all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe0b:80cb
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: f8c81996-ef6f-4f3f-b5b9-4e8d1fd1bc29
        host_id: df70f2a3f3d0c26428f22685cfc722ebc48099d99e7332c39e017195
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe0b:80cb
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.107
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.86
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe0b:80cb
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job hadolint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#37>'
      - '<Job hadolint explicit: None implied: None source: osism/container-image-inventory-reconciler/.zuul.yaml@main#104>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 90d2d137885e406da306d99b5c450d12
      build_refs:
      - branch: main
        change: '502'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.10\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.10.5` \u2192 `0.10.10` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.10.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01010)\n\nReleased
          on 2026-03-13.\n\n##### Python\n\n- Add CPython 3.15.0a7 ([#&#8203;18403](https://redirect.github.com/astral-sh/uv/pull/18403))\n\n#####
          Enhancements\n\n- Add `--outdated` flag to `uv tool list` ([#&#8203;18318](https://redirect.github.com/astral-sh/uv/pull/18318))\n-
          Add riscv64 musl target to build-release-binaries workflow ([#&#8203;18228](https://redirect.github.com/astral-sh/uv/pull/18228))\n-
          Fetch Ruff from an Astral mirror ([#&#8203;18286](https://redirect.github.com/astral-sh/uv/pull/18286))\n-
          Improve error handling for platform detection in Python downloads ([#&#8203;18453](https://redirect.github.com/astral-sh/uv/pull/18453))\n-
          Warn if `--project` directory does not exist ([#&#8203;17714](https://redirect.github.com/astral-sh/uv/pull/17714))\n-
          Warn when workspace member scripts are skipped due to missing build system
          ([#&#8203;18389](https://redirect.github.com/astral-sh/uv/pull/18389))\n-
          Update build backend versions used in `uv init` ([#&#8203;18417](https://redirect.github.com/astral-sh/uv/pull/18417))\n-
          Log explicit config file path in verbose output ([#&#8203;18353](https://redirect.github.com/astral-sh/uv/pull/18353))\n-
          Make `uv cache clear` an alias of `uv cache clean` ([#&#8203;18420](https://redirect.github.com/astral-sh/uv/pull/18420))\n-
          Reject invalid classifiers, warn on license classifiers in `uv_build` ([#&#8203;18419](https://redirect.github.com/astral-sh/uv/pull/18419))\n\n#####
          Preview features\n\n- Add links to `uv audit` output ([#&#8203;18392](https://redirect.github.com/astral-sh/uv/pull/18392))\n-
          Output/report formatting for `uv audit` ([#&#8203;18193](https://redirect.github.com/astral-sh/uv/pull/18193))\n-
          Switch to batched OSV queries for `uv audit` ([#&#8203;18394](https://redirect.github.com/astral-sh/uv/pull/18394))\n\n#####
          Bug fixes\n\n- Avoid sharing version metadata across indexes ([#&#8203;18373](https://redirect.github.com/astral-sh/uv/pull/18373))\n-
          Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows
          ([#&#8203;18362](https://redirect.github.com/astral-sh/uv/pull/18362))\n-
          Filter out unsupported environment wheels ([#&#8203;18445](https://redirect.github.com/astral-sh/uv/pull/18445))\n-
          Preserve absolute/relative paths in lockfiles ([#&#8203;18176](https://redirect.github.com/astral-sh/uv/pull/18176))\n-
          Recreate Python environments under `uv tool install --force` ([#&#8203;18399](https://redirect.github.com/astral-sh/uv/pull/18399))\n-
          Respect timestamp and other cache keys in cached environments ([#&#8203;18396](https://redirect.github.com/astral-sh/uv/pull/18396))\n-
          Simplify selected extra markers in `uv export` ([#&#8203;18433](https://redirect.github.com/astral-sh/uv/pull/18433))\n-
          Send pyx mint-token requests with a proper `Content-Type` ([#&#8203;18334](https://redirect.github.com/astral-sh/uv/pull/18334))\n-
          Fix Windows operating system and version reporting ([#&#8203;18383](https://redirect.github.com/astral-sh/uv/pull/18383))\n\n#####
          Documentation\n\n- Update the platform support policy with a tier 3 section
          including freebsd and 32-bit windows ([#&#8203;18345](https://redirect.github.com/astral-sh/uv/pull/18345))\n\n###
          [`v0.10.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0109)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.8...0.10.9)\n\nReleased
          on 2026-03-06.\n\n##### Enhancements\n\n- Add `fbgemm-gpu`, `fbgemm-gpu-genai`,
          `torchrec`, and `torchtune` to the PyTorch list ([#&#8203;18338](https://redirect.github.com/astral-sh/uv/pull/18338))\n-
          Add torchcodec to PyTorch List ([#&#8203;18336](https://redirect.github.com/astral-sh/uv/pull/18336))\n-
          Log the duration we took before erroring ([#&#8203;18231](https://redirect.github.com/astral-sh/uv/pull/18231))\n-
          Warn when using `uv_build` settings without `uv_build` ([#&#8203;15750](https://redirect.github.com/astral-sh/uv/pull/15750))\n-
          Add fallback to `/usr/lib/os-release` on Linux system lookup failure ([#&#8203;18349](https://redirect.github.com/astral-sh/uv/pull/18349))\n-
          Use `cargo auditable` to include SBOM in uv builds ([#&#8203;18276](https://redirect.github.com/astral-sh/uv/pull/18276))\n\n#####
          Configuration\n\n- Add an environment variable for `UV_VENV_RELOCATABLE`
          ([#&#8203;18331](https://redirect.github.com/astral-sh/uv/pull/18331))\n\n#####
