build(deps): Bump astral-sh/uv from 0.12.1 to 0.12.5 in the docker-images group across 1 directory

[dependabot]

Bumps the docker-images group with 1 update in the / directory: astral-sh/uv.

Updates astral-sh/uv from 0.12.1 to 0.12.5

Release notes

Sourced from astral-sh/uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"

Download uv 0.12.5

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.5

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits

• 210d1f6 Bump version to 0.12.5 (#21140)
• 802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
• a6904bb Order equal-priority Python installations by key (#21134)
• 728a70d Improve automated fixes for related bug manifestations (#21102)
• b82b038 Include hashes in cyclonedx exports (#21131)
• 8011778 Simplify editable requirement errors and hints (#21130)
• dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
• 3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
• 7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
• 298dda4 Fix relative indexes in PEP 723 scripts (#21097)
• Additional commits viewable in compare view

[richardmhope]

One-line Dockerfile change: the FROM ghcr.io/astral-sh/uv:0.12.1 AS uv stage moves to 0.12.5. The named-stage form is preserved, which matters — the comment above it exists because Dependabot's Docker parser reads FROM lines only, so folding this back into a COPY --from= would make the pin invisible to updates.

0.12.2 → 0.12.5 is bug fixes and Python-build additions; nothing that changes how uv sync --frozen --no-dev resolves. The builder stage is the only consumer.

Note this PR is already behind reality — uv is at 0.12.9, and the CI runner installed 0.12.9 in this very run. Still strictly better than sitting on 0.12.1, and Dependabot will supersede it. Merging rather than waiting.

Approving once the re-run on the updated branch is green.

---

Generated by Claude Code