Skip to content

chore(deps): update dependency uv to ~=0.12.13 - #205

Merged
renovate[bot] merged 1 commit into
mainfrom
dependency/all-patch-updates
Sep 14, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
dependency/all-patch-updates

Conversation

@renovate

@renovate renovate Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
uv (source, changelog) ~=0.12.11~=0.12.13 age confidence

Release Notes

astral-sh/uv (uv)

v0.12.13

Compare Source

Released on 2026-09-10.

Python
Enhancements
  • Verify hashes when downloading PEP 658 metadata sidecars (#​21563)
Preview features
  • Respect ty exclusions when uv check automatically selects members of a virtual workspace (#​21555)
Performance
  • Avoid full wheel downloads during resolution by reusing supported hashes from direct URL fragments when metadata is available separately (#​21279)
Bug fixes
  • Edit Windows entry-point launcher resources in memory to support Nano Server and reduce antivirus contention (#​18713)
  • Prefer core-metadata over legacy aliases in JSON index responses (#​21563)

v0.12.12

Compare Source

Released on 2026-09-09.

The executables in our macOS and Windows release archives and uv and uv_build wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Bug fixes
  • Exclude distributions uploaded after the exclude-newer cutoff from lockfiles and generated requirement hashes (#​21539)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "after 1am every weekday,before 6am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the Kind/Dependency Issue or pull request related to dependency label Sep 14, 2026
@renovate
renovate Bot enabled auto-merge (squash) September 14, 2026 01:01
@renovate
renovate Bot merged commit 9659b0f into main Sep 14, 2026
2 checks passed
@renovate
renovate Bot deleted the dependency/all-patch-updates branch September 14, 2026 01:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Kind/Dependency Issue or pull request related to dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants