Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 17, 2025

Bumps astral-sh/uv from 0.8.17 to 0.8.18.

Changelog

Sourced from astral-sh/uv's changelog.

0.8.18

Released on 2025-09-17.

Enhancements

  • Add PyG packages to torch backend (#15911)
  • Add handling for unnamed conda environments in base environment detection (#15681)
  • Allow selection of debug build interpreters (#11520)
  • Improve uv init defaults for native build backend cache keys (#15705)
  • Error when pyproject.toml target does not exist for dependency groups (#15831)
  • Infer check URL from publish URL when known (#15886)
  • Support Gitlab CI/CD as a trusted publisher (#15583)
  • Add GraalPy 25.0.0 with support for Python 3.12 (#15900)
  • Add --no-clear to uv venv to disable removal prompts (#15795)
  • Add conflict detection between --only-group and --extra flags (#15788)
  • Allow [project] to be missing from a pyproject.toml (#14113)
  • Always treat conda environments named base and root as base environments (#15682)
  • Improve log message when direct build for uv_build is skipped (#15898)
  • Log when the cache is disabled (#15828)
  • Show pyx organization name after authenticating (#15823)
  • Use _CONDA_ROOT to detect Conda base environments (#15680)
  • Include blake2b hash in uv publish upload form (#15794)
  • Fix misleading debug message when removing environments in uv sync (#15881)

Deprecations

  • Deprecate tool.uv.dev-dependencies (#15469)
  • Revert "feat(ci): build loongarch64 binaries in CI (#15387)" (#15820)

Preview features

  • Propagate preview flag to client for native-auth feature (#15872)
  • Store native credentials for realms with the https scheme stripped (#15879)
  • Use the root index URL when retrieving credentials from the native store (#15873)

Bug fixes

  • Fix uv sync --no-sources not switching from editable to registry installations (#15234)
  • Avoid display of an empty string when a path is the working directory (#15897)
  • Allow cached environment reuse with @latest (#15827)
  • Allow escaping spaces in --env-file handling (#15815)
  • Avoid ANSI codes in debug! messages (#15843)
  • Improve BSD tag construction (#15829)
  • Include SHA when listing lockfile changes (#15817)
  • Invert the logic for determining if a path is a base conda environment (#15679)
  • Load credentials for explicit members when lowering (#15844)
  • Re-add triton as a torch backend package (#15910)
  • Respect UV_INSECURE_NO_ZIP_VALIDATION=1 in duplicate header errors (#15912)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

📚 Documentation preview 📚: https://datacube-explorer--874.org.readthedocs.build/en/874/

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.8.17 to 0.8.18.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/commits)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.8.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Sep 17, 2025
Copy link

codecov bot commented Sep 17, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.32%. Comparing base (f6ddc14) to head (4d21c07).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files
@@           Coverage Diff            @@
##           develop     #874   +/-   ##
========================================
  Coverage    84.32%   84.32%           
========================================
  Files           35       35           
  Lines         4230     4230           
  Branches       537      537           
========================================
  Hits          3567     3567           
  Misses         467      467           
  Partials       196      196           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pjonsson pjonsson merged commit c2c0811 into develop Sep 17, 2025
14 checks passed
@pjonsson pjonsson deleted the dependabot/docker/astral-sh/uv-0.8.18 branch September 17, 2025 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file docker Pull requests that update Docker code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant