From 0f25e4b23f8fb650642a3dde1fb4f4f63560c930 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Oct 2026 15:37:51 +0000 Subject: [PATCH] deps: bump astral-sh/uv from 0.12.19 to 0.12.23 Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.12.19 to 0.12.23. - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/uv/compare/0.12.19...0.12.23) --- updated-dependencies: - dependency-name: astral-sh/uv dependency-version: 0.12.23 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index de18e068..19612cd5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -262,7 +262,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \ # uv installs the locked Python dependencies in the main stage below. It is mounted from this # stage for that one RUN, never copied, so it does not ship. Digest-pinned, and bumped by the # same Dependabot `docker` entry as the other base images. -FROM ghcr.io/astral-sh/uv:0.12.19@sha256:04d046b13e60d6bcec73cbc5e1cad25d680dea90c8573340950a0ac2d1aef424 AS uv +FROM ghcr.io/astral-sh/uv:0.12.23@sha256:61d393e44e249f2e4b526b6c7ddcecce245946826e608e11c93ad4f5bba55b21 AS uv FROM python:3.13-alpine3.23@sha256:6438599575cca0d1df94aeee0d2ae088d4d8846eab554b2ee7784a3a6df0d516 AS main