[renovate]

This PR contains the following updates:

Package	Type	Update	Change
uv	tools	patch	0.13.6 → 0.13.7

---

Release Notes

astral-sh/uv (uv)

v0.13.7

Compare Source

Released on 2026-11-03.

Preview features

• Add --output-version to uv workspace metadata for requesting a specific schema version (#​22958)
• Report aliased OSV records as a single vulnerability in uv audit (#​22990)

Bug fixes

• Treat workspace member paths added by uv init or uv add as literals instead of glob patterns (#​23008)
• Prevent uv's Windows trampolines from closing handles they did not inherit (#​22977)
• Allow uvx to run tools with CPython builds whose versions contain local identifiers (#​23013)
• Generate valid module names when uv init creates packaged projects whose names start with a digit (#​23022)
• Preserve comments around existing inline dependency groups when uv add updates a group (#​23017)
• Allow uv remove with an empty inline tool.uv.sources table (#​23012)

Documentation

• Correct the cache-keys inline table example (#​22984)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no		no	0.53s
✅ REPOSITORY	git_diff	yes		no		no	0.4s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ REPOSITORY	betterleaks	yes		no		no	0.97s
✅ REPOSITORY	checkov	yes		no		no	18.99s
✅ REPOSITORY	devskim	yes		no		no	1.97s
✅ REPOSITORY	dustilock	yes		no		no	0.02s
✅ REPOSITORY	grype	yes		no		no	84.92s
✅ REPOSITORY	kingfisher	yes		no		no	10.23s
✅ REPOSITORY	osv-scanner	yes		no		no	0.15s
✅ REPOSITORY	secretlint	yes		no		no	1.26s
✅ REPOSITORY	syft	yes		no		no	2.27s
✅ REPOSITORY	trivy	yes		no		no	14.12s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.18s
✅ REPOSITORY	trufflehog	yes		no		no	2.79s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository