chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.5.30 (#53)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | stage | patch | `0.5.24` -> `0.5.30` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

### [`v0.5.30`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0530)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.29...0.5.30)

##### Python

The managed PyPy distributions have been updated for PyPy v7.3.18, which includes:

-   PyPy3.10, which updates the standard library from Python 3.10.14 to 3.10.19
-   PyPy3.11, which adds beta support for Python 3.11.11

See the [PyPy release](https://pypy.org/posts/2025/02/pypy-v7318-release.html) for more details.

##### Enhancements

-   Add `uv sync --dry-run` ([#&#8203;11299](https://github.com/astral-sh/uv/pull/11299))
-   Ignore `#egg` fragment in HTML Simple API response ([#&#8203;11340](https://github.com/astral-sh/uv/pull/11340))

##### Configuration

-   Add `NO_BINARY` and `NO_BINARY_PACKAGE` environment variables ([#&#8203;11399](https://github.com/astral-sh/uv/pull/11399))

##### Performance

-   Avoid re-cloning name when populating ambiguous set ([#&#8203;11401](https://github.com/astral-sh/uv/pull/11401))
-   Optimize flattening in large workspaces ([#&#8203;11313](https://github.com/astral-sh/uv/pull/11313))

##### Bug fixes

-   Allow dynamic packages to be overloaded ([#&#8203;11400](https://github.com/astral-sh/uv/pull/11400))
-   Fix credential caching for index roots when URL ends in `simple/` ([#&#8203;11336](https://github.com/astral-sh/uv/pull/11336))
-   Fix marker merging for requirements.txt for psycopg ([#&#8203;11298](https://github.com/astral-sh/uv/pull/11298))
-   Set 777 permissions on locked files ([#&#8203;11328](https://github.com/astral-sh/uv/pull/11328))
-   Support extras in `@` requests for tools ([#&#8203;11335](https://github.com/astral-sh/uv/pull/11335))
-   Upgrade `astral-tokio-tar` to v0.5.1 ([#&#8203;11359](https://github.com/astral-sh/uv/pull/11359))
-   Avoid missing logging for no-op upgrade events ([#&#8203;11301](https://github.com/astral-sh/uv/pull/11301))
-   Use refined specifiers when logging narrowed Python range ([#&#8203;11334](https://github.com/astral-sh/uv/pull/11334))
-   Don't use popup-generating `eprintln` in trampoline warnings ([#&#8203;11295](https://github.com/astral-sh/uv/pull/11295))
-   Patch pkg-config files to be relocatable ([#&#8203;11291](https://github.com/astral-sh/uv/pull/11291))
-   Fix a case of duplicate `torch` packages when using conflicting extras ([#&#8203;11323](https://github.com/astral-sh/uv/pull/11323))

##### Documentation

-   Add docs for `uv tool install --editable` ([#&#8203;11280](https://github.com/astral-sh/uv/pull/11280))
-   Fix broken anchors in README and docs index ([#&#8203;11338](https://github.com/astral-sh/uv/pull/11338))

### [`v0.5.29`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0529)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.28...0.5.29)

##### Enhancements

-   Add `--bare` option to `uv init` ([#&#8203;11192](https://github.com/astral-sh/uv/pull/11192))
-   Add support for respecting `VIRTUAL_ENV` in project commands via `--active` ([#&#8203;11189](https://github.com/astral-sh/uv/pull/11189))
-   Allow the project `VIRTUAL_ENV` warning to be silenced with `--no-active` ([#&#8203;11251](https://github.com/astral-sh/uv/pull/11251))

##### Python

The managed Python distributions have been updated, including:

-   CPython 3.12.9
-   CPython 3.13.2
-   pkg-config files are now relocatable

See the [`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250205) for more details.

