Update charmcraft.yaml build tools

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence	Update
poetry (changelog)	2.1.4 -> 2.2.1			minor
rust-lang/rust	1.89.0 -> 1.90.0			minor
uv (source, changelog)	0.8.12 -> 0.8.22			patch

---

Release Notes

python-poetry/poetry (poetry)

v2.2.1

Compare Source

Fixed

• Fix an issue where poetry self show failed with a message about an invalid output format (#​10560).

Docs

• Remove outdated statements about dependency groups (#​10561).

poetry-core (2.2.1)

• Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#​888).

v2.2.0

Compare Source

Added

• Add support for nesting dependency groups (#​10166).
• Add support for PEP 735 dependency groups (#​10130).
• Add support for PEP 639 license clarity (#​10413).
• Add a --format option to poetry show to alternatively output json format (#​10487).
• Add official support for Python 3.14 (#​10514).

Changed

• Normalize dependency group names (#​10387).
• Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#​10278).
• Improve log output during poetry install when a wheel is built from source (#​10404).
• Improve error message in case a file lock could not be acquired while cloning a git repository (#​10535).
• Require dulwich>=0.24.0 (#​10492).
• Allow virtualenv>=20.33 again (#​10506).
• Allow findpython>=0.7 (#​10510).
• Allow importlib-metadata>=8.7 (#​10511).

Fixed

• Fix an issue where poetry new did not create the project structure in an existing empty directory (#​10431).
• Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#​10516).

poetry-core (2.2.0)

• Deprecate table values and values that are not valid SPDX expressions for [project.license] (#​870).
• Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#​874).
• Fix an issue where marker operations could result in invalid markers (#​875).

rust-lang/rust (rust-lang/rust)

v1.90.0

Compare Source

===========================

Language

• Split up the unknown_or_malformed_diagnostic_attributes lint. This lint has been split up into four finer-grained lints, with unknown_or_malformed_diagnostic_attributes now being the lint group that contains these lints:
  1. unknown_diagnostic_attributes: unknown to the current compiler
  2. misplaced_diagnostic_attributes: placed on the wrong item
  3. malformed_diagnostic_attributes: malformed attribute syntax or options
  4. malformed_diagnostic_format_literals: malformed format string literal
• Allow constants whose final value has references to mutable/external memory, but reject such constants as patterns
• Allow volatile access to non-Rust memory, including address 0

Compiler

• Use lld by default on x86_64-unknown-linux-gnu.
• Tier 3 musl targets now link dynamically by default. Affected targets:
  • mips64-unknown-linux-muslabi64
  • powerpc64-unknown-linux-musl
  • powerpc-unknown-linux-musl
  • powerpc-unknown-linux-muslspe
  • riscv32gc-unknown-linux-musl
  • s390x-unknown-linux-musl
  • thumbv7neon-unknown-linux-musleabihf

Platform Support

• Demote x86_64-apple-darwin to Tier 2 with host tools

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Stabilize u*::{checked,overflowing,saturating,wrapping}_sub_signed
• Allow comparisons between CStr, CString, and Cow<CStr>
• Remove some unsized tuple impls since unsized tuples can't be constructed
• Set MSG_NOSIGNAL for UnixStream
• proc_macro::Ident::new now supports $crate.
• Guarantee the pointer returned from Thread::into_raw has at least 8 bytes of alignment

Stabilized APIs

• u{n}::checked_sub_signed
• u{n}::overflowing_sub_signed
• u{n}::saturating_sub_signed
• u{n}::wrapping_sub_signed
• impl Copy for IntErrorKind
• impl Hash for IntErrorKind
• impl PartialEq<&CStr> for CStr
• impl PartialEq<CString> for CStr
• impl PartialEq<Cow<CStr>> for CStr
• impl PartialEq<&CStr> for CString
• impl PartialEq<CStr> for CString
• impl PartialEq<Cow<CStr>> for CString
• impl PartialEq<&CStr> for Cow<CStr>
• impl PartialEq<CStr> for Cow<CStr>
• impl PartialEq<CString> for Cow<CStr>

These previously stable APIs are now stable in const contexts:

• <[T]>::reverse
• f32::floor
• f32::ceil
• f32::trunc
• f32::fract
• f32::round
• f32::round_ties_even
• f64::floor
• f64::ceil
• f64::trunc
• f64::fract
• f64::round
• f64::round_ties_even

Cargo

• Add http.proxy-cainfo config for proxy certs
• Use gix for cargo package
• feat(publish): Stabilize multi-package publishing

Rustdoc

• Add ways to collapse all impl blocks. Previously the "Summary" button and "-" keyboard shortcut would never collapse impl blocks, now they do when shift is held
• Display unsafe attributes with unsafe() wrappers

Compatibility Notes

• Use lld by default on x86_64-unknown-linux-gnu.
  See also https://blog.rust-lang.org/2025/09/01/rust-lld-on-1.90.0-stable/.
• Make core::iter::Fuse's Default impl construct I::default() internally as promised in the docs instead of always being empty
• Set MSG_NOSIGNAL for UnixStream
  This may change program behavior but results in the same behavior as other primitives (e.g., stdout, network sockets).
  Programs relying on signals to terminate them should update handling of sockets to handle errors on write by exiting.
• On Unix std::env::home_dir will use the fallback if the HOME environment variable is empty
• We now reject unsupported extern "{abi}"s consistently in all positions. This primarily affects the use of implementing traits on an extern "{abi}" function pointer, like extern "stdcall" fn(), on a platform that doesn't support that, like aarch64-unknown-linux-gnu. Direct usage of these unsupported ABI strings by declaring or defining functions was already rejected, so this is only a change for consistency.
• const-eval: error when initializing a static writes to that static
• Check that the proc_macro_derive macro has correct arguments when applied to the crate root

astral-sh/uv (uv)

v0.8.22

Compare Source

Released on 2025-09-23.

Python

• Upgrade Pyodide to 0.28.3 (#​15999)

Security

• Upgrade astral-tokio-tar to 0.5.5 which hardens tar archive extraction (#​16004)

v0.8.21

Compare Source

Released on 2025-09-23.

Enhancements

• Refresh lockfile when --refresh is provided (#​15994)

Preview features

Add support for S3 request signing (#​15925)

v0.8.20

Compare Source

Released on 2025-09-22.

Enhancements

• Add --force flag for uv cache clean (#​15992)
• Improve resolution errors with proxied packages (#​15200)

Preview features

• Allow upgrading pre-release versions of the same minor Python version (#​15959)

Bug fixes

• Hide freethreaded+debug Python downloads in uv python list (#​15985)
• Retain the cache lock and temporary caches during uv run and uvx (#​15990)

Documentation

• Add package level conflicts to the conflicting dependencies docs (#​15963)
• Document pyodide support (#​15962)
• Document support for free-threaded and debug Python versions (#​15961)
• Expand the contribution docs on issue selection (#​15966)
• Tweak title for viewing version in project guide (#​15964)

v0.8.19

Compare Source

Released on 2025-09-19.

Python

• Add CPython 3.14.0rc3
• Upgrade OpenSSL to 3.5.3

See the python-build-standalone release notes for more details.

Bug fixes

• Make uv cache clean parallel process safe (#​15888)
• Fix implied platform_machine marker for win_arm64 platform tag (#​15921)

v0.8.18

Compare Source

Released on 2025-09-17.

Enhancements

• Add PyG packages to torch backend (#​15911)
• Add handling for unnamed conda environments in base environment detection (#​15681)
• Allow selection of debug build interpreters (#​11520)
• Improve uv init defaults for native build backend cache keys (#​15705)
• Error when pyproject.toml target does not exist for dependency groups (#​15831)
• Infer check URL from publish URL when known (#​15886)
• Support Gitlab CI/CD as a trusted publisher (#​15583)
• Add GraalPy 25.0.0 with support for Python 3.12 (#​15900)
• Add --no-clear to uv venv to disable removal prompts (#​15795)
• Add conflict detection between --only-group and --extra flags (#​15788)
• Allow [project] to be missing from a pyproject.toml (#​14113)
• Always treat conda environments named base and root as base environments (#​15682)
• Improve log message when direct build for uv_build is skipped (#​15898)
• Log when the cache is disabled (#​15828)
• Show pyx organization name after authenticating (#​15823)
• Use _CONDA_ROOT to detect Conda base environments (#​15680)
• Include blake2b hash in uv publish upload form (#​15794)
• Fix misleading debug message when removing environments in uv sync (#​15881)

Deprecations

• Deprecate tool.uv.dev-dependencies (#​15469)
• Revert "feat(ci): build loongarch64 binaries in CI (#​15387)" (#​15820)

Preview features

• Propagate preview flag to client for native-auth feature (#​15872)
• Store native credentials for realms with the https scheme stripped (#​15879)
• Use the root index URL when retrieving credentials from the native store (#​15873)

Bug fixes

• Fix uv sync --no-sources not switching from editable to registry installations (#​15234)
• Avoid display of an empty string when a path is the working directory (#​15897)
• Allow cached environment reuse with @latest (#​15827)
• Allow escaping spaces in --env-file handling (#​15815)
• Avoid ANSI codes in debug! messages (#​15843)
• Improve BSD tag construction (#​15829)
• Include SHA when listing lockfile changes (#​15817)
• Invert the logic for determining if a path is a base conda environment (#​15679)
• Load credentials for explicit members when lowering (#​15844)
• Re-add triton as a torch backend package (#​15910)
• Respect UV_INSECURE_NO_ZIP_VALIDATION=1 in duplicate header errors (#​15912)

Documentation

• Add GitHub Actions to PyPI trusted publishing example (#​15753)
• Add Coiled integration documentation (#​14430)
• Add verbose output to the getting help section (#​15915)
• Document NO_PROXY support (#​15816)
• Document cache-keys for native build backends (#​15811)
• Add documentation for dependency group requires-python (#​14282)

v0.8.17

Compare Source

Released on 2025-09-10.

