all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe86:e74
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: da2f25eb-4eb2-4443-a5ee-079c0a01d5b6
        host_id: 7b3f0b92197487d4577819108acea9423a4ebbe6107eeb02f4a72cb2
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe86:e74
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.46
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.255
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe86:e74
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/cfg-cookiecutter/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: ad7753d69a9246fc80a7ec2fa56372d9
      build_refs:
      - branch: main
        change: '770'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.8\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | final | patch | `0.8.5` -> `0.8.8` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser (CVE-2025-54368).\n\nPrior to
          this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\n##### Security\n\n- Harden ZIP streaming to reject
          repeated entries and other malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/770
        commit_id: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        patchset: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      buildset: 42bff10f12d540dfa9759e584a43716c
      buildset_refs:
      - branch: main
        change: '770'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.8\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | final | patch | `0.8.5` -> `0.8.8` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser (CVE-2025-54368).\n\nPrior to
          this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\n##### Security\n\n- Harden ZIP streaming to reject
          repeated entries and other malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/770
        commit_id: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        patchset: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      change: '770'
      change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.8\n\nThis
        PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|
        [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) | final |
        patch | `0.8.5` -> `0.8.8` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
        (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
        Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
        [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
        Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
        shared objects, which fixes matplotlib's `tkagg` backend (the default on Linux),
        Pillow's `PIL.ImageTk` library, and other extension modules that need to use
        libtcl/libtk directly.\n- Tix is no longer provided on Linux. This is a deprecated
        Tk extension that appears to have been previously broken.\n\nSee the [`python-build-standalone`
        release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
        for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
        `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
        Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
        Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
        Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
        Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
        Preview features\n\n- Add support for `package`-level conflicts in workspaces
        ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
        Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
        `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
        Bug fixes\n\n- Fix regression where `--require-hashes` applied to build dependencies
        in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
        Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
        Include all site packages directories in ephemeral environment overlays ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
        Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
        Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
        docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
        [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
        release contains hardening measures to address differentials in behavior between
        uv and Python's built-in ZIP parser (CVE-2025-54368).\n\nPrior to this release,
        attackers could construct ZIP files that would be extracted differently by
        pip, uv, and other tools. As a result, ZIPs could be constructed that would
        be considered harmless by (e.g.) scanners, but contain a malicious payload
        when extracted by uv. As of v0.8.6, uv now applies additional checks to reject
        such ZIPs.\n\nThanks to a triage effort with the [Python Security Response
        Team](https://devguide.python.org/developer-workflow/psrt/) and PyPI maintainers,
        we were able to determine that these differentials **were not exploited**
        via PyPI during the time they were present. The PyPI team has also implemented
        similar checks and now guards against these parsing differentials on upload.\n\nAlthough
        the practical risk of exploitation is low, we take the *hypothetical* risk
        of parser differentials very seriously. Out of an abundance of caution, we
        have assigned this advisory a CVE identifier and have given it a \"moderate\"
        severity suggestion.\n\nThese changes have been validated against the top
        15,000 PyPI packages; however, it's plausible that a non-malicious ZIP could
        be falsely rejected with this additional hardening. As an escape hatch, users
        who do encounter breaking changes can enable `UV_INSECURE_NO_ZIP_VALIDATION`
        to restore the previous behavior. If you encounter such a rejection, please
        file an issue in uv and to the upstream package.\n\n##### Security\n\n- Harden
        ZIP streaming to reject repeated entries and other malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
        Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
        per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
        Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
        Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
        Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
        Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
        Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
        Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
        Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/osism/cfg-cookiecutter/pull/770
      child_jobs: []
      commit_id: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
      event_id: 0753a330-74c0-11f0-892a-260786c81da7
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/ad7753d69a9246fc80a7ec2fa56372d9/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/ad7753d69a9246fc80a7ec2fa56372d9/work/logs
        result_data_file: /var/lib/zuul/builds/ad7753d69a9246fc80a7ec2fa56372d9/work/results.json
        src_root: /var/lib/zuul/builds/ad7753d69a9246fc80a7ec2fa56372d9/work/src
        work_root: /var/lib/zuul/builds/ad7753d69a9246fc80a7ec2fa56372d9/work
      include_vars: []
      items:
      - branch: main
        change: '770'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.8\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | final | patch | `0.8.5` -> `0.8.8` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser (CVE-2025-54368).\n\nPrior to
          this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\n##### Security\n\n- Harden ZIP streaming to reject
          repeated entries and other malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/cfg-cookiecutter).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/cfg-cookiecutter/pull/770
        commit_id: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        patchset: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          name: osism/cfg-cookiecutter
          short_name: cfg-cookiecutter
          src_dir: src/github.com/osism/cfg-cookiecutter
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 5e439cd5cdfa17911918b330ecf0f8a7a5db4d5d
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 9b966b7c4a2bfb253652691d791f76f825145a9c
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/cfg-cookiecutter
        name: osism/cfg-cookiecutter
        short_name: cfg-cookiecutter
        src_dir: src/github.com/osism/cfg-cookiecutter
      projects:
        github.com/osism/cfg-cookiecutter:
          canonical_hostname: github.com
          canonical_name: github.com/osism/cfg-cookiecutter
          checkout: main
          checkout_description: zuul branch
          commit: 4f58c7619edbeaa20ef1639b0360dbf0fb14ad9a
          name: osism/cfg-cookiecutter
          required: false
          short_name: cfg-cookiecutter
          src_dir: src/github.com/osism/cfg-cookiecutter
      ref: refs/pull/770/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