          Performance\n\n- Avoid toml `Document` overhead ([#&#8203;18306](https://redirect.github.com/astral-sh/uv/pull/18306))\n-
          Use a single global workspace cache ([#&#8203;18307](https://redirect.github.com/astral-sh/uv/pull/18307))\n\n#####
          Bug fixes\n\n- Continue on trampoline job assignment failures ([#&#8203;18291](https://redirect.github.com/astral-sh/uv/pull/18291))\n-
          Handle the hard link limit gracefully instead of failing ([#&#8203;17699](https://redirect.github.com/astral-sh/uv/pull/17699))\n-
          Respect build constraints for workspace members ([#&#8203;18350](https://redirect.github.com/astral-sh/uv/pull/18350))\n-
          Revalidate editables and other dependencies in scripts ([#&#8203;18328](https://redirect.github.com/astral-sh/uv/pull/18328))\n-
          Support Python 3.13+ on Android ([#&#8203;18301](https://redirect.github.com/astral-sh/uv/pull/18301))\n-
          Support `cp3-none-any` ([#&#8203;17064](https://redirect.github.com/astral-sh/uv/pull/17064))\n-
          Skip tool environments with broken links to Python on Windows ([#&#8203;17176](https://redirect.github.com/astral-sh/uv/pull/17176))\n\n#####
          Documentation\n\n- Add documentation for common marker values ([#&#8203;18327](https://redirect.github.com/astral-sh/uv/pull/18327))\n-
          Improve documentation on virtual dependencies ([#&#8203;18346](https://redirect.github.com/astral-sh/uv/pull/18346))\n\n###
          [`v0.10.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0108)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.7...0.10.8)\n\nReleased
          on 2026-03-03.\n\n##### Python\n\n- Add CPython 3.10.20\n- Add CPython 3.11.15\n-
          Add CPython 3.12.13\n\n##### Enhancements\n\n- Add Docker images based on
          Docker Hardened Images ([#&#8203;18247](https://redirect.github.com/astral-sh/uv/pull/18247))\n-
          Add resolver hint when `--exclude-newer` filters out all versions of a package
          ([#&#8203;18217](https://redirect.github.com/astral-sh/uv/pull/18217))\n-
          Configure a real retry minimum delay of 1s ([#&#8203;18201](https://redirect.github.com/astral-sh/uv/pull/18201))\n-
          Expand `uv_build` direct build compatibility ([#&#8203;17902](https://redirect.github.com/astral-sh/uv/pull/17902))\n-
          Fetch CPython from an Astral mirror by default ([#&#8203;18207](https://redirect.github.com/astral-sh/uv/pull/18207))\n-
          Download uv releases from an Astral mirror in installers by default ([#&#8203;18191](https://redirect.github.com/astral-sh/uv/pull/18191))\n-
          Add SBOM attestations to Docker images ([#&#8203;18252](https://redirect.github.com/astral-sh/uv/pull/18252))\n-
          Improve hint for installing meson-python when missing as build backend ([#&#8203;15826](https://redirect.github.com/astral-sh/uv/pull/15826))\n\n#####
          Configuration\n\n- Add `UV_INIT_BARE` environment variable for `uv init`
          ([#&#8203;18210](https://redirect.github.com/astral-sh/uv/pull/18210))\n\n#####
          Bug fixes\n\n- Prevent `uv tool upgrade` from installing excluded dependencies
          ([#&#8203;18022](https://redirect.github.com/astral-sh/uv/pull/18022))\n-
          Promote authentication policy when saving tool receipts ([#&#8203;18246](https://redirect.github.com/astral-sh/uv/pull/18246))\n-
          Respect exclusions in scripts ([#&#8203;18269](https://redirect.github.com/astral-sh/uv/pull/18269))\n-
          Retain default-branch Git SHAs in `pylock.toml` files ([#&#8203;18227](https://redirect.github.com/astral-sh/uv/pull/18227))\n-
          Skip installed Python check for URL dependencies ([#&#8203;18211](https://redirect.github.com/astral-sh/uv/pull/18211))\n-
          Respect constraints during `--upgrade` ([#&#8203;18226](https://redirect.github.com/astral-sh/uv/pull/18226))\n-
          Fix `uv tree` orphaned roots and premature deduplication ([#&#8203;17212](https://redirect.github.com/astral-sh/uv/pull/17212))\n\n#####
          Documentation\n\n- Mention cooldown and tweak inline script metadata in
          dependency bots documentation ([#&#8203;18230](https://redirect.github.com/astral-sh/uv/pull/18230))\n-
          Move cache prune in GitLab to `after_script` ([#&#8203;18206](https://redirect.github.com/astral-sh/uv/pull/18206))\n\n###
          [`v0.10.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0107)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.6...0.10.7)\n\nReleased
          on 2026-02-27.\n\n##### Bug fixes\n\n- Fix handling of junctions in Windows
          Containers on Windows ([#&#8203;18192](https://redirect.github.com/astral-sh/uv/pull/18192))\n\n#####
          Enhancements\n\n- Activate logging for middleware retries ([#&#8203;18200](https://redirect.github.com/astral-sh/uv/pull/18200))\n-
          Upload uv releases to a mirror ([#&#8203;18159](https://redirect.github.com/astral-sh/uv/pull/18159))\n\n###
          [`v0.10.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0106)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.5...0.10.6)\n\nReleased
          on 2026-02-24.\n\n##### Bug fixes\n\n- Apply lockfile marker normalization
          for fork markers ([#&#8203;18116](https://redirect.github.com/astral-sh/uv/pull/18116))\n-
          Fix Python version selection for scripts with a `requires-python` conflicting
          with `.python-version` ([#&#8203;18097](https://redirect.github.com/astral-sh/uv/pull/18097))\n-
          Preserve file permissions when using reflinks on Linux ([#&#8203;18187](https://redirect.github.com/astral-sh/uv/pull/18187))\n\n#####
          Documentation\n\n- Remove verbose documentation from optional dependencies
          help text ([#&#8203;18180](https://redirect.github.com/astral-sh/uv/pull/18180))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/502
