build(deps): bump astral-sh/uv from 0.12.22 to 0.12.24 in the docker-base-image-digests group (#1449)

0 Fork 0

mirror of https://github.com/calibrain/shelfmark.git synced 2026-11-15 16:08:11 +00:00

> [!WARNING]
> Cooldown could not be applied because no publication date was
available from the registry.
>

Bumps the docker-base-image-digests group with 1 update:
[astral-sh/uv](https://github.com/astral-sh/uv).

Updates `astral-sh/uv` from 0.12.22 to 0.12.24
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/uv/releases">astral-sh/uv's
releases</a>.</em></p>
<blockquote>
<h2>0.12.24</h2>
<h2>Release Notes</h2>
<p>Released on 2026-10-08.</p>
<h3>Enhancements</h3>
<ul>
<li>Remove orphaned temporary build environments with <code>uv cache
prune</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22171">#22171</a>)</li>
<li>Accept PEP 508 marker operators directly before grouped expressions
(<a
href="https://redirect.github.com/astral-sh/uv/pull/22309">#22309</a>)</li>
<li>Reject malformed requirements-file options instead of partially
parsing or ignoring them (<a
href="https://redirect.github.com/astral-sh/uv/pull/22317">#22317</a>)</li>
<li>Show underlying filesystem and registry errors when managed Python
uninstallation fails (<a
href="https://redirect.github.com/astral-sh/uv/pull/22362">#22362</a>)</li>
<li>Identify the invalid source URL in Python mirror errors (<a
href="https://redirect.github.com/astral-sh/uv/pull/22364">#22364</a>)</li>
</ul>
<h3>Preview features</h3>
<ul>
<li>Display preferred advisory IDs in <code>uv audit</code> reports,
prioritizing PYSEC, GHSA, then CVE identifiers (<a
href="https://redirect.github.com/astral-sh/uv/pull/22292">#22292</a>)</li>
</ul>
<h3>Configuration</h3>
<ul>
<li>Support custom installation mirrors for GraalPy (<a
href="https://redirect.github.com/astral-sh/uv/pull/22269">#22269</a>)</li>
<li>Support custom installation mirrors for Pyodide (<a
href="https://redirect.github.com/astral-sh/uv/pull/22271">#22271</a>)</li>
<li>Allow <code>UV_NO_CACHE=false</code> to override <code>no-cache =
true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22324">#22324</a>)</li>
<li>Report more precise error locations for invalid trusted-host ports
and preview-feature list entries (<a
href="https://redirect.github.com/astral-sh/uv/pull/22144">#22144</a>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Speed up later commands after creating an environment by warming its
interpreter cache (<a
href="https://redirect.github.com/astral-sh/uv/pull/21304">#21304</a>)</li>
<li>Reduce code-signature verification work for ARM64 macOS releases
with 16 KiB signature pages (<a
href="https://redirect.github.com/astral-sh/uv/pull/22246">#22246</a>)</li>
<li>Enforce resource limits when parsing package indexes and
<code>--find-links</code> pages with <code>astral-html</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22203">#22203</a>)</li>
<li>Reduce standalone <code>uv-build</code> executable size by 7.5% by
omitting unused Zstandard support (<a
href="https://redirect.github.com/astral-sh/uv/pull/22242">#22242</a>)</li>
<li>Reduce uv's binary size by about 232 KB by simplifying configuration
deserialization (<a
href="https://redirect.github.com/astral-sh/uv/pull/22144">#22144</a>)</li>
<li>Reduce Python download error formatting code size by sharing its
formatter (<a
href="https://redirect.github.com/astral-sh/uv/pull/22141">#22141</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Verify supplied hashes even when hash presence is disabled with
<code>--no-require-hashes</code> or <code>require-hashes = false</code>
(<a
href="https://redirect.github.com/astral-sh/uv/pull/22369">#22369</a>)</li>
<li>Honor exact managed Python patch pins when creating script
environments instead of following patch upgrades (<a
href="https://redirect.github.com/astral-sh/uv/pull/22360">#22360</a>)</li>
