chore(deps): update uv

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
astral-sh/setup-uv	action	minor	v6.1.0 -> v6.3.1
astral-sh/uv-pre-commit	repository	patch	0.7.10 -> 0.7.18
ghcr.io/astral-sh/uv	final	patch	0.7.10 -> 0.7.18
uv (source, changelog)		patch	0.7.10 -> 0.7.18

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

v6.3.1: 🌈 Do not warn when version not in manifest-file

Compare Source

Changes

This is a hotfix to change the warning messages that a version could not be found in the local manifest-file to info level.

A setup-uv release contains a version-manifest.json file with infos in all available uv releases. When a new uv version is released this is not contained in this file until the file gets updated and a new setup-uv release is made.
We will overhaul this process in the future but for now the spamming of warnings is removed.

🐛 Bug fixes

• Do not warn when version not in manifest-file @​eifinger (#​462)

🧰 Maintenance

• chore: update known versions for 0.7.14 @​github-actions[bot] (#​459)
• Revert "Set expected cache dir drive to C: on windows (#​451)" @​eifinger (#​460)

v6.3.0: 🌈 Use latest version from manifest-file

Compare Source

Changes

If a manifest-file is supplied the default value of the version input (latest) will get the latest version available in the manifest. That might not be the actual latest version available in the official uv repo.

🚀 Enhancements

• Use latest version from manifest-file @​eifinger (#​458)

v6.2.1: 🌈 Fix "No such file or directory version-manifest.json"

Compare Source

Changes

Release v6.2.0 contained a bug that slipped through the automated test. The action tried to look for the default version-manifest.json in the root of the repostory using this action instead of relative to the action itself.

🐛 Bug fixes

• Look for version-manifest.json relative to action path @​eifinger (#​456)

v6.2.0: 🌈 New input manifest-file

Compare Source

Changes

This release adds a new input manifest-file.

The manifest-file input allows you to specify a JSON manifest that lists available uv versions,
architectures, and their download URLs. By default, this action uses the manifest file contained
in this repository, which is automatically updated with each release of uv.

The manifest file contains an array of objects, each describing a version,
architecture, platform, and the corresponding download URL.

You can supply a custom manifest file URL to define additional versions,
architectures, or different download URLs.
This is useful if you maintain your own uv builds or want to override the default sources.

For example:

[
  {
    "version": "0.7.12-alpha.1",
    "artifactName": "uv-x86_64-unknown-linux-gnu.tar.gz",
    "arch": "x86_64",
    "platform": "unknown-linux-gnu",
    "downloadUrl": "https://release.pyx.dev/0.7.12-alpha.1/uv-x86_64-unknown-linux-gnu.tar.gz"
  },
  ...
]

- name: Use a custom manifest file
  uses: astral-sh/setup-uv@v6
  with:
    manifest-file: "https://example.com/my-custom-manifest.json"

[!WARNING]
If you have previously used server-url to use your self hosted uv binaries use this new way instead.
server-url is deprecated and will be removed in a future release

🚀 Enhancements

• Add input manifest-file @​eifinger (#​454)
• Add warning about shadowed uv binaries to activate-environment @​zanieb (#​439)

🧰 Maintenance

• chore: update known versions for 0.7.13 @​github-actions[bot] (#​444)
• Set expected cache dir drive to C: on windows @​eifinger (#​451)
• chore: update known versions for 0.7.11 @​github-actions[bot] (#​442)
• chore: update known versions for 0.7.10 @​github-actions[bot] (#​440)
• chore: update known versions for 0.7.9 @​github-actions[bot] (#​437)
• Check that all jobs are in all-tests-passed.needs @​eifinger (#​432)
• chore: update known versions for 0.7.8 @​github-actions[bot] (#​428)

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.7.18

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.18

v0.7.17

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.17

v0.7.16

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.16

v0.7.15

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.15

v0.7.14

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.14

v0.7.13

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.13

v0.7.12

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.12

v0.7.11

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.7.11

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.7.18

Compare Source

Python

• Added arm64 Windows Python 3.11, 3.12, 3.13, and 3.14

  These are not downloaded by default, since x86-64 Python has broader ecosystem support on Windows.
  However, they can be requested with cpython-<version>-windows-aarch64.

Enhancements

• Keep track of retries in ManagedPythonDownload::fetch_with_retry (#​14378)
• Reuse build (virtual) environments across resolution and installation (#​14338)
• Improve trace message for cached Python interpreter query (#​14328)
• Use parsed URLs for conflicting URL error message (#​14380)

Preview features

• Ignore invalid build backend settings when not building (#​14372)

Bug fixes

• Fix equals-star and tilde-equals with python_version and python_full_version (#​14271)
• Include the canonical path in the interpreter query cache key (#​14331)
• Only drop build directories on program exit (#​14304)
• Error instead of panic on conflict between global and subcommand flags (#​14368)
• Consistently normalize trailing slashes on URLs with no path segments (#​14349)

Documentation

• Add instructions for publishing to JFrog's Artifactory (#​14253)
• Edits to the build backend documentation (#​14376)

v0.7.17

Compare Source

Bug fixes

• Apply build constraints when resolving --with dependencies (#​14340)
• Drop trailing slashes when converting index URL from URL (#​14346)
• Ignore UV_PYTHON_CACHE_DIR when empty (#​14336)
• Fix error message ordering for pyvenv.cfg version conflict (#​14329)

v0.7.16

Compare Source

Python

• Add Python 3.14.0b3

See the
python-build-standalone release notes
for more details.

Enhancements

• Include path or URL when failing to convert in lockfile (#​14292)
• Warn when ~= is used as a Python version specifier without a patch version (#​14008)

Preview features

• Ensure preview default Python installs are upgradeable (#​14261)

Performance

• Share workspace cache between lock and sync operations (#​14321)

Bug fixes

• Allow local indexes to reference remote files (#​14294)
• Avoid rendering desugared prefix matches in error messages (#​14195)
• Avoid using path URL for workspace Git dependencies in requirements.txt (#​14288)
• Normalize index URLs to remove trailing slash (#​14245)
• Respect URL-encoded credentials in redirect location (#​14315)
• Lock the source tree when running setuptools, to protect concurrent builds (#​14174)

Documentation

• Note that GCP Artifact Registry download URLs must have /simple component (#​14251)

v0.7.15

Compare Source

Enhancements

• Consistently use Ordering::Relaxed for standalone atomic use cases (#​14190)
• Warn on ambiguous relative paths for --index (#​14152)
• Skip GitHub fast path when rate-limited (#​13033)
• Preserve newlines in schema.json descriptions (#​13693)

Bug fixes

• Add check for using minor version link when creating a venv on Windows (#​14252)
• Strip query parameters when parsing source URL (#​14224)

Documentation

• Add a link to PyPI FAQ to clarify what per-project token is (#​14242)

Preview features

• Allow symlinks in the build backend (#​14212)

v0.7.14

Compare Source

Enhancements

• Add XPU to --torch-backend (#​14172)
• Add ROCm backends to --torch-backend (#​14120)
• Remove preview label from --torch-backend (#​14119)
• Add [tool.uv.dependency-groups].mygroup.requires-python (#​13735)
• Add auto-detection for AMD GPUs (#​14176)
• Show retries for HTTP status code errors (#​13897)
• Support transparent Python patch version upgrades (#​13954)
• Warn on empty index directory (#​13940)
• Publish to DockerHub (#​14088)

Performance

• Make cold resolves about 10% faster (#​14035)

Bug fixes

• Don't use walrus operator in interpreter query script (#​14108)
• Fix handling of changes to requires-python (#​14076)
• Fix implied platform_machine marker for win_amd64 platform tag (#​14041)
• Only update existing symlink directories on preview uninstall (#​14179)
• Serialize Python requests for tools as canonicalized strings (#​14109)
• Support netrc and same-origin credential propagation on index redirects (#​14126)
• Support reading dependency-groups from pyproject.tomls with no [project] (#​13742)
• Handle an existing shebang in uv init --script (#​14141)
• Prevent concurrent updates of the environment in uv run (#​14153)
• Filter managed Python distributions by platform before querying when included in request (#​13936)

Documentation

• Replace cuda124 with cuda128 (#​14168)
• Document the way member sources shadow workspace sources (#​14136)
• Sync documented PyTorch integration index for CUDA and ROCm versions from PyTorch website (#​14100)

v0.7.13

Compare Source

Python

• Add Python 3.14.0b2
• Add Python 3.13.5
• Fix stability of uuid.getnode on 3.13

See the
python-build-standalone release notes
for more details.

Enhancements

• Download versions in uv python pin if not found (#​13946)
• Use TTY detection to determine if SIGINT forwarding is enabled (#​13925)
• Avoid fetching an exact, cached Git commit, even if it isn't locked (#​13748)
• Add zstd and deflate to Accept-Encoding (#​13982)
• Build binaries for riscv64 (#​12688)

Bug fixes

• Check if relative URL is valid directory before treating as index (#​13917)
• Ignore Python discovery errors during uv python pin (#​13944)
• Do not allow uv add --group ... --script (#​13997)

Preview changes

• Build backend: Support namespace packages (#​13833)

Documentation

• Add 3.14 to the supported platform reference (#​13990)
• Add an llms.txt to uv (#​13929)
• Add supported macOS version to the platform reference (#​13993)
• Update platform support reference to include Python implementation list (#​13991)
• Update pytorch.md (#​13899)
• Update the CLI help and reference to include references to the Python bin directory (#​13978)

v0.7.12

Compare Source

Enhancements

• Add uv python pin --rm to remove .python-version pins (#​13860)
• Don't hint at versions removed by excluded-newer (#​13884)
• Add hint to use tool.uv.environments on resolution error (#​13455)
• Add hint to use tool.uv.required-environments on resolution error (#​13575)
• Improve python pin error messages (#​13862)

Bug fixes

• Lock environments during uv sync, uv add and uv remove to prevent race conditions (#​13869)
• Add --no-editable to uv export for pylock.toml (#​13852)

Documentation

• List .gitignore in project init files (#​13855)
• Move the pip interface documentation into the concepts section (#​13841)
• Remove the configuration section in favor of concepts / reference (#​13842)
• Update Git and GitHub Actions docs to mention gh auth login (#​13850)

Preview

• Fix directory glob traversal fallback preventing exclusion of all files (#​13882)

v0.7.11

Compare Source

Python

• Add Python 3.14.0b1
• Add Python 3.13.4
• Add Python 3.12.11
• Add Python 3.11.13
• Add Python 3.10.18
• Add Python 3.9.23

Enhancements

• Add Pyodide support (#​12731)
• Better error message for version specifier with missing operator (#​13803)

Bug fixes

• Downgrade reqwest and hyper-util to resolve connection reset errors over IPv6 (#​13835)
• Prefer uv's binary's version when checking if it's up to date (#​13840)

Documentation

• Use "terminal driver" instead of "shell" in SIGINT docs (#​13787)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.