⬆️ Update astral-sh/uv to v0.11.25

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv	uses-with	patch	0.11.23 → 0.11.25

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.11.25

Compare Source

Released on 2026-06-26.

Security

This release updates our tar library, astral-tokio-tar, to v0.6.3, which includes over 20 changes that harden our tar handling against parser differentials. uv may reject source distributions with malformed or ambiguous content that were previously accepted.

See the upstream commits for a full list of changes.

Enhancements

• Add a full "lockfile" to tool receipts (#​18937)
• Allow scoped overrides to add dependencies (#​19974)
• Avoid writing redundant lockfile markers with tool.uv.environments (#​19933)
• Factor supported environments out of lockfile markers (#​19969)
• Recommend our own build backend in the build frontend (#​19994)
• Reject wheels with multiple .dist-info directories (#​19986)
• Simplify dependency markers under parent reachability (#​19971)
• Support scoped dependency exclusions (#​19977)
• Support scoped dependency overrides (#​19970)
• Explain why files are skipped in registry index parsing (#​19983)

Preview features

• Add uv workspace list --scripts (#​20009)
• Support centralised environments in uv venv (#​19912)
• Use locked ty versions in uv check (#​19884)
• Add centralized storage of project environments (#​18214)
• Verify lockfile hashes before reusing a cached ty in uv check (#​19995)
• Use locked dependency selection for uv check --script (#​19989)

Bug fixes

• Preserve standalone markers in workspace metadata (#​20011)
• Reject uv build if the cache dir is enclosed (#​19991)

v0.11.24

Compare Source

Released on 2026-06-23.

Python

• Add CPython 3.15.0b3 (#​19964)

Preview features

• Make project environments relocatable under preview (#​19965)

Performance

• Use a compact index for lazy version maps (#​19959)

Bug fixes

• Allow disabling exclude-newer (#​19934)
• Avoid archive id collisions (#​19949)
• Reapply "Fix transparent Python upgrades in project environments" (#​19928)
• Clean up partial tool entrypoint installs (#​19966)
• Fix relocatable activate.fish and broaden Fish version support (#​19856)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.