chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.8

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	final	patch	0.10.6 → 0.10.8

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.10.8

Compare Source

Released on 2026-03-03.

Python

• Add CPython 3.10.20
• Add CPython 3.11.15
• Add CPython 3.12.13

Enhancements

• Add Docker images based on Docker Hardened Images (#​18247)
• Add resolver hint when --exclude-newer filters out all versions of a package (#​18217)
• Configure a real retry minimum delay of 1s (#​18201)
• Expand uv_build direct build compatibility (#​17902)
• Fetch CPython from an Astral mirror by default (#​18207)
• Download uv releases from an Astral mirror in installers by default (#​18191)
• Add SBOM attestations to Docker images (#​18252)
• Improve hint for installing meson-python when missing as build backend (#​15826)

Configuration

• Add UV_INIT_BARE environment variable for uv init (#​18210)

Bug fixes

• Prevent uv tool upgrade from installing excluded dependencies (#​18022)
• Promote authentication policy when saving tool receipts (#​18246)
• Respect exclusions in scripts (#​18269)
• Retain default-branch Git SHAs in pylock.toml files (#​18227)
• Skip installed Python check for URL dependencies (#​18211)
• Respect constraints during --upgrade (#​18226)
• Fix uv tree orphaned roots and premature deduplication (#​17212)

Documentation

• Mention cooldown and tweak inline script metadata in dependency bots documentation (#​18230)
• Move cache prune in GitLab to after_script (#​18206)

v0.10.7

Compare Source

Released on 2026-02-27.

Bug fixes

• Fix handling of junctions in Windows Containers on Windows (#​18192)

Enhancements

• Activate logging for middleware retries (#​18200)
• Upload uv releases to a mirror (#​18159)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 06:59 AM, only on Thursday ( * 0-6 * * 4 ) in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.