chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.20

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	final	patch	0.12.17 → 0.12.20

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.12.20

Compare Source

Released on 2026-09-28.

Enhancements

• Reuse lockfiles when dependency declarations are semantically equivalent (#​21951)
• Preserve second-line encoding declarations when installing wheel scripts with CRLF shebangs (#​21990)

Preview features

• Write normalized requirement declarations with the lockfile-normalization preview feature (#​21951)
• Honor synthetic default groups when installing or syncing from pylock.toml (#​22003)
• Resolve local paths in exported pylock.toml files relative to the output file (#​22042)
• Install each package only once when repeated tool-install-locks requirements resolve to the same package (#​22000)
• Reuse lock-without-metadata lockfiles for conflicting groups with distinct base and extra requirement specifiers (#​22055)
• Use consistent root-package paths in uv workspace metadata and uv tree --format json output (#​22050)

Configuration

• Continue searching XDG_CONFIG_DIRS after empty entries (#​21987)

Performance

• Restore the previous HTTP cache-write scheduling while investigating severe cache-revalidation stalls on ext4 filesystems (#​22051)

Bug fixes

• Apply hash constraints to every repeated requirement under --require-hashes and --verify-hashes (#​21996)
• Allow metadata builds for first-party workspace projects under --no-build (#​21988)
• Honor project exclusion flags with --all-packages, including --no-install-project and --no-emit-project (#​21994)
• Restore pyproject.toml if uv upgrade fails or is interrupted (#​21983)
• Generate working Nushell activation scripts for relocatable virtual environments (#​21979)
• Prevent commands from running and changing state after displaying --show-settings (#​21989)
• Treat UTF-16 requirements files containing only a byte-order mark as empty (#​21991)
• Ignore unrecognized managed-Python implementation directories during uv python list and uv python upgrade instead of panicking (#​22033)
• Avoid panics and incorrect rewriting when managed Python sysconfig paths merely start with /install (#​22036)
• Report whitespace-only non-ASCII requirements as invalid instead of panicking (#​22035)
• Avoid a resolver panic when trace logging an always-false constraint (#​22034)

v0.12.19

Compare Source

Released on 2026-09-24.

Python

• Add PyPy 3.11.16 and 3.12.14 (#​21847)
• Update GraalPy 3.13.0 to build 25.4.4 (#​21847)

Enhancements

• Format upload URLs with backticks in uv publish errors (#​21934)

Preview features

• Run build-backend hooks with lazy imports on CPython 3.15 and later using the build-lazy-imports preview feature (#​21967)
• Omit unused resolution settings from uv.lock and ignore changes to them when checking lockfile freshness with the resolution-inputs preview feature (#​21913)

Bug fixes

• Preserve signed and encoded query parameters in direct-URL metadata to avoid reinstalling unchanged packages (#​21971)
• Recognize 1.0.0 as satisfying ===1 during installed-package checks, matching resolution (#​21931)
• Avoid collisions between Git checkout readiness markers and .ok files in dependencies (#​21891)
• Preserve always-false python_version markers when parsing their serialized form (#​21939)

Rust API

• Restore the public FlatDistributions export and its BTreeMap conversion for downstream resolvers (#​21965)

Documentation

• Make individual preview-feature reference entries linkable by name (#​21950)

v0.12.18

Compare Source

Released on 2026-09-22.

Enhancements

• Add --output-format json to uv pip install and uv pip sync, including for --dry-run and --check (#​21893)
• Add --check to uv pip install and uv pip sync to report planned changes without modifying the environment (#​21844)
• Identify failures from get_requires_for_build_* hooks correctly in build errors (#​21881)

Preview features

• Validate build requirements for uv build --no-build-isolation with --preview-features build-dependency-check; use --skip-dependency-check to opt out (#​21880)

Performance

• Speed up uv_build editable wheel creation by omitting compression from temporary wheels (#​21918)

Bug fixes

• Select package versions with wheels compatible with each Python resolution fork, correctly interpreting generic and stable-ABI wheel tags (#​21835, #​21836)
• Restore project, script, and lock files when uv add, uv remove, or uv version fails or is interrupted (#​21860, #​21856)
• Use configured dependency-metadata when checking whether installed requirements are satisfied (#​21843)
• Reject archive entries that normalize to absolute Windows paths (#​21923)
• Recognize distribution filenames and archive extensions when URL fragments contain ? (#​21920)
• Generate correctly lowercased platform tags for BSD and Haiku releases (#​21853)
• Avoid rebuilding a Windows relative path into an absolute form (#​21923)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0f63144b-c6e8-4803-bd39-94b44c1e4611

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}