Update charmcraft.yaml build tools

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Update
poetry (changelog)	2.0.0 -> 2.0.1					patch
poetry-plugin-export	1.8.0 -> 1.9.0					minor
rust-lang/rust	1.83.0 -> 1.84.1					minor
uv (source, changelog)	0.5.15 -> 0.5.29					patch

---

Release Notes

python-poetry/poetry (poetry)

v2.0.1

Compare Source

Added

• Add support for poetry search in legacy sources (#​9949).
• Add a message in the poetry source show output when PyPI is implicitly enabled (#​9974).

Changed

• Improve performance for merging markers from overrides at the end of dependency resolution (#​10018).

Fixed

• Fix an issue where poetry sync did not remove packages that were not requested (#​9946).
• Fix an issue where poetry check failed even though there were just warnings and add a --strict option to fail on warnings (#​9983).
• Fix an issue where poetry update, poetry add and poetry remove with --only uninstalled packages from other groups (#​10014).
• Fix an issue where poetry update, poetry add and poetry remove uninstalled all extra packages (#​10016).
• Fix an issue where poetry self update did not recognize Poetry's own environment (#​9995).
• Fix an issue where read-only system site-packages were not considered when loading an environment with system site-packages (#​9942).
• Fix an issue where an error message in poetry install started with Warning: instead of Error: (#​9945).
• Fix an issue where Command.set_poetry, which is used by plugins, was removed (#​9981).
• Fix an issue where the help text of poetry build --clean showed a malformed short option instead of the description (#​9994).

Docs

• Add a FAQ entry for the migration from Poetry-specific fields to the project section (#​9996).
• Fix examples for project.readme and project.urls (#​9948).
• Add a warning that package sources are a Poetry-specific feature that is not included in core metadata (#​9935).
• Replace poetry install --sync with poetry sync in the section about synchronizing dependencies (#​9944).
• Replace poetry shell with poetry env activate in the basic usage section (#​9963).
• Mention that project.name is always required when the project section is used (#​9989).
• Fix the constraint of poetry-plugin-export in the section about poetry export (#​9954).

poetry-core (2.0.1)

• Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).
• Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
• Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
• Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

python-poetry/poetry-plugin-export (poetry-plugin-export)

v1.9.0

Compare Source

Added

• Add an --all-groups option to export dependencies from all groups (#​294).

Changed

• Drop support for Python 3.8 (#​300).
• Clarify the help text of --with and --only and deprecate --without (#​212).
• Fail if the poetry.lock file is not consistent with the pyproject.toml file (#​310).

Fixed

• Fix an issue where the export failed with the message "dependency walk failed".
  This fix requires a poetry.lock file created with Poetry 2.x (#​286).
• Fix an issue where the pre-commit hook regex matched wrong files (#​285).

rust-lang/rust (rust-lang/rust)

v1.84.1

Compare Source

==========================

• Fix ICE 132920 in duplicate-crate diagnostics.
• Fix errors for overlapping impls in incremental rebuilds.
• Fix slow compilation related to the next-generation trait solver.
• Fix debuginfo when LLVM's location discriminator value limit is exceeded.
• Fixes for building Rust from source:
  • Only try to distribute llvm-objcopy if llvm tools are enabled.
  • Add Profile Override for Non-Git Sources.
  • Resolve symlinks of LLVM tool binaries before copying them.
  • Make it possible to use ci-rustc on tarball sources.

v1.84.0

Compare Source

==========================

Language

• Allow #[deny] inside #[forbid] as a no-op
• Show a warning when -Ctarget-feature is used to toggle features that can lead to unsoundness due to ABI mismatches
• Use the next-generation trait solver in coherence
• Allow coercions to drop the principal of trait objects
• Support / as the path separator for include!() in all cases on Windows
• Taking a raw ref (raw (const|mut)) of a deref of a pointer (*ptr) is now safe
• Stabilize s390x inline assembly
• Stabilize Arm64EC inline assembly
• Lint against creating pointers to immediately dropped temporaries
• Execute drop glue when unwinding in an extern "C" function

Compiler

• Add --print host-tuple flag to print the host target tuple and affirm the "target tuple" terminology over "target triple"
• Declaring functions with a calling convention not supported on the current target now triggers a hard error
• Set up indirect access to external data for loongarch64-unknown-linux-{musl,ohos}
• Enable XRay instrumentation for LoongArch Linux targets
• Extend the unexpected_cfgs lint to also warn in external macros
• Stabilize WebAssembly multivalue, reference-types, and tail-call target features
• Added Tier 2 support for the wasm32v1-none target

