[security] bump uv

[ryantm]

Why

• uv fixed a security issue in 0.9.5 https://github.com/astral-sh/uv/releases/tag/0.9.5

What changed

• bump to 0.9.5

Test plan

• locally, I built python 3.12 and uv --version produced the correct version
• check that uv --version is 0.9.5

Rollout

Describe any procedures or requirements needed to roll this out safely (or check the box below)

• This is fully backward and forward compatible

[macroscopeapp]

Bump pkgs/modules/python/uv to version 0.9.5 for security and source the release by Git tag in default.nix

Update the uv Nix derivation to build version 0.9.5 and switch source fetching from a fixed commit to the Git tag matching the version in default.nix.

• Change uv version from 0.5.11 to 0.9.5
• Fetch source by Git tag equal to the version
• Update source hash and cargo vendor hash

📍Where to Start

Start with the uv derivation changes in default.nix, reviewing the version bump, source fetching method, and updated hashes.

---

📊 Macroscope summarized 5e985b3. 0 files reviewed, 0 issues evaluated, 0 issues filtered, 0 comments posted

🗂️ Filtered Issues

No issues evaluated.