##### Bug fixes

-   Always use base Python discovery logic for cached environments ([#&#8203;11254](https://github.com/astral-sh/uv/pull/11254))
-   Use a flock to avoid concurrent initialization of project environments ([#&#8203;11259](https://github.com/astral-sh/uv/pull/11259))
-   Fix handling of `--all-groups` and `--no-default-groups` flags ([#&#8203;11224](https://github.com/astral-sh/uv/pull/11224))

##### Documentation

-   Minor touchups to the Docker provenance docs ([#&#8203;11252](https://github.com/astral-sh/uv/pull/11252))
-   Move content from the `mkdocs.public.yml` into the template ([#&#8203;11246](https://github.com/astral-sh/uv/pull/11246))

### [`v0.5.28`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0528)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.27...0.5.28)

##### Bug fixes

-   Allow discovering virtual environments from the first interpreter found on the `PATH` ([#&#8203;11218](https://github.com/astral-sh/uv/pull/11218))
-   Clear ephemeral overlays when running tools ([#&#8203;11141](https://github.com/astral-sh/uv/pull/11141))
-   Disable SSL in Git commands for `--allow-insecure-host` ([#&#8203;11210](https://github.com/astral-sh/uv/pull/11210))
-   Fix hardlinks in tar unpacking ([#&#8203;11221](https://github.com/astral-sh/uv/pull/11221))
-   Set base executable when returning virtual environment ([#&#8203;11209](https://github.com/astral-sh/uv/pull/11209))
-   Use base Python for cached environments ([#&#8203;11208](https://github.com/astral-sh/uv/pull/11208))

##### Documentation

-   Add documentation on verifying Docker image attestations ([#&#8203;11140](https://github.com/astral-sh/uv/pull/11140))
-   Add `last updated` to documentation ([#&#8203;11164](https://github.com/astral-sh/uv/pull/11164))

### [`v0.5.27`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0527)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.26...0.5.27)

##### Enhancements

-   Avoid setting permissions during tar extraction ([#&#8203;11191](https://github.com/astral-sh/uv/pull/11191))
-   Remove warnings for missing lower bounds ([#&#8203;11195](https://github.com/astral-sh/uv/pull/11195))
-   Update PubGrub to set-based outdated priority tracking ([#&#8203;11169](https://github.com/astral-sh/uv/pull/11169))
-   Improve error messages for `uv pip install` with `--extra` or `--all-extras` and invalid sources ([#&#8203;11193](https://github.com/astral-sh/uv/pull/11193))
-   Sign Docker images using GitHub attestations ([#&#8203;8685](https://github.com/astral-sh/uv/pull/8685))

##### Preview features

-   Don't expand self-referential extras in the build backend ([#&#8203;11142](https://github.com/astral-sh/uv/pull/11142))

##### Performance

-   Filter discovered Python executables by source before querying ([#&#8203;11143](https://github.com/astral-sh/uv/pull/11143))
-   Optimize exclusion computation for markers ([#&#8203;11158](https://github.com/astral-sh/uv/pull/11158))
-   Use Astral-maintained `tokio-tar` fork ([#&#8203;11174](https://github.com/astral-sh/uv/pull/11174))
-   Remove unneeded `.clone()` ([#&#8203;11127](https://github.com/astral-sh/uv/pull/11127))

##### Bug fixes

-   Fix relative paths in bytecode compilation ([#&#8203;11177](https://github.com/astral-sh/uv/pull/11177))
-   Percent-decode URLs in canonical comparisons ([#&#8203;11088](https://github.com/astral-sh/uv/pull/11088))
-   Respect concurrency limits in parallel index fetch ([#&#8203;11182](https://github.com/astral-sh/uv/pull/11182))
-   Use wire JSON schema for conflict items ([#&#8203;11196](https://github.com/astral-sh/uv/pull/11196))
-   Use explicit `_GLibCVersion` tuple in uv-python crate ([#&#8203;11122](https://github.com/astral-sh/uv/pull/11122))

##### Documentation

-   Add Git SHA locking behavior to docs ([#&#8203;11125](https://github.com/astral-sh/uv/pull/11125))
-   Add best-practice flags to `pip install` example in troubleshooting guide ([#&#8203;11194](https://github.com/astral-sh/uv/pull/11194))
-   Set `VIRTUAL_ENV` in Jupyter kernels ([#&#8203;11155](https://github.com/astral-sh/uv/pull/11155))
-   Add instructions for deactivating an environment ([#&#8203;11200](https://github.com/astral-sh/uv/pull/11200))

