Skip to content

chore(deps): bump the container-bases group across 1 directory with 2 updates - #85

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/container-bases-0fbb85add5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/container-bases-0fbb85add5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the container-bases group with 2 updates in the / directory: astral-sh/uv and nginxinc/nginx-unprivileged.

Updates astral-sh/uv from 0.12.10 to 0.12.15

Release notes

Sourced from astral-sh/uv's releases.

0.12.15

Release Notes

Released on 2026-09-15.

This release fixes a regression in 0.12.14 that lead to rejecting valid installation commands such as using uv pip install --system in python:* docker images or when using uv pip install --target .. (#21699)

Performance

  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

  • Revert "Reject symlinked wheel installation destinations" (#21699)

Install uv 0.12.15

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.15/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.15/uv-installer.ps1 | iex"

Download uv 0.12.15

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.15

Released on 2026-09-15.

This release fixes a regression in 0.12.14 that lead to rejecting valid installation commands such as using uv pip install --system in python:* docker images or when using uv pip install --target .. (#21699)

Performance

  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

  • Revert "Reject symlinked wheel installation destinations" (#21699)

0.12.14

Released on 2026-09-15.

Package-operation errors now use uv's standard diagnostics, with consistent hints and compact, labeled cause chains. (#17110, #21599, #21603)

Package-operation exit codes now reflect the underlying cause: expected failures return 1, while recognized operational and internal failures return 2. (#17110)

Enhancements

  • Resume interrupted downloads with HTTP Range requests when supported (#21570)
  • Show underlying causes and hints in user warnings (#21565)
  • Show resolver hints for failed uv tool upgrade operations (#21566)

Preview features

  • Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#21618)

Performance

  • Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#21619)
  • Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#21593)
  • Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#21621)

Bug fixes

  • Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#21672)
  • Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#21625)
  • Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#21639)
  • Redact credentials and signatures from missing-path-segment URL errors (#21616)
  • Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#21640)
  • Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#21559)
  • Suppress managed-Python fallback warnings under --quiet (#21565)
  • Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#21566)

... (truncated)

Commits

Updates nginxinc/nginx-unprivileged from 1.31.5-alpine to 1.31.6-alpine

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the container-bases group with 2 updates in the / directory: [astral-sh/uv](https://github.com/astral-sh/uv) and nginxinc/nginx-unprivileged.


Updates `astral-sh/uv` from 0.12.10 to 0.12.15
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.10...0.12.15)

Updates `nginxinc/nginx-unprivileged` from 1.31.5-alpine to 1.31.6-alpine

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: container-bases
- dependency-name: nginxinc/nginx-unprivileged
  dependency-version: 1.31.6-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: container-bases
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants