Skip to content

Infer Darwin release markers from macOS wheel tags - #21766

Merged
charliermarsh merged 5 commits into
mainfrom
charlie/macos-release-markers
Sep 17, 2026
Merged

Infer Darwin release markers from macOS wheel tags#21766
charliermarsh merged 5 commits into
mainfrom
charlie/macos-release-markers

Conversation

@charliermarsh

@charliermarsh charliermarsh commented Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Summary

We now include macOS deployment targets in wheel-implied markers, so that required-environments can require a wheel for a specific Darwin release:

[tool.uv]
required-environments = [
    "sys_platform == 'darwin' and platform_machine == 'arm64' and platform_release == '24.0.0'",
]

Darwin 24 corresponds to macOS 15. We backtrack if a package without a usable source distribution has no wheel covering that baseline. (Wheels targeting newer macOS releases remain in the lockfile, since they could be selected on newer platforms.)

We compare platform_release numerically on Darwin and translate macOS wheel tags into Darwin lower bounds, including the architecture-specific minimum for universal2 wheels.

@astral-sh-bot

astral-sh-bot Bot commented Sep 16, 2026

Copy link
Copy Markdown

uv test inventory changes

This PR changes the tests when compared with the main base revision.

  • Added tests: 3
  • Removed tests: 0
  • Changed suites: 3
uv-distribution-types: +1 / -0

Added:

  • uv-distribution-types::prioritized_distribution::tests::test_macos_platform_markers

Removed: none

uv-pep508: +1 / -0

Added:

  • uv-pep508::marker::tree::test::darwin_platform_release

Removed: none

uv::lock: +1 / -0

Added:

  • uv::lock::lock::lock_required_environment_macos_release

Removed: none

@charliermarsh
charliermarsh marked this pull request as ready for review September 16, 2026 21:33
@charliermarsh charliermarsh added the enhancement New feature or improvement to existing functionality label Sep 16, 2026
@charliermarsh charliermarsh mentioned this pull request Sep 16, 2026
Closed
@charliermarsh
charliermarsh added this pull request to stack #21770 September 17, 2026 00:34
konstin
konstin approved these changes Sep 17, 2026
View reviewed changes

@konstin konstin left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The darwin <-> macOS version translation needs fixing, otherwise looking good!

Comment thread docs/concepts/resolution.md Outdated
Comment thread crates/uv-distribution-types/src/prioritized_distribution.rs
Comment thread crates/uv/tests/lock/lock.rs
let context = uv_test::test_context!("3.12").with_filters(
server
.files()
.map(|(filename, hash)| (hash.to_owned(), format!("[SHA256:{filename}]"))),

@konstin konstin Sep 17, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need to filter those out here?

@charliermarsh charliermarsh Sep 17, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We seem to do this elsewhere. I think it's to ensure that we don't flake when generated wheels are slightly different?

@charliermarsh
charliermarsh merged commit a432861 into main Sep 17, 2026
120 checks passed
@charliermarsh
charliermarsh deleted the charlie/macos-release-markers branch September 17, 2026 15:43
@BrewTestBot BrewTestBot mentioned this pull request Sep 18, 2026
Merged
luketainton pushed a commit to luketainton/luke_rsu that referenced this pull request Sep 18, 2026
renovate[bot] @luketainton
chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.16 (#46)
c527709 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | stage | patch | `0.12.15` → `0.12.16` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/11) for more information.

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

### [`v0.12.16`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01216)

[Compare Source](astral-sh/uv@0.12.15...0.12.16)

Released on 2026-09-17.

##### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8 ([#&#8203;21741](astral-sh/uv#21741))

##### Enhancements

- Verify downloaded wheels and source distributions against hashes supplied by package indexes ([#&#8203;21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for verifying downloaded build dependencies ([#&#8203;21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments` using macOS wheel deployment targets ([#&#8203;21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports ([#&#8203;21779](astral-sh/uv#21779))

##### Preview features

- Support `lock-without-metadata` across all dependency types while retaining `package.metadata` for remote URL dependencies to enable offline validation ([#&#8203;21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including credentials, in `uv upgrade` ([#&#8203;21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and outside workspaces ([#&#8203;21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version for `uv check` ([#&#8203;21744](astral-sh/uv#21744))

##### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs ([#&#8203;21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached distributions ([#&#8203;21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths ([#&#8203;20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches active version pins ([#&#8203;21742](astral-sh/uv#21742))
- Handle malformed index URLs without panicking when credentials are configured ([#&#8203;21784](astral-sh/uv#21784))
- Report a configuration error instead of panicking for proxy URLs without a host ([#&#8203;21781](astral-sh/uv#21781))
- Return a credential-redacted error instead of panicking when a URL cannot be converted to a path ([#&#8203;21783](astral-sh/uv#21783))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC45Ny40IiwidXBkYXRlZEluVmVyIjoiNDQuOTcuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: https://git.tainton.uk/repos/rsu/pulls/46
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton pushed a commit to luketainton/repos_labmcp that referenced this pull request Sep 18, 2026
renovate[bot] @luketainton
chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.16 (#57)
d98f281 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | final | patch | `0.12.15` → `0.12.16` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/51) for more information.

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

### [`v0.12.16`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01216)

[Compare Source](astral-sh/uv@0.12.15...0.12.16)

Released on 2026-09-17.

##### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8 ([#&#8203;21741](astral-sh/uv#21741))

##### Enhancements

- Verify downloaded wheels and source distributions against hashes supplied by package indexes ([#&#8203;21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for verifying downloaded build dependencies ([#&#8203;21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments` using macOS wheel deployment targets ([#&#8203;21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports ([#&#8203;21779](astral-sh/uv#21779))

##### Preview features

- Support `lock-without-metadata` across all dependency types while retaining `package.metadata` for remote URL dependencies to enable offline validation ([#&#8203;21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including credentials, in `uv upgrade` ([#&#8203;21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and outside workspaces ([#&#8203;21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version for `uv check` ([#&#8203;21744](astral-sh/uv#21744))

##### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs ([#&#8203;21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached distributions ([#&#8203;21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths ([#&#8203;20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches active version pins ([#&#8203;21742](astral-sh/uv#21742))
- Handle malformed index URLs without panicking when credentials are configured ([#&#8203;21784](astral-sh/uv#21784))
- Report a configuration error instead of panicking for proxy URLs without a host ([#&#8203;21781](astral-sh/uv#21781))
- Return a credential-redacted error instead of panicking when a URL cannot be converted to a path ([#&#8203;21783](astral-sh/uv#21783))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC45Ny40IiwidXBkYXRlZEluVmVyIjoiNDQuOTcuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/57
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
@saidsef saidsef mentioned this pull request Sep 20, 2026
Closed
5 tasks done
hbjydev pushed a commit to hbjydev/phoebe that referenced this pull request Sep 20, 2026
hayden-bot git.hayden.moe Instance
fix(github-release): update release uv (0.12.13 → 0.12.17) (#632)
fa419d7 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [uv](https://github.com/astral-sh/uv) | tools | patch | `0.12.13` → `0.12.17` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/141) for more information.

---

### Release Notes

<details>
<summary>astral-sh/uv (uv)</summary>

### [`v0.12.17`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01217)

[Compare Source](astral-sh/uv@0.12.16...0.12.17)

Released on 2026-09-18.

##### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports ([#&#8203;21780](astral-sh/uv#21780))

##### Preview features

- Set minimum glibc and musl versions that universal resolutions must support with `minimum-libc-version` ([#&#8203;21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their declared package names or versions ([#&#8203;20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided ([#&#8203;21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata ([#&#8203;21821](astral-sh/uv#21821))

##### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic deduplication ([#&#8203;21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and distribution requests ([#&#8203;21810](astral-sh/uv#21810))

##### Bug fixes

- Prevent `required-environments` from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline ([#&#8203;21825](astral-sh/uv#21825))

##### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes ([#&#8203;21817](astral-sh/uv#21817))

### [`v0.12.16`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01216)

[Compare Source](astral-sh/uv@0.12.15...0.12.16)

Released on 2026-09-17.

##### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8 ([#&#8203;21741](astral-sh/uv#21741))

##### Enhancements

- Verify downloaded wheels and source distributions against hashes supplied by package indexes ([#&#8203;21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for verifying downloaded build dependencies ([#&#8203;21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments` using macOS wheel deployment targets ([#&#8203;21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports ([#&#8203;21779](astral-sh/uv#21779))

##### Preview features

- Support `lock-without-metadata` across all dependency types while retaining `package.metadata` for remote URL dependencies to enable offline validation ([#&#8203;21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including credentials, in `uv upgrade` ([#&#8203;21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and outside workspaces ([#&#8203;21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version for `uv check` ([#&#8203;21744](astral-sh/uv#21744))

##### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs ([#&#8203;21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached distributions ([#&#8203;21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths ([#&#8203;20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches active version pins ([#&#8203;21742](astral-sh/uv#21742))
- Handle malformed index URLs without panicking when credentials are configured ([#&#8203;21784](astral-sh/uv#21784))
- Report a configuration error instead of panicking for proxy URLs without a host ([#&#8203;21781](astral-sh/uv#21781))
- Return a credential-redacted error instead of panicking when a URL cannot be converted to a path ([#&#8203;21783](astral-sh/uv#21783))

### [`v0.12.15`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01215)

[Compare Source](astral-sh/uv@0.12.14...0.12.15)

Released on 2026-09-15.

This release fixes a regression in 0.12.14 that lead to rejecting valid installation commands such as using
`uv pip install --system` in `python:*` docker images or when using `uv pip install --target .`. ([#&#8203;21699](astral-sh/uv#21699))

##### Performance

- Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes ([#&#8203;21675](astral-sh/uv#21675))

##### Bug fixes

- Revert "Reject symlinked wheel installation destinations" ([#&#8203;21699](astral-sh/uv#21699))

### [`v0.12.14`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01214)

[Compare Source](astral-sh/uv@0.12.13...0.12.14)

Released on 2026-09-15.

Package-operation errors now use uv's standard diagnostics, with consistent hints and compact, labeled cause chains. ([#&#8203;17110](astral-sh/uv#17110), [#&#8203;21599](astral-sh/uv#21599), [#&#8203;21603](astral-sh/uv#21603))

Package-operation exit codes now reflect the underlying cause: expected failures return 1, while recognized operational and internal failures return 2. ([#&#8203;17110](astral-sh/uv#17110))

##### Enhancements

- Resume interrupted downloads with HTTP Range requests when supported ([#&#8203;21570](astral-sh/uv#21570))
- Show underlying causes and hints in user warnings ([#&#8203;21565](astral-sh/uv#21565))
- Show resolver hints for failed `uv tool upgrade` operations ([#&#8203;21566](astral-sh/uv#21566))

##### Preview features

- Export multiple dependency selections from a shared lockfile in one `uv export --batch` invocation with the `batch-export` preview feature ([#&#8203;21618](astral-sh/uv#21618))

##### Performance

- Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task ([#&#8203;21619](astral-sh/uv#21619))
- Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers ([#&#8203;21593](astral-sh/uv#21593))
- Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task ([#&#8203;21621](astral-sh/uv#21621))

##### Bug fixes

- Select releases that satisfy `required-environments` within each resolver fork instead of combining incompatible wheel coverage across forks ([#&#8203;21672](astral-sh/uv#21672))
- Install packages with paths longer than `MAX_PATH` on Windows systems without long-path support enabled ([#&#8203;21625](astral-sh/uv#21625))
- Prevent `uv python install` from overwriting valid unmanaged Python symlinks with relative targets on Unix ([#&#8203;21639](astral-sh/uv#21639))
- Redact credentials and signatures from missing-path-segment URL errors ([#&#8203;21616](astral-sh/uv#21616))
- Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation ([#&#8203;21640](astral-sh/uv#21640))
- Prefer `bin/python` over `bin/python3` when discovering interpreters in Unix environments ([#&#8203;21559](astral-sh/uv#21559))
- Suppress managed-Python fallback warnings under `--quiet` ([#&#8203;21565](astral-sh/uv#21565))
- Keep failed `uv tool upgrade` errors visible with `-q` while suppressing them with `-qq` ([#&#8203;21566](astral-sh/uv#21566))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC45MC4yIiwidXBkYXRlZEluVmVyIjoiNDQuMTA0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2dpdGh1Yi1yZWxlYXNlIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.hayden.moe/hayden/phoebe/pulls/632
This was referenced Sep 21, 2026
Merged
Merged
Merged
Merged
Merged
jylenhof pushed a commit to jylenhof/mise-update-tool that referenced this pull request Sep 22, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade local tools (#94)
e2d7634 
Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `aube`
- `editorconfig-checker`
- `ghalint`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint aube
editorconfig-checker ghalint pinact pipx:gh-action-pulse prek rumdl
shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (3 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `editorconfig-checker` | `4.0.1` → `4.0.2` | `4.0.1` → `4.0.2` |
| `rumdl` | `0.2.73` → `0.2.74` | `0.2.73` → `0.2.74` |
| `uv` | `0.12.15` → `0.12.17` | `0.12.15` → `0.12.17` |

