Repository navigation
Python: chore(deps-dev): bump uv from 0.13.1 to 0.13.4 in /python/packages/lab - #9568
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [uv](https://github.com/astral-sh/uv) from 0.13.1 to 0.13.4. - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.13.1...0.13.4) --- updated-dependencies: - dependency-name: uv dependency-version: 0.13.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
github-actions
Bot
changed the title
There was a problem hiding this comment.
🟢 Approval recommended
The development-only patch update is consistent across both files, with no blocking issues identified.
No open issues 🎉
What changed in this PR
Updates the Python lab package’s development-only uv dependency to 0.13.4, which includes an upstream certificate security update.
Changes:
- Bumps the uv pin from 0.13.1 to 0.13.4.
- Refreshes matching lockfile artifacts and checksums.
| File | Description |
|---|---|
python/packages/lab/uv.lock |
Updates uv version and distribution metadata. |
python/packages/lab/pyproject.toml |
Updates the development dependency pin. |
Review effort: Balanced
|
Superseded by #9590, which includes the newer uv 0.13.5 update in the consolidated Python dependency refresh. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps uv from 0.13.1 to 0.13.4.
Release notes
Sourced from uv's releases.
... (truncated)
Changelog
Sourced from uv's changelog.
... (truncated)
Commits
7456b60Bump version to 0.13.4 (#22761)0a7aa9dSwitch back to env::args_os (#22763)5bae848Update certifi to 2026.10.19 (#22762)158c9d3Bump webpki-root-certs to 1.0.10 (#22760)5280ad3Parse and validate variant metadata (#22512)8d16266Use indoc for multiline test strings (#22723)502f93cBump version to 0.13.3 (#22752)0595a11Revert optional-extra activation tracking in exports (#22750)b2eb713Deserialize build metadata contacts in one pass (#22748)b986924Borrow the uv-build command argument (#22747)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.