        commit_id: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        patchset: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      buildset: 62da5ad9f45c455597c5f461296ebeb5
      buildset_refs:
      - branch: main
        change: '502'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.10\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.10.5` \u2192 `0.10.10` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.10.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01010)\n\nReleased
          on 2026-03-13.\n\n##### Python\n\n- Add CPython 3.15.0a7 ([#&#8203;18403](https://redirect.github.com/astral-sh/uv/pull/18403))\n\n#####
          Enhancements\n\n- Add `--outdated` flag to `uv tool list` ([#&#8203;18318](https://redirect.github.com/astral-sh/uv/pull/18318))\n-
          Add riscv64 musl target to build-release-binaries workflow ([#&#8203;18228](https://redirect.github.com/astral-sh/uv/pull/18228))\n-
          Fetch Ruff from an Astral mirror ([#&#8203;18286](https://redirect.github.com/astral-sh/uv/pull/18286))\n-
          Improve error handling for platform detection in Python downloads ([#&#8203;18453](https://redirect.github.com/astral-sh/uv/pull/18453))\n-
          Warn if `--project` directory does not exist ([#&#8203;17714](https://redirect.github.com/astral-sh/uv/pull/17714))\n-
          Warn when workspace member scripts are skipped due to missing build system
          ([#&#8203;18389](https://redirect.github.com/astral-sh/uv/pull/18389))\n-
          Update build backend versions used in `uv init` ([#&#8203;18417](https://redirect.github.com/astral-sh/uv/pull/18417))\n-
          Log explicit config file path in verbose output ([#&#8203;18353](https://redirect.github.com/astral-sh/uv/pull/18353))\n-
          Make `uv cache clear` an alias of `uv cache clean` ([#&#8203;18420](https://redirect.github.com/astral-sh/uv/pull/18420))\n-
          Reject invalid classifiers, warn on license classifiers in `uv_build` ([#&#8203;18419](https://redirect.github.com/astral-sh/uv/pull/18419))\n\n#####
          Preview features\n\n- Add links to `uv audit` output ([#&#8203;18392](https://redirect.github.com/astral-sh/uv/pull/18392))\n-
          Output/report formatting for `uv audit` ([#&#8203;18193](https://redirect.github.com/astral-sh/uv/pull/18193))\n-
          Switch to batched OSV queries for `uv audit` ([#&#8203;18394](https://redirect.github.com/astral-sh/uv/pull/18394))\n\n#####
          Bug fixes\n\n- Avoid sharing version metadata across indexes ([#&#8203;18373](https://redirect.github.com/astral-sh/uv/pull/18373))\n-
          Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows
          ([#&#8203;18362](https://redirect.github.com/astral-sh/uv/pull/18362))\n-
          Filter out unsupported environment wheels ([#&#8203;18445](https://redirect.github.com/astral-sh/uv/pull/18445))\n-
          Preserve absolute/relative paths in lockfiles ([#&#8203;18176](https://redirect.github.com/astral-sh/uv/pull/18176))\n-
          Recreate Python environments under `uv tool install --force` ([#&#8203;18399](https://redirect.github.com/astral-sh/uv/pull/18399))\n-
          Respect timestamp and other cache keys in cached environments ([#&#8203;18396](https://redirect.github.com/astral-sh/uv/pull/18396))\n-
          Simplify selected extra markers in `uv export` ([#&#8203;18433](https://redirect.github.com/astral-sh/uv/pull/18433))\n-
          Send pyx mint-token requests with a proper `Content-Type` ([#&#8203;18334](https://redirect.github.com/astral-sh/uv/pull/18334))\n-
          Fix Windows operating system and version reporting ([#&#8203;18383](https://redirect.github.com/astral-sh/uv/pull/18383))\n\n#####
          Documentation\n\n- Update the platform support policy with a tier 3 section
          including freebsd and 32-bit windows ([#&#8203;18345](https://redirect.github.com/astral-sh/uv/pull/18345))\n\n###
          [`v0.10.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0109)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.8...0.10.9)\n\nReleased
          on 2026-03-06.\n\n##### Enhancements\n\n- Add `fbgemm-gpu`, `fbgemm-gpu-genai`,
          `torchrec`, and `torchtune` to the PyTorch list ([#&#8203;18338](https://redirect.github.com/astral-sh/uv/pull/18338))\n-
          Add torchcodec to PyTorch List ([#&#8203;18336](https://redirect.github.com/astral-sh/uv/pull/18336))\n-
          Log the duration we took before erroring ([#&#8203;18231](https://redirect.github.com/astral-sh/uv/pull/18231))\n-
          Warn when using `uv_build` settings without `uv_build` ([#&#8203;15750](https://redirect.github.com/astral-sh/uv/pull/15750))\n-
          Add fallback to `/usr/lib/os-release` on Linux system lookup failure ([#&#8203;18349](https://redirect.github.com/astral-sh/uv/pull/18349))\n-
          Use `cargo auditable` to include SBOM in uv builds ([#&#8203;18276](https://redirect.github.com/astral-sh/uv/pull/18276))\n\n#####
          Configuration\n\n- Add an environment variable for `UV_VENV_RELOCATABLE`
          ([#&#8203;18331](https://redirect.github.com/astral-sh/uv/pull/18331))\n\n#####
          Performance\n\n- Avoid toml `Document` overhead ([#&#8203;18306](https://redirect.github.com/astral-sh/uv/pull/18306))\n-
          Use a single global workspace cache ([#&#8203;18307](https://redirect.github.com/astral-sh/uv/pull/18307))\n\n#####
          Bug fixes\n\n- Continue on trampoline job assignment failures ([#&#8203;18291](https://redirect.github.com/astral-sh/uv/pull/18291))\n-
          Handle the hard link limit gracefully instead of failing ([#&#8203;17699](https://redirect.github.com/astral-sh/uv/pull/17699))\n-
          Respect build constraints for workspace members ([#&#8203;18350](https://redirect.github.com/astral-sh/uv/pull/18350))\n-
          Revalidate editables and other dependencies in scripts ([#&#8203;18328](https://redirect.github.com/astral-sh/uv/pull/18328))\n-
          Support Python 3.13+ on Android ([#&#8203;18301](https://redirect.github.com/astral-sh/uv/pull/18301))\n-
          Support `cp3-none-any` ([#&#8203;17064](https://redirect.github.com/astral-sh/uv/pull/17064))\n-
          Skip tool environments with broken links to Python on Windows ([#&#8203;17176](https://redirect.github.com/astral-sh/uv/pull/17176))\n\n#####
          Documentation\n\n- Add documentation for common marker values ([#&#8203;18327](https://redirect.github.com/astral-sh/uv/pull/18327))\n-
          Improve documentation on virtual dependencies ([#&#8203;18346](https://redirect.github.com/astral-sh/uv/pull/18346))\n\n###
          [`v0.10.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0108)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.7...0.10.8)\n\nReleased
          on 2026-03-03.\n\n##### Python\n\n- Add CPython 3.10.20\n- Add CPython 3.11.15\n-
          Add CPython 3.12.13\n\n##### Enhancements\n\n- Add Docker images based on
          Docker Hardened Images ([#&#8203;18247](https://redirect.github.com/astral-sh/uv/pull/18247))\n-
          Add resolver hint when `--exclude-newer` filters out all versions of a package
          ([#&#8203;18217](https://redirect.github.com/astral-sh/uv/pull/18217))\n-
          Configure a real retry minimum delay of 1s ([#&#8203;18201](https://redirect.github.com/astral-sh/uv/pull/18201))\n-
          Expand `uv_build` direct build compatibility ([#&#8203;17902](https://redirect.github.com/astral-sh/uv/pull/17902))\n-
          Fetch CPython from an Astral mirror by default ([#&#8203;18207](https://redirect.github.com/astral-sh/uv/pull/18207))\n-
          Download uv releases from an Astral mirror in installers by default ([#&#8203;18191](https://redirect.github.com/astral-sh/uv/pull/18191))\n-
          Add SBOM attestations to Docker images ([#&#8203;18252](https://redirect.github.com/astral-sh/uv/pull/18252))\n-
          Improve hint for installing meson-python when missing as build backend ([#&#8203;15826](https://redirect.github.com/astral-sh/uv/pull/15826))\n\n#####
          Configuration\n\n- Add `UV_INIT_BARE` environment variable for `uv init`
          ([#&#8203;18210](https://redirect.github.com/astral-sh/uv/pull/18210))\n\n#####
          Bug fixes\n\n- Prevent `uv tool upgrade` from installing excluded dependencies
          ([#&#8203;18022](https://redirect.github.com/astral-sh/uv/pull/18022))\n-
          Promote authentication policy when saving tool receipts ([#&#8203;18246](https://redirect.github.com/astral-sh/uv/pull/18246))\n-
          Respect exclusions in scripts ([#&#8203;18269](https://redirect.github.com/astral-sh/uv/pull/18269))\n-
          Retain default-branch Git SHAs in `pylock.toml` files ([#&#8203;18227](https://redirect.github.com/astral-sh/uv/pull/18227))\n-
          Skip installed Python check for URL dependencies ([#&#8203;18211](https://redirect.github.com/astral-sh/uv/pull/18211))\n-
          Respect constraints during `--upgrade` ([#&#8203;18226](https://redirect.github.com/astral-sh/uv/pull/18226))\n-
          Fix `uv tree` orphaned roots and premature deduplication ([#&#8203;17212](https://redirect.github.com/astral-sh/uv/pull/17212))\n\n#####
          Documentation\n\n- Mention cooldown and tweak inline script metadata in
          dependency bots documentation ([#&#8203;18230](https://redirect.github.com/astral-sh/uv/pull/18230))\n-
          Move cache prune in GitLab to `after_script` ([#&#8203;18206](https://redirect.github.com/astral-sh/uv/pull/18206))\n\n###
          [`v0.10.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0107)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.6...0.10.7)\n\nReleased
          on 2026-02-27.\n\n##### Bug fixes\n\n- Fix handling of junctions in Windows
          Containers on Windows ([#&#8203;18192](https://redirect.github.com/astral-sh/uv/pull/18192))\n\n#####
          Enhancements\n\n- Activate logging for middleware retries ([#&#8203;18200](https://redirect.github.com/astral-sh/uv/pull/18200))\n-
          Upload uv releases to a mirror ([#&#8203;18159](https://redirect.github.com/astral-sh/uv/pull/18159))\n\n###
          [`v0.10.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0106)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.5...0.10.6)\n\nReleased
          on 2026-02-24.\n\n##### Bug fixes\n\n- Apply lockfile marker normalization
          for fork markers ([#&#8203;18116](https://redirect.github.com/astral-sh/uv/pull/18116))\n-
          Fix Python version selection for scripts with a `requires-python` conflicting
          with `.python-version` ([#&#8203;18097](https://redirect.github.com/astral-sh/uv/pull/18097))\n-
          Preserve file permissions when using reflinks on Linux ([#&#8203;18187](https://redirect.github.com/astral-sh/uv/pull/18187))\n\n#####
          Documentation\n\n- Remove verbose documentation from optional dependencies
          help text ([#&#8203;18180](https://redirect.github.com/astral-sh/uv/pull/18180))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/502
        commit_id: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        patchset: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      change: '502'
      change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.10\n\nThis
        PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|
        [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) | stage |
        patch | `0.10.5` \u2192 `0.10.10` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
