cpressland/holly_willoughbot

Watch

Fork 0

chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.26 #59

Merged

cpressland merged 1 commit from renovate/ghcr.io-astral-sh-uv-0.x into master

2026-07-07 13:56:16 +01:00

renovate commented

2026-06-19 19:49:03 +01:00

Contributor

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	stage	patch	`0.11.21` → `0.11.26`

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

`v0.11.26`

Compare Source

Released on 2026-06-30.

Performance

Adapt uv to IDs-only PubGrub dependencies (#20048)
Avoid allocations in ForkMap::contains (#20023)
Reuse resolver work across PubGrub iterations (#20020)
Speed up candidate selection for disjoint ranges (#20026)

Bug fixes

Warn when the build cache is inside the source directory (#20056)

This release updates our tar library, astral-tokio-tar, to v0.6.3, which includes over 20 changes that harden our tar handling against parser differentials. uv may reject source distributions with malformed or ambiguous content that were previously accepted.

See the upstream commits for a full list of changes.

Enhancements

Add a full "lockfile" to tool receipts (#18937)
Allow scoped overrides to add dependencies (#19974)
Avoid writing redundant lockfile markers with tool.uv.environments (#19933)
Factor supported environments out of lockfile markers (#19969)
Recommend our own build backend in the build frontend (#19994)
Reject wheels with multiple .dist-info directories (#19986)
Simplify dependency markers under parent reachability (#19971)
Support scoped dependency exclusions (#19977)
Support scoped dependency overrides (#19970)
Explain why files are skipped in registry index parsing (#19983)

Preview features

Add uv workspace list --scripts (#20009)
Support centralised environments in uv venv (#19912)
Use locked ty versions in uv check (#19884)
Add centralized storage of project environments (#18214)
Verify lockfile hashes before reusing a cached ty in uv check (#19995)
Use locked dependency selection for uv check --script (#19989)

Bug fixes

Preserve standalone markers in workspace metadata (#20011)
Reject uv build if the cache dir is enclosed (#19991)

`v0.11.24`

Compare Source

Released on 2026-06-23.

Python

Add CPython 3.15.0b3 (#19964)

Preview features

Make project environments relocatable under preview (#19965)

Performance

Use a compact index for lazy version maps (#19959)

Bug fixes

Allow disabling exclude-newer (#19934)
Avoid archive id collisions (#19949)
Reapply "Fix transparent Python upgrades in project environments" (#19928)
Clean up partial tool entrypoint installs (#19966)
Fix relocatable activate.fish and broaden Fish version support (#19856)

`v0.11.23`

Compare Source

Released on 2026-06-19.

Bug fixes

Revert "Fix transparent Python upgrades in project environments" to mitigate unintended breakage in pre-commit-uv (#19925)
Restore old behavior where workspace members "hidden" by an intermediate pyproject.toml would be treated as standalone projects (#19926)

`v0.11.22`

Compare Source

Released on 2026-06-18.

Enhancements

Publish wheels before sdists in uv publish (#19831)
Add TY and RUFF env vars for providing paths for binaries used by uv format and uv check (#19821)

Preview features

Allow configuring preview features in uv.toml and pyproject.toml (#18437)
Update the lockfile during uv check --no-sync (#19909)
Add --script to uv check and uv metadata (#19860)
Report workspace-exclusive dependency groups in workspace metadata (#19862)
Support SARIF as a uv audit output (#19872)

Performance

Use a more deadlock-resistant concurrent hashmap in the resolver (#19532)

Bug fixes

Update string marker ordering semantics to match upstream clarified rules (#19808)
Reject extras that have the same normalized name (#19871)
Reject dependency group include-group entries that have additional fields (#19866)
Reject invalid UTF-8 URL credentials (#19814)
Validate that PEP 517 backend-paths exist when building sdists (#19834)
Validate that pylock.toml files do not have an unsupported a lock-version (#19869)
Validate that the environment satisfies the packages.requires-python of a pylock.toml (#19868)
Allow uv to be recursively invoked by PEP 517 build hooks (#19879)
Allow empty credentials.toml files (#19815)
Fix transparent Python upgrades in project environments (#19890)
Handle non-file editable URLs in uv pip list (#19867)
Fix incorrect output from uv tree --invert (#19910)
Fix environment locking of uv venv in a project (#19837)
Fix handling of workspace-exclusive dependency groups in uv tree (#19905)

Documentation

Archive the 0.10.x changelog (#19813)

