Skip to content

build(deps): bump the container-bases group across 1 directory with 3 updates - #35

Merged
tarantila merged 1 commit into
mainfrom
dependabot/docker/container-bases-2700392001
Aug 28, 2026
Merged

tarantila merged 1 commit into
mainfrom
dependabot/docker/container-bases-2700392001

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the container-bases group with 3 updates in the / directory: astral-sh/uv, python and nginxinc/nginx-unprivileged.

Updates astral-sh/uv from 0.12.3 to 0.12.5

Release notes

Sourced from astral-sh/uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"

Download uv 0.12.5

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.5

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

  • Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
  • Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
  • Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
  • Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

  • Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
  • Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

  • Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
  • Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

  • Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
  • Allow uv lock to proceed when .venv is an unusable project environment (#21068)
  • Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
  • Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits
  • 210d1f6 Bump version to 0.12.5 (#21140)
  • 802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
  • a6904bb Order equal-priority Python installations by key (#21134)
  • 728a70d Improve automated fixes for related bug manifestations (#21102)
  • b82b038 Include hashes in cyclonedx exports (#21131)
  • 8011778 Simplify editable requirement errors and hints (#21130)
  • dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
  • 3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
  • 7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
  • 298dda4 Fix relative indexes in PEP 723 scripts (#21097)
  • Additional commits viewable in compare view

Updates python from 3.14.6-alpine3.23 to 3.14.7-alpine3.23

Updates nginxinc/nginx-unprivileged from 1.30.4-alpine to 1.31.4-alpine

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Aug 17, 2026
@tarantila

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/docker/container-bases-2700392001 branch 3 times, most recently from 6074ad5 to e91483b Compare August 26, 2026 17:15
@tarantila

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/docker/container-bases-2700392001 branch from e91483b to e9db5b8 Compare August 28, 2026 09:38
… updates

Bumps the container-bases group with 3 updates in the / directory: [astral-sh/uv](https://github.com/astral-sh/uv), python and nginxinc/nginx-unprivileged.


Updates `astral-sh/uv` from 0.12.3 to 0.12.5
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.3...0.12.5)

Updates `python` from 3.14.6-alpine3.23 to 3.14.7-alpine3.23

Updates `nginxinc/nginx-unprivileged` from 1.30.4-alpine to 1.31.4-alpine

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: container-bases
- dependency-name: nginxinc/nginx-unprivileged
  dependency-version: 1.31.3-alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: container-bases
- dependency-name: python
  dependency-version: 3.14.7-alpine3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: container-bases
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/docker/container-bases-2700392001 branch from e9db5b8 to 037a3ce Compare August 28, 2026 13:10
@tarantila
tarantila merged commit 5f521f4 into main Aug 28, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/docker/container-bases-2700392001 branch August 28, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant