chore(deps-dev): Update uv requirement from 0.12.10 to 0.12.17

[dependabot]

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.12.17

Release Notes

Released on 2026-09-18.

Enhancements

• Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#21780)

Preview features

• Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#21651)
• Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#20746)
• Keep uv workspace metadata read-only unless --sync is provided (#21821)
• Apply uv check lock modes when retrieving workspace metadata (#21821)

Performance

• Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#21650)
• Reduce resolver allocations when deduplicating package and distribution requests (#21810)

Bug fixes

• Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#21825)

Documentation

• Clarify the 0.12.14 and 0.12.15 release notes (#21817)

Install uv 0.12.17

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"

Download uv 0.12.17

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.17

Released on 2026-09-18.

Enhancements

• Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#21780)

Preview features

• Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#21651)
• Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#20746)
• Keep uv workspace metadata read-only unless --sync is provided (#21821)
• Apply uv check lock modes when retrieving workspace metadata (#21821)

Performance

• Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#21650)
• Reduce resolver allocations when deduplicating package and distribution requests (#21810)

Bug fixes

• Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#21825)

Documentation

• Clarify the 0.12.14 and 0.12.15 release notes (#21817)

0.12.16

Released on 2026-09-17.

Python

• Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#21741)

Enhancements

• Verify downloaded wheels and source distributions against hashes supplied by package indexes (#21562)
• Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#21467)
• Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#21766)
• Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#21779)

Preview features

• Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#21163)
• Honor configured and command-line index settings, including credentials, in uv upgrade (#21776)
• Allow uv check to run in projects that are not managed by uv and outside workspaces (#21777)
• Respect --python and UV_PYTHON when selecting the Python version for uv check (#21744)

... (truncated)

Commits

• 6355000 Bump version to 0.12.17 (#21828)
• 2b1d1e5 Separate requirement scope from diagnostic origin (#21799)
• e79e0d4 Update Rust crate rcgen to v0.14.9 (#21662)
• e1b4ee3 Borrow build exclude patterns to avoid quadratic deduplication (#21650)
• 52bf402 Add minimum libc versions for universal resolution (#21651)
• 5e304f1 Publish documentation with STS credentials (#21595)
• 01776d7 Parse requirements-style inputs into RequirementsInput (#21787)
• 3e180b2 Widen required-environment forks to wheel compatibility boundaries (#21825)
• a17ed60 Avoid writing lockfiles when reading workspace metadata (#21821)
• 140cff9 Re-enable GitLab registry publishing tests (#21823)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[read-the-docs-community]

Documentation build overview

📚 CycloneDX Python SBOM Tool | 🛠️ Build #34769759 | 📁 Comparing ec9fc1f against latest (f6f4941)

  🔍 Preview build  

1 file changed

± changelog.html

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}