chore(deps): update uv-build requirement from <0.13.0,>=0.12.5 to >=0.12.6,<0.13.0

[dependabot]

Updates the requirements on uv-build to permit the latest version.

Release notes

Sourced from uv-build's releases.

0.12.6

Release Notes

Released on 2026-08-25.

Python

• Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #21295)

Enhancements

• Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#21261)
• Limit warnings about unbounded uv_build requirements to source-distribution builds (#21078)
• Display byte counts below 1 KiB without a fractional part (#21237)

Preview features

• Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#21117)
• Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#21235)
• Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#21227)
• Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#21146)

Performance

• Enable profile-guided optimization for Linux x86-64 release binaries (#21001)
• Enable profile-guided optimization for Windows x86-64 release binaries (#21003)
• Enable profile-guided optimization for macOS ARM64 release binaries (#21002)
• Enable profile-guided optimization for Linux ARM64 release binaries (#21004)
• Speed up syncing projects with many activated conflict items by reusing their encoded representation (#21148)

Bug fixes

• Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#21294)
• Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#21275)
• Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#21224)
• Prevent TLS segfaults in riscv64 musl release binaries (#21158)
• Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#21181)
• Preserve version constraints from transitively referenced recursive extras (#21209)
• Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#21264)
• Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#21282)
• Do not misclassify package URLs ending in .py as local script paths (#21144)
• Use directory creation times consistently across libc implementations for directory cache-keys entries (#21137)
• Promote human-readable sizes to the next unit at rounding boundaries (#21136)

Other changes

• Add Python 3.15 release-candidate Docker images (#21293)
• Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#21258)

Install uv 0.12.6

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.12.6

Released on 2026-08-25.

Python

• Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #21295)

Enhancements

• Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#21261)
• Limit warnings about unbounded uv_build requirements to source-distribution builds (#21078)
• Display byte counts below 1 KiB without a fractional part (#21237)

Preview features

• Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#21117)
• Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#21235)
• Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#21227)
• Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#21146)

Performance

• Enable profile-guided optimization for Linux x86-64 release binaries (#21001)
• Enable profile-guided optimization for Windows x86-64 release binaries (#21003)
• Enable profile-guided optimization for macOS ARM64 release binaries (#21002)
• Enable profile-guided optimization for Linux ARM64 release binaries (#21004)
• Speed up syncing projects with many activated conflict items by reusing their encoded representation (#21148)

Bug fixes

• Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#21294)
• Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#21275)
• Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#21224)
• Prevent TLS segfaults in riscv64 musl release binaries (#21158)
• Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#21181)
• Preserve version constraints from transitively referenced recursive extras (#21209)
• Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#21264)
• Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#21282)
• Do not misclassify package URLs ending in .py as local script paths (#21144)
• Use directory creation times consistently across libc implementations for directory cache-keys entries (#21137)
• Promote human-readable sizes to the next unit at rounding boundaries (#21136)

Other changes

• Add Python 3.15 release-candidate Docker images (#21293)
• Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#21258)

0.12.5

Released on 2026-08-14.

... (truncated)

Commits

• 7938ca5 Fix release binary workflow permissions (#21298)
• 6cffb32 Bump version to 0.12.6 (#21297)
• fab2c0c Improve basic space accounting when reporting cache clean space savings (#21261)
• 64c73b1 Reuse configured index credentials during tool upgrades (#21275)
• 45e75a4 feat(docker): add 3.15 rc images to uv docker (#21293)
• e436b76 Allow first-party builds with no-build (#21294)
• ba1f8c1 Sync latest Python releases (#21295)
• a61e5c9 Require bot:promote for uv-security PR promotion (#21286)
• 2e7d28b Limit CI planner checkout depth (#21291)
• 60a38ed Separate hash generation policy from verification policy (#21247)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[yo61-lastlight]

This uv-build requirement bump is limited to dependency metadata and the head checks are green, so auto-merge is armed. The PR is currently blocked with no approving review recorded, so a maintainer needs to approve or merge it.