        (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.10.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01010)\n\nReleased
        on 2026-03-13.\n\n##### Python\n\n- Add CPython 3.15.0a7 ([#&#8203;18403](https://redirect.github.com/astral-sh/uv/pull/18403))\n\n#####
        Enhancements\n\n- Add `--outdated` flag to `uv tool list` ([#&#8203;18318](https://redirect.github.com/astral-sh/uv/pull/18318))\n-
        Add riscv64 musl target to build-release-binaries workflow ([#&#8203;18228](https://redirect.github.com/astral-sh/uv/pull/18228))\n-
        Fetch Ruff from an Astral mirror ([#&#8203;18286](https://redirect.github.com/astral-sh/uv/pull/18286))\n-
        Improve error handling for platform detection in Python downloads ([#&#8203;18453](https://redirect.github.com/astral-sh/uv/pull/18453))\n-
        Warn if `--project` directory does not exist ([#&#8203;17714](https://redirect.github.com/astral-sh/uv/pull/17714))\n-
        Warn when workspace member scripts are skipped due to missing build system
        ([#&#8203;18389](https://redirect.github.com/astral-sh/uv/pull/18389))\n-
        Update build backend versions used in `uv init` ([#&#8203;18417](https://redirect.github.com/astral-sh/uv/pull/18417))\n-
        Log explicit config file path in verbose output ([#&#8203;18353](https://redirect.github.com/astral-sh/uv/pull/18353))\n-
        Make `uv cache clear` an alias of `uv cache clean` ([#&#8203;18420](https://redirect.github.com/astral-sh/uv/pull/18420))\n-
        Reject invalid classifiers, warn on license classifiers in `uv_build` ([#&#8203;18419](https://redirect.github.com/astral-sh/uv/pull/18419))\n\n#####
        Preview features\n\n- Add links to `uv audit` output ([#&#8203;18392](https://redirect.github.com/astral-sh/uv/pull/18392))\n-
        Output/report formatting for `uv audit` ([#&#8203;18193](https://redirect.github.com/astral-sh/uv/pull/18193))\n-
        Switch to batched OSV queries for `uv audit` ([#&#8203;18394](https://redirect.github.com/astral-sh/uv/pull/18394))\n\n#####
        Bug fixes\n\n- Avoid sharing version metadata across indexes ([#&#8203;18373](https://redirect.github.com/astral-sh/uv/pull/18373))\n-
        Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows
        ([#&#8203;18362](https://redirect.github.com/astral-sh/uv/pull/18362))\n-
        Filter out unsupported environment wheels ([#&#8203;18445](https://redirect.github.com/astral-sh/uv/pull/18445))\n-
        Preserve absolute/relative paths in lockfiles ([#&#8203;18176](https://redirect.github.com/astral-sh/uv/pull/18176))\n-
        Recreate Python environments under `uv tool install --force` ([#&#8203;18399](https://redirect.github.com/astral-sh/uv/pull/18399))\n-
        Respect timestamp and other cache keys in cached environments ([#&#8203;18396](https://redirect.github.com/astral-sh/uv/pull/18396))\n-
        Simplify selected extra markers in `uv export` ([#&#8203;18433](https://redirect.github.com/astral-sh/uv/pull/18433))\n-
        Send pyx mint-token requests with a proper `Content-Type` ([#&#8203;18334](https://redirect.github.com/astral-sh/uv/pull/18334))\n-
        Fix Windows operating system and version reporting ([#&#8203;18383](https://redirect.github.com/astral-sh/uv/pull/18383))\n\n#####
        Documentation\n\n- Update the platform support policy with a tier 3 section
        including freebsd and 32-bit windows ([#&#8203;18345](https://redirect.github.com/astral-sh/uv/pull/18345))\n\n###
        [`v0.10.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0109)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.10.8...0.10.9)\n\nReleased
        on 2026-03-06.\n\n##### Enhancements\n\n- Add `fbgemm-gpu`, `fbgemm-gpu-genai`,
        `torchrec`, and `torchtune` to the PyTorch list ([#&#8203;18338](https://redirect.github.com/astral-sh/uv/pull/18338))\n-
        Add torchcodec to PyTorch List ([#&#8203;18336](https://redirect.github.com/astral-sh/uv/pull/18336))\n-
        Log the duration we took before erroring ([#&#8203;18231](https://redirect.github.com/astral-sh/uv/pull/18231))\n-
        Warn when using `uv_build` settings without `uv_build` ([#&#8203;15750](https://redirect.github.com/astral-sh/uv/pull/15750))\n-
        Add fallback to `/usr/lib/os-release` on Linux system lookup failure ([#&#8203;18349](https://redirect.github.com/astral-sh/uv/pull/18349))\n-
        Use `cargo auditable` to include SBOM in uv builds ([#&#8203;18276](https://redirect.github.com/astral-sh/uv/pull/18276))\n\n#####
        Configuration\n\n- Add an environment variable for `UV_VENV_RELOCATABLE` ([#&#8203;18331](https://redirect.github.com/astral-sh/uv/pull/18331))\n\n#####
        Performance\n\n- Avoid toml `Document` overhead ([#&#8203;18306](https://redirect.github.com/astral-sh/uv/pull/18306))\n-
        Use a single global workspace cache ([#&#8203;18307](https://redirect.github.com/astral-sh/uv/pull/18307))\n\n#####
        Bug fixes\n\n- Continue on trampoline job assignment failures ([#&#8203;18291](https://redirect.github.com/astral-sh/uv/pull/18291))\n-
        Handle the hard link limit gracefully instead of failing ([#&#8203;17699](https://redirect.github.com/astral-sh/uv/pull/17699))\n-
        Respect build constraints for workspace members ([#&#8203;18350](https://redirect.github.com/astral-sh/uv/pull/18350))\n-
        Revalidate editables and other dependencies in scripts ([#&#8203;18328](https://redirect.github.com/astral-sh/uv/pull/18328))\n-
        Support Python 3.13+ on Android ([#&#8203;18301](https://redirect.github.com/astral-sh/uv/pull/18301))\n-
        Support `cp3-none-any` ([#&#8203;17064](https://redirect.github.com/astral-sh/uv/pull/17064))\n-
