chore(deps): update dependency astral-sh/uv to v0.5.26

[renovate]

This PR contains the following updates:

Package	Update	Change
astral-sh/uv	patch	0.5.22 -> 0.5.26

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.5.26

Compare Source

Enhancements

• Add support for uvx python (#​11076)
• Allow --no-dev --invert in uv tree (#​11068)
• Update uv python install --reinstall to reinstall all previous versions (#​11072)
• Consistently write log messages with capitalized first word (#​11111)
• Suggest --build-backend when --backend is passed to uv init (#​10958)
• Improve retry trace message (#​11108)

Performance

• Remove unnecessary UTF-8 conversion in hash parsing (#​11110)

Bug fixes

• Ignore non-hash fragments in HTML API responses (#​11107)
• Avoid resolving symbolic links when querying Python interpreters (#​11083)
• Avoid sharing state between universal and non-universal resolves (#​11051)
• Error when --script is passing a non-PEP 723 script (#​11118)
• Make metadata deserialization failures non-fatal in the cache (#​11105)
• Mark metadata as dynamic when reading from built wheel cache (#​11046)
• Propagate credentials for <index>/simple to <index>/... endpoints (#​11074)
• Fix conflicting extra bug during uv sync (#​11075)

Documentation

• Add PyTorch XPU instructions to the PyTorch guide (#​11109)
• Add docs for signal handling (#​11041)
• Explain build frontend vs. build backend (#​11094)
• Fix formatting of RUST_LOG documentation (#​10053)
• Fix typo in --no-deps description (#​11073)
• Reflow CLI documentation comments (#​11040)
• Shorten "Using existing Python versions" nav item so it fits on one line (#​11077)
• Some minor touch-ups to the Python install guide (#​11116)
• Update Dependabot tracking issue link (#​11054)
• Update documentation for running in a container (#​11052)
• Upgrade PyTorch version in documentation (#​11114)
• Use sys_platform in lieu of platform_system in PyTorch docs (#​11113)
• Use positive (rather than negative) markers in PyTorch examples (#​11112)
• Fix unnecessary backslashes in brackets (#​11059)
• Suggest setting copy link mode in GitLab integration guide (#​11067)

v0.5.25

Compare Source

Enhancements

• Allow installation of manylinux wheels on loongarch64 (#​10927)
• Allow optional = for editables in requirements.txt (#​10954)
• Add Windows aarch64 to the release binaries (#​10885)

Bug fixes

• Use spec-compliant (128+n) exit codes for uv run and uv tool run on Unix (#​10781)
• Fix best-interpreter lookups when there is an invalid interpreter in the PATH (#​11030)
• Guard against concurrent cache writes on Windows (#​11007)
• Prioritize package preferences with greater package versions (#​10963)
• Reject --editable flag on non-directory requirements (#​10994)
• Respect --no-sources for uv pip install workspace discovery (#​11003)
• Set JEMALLOC_SYS_WITH_LG_PAGE=16 in ARM Docker builds (#​10943)
• Update riscv64 Python downloads to allow install on riscv64gc (#​10937)
• Fix file persist retries on Windows (#​11008)
• Fix incorrect error message when specifying tool.uv.sources.(package).workspace with other options (#​11013)
• Improve SIGINT handling in uv run (#​11009)

Documentation

• Add SECURITY policy (#​11035)
• Add Requires-Python upper bound behavior to the docs (#​10964)
• Add a troubleshooting section and reproducible example guide (#​10947)
• Add documentation for uv add -r (#​10926)
• Amend requires-python rules in resolver documentation (#​10993)
• Reference workspaces in --no-sources documentation (#​10995)
• Update documentation for activating virtual environments in different shell (#​11000)
• Add Docker SHA pinning tip (#​10955)

v0.5.24

Compare Source

Enhancements

• Improve determinism of resolution by always setting package priorities (#​10853)
• Upgrade to cargo-dist 0.28.0; improves several installer behaviors (#​10884)

Performance

• Remove dependencies clone in resolver (#​10880)
• Use Hashbrown's raw entry API to reduce hashes and clone in resolver priority determination (#​10881)

Bug fixes

• Allow fallback to Python download on non-critical discovery errors (#​10908)

Preview features

• Register managed Python version with the Windows Registry (PEP 514) (#​10634)

Documentation

• Improve documentation for some environment variables (#​10887)
• Add git subdirectory example (#​10894)

v0.5.23

Compare Source

Enhancements

• Add --refresh to uv venv (#​10834)
• Add --no-default-groups command-line flag (#​10618)

Bug fixes

• Sort extras and groups when comparing lockfile requirements (#​10856)
• Include commit_id and requested_revision in direct_url.json (#​10862)
• Invalidate lockfile when static versions change (#​10858)
• Make GitHub fast path errors non-fatal (#​10859)
• Remove warnings for --frozen and --locked in uv run --script (#​10840)
• Resolve find-links paths relative to the configuration file (#​10827)
• Respect visitation order for proxy packages (#​10833)
• Treat version mismatch errors as non-fatal in fast paths (#​10860)
• Mark --locked and --upgrade are conflicting (#​10836)
• Relax error checking around unconditional enabling of conflicting extras (#​10875)

Documentation

• Reduce ambiguity in conflicting extras example (#​10877)
• Update pre-commit documentation (#​10756)

Error messages

• Error when workspace contains conflicting Python requirements (#​10841)
• Improve uvx error message when uv is missing (#​9745)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ API	spectral	1		0	1.57s
⚠️ BASH	bash-exec	6		1	0.02s
✅ BASH	shellcheck	6		0	0.25s
✅ BASH	shfmt	6	0	0	0.91s
✅ COPYPASTE	jscpd	yes		no	2.84s
✅ DOCKERFILE	hadolint	129		0	25.63s
✅ JSON	jsonlint	20		0	0.21s
✅ JSON	v8r	22		0	14.32s
⚠️ MARKDOWN	markdownlint	267	0	302	22.68s
✅ MARKDOWN	markdown-table-formatter	267	0	0	170.11s
⚠️ PYTHON	bandit	214		66	3.74s
✅ PYTHON	black	214	0	0	4.33s
✅ PYTHON	flake8	214		0	2.35s
✅ PYTHON	isort	214	0	0	1.43s
✅ PYTHON	mypy	214		0	17.12s
✅ PYTHON	pylint	214		0	34.06s
✅ PYTHON	ruff	214	0	0	0.49s
✅ REPOSITORY	checkov	yes		no	36.8s
✅ REPOSITORY	git_diff	yes		no	0.79s
⚠️ REPOSITORY	grype	yes		24	11.78s
✅ REPOSITORY	secretlint	yes		no	8.72s
✅ REPOSITORY	trivy	yes		no	15.61s
✅ REPOSITORY	trivy-sbom	yes		no	0.26s
⚠️ REPOSITORY	trufflehog	yes		1	54.11s
✅ SPELL	cspell	717		0	12.96s
⚠️ SPELL	lychee	349		28	6.62s
✅ XML	xmllint	3	0	0	0.93s
✅ YAML	prettier	160	0	0	3.86s
✅ YAML	v8r	102		0	29.66s
✅ YAML	yamllint	161		0	3.04s

See detailed report in MegaLinter reports