build(deps): bump astral-sh/uv from 0.13.6 to 0.13.7 in the docker-base-image-digests group (#1670)

> [!WARNING]
> Cooldown could not be applied because no publication date was
available from the registry.
>

Bumps the docker-base-image-digests group with 1 update:
[astral-sh/uv](https://github.com/astral-sh/uv).

Updates `astral-sh/uv` from 0.13.6 to 0.13.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/uv/releases">astral-sh/uv's
releases</a>.</em></p>
<blockquote>
<h2>0.13.7</h2>
<h2>Release Notes</h2>
<p>Released on 2026-11-03.</p>
<h3>Preview features</h3>
<ul>
<li>Add <code>--output-version</code> to <code>uv workspace
metadata</code> for requesting a specific schema version (<a
href="https://redirect.github.com/astral-sh/uv/pull/22958">#22958</a>)</li>
<li>Report aliased OSV records as a single vulnerability in <code>uv
audit</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22990">#22990</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Treat workspace member paths added by <code>uv init</code> or
<code>uv add</code> as literals instead of glob patterns (<a
href="https://redirect.github.com/astral-sh/uv/pull/23008">#23008</a>)</li>
<li>Prevent uv's Windows trampolines from closing handles they did not
inherit (<a
href="https://redirect.github.com/astral-sh/uv/pull/22977">#22977</a>)</li>
<li>Allow <code>uvx</code> to run tools with CPython builds whose
versions contain local identifiers (<a
href="https://redirect.github.com/astral-sh/uv/pull/23013">#23013</a>)</li>
<li>Generate valid module names when <code>uv init</code> creates
packaged projects whose names start with a digit (<a
href="https://redirect.github.com/astral-sh/uv/pull/23022">#23022</a>)</li>
<li>Preserve comments around existing inline dependency groups when
<code>uv add</code> updates a group (<a
href="https://redirect.github.com/astral-sh/uv/pull/23017">#23017</a>)</li>
<li>Allow <code>uv remove</code> with an empty inline
<code>tool.uv.sources</code> table (<a
href="https://redirect.github.com/astral-sh/uv/pull/23012">#23012</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Correct the <code>cache-keys</code> inline table example (<a
href="https://redirect.github.com/astral-sh/uv/pull/22984">#22984</a>)</li>
</ul>
<h2>Install uv 0.13.7</h2>
<h3>Install prebuilt binaries via shell script</h3>
<pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf
https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.sh
| sh
</code></pre>
<h3>Install prebuilt binaries via powershell script</h3>
<pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c &quot;irm
https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.ps1
| iex&quot;
</code></pre>
<h2>Download uv 0.13.7</h2>
<table>
<thead>
<tr>
<th>File</th>
<th>Platform</th>
<th>Checksum</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-apple-darwin.tar.gz">uv-aarch64-apple-darwin.tar.gz</a></td>
<td>Apple Silicon macOS</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-apple-darwin.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-x86_64-apple-darwin.tar.gz">uv-x86_64-apple-darwin.tar.gz</a></td>
<td>Intel macOS</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-x86_64-apple-darwin.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-pc-windows-msvc.zip">uv-aarch64-pc-windows-msvc.zip</a></td>
<td>ARM64 Windows</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-pc-windows-msvc.zip.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-i686-pc-windows-msvc.zip">uv-i686-pc-windows-msvc.zip</a></td>
<td>x86 Windows</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-i686-pc-windows-msvc.zip.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-x86_64-pc-windows-msvc.zip">uv-x86_64-pc-windows-msvc.zip</a></td>
<td>x64 Windows</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-x86_64-pc-windows-msvc.zip.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-unknown-linux-gnu.tar.gz">uv-aarch64-unknown-linux-gnu.tar.gz</a></td>
<td>ARM64 Linux</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-aarch64-unknown-linux-gnu.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-i686-unknown-linux-gnu.tar.gz">uv-i686-unknown-linux-gnu.tar.gz</a></td>
<td>x86 Linux</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-i686-unknown-linux-gnu.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-powerpc64le-unknown-linux-gnu.tar.gz">uv-powerpc64le-unknown-linux-gnu.tar.gz</a></td>
<td>PPC64LE Linux</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-powerpc64le-unknown-linux-gnu.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-riscv64gc-unknown-linux-gnu.tar.gz">uv-riscv64gc-unknown-linux-gnu.tar.gz</a></td>
<td>RISCV Linux</td>
<td><a
href="https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-riscv64gc-unknown-linux-gnu.tar.gz.sha256">checksum</a></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/uv/blob/main/CHANGELOG.md">astral-sh/uv's
changelog</a>.</em></p>
<blockquote>
<h2>0.13.7</h2>
<p>Released on 2026-11-03.</p>
<h3>Preview features</h3>
<ul>