</details>

<details>
<summary>Release notes (3 tools)</summary>

<details>
<summary>editorconfig-checker: `4.0.1` → `4.0.2`
(editorconfig-checker/editorconfig-checker)</summary>

### v4.0.2

##
[4.0.2](editorconfig-checker/editorconfig-checker@v4.0.1...v4.0.2)
(2026-09-16)


### Bug Fixes

* **encoding:** detect 7-bit content with control characters as ASCII
([#629](editorconfig-checker/editorconfig-checker#629))
([289dc53](editorconfig-checker/editorconfig-checker@289dc53)),
closes
[#627](editorconfig-checker/editorconfig-checker#627)
* keep the file's existing line ending when adding a final newline
([#622](editorconfig-checker/editorconfig-checker#622))
([cea460f](editorconfig-checker/editorconfig-checker@cea460f))

</details>
<details>
<summary>rumdl: `0.2.73` → `0.2.74` (rvben/rumdl)</summary>

### v0.2.74

### Added

- **code-block-tools**: add explicit rumdl, oxfmt, djlint, and shuck
modes
([77f0e55](rvben/rumdl@77f0e55))

### Fixed

- **MD092**: allow scoped suppression of documented conflicts
([6f9a6cb](rvben/rumdl@6f9a6cb))
- **MD032**: keep parent list items open after nested lists
([952c507](rvben/rumdl@952c507))
- **MD026**: delete a setext heading's trailing punctuation where it
stands
([7f0981c](rvben/rumdl@7f0981c))
- **parser**: keep link reference definitions out of a setext heading
([80fdfc3](rvben/rumdl@80fdfc3))
- **parser**: read the whole paragraph as a setext heading
([5d7b046](rvben/rumdl@5d7b046))
- **parser**: lint the headings a short or quoted setext underline makes
([e183924](rvben/rumdl@e183924))
- **parser**: keep a container open below a block written inside it
([e2c13b7](rvben/rumdl@e2c13b7))
- **parser**: read an empty list item under a paragraph as its text
([68a04ae](rvben/rumdl@68a04ae))
- **MD013**: write one space at a soft break after a trailing space
([6388794](rvben/rumdl@6388794))
- **MD013**: keep a whole-line display math expression on its own line
([cc518ab](rvben/rumdl@cc518ab))
- **MD013**: read no math span through a code span
([f069246](rvben/rumdl@f069246))
- **MD013**: keep a definition-list marker written on its o… (truncated)

</details>
<details>
<summary>uv: `0.12.15` → `0.12.17` (astral-sh/uv)</summary>

### 0.12.16

## Release Notes

Released on 2026-09-17.

### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8
([#21741](astral-sh/uv#21741))

### Enhancements

- Verify downloaded wheels and source distributions against hashes
supplied by package indexes
([#21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for
verifying downloaded build dependencies
([#21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments`
using macOS wheel deployment targets
([#21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of
panicking during frozen exports
([#21779](astral-sh/uv#21779))

### Preview features

- Support `lock-without-metadata` across all dependency types while
retaining `package.metadata` for remote URL dependencies to enable
offline validation
([#21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including
credentials, in `uv upgrade`
([#21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and
outside workspaces
([#21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version
for `uv check` ([#21744](astral-sh/uv#21744))

### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs
([#21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached
distributions ([#21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when
backend metadata reports absolute paths
([#20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches
active versi… (truncated)

### 0.12.17

## Release Notes

Released on 2026-09-18.

### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error
instead of panicking during frozen exports
([#21780](astral-sh/uv#21780))

### Preview features

- Set minimum glibc and musl versions that universal resolutions must
support with `minimum-libc-version`
([#21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their
declared package names or versions
([#20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided
([#21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata
([#21821](astral-sh/uv#21821))

### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic
deduplication ([#21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and
distribution requests
([#21810](astral-sh/uv#21810))

### Bug fixes

- Prevent `required-environments` from selecting package versions whose
wheels require a newer macOS version than the configured Darwin baseline
([#21825](astral-sh/uv#21825))

### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes
([#21817](astral-sh/uv#21817))

## Install uv 0.12.17

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"
```

## Download uv 0.12.17

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://rele… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof pushed a commit to jylenhof/gh-action-pulse that referenced this pull request Sep 22, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade uv (#250)
fca7d79 
Automated mise tool upgrades from local config.

mise-managed tools:
- `uv`

Command: `mise upgrade --bump --local uv`

<details>
<summary>Version changelog (uv)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `uv` | `0.12.15` → `0.12.17` | `0.12.15` → `0.12.17` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>uv: `0.12.15` → `0.12.17` (astral-sh/uv)</summary>

### 0.12.16

## Release Notes

Released on 2026-09-17.

### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8
([#21741](astral-sh/uv#21741))

### Enhancements

- Verify downloaded wheels and source distributions against hashes
supplied by package indexes
([#21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for
verifying downloaded build dependencies
([#21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments`
using macOS wheel deployment targets
([#21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of
panicking during frozen exports
([#21779](astral-sh/uv#21779))

### Preview features

- Support `lock-without-metadata` across all dependency types while
retaining `package.metadata` for remote URL dependencies to enable
offline validation
([#21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including
credentials, in `uv upgrade`
([#21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and
outside workspaces
([#21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version
for `uv check` ([#21744](astral-sh/uv#21744))

### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs
([#21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached
distributions ([#21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when
backend metadata reports absolute paths
([#20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches
active versi… (truncated)

### 0.12.17

## Release Notes

Released on 2026-09-18.

### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error
instead of panicking during frozen exports
([#21780](astral-sh/uv#21780))

### Preview features

- Set minimum glibc and musl versions that universal resolutions must
support with `minimum-libc-version`
([#21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their
declared package names or versions
([#20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided
([#21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata
([#21821](astral-sh/uv#21821))

### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic
deduplication ([#21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and
distribution requests
([#21810](astral-sh/uv#21810))

### Bug fixes

- Prevent `required-environments` from selecting package versions whose
wheels require a newer macOS version than the configured Darwin baseline
([#21825](astral-sh/uv#21825))

### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes
([#21817](astral-sh/uv#21817))

## Install uv 0.12.17

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"
```

## Download uv 0.12.17

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://rele… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof pushed a commit to jylenhof/github-actions-resources that referenced this pull request Sep 22, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade local tools (#107)
9ed23c2 
Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `editorconfig-checker`
- `ghalint`
- `lychee`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint
editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek
rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (3 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `editorconfig-checker` | `4.0.1` → `4.0.2` | `4.0.1` → `4.0.2` |
| `rumdl` | `0.2.73` → `0.2.74` | `0.2.73` → `0.2.74` |
| `uv` | `0.12.15` → `0.12.17` | `0.12.15` → `0.12.17` |

</details>

<details>
<summary>Release notes (3 tools)</summary>

<details>
<summary>editorconfig-checker: `4.0.1` → `4.0.2`
(editorconfig-checker/editorconfig-checker)</summary>

### v4.0.2

##
[4.0.2](editorconfig-checker/editorconfig-checker@v4.0.1...v4.0.2)
(2026-09-16)


### Bug Fixes

* **encoding:** detect 7-bit content with control characters as ASCII
([#629](editorconfig-checker/editorconfig-checker#629))
([289dc53](editorconfig-checker/editorconfig-checker@289dc53)),
closes
[#627](editorconfig-checker/editorconfig-checker#627)
* keep the file's existing line ending when adding a final newline
([#622](editorconfig-checker/editorconfig-checker#622))
([cea460f](editorconfig-checker/editorconfig-checker@cea460f))

