chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.8 #8

Merged
Hermes merged 1 commit from renovate/ghcr.io-astral-sh-uv-0.x into main 2026-09-02 00:39:54 +01:00
Contributor

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv stage patch 0.12.50.12.8

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.12.8

Compare Source

Released on 2026-08-31.

Enhancements
  • Warn about invalid tool directories and continue upgrading valid tools with uv tool upgrade --all (#​21368)
Preview features
  • Deduplicate identical files within and across cached wheels with the content-addressed-cache preview feature (#​21327)
  • Reduce allocations while extracting content-addressed wheels by reusing the hashing buffer across files (#​21340)
  • Speed up content-addressed cache cleanup on macOS by reading hard-link counts in bulk (#​21344)
Performance
  • Prevent concurrent uv processes from downloading and extracting the same remote wheel more than once (#​21379)
  • Speed up dependency graph construction from large lockfiles by indexing packages during traversal (#​21373)
  • Extend indexed lockfile traversal to exports, dependency trees, audits, and freshness checks (#​21377)
  • Speed up warm resolutions by reducing repeated marker interner work (#​21300)
Bug fixes
  • Do not trust hashes from direct URLs discovered only in wheel metadata when installing with --require-hashes (#​21348)
  • Use a compatible Azure Storage API version for anonymous and authenticated requests, allowing credential retries when public access is disabled (#​21366)
  • Redact Azure shared access signature (sig) query parameters from displayed URLs (#​21360)
  • Treat projects below one-level workspace member globs as standalone instead of aborting workspace discovery (#​21341)
Other changes
  • Update astral-tokio-tar to 0.7.0 and use effective sizes when tracking extracted hard links (#​21346)

v0.12.7

Compare Source

Released on 2026-08-27.

Python
  • Replace managed Python installations when upgrading to a newer build of the same version (#​21323)
Enhancements
  • Support Linux s390x, ppc64le, and loongarch64 targets for cross-platform dependency resolution (#​21313)
  • Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via UV_AZURE_ENDPOINT_URL (#​21318)
Preview features
  • Use content-based directory hashes to deduplicate extracted wheels in the cache with the content-addressed-cache preview feature (#​19693)
Bug fixes
  • Reject source archives with hash mismatches before persisting their extracted contents to the cache (#​21248)
Other changes

v0.12.6

Compare Source

Released on 2026-08-25.

Python
  • Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #​21295)
Enhancements
  • Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#​21261)
  • Limit warnings about unbounded uv_build requirements to source-distribution builds (#​21078)
  • Display byte counts below 1 KiB without a fractional part (#​21237)
Preview features
  • Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#​21117)
  • Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#​21235)
  • Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#​21227)
  • Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#​21146)
Performance
  • Enable profile-guided optimization for Linux x86-64 release binaries (#​21001)
  • Enable profile-guided optimization for Windows x86-64 release binaries (#​21003)
  • Enable profile-guided optimization for macOS ARM64 release binaries (#​21002)
  • Enable profile-guided optimization for Linux ARM64 release binaries (#​21004)
  • Speed up syncing projects with many activated conflict items by reusing their encoded representation (#​21148)
Bug fixes
  • Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#​21294)
  • Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#​21275)
  • Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#​21224)
  • Prevent TLS segfaults in riscv64 musl release binaries (#​21158)
  • Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#​21181)
  • Preserve version constraints from transitively referenced recursive extras (#​21209)
  • Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#​21264)
  • Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#​21282)
  • Do not misclassify package URLs ending in .py as local script paths (#​21144)
  • Use directory creation times consistently across libc implementations for directory cache-keys entries (#​21137)
  • Promote human-readable sizes to the next unit at rounding boundaries (#​21136)
Other changes
  • Add Python 3.15 release-candidate Docker images (#​21293)
  • Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#​21258)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | stage | patch | `0.12.5` → `0.12.8` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary> ### [`v0.12.8`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0128) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.7...0.12.8) Released on 2026-08-31. ##### Enhancements - Warn about invalid tool directories and continue upgrading valid tools with `uv tool upgrade --all` ([#&#8203;21368](https://github.com/astral-sh/uv/pull/21368)) ##### Preview features - Deduplicate identical files within and across cached wheels with the `content-addressed-cache` preview feature ([#&#8203;21327](https://github.com/astral-sh/uv/pull/21327)) - Reduce allocations while extracting content-addressed wheels by reusing the hashing buffer across files ([#&#8203;21340](https://github.com/astral-sh/uv/pull/21340)) - Speed up content-addressed cache cleanup on macOS by reading hard-link counts in bulk ([#&#8203;21344](https://github.com/astral-sh/uv/pull/21344)) ##### Performance - Prevent concurrent uv processes from downloading and extracting the same remote wheel more than once ([#&#8203;21379](https://github.com/astral-sh/uv/pull/21379)) - Speed up dependency graph construction from large lockfiles by indexing packages during traversal ([#&#8203;21373](https://github.com/astral-sh/uv/pull/21373)) - Extend indexed lockfile traversal to exports, dependency trees, audits, and freshness checks ([#&#8203;21377](https://github.com/astral-sh/uv/pull/21377)) - Speed up warm resolutions by reducing repeated marker interner work ([#&#8203;21300](https://github.com/astral-sh/uv/pull/21300)) ##### Bug fixes - Do not trust hashes from direct URLs discovered only in wheel metadata when installing with `--require-hashes` ([#&#8203;21348](https://github.com/astral-sh/uv/pull/21348)) - Use a compatible Azure Storage API version for anonymous and authenticated requests, allowing credential retries when public access is disabled ([#&#8203;21366](https://github.com/astral-sh/uv/pull/21366)) - Redact Azure shared access signature (`sig`) query parameters from displayed URLs ([#&#8203;21360](https://github.com/astral-sh/uv/pull/21360)) - Treat projects below one-level workspace member globs as standalone instead of aborting workspace discovery ([#&#8203;21341](https://github.com/astral-sh/uv/pull/21341)) ##### Other changes - Update `astral-tokio-tar` to 0.7.0 and use effective sizes when tracking extracted hard links ([#&#8203;21346](https://github.com/astral-sh/uv/pull/21346)) ### [`v0.12.7`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0127) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.6...0.12.7) Released on 2026-08-27. ##### Python - Replace managed Python installations when upgrading to a newer build of the same version ([#&#8203;21323](https://github.com/astral-sh/uv/pull/21323)) ##### Enhancements - Support Linux `s390x`, `ppc64le`, and `loongarch64` targets for cross-platform dependency resolution ([#&#8203;21313](https://github.com/astral-sh/uv/pull/21313)) - Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via `UV_AZURE_ENDPOINT_URL` ([#&#8203;21318](https://github.com/astral-sh/uv/pull/21318)) ##### Preview features - Use content-based directory hashes to deduplicate extracted wheels in the cache with the `content-addressed-cache` preview feature ([#&#8203;19693](https://github.com/astral-sh/uv/pull/19693)) ##### Bug fixes - Reject source archives with hash mismatches before persisting their extracted contents to the cache ([#&#8203;21248](https://github.com/astral-sh/uv/pull/21248)) ##### Other changes - remove pyx specific features ([#&#8203;21182](https://github.com/astral-sh/uv/pull/21182), [#&#8203;21183](https://github.com/astral-sh/uv/pull/21183), [#&#8203;21184](https://github.com/astral-sh/uv/pull/21184), [#&#8203;21185](https://github.com/astral-sh/uv/pull/21185), [#&#8203;21186](https://github.com/astral-sh/uv/pull/21186)) ### [`v0.12.6`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0126) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.5...0.12.6) Released on 2026-08-25. ##### Python - Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 [#&#8203;21295](https://github.com/astral-sh/uv/pull/21295)) ##### Enhancements - Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links ([#&#8203;21261](https://github.com/astral-sh/uv/pull/21261)) - Limit warnings about unbounded `uv_build` requirements to source-distribution builds ([#&#8203;21078](https://github.com/astral-sh/uv/pull/21078)) - Display byte counts below 1 KiB without a fractional part ([#&#8203;21237](https://github.com/astral-sh/uv/pull/21237)) ##### Preview features - Add `uv workspace metadata --sync --exact` to remove packages outside the selected resolution ([#&#8203;21117](https://github.com/astral-sh/uv/pull/21117)) - Add the `artifact-hash-filtering` preview feature to make `uv pip compile --generate-hashes` honor `--only-binary` and `--no-binary` ([#&#8203;21235](https://github.com/astral-sh/uv/pull/21235)) - Respect package-specific `exclude-newer` cutoffs when `uv check` selects its `ty` executable ([#&#8203;21227](https://github.com/astral-sh/uv/pull/21227)) - Preserve virtual-environment hints from `tar-codec` source-distribution errors when the base interpreter is outside a `bin` directory ([#&#8203;21146](https://github.com/astral-sh/uv/pull/21146)) ##### Performance - Enable profile-guided optimization for Linux x86-64 release binaries ([#&#8203;21001](https://github.com/astral-sh/uv/pull/21001)) - Enable profile-guided optimization for Windows x86-64 release binaries ([#&#8203;21003](https://github.com/astral-sh/uv/pull/21003)) - Enable profile-guided optimization for macOS ARM64 release binaries ([#&#8203;21002](https://github.com/astral-sh/uv/pull/21002)) - Enable profile-guided optimization for Linux ARM64 release binaries ([#&#8203;21004](https://github.com/astral-sh/uv/pull/21004)) - Speed up syncing projects with many activated conflict items by reusing their encoded representation ([#&#8203;21148](https://github.com/astral-sh/uv/pull/21148)) ##### Bug fixes - Allow explicit `uv build` and non-editable first-party workspace packages when `no-build` is enabled ([#&#8203;21294](https://github.com/astral-sh/uv/pull/21294)) - Reuse configured index credentials during `uv tool upgrade` when the tool receipt references the same index ([#&#8203;21275](https://github.com/astral-sh/uv/pull/21275)) - Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch ([#&#8203;21224](https://github.com/astral-sh/uv/pull/21224)) - Prevent TLS segfaults in riscv64 musl release binaries ([#&#8203;21158](https://github.com/astral-sh/uv/pull/21158)) - Preserve dependencies selected by recursive extras when markers mix production and extra conditions ([#&#8203;21181](https://github.com/astral-sh/uv/pull/21181)) - Preserve version constraints from transitively referenced recursive extras ([#&#8203;21209](https://github.com/astral-sh/uv/pull/21209)) - Resolve repository-relative Git archive dependencies inside the checkout during the initial `uv sync` ([#&#8203;21264](https://github.com/astral-sh/uv/pull/21264)) - Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header ([#&#8203;21282](https://github.com/astral-sh/uv/pull/21282)) - Do not misclassify package URLs ending in `.py` as local script paths ([#&#8203;21144](https://github.com/astral-sh/uv/pull/21144)) - Use directory creation times consistently across libc implementations for directory `cache-keys` entries ([#&#8203;21137](https://github.com/astral-sh/uv/pull/21137)) - Promote human-readable sizes to the next unit at rounding boundaries ([#&#8203;21136](https://github.com/astral-sh/uv/pull/21136)) ##### Other changes - Add Python 3.15 release-candidate Docker images ([#&#8203;21293](https://github.com/astral-sh/uv/pull/21293)) - Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 ([#&#8203;21258](https://github.com/astral-sh/uv/pull/21258)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41LjMiLCJ1cGRhdGVkSW5WZXIiOiI0NC41LjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
renovate force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 5d2049ab75 to 7ad1c83d1e 2026-08-28 14:01:25 +01:00 Compare
renovate changed title from chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.6 to chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.7 2026-08-28 14:01:26 +01:00
renovate changed title from chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.7 to chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.8 2026-09-01 14:01:25 +01:00
renovate force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 7ad1c83d1e to f40a02c668 2026-09-01 14:01:26 +01:00 Compare
Hermes merged commit f40a02c668 into main 2026-09-02 00:39:54 +01:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
cpressland/chd-to-iso!8
No description provided.