chore(deps): update taskfile

[agntcy-automation]

This PR contains the following updates:

Package	Update	Change	Pending	Age	Confidence
astral-sh/uv	patch	0.12.5 → 0.12.7	0.12.9 (+1)
kubernetes/kubernetes	minor	1.36.4 → 1.37.0
renovatebot/renovate	minor	44.39.3 → 44.48.3	44.61.6 (+37)
sigs.k8s.io/kind	minor	0.32.0 → 0.33.0

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.12.7

Compare Source

Released on 2026-08-27.

Python

• Replace managed Python installations when upgrading to a newer build of the same version (#​21323)

Enhancements

• Support Linux s390x, ppc64le, and loongarch64 targets for cross-platform dependency resolution (#​21313)
• Retry downloads with configured credentials when Azure Storage denies anonymous access to an endpoint configured via UV_AZURE_ENDPOINT_URL (#​21318)

Preview features

• Use content-based directory hashes to deduplicate extracted wheels in the cache with the content-addressed-cache preview feature (#​19693)

Bug fixes

• Reject source archives with hash mismatches before persisting their extracted contents to the cache (#​21248)

Other changes

• remove pyx specific features (#​21182, #​21183, #​21184, #​21185, #​21186)

v0.12.6

Compare Source

Released on 2026-08-25.

Python

• Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #​21295)

Enhancements

• Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#​21261)
• Limit warnings about unbounded uv_build requirements to source-distribution builds (#​21078)
• Display byte counts below 1 KiB without a fractional part (#​21237)

Preview features

• Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#​21117)
• Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#​21235)
• Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#​21227)
• Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#​21146)

Performance

• Enable profile-guided optimization for Linux x86-64 release binaries (#​21001)
• Enable profile-guided optimization for Windows x86-64 release binaries (#​21003)
• Enable profile-guided optimization for macOS ARM64 release binaries (#​21002)
• Enable profile-guided optimization for Linux ARM64 release binaries (#​21004)
• Speed up syncing projects with many activated conflict items by reusing their encoded representation (#​21148)

Bug fixes

• Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#​21294)
• Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#​21275)
• Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#​21224)
• Prevent TLS segfaults in riscv64 musl release binaries (#​21158)
• Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#​21181)
• Preserve version constraints from transitively referenced recursive extras (#​21209)
• Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#​21264)
• Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#​21282)
• Do not misclassify package URLs ending in .py as local script paths (#​21144)
• Use directory creation times consistently across libc implementations for directory cache-keys entries (#​21137)
• Promote human-readable sizes to the next unit at rounding boundaries (#​21136)

Other changes

• Add Python 3.15 release-candidate Docker images (#​21293)
• Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#​21258)

kubernetes/kubernetes (kubernetes/kubernetes)

v1.37.0

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

renovatebot/renovate (renovatebot/renovate)

v44.48.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.3 (main) (#​45523) (16f06e5)

Miscellaneous Chores

• deps: update dependency uv to v0.12.7 (main) (#​45521) (905f42a)

v44.48.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.2 (main) (#​45518) (cab7099)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.12.7 (main) (#​45519) (90df877)

Code Refactoring

• lint: add types-location rule and enable it for lib/modules (#​45497) (e0cec3d)

v44.48.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.1 (main) (#​45516) (87d882e)

v44.48.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.0 (main) (#​45515) (9cd8c6d)

v44.47.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.90.0 (main) (#​45512) (e0aa2ca)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.2 (main) (#​45511) (9f7e356)

v44.46.7

Compare Source

Bug Fixes

• changelog: dedupe releases which are equal for the versioning in use (#​45506) (28391ae)
• datasource/docker: update traefik source URL to traefik/traefik (#​45505) (9d90b63)

Documentation

• point to logLevelRemap for minimumReleaseAgeBehaviour=timestamp-optional warnings (#​45498) (41820f7)

Miscellaneous Chores

• deps: update github/codeql-action action to v4.37.9 (main) (#​45484) (2455656)

Build System

• deps: update dependency node to v24.20.0 (main) (#​45509) (d1c191a)

v44.46.6

Compare Source

Build System

• deps: update node.js to v24.20.0 (main) (#​45485) (5c8e0de)

v44.46.5

Compare Source

Bug Fixes

• github: respect automergeStrategy with platform automerge (#​44563) (93afa9f)

Miscellaneous Chores

• deps: update dependency vite to v8.2.2 (main) (#​45491) (fcec542)

v44.46.4

Compare Source

Bug Fixes

• lint: use parseInt over Number (#​45472) (0216124)

v44.46.3

Compare Source

Bug Fixes

• logger: only truncate metaFields when they're string values (#​45478) (e456197)

Code Refactoring

• logger: remove unused dependencies as a stringified metaField (#​45477) (4c8a1bd)

Tests

• logger: add coverage of current metaFields stringifying behaviour (#​45476) (1d48943)

v44.46.2

Compare Source

Bug Fixes

• lint: extend prefer-is-helpers to catch more cases (#​45474) (a9c8f74)

v44.46.1

Compare Source

Bug Fixes

• manager/gomod: handle bare ../ replace paths in gomodTidyAll (#​45392) (cee4515)