Libraries

• Implement From<&mut {slice}> for Box/Rc/Arc<{slice}>
• Move <float>::copysign, <float>::abs, <float>::signum to core
• Add LowerExp and UpperExp implementations to NonZero
• Implement FromStr for CString and TryFrom<CString> for String
• std::os::darwin has been made public

Stabilized APIs

• Ipv6Addr::is_unique_local
• Ipv6Addr::is_unicast_link_local
• core::ptr::with_exposed_provenance
• core::ptr::with_exposed_provenance_mut
• <ptr>::addr
• <ptr>::expose_provenance
• <ptr>::with_addr
• <ptr>::map_addr
• <int>::isqrt
• <int>::checked_isqrt
• <uint>::isqrt
• NonZero::isqrt
• core::ptr::without_provenance
• core::ptr::without_provenance_mut
• core::ptr::dangling
• core::ptr::dangling_mut
• Pin::as_deref_mut

These APIs are now stable in const contexts

• AtomicBool::from_ptr
• AtomicPtr::from_ptr
• AtomicU8::from_ptr
• AtomicU16::from_ptr
• AtomicU32::from_ptr
• AtomicU64::from_ptr
• AtomicUsize::from_ptr
• AtomicI8::from_ptr
• AtomicI16::from_ptr
• AtomicI32::from_ptr
• AtomicI64::from_ptr
• AtomicIsize::from_ptr
• <ptr>::is_null
• <ptr>::as_ref
• <ptr>::as_mut
• Pin::new
• Pin::new_unchecked
• Pin::get_ref
• Pin::into_ref
• Pin::get_mut
• Pin::get_unchecked_mut
• Pin::static_ref
• Pin::static_mut

Cargo

• Stabilize MSRV-aware resolver config
• Stabilize resolver v3

Rustdoc

• rustdoc-search: improve type-driven search

Compatibility Notes

• Enable by default the LSX target feature for LoongArch Linux targets
• The unstable -Zprofile flag (“gcov-style” coverage instrumentation) has been removed. This does not affect the stable flags for coverage instrumentation (-Cinstrument-coverage) and profile-guided optimization (-Cprofile-generate, -Cprofile-use), which are unrelated and remain available.
• Support for the target named wasm32-wasi has been removed as the target is now named wasm32-wasip1. This completes the transition plan for this target following the introduction of wasm32-wasip1 in Rust 1.78. Compiler warnings on use of wasm32-wasi introduced in Rust 1.81 are now gone as well as the target is removed.
• The syntax &pin (mut|const) T is now parsed as a type which in theory could affect macro expansion results in some edge cases
• Legacy syntax for calling std::arch functions is no longer permitted to declare items or bodies (such as closures, inline consts, or async blocks).
• Declaring functions with a calling convention not supported on the current target now triggers a hard error
• The next-generation trait solver is now enabled for coherence, fixing multiple soundness issues

astral-sh/uv (uv)

v0.5.29

Compare Source

Enhancements

• Add --bare option to uv init (#​11192)
• Add support for respecting VIRTUAL_ENV in project commands via --active (#​11189)
• Allow the project VIRTUAL_ENV warning to be silenced with --no-active (#​11251)

Python

The managed Python distributions have been updated, including:

• CPython 3.12.9
• CPython 3.13.2
• pkg-config files are now relocatable

See the python-build-standalone release notes for more details.

Bug fixes

• Always use base Python discovery logic for cached environments (#​11254)
• Use a flock to avoid concurrent initialization of project environments (#​11259)
• Fix handling of --all-groups and --no-default-groups flags (#​11224)

Documentation

• Minor touchups to the Docker provenance docs (#​11252)
• Move content from the mkdocs.public.yml into the template (#​11246)

v0.5.28

Compare Source

Bug fixes

• Allow discovering virtual environments from the first interpreter found on the PATH (#​11218)
• Clear ephemeral overlays when running tools (#​11141)
• Disable SSL in Git commands for --allow-insecure-host (#​11210)
• Fix hardlinks in tar unpacking (#​11221)
• Set base executable when returning virtual environment (#​11209)
• Use base Python for cached environments (#​11208)

Documentation

• Add documentation on verifying Docker image attestations (#​11140)
• Add last updated to documentation (#​11164)

v0.5.27

Compare Source

Enhancements

• Avoid setting permissions during tar extraction (#​11191)
• Remove warnings for missing lower bounds (#​11195)
• Update PubGrub to set-based outdated priority tracking (#​11169)
• Improve error messages for uv pip install with --extra or --all-extras and invalid sources (#​11193)
• Sign Docker images using GitHub attestations (#​8685)

Preview features

• Don't expand self-referential extras in the build backend (#​11142)

Performance

• Filter discovered Python executables by source before querying (#​11143)
• Optimize exclusion computation for markers (#​11158)
• Use Astral-maintained tokio-tar fork (#​11174)
• Remove unneeded .clone() (#​11127)

Bug fixes

• Fix relative paths in bytecode compilation (#​11177)
• Percent-decode URLs in canonical comparisons (#​11088)
• Respect concurrency limits in parallel index fetch (#​11182)
• Use wire JSON schema for conflict items (#​11196)
• Use explicit _GLibCVersion tuple in uv-python crate (#​11122)

Documentation

• Add Git SHA locking behavior to docs (#​11125)
• Add best-practice flags to pip install example in troubleshooting guide (#​11194)
• Set VIRTUAL_ENV in Jupyter kernels (#​11155)
• Add instructions for deactivating an environment (#​11200)

v0.5.26

Compare Source

Enhancements

• Add support for uvx python (#​11076)
• Allow --no-dev --invert in uv tree (#​11068)
• Update uv python install --reinstall to reinstall all previous versions (#​11072)
• Consistently write log messages with capitalized first word (#​11111)
• Suggest --build-backend when --backend is passed to uv init (#​10958)
• Improve retry trace message (#​11108)

Performance

• Remove unnecessary UTF-8 conversion in hash parsing (#​11110)

Bug fixes

• Ignore non-hash fragments in HTML API responses (#​11107)
• Avoid resolving symbolic links when querying Python interpreters (#​11083)
• Avoid sharing state between universal and non-universal resolves (#​11051)
• Error when --script is passing a non-PEP 723 script (#​11118)
• Make metadata deserialization failures non-fatal in the cache (#​11105)
• Mark metadata as dynamic when reading from built wheel cache (#​11046)
• Propagate credentials for <index>/simple to <index>/... endpoints (#​11074)
• Fix conflicting extra bug during uv sync (#​11075)

Documentation

• Add PyTorch XPU instructions to the PyTorch guide (#​11109)
• Add docs for signal handling (#​11041)
• Explain build frontend vs. build backend (#​11094)
• Fix formatting of RUST_LOG documentation (#​10053)
• Fix typo in --no-deps description (#​11073)
• Reflow CLI documentation comments (#​11040)
• Shorten "Using existing Python versions" nav item so it fits on one line (#​11077)
• Some minor touch-ups to the Python install guide (#​11116)
• Update Dependabot tracking issue link (#​11054)
• Update documentation for running in a container (#​11052)
• Upgrade PyTorch version in documentation (#​11114)
• Use sys_platform in lieu of platform_system in PyTorch docs (#​11113)
• Use positive (rather than negative) markers in PyTorch examples (#​11112)
• Fix unnecessary backslashes in brackets (#​11059)
• Suggest setting copy link mode in GitLab integration guide (#​11067)

v0.5.25

Compare Source

Enhancements

• Allow installation of manylinux wheels on loongarch64 (#​10927)
• Allow optional = for editables in requirements.txt (#​10954)
• Add Windows aarch64 to the release binaries (#​10885)

Bug fixes

• Use spec-compliant (128+n) exit codes for uv run and uv tool run on Unix (#​10781)
• Fix best-interpreter lookups when there is an invalid interpreter in the PATH (#​11030)
• Guard against concurrent cache writes on Windows (#​11007)
• Prioritize package preferences with greater package versions (#​10963)
• Reject --editable flag on non-directory requirements (#​10994)
• Respect --no-sources for uv pip install workspace discovery (#​11003)
• Set JEMALLOC_SYS_WITH_LG_PAGE=16 in ARM Docker builds (#​10943)
• Update riscv64 Python downloads to allow install on riscv64gc (#​10937)
• Fix file persist retries on Windows (#​11008)
• Fix incorrect error message when specifying tool.uv.sources.(package).workspace with other options (#​11013)
• Improve SIGINT handling in uv run (#​11009)

Documentation

• Add SECURITY policy (#​11035)
• Add Requires-Python upper bound behavior to the docs (#​10964)
• Add a troubleshooting section and reproducible example guide (#​10947)
• Add documentation for uv add -r (#​10926)
• Amend requires-python rules in resolver documentation (#​10993)
• Reference workspaces in --no-sources documentation (#​10995)
• Update documentation for activating virtual environments in different shell (#​11000)
• Add Docker SHA pinning tip (#​10955)

v0.5.24

Compare Source

Enhancements

• Improve determinism of resolution by always setting package priorities (#​10853)
• Upgrade to cargo-dist 0.28.0; improves several installer behaviors (#​10884)

