chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.4.26

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	stage	patch	0.4.23 -> 0.4.26

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.4.26

Compare Source

Enhancements

• Allow static dependency metadata entries for direct URL requirements (#​7846)
• Use reinstall report formatting for uv python install --reinstall (#​8487)
• Add support for system-level uv.toml configuration (#​7851)

Bug fixes

• Apply requires-python narrowing with upper bounds (#​8403)
• Avoid rewriting [[tool.uv.index]] entries when credentials are provided (#​8502)
• Fix uv add comment handling for empty arrays (#​8504)
• Replace dashes with underscores in index credential variables (#​8452)
• Respect --allow-insecure-host in uv publish (#​8440)
• Allow arbitrary --package includes in uv tree (#​8507)
• Remove existing Python install after successful download in uv python install (#​8485)

Documentation

• Add docs example for URLs with [tool.uv.dependency-metadata] (#​8484)
• Add help page for build failures (#​8286)
• Fix cache-keys typo in tags = true (#​8422)
• Add documentation examples for manual branch, rev, and tag Git dependencies (#​8497)

Error messages

• Improve error message for cache info serialization (#​8500)
• Suggest --from command when executable is available for uvx (#​8473)
• Support --with-editable in uv tool install (#​8472)

v0.4.25

Compare Source

Enhancements

• Add support for uv pip show --files (#​8369)
• Don't prefetch unreachable packages (#​8246)
• Remove tool.uv.sources table if it is empty (#​8365)
• Modify cache versioning to support backwards compatibility (#​8386)

Configuration

• Add support for UV_FROZEN and UV_LOCKED (#​8340)

Bug fixes

• Allow dashes and underscores in custom index names (#​8339)
• Avoid panic when Git dependencies are included in fork markers (#​8388)
• Check existing source by normalized name before uv add and uv remove (#​8359)
• Fix bug where username from authentication cache could be ignored (#​8345)
• Fix to respect comments positioning in pyproject.toml on change (#​8384)
• Redact index sources in uv.lock (#​8333)
• Use correct indentation when project table contains open bracket comment (#​8387)
• Only remove a source from [tool.uv.sources] if it is no long being referenced (#​8366)
• Modify uv pip list and uv tree to print to stdout regardless of --quiet flag (#​8392)

Error messages

• Improve help message for missing self update invocations (#​8337)
• Log .netrc parsing errors (#​8364)
• Remove trailing newlines in error messages (#​8322)
• Use a dedicated message for incompatible Python versions in wheel ABI tags (#​8363)
• Remove commands available in the top-level from the suggested subcommand error (#​8316)

Release

• Run release builds for macos-x86_64 on macos-14 runners (#​8327)

v0.4.24

Compare Source

Bug fixes

• Fix Python executable name in Windows free-threaded Python distributions (#​8310)
• Redact index credentials from lockfile sources (#​8307)
• Respect UV_INDEX_ rather than UV_HTTP_BASIC_ as documented (#​8306)
• Improve sources deserialization errors (#​8308)

Documentation

• Correct pytorch-to-torch reference in docs (#​8291)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ API	spectral	1		0	1.29s
⚠️ BASH	bash-exec	6		1	0.02s
✅ BASH	shellcheck	6		0	0.14s
✅ BASH	shfmt	6	0	0	0.34s
✅ COPYPASTE	jscpd	yes		no	4.03s
✅ DOCKERFILE	hadolint	128		0	14.06s
✅ JSON	jsonlint	20		0	0.19s
✅ JSON	v8r	22		0	31.88s
⚠️ MARKDOWN	markdownlint	266	0	297	35.18s
✅ MARKDOWN	markdown-table-formatter	266	0	0	153.63s
⚠️ PYTHON	bandit	212		66	3.38s
✅ PYTHON	black	212	0	0	6.16s
✅ PYTHON	flake8	212		0	3.98s
✅ PYTHON	isort	212	0	0	1.2s
✅ PYTHON	mypy	212		0	22.73s
✅ PYTHON	pylint	212		0	34.89s
✅ PYTHON	ruff	212	0	0	0.52s
✅ REPOSITORY	checkov	yes		no	51.41s
✅ REPOSITORY	git_diff	yes		no	0.25s
⚠️ REPOSITORY	grype	yes		24	14.53s
✅ REPOSITORY	secretlint	yes		no	16.97s
✅ REPOSITORY	trivy	yes		no	23.92s
✅ REPOSITORY	trivy-sbom	yes		no	0.68s
⚠️ REPOSITORY	trufflehog	yes		1	10.36s
✅ SPELL	cspell	713		0	12.94s
⚠️ SPELL	lychee	348		6	59.57s
✅ XML	xmllint	3	0	0	0.35s
✅ YAML	prettier	160	0	0	4.97s
✅ YAML	v8r	102		0	197.62s
✅ YAML	yamllint	161		0	2.54s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by