chore(deps): update bump-dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change	Age	Confidence
alpine (source)	minor	3.22 → 3.24
ghcr.io/libops/lightsout	digest	4d38ac3 → 76b5774
python	minor	3.11-slim → 3.14-slim
uv (source, changelog)	patch	0.11.29 → 0.11.31
zensical (changelog)	patch	0.0.50 → 0.0.51

---

Release Notes

astral-sh/uv (uv)

v0.11.31

Compare Source

Released on 2026-07-21.

Enhancements

• Allow workspace sources to reference members in another workspace by path (#​18401)
• Support .venv files containing paths to centralized project environments (#​20022)
• Update bundled Windows timezone data to IANA 2026c (#​20554)

Preview features

• Add an index-specific hash-algorithm setting for lockfile generation (#​20605)

Configuration

• Add audit.malware-check and audit.malware-check-url settings (#​20587)

Performance

• Avoid quadratic work when deduplicating transitive conflicts (#​20578)

Bug fixes

• Suggest --emit-build-options for unsupported uv pip compile --emit-options (#​20582)
• Reject source distributions and wheels with mismatched package names (#​20432)
• Avoid retrying TLS certificate verification failures (#​16245)
• Avoid warnings about uv_build settings for in-tree build backends (#​20153)

v0.11.30

Compare Source

Released on 2026-07-20.

Python

• Add CPython 3.15.0b4 (#​20519)

Preview features

• Allow uv workspace metadata --sync to target the active virtual environment with --active (#​20500)
• Reuse centralized project environments when workspaces are accessed through symlinks (#​20436)

Performance

• Skip resolver candidates whose files are all excluded by exclude-newer (#​20460)
• Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#​20427)
• Accelerate lockfile serialization with toml_writer (#​20450)
• Compact cached Simple API distribution metadata and hashes (#​20463, #​20483)
• Decode stale cache entries in a single blocking task (#​20486)
• Decode cached payloads outside resolver workers (#​20464)
• Cache resolver Python requirement markers (#​20461)
• Reuse resolver fork markers while recording preferences (#​20462)

Bug fixes

• Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall (#​20429)
• Preserve literal extends-environment paths in pyvenv.cfg on Unix (#​20466)

Documentation

• Add a contribution guide (#​20511, #​20552)

zensical/zensical (zensical)

v0.0.51: 0.0.51

Compare Source

Summary

This version improves cached rebuilds by persisting objects.inv and autorefs data, fixes stale builds after removing files, and upgrades soupsieve to address vulnerabilities.

Changelog

Bug fixes

• ec69acc zensical, compat – cache objects.inv to persist it across cached rebuilds (#​815)
• 7e6940f zensical – cache autorefs data for cross-ref resolution across rebuilds (#​805)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Wednesday (* * * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.