chore(deps): bump astral-sh/uv from 0.11.7-python3.11-trixie-slim to 0.11.33-python3.11-trixie-slim in /jans-cedarling/flask-sidecar

[dependabot]

Bumps astral-sh/uv from 0.11.7-python3.11-trixie-slim to 0.11.33-python3.11-trixie-slim.

Release notes

Sourced from astral-sh/uv's releases.

0.11.33

Release Notes

Released on 2026-07-28.

Enhancements

• Abort panics in release builds for smaller uv binaries (#20271)
• Use .tar.gz archives for Pyodide installs (#20667)

Preview features

• Avoid checking any scripts in uv check unless --script is passed (#20676)
• Check locked tools for malware before cache reuse (#20301)
• Write and read package.metadata-free lockfiles (#20688, #20691, #20685, #20695)

Bug fixes

• Correctly split dependencies into production and optional markers (#20671)
• Fix discrepancies in argument parsing of exclude-newer (#20679)
• Cleanup managed Python temporary directory on error (#20752)

Install uv 0.11.33

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.ps1 | iex"

Download uv 0.11.33

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
uv-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

Changelog

0.11.33

Released on 2026-07-28.

Enhancements

• Abort panics in release builds for smaller uv binaries (#20271)
• Use .tar.gz archives for Pyodide installs (#20667)

Preview features

• Avoid checking any scripts in uv check unless --script is passed (#20676)
• Check locked tools for malware before cache reuse (#20301)
• Write and read package.metadata-free lockfiles (#20688, #20691, #20685, #20695)

Bug fixes

• Correctly split dependencies into production and optional markers (#20671)
• Fix discrepancies in argument parsing of exclude-newer (#20679)
• Cleanup managed Python temporary directory on error (#20752)

0.11.32

Released on 2026-07-23.

Preview features

• Add --package and --all-packages selection to uv check (#20628)
• Allow uv upgrade to update multiple marker-specific declarations of the same package (#20335)
• Reject non-canonically formatted lockfiles in uv lock --check and commands using --locked (#20646)
• Regenerate non-canonically formatted lockfiles with uv lock --refresh (#20634)
• Include best-effort information about the active environment in uv workspace metadata by default (#20643)

Performance

• Skip dependency-group conflict expansion when no additional conflicts can be inferred (#20611)

Bug fixes

• Fork universal resolutions when Requires-Python is discovered only from distribution metadata (#20586)

0.11.31

Released on 2026-07-21.

... (truncated)

Commits

• fece32f Bump version to 0.11.33 (#20764)
• 8d09b83 fix(python): allow managed python temp_dir to clean up on drop (#20752)
• 9ae6754 Fix windows test warnings (#20755)
• e44244a Abort panics in release builds for smaller binaries (#20271)
• cc10ea0 Write package.metadata-free lockfiles in preview (#20695)
• 3a4bc88 Validate metadata-free lockfiles against refreshed dependencies (#20685)
• 83a0158 Support frozen installs from metadata-free lockfiles (#20691)
• d4a2d7c Load lock validation indexes without package.metadata (#20688)
• 6b3b62a Correctly split dependencies into production and optional markers (#20671)
• 116ca06 Returns new markers from marker operations (#20687)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mo-auto]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[dependabot]

Superseded by #14661.