        Skip tool environments with broken links to Python on Windows ([#&#8203;17176](https://redirect.github.com/astral-sh/uv/pull/17176))\n\n#####
        Documentation\n\n- Add documentation for common marker values ([#&#8203;18327](https://redirect.github.com/astral-sh/uv/pull/18327))\n-
        Improve documentation on virtual dependencies ([#&#8203;18346](https://redirect.github.com/astral-sh/uv/pull/18346))\n\n###
        [`v0.10.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0108)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.10.7...0.10.8)\n\nReleased
        on 2026-03-03.\n\n##### Python\n\n- Add CPython 3.10.20\n- Add CPython 3.11.15\n-
        Add CPython 3.12.13\n\n##### Enhancements\n\n- Add Docker images based on
        Docker Hardened Images ([#&#8203;18247](https://redirect.github.com/astral-sh/uv/pull/18247))\n-
        Add resolver hint when `--exclude-newer` filters out all versions of a package
        ([#&#8203;18217](https://redirect.github.com/astral-sh/uv/pull/18217))\n-
        Configure a real retry minimum delay of 1s ([#&#8203;18201](https://redirect.github.com/astral-sh/uv/pull/18201))\n-
        Expand `uv_build` direct build compatibility ([#&#8203;17902](https://redirect.github.com/astral-sh/uv/pull/17902))\n-
        Fetch CPython from an Astral mirror by default ([#&#8203;18207](https://redirect.github.com/astral-sh/uv/pull/18207))\n-
        Download uv releases from an Astral mirror in installers by default ([#&#8203;18191](https://redirect.github.com/astral-sh/uv/pull/18191))\n-
        Add SBOM attestations to Docker images ([#&#8203;18252](https://redirect.github.com/astral-sh/uv/pull/18252))\n-
        Improve hint for installing meson-python when missing as build backend ([#&#8203;15826](https://redirect.github.com/astral-sh/uv/pull/15826))\n\n#####
        Configuration\n\n- Add `UV_INIT_BARE` environment variable for `uv init` ([#&#8203;18210](https://redirect.github.com/astral-sh/uv/pull/18210))\n\n#####
        Bug fixes\n\n- Prevent `uv tool upgrade` from installing excluded dependencies
        ([#&#8203;18022](https://redirect.github.com/astral-sh/uv/pull/18022))\n-
        Promote authentication policy when saving tool receipts ([#&#8203;18246](https://redirect.github.com/astral-sh/uv/pull/18246))\n-
        Respect exclusions in scripts ([#&#8203;18269](https://redirect.github.com/astral-sh/uv/pull/18269))\n-
        Retain default-branch Git SHAs in `pylock.toml` files ([#&#8203;18227](https://redirect.github.com/astral-sh/uv/pull/18227))\n-
        Skip installed Python check for URL dependencies ([#&#8203;18211](https://redirect.github.com/astral-sh/uv/pull/18211))\n-
        Respect constraints during `--upgrade` ([#&#8203;18226](https://redirect.github.com/astral-sh/uv/pull/18226))\n-
        Fix `uv tree` orphaned roots and premature deduplication ([#&#8203;17212](https://redirect.github.com/astral-sh/uv/pull/17212))\n\n#####
        Documentation\n\n- Mention cooldown and tweak inline script metadata in dependency
        bots documentation ([#&#8203;18230](https://redirect.github.com/astral-sh/uv/pull/18230))\n-
        Move cache prune in GitLab to `after_script` ([#&#8203;18206](https://redirect.github.com/astral-sh/uv/pull/18206))\n\n###
        [`v0.10.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0107)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.10.6...0.10.7)\n\nReleased
        on 2026-02-27.\n\n##### Bug fixes\n\n- Fix handling of junctions in Windows
        Containers on Windows ([#&#8203;18192](https://redirect.github.com/astral-sh/uv/pull/18192))\n\n#####
        Enhancements\n\n- Activate logging for middleware retries ([#&#8203;18200](https://redirect.github.com/astral-sh/uv/pull/18200))\n-
        Upload uv releases to a mirror ([#&#8203;18159](https://redirect.github.com/astral-sh/uv/pull/18159))\n\n###
        [`v0.10.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0106)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.10.5...0.10.6)\n\nReleased
        on 2026-02-24.\n\n##### Bug fixes\n\n- Apply lockfile marker normalization
        for fork markers ([#&#8203;18116](https://redirect.github.com/astral-sh/uv/pull/18116))\n-
        Fix Python version selection for scripts with a `requires-python` conflicting
        with `.python-version` ([#&#8203;18097](https://redirect.github.com/astral-sh/uv/pull/18097))\n-
        Preserve file permissions when using reflinks on Linux ([#&#8203;18187](https://redirect.github.com/astral-sh/uv/pull/18187))\n\n#####
        Documentation\n\n- Remove verbose documentation from optional dependencies
        help text ([#&#8203;18180](https://redirect.github.com/astral-sh/uv/pull/18180))\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/osism/container-image-inventory-reconciler/pull/502
      child_jobs: []
      commit_id: ade2edd478b8e43e0cb38faa5990f308e9d16c92
      event_id: 0161f870-1f18-11f1-8266-61b098b4c3bb
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/90d2d137885e406da306d99b5c450d12/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/90d2d137885e406da306d99b5c450d12/work/logs
        result_data_file: /var/lib/zuul/builds/90d2d137885e406da306d99b5c450d12/work/results.json
        src_root: /var/lib/zuul/builds/90d2d137885e406da306d99b5c450d12/work/src
        work_root: /var/lib/zuul/builds/90d2d137885e406da306d99b5c450d12/work
      include_vars: []
      items:
      - branch: main
        change: '502'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.10\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.10.5` \u2192 `0.10.10` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.10.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01010)\n\nReleased
          on 2026-03-13.\n\n##### Python\n\n- Add CPython 3.15.0a7 ([#&#8203;18403](https://redirect.github.com/astral-sh/uv/pull/18403))\n\n#####
          Enhancements\n\n- Add `--outdated` flag to `uv tool list` ([#&#8203;18318](https://redirect.github.com/astral-sh/uv/pull/18318))\n-
          Add riscv64 musl target to build-release-binaries workflow ([#&#8203;18228](https://redirect.github.com/astral-sh/uv/pull/18228))\n-
          Fetch Ruff from an Astral mirror ([#&#8203;18286](https://redirect.github.com/astral-sh/uv/pull/18286))\n-
          Improve error handling for platform detection in Python downloads ([#&#8203;18453](https://redirect.github.com/astral-sh/uv/pull/18453))\n-
          Warn if `--project` directory does not exist ([#&#8203;17714](https://redirect.github.com/astral-sh/uv/pull/17714))\n-
          Warn when workspace member scripts are skipped due to missing build system
          ([#&#8203;18389](https://redirect.github.com/astral-sh/uv/pull/18389))\n-
          Update build backend versions used in `uv init` ([#&#8203;18417](https://redirect.github.com/astral-sh/uv/pull/18417))\n-
          Log explicit config file path in verbose output ([#&#8203;18353](https://redirect.github.com/astral-sh/uv/pull/18353))\n-
          Make `uv cache clear` an alias of `uv cache clean` ([#&#8203;18420](https://redirect.github.com/astral-sh/uv/pull/18420))\n-
          Reject invalid classifiers, warn on license classifiers in `uv_build` ([#&#8203;18419](https://redirect.github.com/astral-sh/uv/pull/18419))\n\n#####
          Preview features\n\n- Add links to `uv audit` output ([#&#8203;18392](https://redirect.github.com/astral-sh/uv/pull/18392))\n-
          Output/report formatting for `uv audit` ([#&#8203;18193](https://redirect.github.com/astral-sh/uv/pull/18193))\n-
          Switch to batched OSV queries for `uv audit` ([#&#8203;18394](https://redirect.github.com/astral-sh/uv/pull/18394))\n\n#####
          Bug fixes\n\n- Avoid sharing version metadata across indexes ([#&#8203;18373](https://redirect.github.com/astral-sh/uv/pull/18373))\n-
          Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows
          ([#&#8203;18362](https://redirect.github.com/astral-sh/uv/pull/18362))\n-
          Filter out unsupported environment wheels ([#&#8203;18445](https://redirect.github.com/astral-sh/uv/pull/18445))\n-
          Preserve absolute/relative paths in lockfiles ([#&#8203;18176](https://redirect.github.com/astral-sh/uv/pull/18176))\n-
          Recreate Python environments under `uv tool install --force` ([#&#8203;18399](https://redirect.github.com/astral-sh/uv/pull/18399))\n-
          Respect timestamp and other cache keys in cached environments ([#&#8203;18396](https://redirect.github.com/astral-sh/uv/pull/18396))\n-
          Simplify selected extra markers in `uv export` ([#&#8203;18433](https://redirect.github.com/astral-sh/uv/pull/18433))\n-
          Send pyx mint-token requests with a proper `Content-Type` ([#&#8203;18334](https://redirect.github.com/astral-sh/uv/pull/18334))\n-
          Fix Windows operating system and version reporting ([#&#8203;18383](https://redirect.github.com/astral-sh/uv/pull/18383))\n\n#####
          Documentation\n\n- Update the platform support policy with a tier 3 section
          including freebsd and 32-bit windows ([#&#8203;18345](https://redirect.github.com/astral-sh/uv/pull/18345))\n\n###
          [`v0.10.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0109)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.8...0.10.9)\n\nReleased
          on 2026-03-06.\n\n##### Enhancements\n\n- Add `fbgemm-gpu`, `fbgemm-gpu-genai`,
          `torchrec`, and `torchtune` to the PyTorch list ([#&#8203;18338](https://redirect.github.com/astral-sh/uv/pull/18338))\n-
          Add torchcodec to PyTorch List ([#&#8203;18336](https://redirect.github.com/astral-sh/uv/pull/18336))\n-
          Log the duration we took before erroring ([#&#8203;18231](https://redirect.github.com/astral-sh/uv/pull/18231))\n-
          Warn when using `uv_build` settings without `uv_build` ([#&#8203;15750](https://redirect.github.com/astral-sh/uv/pull/15750))\n-
          Add fallback to `/usr/lib/os-release` on Linux system lookup failure ([#&#8203;18349](https://redirect.github.com/astral-sh/uv/pull/18349))\n-
          Use `cargo auditable` to include SBOM in uv builds ([#&#8203;18276](https://redirect.github.com/astral-sh/uv/pull/18276))\n\n#####
          Configuration\n\n- Add an environment variable for `UV_VENV_RELOCATABLE`
          ([#&#8203;18331](https://redirect.github.com/astral-sh/uv/pull/18331))\n\n#####
          Performance\n\n- Avoid toml `Document` overhead ([#&#8203;18306](https://redirect.github.com/astral-sh/uv/pull/18306))\n-
          Use a single global workspace cache ([#&#8203;18307](https://redirect.github.com/astral-sh/uv/pull/18307))\n\n#####
          Bug fixes\n\n- Continue on trampoline job assignment failures ([#&#8203;18291](https://redirect.github.com/astral-sh/uv/pull/18291))\n-
          Handle the hard link limit gracefully instead of failing ([#&#8203;17699](https://redirect.github.com/astral-sh/uv/pull/17699))\n-
          Respect build constraints for workspace members ([#&#8203;18350](https://redirect.github.com/astral-sh/uv/pull/18350))\n-
          Revalidate editables and other dependencies in scripts ([#&#8203;18328](https://redirect.github.com/astral-sh/uv/pull/18328))\n-
          Support Python 3.13+ on Android ([#&#8203;18301](https://redirect.github.com/astral-sh/uv/pull/18301))\n-
          Support `cp3-none-any` ([#&#8203;17064](https://redirect.github.com/astral-sh/uv/pull/17064))\n-
          Skip tool environments with broken links to Python on Windows ([#&#8203;17176](https://redirect.github.com/astral-sh/uv/pull/17176))\n\n#####
          Documentation\n\n- Add documentation for common marker values ([#&#8203;18327](https://redirect.github.com/astral-sh/uv/pull/18327))\n-