### [`v0.5.26`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0526)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.25...0.5.26)

##### Enhancements

-   Add support for `uvx python` ([#&#8203;11076](https://github.com/astral-sh/uv/pull/11076))
-   Allow `--no-dev --invert` in `uv tree` ([#&#8203;11068](https://github.com/astral-sh/uv/pull/11068))
-   Update `uv python install --reinstall` to reinstall all previous versions ([#&#8203;11072](https://github.com/astral-sh/uv/pull/11072))
-   Consistently write log messages with capitalized first word ([#&#8203;11111](https://github.com/astral-sh/uv/pull/11111))
-   Suggest `--build-backend` when `--backend` is passed to `uv init` ([#&#8203;10958](https://github.com/astral-sh/uv/pull/10958))
-   Improve retry trace message ([#&#8203;11108](https://github.com/astral-sh/uv/pull/11108))

##### Performance

-   Remove unnecessary UTF-8 conversion in hash parsing ([#&#8203;11110](https://github.com/astral-sh/uv/pull/11110))

##### Bug fixes

-   Ignore non-hash fragments in HTML API responses ([#&#8203;11107](https://github.com/astral-sh/uv/pull/11107))
-   Avoid resolving symbolic links when querying Python interpreters ([#&#8203;11083](https://github.com/astral-sh/uv/pull/11083))
-   Avoid sharing state between universal and non-universal resolves ([#&#8203;11051](https://github.com/astral-sh/uv/pull/11051))
-   Error when `--script` is passing a non-PEP 723 script ([#&#8203;11118](https://github.com/astral-sh/uv/pull/11118))
-   Make metadata deserialization failures non-fatal in the cache ([#&#8203;11105](https://github.com/astral-sh/uv/pull/11105))
-   Mark metadata as dynamic when reading from built wheel cache ([#&#8203;11046](https://github.com/astral-sh/uv/pull/11046))
-   Propagate credentials for `<index>/simple` to `<index>/...` endpoints ([#&#8203;11074](https://github.com/astral-sh/uv/pull/11074))
-   Fix conflicting extra bug during `uv sync` ([#&#8203;11075](https://github.com/astral-sh/uv/pull/11075))

##### Documentation

-   Add PyTorch XPU instructions to the PyTorch guide ([#&#8203;11109](https://github.com/astral-sh/uv/pull/11109))
-   Add docs for signal handling ([#&#8203;11041](https://github.com/astral-sh/uv/pull/11041))
-   Explain build frontend vs. build backend ([#&#8203;11094](https://github.com/astral-sh/uv/pull/11094))
-   Fix formatting of `RUST_LOG` documentation ([#&#8203;10053](https://github.com/astral-sh/uv/pull/10053))
-   Fix typo in `--no-deps` description ([#&#8203;11073](https://github.com/astral-sh/uv/pull/11073))
-   Reflow CLI documentation comments ([#&#8203;11040](https://github.com/astral-sh/uv/pull/11040))
-   Shorten "Using existing Python versions" nav item so it fits on one line ([#&#8203;11077](https://github.com/astral-sh/uv/pull/11077))
-   Some minor touch-ups to the Python install guide ([#&#8203;11116](https://github.com/astral-sh/uv/pull/11116))
-   Update Dependabot tracking issue link ([#&#8203;11054](https://github.com/astral-sh/uv/pull/11054))
-   Update documentation for running in a container ([#&#8203;11052](https://github.com/astral-sh/uv/pull/11052))
-   Upgrade PyTorch version in documentation ([#&#8203;11114](https://github.com/astral-sh/uv/pull/11114))
-   Use `sys_platform` in lieu of `platform_system` in PyTorch docs ([#&#8203;11113](https://github.com/astral-sh/uv/pull/11113))
-   Use positive (rather than negative) markers in PyTorch examples ([#&#8203;11112](https://github.com/astral-sh/uv/pull/11112))
-   Fix unnecessary backslashes in brackets ([#&#8203;11059](https://github.com/astral-sh/uv/pull/11059))
-   Suggest setting copy link mode in GitLab integration guide ([#&#8203;11067](https://github.com/astral-sh/uv/pull/11067))

