Skip to content

chore(deps): bump astral-sh/uv from 0.12.13 to 0.12.19 - #115

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/astral-sh/uv-0.12.19
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/astral-sh/uv-0.12.19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.12.13 to 0.12.19.

Release notes

Sourced from astral-sh/uv's releases.

0.12.19

Release Notes

Released on 2026-09-24.

Python

  • Add PyPy 3.11.16 and 3.12.14 (#21847)
  • Update GraalPy 3.13.0 to build 25.4.4 (#21847)

Enhancements

  • Format upload URLs with backticks in uv publish errors (#21934)

Preview features

  • Run build-backend hooks with lazy imports on CPython 3.15 and later using the build-lazy-imports preview feature (#21967)
  • Omit unused resolution settings from uv.lock and ignore changes to them when checking lockfile freshness with the resolution-inputs preview feature (#21913)

Bug fixes

  • Preserve signed and encoded query parameters in direct-URL metadata to avoid reinstalling unchanged packages (#21971)
  • Recognize 1.0.0 as satisfying ===1 during installed-package checks, matching resolution (#21931)
  • Avoid collisions between Git checkout readiness markers and .ok files in dependencies (#21891)
  • Preserve always-false python_version markers when parsing their serialized form (#21939)

Rust API

  • Restore the public FlatDistributions export and its BTreeMap conversion for downstream resolvers (#21965)

Documentation

  • Make individual preview-feature reference entries linkable by name (#21950)

Install uv 0.12.19

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.19/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.19/uv-installer.ps1 | iex"

Download uv 0.12.19

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.19

Released on 2026-09-24.

Python

  • Add PyPy 3.11.16 and 3.12.14 (#21847)
  • Update GraalPy 3.13.0 to build 25.4.4 (#21847)

Enhancements

  • Format upload URLs with backticks in uv publish errors (#21934)

Preview features

  • Run build-backend hooks with lazy imports on CPython 3.15 and later using the build-lazy-imports preview feature (#21967)
  • Omit unused resolution settings from uv.lock and ignore changes to them when checking lockfile freshness with the resolution-inputs preview feature (#21913)

Bug fixes

  • Preserve signed and encoded query parameters in direct-URL metadata to avoid reinstalling unchanged packages (#21971)
  • Recognize 1.0.0 as satisfying ===1 during installed-package checks, matching resolution (#21931)
  • Avoid collisions between Git checkout readiness markers and .ok files in dependencies (#21891)
  • Preserve always-false python_version markers when parsing their serialized form (#21939)

Rust API

  • Restore the public FlatDistributions export and its BTreeMap conversion for downstream resolvers (#21965)

Documentation

  • Make individual preview-feature reference entries linkable by name (#21950)

0.12.18

Released on 2026-09-22.

This release addresses GHSA-2cv4-cqwr-gwf7, which is a path traversal weakness during wheel installation on Windows. No other platforms are affected by this advisory.

Enhancements

  • Add --output-format json to uv pip install and uv pip sync, including for --dry-run and --check (#21893)
  • Add --check to uv pip install and uv pip sync to report planned changes without modifying the environment (#21844)
  • Identify failures from get_requires_for_build_* hooks correctly in build errors (#21881)

Preview features

  • Validate build requirements for uv build --no-build-isolation with --preview-features build-dependency-check; use --skip-dependency-check to opt out (#21880)

Performance

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.12.13 to 0.12.19.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.13...0.12.19)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Sep 25, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'TiTiler-STACapi Benchmarks'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.30.

Benchmark suite Current: 32f33b2 Previous: 5ea62da Ratio
Mosaic-Z0 4.596718673194199 iter/sec (stddev: 0.018102220722947853) 6.539260159693152 iter/sec (stddev: 0.014109369338713854) 1.42
Mosaic-Z1 10.507452037342924 iter/sec (stddev: 0.0038839173006106503) 15.91441217250839 iter/sec (stddev: 0.0023511819108237523) 1.51
Mosaic-Z2 13.817314127032175 iter/sec (stddev: 0.012866821601984841) 20.969194912468605 iter/sec (stddev: 0.005818635120275217) 1.52
Mosaic-Z3 22.901144702179778 iter/sec (stddev: 0.007982346149944326) 34.02654426184371 iter/sec (stddev: 0.0025339632729540844) 1.49
Mosaic-Z4 31.424782258255963 iter/sec (stddev: 0.006647573162941307) 48.743517007788725 iter/sec (stddev: 0.0014458933350173354) 1.55
Mosaic-Z5 30.253044613946802 iter/sec (stddev: 0.0008694857803101776) 42.790022241128334 iter/sec (stddev: 0.0055755104918630985) 1.41
Mosaic-Z6 30.392434506579633 iter/sec (stddev: 0.0009986870381740306) 43.885580930747096 iter/sec (stddev: 0.002205615378573066) 1.44
Search-Z0 38.585749197001505 iter/sec (stddev: 0.0010807945262002396) 62.5383428805058 iter/sec (stddev: 0.002682789763150529) 1.62
Search-Z1 70.2559441609712 iter/sec (stddev: 0.0011782019180031902) 113.01101461855583 iter/sec (stddev: 0.003005118499740969) 1.61
Search-Z2 75.28360587408207 iter/sec (stddev: 0.0006266907272966302) 119.0053536028957 iter/sec (stddev: 0.0028799231443858236) 1.58
Search-Z3 86.77660502196822 iter/sec (stddev: 0.0007426751081937829) 131.27840907894438 iter/sec (stddev: 0.0017247767359952369) 1.51
Search-Z4 88.27971132739437 iter/sec (stddev: 0.0006146867812689387) 133.66887575323622 iter/sec (stddev: 0.002917991507651455) 1.51
Search-Z5 86.1017099347744 iter/sec (stddev: 0.0009114597167749622) 136.72950221871483 iter/sec (stddev: 0.0018814463975996567) 1.59
Search-Z6 83.37225623323366 iter/sec (stddev: 0.005512284039009225) 139.40902560385646 iter/sec (stddev: 0.0017310997667798133) 1.67

This comment was automatically generated by workflow using github-action-benchmark.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants