Update all non-major dependencies to v0.9.8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv	uses-with	patch	0.9.7 -> 0.9.8
ghcr.io/astral-sh/uv	final	patch	0.9.7 -> 0.9.8

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.9.8

Compare Source

Released on 2025-11-07.

Enhancements

• Accept multiple packages in uv export (#​16603)
• Accept multiple packages in uv sync (#​16543)
• Add a uv cache size command (#​16032)
• Add prerelease guidance for build-system resolution failures (#​16550)
• Allow Python requests to include +gil to require a GIL-enabled interpreter (#​16537)
• Avoid pluralizing 'retry' for single value (#​16535)
• Enable first-class dependency exclusions (#​16528)
• Fix inclusive constraints on available package versions in resolver errors (#​16629)
• Improve uv init error for invalid directory names (#​16554)
• Show help on uv build -h (#​16632)
• Include the Python variant suffix in "Using Python ..." messages (#​16536)
• Log most recently modified file for cache-keys (#​16338)
• Update Docker builds to use nightly Rust toolchain with musl v1.2.5 (#​16584)

Configuration

• Expose UV_NO_GROUP as an environment variable (#​16529)
• Add UV_NO_SOURCES as an environment variable (#​15883)

Bug fixes

• Allow --check and --locked to be used together in uv lock (#​16538)
• Allow for unnormalized names in the METADATA file (#​16547) (#​16548)
• Fix missing value_type for default-groups in schema (#​16575)
• Respect multi-GPU outputs in nvidia-smi (#​15460)
• Fix DNS lookup errors in Docker containers (#​8450)

Documentation

• Fix typo in uv tool list doc (#​16625)
• Note uv pip list name normalization in docs (#​13210)

Other changes

• Update Rust toolchain to 1.91 and MSRV to 1.89 (#​16531)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Pull Request Review - PR #259

Summary

This PR updates the uv package manager from version 0.9.7 to 0.9.8 across CI workflows and the Dockerfile. This is an automated dependency update generated by Renovate.

Code Quality & Best Practices ✅

Positive aspects:

• Changes are minimal and focused on version bumps only
• Consistent versioning across all files (CI workflows and Dockerfile)
• No breaking changes introduced
• Follows semantic versioning (patch update)

Potential Bugs or Issues ✅

No issues identified:

• The changes are straightforward version string replacements
• All three files are updated consistently (.github/workflows/ci.yml, .github/workflows/publish-client.yml, and Dockerfile)
• Version format is correct and consistent ("0.9.8" in YAML, 0.9.8 in Dockerfile)

Performance Considerations ⚡

Improvements from v0.9.8:
According to the release notes, this version includes several performance-related enhancements:

• Better cache-key logging (most recently modified file tracking)
• DNS lookup error fixes in Docker containers (fixes issue #8450)
• Improved resolver error messages
• Multi-GPU support in nvidia-smi

No negative performance impacts expected.

Security Considerations 🔒

Low risk:

• Patch version update (0.9.7 → 0.9.8) is considered low-risk
• Comes from the official ghcr.io/astral-sh/uv registry and GitHub Actions marketplace
• Renovate bot is configured with automerge enabled, which is appropriate for patch updates
• Bug fixes included in this release (DNS lookup errors, metadata handling) improve robustness

Recommendation: This update appears safe to merge.

Test Coverage 📊

Testing considerations:

• The CI workflow itself will test the new version when this PR runs
• The update affects the build tooling, not application code, so existing test coverage remains unchanged
• CI includes: linting, test suite with coverage, and Docker container orchestration
• Recommend ensuring the CI checks pass before merging (standard practice)

Note: The PR body indicates automerge is enabled, which should wait for CI checks to pass.

Additional Observations

Notable features in v0.9.8:

• New uv cache size command
• Support for multiple packages in uv sync and uv export
• First-class dependency exclusions
• Python GIL variant selection support
• Bug fixes for --check and --locked flags, unnormalized names in METADATA

Renovate Configuration:

• Properly scheduled for Monday 12:00-03:59 AM UTC
• Automerge enabled (appropriate for patch updates)
• Includes rollback instructions via checkbox

Verdict: ✅ APPROVE

This is a clean, low-risk dependency update. The changes are minimal, consistent, and include beneficial bug fixes and enhancements. No blocking issues identified.

Recommendation: Allow automerge to proceed once CI checks pass.