Python: Chore(deps-dev): Bump uv from 0.12.6 to 0.12.7 in /python by dependabot[bot] · Pull Request #8061 · microsoft/agent-framework

dependabot · 2026-09-04T13:06:20Z

Bumps uv from 0.12.6 to 0.12.7.

Release notes

0.12.7

Release Notes

Released on 2026-08-27.

Python

Replace managed Python installations when upgrading to a newer build of the same version (#21323)

Enhancements

Support Linux s390x, ppc64le, and loongarch64 targets for cross-platform dependency resolution (#21313)

Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via UV_AZURE_ENDPOINT_URL (#21318)

Preview features

Use content-based directory hashes to deduplicate extracted wheels in the cache with the content-addressed-cache preview feature (#19693)

Bug fixes

Reject source archives with hash mismatches before persisting their extracted contents to the cache (#21248)

Other changes

remove pyx specific features (#21182, #21183, #21184, #21185, #21186)

Install uv 0.12.7

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.7/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.7/uv-installer.ps1 | iex"
Download uv 0.12.7

File Platform Checksum

uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

uv-x86_64-apple-darwin.tar.gz Intel macOS checksum

uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

uv-i686-pc-windows-msvc.zip x86 Windows checksum

uv-x86_64-pc-windows-msvc.zip x64 Windows checksum

uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.7

Released on 2026-08-27.

Python

Replace managed Python installations when upgrading to a newer build of the same version (#21323)

Enhancements

Support Linux s390x, ppc64le, and loongarch64 targets for cross-platform dependency resolution (#21313)

Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via UV_AZURE_ENDPOINT_URL (#21318)

Preview features

Use content-based directory hashes to deduplicate extracted wheels in the cache with the content-addressed-cache preview feature (#19693)

Bug fixes

Reject source archives with hash mismatches before persisting their extracted contents to the cache (#21248)

Other changes

remove pyx specific features (#21182, #21183, #21184, #21185, #21186)

Commits

61291a8 Bump version to 0.12.7 (#21328)
dd217b8 de-pyx-ify malformed bearer token test (#21326)
306ee9c remove references to pyx in RFC 9457 handling code (#21187)
6186dcb remove pyx authentication (#21186)
f61b300 remove pyx publication support (#21185)
ba19067 remove support for pyx-specific .whl.tar.zst format (#21184)
ad852ce fix PR labeler automation (#21325)
156dd51 Replace Python installations during build upgrades (#21323)
1a486d1 Add coverage for Python build upgrades (#21320)
17b195b Retry private Azure downloads with authentication (#21318)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [uv](https://github.com/astral-sh/uv) from 0.12.6 to 0.12.7. - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.12.6...0.12.7) --- updated-dependencies: - dependency-name: uv dependency-version: 0.12.7 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

🟡 Changes recommended

The workspace pins and lockfile must be updated consistently before approval.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Bumps the root Python workspace’s uv development dependency from 0.12.6 to 0.12.7.

Changes:

Updates the root uv dependency pin.

File summaries

File	Review
`python/pyproject.toml`	Updates the pin, but `packages/lab/pyproject.toml` and `python/uv.lock` remain on 0.12.6. Update them together. Moderate (2 votes).

Review details

Files reviewed: 1/1 changed files
Comments generated: 1
Review effort level: Balanced

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Evan Mattson (moonbox3) · 2026-09-07T01:28:43Z

Copilot address the open PR comment.

Evan Mattson (moonbox3) · 2026-09-07T06:10:06Z

Copilot address the open PR comment and fix the CI/CD failures.

Co-authored-by: moonbox3 <35585003+moonbox3@users.noreply.github.com>

Copilot · 2026-09-07T06:12:36Z

Copilot address the open PR comment and fix the CI/CD failures.

Addressed in 51ba4e5. The lab pin and shared lockfile now use uv 0.12.7; uv lock --check and the CI-equivalent frozen workspace sync succeed.

github-code-quality · 2026-09-07T06:29:41Z

Code Coverage Overview

Languages: Python

Python / code-coverage/python

The overall line coverage in commit 51ba4e5 in the dependabot/pip/pytho... branch is 91%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	`main`	`dependabot/pip/pytho...` 51ba4e5	+/-
`packages/core/a...work/_skills.py`	—	95%	—
`packages/core/a...ework/_tools.py`	—	94%	—
`packages/core/a...rk/_sessions.py`	—	94%	—
`packages/core/a...ework/_types.py`	—	93%	—
`packages/core/a...bservability.py`	—	93%	—
`packages/core/a.../_compaction.py`	—	93%	—
`packages/openai..._chat_client.py`	—	92%	—
`packages/core/a...amework/_mcp.py`	—	92%	—
`packages/ag-ui/...i/_agent_run.py`	—	91%	—
`packages/foundr...g/_responses.py`	—	87%	—

Evan Mattson (moonbox3) · 2026-09-08T00:22:13Z

Copilot fix the merge conflicts

…/uv-0.12.7 # Conflicts: # python/packages/lab/pyproject.toml # python/uv.lock Co-authored-by: moonbox3 <35585003+moonbox3@users.noreply.github.com>

Copilot · 2026-09-08T00:24:48Z

Copilot fix the merge conflicts

Resolved in merge commit 32be593. The branch now includes current main, retaining its coordinated Python dependency metadata; the frozen workspace lock check and sync pass.

