Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action	action	minor	v3.10.0 -> v3.11.1
ghcr.io/astral-sh/uv	final	patch	0.7.12 -> 0.7.15
sigstore/cosign-installer	action	minor	v3.8.2 -> v3.9.1

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v3.11.1

Compare Source

• Fix keep-state not being respected by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

• Keep BuildKit state support by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/427
• Remove aliases created when installing by default by @​hashhar in https://github.com/docker/setup-buildx-action/pull/139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/setup-buildx-action/pull/422 https://github.com/docker/setup-buildx-action/pull/425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.7.15

Compare Source

Enhancements

• Consistently use Ordering::Relaxed for standalone atomic use cases (#​14190)
• Warn on ambiguous relative paths for --index (#​14152)
• Skip GitHub fast path when rate-limited (#​13033)
• Preserve newlines in schema.json descriptions (#​13693)

Bug fixes

• Add check for using minor version link when creating a venv on Windows (#​14252)
• Strip query parameters when parsing source URL (#​14224)

Documentation

• Add a link to PyPI FAQ to clarify what per-project token is (#​14242)

Preview features

• Allow symlinks in the build backend (#​14212)

v0.7.14

Compare Source

Enhancements

• Add XPU to --torch-backend (#​14172)
• Add ROCm backends to --torch-backend (#​14120)
• Remove preview label from --torch-backend (#​14119)
• Add [tool.uv.dependency-groups].mygroup.requires-python (#​13735)
• Add auto-detection for AMD GPUs (#​14176)
• Show retries for HTTP status code errors (#​13897)
• Support transparent Python patch version upgrades (#​13954)
• Warn on empty index directory (#​13940)
• Publish to DockerHub (#​14088)

Performance

• Make cold resolves about 10% faster (#​14035)

Bug fixes

• Don't use walrus operator in interpreter query script (#​14108)
• Fix handling of changes to requires-python (#​14076)
• Fix implied platform_machine marker for win_amd64 platform tag (#​14041)
• Only update existing symlink directories on preview uninstall (#​14179)
• Serialize Python requests for tools as canonicalized strings (#​14109)
• Support netrc and same-origin credential propagation on index redirects (#​14126)
• Support reading dependency-groups from pyproject.tomls with no [project] (#​13742)
• Handle an existing shebang in uv init --script (#​14141)
• Prevent concurrent updates of the environment in uv run (#​14153)
• Filter managed Python distributions by platform before querying when included in request (#​13936)

Documentation

• Replace cuda124 with cuda128 (#​14168)
• Document the way member sources shadow workspace sources (#​14136)
• Sync documented PyTorch integration index for CUDA and ROCm versions from PyTorch website (#​14100)

v0.7.13

Compare Source

Python

• Add Python 3.14.0b2
• Add Python 3.13.5
• Fix stability of uuid.getnode on 3.13

See the
python-build-standalone release notes
for more details.

Enhancements

• Download versions in uv python pin if not found (#​13946)
• Use TTY detection to determine if SIGINT forwarding is enabled (#​13925)
• Avoid fetching an exact, cached Git commit, even if it isn't locked (#​13748)
• Add zstd and deflate to Accept-Encoding (#​13982)
• Build binaries for riscv64 (#​12688)

Bug fixes

• Check if relative URL is valid directory before treating as index (#​13917)
• Ignore Python discovery errors during uv python pin (#​13944)
• Do not allow uv add --group ... --script (#​13997)

Preview changes

• Build backend: Support namespace packages (#​13833)

Documentation

• Add 3.14 to the supported platform reference (#​13990)
• Add an llms.txt to uv (#​13929)
• Add supported macOS version to the platform reference (#​13993)
• Update platform support reference to include Python implementation list (#​13991)
• Update pytorch.md (#​13899)
• Update the CLI help and reference to include references to the Python bin directory (#​13978)

sigstore/cosign-installer (sigstore/cosign-installer)

v3.9.1

Compare Source

What's Changed

• default action install to use release v2.5.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/193
• default cosign to v2.5.2 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/194

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/189
• bump cosign install to use release v2.5.0 as default by @​cpanato in https://github.com/sigstore/cosign-installer/pull/191

Full Changelog: sigstore/cosign-installer@v3...v3.9.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[qlty-cloud-legacy]

Code Climate has analyzed commit 9080faa and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (100% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.

[qltysh]

Diff Coverage: Not applicable. There was no coverage data reported for the files in this diff.

Total Coverage: This PR will not change total coverage.

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.