From 899a7b6cdf6ddf6f1f77ed3c5a7d22213584ae6f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Oct 2026 12:08:22 +0000 Subject: [PATCH] ci: bump uv from 0.12.5 to 0.12.20 in /.github Bumps [uv](https://github.com/astral-sh/uv) from 0.12.5 to 0.12.20. - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/uv/compare/0.12.5...0.12.20) --- updated-dependencies: - dependency-name: uv dependency-version: 0.12.19 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/ci-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/ci-requirements.txt b/.github/ci-requirements.txt index ba769c3..c5a2c1d 100644 --- a/.github/ci-requirements.txt +++ b/.github/ci-requirements.txt @@ -2,5 +2,5 @@ # no build until a commit here says so. Each job installs only what it runs, # with this file as a constraint: pip install -c .github/ci-requirements.txt uv # Dependabot opens a pull request when one releases. -uv==0.12.5 +uv==0.12.20 semgrep==1.178.0