uv

fdb2b8bf - Update dependency astral-sh/uv to v0.11.29 (#20527)

Update dependency astral-sh/uv to v0.11.29 (#20527) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with | patch | `0.11.28` → `0.11.29` | --- ### Release Notes <details> <summary>astral-sh/uv (astral-sh/uv)</summary> ### [`v0.11.29`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01129) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.11.28...0.11.29) Released on 2026-07-15. ##### Python - Use gzip-compressed artifacts for PyPy downloads ([#&#8203;20265](https://redirect.github.com/astral-sh/uv/pull/20265)) ##### Enhancements - Add JSON output to `uv tree` ([#&#8203;19978](https://redirect.github.com/astral-sh/uv/pull/19978)) - Add CUDA 13.2 as a supported PyTorch backend ([#&#8203;20267](https://redirect.github.com/astral-sh/uv/pull/20267)) - Prefer local artifacts over URLs when installing from `pylock.toml` ([#&#8203;20393](https://redirect.github.com/astral-sh/uv/pull/20393)) - Clarify diagnostics for unsatisfiable direct requirement ranges ([#&#8203;20227](https://redirect.github.com/astral-sh/uv/pull/20227)) - Include the selected project name in missing-extra errors ([#&#8203;20358](https://redirect.github.com/astral-sh/uv/pull/20358)) ##### Preview features - Preserve extras and dependency-group conflict context when selecting locked project tools ([#&#8203;20078](https://redirect.github.com/astral-sh/uv/pull/20078)) - Split OSV audit queries that exceed the service's 1,000-package limit ([#&#8203;20398](https://redirect.github.com/astral-sh/uv/pull/20398)) - Apply OSV fixed-version information only to the matching package and ecosystem ([#&#8203;20399](https://redirect.github.com/astral-sh/uv/pull/20399)) - Skip the virtualenv distutils monkeypatch on Python 3.10 and later ([#&#8203;20222](https://redirect.github.com/astral-sh/uv/pull/20222)) - Report invalid `uv audit --service-url` values instead of panicking ([#&#8203;20374](https://redirect.github.com/astral-sh/uv/pull/20374)) - Include preview settings in the published SchemaStore schema ([#&#8203;20304](https://redirect.github.com/astral-sh/uv/pull/20304)) ##### Performance - Reduce resolver work by widening selected versions across ranges without other known candidates ([#&#8203;20115](https://redirect.github.com/astral-sh/uv/pull/20115)) - Defer client and build setup for no-op `uv sync` operations ([#&#8203;20364](https://redirect.github.com/astral-sh/uv/pull/20364)) - Reuse workspace discovery during frozen syncs ([#&#8203;20363](https://redirect.github.com/astral-sh/uv/pull/20363)) - Reuse workspace discovery after resolving settings ([#&#8203;20356](https://redirect.github.com/astral-sh/uv/pull/20356)) - Reuse workspace discovery in `uv tree`, `uv export`, `uv format`, and `uv audit` ([#&#8203;20359](https://redirect.github.com/astral-sh/uv/pull/20359)) - Avoid cache and interpreter setup when reading a project version ([#&#8203;20360](https://redirect.github.com/astral-sh/uv/pull/20360)) ##### Bug fixes - Reject duplicate active package entries in `pylock.toml` ([#&#8203;20391](https://redirect.github.com/astral-sh/uv/pull/20391)) - Preserve direct-archive hashes in `uv pip freeze` output ([#&#8203;20395](https://redirect.github.com/astral-sh/uv/pull/20395)) - Explain conflicting root requirements instead of displaying an empty version range ([#&#8203;20228](https://redirect.github.com/astral-sh/uv/pull/20228)) - Prevent build-backend data paths from escaping the project or bypassing wheel exclusions ([#&#8203;20397](https://redirect.github.com/astral-sh/uv/pull/20397)) - Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks ([#&#8203;20387](https://redirect.github.com/astral-sh/uv/pull/20387)) - Redact credentials from failed Git fetch commands ([#&#8203;20401](https://redirect.github.com/astral-sh/uv/pull/20401)) - Fix exclusive post-release range ordering to match PEP 440 ([#&#8203;20268](https://redirect.github.com/astral-sh/uv/pull/20268)) - Canonicalize equivalent PEP 440 ranges during dependency resolution ([#&#8203;20182](https://redirect.github.com/astral-sh/uv/pull/20182)) - Honor Python version pins when initializing scripts ([#&#8203;20404](https://redirect.github.com/astral-sh/uv/pull/20404)) - Respect package-scoped source filtering for scripts ([#&#8203;20389](https://redirect.github.com/astral-sh/uv/pull/20389)) - Report existing environment incompatibilities when `uv pip install --strict` has nothing to install ([#&#8203;20388](https://redirect.github.com/astral-sh/uv/pull/20388)) - Continue scanning `platlib` when `purelib` is missing ([#&#8203;20405](https://redirect.github.com/astral-sh/uv/pull/20405)) - Handle versionless `.egg-info` files as legacy package metadata ([#&#8203;20403](https://redirect.github.com/astral-sh/uv/pull/20403)) - Make repeated locking idempotent for impossible cross-variable platform markers ([#&#8203;20369](https://redirect.github.com/astral-sh/uv/pull/20369)) - Report invalid cloud credential endpoint URLs instead of panicking ([#&#8203;20372](https://redirect.github.com/astral-sh/uv/pull/20372)) - Report invalid `pylock.toml` artifact URLs instead of panicking ([#&#8203;20373](https://redirect.github.com/astral-sh/uv/pull/20373)) - Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts ([#&#8203;20375](https://redirect.github.com/astral-sh/uv/pull/20375)) - Return an unsupported-operation error from unimplemented build-backend requirement hooks ([#&#8203;20376](https://redirect.github.com/astral-sh/uv/pull/20376)) ##### Documentation - Clarify `--no-build` behavior for editable requirements ([#&#8203;20234](https://redirect.github.com/astral-sh/uv/pull/20234)) - Document uv's threat model ([#&#8203;20236](https://redirect.github.com/astral-sh/uv/pull/20236)) - Reduce the number of badges in the README ([#&#8203;11257](https://redirect.github.com/astral-sh/uv/pull/11257)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJidWlsZDpza2lwLWRvY2tlciIsImJ1aWxkOnNraXAtcmVsZWFzZSIsImludGVybmFsIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>