Bump astral-sh/uv from 0.12.9-python3.13-trixie-slim to 0.12.11-python3.13-trixie-slim in /monitoring

[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.12.9-python3.13-trixie-slim to 0.12.11-python3.13-trixie-slim.

Release notes

Sourced from astral-sh/uv's releases.

0.12.11

Release Notes

Released on 2026-09-08.

Preview features

• Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
• Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

• Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
• Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
• Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
• Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
• Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

• Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
• Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
• Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
• Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
• Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
• Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
• Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

• Restore TOML syntax highlighting for exclude-newer examples (#21534)

Install uv 0.12.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.11/uv-installer.ps1 | iex"

Download uv 0.12.11

File	Platform	Checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

Changelog

0.12.11

Released on 2026-09-08.

Preview features

• Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#20146)
• Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#21462)

Performance

• Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#21478)
• Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#21468)
• Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#21500)
• Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#21499)
• Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#21523)

Bug fixes

• Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#21223)
• Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#21543)
• Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#21544)
• Support PowerShell virtual environment activation from UNC paths, including WSL paths (#19159)
• Trim surrounding whitespace from entries in .python-version and .python-versions files (#21529)
• Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#21496)
• Warn and continue when uv python list cannot query an interpreter (#21498)

Documentation

• Restore TOML syntax highlighting for exclude-newer examples (#21534)

0.12.10

Released on 2026-09-04.

Enhancements

• Attempt to revoke short-lived PyPI trusted-publishing tokens after uv publish completes, including when publishing fails (#21423)

Preview features

• Omit exclude-newer-package settings for packages outside the resolution from uv.lock with the missing-exclude-newer-package-lock preview feature (#21455)
• Show terminal dependency cycles in uv tree --invert output (#21404)

Performance

... (truncated)

Commits

• 4b53f66 Bump version to 0.12.11 (#21545)
• cc85fa2 Borrow hash strategies in lock setup and the resolver provider (#21541)
• eead89b Verify hashes for local versions matching public pins (#21544)
• 1a5e92c Apply flat index policies in each resolver (#21540)
• 681f4bd Verify hashes on arbitrary-equality pins (#21543)
• 16faab2 Verify locked source archives before building metadata (#21223)
• 65bca05 Warn when pylock artifact hash tables are empty (#21462)
• 8707eb2 Finalize publishing sessions with an explicit outcome (#21441)
• d69b892 Move publishing uploads and index checks into a session (#21440)
• 2c8ad21 Prepare publishing metadata and attestations before upload (#21439)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)