fix(deps): update all non-major dependencies in .github/workflows/pypi-test-release.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
astral-sh/uv	uses-with	patch	0.10.7 → 0.10.9
github.com/magefile/mage	require	minor	v1.15.0 → v1.16.0
go (source)	toolchain	patch	1.26.0 → 1.26.1

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.10.9

Compare Source

Released on 2026-03-06.

Enhancements

• Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list (#​18338)
• Add torchcodec to PyTorch List (#​18336)
• Log the duration we took before erroring (#​18231)
• Warn when using uv_build settings without uv_build (#​15750)
• Add fallback to /usr/lib/os-release on Linux system lookup failure (#​18349)
• Use cargo auditable to include SBOM in uv builds (#​18276)

Configuration

• Add an environment variable for UV_VENV_RELOCATABLE (#​18331)

Performance

• Avoid toml Document overhead (#​18306)
• Use a single global workspace cache (#​18307)

Bug fixes

• Continue on trampoline job assignment failures (#​18291)
• Handle the hard link limit gracefully instead of failing (#​17699)
• Respect build constraints for workspace members (#​18350)
• Revalidate editables and other dependencies in scripts (#​18328)
• Support Python 3.13+ on Android (#​18301)
• Support cp3-none-any (#​17064)
• Skip tool environments with broken links to Python on Windows (#​17176)

Documentation

• Add documentation for common marker values (#​18327)
• Improve documentation on virtual dependencies (#​18346)

v0.10.8

Compare Source

Released on 2026-03-03.

Python

• Add CPython 3.10.20
• Add CPython 3.11.15
• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#​18247)
• Add resolver hint when --exclude-newer filters out all versions of a package (#​18217)
• Configure a real retry minimum delay of 1s (#​18201)
• Expand uv_build direct build compatibility (#​17902)
• Fetch CPython from an Astral mirror by default (#​18207)
• Download uv releases from an Astral mirror in installers by default (#​18191)
• Add SBOM attestations to Docker images (#​18252)
• Improve hint for installing meson-python when missing as build backend (#​15826)

Configuration

• Add UV_INIT_BARE environment variable for uv init (#​18210)

Bug fixes

• Prevent uv tool upgrade from installing excluded dependencies (#​18022)
• Promote authentication policy when saving tool receipts (#​18246)
• Respect exclusions in scripts (#​18269)
• Retain default-branch Git SHAs in pylock.toml files (#​18227)
• Skip installed Python check for URL dependencies (#​18211)
• Respect constraints during --upgrade (#​18226)
• Fix uv tree orphaned roots and premature deduplication (#​17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#​18230)
• Move cache prune in GitLab to after_script (#​18206)

magefile/mage (github.com/magefile/mage)

v1.16.0: Optional Arguments!

Compare Source

What's Changed

• feat: support trailing line comment for mage:import by @​anuraaga in #​480
• Update documentation to include Windows Magefile Cache by @​WilliamRoyNelson in #​484
• Comment typo: parse.go by @​szTheory in #​485
• ci: Extend go-version with 1.21.x by @​michalbiesek in #​479
• Correct test input code to support older go versions by @​perrito666 in #​490
• getFunction() ignoring receiver on imports by @​na4ma4 in #​509
• This adds a test to bug 508 by @​perrito666 in #​516
• chore(docs): updated README and site to include installation using go install command by @​egor-denysenko in #​499
• add the ability to call targets with float64 args by @​natefinch in #​525
• Add support for optional arguments by @​natefinch in #​538

New Contributors

• @​anuraaga made their first contribution in #​480
• @​WilliamRoyNelson made their first contribution in #​484
• @​szTheory made their first contribution in #​485
• @​michalbiesek made their first contribution in #​479
• @​na4ma4 made their first contribution in #​509
• @​egor-denysenko made their first contribution in #​499

Full Changelog: magefile/mage@v1.15.0...v1.16.0

golang/go (go)

v1.26.1

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.