What the developer wrote
Authored by fanquake
ci: use uv 11.x
What changed, and why it matters
This commit updates the version of a Python packaging tool called 'uv' used inside Bitcoin Core's automated code-checking container image, from version 0.10 to version 0.11. It is a routine dependency bump in the continuous-integration (CI) setup and does not change any Bitcoin protocol, wallet, or network code.
No security action required. Treat as a normal CI maintenance change; verify the new uv 0.11 image hash if the project pins container digests.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one line in ci/lint_imagefile, updating the COPY source for the uv/uvx binaries from ghcr.io/astral-sh/uv:0.10 to ghcr.io/astral-sh/uv:0.11. This is a minor-version bump of a lint/CI dependency, consistent with the file’s existing policy of pinning uv and ruff to minor versions to avoid breaking changes. No runtime, consensus, P2P, or wallet code is modified.
Changed components
ci/lint_imagefileInspect captured patch +1 / −1
diff --git a/ci/lint_imagefile b/ci/lint_imagefile
index a6c49a7c..00f7f03c 100644
--- a/ci/lint_imagefile
+++ b/ci/lint_imagefile
@@ -9,7 +9,7 @@ FROM mirror.gcr.io/ubuntu:24.04
# Pin uv and ruff to minor version to avoid breaking changes
# https://docs.astral.sh/uv/reference/policies/versioning/
# https://docs.astral.sh/ruff/versioning/
-COPY --from=ghcr.io/astral-sh/uv:0.10 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11 /uv /uvx /bin/
COPY --from=ghcr.io/astral-sh/ruff:0.15 /ruff /bin/
COPY ./ci/retry/retry /ci_retry
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.