Evan Mattson (moonbox3) · 2026-09-08T01:51:02Z

No files modified...

dependabot · 2026-09-08T01:51:06Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot added dependencies Usage: [Issues, PRs], Target: dependencies in the project python Usage: [Issues, PRs], Target: Python labels Sep 4, 2026

Copilot AI balanced review requested due to automatic review settings September 4, 2026 13:06

dependabot Bot requested a review from chetantoshniwal as a code owner September 4, 2026 13:06

dependabot Bot added the python Usage: [Issues, PRs], Target: Python label Sep 4, 2026

dependabot Bot requested review from Eduard van Valkenburg (eavanvalkenburg), Giles Odigwe (giles17) and Evan Mattson (moonbox3) as code owners September 4, 2026 13:06

dependabot Bot added the dependencies Usage: [Issues, PRs], Target: dependencies in the project label Sep 4, 2026

dependabot Bot requested review from Tao Chen (TaoChenOSU) and Jose Alvarez (jpalvarezl) as code owners September 4, 2026 13:06

dependabot Bot temporarily deployed to github-app-auth September 4, 2026 13:06 Inactive

github-actions Bot changed the title ~~Chore(deps-dev): Bump uv from 0.12.6 to 0.12.7 in /python~~ Python: Chore(deps-dev): Bump uv from 0.12.6 to 0.12.7 in /python Sep 4, 2026

Copilot started reviewing on behalf of Microsoft (microsoft) September 4, 2026 13:06 View session

Copilot AI reviewed Sep 4, 2026

View reviewed changes

Comment thread python/pyproject.toml

Copilot started work on behalf of Evan Mattson (moonbox3) September 7, 2026 01:29 View session

Copilot finished work on behalf of Evan Mattson (moonbox3) September 7, 2026 01:29

Copilot started work on behalf of Evan Mattson (moonbox3) September 7, 2026 06:10 View session

Fix Python uv workspace pins

51ba4e5

Co-authored-by: moonbox3 <35585003+moonbox3@users.noreply.github.com>

Copilot finished work on behalf of Evan Mattson (moonbox3) September 7, 2026 06:12

Copilot AI temporarily deployed to github-app-auth September 7, 2026 06:26 Inactive

agent-framework-automation Bot added the lab Usage: [Issues, PRs], Target: lab packages label Sep 7, 2026

Copilot started work on behalf of Evan Mattson (moonbox3) September 8, 2026 00:22 View session

Merge remote-tracking branch 'origin/main' into dependabot/pip/python…

32be593

…/uv-0.12.7 # Conflicts: # python/packages/lab/pyproject.toml # python/uv.lock Co-authored-by: moonbox3 <35585003+moonbox3@users.noreply.github.com>

Copilot finished work on behalf of Evan Mattson (moonbox3) September 8, 2026 00:25

Copilot AI temporarily deployed to github-app-auth September 8, 2026 00:31 Inactive

Evan Mattson (moonbox3) approved these changes Sep 8, 2026

View reviewed changes

Evan Mattson (moonbox3) enabled auto-merge September 8, 2026 00:33

Evan Mattson (moonbox3) closed this Sep 8, 2026

auto-merge was automatically disabled September 8, 2026 01:51
Pull request was closed

dependabot Bot deleted the dependabot/pip/python/uv-0.12.7 branch September 8, 2026 01:51

Navigation Menu

Uh oh!

Python: Chore(deps-dev): Bump uv from 0.12.6 to 0.12.7 in /python - #8061

Python: Chore(deps-dev): Bump uv from 0.12.6 to 0.12.7 in /python#8061
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/pip/python/uv-0.12.7

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Evan Mattson (moonbox3) commented Sep 7, 2026

Uh oh!

Evan Mattson (moonbox3) commented Sep 7, 2026

Uh oh!

Copilot AI commented Sep 7, 2026

Uh oh!

github-code-quality Bot commented Sep 7, 2026

Uh oh!

Evan Mattson (moonbox3) commented Sep 8, 2026

Uh oh!

Copilot AI commented Sep 8, 2026

Uh oh!

Evan Mattson (moonbox3) commented Sep 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026

0.12.7

Release Notes

Python

Enhancements

Preview features

Bug fixes

Other changes

Install uv 0.12.7

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download uv 0.12.7

0.12.7

Python

Enhancements

Preview features

Bug fixes

Other changes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Evan Mattson (moonbox3) commented Sep 7, 2026

Uh oh!

Evan Mattson (moonbox3) commented Sep 7, 2026

Uh oh!

Copilot AI commented Sep 7, 2026

Uh oh!

github-code-quality Bot commented Sep 7, 2026

Code Coverage Overview

Python / code-coverage/python

Uh oh!

Evan Mattson (moonbox3) commented Sep 8, 2026

Uh oh!

Copilot AI commented Sep 8, 2026

Uh oh!

Evan Mattson (moonbox3) commented Sep 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants