[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
uv (source, changelog)	0.13.7 → 0.13.8

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

---

Release Notes

astral-sh/uv (uv)

v0.13.8

Compare Source

Released on 2026-11-12.

Python

• Add CPython 3.16.0a2 (#​23211)
• Update managed CPython 3.11, 3.12, 3.13, 3.14, and 3.15 builds to include pip 26.3, zlib 1.4, and Expat 2.10.0 (#​23211)
• Update GraalPy 3.13.0 to build 25.5.5 (#​23088)

Preview features

• Install wheel variants from local paths, direct URLs, and Git repositories in platform-specific resolutions (#​22720, #​22722, #​22724)
• Detect x86-64 microarchitecture levels and AArch64 architecture versions when selecting wheel variants (#​22832, #​22949)
• Detect Google TPUs up when selecting wheel variants (#​23066, #​23121)
• Fix CPU detection for wheel variants on macOS with GraalPy (#​23089)
• Report quarantined packages in uv audit when index URLs differ only in redacted query values (#​23129)

Performance

• Avoid duplicate environment builds when concurrent uvx or uv run --with invocations need the same environment (#​23123)

Bug fixes

• Restrict Unix plaintext credential files to owner-only permissions (#​23209)
• Honor per-index exclude-newer-package cutoffs during resolution (#​23122)
• Respect negative extra markers on constraints (#​23144)
• Resolve dependencies of recursive extras from a scoped override (#​23210)
• Fix activate.bat for Windows virtual environments whose paths contain apostrophes (#​23152)

Documentation

• Document the shell requirement for GitLab CI job images (#​23078)

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Open the Diff Tour for this PR in Sourcegraph