python-uv-0.7.18-160000.2.2

- Add CVE-2025-54368.patch to fix CVE-2025-54368 (bsc#1247829)
- bump vendored dependency slab to 0.4.11 to fix CVE-2025-55159 (bsc#1248005)

- Reduce memory usage during build, removing lto=fat from Cargo.toml.
  bsc#1245526

- update to 0.7.18
  * Enhancements
  * Keep track of retries in ManagedPythonDownload::fetch_with_retry
  * Reuse build (virtual) environments across resolution and installation
  * Improve trace message for cached Python interpreter query
  * Use parsed URLs for conflicting URL error message
  * Preview features
  * Ignore invalid build backend settings when not building
  * Bug fixes
  * Fix equals-star and tilde-equals with python_version and python_full_version
  * Include the canonical path in the interpreter query cache key
  * Only drop build directories on program exit
  * Error instead of panic on conflict between global and subcommand flags
  * Consistently normalize trailing slashes on URLs with no path segments
  * Documentation
  * Add instructions for publishing to JFrog's Artifactory
  * Edits to the build backend documentation

- update to 0.7.17
  * Bug fixes
  * Apply build constraints when resolving --with dependencies
  * Drop trailing slashes when converting index URL from URL
  * Ignore UV_PYTHON_CACHE_DIR when empty
  * Fix error message ordering for pyvenv.cfg version conflict

- update to 0.7.16
  * Enhancements
  * Include path or URL when failing to convert in lockfile
  * Warn when ~= is used as a Python version specifier without a patch version
  * Preview features
  * Ensure preview default Python installs are upgradeable
  * Performance
  * Share workspace cache between lock and sync operations
  * Bug fixes
  * Allow local indexes to reference remote files
  * Avoid rendering desugared prefix matches in error messages
  * Avoid using path URL for workspace Git dependencies in requirements.txt
  * Normalize index URLs to remove trailing slash
  * Respect URL-encoded credentials in redirect location
  * Lock the source tree when running setuptools, to protect concurrent builds
  * Documentation
  * Note that GCP Artifact Registry download URLs must have /simple component

- update to 0.7.15:
  * Enhancements
  * Consistently use Ordering::Relaxed for standalone atomic use cases
  * Warn on ambiguous relative paths for --index
  * Skip GitHub fast path when rate-limited
  * Preserve newlines in schema.json descriptions
  * Bug fixes
  * Add check for using minor version link when creating a venv on Windows
  * Strip query parameters when parsing source URL
  * Documentation
  * Add a link to PyPI FAQ to clarify what per-project token is
  * Preview features
  * Allow symlinks in the build backend

- update to 0.7.14:
  * Enhancements
  * Add XPU to --torch-backend
  * Add ROCm backends to --torch-backend
  * Remove preview label from --torch-backend
  * Add [tool.uv.dependency-groups].mygroup.requires-python
  * Add auto-detection for AMD GPUs
  * Show retries for HTTP status code errors
  * Support transparent Python patch version upgrades
  * Warn on empty index directory
  * Publish to DockerHub
  * Performance
  * Make cold resolves about 10% faster
  * Bug fixes
  * Don't use walrus operator in interpreter query script
  * Fix handling of changes to requires-python
  * Fix implied platform_machine marker for win_amd64 platform tag
  * Only update existing symlink directories on preview uninstall
  * Serialize Python requests for tools as canonicalized strings
  * Support netrc and same-origin credential propagation on index redirects
  * Support reading dependency-groups from pyproject.tomls with no [project]
  * Handle an existing shebang in uv init --script
  * Prevent concurrent updates of the environment in uv run
  * Filter managed Python distributions by platform before querying when included in request
  * Documentation
  * Replace cuda124 with cuda128
  * Document the way member sources shadow workspace sources
  * Sync documented PyTorch integration index for CUDA and ROCm versions from PyTorch website

- update to 0.7.13:
  * Enhancements
  * Download versions in uv python pin if not found
  * Use TTY detection to determine if SIGINT forwarding is enabled
  * Avoid fetching an exact, cached Git commit, even if it isn't locked
  * Add zstd and deflate to Accept-Encoding
  * Build binaries for riscv64
  * Bug fixes
  * Check if relative URL is valid directory before treating as index
  * Ignore Python discovery errors during uv python pin
  * Do not allow uv add --group ... --script
  * Preview changes
  * Build backend: Support namespace packages
  * Documentation
  * Add 3.14 to the supported platform reference
  * Add an llms.txt to uv
  * Add supported macOS version to the platform reference
  * Update platform support reference to include Python implementation list
  * Update pytorch.md
  * Update the CLI help and reference to include references to the Python bin directory

- update to 0.7.12:
  * Enhancements
  * Add uv python pin --rm to remove .python-version pins
  * Don't hint at versions removed by excluded-newer
  * Add hint to use tool.uv.environments on resolution error
  * Add hint to use tool.uv.required-environments on resolution error
  * Improve python pin error messages
  * Bug fixes
  * Lock environments during uv sync, uv add and uv remove to prevent race conditions
  * Add --no-editable to uv export for pylock.toml
  * Documentation
  * List .gitignore in project init files
  * Move the pip interface documentation into the concepts section
  * Remove the configuration section in favor of concepts / reference
  * Update Git and GitHub Actions docs to mention gh auth login
  * Preview
  * Fix directory glob traversal fallback preventing exclusion of all files

- update to 0.7.11:
  * Enhancements
  * Add Pyodide support
  * Better error message for version specifier with missing operator
  * Bug fixes
  * Downgrade reqwest and hyper-util to resolve connection reset errors over IPv6
  * Prefer uv's binary's version when checking if it's up to date
  * Documentation
  * Use "terminal driver" instead of "shell" in SIGINT docs