From 5e985b31a25f6afe43aee2428cd8906b87b0c479 Mon Sep 17 00:00:00 2001
From: Ryan Mulligan <ryan@ryantm.com>
Date: Wed, 22 Oct 2025 07:28:55 -0700
Subject: [PATCH] [security] bump uv

Why
===
* uv fixed a security issue in 0.9.5
https://github.com/astral-sh/uv/releases/tag/0.9.5

What changed
===
* bump to 0.9.5

Test plan
===
* check that uv --version is 0.9.5
---
 pkgs/modules/python/uv/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/modules/python/uv/default.nix b/pkgs/modules/python/uv/default.nix
index 11f0e6b3..293ec7cd 100644
--- a/pkgs/modules/python/uv/default.nix
+++ b/pkgs/modules/python/uv/default.nix
@@ -13,17 +13,17 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "uv";
-  version = "0.5.11"; # Technically 8 versions ahead of 0.5.11
+  version = "0.9.5";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "uv";
-    rev = "ddc290feb4ed2de4740c786af2436cf1f82a3190";
-    hash = "sha256-/hm70Vptk0eg9MMzgbpkOg/x6mNJBTZ/25kfqiYc/7Y=";
+    tag = version;
+    hash = "sha256-Js62zaO44/gXCCwji4LmlyO62zI96CFhnfnYqgI2p+U=";
   };
 
   useFetchCargoVendor = true;
-  cargoHash = "sha256-k+ABi0xgtpuDwCEgUIqrG7m56iSeYMsDTvtC0YHoCwE=";
+  cargoHash = "sha256-TadS0YrZV5psCcGiu21w55nQhlzU+gXZPmFCAONLbXE=";
 
   nativeBuildInputs = [
     cmake