chore(deps): update dependency astral-sh/uv to v0.4.26

[renovate]

This PR contains the following updates:

Package	Update	Change
astral-sh/uv	patch	0.4.24 -> 0.4.26

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.4.26

Compare Source

Enhancements

• Allow static dependency metadata entries for direct URL requirements (#​7846)
• Use reinstall report formatting for uv python install --reinstall (#​8487)
• Add support for system-level uv.toml configuration (#​7851)

Bug fixes

• Apply requires-python narrowing with upper bounds (#​8403)
• Avoid rewriting [[tool.uv.index]] entries when credentials are provided (#​8502)
• Fix uv add comment handling for empty arrays (#​8504)
• Replace dashes with underscores in index credential variables (#​8452)
• Respect --allow-insecure-host in uv publish (#​8440)
• Allow arbitrary --package includes in uv tree (#​8507)
• Remove existing Python install after successful download in uv python install (#​8485)

Documentation

• Add docs example for URLs with [tool.uv.dependency-metadata] (#​8484)
• Add help page for build failures (#​8286)
• Fix cache-keys typo in tags = true (#​8422)
• Add documentation examples for manual branch, rev, and tag Git dependencies (#​8497)

Error messages

• Improve error message for cache info serialization (#​8500)
• Suggest --from command when executable is available for uvx (#​8473)
• Support --with-editable in uv tool install (#​8472)

v0.4.25

Compare Source

Enhancements

• Add support for uv pip show --files (#​8369)
• Don't prefetch unreachable packages (#​8246)
• Remove tool.uv.sources table if it is empty (#​8365)
• Modify cache versioning to support backwards compatibility (#​8386)

Configuration

• Add support for UV_FROZEN and UV_LOCKED (#​8340)

Bug fixes

• Allow dashes and underscores in custom index names (#​8339)
• Avoid panic when Git dependencies are included in fork markers (#​8388)
• Check existing source by normalized name before uv add and uv remove (#​8359)
• Fix bug where username from authentication cache could be ignored (#​8345)
• Fix to respect comments positioning in pyproject.toml on change (#​8384)
• Redact index sources in uv.lock (#​8333)
• Use correct indentation when project table contains open bracket comment (#​8387)
• Only remove a source from [tool.uv.sources] if it is no long being referenced (#​8366)
• Modify uv pip list and uv tree to print to stdout regardless of --quiet flag (#​8392)

Error messages

• Improve help message for missing self update invocations (#​8337)
• Log .netrc parsing errors (#​8364)
• Remove trailing newlines in error messages (#​8322)
• Use a dedicated message for incompatible Python versions in wheel ABI tags (#​8363)
• Remove commands available in the top-level from the suggested subcommand error (#​8316)

Release

• Run release builds for macos-x86_64 on macos-14 runners (#​8327)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.4.26). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.