<li>Prevent dependency overrides and constraints from activating
optional dependencies when their extras are not selected (<a
href="https://redirect.github.com/astral-sh/uv/pull/22237">#22237</a>)</li>
<li>Exclude optional dependencies from exports when their extras are
activated only in incompatible environments (<a
href="https://redirect.github.com/astral-sh/uv/pull/22234">#22234</a>)</li>
<li>Give explicit <code>uv publish --trusted-publishing</code> values
precedence over configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22279">#22279</a>)</li>
<li>Allow <code>UV_OFFLINE=false</code> to override <code>offline =
true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22283">#22283</a>)</li>
<li>Allow <code>UV_SYSTEM_CERTS=false</code> to override
<code>system-certs = true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22291">#22291</a>)</li>
<li>Allow <code>uv auth login</code> over IPv6 loopback addresses (<a
href="https://redirect.github.com/astral-sh/uv/pull/22306">#22306</a>)</li>
<li>Resolve GitHub dependencies whose Git references contain
<code>#</code> or <code>%</code> characters (<a
href="https://redirect.github.com/astral-sh/uv/pull/22281">#22281</a>)</li>
<li>Recognize existing Pyodide interpreters as satisfying Pyodide Python
requests (<a
href="https://redirect.github.com/astral-sh/uv/pull/22322">#22322</a>)</li>
<li>Preserve JSON output from <code>uv version</code> and <code>uv self
version</code> with a single <code>--quiet</code> flag (<a
href="https://redirect.github.com/astral-sh/uv/pull/22280">#22280</a>)</li>
<li>Preserve trailing spaces and tabs in passwords returned by
subprocess keyrings (<a
href="https://redirect.github.com/astral-sh/uv/pull/22284">#22284</a>)</li>
<li>Restore wheel incompatibility hints when <code>WHEEL</code> metadata
contains multiple expanded <code>Tag:</code> rows (<a
href="https://redirect.github.com/astral-sh/uv/pull/22235">#22235</a>)</li>
<li>Preserve Windows wheel-script rename errors unless a cross-drive
copy fallback applies (<a
href="https://redirect.github.com/astral-sh/uv/pull/22302">#22302</a>)</li>
<li>Prevent workspace-cache assertion failures after modifying a project
at the workspace root (<a
href="https://redirect.github.com/astral-sh/uv/pull/22236">#22236</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/uv/blob/main/CHANGELOG.md">astral-sh/uv's
changelog</a>.</em></p>
<blockquote>
<h2>0.12.24</h2>
<p>Released on 2026-10-08.</p>
<h3>Enhancements</h3>
<ul>
<li>Remove orphaned temporary build environments with <code>uv cache
prune</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22171">#22171</a>)</li>
<li>Accept PEP 508 marker operators directly before grouped expressions
(<a
href="https://redirect.github.com/astral-sh/uv/pull/22309">#22309</a>)</li>
<li>Reject malformed requirements-file options instead of partially
parsing or ignoring them (<a
href="https://redirect.github.com/astral-sh/uv/pull/22317">#22317</a>)</li>
<li>Show underlying filesystem and registry errors when managed Python
uninstallation fails (<a
href="https://redirect.github.com/astral-sh/uv/pull/22362">#22362</a>)</li>
<li>Identify the invalid source URL in Python mirror errors (<a
href="https://redirect.github.com/astral-sh/uv/pull/22364">#22364</a>)</li>
</ul>
<h3>Preview features</h3>
<ul>
<li>Display preferred advisory IDs in <code>uv audit</code> reports,
prioritizing PYSEC, GHSA, then CVE identifiers (<a
href="https://redirect.github.com/astral-sh/uv/pull/22292">#22292</a>)</li>
</ul>
<h3>Configuration</h3>
<ul>
<li>Support custom installation mirrors for GraalPy (<a
href="https://redirect.github.com/astral-sh/uv/pull/22269">#22269</a>)</li>
<li>Support custom installation mirrors for Pyodide (<a
href="https://redirect.github.com/astral-sh/uv/pull/22271">#22271</a>)</li>
<li>Allow <code>UV_NO_CACHE=false</code> to override <code>no-cache =
true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22324">#22324</a>)</li>
