chore(deps): update dependency astral-sh/uv to v0.12.11

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
astral-sh/uv	patch	0.12.9 → 0.12.11	0.12.13 (+1)

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.12.11

Compare Source

Released on 2026-09-08.

Preview features

• Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#​20146)
• Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#​21462)

Performance

• Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#​21478)
• Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#​21468)
• Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#​21500)
• Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#​21499)
• Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#​21523)

Bug fixes

• Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#​21223)
• Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#​21543)
• Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#​21544)
• Support PowerShell virtual environment activation from UNC paths, including WSL paths (#​19159)
• Trim surrounding whitespace from entries in .python-version and .python-versions files (#​21529)
• Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#​21496)
• Warn and continue when uv python list cannot query an interpreter (#​21498)

Documentation

• Restore TOML syntax highlighting for exclude-newer examples (#​21534)

v0.12.10

Compare Source

Released on 2026-09-04.

Enhancements

• Attempt to revoke short-lived PyPI trusted-publishing tokens after uv publish completes, including when publishing fails (#​21423)

Preview features

• Omit exclude-newer-package settings for packages outside the resolution from uv.lock with the missing-exclude-newer-package-lock preview feature (#​21455)
• Show terminal dependency cycles in uv tree --invert output (#​21404)

Performance

• Speed up locking large workspaces with conflicts by excluding unrelated extras and dependency groups from conflict simplification (#​21399)
• Speed up uv publish by hashing each artifact in a single blocking task and reusing the buffer across reads (#​21389)

Bug fixes

• Prevent --locked from failing when exclude-newer-package settings differ only for packages outside the resolution (#​21454)
• Allow uv lock --check to reuse a lockfile when an absolute exclude-newer cutoff is moved later (#​19571)
• Allow uv lock --check to reuse a lockfile when a package-specific exclude-newer cutoff is disabled (#​21450)
• Require an explicit --name when uv init would infer a project name reserved for a Python interpreter (#​21395)
• Write package-specific exclude-newer cutoffs to uv.lock in a deterministic order (#​21453)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 09:59 PM, only on Sunday and Saturday (* 9-21 * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 6c696502-a54b-4fb2-923d-4bdce5de0be0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}