#9899 chore(deps): Bump the runtime-dependencies group with 2 updates Pull request opened by dependabot[bot] Bumps the runtime-dependencies group with 2 updates: uv and boto3. Updates

uv

from 0.10.7 to 0.10.8 Release notes Sourced from uv's releases.

0.10.8

Release Notes

Released on 2026-03-03.

Python

• Add CPython 3.10.20

• Add CPython 3.11.15

• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#18247)

• Add resolver hint when

--exclude-newer

filters out all versions of a package (#18217)

• Configure a real retry minimum delay of 1s (#18201)

• Expand

uv_build

direct build compatibility (#17902)

• Fetch CPython from an Astral mirror by default (#18207)

• Download uv releases from an Astral mirror in installers by default (#18191)

• Add SBOM attestations to Docker images (#18252)

• Improve hint for installing meson-python when missing as build backend (#15826)

Configuration

• Add

UV_INIT_BARE

environment variable for

uv init

(#18210)

Bug fixes

• Prevent

uv tool upgrade

from installing excluded dependencies (#18022)

• Promote authentication policy when saving tool receipts (#18246)

• Respect exclusions in scripts (#18269)

• Retain default-branch Git SHAs in

pylock.toml

files (#18227)

• Skip installed Python check for URL dependencies (#18211)

• Respect constraints during

--upgrade

(#18226)

• Fix

uv tree

orphaned roots and premature deduplication (#17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#18230)

• Move cache prune in GitLab to

after_script

(#18206)

Install uv 0.10.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.10.8/uv-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated) Changelog Sourced from uv's changelog.

0.10.8

Released on 2026-03-03.

Python

• Add CPython 3.10.20

• Add CPython 3.11.15

• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#18247)

• Add resolver hint when

--exclude-newer

filters out all versions of a package (#18217)

• Configure a real retry minimum delay of 1s (#18201)

• Expand

uv_build

direct build compatibility (#17902)

• Fetch CPython from an Astral mirror by default (#18207)

• Download uv releases from an Astral mirror in installers by default (#18191)

• Add SBOM attestations to Docker images (#18252)

• Improve hint for installing meson-python when missing as build backend (#15826)

Configuration

• Add

UV_INIT_BARE

environment variable for

uv init

(#18210)

Bug fixes

• Prevent

uv tool upgrade

from installing excluded dependencies (#18022)

• Promote authentication policy when saving tool receipts (#18246)

• Respect exclusions in scripts (#18269)

• Retain default-branch Git SHAs in

pylock.toml

files (#18227)

• Skip installed Python check for URL dependencies (#18211)

• Respect constraints during

--upgrade

(#18226)

• Fix

uv tree

orphaned roots and premature deduplication (#17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#18230)

• Move cache prune in GitLab to

after_script

(#18206)

Commits • `c021be3` Bump version to 0.10.8 (#18277) • `de60ad5` Use latest Python version filtering in more places (#18273) • `1eb571b` Pin the rustup version in our Docker build (#18255) • `b9abe15` Add SBOM attestations to Docker images (#18252) • `55cbe85` Unify poetry check types (#18260) • `74fe4a0` Vendor mold installation and add more retries (#18271) • `810072d` fix: uv tree orphaned roots and premature deduplication (#17212) • `36955f7` Sync latest Python releases (#18268) • `06933d2` Respect exclusions in scripts (#18269) • `753ad06` Prevent uv tool upgrade from installing excluded dependencies (#18022) • Additional commits viewable in compare view Updates

boto3

from 1.42.59 to 1.42.60 Commits • `bc8f795` Merge branch 'release-1.42.60' • <… meltano/meltano