chore(deps): update dependency uv to v0.4.28

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
uv (source, changelog)	==0.4.26 -> ==0.4.28

---

Release Notes

astral-sh/uv (uv)

v0.4.28

Compare Source

Enhancements

• Add support for requesting free-threaded builds via +freethreaded (#​8645)
• Improve trusted publishing error messages (#​8633)
• Remove unneeded return from Maturin project template (#​8604)
• Skip Python interpreter discovery for uv export (#​8638)
• Hint about missing trusted publishing permission (#​8632)

Configuration

• Add environment variable to disable progress output (#​8600)

Bug fixes

• Fork when minimum Python version increases (#​8628)
• Ignore empty groups when validating lock (#​8598)
• Remove duplicate word in error message (#​8589)
• Support cyclic dependencies in uv tree (#​8564)
• Update uv init to imply --package when using --build-backend (#​8593)

Documentation

• Clarify requires-python requirement for dependencies (#​8619)
• Update CLI documentation for --cache-dir (#​8627)

v0.4.27

Compare Source

This release includes support for the [dependency-groups] table as recently standardized in PEP 735. The table allows for declaration of optional dependency groups that are not published as part of the package metadata, unlike [project.optional-dependencies]. There are new --group, --only-group, and --no-group options throughout the uv interface.

Previously, uv used a single tool.uv.dev-dependencies list for declaration of development dependencies. Now, uv supports declaring development dependencies in a standardized format and allows splitting development dependencies into multiple groups.

For compatibility, and to simplify usage for people that do not need multiple groups, uv special-cases the group named dev. The dev group is equivalent to tool.uv.dev-dependencies. The contents of tool.uv.dev-dependencies will merged into the dev group in uv's resolver. The --dev, --only-dev, and --no-dev flags remain as aliases for the corresponding --group options. Support for tool.uv.dev-dependencies remains in this release, but will display warnings in a future release.

uv syncs the dev group by default — this matches the exististing behavior for tool.uv.dev-dependencies. The default groups can be changed with the tool.uv.default-groups setting.

Thank you to Stephen Rosen who authored PEP 735.

Enhancements

• Support for PEP 735 (#​8272)
• Add support for --dry-run mode in uv lock (#​7783)
• Don't allow non-string email in authors (#​8520)
• Enforce lockfile schema versions (#​8509)

Bug fixes

• Always attach URL to network errors (#​8444)
• Fix dangling non-platform dependencies in uv tree (#​8532)
• Prefer lto over debug free-threaded managed Python builds (#​8515)

Documentation

• Add tool.uv.sources to the "Settings" reference (#​8543)
• Add reference to uv build and uv publish in the landing pages (#​8542)
• Avoid duplicate [tool.uv] header in TOML examples (#​8545)
• Document .netrc environment variable and path (#​8511)
• Fix .netrc typo in authentication docs (#​8521)
• Fix heading level of "Script support" on docs landing page (#​8544)
• Move the installation configuration docs to a separate page (#​8546)
• Update docs for --publish-url to avoid duplication. (#​8561)
• Fix typo (#​8554)
• Fix typo in description of --strict flag (#​8513)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.