perf(deps): update ghcr.io/astral-sh/uv docker tag to v0.9.6 (#234)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
final | patch | `0.9.5` -> `0.9.6` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.9.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#096)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.5...0.9.6)

Released on 2025-10-29.

This release contains an upgrade to Astral's fork of `async_zip`, which
addresses potential sources of ZIP parsing differentials between uv and
other Python packaging tooling. See
[GHSA-pqhf-p39g-3x64](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64)
for additional details.

##### Security

- Address ZIP parsing differentials
([GHSA-pqhf-p39g-3x64](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64))

##### Python

- Upgrade GraalPy to 25.0.1
([#&#8203;16401](https://redirect.github.com/astral-sh/uv/pull/16401))

##### Enhancements

- Add `--clear` to `uv build` to remove old build artifacts
([#&#8203;16371](https://redirect.github.com/astral-sh/uv/pull/16371))
- Add `--no-create-gitignore` to `uv build`
([#&#8203;16369](https://redirect.github.com/astral-sh/uv/pull/16369))
- Do not error when a virtual environment directory cannot be removed
due to a busy error
([#&#8203;16394](https://redirect.github.com/astral-sh/uv/pull/16394))
- Improve hint on `pip install --system` when externally managed
([#&#8203;16392](https://redirect.github.com/astral-sh/uv/pull/16392))
- Running `uv lock --check` with outdated lockfile will print that
`--check` was passed, instead of `--locked`
([#&#8203;16322](https://redirect.github.com/astral-sh/uv/pull/16322))
- Update `uv init` template for Maturin
([#&#8203;16449](https://redirect.github.com/astral-sh/uv/pull/16449))
- Improve ordering of Python sources in logs
([#&#8203;16463](https://redirect.github.com/astral-sh/uv/pull/16463))
- Restore DockerHub release images and annotations
([#&#8203;16441](https://redirect.github.com/astral-sh/uv/pull/16441))

##### Bug fixes

- Check for matching Python implementation during `uv python upgrade`
([#&#8203;16420](https://redirect.github.com/astral-sh/uv/pull/16420))
- Deterministically order `--find-links` distributions
([#&#8203;16446](https://redirect.github.com/astral-sh/uv/pull/16446))
- Don't panic in `uv export --frozen` when the lockfile is outdated
([#&#8203;16407](https://redirect.github.com/astral-sh/uv/pull/16407))
- Fix root of `uv tree` when `--package` is used with circular
dependencies
([#&#8203;15908](https://redirect.github.com/astral-sh/uv/pull/15908))
- Show package list with `pip freeze --quiet`
([#&#8203;16491](https://redirect.github.com/astral-sh/uv/pull/16491))
- Limit `uv auth login pyx.dev` retries to 60s
([#&#8203;16498](https://redirect.github.com/astral-sh/uv/pull/16498))
- Add an empty group with `uv add --group ... -r ...`
([#&#8203;16490](https://redirect.github.com/astral-sh/uv/pull/16490))

##### Documentation

- Update docs for maturin build backend init template
([#&#8203;16469](https://redirect.github.com/astral-sh/uv/pull/16469))
- Update docs to reflect previous changes to signal forwarding semantics
([#&#8203;16430](https://redirect.github.com/astral-sh/uv/pull/16430))
- Add instructions for installing via MacPorts
([#&#8203;16039](https://redirect.github.com/astral-sh/uv/pull/16039))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Only on Sunday and Saturday ( * * * * 0,6 ) in timezone
Europe/Dublin.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/bss-web-file-api).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.12.12-alpine@sha256:d82291d418d5c47f267708393e40599ae836f2260b0519
 
 FROM python AS builder
 
-COPY --from=ghcr.io/astral-sh/uv:0.9.5@sha256:f459f6f73a8c4ef5d69f4e6fbbdb8af751d6fa40ec34b39a1ab469acd6e289b7 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.9.6@sha256:4b96ee9429583983fd172c33a02ecac5242d63fb46bc27804748e38c1cc9ad0d /uv /uvx /bin/
 
 ENV UV_LINK_MODE=copy \
     UV_COMPILE_BYTECODE=1 \