Enhancements

• Improve error message for HTTP validation in auth services (#​15768)
• Respect PYX_API_URL when suggesting uv auth login on 401 (#​15774)
• Add pyx as a supported PyTorch index URL (#​15769)

Bug fixes

• Avoid initiating login flow for invalid API keys (#​15773)
• Do not search for a password for requests with a token attached already (#​15772)
• Filter pre-release Python versions in uv init --script (#​15747)

v0.8.16

Compare Source

Enhancements

• Allow --editable to override editable = false annotations (#​15712)
• Allow editable = false for workspace sources (#​15708)
• Show a dedicated error for virtual environments in source trees on build (#​15748)
• Support Android platform tags (#​15646)
• Support iOS platform tags (#​15640)
• Support scripts with inline metadata in --with-requirements and --requirements (#​12763)

Preview features

• Support --no-project in uv format (#​15572)
• Allow uv format in unmanaged projects (#​15553)

Bug fixes

• Avoid erroring when match-runtime target is optional (#​15671)
• Ban empty usernames and passwords in uv auth (#​15743)
• Error early for parent path in build backend (#​15733)
• Retry on IO errors during HTTP/2 streaming (#​15675)
• Support recursive requirements and constraints inclusion (#​15657)
• Use token store credentials for uv publish (#​15759)
• Fix virtual environment activation script compatibility with latest nushell (#​15272)
• Skip Python interpreters that cannot be queried with permission errors (#​15685)

Documentation

• Clarify that uv auth commands take a URL (#​15664)
• Improve the CLI help for options that accept requirements files (#​15706)
• Adds example for caching for managed Python downloads in Docker builds (#​15689)

v0.8.15

Compare Source

Python

• Upgrade SQLite 3.50.4 in CPython builds for CVE-2025-6965 (see also python/cpython#137134)

Enhancements

• Add uv auth commands for credential management (#​15570)
• Add pyx support to uv auth commands (#​15636)
• Add uv tree --show-sizes to show package sizes (#​15531)
• Add --python-platform riscv64-unknown-linux (#​15630)
• Add --python-platform to uv run and uv tool (#​15515)
• Add uv publish --dry-run (#​15638)
• Add zstandard support for wheels (#​15645)
• Allow registries to pre-provide core metadata (#​15644)
• Retry streaming Python and binary download errors (#​15567)

Bug fixes

• Fix settings rendering for extra-build-dependencies (#​15622)
• Skip non-existent directories in bytecode compilation (#​15608)

Error messages

• Add error trace to invalid package format (#​15626)

v0.8.14

Compare Source

Python

• Add managed CPython distributions for aarch64 musl

Enhancements

• Add --python-platform to uv pip check (#​15486)
• Add an environment variable for UV_ISOLATED (#​15428)
• Add logging to the uv build backend (#​15533)
• Allow more trailing null bytes in zip files (#​15452)
• Allow pinning managed Python versions to specific build versions (#​15314)
• Cache PyTorch wheels by default (#​15481)
• Reject already-installed wheels that don't match the target platform (#​15484)
• Add --no-install-local option to uv sync, uv add and uv export (#​15328)
• Include cycle error message in uv pip CLI (#​15453)

Preview features

• Fix format of {version} on uv format failure (#​15527)
• Lock during installs in uv format to prevent races (#​15551)
• Respect --project in uv format (#​15438)
• Run uv format in the project root (#​15440)

Configuration

• Add file-to-CLI overrides for build isolation configuration (#​15437)
• Add file-to-CLI overrides for reinstall configuration (#​15426)

Performance

• Cache WHEEL and METADATA reads in installed distributions (#​15489)

Bug fixes

• Avoid erroring when creating venv in current working directory (#​15537)
• Avoid introducing unnecessary system dependency on CUDA (#​15449)
• Clear discovered site packages when creating virtual environment (#​15522)
• Read index credentials from the environment during uv publish checks (#​15545)
• Refuse to remove non-virtual environments in uv venv (#​15538)
• Stop setting CLICOLOR_FORCE=1 when calling build backends (#​15472)
• Support file or directory removal for Windows symlinks (#​15543)

Documentation

• Fix GitHub guide highlight lines (#​15443)
• Move Resolver to new Internals section in the Reference (#​15465)
• Split the "Authentication" page into sections (#​15575)
• Update uninstall docs to mention uvw.exe needs to be removed (#​15536)

v0.8.13

Compare Source

Enhancements

• Add --no-install-* arguments to uv add (#​15375)
• Initialize Git prior to reading author in uv init (#​15377)
• Add CUDA 129 to available torch backends (#​15416)
• Update Pyodide to 0.28.2 (#​15385)

Preview features

• Add an experimental uv format command (#​15017)
• Allow version specifiers in extra-build-dependencies if match-runtime is explicitly false (#​15420)

Bug fixes

• Add triton to torch-backend manifest (#​15405)
• Avoid panicking when resolver returns stale distributions (#​15389)
• Fix uv_build wheel hashes (#​15400)
• Treat --upgrade-package on the command-line as overriding upgrade = false in configuration (#​15395)
• Restore DockerHub publishing (#​15381)

---

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 05:59 AM, only on Tuesday ( * 1-5 * * 2 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.