Skip to content

chore(deps-dev): bump uv from 0.12.5 to 0.12.7 - #51

Merged
abrichr merged 4 commits into
mainfrom
dependabot/pip/uv-0.12.7
Sep 10, 2026
Merged

abrichr merged 4 commits into
mainfrom
dependabot/pip/uv-0.12.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

The release tool environment and GitHub workflow now use UV 0.12.7. The committed tool lock and release contract assertions use the same version, so the workflow cannot bootstrap a different reviewed UV version.

UV 0.12.7 passed offline validation of the unchanged application lock and the real PSR smoke. All ten release contract tests and Ruff passed locally. This update preserves the separate application and release environments.

Bumps [uv](https://github.com/astral-sh/uv) from 0.12.5 to 0.12.7.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.5...0.12.7)

---
updated-dependencies:
- dependency-name: uv
  dependency-version: 0.12.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from abrichr as a code owner August 31, 2026 13:36
Dependabot updates pyproject.toml only; CI runs uv sync --locked and needs
the lockfile to match.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of uv exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@abrichr
abrichr merged commit 211c039 into main Sep 10, 2026
11 checks passed
@abrichr
abrichr deleted the dependabot/pip/uv-0.12.7 branch September 10, 2026 20:54
@abrichr
abrichr restored the dependabot/pip/uv-0.12.7 branch September 10, 2026 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant