Update dependency astral-sh/uv to v0.9.28 (#23018)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
patch | `0.9.26` → `0.9.28` |
---
### Release Notes
<details>
<summary>astral-sh/uv (astral-sh/uv)</summary>
###
[`v0.9.28`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0928)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.27...0.9.28)
Released on 2026-01-29.
##### Python
- Update CPython to use [OpenSSL
3.5.5](https://redirect.github.com/openssl/openssl/releases/tag/openssl-3.5.5)
which includes fixes for high severity CVEs
([python-build-standalone#960](https://redirect.github.com/astral-sh/python-build-standalone/pull/960))
##### Enhancements
- Add support for Pyodide interpreter on Windows
([#​17658](https://redirect.github.com/astral-sh/uv/pull/17658))
- Warn if multiple indexes include `default = true`
([#​17713](https://redirect.github.com/astral-sh/uv/pull/17713))
- Skip uploads when validation reports 'Already uploaded'
([#​17412](https://redirect.github.com/astral-sh/uv/pull/17412))
##### Configuration
- Add a reflink alias for the "clone" link mode
([#​17724](https://redirect.github.com/astral-sh/uv/pull/17724))
##### Bug fixes
- Ensure `uv.exe` exits when `uvw.exe` or `uvx.exe` is killed
([#​17500](https://redirect.github.com/astral-sh/uv/pull/17500))
###
[`v0.9.27`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0927)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.26...0.9.27)
Released on 2026-01-26.
##### Python
- Upgrade Pyodide to 0.29.2
([#​17652](https://redirect.github.com/astral-sh/uv/pull/17652))
- Upgrade to GraalPy 25.0.2
([#​17634](https://redirect.github.com/astral-sh/uv/pull/17634))
##### Enhancements
- Add `-t` shortform for `--target` to `uv pip` subcommands
([#​17501](https://redirect.github.com/astral-sh/uv/pull/17501))
- Add support for ROCm 7.0 and 7.1 accelerator backends
([#​17681](https://redirect.github.com/astral-sh/uv/pull/17681))
- Further improve free-threading ABI incompatibility errors
([#​17491](https://redirect.github.com/astral-sh/uv/pull/17491))
- Implement `uv pip freeze --exclude` flag
([#​17045](https://redirect.github.com/astral-sh/uv/pull/17045))
- Improve warnings for `--system` and `--no-system` in `uv venv`
([#​17647](https://redirect.github.com/astral-sh/uv/pull/17647))
- Make `uv pip compile` attempt to download a specified
`--python-version` if it can.
([#​17249](https://redirect.github.com/astral-sh/uv/pull/17249))
- Support Trusted Publishing with pyx
([#​17438](https://redirect.github.com/astral-sh/uv/pull/17438))
- Fix JSON schema for `exclude-newer-package`
([#​17665](https://redirect.github.com/astral-sh/uv/pull/17665))
##### Preview features
- Better detection for conflicting packages
([#​17623](https://redirect.github.com/astral-sh/uv/pull/17623))
- Upgrade based on outdated build versions in `uv python upgrade`
([#​17653](https://redirect.github.com/astral-sh/uv/pull/17653))
##### Bug fixes
- Change chocolatey system test to ensure uv uses the right python
([#​17533](https://redirect.github.com/astral-sh/uv/pull/17533))
- Fix infinite loop when `SSL_CERT_FILE` is a directory
([#​17503](https://redirect.github.com/astral-sh/uv/pull/17503))
##### Documentation
- Add cargo-xwin to the CONTRIBUTING guide
([#​17507](https://redirect.github.com/astral-sh/uv/pull/17507))
- Fix typo in the documentation of UV\_PUBLISH\_INDEX
([#​17672](https://redirect.github.com/astral-sh/uv/pull/17672))
- Move MSRV to platform support section
([#​17534](https://redirect.github.com/astral-sh/uv/pull/17534))
- Update the testing instructions in the CONTRIBUTING guide
([#​17528](https://redirect.github.com/astral-sh/uv/pull/17528))
- Use `--locked` to install `cargo-xwin` in guide
([#​17530](https://redirect.github.com/astral-sh/uv/pull/17530))
- Warn about PyPy being unmaintained
([#​17643](https://redirect.github.com/astral-sh/uv/pull/17643))
- docs: Correct gitlab-ci.yml to .gitlab-ci.yml
([#​17682](https://redirect.github.com/astral-sh/uv/pull/17682))
##### Other changes
- Update MSRV to 1.91
([#​17677](https://redirect.github.com/astral-sh/uv/pull/17677))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>