build(deps): bump astral-sh/uv from 0.12.18 to 0.12.21

[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.12.18 to 0.12.21.

Release notes

Sourced from astral-sh/uv's releases.

0.12.21

Release Notes

Released on 2026-09-29.

Python

• Update CPython to use OpenSSL 3.5.9 (#22076)

Enhancements

• Omit empty [manifest] tables from lockfiles that contain only manifest subtables (#22070)

Preview features

• Omit redundant runtime constraints from uv.lock, including those involving pre-releases, with the resolution-inputs preview feature (#22004, #22068)

Bug fixes

• Prevent uv python pin --rm from removing a global .python-versions file without --global (#21992)
• Fix installed-package checks incorrectly reporting post-releases as incompatible with exclusive lower bounds on pre-releases (#22049)

Install uv 0.12.21

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.21/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.21/uv-installer.ps1 | iex"

Download uv 0.12.21

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
uv-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.21

Released on 2026-09-29.

Python

• Update CPython to use OpenSSL 3.5.9 (#22076)

Enhancements

• Omit empty [manifest] tables from lockfiles that contain only manifest subtables (#22070)

Preview features

• Omit redundant runtime constraints from uv.lock, including those involving pre-releases, with the resolution-inputs preview feature (#22004, #22068)

Bug fixes

• Prevent uv python pin --rm from removing a global .python-versions file without --global (#21992)
• Fix installed-package checks incorrectly reporting post-releases as incompatible with exclusive lower bounds on pre-releases (#22049)

0.12.20

Released on 2026-09-28.

Enhancements

• Reuse lockfiles when dependency declarations are semantically equivalent (#21951)
• Preserve second-line encoding declarations when installing wheel scripts with CRLF shebangs (#21990)

Preview features

• Write normalized requirement declarations with the lockfile-normalization preview feature (#21951)
• Honor synthetic default groups when installing or syncing from pylock.toml (#22003)
• Resolve local paths in exported pylock.toml files relative to the output file (#22042)
• Install each package only once when repeated tool-install-locks requirements resolve to the same package (#22000)
• Reuse lock-without-metadata lockfiles for conflicting groups with distinct base and extra requirement specifiers (#22055)
• Use consistent root-package paths in uv workspace metadata and uv tree --format json output (#22050)

Configuration

• Continue searching XDG_CONFIG_DIRS after empty entries (#21987)

Performance

• Restore the previous HTTP cache-write scheduling while investigating severe cache-revalidation stalls on ext4 filesystems (#22051)

Bug fixes

• Apply hash constraints to every repeated requirement under --require-hashes and --verify-hashes (#21996)

... (truncated)

Commits

• 7af8268 Bump version to 0.12.21 (#22081)
• 73337b7 Fix post-release matching for exclusive version bounds (#22049)
• cd050e4 Sync latest Python releases (#22076)
• d8d2b30 Omit empty manifest headers from lockfiles (#22070)
• 77ab05f Omit compatible prerelease version constraints (#22068)
• 9a04b8f Omit redundant runtime constraints from lockfiles (#22004)
• 89d689b Add a HashReader benchmark (#21782)
• 73b640e Replace serde_yaml with yaml_serde (#22069)
• f93fee6 protect global .python-versions from removal without --global flag (#21992)
• 7467a0d Unify override and exclude code (#20689)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like astral-sh/uv is up-to-date now, so this is no longer needed.