<li>Report more precise error locations for invalid trusted-host ports
and preview-feature list entries (<a
href="https://redirect.github.com/astral-sh/uv/pull/22144">#22144</a>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Speed up later commands after creating an environment by warming its
interpreter cache (<a
href="https://redirect.github.com/astral-sh/uv/pull/21304">#21304</a>)</li>
<li>Reduce code-signature verification work for ARM64 macOS releases
with 16 KiB signature pages (<a
href="https://redirect.github.com/astral-sh/uv/pull/22246">#22246</a>)</li>
<li>Enforce resource limits when parsing package indexes and
<code>--find-links</code> pages with <code>astral-html</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22203">#22203</a>)</li>
<li>Reduce standalone <code>uv-build</code> executable size by 7.5% by
omitting unused Zstandard support (<a
href="https://redirect.github.com/astral-sh/uv/pull/22242">#22242</a>)</li>
<li>Reduce uv's binary size by about 232 KB by simplifying configuration
deserialization (<a
href="https://redirect.github.com/astral-sh/uv/pull/22144">#22144</a>)</li>
<li>Reduce Python download error formatting code size by sharing its
formatter (<a
href="https://redirect.github.com/astral-sh/uv/pull/22141">#22141</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Verify supplied hashes even when hash presence is disabled with
<code>--no-require-hashes</code> or <code>require-hashes = false</code>
(<a
href="https://redirect.github.com/astral-sh/uv/pull/22369">#22369</a>)</li>
<li>Honor exact managed Python patch pins when creating script
environments instead of following patch upgrades (<a
href="https://redirect.github.com/astral-sh/uv/pull/22360">#22360</a>)</li>
<li>Prevent dependency overrides and constraints from activating
optional dependencies when their extras are not selected (<a
href="https://redirect.github.com/astral-sh/uv/pull/22237">#22237</a>)</li>
<li>Exclude optional dependencies from exports when their extras are
activated only in incompatible environments (<a
href="https://redirect.github.com/astral-sh/uv/pull/22234">#22234</a>)</li>
<li>Give explicit <code>uv publish --trusted-publishing</code> values
precedence over configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22279">#22279</a>)</li>
<li>Allow <code>UV_OFFLINE=false</code> to override <code>offline =
true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22283">#22283</a>)</li>
<li>Allow <code>UV_SYSTEM_CERTS=false</code> to override
<code>system-certs = true</code> in configuration (<a
href="https://redirect.github.com/astral-sh/uv/pull/22291">#22291</a>)</li>
<li>Allow <code>uv auth login</code> over IPv6 loopback addresses (<a
href="https://redirect.github.com/astral-sh/uv/pull/22306">#22306</a>)</li>
<li>Resolve GitHub dependencies whose Git references contain
<code>#</code> or <code>%</code> characters (<a
href="https://redirect.github.com/astral-sh/uv/pull/22281">#22281</a>)</li>
<li>Recognize existing Pyodide interpreters as satisfying Pyodide Python
requests (<a
href="https://redirect.github.com/astral-sh/uv/pull/22322">#22322</a>)</li>
<li>Preserve JSON output from <code>uv version</code> and <code>uv self
version</code> with a single <code>--quiet</code> flag (<a
href="https://redirect.github.com/astral-sh/uv/pull/22280">#22280</a>)</li>
<li>Preserve trailing spaces and tabs in passwords returned by
subprocess keyrings (<a
href="https://redirect.github.com/astral-sh/uv/pull/22284">#22284</a>)</li>
<li>Restore wheel incompatibility hints when <code>WHEEL</code> metadata
contains multiple expanded <code>Tag:</code> rows (<a
href="https://redirect.github.com/astral-sh/uv/pull/22235">#22235</a>)</li>
<li>Preserve Windows wheel-script rename errors unless a cross-drive
copy fallback applies (<a
href="https://redirect.github.com/astral-sh/uv/pull/22302">#22302</a>)</li>
<li>Prevent workspace-cache assertion failures after modifying a project
at the workspace root (<a
href="https://redirect.github.com/astral-sh/uv/pull/22236">#22236</a>)</li>
<li>Hide the ignored <code>--keyring-provider</code> option from
<code>uv auth</code> help (<a
href="https://redirect.github.com/astral-sh/uv/pull/19520">#19520</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/uv/commit/5411378eb76dc1ea1ad90aeb10e84e997e5bbd96"><code>5411378</code></a>
Bump version to 0.12.24 (<a
href="https://redirect.github.com/astral-sh/uv/issues/22371">#22371</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/213e6de8b643a831a84bbc12ff9f9ee6f0bfc13d"><code>213e6de</code></a>
Clarify integration test style in agent guidance (<a
href="https://redirect.github.com/astral-sh/uv/issues/22372">#22372</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/35deef2029377b87a293579f4c89548f2ec41f14"><code>35deef2</code></a>
Skip Python setup in static version and credential tests (<a
href="https://redirect.github.com/astral-sh/uv/issues/22370">#22370</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/bbddf2f44a7be6888b24264eb2d8a35293e7a58f"><code>bbddf2f</code></a>
Share requirements-file arguments across commands (<a
href="https://redirect.github.com/astral-sh/uv/issues/22145">#22145</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/9a123eb638016dee70515e326a4a5fa88e74e090"><code>9a123eb</code></a>
Deserialize trusted hosts and preview features directly (<a
href="https://redirect.github.com/astral-sh/uv/issues/22144">#22144</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/57a9256bf0ee3bb75e438f193c6a2afe2adc6e9c"><code>57a9256</code></a>
Share archive decoding across reader types (<a
href="https://redirect.github.com/astral-sh/uv/issues/22143">#22143</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/3e3374b961fefaed663747868c09e95863c9a3d2"><code>3e3374b</code></a>
Verify hashes even when they are not required (<a
href="https://redirect.github.com/astral-sh/uv/issues/22369">#22369</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/d3c092a30ed2712d15c855af652d5741d4d5c7c5"><code>d3c092a</code></a>
Move installation layout operations out of Python types (<a
href="https://redirect.github.com/astral-sh/uv/issues/22367">#22367</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/1be3e88341157061a75b68f78953ff3a3c309576"><code>1be3e88</code></a>
Accept PEP 508 marker operators before parentheses (<a
href="https://redirect.github.com/astral-sh/uv/issues/22309">#22309</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/e27def75aaf746634b7c6576bc23ebf572d101a5"><code>e27def7</code></a>
Retain Python download request errors directly (<a
href="https://redirect.github.com/astral-sh/uv/issues/22366">#22366</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/uv/compare/0.12.22...0.12.24">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astral-sh/uv&package-manager=docker&previous-version=0.12.22&new-version=0.12.24)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This commit is contained in:

dependabot[bot] authored and

GitHub committed 2026-10-20 01:24:26 -04:00

1 parent d86d34b8e9

commit 4b7607e224

1 file changed

+1 -1

									
										Dockerfile
									
		+1
		-1
	
												View File
												
				@@ -28,7 +28,7 @@ RUN npm run build

				# than copied into the image. A COPY here would land ~24 MB in a `base` layer that

				# every published image inherits, and a later `rm` cannot take it back out again --

				# a RUN adds a layer, it does not rewrite the one underneath.

				FROM ghcr.io/astral-sh/uv:0.12.22@sha256:f513a91fc62fe7c17567eee97230dd198e43edb8a9fbecca843714a4358fe1bc AS uv

				FROM ghcr.io/astral-sh/uv:0.12.24@sha256:3af4716e991d6956a41e573eab705d0ee08500cd829ed30293eb8472f372c65a AS uv

				# Use python-slim as the base image

				FROM python:3.14.7-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6 AS base