chore(deps): bump uv-build from 0.11.7 to 0.11.9 in /.github/requirements

[dependabot]

Bumps uv-build from 0.11.7 to 0.11.9.

Release notes

Sourced from uv-build's releases.

0.11.9

Release Notes

Released on 2026-05-04.

Note due to a timeout publishing to crates.io, the GitHub portion of this release was published manually by a maintainer using the artifacts built in CI. This release will not be fully published to crates.io. There should be no other effect.

Python 3.14.5 release candidate

This release includes a special release candidate for the next Python 3.14 patch release. Python 3.14 included a new garbage collection implementation, which reduced pause times but caused significant unexpected memory pressure in production environments. In 3.14.5 and 3.15, the previous garbage collection implementation will be restored.

We would greatly appreciate if you tested the 3.14.5rc1 version included in this release. The stable version is expected to be released soon and any feedback on potential issues would be helpful to the Python development team.

For more context, see the announcement, issue, and pull request.

Issues with the new release can be reported in the uv or CPython issue trackers.

Python

• Upgrade PyPy to v7.3.22
• Add CPython 3.14.5rc1
• On macOS, CPython statically links libpython to match Linux

Enhancements

• Omit compatible release desugaring for pre-release hints (#19267)
• Fix file locks on Android (#18323)

Preview

• uv audit add reporting for adverse project statuses (#19128)

Bug fixes

• Discover versioned Python executables when requires-python pins a version (#18700)
• Fix URL prefix matching to require path boundaries (#19154)
• Fix transitive Git path dependencies in lockfiles (#19269)
• Handle incorrect unlock error in LockedFile::drop on Wine (#19229)
• Prevent uninstalling site-packages for empty top_level.txt in .egg-info (#19114)
• Use symlinks instead of junctions on Wine (#19213)
• Fix floating-point environment handling on ARMv7 (#19157)
• Redact credentials from remote requirements URL in offline errors (#19216)
• Windows tramplolines no longer set PYTHONHOME and only set __PYVENV_LAUNCHER__ for virtual environments (#19199)

Documentation

• Mark --native-tls and UV_NATIVE_TLS as deprecated (#18705)
• Re-add pytorch-triton-rocm to PyTorch ROCm docs (#19241)
• Tweak changelog entries for 0.11.8 (#19188)
• Add 'Exporting lockfiles' to the Concepts->Projects index (#19209)

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.11.9

Released on 2026-05-04.

This release includes a special release candidate for the next Python 3.14 patch release. Python 3.14 included a new garbage collection implementation, which reduced pause times but caused significant unexpected memory pressure in production environments. In 3.14.5 and 3.15, the previous garbage collection implementation will be restored.

We would greatly appreciate if you tested the 3.14.5rc1 version included in this release. The stable version is expected to be released soon and any feedback on potential issues would be helpful to the Python development team.

For more context, see the announcement, issue, and pull request.

Issues with the new release can be reported in the uv or CPython issue trackers.

Python

• Upgrade PyPy to v7.3.22
• Add CPython 3.14.5rc1
• On macOS, CPython statically links libpython to match Linux

Enhancements

• Omit compatible release desugaring for pre-release hints (#19267)
• Fix file locks on Android (#18323)

Preview

• uv audit add reporting for adverse project statuses (#19128)

Bug fixes

• Discover versioned Python executables when requires-python pins a version (#18700)
• Fix URL prefix matching to require path boundaries (#19154)
• Fix transitive Git path dependencies in lockfiles (#19269)
• Handle incorrect unlock error in LockedFile::drop on Wine (#19229)
• Prevent uninstalling site-packages for empty top_level.txt in .egg-info (#19114)
• Use symlinks instead of junctions on Wine (#19213)
• Fix floating-point environment handling on ARMv7 (#19157)
• Redact credentials from remote requirements URL in offline errors (#19216)
• Windows tramplolines no longer set PYTHONHOME and only set __PYVENV_LAUNCHER__ for virtual environments (#19199)

Documentation

• Mark --native-tls and UV_NATIVE_TLS as deprecated (#18705)
• Re-add pytorch-triton-rocm to PyTorch ROCm docs (#19241)
• Tweak changelog entries for 0.11.8 (#19188)
• Add 'Exporting lockfiles' to the Concepts->Projects index (#19209)
• Clarify that uv init creates git files / folders in the projects guide (#19183)

0.11.8

Released on 2026-04-27.

... (truncated)

Commits

• 7829a03 Bump version to 0.11.9 (#19273)
• 726047a Sync latest Python releases (#19268)
• a1c90c1 Fix transitive Git path dependencies in lockfiles (#19269)
• 77f2710 Omit compatible release desugaring for pre-release hints (#19267)
• fe7137f Prevent uninstalling site-packages for empty top_level.txt in .egg-info (...
• 3ba8059 Fix URL prefix matching to require path boundaries (#19154)
• 40a5cc5 Update uraimo/run-on-arch-action action to v3.1.0 (#19257)
• dc99a05 Update debian Docker tag to trixie-20260421 (#19232)
• d05234b Update Rust crate test-log to v0.2.20 (#19169)
• f54de75 Update Rust crate tracing-durations-export to v0.3.3 (#19252)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)