docker(deps): bump the container-images group across 2 directories with 3 updates

[dependabot]

Bumps the container-images group with 1 update in the /.devcontainer directory: devcontainers/python.
Bumps the container-images group with 2 updates in the /backend directory: astral-sh/uv and python.

Updates devcontainers/python from 1-3.12-bookworm to 3.14-bookworm

Updates astral-sh/uv from 0.12.0 to 0.12.4

Release notes

Sourced from astral-sh/uv's releases.

0.12.4

Release Notes

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#21076)

Install uv 0.12.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.4/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.4/uv-installer.ps1 | iex"

Download uv 0.12.4

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.4

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#21076)

0.12.3

Released on 2026-08-07.

Python

• Add CPython 3.13.15 (#20997)

Preview features

• Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#20992)
• Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#20991)
• Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#20990)

Performance

• Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#20989)
• Reuse compiled workspace exclusion patterns during workspace discovery (#20988)

... (truncated)

Commits

• 77803aa Bump version to 0.12.4 (#21105)
• a82ecc9 Use test contexts for cache file-count filters (#21104)
• 2c3f6d0 Improve regression coverage for related bug manifestations (#21101)
• d81ed9d improve fix-bug automations PR title/summary (#21100)
• aad7fc2 Heal interpreter metadata cache entries when creating a virtual environment i...
• 08551f7 Use shared helpers for cache filesystem tests (#21099)
• 791e7a9 Handle promoted regression tests during automated bug fixes (#21093)
• 23f497e Avoid orphaned caret for empty PEP 508 requirements (#21094)
• 09d1aa5 Forward uv check terminal settings to ty (#21086)
• e6d90a6 Authorize issue-comment context persistence (#21091)
• Additional commits viewable in compare view

Updates python from 3.12-slim-bookworm to 3.14-slim-bookworm

[dependabot]

Labels

The following labels could not be found: docker. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.