Miscellaneous Chores

• deps: update linters to v1.79.0 (main) (#​44542) (91dafe9)

v44.46.0

Compare Source

Features

• presets: add @​oxlint/* packages to packages:linters and monorepo:oxlint (#​45466) (1012b34)

v44.45.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.7 (main) (#​45471) (844a2ce)

v44.45.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.6 (main) (#​45470) (224f1e3)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.1 (main) (#​45469) (bc0672b)

v44.45.2

Compare Source

Bug Fixes

• github-graphql: lower shrinkPageSize floor from 25 to 5 (#​45460) (d4c29b1)

v44.45.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.5 (main) (#​45468) (dfda756)

v44.45.0

Compare Source

Features

• http/bitbucket: warn when an endpoint announces a deprecation (#​45461) (a4b5c18)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.12.6 (main) (#​45464) (f35acdd)
• deps: update dependency uv to v0.12.6 (main) (#​45465) (1d366f3)

Tests

• manager/bundler: add missing branch coverage in extract() (#​45457) (aa5d1e5)
• versioning/conan: ignore unreachable coverage branches (#​45458) (0cc9356)

v44.44.0

Compare Source

Features

• http/bitbucket: surface deprecated and removed API functionality (#​45446) (4eee9a4)

Bug Fixes

• manager/sveltos: concatenate repositoryURL with chartName for OCI (#​45439) (448597f)
• platform/bitbucket: remove support for Issues (#​45445) (ad63ddd), closes #​20568

Miscellaneous Chores

• deps: update vitest monorepo to v4.1.11 (main) (#​45452) (e173b32)

Code Refactoring

• http: add a handleResponse hook (#​45449) (3861bda)

v44.43.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.4 (main) (#​45444) (7d7f286)

v44.43.0

Compare Source

Features

• manager/github-actions: add workflow depType for reusable workflow calls (#​45443) (69e0523)

Miscellaneous Chores

• deps: update jdx/mise-action action to v4.3.0 (main) (#​45442) (577ffce)

v44.42.2

Compare Source

Bug Fixes

• manager/copier: report template conflicts as artifact errors (#​45433) (c3b0166)

v44.42.1

Compare Source

Bug Fixes

• platform/azure: detect hosted deployment when deploymentType is a string (#​45440) (694410d)

Miscellaneous Chores

• deps: update dependency @​biomejs/biome to v2.5.9 (main) (#​45435) (ccc37d5)
• deps: update dependency @​types/markdown-it to v14.2.0 (main) (#​45436) (033d1a7)

v44.42.0

Compare Source

Features

• always set CI=true for subprocesses (43d63f9), closes #​43761 #​43606
• always set CI=true for subprocesses (5b17499), closes #​43761 #​43606

Code Refactoring

• manager/npm: remove redundant CI=true (f50bee3)
• tools: extract function for basicEnvVars docs (8770bff)

Tests

• manager/npm: fix getChildProcessEnv mock in yarn tests (2779587)
• util/exec: be more strict in expected value (0d920f1)

v44.41.1

Compare Source

Bug Fixes

• http/github: support cursor pagination (#​45241) (9cc1ab0)

v44.41.0

Compare Source

Features

• config: add overrideDescription option (#​45400) (9d0e535)

v44.40.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.3 (main) (#​45419) (28abf41)

Miscellaneous Chores

• deps: update dependency @​oxlint/plugins to v1.78.0 (main) (#​45346) (ea8d11b)

v44.40.0

Compare Source

Features

• data: automatic update of static data (#​45401) (c05d35a)

Documentation

• update references to otel/opentelemetry-collector-contrib to v0.159.0 (main) (#​45408) (823dd62)
• update references to prom/prometheus to v3.14.0 (main) (#​45410) (385ab96)
• update references to python to 4fad234 (main) (#​45407) (9ce288e)
• update references to renovate/renovate (main) (#​45411) (e162f91)
• update references to renovatebot/github-action to v46.2.3 (main) (#​45412) (7aafba7)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​45413) (597312a)
• deps: lock file maintenance (main) (#​45414) (53ce594)

kubernetes-sigs/kind (sigs.k8s.io/kind)

v0.33.0

Compare Source

This release contains critical dependency updates, bug fixes, and defaults to Kubernetes 1.36.1.

Breaking Changes

The default node image is now kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5.

New Features

• Assorted dependency updates.

Images pre-built for this release:

• v1.37.0: kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5
• v1.36.4: kindest/node:v1.36.4@sha256:099e049362a1526b2db71494e1947aae99bd16290d7c895f2b7ea312e3cbfaed
• v1.35.8: kindest/node:v1.35.8@sha256:07b2536e30b803ed61d1677a79df6115f798ce64c80f9e22f6ed45afd09323c0
• v1.34.11: kindest/node:v1.34.11@sha256:44e222ee2132dab25ff87301682f89eb82c7880ea3a1bf543bfe9708fd08d67d

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #​2718

Fixes

• Respect Docker client proxy config for docker nodes. (#​4192)
• Preserve external load balancer CDS/LDS configuration across container restarts. (#​4195)
• Improve local-path-provisioner helperPod tolerations. (#​4210)
• Assorted documentation fixes and improvements.

Contributors

Committers for this release:

• @​antoineco
• @​BenTheElder
• @​christian-heusel
• @​erichorwath
• @​immanuwell
• @​jboero
• @​k8s-ci-robot
• @​liggitt
• @​null
• @​popsiclelmlm
• @​sestegra
• @​stmcginnis
• @​tom1299

We'd also like to thank everyone who touched the codebase, filed issues, and helped the community!

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!