Sync uv Dockerfile Python versions with python ecosystem (#15087)

* Sync uv Dockerfile Python versions with python ecosystem

Update Python version pins in the uv Dockerfile to match the versions
already deployed in the python ecosystem (PR #15058). The uv ecosystem
aliases the Python Language class, so the code expects these exact
versions when extracting compressed Python runtimes.

- 3.14.2 → 3.14.5
- 3.13.11 → 3.13.13
- 3.12.12 → 3.12.13
- 3.11.14 → 3.11.15
- 3.10.19 → 3.10.20
- 3.9.24 → 3.9.25

Author: kbukum1

uv/Dockerfile

@@ -1,13 +1,14 @@
 # syntax=docker.io/docker/dockerfile:1.20
 # This list must match the versions specified in
-# uv/lib/dependabot/uv/language.rb: PRE_INSTALLED_PYTHON_VERSIONS_RAW
+# python/lib/dependabot/python/language.rb: PRE_INSTALLED_PYTHON_VERSIONS_RAW
+# (`uv/lib/dependabot/uv/language.rb` aliases `Dependabot::Python::Language`).
 # Python versions are pinned to the release of each minor/patch version.
-ARG PY_3_14=3.14.2
-ARG PY_3_13=3.13.11
-ARG PY_3_12=3.12.12
-ARG PY_3_11=3.11.14
-ARG PY_3_10=3.10.19
-ARG PY_3_9=3.9.24
+ARG PY_3_14=3.14.5
+ARG PY_3_13=3.13.13
+ARG PY_3_12=3.12.13
+ARG PY_3_11=3.11.15
+ARG PY_3_10=3.10.20
+ARG PY_3_9=3.9.25
 # https://github.com/pyenv/pyenv/releases
 ARG PYENV_VERSION=v2.6.16
 

uv/helpers/build

@@ -15,10 +15,21 @@ cp -r \
   "$helpers_dir/lib" \
   "$helpers_dir/run.py" \
   "$helpers_dir/requirements.txt" \
+  "$helpers_dir/requirements-3.9.txt" \
   "$install_dir"
 
 cd "$install_dir"
-PYENV_VERSION=$1 pyenv exec pip3 --disable-pip-version-check install --use-pep517 -r "requirements.txt"
+
+python_version=$1
+# pip 26.x and several other packages require Python >=3.10.
+# Use 3.9-compatible versions for the deprecated Python 3.9 runtime.
+if [[ "$python_version" == 3.9.* ]]; then
+  req_file="requirements-3.9.txt"
+else
+  req_file="requirements.txt"
+fi
+
+PYENV_VERSION=$python_version pyenv exec pip3 --disable-pip-version-check install --use-pep517 -r "$req_file"
 
 # Remove the extra objects added during the previous install. Based on
 # https://github.com/docker-library/python/blob/master/Dockerfile-linux.template

uv/helpers/requirements-3.9.txt

@@ -0,0 +1,15 @@
+# Python 3.9-compatible versions pinned to the last known working set before
+# packages dropped 3.9 support. Python 3.9 reached end-of-life on 2025-10-31.
+pip==24.2
+pip-tools==7.5.3
+flake8==7.3.0
+hashin==1.0.5
+pipenv==2024.4.1
+plette==2.1.0
+poetry==2.2.1
+# tomli is required for Python <3.11 (stdlib tomllib was added in 3.11).
+tomli==2.2.1
+uv==0.11.8
+
+# Some dependencies will only install if Cython is present
+Cython==3.2.4

uv/helpers/requirements.txt

@@ -1,13 +1,13 @@
-pip==24.0
-pip-tools==7.4.1
-flake8==7.1.0
-hashin==1.0.3
-pipenv==2024.0.2
-plette==2.1.0
-poetry==1.8.5
+pip==26.1.1
+pip-tools==7.5.3
+flake8==7.3.0
+hashin==1.0.5
+pipenv==2024.4.1
+plette==2.2.1
+poetry==2.3.4
 # TODO: Replace 3p package `tomli` with 3.11's new stdlib `tomllib` once we drop support for Python 3.10.
-tomli==2.0.1
+tomli==2.4.1
 uv==0.11.8
 
 # Some dependencies will only install if Cython is present
-Cython==3.0.10
+Cython==3.2.4

uv/spec/dependabot/uv/file_parser/pyproject_files_parser_spec.rb

@@ -134,7 +134,7 @@
       end
 
       describe "a development sub-dependency" do
-        subject(:dep) { dependencies.find { |d| d.name == "atomicwrites" } }
+        subject(:dep) { dependencies.find { |d| d.name == "click" } }
 
         its(:subdependency_metadata) do
           is_expected.to eq([{ production: false }])

uv/spec/dependabot/uv/language_spec.rb

@@ -22,7 +22,7 @@
     end
 
     context "when detected version is deprecated but not unsupported" do
-      let(:detected_version) { "3.8.1" }
+      let(:detected_version) { "3.9.1" }
 
       before do
         allow(language).to receive(:unsupported?).and_return(false)