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task ([#&#8203;21619](https://github.com/astral-sh/uv/pull/21619)) - Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers ([#&#8203;21593](https://github.com/astral-sh/uv/pull/21593)) - Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task ([#&#8203;21621](https://github.com/astral-sh/uv/pull/21621)) ##### Bug fixes - Select releases that satisfy `required-environments` within each resolver fork instead of combining incompatible wheel coverage across forks ([#&#8203;21672](https://github.com/astral-sh/uv/pull/21672)) - Install packages with paths longer than `MAX_PATH` on Windows systems without long-path support enabled ([#&#8203;21625](https://github.com/astral-sh/uv/pull/21625)) - Prevent `uv python install` from overwriting valid unmanaged Python symlinks with relative targets on Unix ([#&#8203;21639](https://github.com/astral-sh/uv/pull/21639)) - Redact credentials and signatures from missing-path-segment URL errors ([#&#8203;21616](https://github.com/astral-sh/uv/pull/21616)) - Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation ([#&#8203;21640](https://github.com/astral-sh/uv/pull/21640)) - Prefer `bin/python` over `bin/python3` when discovering interpreters in Unix environments ([#&#8203;21559](https://github.com/astral-sh/uv/pull/21559)) - Classify package-operation exit codes by their underlying cause: return `1` for expected failures and `2` for recognized operational and internal failures ([#&#8203;17110](https://github.com/astral-sh/uv/pull/17110)) - Suppress managed-Python fallback warnings under `--quiet` ([#&#8203;21565](https://github.com/astral-sh/uv/pull/21565)) - Keep failed `uv tool upgrade` errors visible with `-q` while suppressing them with `-qq` ([#&#8203;21566](https://github.com/astral-sh/uv/pull/21566)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43NS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.14
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 22s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 1m59s
cb6cd30158

Commitizen bump preview

No commits in this PR are eligible for a version bump.

<!-- commitizen-bump-preview --> ## Commitizen bump preview No commits in this PR are eligible for a version bump.
renovate-bot force-pushed renovate/ghcr.io-astral-sh-uv-0.x from cb6cd30158
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 22s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 1m59s
to fd4baa01fa
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 5s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 55s
2026-09-15 18:02:38 +00:00
Compare
renovate-bot changed title from build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.14 to build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.15 2026-09-15 18:02:41 +00:00
renovate-bot force-pushed renovate/ghcr.io-astral-sh-uv-0.x from fd4baa01fa
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 5s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 55s
to d22ad27a92
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 5s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 1m57s
2026-09-18 06:02:26 +00:00
Compare
renovate-bot changed title from build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.15 to build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.16 2026-09-18 06:02:29 +00:00
renovate-bot force-pushed renovate/ghcr.io-astral-sh-uv-0.x from d22ad27a92
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 5s
Test Build / checks (pull_request) Successful in 5s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 1m57s
to 85748ca967
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 4s
Test Build / checks (pull_request) Successful in 4s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 2m0s
2026-09-19 00:04:18 +00:00
Compare
renovate-bot changed title from build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.16 to build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.17 2026-09-19 00:04:22 +00:00
renovate-bot force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 85748ca967
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 4s
Test Build / checks (pull_request) Successful in 4s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 2m0s
to ca789c205a
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 32s
Test Build / checks (pull_request) Successful in 24s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 2m1s
2026-09-23 00:03:56 +00:00
Compare
renovate-bot changed title from build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.17 to build(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.18 2026-09-23 00:04:01 +00:00
All checks were successful
PR Bump Preview / Preview version bump (pull_request) Successful in 32s
Test Build / checks (pull_request) Successful in 24s
Test Build / code-quality (pull_request) Successful in 0s
Test Build / Test build image (pull_request) Successful in 2m1s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/ghcr.io-astral-sh-uv-0.x:renovate/ghcr.io-astral-sh-uv-0.x
git switch renovate/ghcr.io-astral-sh-uv-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/ghcr.io-astral-sh-uv-0.x
git switch renovate/ghcr.io-astral-sh-uv-0.x
git rebase main
git switch main
git merge --ff-only renovate/ghcr.io-astral-sh-uv-0.x
git switch renovate/ghcr.io-astral-sh-uv-0.x
git rebase main
git switch main
git merge --no-ff renovate/ghcr.io-astral-sh-uv-0.x
git switch main
git merge --squash renovate/ghcr.io-astral-sh-uv-0.x
git switch main
git merge --ff-only renovate/ghcr.io-astral-sh-uv-0.x
git switch main
git merge renovate/ghcr.io-astral-sh-uv-0.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ModernLeft/commitizen-ci!28
No description provided.