chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.29 #57

Merged
mehalter merged 1 commit from renovate/ghcr.io-astral-sh-uv-0.x into main 2026-07-18 08:48:53 -04:00
Collaborator

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv patch 0.11.280.11.29
ghcr.io/astral-sh/uv stage patch 0.11.28-python3.14-trixie0.11.29-python3.14-trixie

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.11.29

Compare Source

Released on 2026-07-15.

Python
  • Use gzip-compressed artifacts for PyPy downloads (#​20265)
Enhancements
  • Add JSON output to uv tree (#​19978)
  • Add CUDA 13.2 as a supported PyTorch backend (#​20267)
  • Prefer local artifacts over URLs when installing from pylock.toml (#​20393)
  • Clarify diagnostics for unsatisfiable direct requirement ranges (#​20227)
  • Include the selected project name in missing-extra errors (#​20358)
Preview features
  • Preserve extras and dependency-group conflict context when selecting locked project tools (#​20078)
  • Split OSV audit queries that exceed the service's 1,000-package limit (#​20398)
  • Apply OSV fixed-version information only to the matching package and ecosystem (#​20399)
  • Skip the virtualenv distutils monkeypatch on Python 3.10 and later (#​20222)
  • Report invalid uv audit --service-url values instead of panicking (#​20374)
  • Include preview settings in the published SchemaStore schema (#​20304)
Performance
  • Reduce resolver work by widening selected versions across ranges without other known candidates (#​20115)
  • Defer client and build setup for no-op uv sync operations (#​20364)
  • Reuse workspace discovery during frozen syncs (#​20363)
  • Reuse workspace discovery after resolving settings (#​20356)
  • Reuse workspace discovery in uv tree, uv export, uv format, and uv audit (#​20359)
  • Avoid cache and interpreter setup when reading a project version (#​20360)
Bug fixes
  • Reject duplicate active package entries in pylock.toml (#​20391)
  • Preserve direct-archive hashes in uv pip freeze output (#​20395)
  • Explain conflicting root requirements instead of displaying an empty version range (#​20228)
  • Prevent build-backend data paths from escaping the project or bypassing wheel exclusions (#​20397)
  • Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks (#​20387)
  • Redact credentials from failed Git fetch commands (#​20401)
  • Fix exclusive post-release range ordering to match PEP 440 (#​20268)
  • Canonicalize equivalent PEP 440 ranges during dependency resolution (#​20182)
  • Honor Python version pins when initializing scripts (#​20404)
  • Respect package-scoped source filtering for scripts (#​20389)
  • Report existing environment incompatibilities when uv pip install --strict has nothing to install (#​20388)
  • Continue scanning platlib when purelib is missing (#​20405)
  • Handle versionless .egg-info files as legacy package metadata (#​20403)
  • Make repeated locking idempotent for impossible cross-variable platform markers (#​20369)
  • Report invalid cloud credential endpoint URLs instead of panicking (#​20372)
  • Report invalid pylock.toml artifact URLs instead of panicking (#​20373)
  • Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts (#​20375)
  • Return an unsupported-operation error from unimplemented build-backend requirement hooks (#​20376)
Documentation
  • Clarify --no-build behavior for editable requirements (#​20234)
  • Document uv's threat model (#​20236)
  • Reduce the number of badges in the README (#​11257)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | | patch | `0.11.28` → `0.11.29` | | [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | stage | patch | `0.11.28-python3.14-trixie` → `0.11.29-python3.14-trixie` | --- ### Release Notes <details> <summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary> ### [`v0.11.29`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01129) [Compare Source](https://github.com/astral-sh/uv/compare/0.11.28...0.11.29) Released on 2026-07-15. ##### Python - Use gzip-compressed artifacts for PyPy downloads ([#&#8203;20265](https://github.com/astral-sh/uv/pull/20265)) ##### Enhancements - Add JSON output to `uv tree` ([#&#8203;19978](https://github.com/astral-sh/uv/pull/19978)) - Add CUDA 13.2 as a supported PyTorch backend ([#&#8203;20267](https://github.com/astral-sh/uv/pull/20267)) - Prefer local artifacts over URLs when installing from `pylock.toml` ([#&#8203;20393](https://github.com/astral-sh/uv/pull/20393)) - Clarify diagnostics for unsatisfiable direct requirement ranges ([#&#8203;20227](https://github.com/astral-sh/uv/pull/20227)) - Include the selected project name in missing-extra errors ([#&#8203;20358](https://github.com/astral-sh/uv/pull/20358)) ##### Preview