          Improve documentation on virtual dependencies ([#&#8203;18346](https://redirect.github.com/astral-sh/uv/pull/18346))\n\n###
          [`v0.10.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0108)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.7...0.10.8)\n\nReleased
          on 2026-03-03.\n\n##### Python\n\n- Add CPython 3.10.20\n- Add CPython 3.11.15\n-
          Add CPython 3.12.13\n\n##### Enhancements\n\n- Add Docker images based on
          Docker Hardened Images ([#&#8203;18247](https://redirect.github.com/astral-sh/uv/pull/18247))\n-
          Add resolver hint when `--exclude-newer` filters out all versions of a package
          ([#&#8203;18217](https://redirect.github.com/astral-sh/uv/pull/18217))\n-
          Configure a real retry minimum delay of 1s ([#&#8203;18201](https://redirect.github.com/astral-sh/uv/pull/18201))\n-
          Expand `uv_build` direct build compatibility ([#&#8203;17902](https://redirect.github.com/astral-sh/uv/pull/17902))\n-
          Fetch CPython from an Astral mirror by default ([#&#8203;18207](https://redirect.github.com/astral-sh/uv/pull/18207))\n-
          Download uv releases from an Astral mirror in installers by default ([#&#8203;18191](https://redirect.github.com/astral-sh/uv/pull/18191))\n-
          Add SBOM attestations to Docker images ([#&#8203;18252](https://redirect.github.com/astral-sh/uv/pull/18252))\n-
          Improve hint for installing meson-python when missing as build backend ([#&#8203;15826](https://redirect.github.com/astral-sh/uv/pull/15826))\n\n#####
          Configuration\n\n- Add `UV_INIT_BARE` environment variable for `uv init`
          ([#&#8203;18210](https://redirect.github.com/astral-sh/uv/pull/18210))\n\n#####
          Bug fixes\n\n- Prevent `uv tool upgrade` from installing excluded dependencies
          ([#&#8203;18022](https://redirect.github.com/astral-sh/uv/pull/18022))\n-
          Promote authentication policy when saving tool receipts ([#&#8203;18246](https://redirect.github.com/astral-sh/uv/pull/18246))\n-
          Respect exclusions in scripts ([#&#8203;18269](https://redirect.github.com/astral-sh/uv/pull/18269))\n-
          Retain default-branch Git SHAs in `pylock.toml` files ([#&#8203;18227](https://redirect.github.com/astral-sh/uv/pull/18227))\n-
          Skip installed Python check for URL dependencies ([#&#8203;18211](https://redirect.github.com/astral-sh/uv/pull/18211))\n-
          Respect constraints during `--upgrade` ([#&#8203;18226](https://redirect.github.com/astral-sh/uv/pull/18226))\n-
          Fix `uv tree` orphaned roots and premature deduplication ([#&#8203;17212](https://redirect.github.com/astral-sh/uv/pull/17212))\n\n#####
          Documentation\n\n- Mention cooldown and tweak inline script metadata in
          dependency bots documentation ([#&#8203;18230](https://redirect.github.com/astral-sh/uv/pull/18230))\n-
          Move cache prune in GitLab to `after_script` ([#&#8203;18206](https://redirect.github.com/astral-sh/uv/pull/18206))\n\n###
          [`v0.10.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0107)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.6...0.10.7)\n\nReleased
          on 2026-02-27.\n\n##### Bug fixes\n\n- Fix handling of junctions in Windows
          Containers on Windows ([#&#8203;18192](https://redirect.github.com/astral-sh/uv/pull/18192))\n\n#####
          Enhancements\n\n- Activate logging for middleware retries ([#&#8203;18200](https://redirect.github.com/astral-sh/uv/pull/18200))\n-
          Upload uv releases to a mirror ([#&#8203;18159](https://redirect.github.com/astral-sh/uv/pull/18159))\n\n###
          [`v0.10.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0106)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.10.5...0.10.6)\n\nReleased
          on 2026-02-24.\n\n##### Bug fixes\n\n- Apply lockfile marker normalization
          for fork markers ([#&#8203;18116](https://redirect.github.com/astral-sh/uv/pull/18116))\n-
          Fix Python version selection for scripts with a `requires-python` conflicting
          with `.python-version` ([#&#8203;18097](https://redirect.github.com/astral-sh/uv/pull/18097))\n-
          Preserve file permissions when using reflinks on Linux ([#&#8203;18187](https://redirect.github.com/astral-sh/uv/pull/18187))\n\n#####
          Documentation\n\n- Remove verbose documentation from optional dependencies
          help text ([#&#8203;18180](https://redirect.github.com/astral-sh/uv/pull/18180))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/502
        commit_id: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        patchset: ade2edd478b8e43e0cb38faa5990f308e9d16c92
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
          src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      job: hadolint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: ade2edd478b8e43e0cb38faa5990f308e9d16c92
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/hadolint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-inventory-reconciler
        name: osism/container-image-inventory-reconciler
        short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
      projects:
        github.com/osism/container-image-inventory-reconciler:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          checkout: main
          checkout_description: zuul branch
          commit: fa7380182fa968fe80cd3cbbb840430a2a4c3874
          name: osism/container-image-inventory-reconciler
          required: false
          short_name: container-image-inventory-reconciler
          src_dir: src/github.com/osism/container-image-inventory-reconciler
      ref: refs/pull/502/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