Performance

• Remove dependencies clone in resolver (#​10880)
• Use Hashbrown's raw entry API to reduce hashes and clone in resolver priority determination (#​10881)

Bug fixes

• Allow fallback to Python download on non-critical discovery errors (#​10908)

Preview features

• Register managed Python version with the Windows Registry (PEP 514) (#​10634)

Documentation

• Improve documentation for some environment variables (#​10887)
• Add git subdirectory example (#​10894)

v0.5.23

Compare Source

Enhancements

• Add --refresh to uv venv (#​10834)
• Add --no-default-groups command-line flag (#​10618)

Bug fixes

• Sort extras and groups when comparing lockfile requirements (#​10856)
• Include commit_id and requested_revision in direct_url.json (#​10862)
• Invalidate lockfile when static versions change (#​10858)
• Make GitHub fast path errors non-fatal (#​10859)
• Remove warnings for --frozen and --locked in uv run --script (#​10840)
• Resolve find-links paths relative to the configuration file (#​10827)
• Respect visitation order for proxy packages (#​10833)
• Treat version mismatch errors as non-fatal in fast paths (#​10860)
• Mark --locked and --upgrade are conflicting (#​10836)
• Relax error checking around unconditional enabling of conflicting extras (#​10875)

Documentation

• Reduce ambiguity in conflicting extras example (#​10877)
• Update pre-commit documentation (#​10756)

Error messages

• Error when workspace contains conflicting Python requirements (#​10841)
• Improve uvx error message when uv is missing (#​9745)

v0.5.22

Compare Source

Enhancements

• Include version and contact information in GitHub User Agent (#​10785)

Performance

• Add fast-path for recursive extras in dynamic validation (#​10823)
• Fetch pyproject.toml from GitHub API (#​10765)
• Remove allocation in Git SHA truncation (#​10801)
• Skip GitHub fast path when full commit is already known (#​10800)

Bug fixes

• Add fallback to build backend when Requires-Dist mismatches (#​10797)
• Avoid deserialization error for paths above the root (#​10789)
• Avoid respecting preferences from other indexes (#​10782)
• Disable the distutils setuptools shim during interpreter query (#​10819)
• Omit variant when detecting compatible Python installs (#​10722)
• Remove TOCTOU errors in Git clone (#​10758)
• Validate metadata under GitHub fast path (#​10796)
• Include conflict markers in fork markers (#​10818)

Error messages

• Add tag incompatibility hints to sync failures (#​10739)
• Improve log when distutils is missing (#​10713)
• Show non-critical Python discovery errors if no other interpreter is found (#​10716)
• Use colors for lock errors (#​10736)

Documentation

• Add testing instructions to the AWS Lambda guide (#​10805)

v0.5.21

Compare Source

Enhancements

• Avoid building dynamic versions when validating lockfile (#​10703)

Configuration

• Add UV_VENV_SEED environment variable (#​10715)

Performance

• Store unsupported tags in wheel filename (#​10665)

Bug fixes

• Avoid attempting to patch macOS dylib for non-macOS installs (#​10721)
• Avoid narrowing requires-python marker with disjunctions (#​10704)
• Respect environment variable credentials for indexes outside root (#​10688)
• Respect preferences for explicit index dependencies from requirements.txt (#​10690)
• Sort preferences by environment, then index (#​10700)
• Ignore permission errors when looking for user-level configuration file (#​10697)

Documentation

• Add SyntaxWarning compatibility note to bytecode compilation docs (#​10701)
• Add MACOSX_DEPLOYMENT_TARGET to the --python-platform documentation (#​10698)

v0.5.20

Compare Source

Bug fixes

• Avoid failing when deserializing unknown tags (#​10655)

v0.5.19

Compare Source

Enhancements

• Filter wheels from lockfile based on architecture (#​10584)
• Omit dynamic versions from the lockfile (#​10622)
• Add support for pip freeze --path (#​10488)
• Reduce verbosity of inline-metadata message when using uv run <script.py> (#​10588)
• Add opt-in Git LFS support (#​10335)
• Recommend --native-tls on SSL errors (#​10605)
• Show expected and available ABI tags in resolver errors (#​10527)
• Show target Python version in error messages (#​10582)
• Add --output-format=json support to uv python list (#​10596)

Python

The managed Python distributions have been updated, including:

• Python 3.14 support on Windows
• Python 3.14.0a4 support
• 64-bit RISC-V Linux support
• Bundled libedit updated from 2021091-3.1 -> 2024080-3.1
• Bundled tcl/tk updated from 8.6.12 -> 8.6.14 (for all Python versions on Unix, only for Python 3.14 on Windows)

See the python-build-standalone release notes for more details.

