chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	final	patch	0.10.4 → 0.10.8

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.10.8

Released on 2026-03-03.

Python

• Add CPython 3.10.20
• Add CPython 3.11.15
• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#​18247)
• Add resolver hint when --exclude-newer filters out all versions of a package (#​18217)
• Configure a real retry minimum delay of 1s (#​18201)
• Expand uv_build direct build compatibility (#​17902)
• Fetch CPython from an Astral mirror by default (#​18207)
• Download uv releases from an Astral mirror in installers by default (#​18191)
• Add SBOM attestations to Docker images (#​18252)
• Improve hint for installing meson-python when missing as build backend (#​15826)

Configuration

• Add UV_INIT_BARE environment variable for uv init (#​18210)

Bug fixes

• Prevent uv tool upgrade from installing excluded dependencies (#​18022)
• Promote authentication policy when saving tool receipts (#​18246)
• Respect exclusions in scripts (#​18269)
• Retain default-branch Git SHAs in pylock.toml files (#​18227)
• Skip installed Python check for URL dependencies (#​18211)
• Respect constraints during --upgrade (#​18226)
• Fix uv tree orphaned roots and premature deduplication (#​17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#​18230)
• Move cache prune in GitLab to after_script (#​18206)

v0.10.7

Compare Source

Released on 2026-02-27.

Bug fixes

• Fix handling of junctions in Windows Containers on Windows (#​18192)

Enhancements

• Activate logging for middleware retries (#​18200)
• Upload uv releases to a mirror (#​18159)

v0.10.6

Compare Source

Released on 2026-02-24.

Bug fixes

• Apply lockfile marker normalization for fork markers (#​18116)
• Fix Python version selection for scripts with a requires-python conflicting with .python-version (#​18097)
• Preserve file permissions when using reflinks on Linux (#​18187)

Documentation

• Remove verbose documentation from optional dependencies help text (#​18180)

v0.10.5

Compare Source

Released on 2026-02-23.

Enhancements

• Add hint when named index is found in a parent config file (#​18087)
• Add warning for uv lock --frozen (#​17859)
• Attempt to use reflinks by default on Linux (#​18117)
• Fallback to hardlinks after reflink failure before copying (#​18104)
• Filter pylock.toml wheels by tags and requires-python (#​18081)
• Validate wheel filenames are normalized during uv publish (#​17783)
• Fix message when exclude-newer invalidates the lock file (#​18100)
• Change the missing files log level to debug (#​18075)

Performance

• Improve performance of repeated conflicts with an extra (#​18094)

Bug fixes

• Fix --no-emit-workspace with --all-packages on single-member workspaces (#​18098)
• Fix UV_NO_DEFAULT_GROUPS rejecting truthy values like 1 (#​18057)
• Fix iOS detection (#​17973)
• Propagate project-level conflicts to package extras (#​18096)
• Use a global build concurrency semaphore (#​18054)

Documentation

• Update documentation heading for environment variable files (#​18122)
• Fix comment about uv export formats (#​17900)
• Make it clear that Windows is supported in user- and system- level configuration docs (#​18106)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.03%. Comparing base (ade316a) to head (21026b7).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #468   +/-   ##
=======================================
  Coverage   96.03%   96.03%           
=======================================
  Files          40       40           
  Lines        2320     2320           
=======================================
  Hits         2228     2228           
  Misses         92       92           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.