chore(deps): update dependency astral-sh/uv to v0.12.6

[renovate]

This PR contains the following updates:

Package	Update	Change
astral-sh/uv	patch	0.12.1 → 0.12.6

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.12.6

Compare Source

Released on 2026-08-25.

Python

• Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #​21295)

Enhancements

• Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#​21261)
• Limit warnings about unbounded uv_build requirements to source-distribution builds (#​21078)
• Display byte counts below 1 KiB without a fractional part (#​21237)

Preview features

• Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#​21117)
• Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#​21235)
• Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#​21227)
• Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#​21146)

Performance

• Enable profile-guided optimization for Linux x86-64 release binaries (#​21001)
• Enable profile-guided optimization for Windows x86-64 release binaries (#​21003)
• Enable profile-guided optimization for macOS ARM64 release binaries (#​21002)
• Enable profile-guided optimization for Linux ARM64 release binaries (#​21004)
• Speed up syncing projects with many activated conflict items by reusing their encoded representation (#​21148)

Bug fixes

• Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#​21294)
• Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#​21275)
• Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#​21224)
• Prevent TLS segfaults in riscv64 musl release binaries (#​21158)
• Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#​21181)
• Preserve version constraints from transitively referenced recursive extras (#​21209)
• Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#​21264)
• Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#​21282)
• Do not misclassify package URLs ending in .py as local script paths (#​21144)
• Use directory creation times consistently across libc implementations for directory cache-keys entries (#​21137)
• Promote human-readable sizes to the next unit at rounding boundaries (#​21136)

Other changes

• Add Python 3.15 release-candidate Docker images (#​21293)
• Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#​21258)

v0.12.5

Compare Source

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#​21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#​21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#​21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#​17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#​21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#​21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#​21097)

v0.12.4

Compare Source

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#​21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#​21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#​20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#​21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#​21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#​21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#​20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#​21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#​19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#​21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#​21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#​21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#​21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#​21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#​21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#​21076)

v0.12.3

Compare Source

Released on 2026-08-07.

Python

• Add CPython 3.13.15 (#​20997)

Preview features

• Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#​20992)
• Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#​20991)
• Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#​20990)

Performance

• Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#​20989)
• Reuse compiled workspace exclusion patterns during workspace discovery (#​20988)
• Speed up conflict-heavy resolutions by avoiding materialized range complements (#​20982)
• Avoid slow procfs reads during Python interpreter discovery on Linux (#​20987)

Documentation

• Add PEP 740 attestations to the GitHub Actions publishing example (#​20986)
• Restrict the GitHub Actions publishing example to Python version tags (#​20973)
• Correct --python-pin to --pin-python in the uv init --bare example (#​20876)

v0.12.2

Compare Source

Released on 2026-08-05.

Python

• Add CPython 3.15.0rc1 (#​20948)
• Add CPython 3.14.7 (#​20971)

Enhancements

• Ensure diagnostic hints end with a newline to prevent malformed terminal output (#​20959)

Preview features

• Audit one or all installed tools with uv tool audit (#​20921)
• Report physically reclaimed disk space during cache cleanup with the cache-physical-space preview feature (#​20925)

Configuration

• Add UV_RUN_RLIMIT_NOFILE to set the open-file limit for commands launched by uv run (#​20926)

Performance

• Speed up uv.lock parsing for wheel entries (#​20881)
• Speed up uv.lock parsing for source distribution entries (#​20882)
• Speed up filename extraction from distribution URLs (#​20879)
• Reduce filesystem metadata lookups during bytecode compilation (#​20928)
• Reuse file metadata when building source distributions (#​20927)

Bug fixes

• Preserve compatibility with older uv versions when recording artifact sizes in cached wheels and source distributions (#​20963)
• Avoid including workspace-root default dependency groups when syncing or exporting a selected workspace member unless explicitly requested (#​20930)

Documentation

• Separate build and publish jobs in the GitHub Actions publishing guide (#​20946)
• Ensure the GitHub Actions publishing example waits for the build job to finish (#​20957)
• Correct typos in the Docker integration guide (#​20970)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 5am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.