Performance

• Avoid allocating when stripping source distribution extension (#​10625)
• Reduce WheelFilename to 48 bytes (#​10583)
• Reduce distribution size to 200 bytes (#​10601)
• Remove import re from entrypoint wrapper scripts (#​10627)
• Shrink size of platform tag enum (#​10546)
• Use ArcStr in verbatim URL (#​10600)
• Use memchr for wheel parsing (#​10620)

Bug fixes

• Avoid reading symlinks during uv python install on Windows (#​10639)
• Correct Pyston tag format (#​10580)
• Provide pyproject.toml path for parse errors in uv venv (#​10553)
• Don't treat setuptools and wheel as seed packages in uv sync on Python 3.12 (#​10572)
• Fix git-tag cache-key reader in case of slashes (#​10467) (#​10500)
• Include build tag in rendered wheel filenames (#​10599)
• Patch embedded install path for Python dylib on macOS during python install (#​10629)
• Read cached registry distributions when --config-settings are present (#​10578)
• Show resolver hints for packages with markers (#​10607)

Documentation

• Add meta titles to documents in guides, excluding integration documents (#​10539)
• Remove build-system from example workspace rot (#​10636)

Preview features

• Make build backend type annotations more generic (#​10549)

v0.5.18

Compare Source

Bug fixes

• Avoid forking for identical markers (#​10490)
• Avoid panic in uv remove when only comments exist (#​10484)
• Revert "improve shell compatibility of venv activate scripts (#​10397)" (#​10497)

v0.5.17

Compare Source

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which
will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be
respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

This release also includes support for uv export --script and uv tree --script. Both commands support PEP 723
scripts with and without accompanying lockfiles.

Enhancements

• Add support for locking PEP 723 scripts (#​10135)
• Respect PEP 723 script lockfiles in uv run (#​10136)
• Update PEP 723 lockfile in uv add --script (#​10145)
• Update PEP 723 lockfile in uv remove --script (#​10162)
• Add --script support to uv export for PEP 723 scripts (#​10160)
• Add --script support to uv tree for PEP 723 scripts (#​10159)
• Add ls alias to uv {tool, python, pip} list (#​10240)
• Allow reading --with-requirements from stdin in uv add and uv run (#​10447)
• Warn-and-ignore for unsupported requirements.txt options (#​10420)

Preview features

• Add remaining Python type annotations to build backend (#​10434)

Performance

• Avoid allocating for names in the PEP 508 parser (#​10476)
• Fetch concurrently for non-first-match index strategies (#​10432)
• Remove unnecessary .to_string() call (#​10419)
• Respect sentinels in package prioritization (#​10443)
• Use ArcStr for marker values (#​10453)
• Use ArcStr for package, extra, and group names (#​10475)
• Use matches! rather than contains in requirements.txt parsing (#​10423)
• Use faster disjointness check for markers (#​10439)
• Pre-compute PEP 508 markers from universal markers (#​10472)

Bug fixes

• Fix UV_FIND_LINKS delimiter to split on commas (#​10477)
• Improve uv tool list output when tool environment is broken (#​10409)
• Only track markers for compatible versions (#​10457)
• Respect requires-python when installing tools (#​10401)
• Visit proxy packages eagerly (#​10441)
• Improve shell compatibility of venv activate scripts (#​10397)
• Read publish username from URL (#​10469)

Documentation

• Add Lambda layer instructions to AWS Lambda guide (#​10411)
• Add uv lock --script to the docs (#​10414)
• Use Windows-specific instructions in Jupyter guide (#​10446)

v0.5.16

Compare Source

Enhancements

• Accept full requirements in uv remove (#​10338)

Performance

• Avoid over-counting versions in batch prefetcher (#​10350)
• Deactivate tracing for version-choosing (#​10351)
• Force a niche into VersionSmall (#​10385)
• Optimize requirements_for_extra (#​10348)
• Re-enable zlib-ng on x86 platforms (#​10365)
• Re-enable zlib-ng on all platforms (except s390x, PowerPC, and FreeBSD) (#​10370)
• Remove [u64; 4] from small version to move Arc to full version (#​10345)
• Shrink Dist from 352 to 288 bytes (#​10389)
• Speed up file pins by removing nested hash map (#​10346)
• Buffer file reads in serde_json::from_reader (#​10341)

Bug fixes

• Avoid enforcing project-level required version for uv self (#​10374)
• Fix Ruff linting warnings from generated template files for extension modules (#​10371)

Documentation

• Add AWS Lambda integration guide (#​10278)

---

Configuration

📅 Schedule: Branch creation - "after 1am and before 3am every weekday" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.