features - Preserve extras and dependency-group conflict context when selecting locked project tools ([#&#8203;20078](https://github.com/astral-sh/uv/pull/20078)) - Split OSV audit queries that exceed the service's 1,000-package limit ([#&#8203;20398](https://github.com/astral-sh/uv/pull/20398)) - Apply OSV fixed-version information only to the matching package and ecosystem ([#&#8203;20399](https://github.com/astral-sh/uv/pull/20399)) - Skip the virtualenv distutils monkeypatch on Python 3.10 and later ([#&#8203;20222](https://github.com/astral-sh/uv/pull/20222)) - Report invalid `uv audit --service-url` values instead of panicking ([#&#8203;20374](https://github.com/astral-sh/uv/pull/20374)) - Include preview settings in the published SchemaStore schema ([#&#8203;20304](https://github.com/astral-sh/uv/pull/20304)) ##### Performance - Reduce resolver work by widening selected versions across ranges without other known candidates ([#&#8203;20115](https://github.com/astral-sh/uv/pull/20115)) - Defer client and build setup for no-op `uv sync` operations ([#&#8203;20364](https://github.com/astral-sh/uv/pull/20364)) - Reuse workspace discovery during frozen syncs ([#&#8203;20363](https://github.com/astral-sh/uv/pull/20363)) - Reuse workspace discovery after resolving settings ([#&#8203;20356](https://github.com/astral-sh/uv/pull/20356)) - Reuse workspace discovery in `uv tree`, `uv export`, `uv format`, and `uv audit` ([#&#8203;20359](https://github.com/astral-sh/uv/pull/20359)) - Avoid cache and interpreter setup when reading a project version ([#&#8203;20360](https://github.com/astral-sh/uv/pull/20360)) ##### Bug fixes - Reject duplicate active package entries in `pylock.toml` ([#&#8203;20391](https://github.com/astral-sh/uv/pull/20391)) - Preserve direct-archive hashes in `uv pip freeze` output ([#&#8203;20395](https://github.com/astral-sh/uv/pull/20395)) - Explain conflicting root requirements instead of displaying an empty version range ([#&#8203;20228](https://github.com/astral-sh/uv/pull/20228)) - Prevent build-backend data paths from escaping the project or bypassing wheel exclusions ([#&#8203;20397](https://github.com/astral-sh/uv/pull/20397)) - Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks ([#&#8203;20387](https://github.com/astral-sh/uv/pull/20387)) - Redact credentials from failed Git fetch commands ([#&#8203;20401](https://github.com/astral-sh/uv/pull/20401)) - Fix exclusive post-release range ordering to match PEP 440 ([#&#8203;20268](https://github.com/astral-sh/uv/pull/20268)) - Canonicalize equivalent PEP 440 ranges during dependency resolution ([#&#8203;20182](https://github.com/astral-sh/uv/pull/20182)) - Honor Python version pins when initializing scripts ([#&#8203;20404](https://github.com/astral-sh/uv/pull/20404)) - Respect package-scoped source filtering for scripts ([#&#8203;20389](https://github.com/astral-sh/uv/pull/20389)) - Report existing environment incompatibilities when `uv pip install --strict` has nothing to install ([#&#8203;20388](https://github.com/astral-sh/uv/pull/20388)) - Continue scanning `platlib` when `purelib` is missing ([#&#8203;20405](https://github.com/astral-sh/uv/pull/20405)) - Handle versionless `.egg-info` files as legacy package metadata ([#&#8203;20403](https://github.com/astral-sh/uv/pull/20403)) - Make repeated locking idempotent for impossible cross-variable platform markers ([#&#8203;20369](https://github.com/astral-sh/uv/pull/20369)) - Report invalid cloud credential endpoint URLs instead of panicking ([#&#8203;20372](https://github.com/astral-sh/uv/pull/20372)) - Report invalid `pylock.toml` artifact URLs instead of panicking ([#&#8203;20373](https://github.com/astral-sh/uv/pull/20373)) - Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts ([#&#8203;20375](https://github.com/astral-sh/uv/pull/20375)) - Return an unsupported-operation error from unimplemented build-backend requirement hooks ([#&#8203;20376](https://github.com/astral-sh/uv/pull/20376)) ##### Documentation - Clarify `--no-build` behavior for editable requirements ([#&#8203;20234](https://github.com/astral-sh/uv/pull/20234)) - Document uv's threat model ([#&#8203;20236](https://github.com/astral-sh/uv/pull/20236)) - Reduce the number of badges in the README ([#&#8203;11257](https://github.com/astral-sh/uv/pull/11257)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDkuNSIsInVwZGF0ZWRJblZlciI6IjQzLjEwOS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.29
Some checks failed
Build Docker Image / build (pull_request) Successful in 9m8s
Build Docker Image / build (push) Has been cancelled
3577c15327
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mehalter/hermes-agent-docker!57
No description provided.