chore(deps): bump uv from 0.12.13 to 0.12.14

[dependabot]

Bumps uv from 0.12.13 to 0.12.14.

Release notes

Sourced from uv's releases.

0.12.14

Release Notes

Released on 2026-09-15.

Package-operation errors now use uv's standard diagnostics, with consistent hints and compact, labeled cause chains. (#17110, #21599, #21603)

Package-operation exit codes now reflect the underlying cause: expected failures return 1, while recognized operational and internal failures return 2. (#17110)

Enhancements

• Resume interrupted downloads with HTTP Range requests when supported (#21570)
• Show underlying causes and hints in user warnings (#21565)
• Show resolver hints for failed uv tool upgrade operations (#21566)

Preview features

• Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#21618)

Performance

• Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#21619)
• Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#21593)
• Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#21621)

Bug fixes

• Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#21672)
• Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#21625)
• Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#21639)
• Redact credentials and signatures from missing-path-segment URL errors (#21616)
• Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#21640)
• Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#21559)
• Suppress managed-Python fallback warnings under --quiet (#21565)
• Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#21566)

Install uv 0.12.14

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.14/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.14/uv-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.14

Released on 2026-09-15.

Package-operation errors now use uv's standard diagnostics, with consistent hints and compact, labeled cause chains. (#17110, #21599, #21603)

Package-operation exit codes now reflect the underlying cause: expected failures return 1, while recognized operational and internal failures return 2. (#17110)

Enhancements

• Resume interrupted downloads with HTTP Range requests when supported (#21570)
• Show underlying causes and hints in user warnings (#21565)
• Show resolver hints for failed uv tool upgrade operations (#21566)

Preview features

• Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#21618)

Performance

• Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#21619)
• Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#21593)
• Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#21621)

Bug fixes

• Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#21672)
• Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#21625)
• Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#21639)
• Redact credentials and signatures from missing-path-segment URL errors (#21616)
• Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#21640)
• Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#21559)
• Suppress managed-Python fallback warnings under --quiet (#21565)
• Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#21566)

Commits

• ce3bd79 Bump version to 0.12.14 (#21688)
• 72b9215 Update Rust crate http-content-range to v0.2.5 (#21661)
• b432e18 Update Rust crate http-body-util to v0.1.5 (#21660)
• 06b0371 Update Rust crate thiserror to v2.0.20 (#21663)
• 2cc6abc Update Rust crate futures to v0.3.34 (#21659)
• e4013eb Update open-security-tools/ost-simple-sts action to v0.0.5 (#21656)
• 6f7795b Update Rust crate axoupdater to v0.10.2 (#21658)
• 643950c Update Rust crate async-trait to v0.1.92 (#21657)
• 13dd623 Add support for batched exports from a shared lockfile (#21618)
• ffc98b1 Forbid install-action via zizmor (#21682)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)