Skip to content

chore(deps): bump uv from 0.9.5 to 0.11.15 in /.kokoro - #6843

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dot-kokoro/uv-0.11.15
Open

chore(deps): bump uv from 0.9.5 to 0.11.15 in /.kokoro#6843
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dot-kokoro/uv-0.11.15

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 29, 2026

Copy link
Copy Markdown

Bumps uv from 0.9.5 to 0.11.15.

Release notes

Sourced from uv's releases.

0.11.15

Release Notes

Released on 2026-05-18.

Security

Enhancements

  • Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)
  • Add support for Azure request signing (#19421)
  • Apply stricter validation to all wheel filename segments (#19364)
  • Reject empty strings as an invalid package name (#19435)
  • Use structured errors for signing authentication failures (#19422)

Preview

  • uv audit: Add JSON output (#19305)

Configuration

  • Respect required-environments in uv pip compile (#19378)

Performance

  • Avoid parsing JSON manifest when local Python is available (#19398)
  • Avoid walking nested directories in linker conflict registration (#19382)
  • Optimize async wheel ZIP writing (#19383)
  • Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

  • Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)
  • Skip empty directories in uv build outputs (#19437)
  • Fix Git submodule handling when using relative paths (#12156)
  • Fix line number reporting in netrc parsing (#19452)

Documentation

  • Move Bazel auth helper setup into integration guide (#19392)

Install uv 0.11.15

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.15/uv-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.15

Released on 2026-05-18.

Security

Enhancements

  • Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)
  • Add support for Azure request signing (#19421)
  • Apply stricter validation to all wheel filename segments (#19364)
  • Reject empty strings as an invalid package name (#19435)
  • Use structured errors for signing authentication failures (#19422)

Preview

  • uv audit: Add JSON output (#19305)

Configuration

  • Respect required-environments in uv pip compile (#19378)

Performance

  • Avoid parsing JSON manifest when local Python is available (#19398)
  • Avoid walking nested directories in linker conflict registration (#19382)
  • Optimize async wheel ZIP writing (#19383)
  • Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

  • Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)
  • Skip empty directories in uv build outputs (#19437)
  • Fix Git submodule handling when using relative paths (#12156)
  • Fix line number reporting in netrc parsing (#19452)

Documentation

  • Move Bazel auth helper setup into integration guide (#19392)

0.11.14

Released on 2026-05-12.

Enhancements

  • Add Astral mirror URL override (#19206)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump uv from 0.9.5 to 0.11.15 in /.kokoro
bd9d8a1
Bumps [uv](https://github.com/astral-sh/uv) from 0.9.5 to 0.11.15.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.9.5...0.11.15)
---
updated-dependencies:
- dependency-name: uv
dependency-version: 0.11.15
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 29, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMay 29, 2026 21:39
@trusted-contributions-gcftrusted-contributions-gcfBot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels May 29, 2026
@product-auto-labelproduct-auto-labelBot added the size: s Pull request size is small. label May 29, 2026
@dependabotdependabotBot mentioned this pull request May 29, 2026
Closed
@product-auto-labelproduct-auto-labelBot added the api: vertex-ai Issues related to the googleapis/python-aiplatform API. label May 29, 2026
@gcf-owl-botgcf-owl-botBot removed the owlbot:run Add this label to trigger the Owlbot post processor. label May 29, 2026
@yoshi-kokoroyoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label May 29, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

api: vertex-aiIssues related to the googleapis/python-aiplatform API.dependenciesPull requests that update a dependency filepythonPull requests that update python codesize: sPull request size is small.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yoshi-kokoro