Skip to content

build(deps): bump astral-sh/uv from 0.12.23 to 0.13.1 in /demo - #141

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/demo/astral-sh/uv-0.13.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/demo/astral-sh/uv-0.13.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.12.23 to 0.13.1.

Release notes

Sourced from astral-sh/uv's releases.

0.13.1

Release Notes

Released on 2026-10-14.

Enhancements

  • Ignore Requires-Python upper bounds in uv pip check and uv pip install --strict, consistent with resolution (#22500)
  • Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (#22463)
  • Report missing trusted hashes in resolution errors (#22241)

Python

  • Add CPython 3.16.0a1 (#22527)

Preview features

  • Allow uv tool upgrade to upgrade installed tools when tool-install-locks is enabled (#22498)
  • Add preliminary support for parsing PEP 825 variant labels in wheel filenames with wheel-variants (#22039)

Performance

Bug fixes

  • Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (#22495)
  • Restore support for source distributions containing hard links or full-length tar user or group names (#22516, #22522)
  • Preserve device files and FIFOs used as uv pip compile or uv export output destinations (#22496)
  • Fix sys._base_executable detection for environments created from symlinked interpreters (#22520)
  • Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (#22399, #22402, #22403)
  • Serialize concurrent project commands that reach the same environment through real and symlinked paths (#22390)
  • Prevent installs, syncs, and environment creation from failing when they race with uv cache clean (#22387)
  • Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (#22391)
  • Persist changed upgrade settings even when uv tool upgrade leaves the tool version unchanged (#22499)
  • Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (#22464)

Documentation

  • Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (#22424)
  • Fix the .netrc format documentation link (#22514)

Other changes

  • Publish Python 3.15-based uv Docker images under stable tags (#22503)

Install uv 0.13.1

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.13.1

Released on 2026-10-14.

Enhancements

  • Ignore Requires-Python upper bounds in uv pip check and uv pip install --strict, consistent with resolution (#22500)
  • Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (#22463)
  • Report missing trusted hashes in resolution errors (#22241)

Python

  • Add CPython 3.16.0a1 (#22527)

Preview features

  • Allow uv tool upgrade to upgrade installed tools when tool-install-locks is enabled (#22498)
  • Add preliminary support for parsing PEP 825 variant labels in wheel filenames with wheel-variants (#22039)

Performance

Bug fixes

  • Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (#22495)
  • Restore support for source distributions containing hard links or full-length tar user or group names (#22516, #22522)
  • Preserve device files and FIFOs used as uv pip compile or uv export output destinations (#22496)
  • Fix sys._base_executable detection for environments created from symlinked interpreters (#22520)
  • Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (#22399, #22402, #22403)
  • Serialize concurrent project commands that reach the same environment through real and symlinked paths (#22390)
  • Prevent installs, syncs, and environment creation from failing when they race with uv cache clean (#22387)
  • Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (#22391)
  • Persist changed upgrade settings even when uv tool upgrade leaves the tool version unchanged (#22499)
  • Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (#22464)

Documentation

  • Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (#22424)
  • Fix the .netrc format documentation link (#22514)

Other changes

  • Publish Python 3.15-based uv Docker images under stable tags (#22503)

0.13.0

Released on 2026-10-09.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.12.23 to 0.13.1.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.23...0.13.1)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Oct 16, 2026
@coderabbitai

coderabbitai Bot commented Oct 16, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 4d100787-7bae-4669-a5a4-5d6af7ee6ebc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

polaz added a commit that referenced this pull request Oct 17, 2026
## Summary

The server now sends a TIMESTAMP property as `Timestamp { int64
unix_micros }`: signed microseconds since the Unix epoch, negative
before 1970. The client decoded the old wire shape into a `{"wall_time",
"logical"}` dict that nothing could write back. CoordiNode 0.7.2 is the
first release that sends the new shape, so this client now requires it.

- `coordinode.Timestamp`, an `int` subclass holding epoch microseconds,
is what a timestamp now decodes to. It matches the embedded client's
integer, and it re-encodes as `timestamp_value`, so a read-modify-write
keeps the property type. A plain `int` still encodes as `int_value`.
- An aware `datetime` encodes as a timestamp; a naive one raises
`ValueError`, since it names no instant.
- `Timestamp.to_datetime()` and `Timestamp.from_datetime()` convert
exactly, using integer arithmetic.
- The proto submodule moves to the 0.7.2 protocol, and the embedded
engine builds from the v0.7.2 sources (Cargo.lock refreshed).
- The integration job, the demo stack and the quick-start compose file
run the 0.7.2 server image, pinned by digest. The README, the demo
README and the 0.5 notebook name 0.7.2 as the minimum server.

### create_constraint

Since 0.7.2 the server validates a unique or node-key constraint in an
index build and holds `CreateConstraint` only up to the request's wait,
returning the constraint `VALIDATING` with the build still running when
the wait runs out.

- `create_constraint()` takes `wait` in seconds: `None` keeps the
server's default, `0` returns once the build is admitted. The call's
deadline is extended by the wait.
- `ConstraintInfo` reports `build_operation` and `build_state`.

### Demo image

The two Docker base-image updates Dependabot cannot auto-merge are
folded in: uv 0.13.1 (#141) and scipy-notebook python-3.13.16 (#136).

## Testing

- `pytest tests/unit`: 373 passed, 2 skipped. The timestamp tests and
the `create_constraint` wait tests failed before their changes.
- `make lint`: clean.
- `cargo check --all-targets` of the embedded extension against the
v0.7.2 sources: clean.
- Every demo notebook executed end to end in the local Docker stack
against the 0.7.2 server image, with the image built from the new base
images. The LLM cells of the LangChain and LangGraph notebooks were
skipped, as they are without `OPENAI_API_KEY`.

Closes #132
@dependabot @github

dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like astral-sh/uv is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 17, 2026
@dependabot
dependabot Bot deleted the dependabot/docker/demo/astral-sh/uv-0.13.1 branch October 17, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants