Skip to content

chore(deps): bump astral-sh/uv from 0.12.13 to 0.12.16 - #113

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/astral-sh/uv-0.12.16
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/astral-sh/uv-0.12.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.12.13 to 0.12.16.

Release notes

Sourced from astral-sh/uv's releases.

0.12.16

Release Notes

Released on 2026-09-17.

Python

  • Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#21741)

Enhancements

  • Verify downloaded wheels and source distributions against hashes supplied by package indexes (#21562)
  • Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#21467)
  • Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#21766)
  • Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#21779)

Preview features

  • Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#21163)
  • Honor configured and command-line index settings, including credentials, in uv upgrade (#21776)
  • Allow uv check to run in projects that are not managed by uv and outside workspaces (#21777)
  • Respect --python and UV_PYTHON when selecting the Python version for uv check (#21744)

Bug fixes

  • Redact Azure shared access signatures from displayed and logged URLs (#21755)
  • Check archive sizes from pylock.toml before reusing cached distributions (#21609)
  • Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths (#20631)
  • Use the bundled uv_build backend only when its version matches active version pins (#21742)
  • Handle malformed index URLs without panicking when credentials are configured (#21784)
  • Report a configuration error instead of panicking for proxy URLs without a host (#21781)
  • Return a credential-redacted error instead of panicking when a URL cannot be converted to a path (#21783)

Install uv 0.12.16

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.16/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.16/uv-installer.ps1 | iex"

Download uv 0.12.16

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.16

Released on 2026-09-17.

Python

  • Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#21741)

Enhancements

  • Verify downloaded wheels and source distributions against hashes supplied by package indexes (#21562)
  • Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#21467)
  • Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#21766)
  • Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#21779)

Preview features

  • Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#21163)
  • Honor configured and command-line index settings, including credentials, in uv upgrade (#21776)
  • Allow uv check to run in projects that are not managed by uv and outside workspaces (#21777)
  • Respect --python and UV_PYTHON when selecting the Python version for uv check (#21744)

Bug fixes

  • Redact Azure shared access signatures from displayed and logged URLs (#21755)
  • Check archive sizes from pylock.toml before reusing cached distributions (#21609)
  • Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths (#20631)
  • Use the bundled uv_build backend only when its version matches active version pins (#21742)
  • Handle malformed index URLs without panicking when credentials are configured (#21784)
  • Report a configuration error instead of panicking for proxy URLs without a host (#21781)
  • Return a credential-redacted error instead of panicking when a URL cannot be converted to a path (#21783)

0.12.15

Released on 2026-09-15.

Performance

  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

  • Fix regressions in 0.12.14 when installing to symlinked destinations or using uv pip install --target . (#21699)

0.12.14

Released on 2026-09-15.

Enhancements

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.12.13 to 0.12.16.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.13...0.12.16)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Sep 18, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'TiTiler-STACapi Benchmarks'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.30.

Benchmark suite Current: f044ba1 Previous: 5ea62da Ratio
Mosaic-Z0 4.630415719871712 iter/sec (stddev: 0.018845491268333275) 6.539260159693152 iter/sec (stddev: 0.014109369338713854) 1.41
Mosaic-Z1 10.51855414333862 iter/sec (stddev: 0.012763554920438921) 15.91441217250839 iter/sec (stddev: 0.0023511819108237523) 1.51
Mosaic-Z2 14.766351212613728 iter/sec (stddev: 0.0015965797107703173) 20.969194912468605 iter/sec (stddev: 0.005818635120275217) 1.42
Mosaic-Z3 23.962758422774222 iter/sec (stddev: 0.000857158623329591) 34.02654426184371 iter/sec (stddev: 0.0025339632729540844) 1.42
Mosaic-Z4 32.32878874111363 iter/sec (stddev: 0.006857342101666285) 48.743517007788725 iter/sec (stddev: 0.0014458933350173354) 1.51
Mosaic-Z5 29.418984984653527 iter/sec (stddev: 0.009734054730407076) 42.790022241128334 iter/sec (stddev: 0.0055755104918630985) 1.45
Mosaic-Z6 31.602752012847386 iter/sec (stddev: 0.0016613495197753893) 43.885580930747096 iter/sec (stddev: 0.002205615378573066) 1.39
Search-Z0 37.92018979263755 iter/sec (stddev: 0.0011598681545632416) 62.5383428805058 iter/sec (stddev: 0.002682789763150529) 1.65
Search-Z1 70.69095858430276 iter/sec (stddev: 0.0010554018049094558) 113.01101461855583 iter/sec (stddev: 0.003005118499740969) 1.60
Search-Z2 83.41160162365254 iter/sec (stddev: 0.004221251087878718) 119.0053536028957 iter/sec (stddev: 0.0028799231443858236) 1.43
Search-Z3 96.06241593084505 iter/sec (stddev: 0.0004135669858833651) 131.27840907894438 iter/sec (stddev: 0.0017247767359952369) 1.37
Search-Z4 101.90676936474007 iter/sec (stddev: 0.00045824956761240037) 133.66887575323622 iter/sec (stddev: 0.002917991507651455) 1.31
Search-Z5 91.74311250115375 iter/sec (stddev: 0.0008738459096444366) 136.72950221871483 iter/sec (stddev: 0.0018814463975996567) 1.49
Search-Z6 96.36033945434511 iter/sec (stddev: 0.0010063511254367907) 139.40902560385646 iter/sec (stddev: 0.0017310997667798133) 1.45

This comment was automatically generated by workflow using github-action-benchmark.

@dependabot @github

dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #115.

@dependabot dependabot Bot closed this Sep 25, 2026
@dependabot
dependabot Bot deleted the dependabot/docker/astral-sh/uv-0.12.16 branch September 25, 2026 03:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants