Skip to content

chore(deps): bump the docker group across 2 directories with 1 update - #43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/template/dot-devcontainer/docker-e8f40623c7
Closed

chore(deps): bump the docker group across 2 directories with 1 update#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/template/dot-devcontainer/docker-e8f40623c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker group with 1 update in the /template/.devcontainer directory: astral-sh/uv.
Bumps the docker group with 1 update in the /template/docker directory: astral-sh/uv.

Updates astral-sh/uv from 0.12.10 to 0.12.11

Release notes

Sourced from astral-sh/uv's releases.

0.12.11

Release Notes

Released on 2026-09-08.

Preview features

  • Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
  • Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

  • Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
  • Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
  • Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
  • Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
  • Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

  • Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
  • Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
  • Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
  • Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
  • Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
  • Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
  • Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

  • Restore TOML syntax highlighting for exclude-newer examples (#21534)

Install uv 0.12.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.ps1 | iex"

Download uv 0.12.11

File Platform Checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.11

Released on 2026-09-08.

Preview features

  • Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
  • Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

  • Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
  • Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
  • Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
  • Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
  • Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

  • Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
  • Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
  • Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
  • Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
  • Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
  • Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
  • Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

  • Restore TOML syntax highlighting for exclude-newer examples (#21534)
Commits
  • 4b53f66 Bump version to 0.12.11 (#21545)
  • cc85fa2 Borrow hash strategies in lock setup and the resolver provider (#21541)
  • eead89b Verify hashes for local versions matching public pins (#21544)
  • 1a5e92c Apply flat index policies in each resolver (#21540)
  • 681f4bd Verify hashes on arbitrary-equality pins (#21543)
  • 16faab2 Verify locked source archives before building metadata (#21223)
  • 65bca05 Warn when pylock artifact hash tables are empty (#21462)
  • 8707eb2 Finalize publishing sessions with an explicit outcome (#21441)
  • d69b892 Move publishing uploads and index checks into a session (#21440)
  • 2c8ad21 Prepare publishing metadata and attestations before upload (#21439)
  • Additional commits viewable in compare view

Updates astral-sh/uv from 0.12.10 to 0.12.11

Release notes

Sourced from astral-sh/uv's releases.

0.12.11

Release Notes

Released on 2026-09-08.

Preview features

  • Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
  • Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

  • Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
  • Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
  • Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
  • Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
  • Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

  • Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
  • Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
  • Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
  • Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
  • Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
  • Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
  • Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

  • Restore TOML syntax highlighting for exclude-newer examples (#21534)

Install uv 0.12.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.ps1 | iex"

Download uv 0.12.11

File Platform Checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.11

Released on 2026-09-08.

Preview features

  • Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
  • Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

  • Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
  • Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
  • Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
  • Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
  • Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

  • Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
  • Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
  • Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
  • Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
  • Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
  • Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
  • Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

  • Restore TOML syntax highlighting for exclude-newer examples (#21534)
Commits
  • 4b53f66 Bump version to 0.12.11 (#21545)
  • cc85fa2 Borrow hash strategies in lock setup and the resolver provider (#21541)
  • eead89b Verify hashes for local versions matching public pins (#21544)
  • 1a5e92c Apply flat index policies in each resolver (#21540)
  • 681f4bd Verify hashes on arbitrary-equality pins (#21543)
  • 16faab2 Verify locked source archives before building metadata (#21223)
  • 65bca05 Warn when pylock artifact hash tables are empty (#21462)
  • 8707eb2 Finalize publishing sessions with an explicit outcome (#21441)
  • d69b892 Move publishing uploads and index checks into a session (#21440)
  • 2c8ad21 Prepare publishing metadata and attestations before upload (#21439)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the docker group across 2 directories with 1 update
bb50694 
Bumps the docker group with 1 update in the /template/.devcontainer directory: [astral-sh/uv](https://github.com/astral-sh/uv).
Bumps the docker group with 1 update in the /template/docker directory: [astral-sh/uv](https://github.com/astral-sh/uv).


Updates `astral-sh/uv` from 0.12.10 to 0.12.11
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.10...0.12.11)

Updates `astral-sh/uv` from 0.12.10 to 0.12.11
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.10...0.12.11)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
- dependency-name: astral-sh/uv
  dependency-version: 0.12.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Sep 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Author

Superseded by #46.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/docker/template/dot-devcontainer/docker-e8f40623c7 branch September 15, 2026 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mjun0812