<li>Add <code>--output-version</code> to <code>uv workspace
metadata</code> for requesting a specific schema version (<a
href="https://redirect.github.com/astral-sh/uv/pull/22958">#22958</a>)</li>
<li>Report aliased OSV records as a single vulnerability in <code>uv
audit</code> (<a
href="https://redirect.github.com/astral-sh/uv/pull/22990">#22990</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Treat workspace member paths added by <code>uv init</code> or
<code>uv add</code> as literals instead of glob patterns (<a
href="https://redirect.github.com/astral-sh/uv/pull/23008">#23008</a>)</li>
<li>Prevent uv's Windows trampolines from closing handles they did not
inherit (<a
href="https://redirect.github.com/astral-sh/uv/pull/22977">#22977</a>)</li>
<li>Allow <code>uvx</code> to run tools with CPython builds whose
versions contain local identifiers (<a
href="https://redirect.github.com/astral-sh/uv/pull/23013">#23013</a>)</li>
<li>Generate valid module names when <code>uv init</code> creates
packaged projects whose names start with a digit (<a
href="https://redirect.github.com/astral-sh/uv/pull/23022">#23022</a>)</li>
<li>Preserve comments around existing inline dependency groups when
<code>uv add</code> updates a group (<a
href="https://redirect.github.com/astral-sh/uv/pull/23017">#23017</a>)</li>
<li>Allow <code>uv remove</code> with an empty inline
<code>tool.uv.sources</code> table (<a
href="https://redirect.github.com/astral-sh/uv/pull/23012">#23012</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Correct the <code>cache-keys</code> inline table example (<a
href="https://redirect.github.com/astral-sh/uv/pull/22984">#22984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/uv/commit/316c827e058c16b71d5c507a20729c2995a7bcce"><code>316c827</code></a>
Bump version to 0.13.7 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23068">#23068</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/917b4c31531e6933c20596b65b49e75c83ff7d93"><code>917b4c3</code></a>
Update Rust crate tokio-rustls to v0.26.6 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23048">#23048</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/baec6ce829bea457e5452906144115940e1ea896"><code>baec6ce</code></a>
Update conda-incubator/setup-miniconda action to v4.1.0 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23032">#23032</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/da8bbd3365161177fc30909aa0b84d45e8811f09"><code>da8bbd3</code></a>
Update fedora Docker tag to v46 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23033">#23033</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/3db723cf104c685b9f2f31a26834b7d417db652f"><code>3db723c</code></a>
Update Rust crate cargo-util to v0.2.32 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23045">#23045</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/28c0c65cd01ba9430787eef2f933740095609e09"><code>28c0c65</code></a>
Update Rust crate uuid to v1.27.0 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23052">#23052</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/77168783ec37c93a786fce4bbaabe58d1255c22f"><code>7716878</code></a>
Update Rust crate insta to v1.49.0 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23051">#23051</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/3be10e3890b942cb7509e656245b46e7ad63d650"><code>3be10e3</code></a>
Update dependency <code>@​openai/codex</code> to v0.160.0 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23050">#23050</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/8eb756a2e7a4a8380d49a3edd6224da4c5af4cea"><code>8eb756a</code></a>
Update CodSpeedHQ/action action to v5.4.0 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23049">#23049</a>)</li>
<li><a
href="https://github.com/astral-sh/uv/commit/632df30b8e8c8ed1dbba309cc79c2608a63da155"><code>632df30</code></a>
Update Rust crate spdx to v0.13.6 (<a
href="https://redirect.github.com/astral-sh/uv/issues/23047">#23047</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/uv/compare/0.13.6...0.13.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astral-sh/uv&package-manager=docker&previous-version=0.13.6&new-version=0.13.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

<!-- coderabbit-ai-generated:v1 -->

## Summary by CodeRabbit

* **Chores**
  * Updated the build environment’s `uv` version.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Dockerfile

@@ -28,7 +28,7 @@ RUN npm run build
 # than copied into the image. A COPY here would land ~24 MB in a `base` layer that
 # every published image inherits, and a later `rm` cannot take it back out again --
 # a RUN adds a layer, it does not rewrite the one underneath.
-FROM ghcr.io/astral-sh/uv:0.13.6@sha256:af22a52f5eafef3d78e551599d405c02df61919d18028f0cea8eda93bc9986d0 AS uv
+FROM ghcr.io/astral-sh/uv:0.13.7@sha256:96f40d3904aad8d0bd010539001d36c8e2188b981e1334471a90c4a1d93bb490 AS uv
 
 # Use python-slim as the base image
 FROM python:3.14.9-slim@sha256:35caba83af2fe6da9a5d922f9b0156f21d1246a48278c58a08bd253303ba42e8 AS base