[dependabot]

Updates the requirements on uv-build to permit the latest version.

Release notes

Sourced from uv-build's releases.

0.12.1

Release Notes

Released on 2026-07-31.

Enhancements

• Add package-specific pre-release policies with --prerelease-package (#20837)
• Support local HTML files as flat indexes (#20802)
• Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
• Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

• Add automatic fixes to uv check with --fix (#20793)
• Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
• Honor direct URL constraints when validating metadata-free lockfiles (#20796)
• Ignore malformed PEP 723 scripts discovered during project checks (#20784)
• Use ty's native script exclusion in uv check (#20742)

Performance

• Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
• Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

• Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
• Make workspace-root dependency groups available to commands run from workspace members (#20840)
• Resolve --find-links paths in requirements files relative to the containing file (#20832)
• Respect configured indexes in uv tool list --outdated (#20770)

Documentation

• Document Astral GPU indexes in the PyTorch guide (#20785)
• Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

Install uv 0.12.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.12.1

Released on 2026-07-31.

Enhancements

• Add package-specific pre-release policies with --prerelease-package (#20837)
• Support local HTML files as flat indexes (#20802)
• Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
• Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

• Add automatic fixes to uv check with --fix (#20793)
• Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
• Honor direct URL constraints when validating metadata-free lockfiles (#20796)
• Ignore malformed PEP 723 scripts discovered during project checks (#20784)
• Use ty's native script exclusion in uv check (#20742)

Performance

• Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
• Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

• Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
• Make workspace-root dependency groups available to commands run from workspace members (#20840)
• Resolve --find-links paths in requirements files relative to the containing file (#20832)
• Respect configured indexes in uv tool list --outdated (#20770)

Documentation

• Document Astral GPU indexes in the PyTorch guide (#20785)
• Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

0.12.0

Released on 2026-07-28.

Since we released uv 0.11.0 in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution.

We expect most users to be able to upgrade without making changes.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.12, e.g., uv_build>=0.11.32,<0.13.

Breaking changes

• Define build systems by default with uv init (#19197)

... (truncated)

Commits

• 329541a Bump version to 0.12.1 (#20867)
• a68f64b fix ost-simple-sts.json (#20866)
• a531d91 Generate README files for issue context branches (#20862)
• 3a9573c Add --frozen to uv run hook invocation (#20865)
• 2a805bd Relocate script (#20864)
• d709d47 Honor direct sources shared across workspace dependencies (#20847)
• a51d7db Rebase promoted pull requests in uv (#20861)
• ec8ad5b Honor direct URL constraints when validating metadata-free locks (#20796)
• 1ac4b3e Allow commands run in workspace members to use root dependency groups (#20840)
• 139f2cf Remove stale Node 20 action TODOs (#20843)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[ancongui]

Resolved by #343, merged at f4234f9e481dd9c54e10048a2d67f7216a75f9e1, for Agentic 26.10.1.

Allow >=0.9.5,<0.13.0; build and inspect wheel and source distributions.

The combined change preserves compatible provider extras and is qualified as one dependency graph. The resolution record records all requests and the six remaining optional-package advisories. This closes the superseded proposal while retaining its full history.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.