</details>
<details>
<summary>rumdl: `0.2.73` → `0.2.74` (rvben/rumdl)</summary>

### v0.2.74

### Added

- **code-block-tools**: add explicit rumdl, oxfmt, djlint, and shuck
modes
([77f0e55](rvben/rumdl@77f0e55))

### Fixed

- **MD092**: allow scoped suppression of documented conflicts
([6f9a6cb](rvben/rumdl@6f9a6cb))
- **MD032**: keep parent list items open after nested lists
([952c507](rvben/rumdl@952c507))
- **MD026**: delete a setext heading's trailing punctuation where it
stands
([7f0981c](rvben/rumdl@7f0981c))
- **parser**: keep link reference definitions out of a setext heading
([80fdfc3](rvben/rumdl@80fdfc3))
- **parser**: read the whole paragraph as a setext heading
([5d7b046](rvben/rumdl@5d7b046))
- **parser**: lint the headings a short or quoted setext underline makes
([e183924](rvben/rumdl@e183924))
- **parser**: keep a container open below a block written inside it
([e2c13b7](rvben/rumdl@e2c13b7))
- **parser**: read an empty list item under a paragraph as its text
([68a04ae](rvben/rumdl@68a04ae))
- **MD013**: write one space at a soft break after a trailing space
([6388794](rvben/rumdl@6388794))
- **MD013**: keep a whole-line display math expression on its own line
([cc518ab](rvben/rumdl@cc518ab))
- **MD013**: read no math span through a code span
([f069246](rvben/rumdl@f069246))
- **MD013**: keep a definition-list marker written on its o… (truncated)

</details>
<details>
<summary>uv: `0.12.15` → `0.12.17` (astral-sh/uv)</summary>

### 0.12.16

## Release Notes

Released on 2026-09-17.

### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8
([#21741](astral-sh/uv#21741))

### Enhancements

- Verify downloaded wheels and source distributions against hashes
supplied by package indexes
([#21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for
verifying downloaded build dependencies
([#21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments`
using macOS wheel deployment targets
([#21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of
panicking during frozen exports
([#21779](astral-sh/uv#21779))

### Preview features

- Support `lock-without-metadata` across all dependency types while
retaining `package.metadata` for remote URL dependencies to enable
offline validation
([#21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including
credentials, in `uv upgrade`
([#21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and
outside workspaces
([#21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version
for `uv check` ([#21744](astral-sh/uv#21744))

### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs
([#21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached
distributions ([#21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when
backend metadata reports absolute paths
([#20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches
active versi… (truncated)

### 0.12.17

## Release Notes

Released on 2026-09-18.

### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error
instead of panicking during frozen exports
([#21780](astral-sh/uv#21780))

### Preview features

- Set minimum glibc and musl versions that universal resolutions must
support with `minimum-libc-version`
([#21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their
declared package names or versions
([#20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided
([#21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata
([#21821](astral-sh/uv#21821))

### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic
deduplication ([#21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and
distribution requests
([#21810](astral-sh/uv#21810))

### Bug fixes

- Prevent `required-environments` from selecting package versions whose
wheels require a newer macOS version than the configured Darwin baseline
([#21825](astral-sh/uv#21825))

### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes
([#21817](astral-sh/uv#21817))

