chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.9

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	final	patch	0.10.6 → 0.10.9

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.10.9

Compare Source

Released on 2026-03-06.

Enhancements

• Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list (#​18338)
• Add torchcodec to PyTorch List (#​18336)
• Log the duration we took before erroring (#​18231)
• Warn when using uv_build settings without uv_build (#​15750)
• Add fallback to /usr/lib/os-release on Linux system lookup failure (#​18349)
• Use cargo auditable to include SBOM in uv builds (#​18276)

Configuration

• Add an environment variable for UV_VENV_RELOCATABLE (#​18331)

Performance

• Avoid toml Document overhead (#​18306)
• Use a single global workspace cache (#​18307)

Bug fixes

• Continue on trampoline job assignment failures (#​18291)
• Handle the hard link limit gracefully instead of failing (#​17699)
• Respect build constraints for workspace members (#​18350)
• Revalidate editables and other dependencies in scripts (#​18328)
• Support Python 3.13+ on Android (#​18301)
• Support cp3-none-any (#​17064)
• Skip tool environments with broken links to Python on Windows (#​17176)

Documentation

• Add documentation for common marker values (#​18327)
• Improve documentation on virtual dependencies (#​18346)

v0.10.8

Compare Source

Released on 2026-03-03.

Python

• Add CPython 3.10.20
• Add CPython 3.11.15
• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#​18247)
• Add resolver hint when --exclude-newer filters out all versions of a package (#​18217)
• Configure a real retry minimum delay of 1s (#​18201)
• Expand uv_build direct build compatibility (#​17902)
• Fetch CPython from an Astral mirror by default (#​18207)
• Download uv releases from an Astral mirror in installers by default (#​18191)
• Add SBOM attestations to Docker images (#​18252)
• Improve hint for installing meson-python when missing as build backend (#​15826)

Configuration

• Add UV_INIT_BARE environment variable for uv init (#​18210)

Bug fixes

• Prevent uv tool upgrade from installing excluded dependencies (#​18022)
• Promote authentication policy when saving tool receipts (#​18246)
• Respect exclusions in scripts (#​18269)
• Retain default-branch Git SHAs in pylock.toml files (#​18227)
• Skip installed Python check for URL dependencies (#​18211)
• Respect constraints during --upgrade (#​18226)
• Fix uv tree orphaned roots and premature deduplication (#​17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#​18230)
• Move cache prune in GitLab to after_script (#​18206)

v0.10.7

Compare Source

Released on 2026-02-27.

Bug fixes

• Fix handling of junctions in Windows Containers on Windows (#​18192)

Enhancements

• Activate logging for middleware retries (#​18200)
• Upload uv releases to a mirror (#​18159)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.