chore(deps): update 3 dependencies (uv, Moshi, Docker Compose) - #11

Upstream source

0.12.22: ## Release Notes

Released on 2026-10-01.

Python

• Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 (#22147)

Enhancements

• Accept uppercase release suffixes in wheel platform tags (#22113)
• Record workspace-member default groups in lockfiles (#22010, #22103)
• Record workspace-member dependency-group Python requirements in lockfiles (#22044, #22103)
• Record default groups for non-project workspace roots in lockfiles (#22104)
• Record dependency-group Python requirements for non-project workspace roots in lockfiles (#22104)
• Format URLs and paths consistently in CLI messages (#21937)
• Hide the unsupported --offline option from uv publish help (#22124)

Preview features

• Honor --no-default-groups in uv audit (#22090)
• Report a clear error when uv audit or uv tool audit runs offline and hide the unsupported option from help (#22114)

Configuration

• Add UV_PYTHON_ARCH to select an interpreter architecture independently of its Python version (#22098)

Performance

• Reduce uv's binary size by compressing embedded Python download metadata (#22126)

Bug fixes

• Verify unchanged requirements against existing lockfile hashes when relocking (#22083)
• Honor dependency-group Python requirements at non-project workspace roots (#22101)
• Use each selected workspace member's recorded default groups during frozen sync (#22015)
• Avoid false entry-point warnings for required workspace members (#22112)

Other changes

• Raise the minimum supported Rust version for building uv to 1.97 and update the toolchain to Rust 1.99 (#22121)

Install uv 0.12.22

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.22/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.22/uv-installer.ps1 | iex"

Download uv 0.12.22

Notes are truncated. See the upstream source for the full text.

Upstream source

0.4.13: Release notes unavailable; inspect source link.
https://cdn.getmoshi.app/hook/latest/version.txt

Upstream source

5.6.0: ## What's Changed

> ℹ️ This release adds partial support for jobs: only manually-triggered jobs are supported for now, scheduled jobs are not yet available. Full job support will land once the corresponding Docker Engine support is merged.

✨ Improvements

Jobs

• Adopt compose-go jobs and container-spec layering by @​ndeloof in adopt compose-go jobs and container-spec layering docker/compose#14093

Provider services

• Feat(provider): get-service-config provider request by @​ndeloof in feat(provider): get-service-config provider request docker/compose#14175
• Feat(provider): publish-endpoint deploys a network relay for provider services by @​ndeloof in feat(provider): publish-endpoint deploys a network relay for provider services docker/compose#14193
• Get-relay-info tells providers where to bind for the relay by @​ndeloof in get-relay-info tells providers where to bind for the relay docker/compose#14258
• Feat(compose): dedicated network for the provider relay link by @​ndeloof in feat(compose): dedicated network for the provider relay link docker/compose#14275
• Provider services take part in the image phase, with image distribution on demand by @​ndeloof in provider services take part in the image phase, with image distribution on demand docker/compose#14252

Other

• Feat(compose): warn on unsupported compose-file attributes by @​glours in feat(compose): warn on unsupported compose-file attributes docker/compose#14196
• PRIVATE_PORT optional for docker compose port by @​maxproske in PRIVATE_PORT optional for docker compose port docker/compose#13577

🐛 Fixes

• Fix(build): hand unresolved 'auto' progress mode to bake by @​ndeloof in fix(build): hand unresolved 'auto' progress mode to bake docker/compose#14194
• Fix(watch): coalesce rebuilds triggered during a burst of file changes by @​glours in fix(watch): coalesce rebuilds triggered during a burst of file changes docker/compose#14202
• Fix(port): preserve tie order for dual-stack port publishers by @​glours in fix(port): preserve tie order for dual-stack port publishers docker/compose#14213
• Fix(publish): warn when push falls back from OCI 1.1 to OCI 1.0 by @​htoyoda18 in fix(publish): warn when push falls back from OCI 1.1 to OCI 1.0 docker/compose#14146
• Fix: detect externally stopped and removed containers in up monitor by @​glours in fix: detect externally stopped and removed containers in up monitor docker/compose#13990
• Fix(dry-run): commit no longer creates a real image; the interception set becomes declarative by @​ndeloof in fix(dry-run): commit no longer creates a real image; the interception set becomes declarative docker/compose#14150
• Fix(up): drop benign context.Canceled noise from the final report by @​ndeloof in fix(up): drop benign context.Canceled noise from the final report docker/compose#14227
• Fix(relay): reconnect to new networks when routes are unchanged by @​ndeloof in fix(relay): reconnect to new networks when routes are unchanged docker/compose#14236
• Fix(provider): clean up stale relay and guard start/restart against it by @​ndeloof in fix(provider): clean up stale relay and guard start/restart against it docker/compose#14238
• Fix(hash): pin the service config-hash byte layout, decoupled from compose-go struct refactorings by @​ndeloof in fix(hash): pin the service config-hash byte layout, decoupled from compose-go struct refactorings docker/compose#14215
• Fix(hash): repair main after #14093/#14215 merged in reverse order by @​ndeloof in fix(hash): repair main after #14093/#14215 merged in reverse order docker/compose#14253
• Fix(logs): restart re-attach loses a fast run's output — found by deflaking e2e by @​ndeloof in fix(logs): restart re-attach loses a fast run's output — found by deflaking e2e docker/compose#14140
• Fix: provider migration condemns the service's stale replicas by @​ndeloof in fix: provider migration condemns the service's stale replicas docker/compose#14264
• Fix/down rmi dangling images by @​glours in Fix/down rmi dangling images docker/compose#14266
• Fix/dry run service completed successfully 14269 by @​glours in Fix/dry run service completed successfully 14269 docker/compose#14270
• Fix: honor --parallel across all bulk engine-call fan-outs by @​glours in fix: honor --parallel across all bulk engine-call fan-outs docker/compose#14177
• Fix: adapt to compose-go v2.16.1 promoting x-initialSync silently by @​glours in fix: adapt to compose-go v2.16.1 promoting x-initialSync silently docker/compose#14281

🔧 Internal

• Remove jonboulle/clockwork for testing/synctest by @​thaJeztah in remove jonboulle/clockwork for testing/synctest docker/compose#14185
• Rebuild the TTY progress renderer on a model/layout/screen split by @​ndeloof in Rebuild the TTY progress renderer on a model/layout/screen split docker/compose#14051
• Golangci-lint: enable perfsprint linter by @​thaJeztah in golangci-lint: enable perfsprint linter docker/compose#14207
• Cmd/prompt: remove uses of github.com/AlecAivazis/survey/v2 by @​thaJeztah in https://github.com/docker/c

Notes are truncated. See the upstream source for the full text.

• Only versions changes. Major upgrades and prereleases are excluded.
• Runtime and kubectl minor series remain pinned; devcontainers and VS Code CLI use fixed commits.
• Agent entries set to latest stay unchanged and are reinstalled by their image build stages.
• Source lookup failures prevent partial updates. This updater never merges or deploys.

Inputs outside this update:

• apt packages and transitive dependencies.
• PHP helper scripts fetched from master and Node signing keys fetched from main.
• runtime dotfiles, extensions and persistent tool directories.

Base: 7952f03

Run: GitHub Actions