## Install uv 0.12.17

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"
```

## Download uv 0.12.17

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://rele… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof pushed a commit to jylenhof/mise-en-place-tips that referenced this pull request Sep 22, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade uv (#107)
3ed2886 
Automated mise tool upgrades from local config.

mise-managed tools:
- `uv`

Command: `mise upgrade --bump --local uv`

<details>
<summary>Version changelog (uv)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `uv` | `0.12.15` → `0.12.17` | `0.12.15` → `0.12.17` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>uv: `0.12.15` → `0.12.17` (astral-sh/uv)</summary>

### 0.12.16

## Release Notes

Released on 2026-09-17.

### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8
([#21741](astral-sh/uv#21741))

### Enhancements

- Verify downloaded wheels and source distributions against hashes
supplied by package indexes
([#21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for
verifying downloaded build dependencies
([#21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments`
using macOS wheel deployment targets
([#21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of
panicking during frozen exports
([#21779](astral-sh/uv#21779))

### Preview features

- Support `lock-without-metadata` across all dependency types while
retaining `package.metadata` for remote URL dependencies to enable
offline validation
([#21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including
credentials, in `uv upgrade`
([#21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and
outside workspaces
([#21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version
for `uv check` ([#21744](astral-sh/uv#21744))

### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs
([#21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached
distributions ([#21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when
backend metadata reports absolute paths
([#20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches
active versi… (truncated)

### 0.12.17

## Release Notes

Released on 2026-09-18.

### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error
instead of panicking during frozen exports
([#21780](astral-sh/uv#21780))

### Preview features

- Set minimum glibc and musl versions that universal resolutions must
support with `minimum-libc-version`
([#21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their
declared package names or versions
([#20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided
([#21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata
([#21821](astral-sh/uv#21821))

### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic
deduplication ([#21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and
distribution requests
([#21810](astral-sh/uv#21810))

### Bug fixes

- Prevent `required-environments` from selecting package versions whose
wheels require a newer macOS version than the configured Darwin baseline
([#21825](astral-sh/uv#21825))

### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes
([#21817](astral-sh/uv#21817))

## Install uv 0.12.17

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"
```

## Download uv 0.12.17

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://rele… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof pushed a commit to jylenhof/mise-en-place-resources that referenced this pull request Sep 23, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade local tools (#72)
b412df9 
Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `editorconfig-checker`
- `ghalint`
- `lychee`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint
editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek
rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (3 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `editorconfig-checker` | `4.0.1` → `4.0.2` | `4.0.1` → `4.0.2` |
| `rumdl` | `0.2.73` → `0.2.74` | `0.2.73` → `0.2.74` |
| `uv` | `0.12.15` → `0.12.17` | `0.12.15` → `0.12.17` |

</details>

<details>
<summary>Release notes (3 tools)</summary>

<details>
<summary>editorconfig-checker: `4.0.1` → `4.0.2`
(editorconfig-checker/editorconfig-checker)</summary>

### v4.0.2

##
[4.0.2](editorconfig-checker/editorconfig-checker@v4.0.1...v4.0.2)
(2026-09-16)


### Bug Fixes

* **encoding:** detect 7-bit content with control characters as ASCII
([#629](editorconfig-checker/editorconfig-checker#629))
([289dc53](editorconfig-checker/editorconfig-checker@289dc53)),
closes
[#627](editorconfig-checker/editorconfig-checker#627)
* keep the file's existing line ending when adding a final newline
([#622](editorconfig-checker/editorconfig-checker#622))
([cea460f](editorconfig-checker/editorconfig-checker@cea460f))

</details>
<details>
<summary>rumdl: `0.2.73` → `0.2.74` (rvben/rumdl)</summary>

### v0.2.74

### Added

- **code-block-tools**: add explicit rumdl, oxfmt, djlint, and shuck
modes
([77f0e55](rvben/rumdl@77f0e55))

### Fixed

- **MD092**: allow scoped suppression of documented conflicts
([6f9a6cb](rvben/rumdl@6f9a6cb))
- **MD032**: keep parent list items open after nested lists
([952c507](rvben/rumdl@952c507))
- **MD026**: delete a setext heading's trailing punctuation where it
stands
([7f0981c](rvben/rumdl@7f0981c))
- **parser**: keep link reference definitions out of a setext heading
([80fdfc3](rvben/rumdl@80fdfc3))
- **parser**: read the whole paragraph as a setext heading
([5d7b046](rvben/rumdl@5d7b046))
- **parser**: lint the headings a short or quoted setext underline makes
([e183924](rvben/rumdl@e183924))
- **parser**: keep a container open below a block written inside it
([e2c13b7](rvben/rumdl@e2c13b7))
- **parser**: read an empty list item under a paragraph as its text
([68a04ae](rvben/rumdl@68a04ae))
- **MD013**: write one space at a soft break after a trailing space
([6388794](rvben/rumdl@6388794))
- **MD013**: keep a whole-line display math expression on its own line
([cc518ab](rvben/rumdl@cc518ab))
- **MD013**: read no math span through a code span
([f069246](rvben/rumdl@f069246))
- **MD013**: keep a definition-list marker written on its o… (truncated)

</details>
<details>
<summary>uv: `0.12.15` → `0.12.17` (astral-sh/uv)</summary>

### 0.12.16

## Release Notes

Released on 2026-09-17.

### Python

- Add Pyodide 314.0.7, 0.29.5, and 0.27.8
([#21741](astral-sh/uv#21741))

### Enhancements

- Verify downloaded wheels and source distributions against hashes
supplied by package indexes
([#21562](astral-sh/uv#21562))
- Allow `build-constraint-dependencies` entries to include hashes for
verifying downloaded build dependencies
([#21467](astral-sh/uv#21467))
- Honor Darwin `platform_release` markers in `required-environments`
using macOS wheel deployment targets
([#21766](astral-sh/uv#21766))
- Reject unsupported Git URL schemes while parsing lockfiles instead of
panicking during frozen exports
([#21779](astral-sh/uv#21779))

### Preview features

- Support `lock-without-metadata` across all dependency types while
retaining `package.metadata` for remote URL dependencies to enable
offline validation
([#21163](astral-sh/uv#21163))
- Honor configured and command-line index settings, including
credentials, in `uv upgrade`
([#21776](astral-sh/uv#21776))
- Allow `uv check` to run in projects that are not managed by uv and
outside workspaces
([#21777](astral-sh/uv#21777))
- Respect `--python` and `UV_PYTHON` when selecting the Python version
for `uv check` ([#21744](astral-sh/uv#21744))

### Bug fixes

- Redact Azure shared access signatures from displayed and logged URLs
([#21755](astral-sh/uv#21755))
- Check archive sizes from `pylock.toml` before reusing cached
distributions ([#21609](astral-sh/uv#21609))
- Keep user-authored local dependency paths relative in lockfiles when
backend metadata reports absolute paths
([#20631](astral-sh/uv#20631))
- Use the bundled `uv_build` backend only when its version matches
active versi… (truncated)

### 0.12.17

## Release Notes

Released on 2026-09-18.

### Enhancements

- Reject unsupported Git archive paths in lockfiles with a clear error
instead of panicking during frozen exports
([#21780](astral-sh/uv#21780))

### Preview features

- Set minimum glibc and musl versions that universal resolutions must
support with `minimum-libc-version`
([#21651](astral-sh/uv#21651))
- Reject `pylock.toml` files whose wheel filenames do not match their
declared package names or versions
([#20746](astral-sh/uv#20746))
- Keep `uv workspace metadata` read-only unless `--sync` is provided
([#21821](astral-sh/uv#21821))
- Apply `uv check` lock modes when retrieving workspace metadata
([#21821](astral-sh/uv#21821))

### Performance

- Speed up builds with many exclusion patterns by avoiding quadratic
deduplication ([#21650](astral-sh/uv#21650))
- Reduce resolver allocations when deduplicating package and
distribution requests
([#21810](astral-sh/uv#21810))

### Bug fixes

- Prevent `required-environments` from selecting package versions whose
wheels require a newer macOS version than the configured Darwin baseline
([#21825](astral-sh/uv#21825))

### Documentation

- Clarify the 0.12.14 and 0.12.15 release notes
([#21817](astral-sh/uv#21817))

## Install uv 0.12.17

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.17/uv-installer.ps1 | iex"
```

## Download uv 0.12.17

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://rele… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@scottames-github-bot scottames-github-bot Bot mentioned this pull request Sep 23, 2026
Merged
1 task
@inanna-malick inanna-malick mentioned this pull request Oct 6, 2026
Open

This branch was successfully deployed

1 active deployment
automations — e1613b37 Deployed Sep 17, 2026 by charliermarsh via review / security review #47020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@konstin konstin konstin approved these changes

Assignees

No one assigned

Labels

enhancement New feature or improvement to existing functionality

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@charliermarsh @konstin