### [`v0.5.25`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0525)

[Compare Source](https://github.com/astral-sh/uv/compare/0.5.24...0.5.25)

##### Enhancements

-   Allow installation of manylinux wheels on loongarch64 ([#&#8203;10927](https://github.com/astral-sh/uv/pull/10927))
-   Allow optional `=` for editables in `requirements.txt` ([#&#8203;10954](https://github.com/astral-sh/uv/pull/10954))
-   Add Windows aarch64 to the release binaries ([#&#8203;10885](https://github.com/astral-sh/uv/pull/10885))

##### Bug fixes

-   Use spec-compliant (`128+n`) exit codes for `uv run` and `uv tool run` on Unix ([#&#8203;10781](https://github.com/astral-sh/uv/pull/10781))
-   Fix best-interpreter lookups when there is an invalid interpreter in the `PATH` ([#&#8203;11030](https://github.com/astral-sh/uv/pull/11030))
-   Guard against concurrent cache writes on Windows ([#&#8203;11007](https://github.com/astral-sh/uv/pull/11007))
-   Prioritize package preferences with greater package versions ([#&#8203;10963](https://github.com/astral-sh/uv/pull/10963))
-   Reject `--editable` flag on non-directory requirements ([#&#8203;10994](https://github.com/astral-sh/uv/pull/10994))
-   Respect `--no-sources` for `uv pip install` workspace discovery ([#&#8203;11003](https://github.com/astral-sh/uv/pull/11003))
-   Set `JEMALLOC_SYS_WITH_LG_PAGE=16` in ARM Docker builds ([#&#8203;10943](https://github.com/astral-sh/uv/pull/10943))
-   Update `riscv64` Python downloads to allow install on `riscv64gc` ([#&#8203;10937](https://github.com/astral-sh/uv/pull/10937))
-   Fix file persist retries on Windows ([#&#8203;11008](https://github.com/astral-sh/uv/pull/11008))
-   Fix incorrect error message when specifying `tool.uv.sources.(package).workspace` with other options ([#&#8203;11013](https://github.com/astral-sh/uv/pull/11013))
-   Improve SIGINT handling in `uv run` ([#&#8203;11009](https://github.com/astral-sh/uv/pull/11009))

##### Documentation

-   Add `SECURITY` policy ([#&#8203;11035](https://github.com/astral-sh/uv/pull/11035))
-   Add `Requires-Python` upper bound behavior to the docs ([#&#8203;10964](https://github.com/astral-sh/uv/pull/10964))
-   Add a troubleshooting section and reproducible example guide ([#&#8203;10947](https://github.com/astral-sh/uv/pull/10947))
-   Add documentation for `uv add -r` ([#&#8203;10926](https://github.com/astral-sh/uv/pull/10926))
-   Amend `requires-python` rules in resolver documentation ([#&#8203;10993](https://github.com/astral-sh/uv/pull/10993))
-   Reference workspaces in `--no-sources` documentation ([#&#8203;10995](https://github.com/astral-sh/uv/pull/10995))
-   Update documentation for activating virtual environments in different shell ([#&#8203;11000](https://github.com/astral-sh/uv/pull/11000))
-   Add Docker SHA pinning tip ([#&#8203;10955](https://github.com/astral-sh/uv/pull/10955))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #53
Co-authored-by: Renovate <renovate@csw.im>
Co-committed-by: Renovate <renovate@csw.im>

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:0.5.24@sha256:2381d6aa60c326b71fd40023f921a0a3b8f91b14d5db6b90402e65a635053709 AS uv
+FROM ghcr.io/astral-sh/uv:0.5.30@sha256:bb74263127d6451222fe7f71b330edfb189ab1c98d7898df2401fbf4f272d9b9 AS uv
 FROM python:3.11-slim@sha256:6ed5bff4d7d377e2a27d9285553b8c21cfccc4f00881de1b24c9bc8d90016e82 AS python
 FROM code.forgejo.org/forgejo/runner:6.2.1@sha256:fecc96a111a15811a6887ce488e75718089f24599e613e93db8e54fe70b706e8 AS forgejo-runner