build: bump the docker group across 1 directory with 2 updates

[dependabot]

Bumps the docker group with 2 updates in the /.devcontainer directory: astral-sh/uv and devcontainers/python.

Updates astral-sh/uv from 0.11.28 to 0.12.1

Release notes

Sourced from astral-sh/uv's releases.

0.12.1

Release Notes

Released on 2026-07-31.

Enhancements

• Add package-specific pre-release policies with --prerelease-package (#20837)
• Support local HTML files as flat indexes (#20802)
• Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
• Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

• Add automatic fixes to uv check with --fix (#20793)
• Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
• Honor direct URL constraints when validating metadata-free lockfiles (#20796)
• Ignore malformed PEP 723 scripts discovered during project checks (#20784)
• Use ty's native script exclusion in uv check (#20742)

Performance

• Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
• Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

• Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
• Make workspace-root dependency groups available to commands run from workspace members (#20840)
• Resolve --find-links paths in requirements files relative to the containing file (#20832)
• Respect configured indexes in uv tool list --outdated (#20770)

Documentation

• Document Astral GPU indexes in the PyTorch guide (#20785)
• Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

Install uv 0.12.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.1

Released on 2026-07-31.

Enhancements

• Add package-specific pre-release policies with --prerelease-package (#20837)
• Support local HTML files as flat indexes (#20802)
• Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
• Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

• Add automatic fixes to uv check with --fix (#20793)
• Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
• Honor direct URL constraints when validating metadata-free lockfiles (#20796)
• Ignore malformed PEP 723 scripts discovered during project checks (#20784)
• Use ty's native script exclusion in uv check (#20742)

Performance

• Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
• Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

• Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
• Make workspace-root dependency groups available to commands run from workspace members (#20840)
• Resolve --find-links paths in requirements files relative to the containing file (#20832)
• Respect configured indexes in uv tool list --outdated (#20770)

Documentation

• Document Astral GPU indexes in the PyTorch guide (#20785)
• Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

0.12.0

Released on 2026-07-28.

Since we released uv 0.11.0 in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution.

We expect most users to be able to upgrade without making changes.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.12, e.g., uv_build>=0.11.32,<0.13.

Breaking changes

• Define build systems by default with uv init (#19197)

... (truncated)

Commits

• 329541a Bump version to 0.12.1 (#20867)
• a68f64b fix ost-simple-sts.json (#20866)
• a531d91 Generate README files for issue context branches (#20862)
• 3a9573c Add --frozen to uv run hook invocation (#20865)
• 2a805bd Relocate script (#20864)
• d709d47 Honor direct sources shared across workspace dependencies (#20847)
• a51d7db Rebase promoted pull requests in uv (#20861)
• ec8ad5b Honor direct URL constraints when validating metadata-free locks (#20796)
• 1ac4b3e Allow commands run in workspace members to use root dependency groups (#20840)
• 139f2cf Remove stale Node 20 action TODOs (#20843)
• Additional commits viewable in compare view

Updates devcontainers/python from 1c3a630 to f04a1e9

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: docker. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.