[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.13.7 to 0.13.8.

Release notes

Sourced from astral-sh/uv's releases.

0.13.8

Release Notes

Released on 2026-11-12.

Python

• Add CPython 3.16.0a2 (#23211)
• Update managed CPython 3.11, 3.12, 3.13, 3.14, and 3.15 builds to include pip 26.3, zlib 1.4, and Expat 2.10.0 (#23211)
• Update GraalPy 3.13.0 to build 25.5.5 (#23088)

Preview features

• Install wheel variants from local paths, direct URLs, and Git repositories in platform-specific resolutions (#22720, #22722, #22724)
• Detect x86-64 microarchitecture levels and AArch64 architecture versions when selecting wheel variants (#22832, #22949)
• Detect Google TPUs up when selecting wheel variants (#23066, #23121)
• Fix CPU detection for wheel variants on macOS with GraalPy (#23089)
• Report quarantined packages in uv audit when index URLs differ only in redacted query values (#23129)

Performance

• Avoid duplicate environment builds when concurrent uvx or uv run --with invocations need the same environment (#23123)

Bug fixes

• Restrict Unix plaintext credential files to owner-only permissions (#23209)
• Honor per-index exclude-newer-package cutoffs during resolution (#23122)
• Respect negative extra markers on constraints (#23144)
• Resolve dependencies of recursive extras from a scoped override (#23210)
• Fix activate.bat for Windows virtual environments whose paths contain apostrophes (#23152)

Documentation

• Document the shell requirement for GitLab CI job images (#23078)

Install uv 0.13.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.8/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.13.8/uv-installer.ps1 | iex"

Download uv 0.13.8

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.13.8

Released on 2026-11-12.

Python

• Add CPython 3.16.0a2 (#23211)
• Update managed CPython 3.11, 3.12, 3.13, 3.14, and 3.15 builds to include pip 26.3, zlib 1.4, and Expat 2.10.0 (#23211)
• Update GraalPy 3.13.0 to build 25.5.5 (#23088)

Preview features

• Install wheel variants from local paths, direct URLs, and Git repositories in platform-specific resolutions (#22720, #22722, #22724)
• Detect x86-64 microarchitecture levels and AArch64 architecture versions when selecting wheel variants (#22832, #22949)
• Detect Google TPUs up when selecting wheel variants (#23066, #23121)
• Fix CPU detection for wheel variants on macOS with GraalPy (#23089)
• Report quarantined packages in uv audit when index URLs differ only in redacted query values (#23129)

Performance

• Avoid duplicate environment builds when concurrent uvx or uv run --with invocations need the same environment (#23123)

Bug fixes

• Restrict Unix plaintext credential files to owner-only permissions (#23209)
• Honor per-index exclude-newer-package cutoffs during resolution (#23122)
• Respect negative extra markers on constraints (#23144)
• Resolve dependencies of recursive extras from a scoped override (#23210)
• Fix activate.bat for Windows virtual environments whose paths contain apostrophes (#23152)

Documentation

• Document the shell requirement for GitLab CI job images (#23078)

Commits

• 3d97a6a Bump version to 0.13.8 (#23225)
• 6ff8760 Use the runner’s gcloud in registry tests (#23198)
• d08ae21 Avoid running the same generators twice in CI (#23200)
• 2709552 Use the runner’s btrfs-progs in Linux tests (#23197)
• f45ea9b Sync latest Python releases, CPython 3.16.0a2 (#23211)
• cb44dfa fix: preserve apostrophes in Windows activation paths (#23152)
• 1c4fe21 Restrict Unix plaintext credential store permissions (#23209)
• 5122f6e Flatten recursive extras introduced by scoped overrides (#23210)
• e3fa056 Link issue artifacts to the workflow's run name (#23208)
• a2dd82a Update Rust crate tokio to v1.53.2 (#23169)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (34348ef) to head (5590d15).

Additional details and impacted files

@@            Coverage Diff            @@
##               dev      #778   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           74        74           
  Lines         9651      9651           
=========================================
  Hits          9651      9651           

Flag	Coverage Δ
test_unit	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.