[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-minor-and-patch group with 5 updates in the /deploy directory:

Package	From	To
oven/bun	1.3.14-alpine	1.4.2-alpine
golang	1.26.6-alpine3.23	1.27.0-alpine3.23
alpine	3.23.5	3.24.1
astral-sh/uv	0.11.30	0.12.17
python	3.12.13-slim-bookworm	3.14.6-slim-bookworm

Updates oven/bun from 1.3.14-alpine to 1.4.2-alpine

Updates golang from 1.26.6-alpine3.23 to 1.27.0-alpine3.23

Updates alpine from 3.23.5 to 3.24.1

Updates astral-sh/uv from 0.11.30 to 0.12.17

Release notes

Sourced from astral-sh/uv's releases.

0.12.17

Release Notes

Released on 2026-09-18.

Enhancements

• Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#21780)

Preview features

• Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#21651)
• Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#20746)
• Keep uv workspace metadata read-only unless --sync is provided (#21821)
• Apply uv check lock modes when retrieving workspace metadata (#21821)

Performance

• Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#21650)
• Reduce resolver allocations when deduplicating package and distribution requests (#21810)

Bug fixes

• Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#21825)

Documentation

• Clarify the 0.12.14 and 0.12.15 release notes (#21817)

Install uv 0.12.17

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"

Download uv 0.12.17

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.17

Released on 2026-09-18.

Enhancements

• Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#21780)

Preview features

• Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#21651)
• Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#20746)
• Keep uv workspace metadata read-only unless --sync is provided (#21821)
• Apply uv check lock modes when retrieving workspace metadata (#21821)

Performance

• Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#21650)
• Reduce resolver allocations when deduplicating package and distribution requests (#21810)

Bug fixes

• Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#21825)

Documentation

• Clarify the 0.12.14 and 0.12.15 release notes (#21817)

0.12.16

Released on 2026-09-17.

Python

• Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#21741)

Enhancements

• Verify downloaded wheels and source distributions against hashes supplied by package indexes (#21562)
• Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#21467)
• Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#21766)
• Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#21779)

Preview features

• Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#21163)
• Honor configured and command-line index settings, including credentials, in uv upgrade (#21776)
• Allow uv check to run in projects that are not managed by uv and outside workspaces (#21777)
• Respect --python and UV_PYTHON when selecting the Python version for uv check (#21744)

... (truncated)

Commits

• 6355000 Bump version to 0.12.17 (#21828)
• 2b1d1e5 Separate requirement scope from diagnostic origin (#21799)
• e79e0d4 Update Rust crate rcgen to v0.14.9 (#21662)
• e1b4ee3 Borrow build exclude patterns to avoid quadratic deduplication (#21650)
• 52bf402 Add minimum libc versions for universal resolution (#21651)
• 5e304f1 Publish documentation with STS credentials (#21595)
• 01776d7 Parse requirements-style inputs into RequirementsInput (#21787)
• 3e180b2 Widen required-environment forks to wheel compatibility boundaries (#21825)
• a17ed60 Avoid writing lockfiles when reading workspace metadata (#21821)
• 140cff9 Re-enable GitLab registry publishing tests (#21823)
• Additional commits viewable in compare view

Updates python from 3.12.13-slim-bookworm to 3.14.6-slim-bookworm