Other changes

Mark more tests as requiring network for vendors that need to run tests offline (#19819)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | stage | patch | `0.11.21` → `0.11.26` | --- ### Release Notes <details> <summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary> ### [`v0.11.26`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01126) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.25...0.11.26) Released on 2026-06-30. ##### Performance - Adapt uv to IDs-only PubGrub dependencies ([#20048](https://github.com/astral-sh/uv/pull/20048)) - Avoid allocations in `ForkMap::contains` ([#20023](https://github.com/astral-sh/uv/pull/20023)) - Reuse resolver work across PubGrub iterations ([#20020](https://github.com/astral-sh/uv/pull/20020)) - Speed up candidate selection for disjoint ranges ([#20026](https://github.com/astral-sh/uv/pull/20026)) ##### Bug fixes - Warn when the build cache is inside the source directory ([#20056](https://github.com/astral-sh/uv/pull/20056)) ### [`v0.11.25`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01125) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.24...0.11.25) Released on 2026-06-26. ##### Security This release updates our tar library, [astral-tokio-tar](https://github.com/astral-sh/tokio-tar), to v0.6.3, which includes over 20 changes that harden our tar handling against [parser differentials](https://www.brainonfire.net/blog/2022/04/11/what-is-parser-mismatch/). uv may reject source distributions with malformed or ambiguous content that were previously accepted. See the [upstream commits](https://github.com/astral-sh/tokio-tar/compare/v0.6.2...v0.6.3) for a full list of changes. ##### Enhancements - Add a full "lockfile" to tool receipts ([#18937](https://github.com/astral-sh/uv/pull/18937)) - Allow scoped overrides to add dependencies ([#19974](https://github.com/astral-sh/uv/pull/19974)) - Avoid writing redundant lockfile markers with `tool.uv.environments` ([#19933](https://github.com/astral-sh/uv/pull/19933)) - Factor supported environments out of lockfile markers ([#19969](https://github.com/astral-sh/uv/pull/19969)) - Recommend our own build backend in the build frontend ([#19994](https://github.com/astral-sh/uv/pull/19994)) - Reject wheels with multiple .dist-info directories ([#19986](https://github.com/astral-sh/uv/pull/19986)) - Simplify dependency markers under parent reachability ([#19971](https://github.com/astral-sh/uv/pull/19971)) - Support scoped dependency exclusions ([#19977](https://github.com/astral-sh/uv/pull/19977)) - Support scoped dependency overrides ([#19970](https://github.com/astral-sh/uv/pull/19970)) - Explain why files are skipped in registry index parsing ([#19983](https://github.com/astral-sh/uv/pull/19983)) ##### Preview features - Add `uv workspace list --scripts` ([#20009](https://github.com/astral-sh/uv/pull/20009)) - Support centralised environments in `uv venv` ([#19912](https://github.com/astral-sh/uv/pull/19912)) - Use locked ty versions in `uv check` ([#19884](https://github.com/astral-sh/uv/pull/19884)) - Add centralized storage of project environments ([#18214](https://github.com/astral-sh/uv/pull/18214)) - Verify lockfile hashes before reusing a cached ty in `uv check` ([#19995](https://github.com/astral-sh/uv/pull/19995)) - Use locked dependency selection for `uv check --script` ([#19989](https://github.com/astral-sh/uv/pull/19989)) ##### Bug fixes - Preserve standalone markers in workspace metadata ([#20011](https://github.com/astral-sh/uv/pull/20011)) - Reject `uv build` if the cache dir is enclosed ([#19991](https://github.com/astral-sh/uv/pull/19991)) ### [`v0.11.24`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01124) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.23...0.11.24) Released on 2026-06-23. ##### Python - Add CPython 3.15.0b3 ([#19964](https://github.com/astral-sh/uv/pull/19964)) ##### Preview features - Make project environments relocatable under preview ([#19965](https://github.com/astral-sh/uv/pull/19965)) ##### Performance - Use a compact index for lazy version maps ([#19959](https://github.com/astral-sh/uv/pull/19959)) ##### Bug fixes - Allow disabling `exclude-newer` ([#19934](https://github.com/astral-sh/uv/pull/19934)) - Avoid archive id collisions ([#19949](https://github.com/astral-sh/uv/pull/19949)) - Reapply "Fix transparent Python upgrades in project environments" ([#19928](https://github.com/astral-sh/uv/pull/19928)) - Clean up partial tool entrypoint installs ([#19966](https://github.com/astral-sh/uv/pull/19966)) - Fix relocatable `activate.fish` and broaden Fish version support ([#19856](https://github.com/astral-sh/uv/pull/19856)) ### [`v0.11.23`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01123) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.22...0.11.23) Released on 2026-06-19. ##### Bug fixes - Revert "Fix transparent Python upgrades in project environments" to mitigate unintended breakage in `pre-commit-uv` ([#19925](https://github.com/astral-sh/uv/pull/19925)) - Restore old behavior where workspace members "hidden" by an intermediate `pyproject.toml` would be treated as standalone projects ([#19926](https://github.com/astral-sh/uv/pull/19926)) ### [`v0.11.22`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01122) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.21...0.11.22) Released on 2026-06-18. ##### Enhancements - Publish wheels before sdists in `uv publish` ([#19831](https://github.com/astral-sh/uv/pull/19831)) - Add `TY` and `RUFF` env vars for providing paths for binaries used by `uv format` and `uv check` ([#19821](https://github.com/astral-sh/uv/pull/19821)) ##### Preview features - Allow configuring preview features in `uv.toml` and `pyproject.toml` ([#18437](https://github.com/astral-sh/uv/pull/18437)) - Update the lockfile during `uv check --no-sync` ([#19909](https://github.com/astral-sh/uv/pull/19909)) - Add `--script` to `uv check` and `uv metadata` ([#19860](https://github.com/astral-sh/uv/pull/19860)) - Report workspace-exclusive dependency groups in `workspace metadata` ([#19862](https://github.com/astral-sh/uv/pull/19862)) - Support SARIF as a `uv audit` output ([#19872](https://github.com/astral-sh/uv/pull/19872)) ##### Performance - Use a more deadlock-resistant concurrent hashmap in the resolver ([#19532](https://github.com/astral-sh/uv/pull/19532)) ##### Bug fixes - Update string marker ordering semantics to match [upstream clarified rules](https://github.com/pypa/packaging.python.org/pull/1988) ([#19808](https://github.com/astral-sh/uv/pull/19808)) - Reject extras that have the same normalized name ([#19871](https://github.com/astral-sh/uv/pull/19871)) - Reject dependency group `include-group` entries that have additional fields ([#19866](https://github.com/astral-sh/uv/pull/19866)) - Reject invalid UTF-8 URL credentials ([#19814](https://github.com/astral-sh/uv/pull/19814)) - Validate that PEP 517 `backend-path`s exist when building sdists ([#19834](https://github.com/astral-sh/uv/pull/19834)) - Validate that `pylock.toml` files do not have an unsupported a `lock-version` ([#19869](https://github.com/astral-sh/uv/pull/19869)) - Validate that the environment satisfies the `packages.requires-python` of a `pylock.toml` ([#19868](https://github.com/astral-sh/uv/pull/19868)) - Allow `uv` to be recursively invoked by PEP 517 build hooks ([#19879](https://github.com/astral-sh/uv/pull/19879)) - Allow empty `credentials.toml` files ([#19815](https://github.com/astral-sh/uv/pull/19815)) - Fix transparent Python upgrades in project environments ([#19890](https://github.com/astral-sh/uv/pull/19890)) - Handle non-file editable URLs in `uv pip list` ([#19867](https://github.com/astral-sh/uv/pull/19867)) - Fix incorrect output from `uv tree --invert` ([#19910](https://github.com/astral-sh/uv/pull/19910)) - Fix environment locking of `uv venv` in a project ([#19837](https://github.com/astral-sh/uv/pull/19837)) - Fix handling of workspace-exclusive dependency groups in `uv tree` ([#19905](https://github.com/astral-sh/uv/pull/19905)) ##### Documentation - Archive the 0.10.x changelog ([#19813](https://github.com/astral-sh/uv/pull/19813)) ##### Other changes - Mark more tests as requiring network for vendors that need to run tests offline ([#19819](https://github.com/astral-sh/uv/pull/19819)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 5523f5e2f0 to 3c307c6267

2026-06-24 19:48:58 +01:00

Compare

renovate changed title from ~~chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.23~~ to chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.24

2026-06-24 19:49:01 +01:00

renovate force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 3c307c6267 to 25a14f131d

2026-06-27 19:48:42 +01:00

Compare

renovate changed title from ~~chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.24~~ to chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.25

2026-06-27 19:48:45 +01:00

renovate force-pushed renovate/ghcr.io-astral-sh-uv-0.x from 25a14f131d to 5bd4a9bf9f

2026-06-30 19:48:44 +01:00

Compare

renovate changed title from ~~chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.25~~ to chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.26

2026-06-30 19:48:47 +01:00