[UV] Bump the uv group with 4 updates

[dependabot]

Bumps the uv group with 4 updates: idna, platformdirs, virtualenv and wcwidth.

Updates idna from 3.19 to 3.20

Release notes

Sourced from idna's releases.

v3.20

• Update to Unicode 18.0.0.
• Better enforcement of the domain length limit in the incremental codec.
• Add support for Python 3.15.

Changelog

Sourced from idna's changelog.

3.20 (2026-09-17)

• Update to Unicode 18.0.0.
• Better enforcement of the domain length limit in the incremental codec.
• Add support for Python 3.15.

Commits

• d55e65e Release 3.20
• 0c0824a Pre-release 3.20rc0
• bd7c316 Note Python 3.15 support in the 3.20 changelog
• b6cce85 Merge pull request #276 from kjd/unicode-18
• 9a4bc59 Update to Unicode 18.0.0
• dfab5a0 Merge branch 'python-3.15'
• 417c354 Read the latest Unicode version from the DerivedAge.txt header instead of the...
• cd17392 Merge pull request #274 from kjd/fix-decode-length-check
• c5796d7 Skip the decode round-trip check for domains past encode's length limit
• d6ee690 Update to Python 3.15 release candidate in CI and add trove classifier
• Additional commits viewable in compare view

Updates platformdirs from 4.11.11 to 4.11.12

Release notes

Sourced from platformdirs's releases.

4.11.12

What's Changed

• docs: preserve nested directories in the migration recipe by @​agammann in tox-dev/platformdirs#553
• fix: ignore broken sphinx-llm release by @​gaborbernat in tox-dev/platformdirs#556
• fix: ignore relative XDG user directory environment variables by @​darrenhuai in tox-dev/platformdirs#554

New Contributors

• @​agammann made their first contribution in tox-dev/platformdirs#553

Full Changelog: tox-dev/platformdirs@4.11.11...4.11.12

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.12.0 (2026-09-26)

---

• Add place_*_file methods that return a file path under a user directory and create its missing parents with mode 0o700. :pr:585
• Add find_<kind>_file and find_<kind>_files to look up an existing file across the user and site directories of each kind that has an iter_<kind>_paths method. :pr:586
• Add :func:platformdirs.testing.isolated_dirs and the platformdirs_isolated pytest fixture to resolve every directory under one test root. :pr:590
• Emit :class:~platformdirs.RuntimeDirWarning when the Unix :func:~platformdirs.user_runtime_dir falls back from XDG_RUNTIME_DIR. :pr:599
• Read user_templates_dir, user_publicshare_dir and user_bin_dir on Windows from their known folders. :pr:587
• Create missing user app directories and their parents with mode 0700 under ensure_exists on POSIX platforms. :pr:588
• Raise RuntimeError for a Unix or macOS directory under the home when no home resolves, and read the password database for an empty HOME. :pr:589
• Skip an XDG_RUNTIME_DIR or /run/user/<uid> that is not a private directory of the user, and reject a symlink or file as the runtime-<uid> fallback. :pr:599
• Use the app container layout on iOS, such as ~/Library/Application Support for data. :pr:600
• Document that a Homebrew Python puts the Homebrew prefix first in the macOS shared directories, with or without multipath. :pr:591
• Document that the macOS media directories honor the XDG_*_DIR variables. :pr:592
• Document the WIN_PD_OVERRIDE_COMMON_PROGRAMS variable. :pr:593
• Document /usr/local/share/applications as the Linux site_applications_dir default. :pr:594
• Correct the BSD user_runtime_dir defaults and describe the temporary directory fallback. :pr:595
• Describe how platformdirs detects Android, finds the app folder and places the shared folders. :pr:596
• Document that Microsoft Store Python redirects only new files and folders under AppData. :pr:597
• Show how to load a font on Windows after copying it into user_fonts_dir. :pr:598

---

4.11.15 (2026-09-26)

---

• Fix the pyjnius lookup of the Android app folder and media directories, which always failed. :pr:580
• Detect Android from sys.getandroidapilevel when ANDROID_DATA and ANDROID_ROOT are unset. :pr:581
• Put Android shared-storage directories under the current user's /storage/emulated/, not user 0's. :pr:582
• Move Android videos to Movies and the five non-standard media folders, such as Desktop, into Documents. :pr:583

---

... (truncated)

Commits

• 0975949 Release 4.11.12
• f0f5667 fix: ignore relative XDG user directory environment variables (#554)
• 1f944d0 fix: ignore broken sphinx-llm release (#556)
• 3e2e590 [pre-commit.ci] pre-commit autoupdate (#555)
• 897097b docs: preserve nested directories in the migration recipe (#553)
• See full diff in compare view

Updates virtualenv from 21.7.16 to 21.8.1

Release notes

Sourced from virtualenv's releases.

21.8.1

What's Changed

• 🐛 fix(build): make the SBOM serial number deterministic and validate its structure in CI by @​gaborbernat in pypa/virtualenv#3268

Full Changelog: pypa/virtualenv@21.8.0...21.8.1

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.8.1

• Make the embedded SBOM's serialNumber a deterministic UUID derived from the package name, version and bundled wheel hashes, so the same source tree produces a byte-identical SBOM, and validate the SBOM's structure as part of the packaging checks that already run on every pull request. (:issue:3268)

---

v21.8.0 (2026-09-19)

---

Features - 21.8.0

• Every published wheel now carries a CycloneDX <https://cyclonedx.org/>_ SBOM at .dist-info/sboms/virtualenv.cdx.json (:PEP:770), declaring the bundled pip and setuptools wheels that generic SBOM tools cannot see on their own. GitHub attests it against the released sdist and wheel. (:issue:3265)

---

v21.7.16 (2026-09-19)

---

Commits

• ab0e25f release 21.8.1
• 1d28796 🐛 fix(build): make the SBOM serial number deterministic and validate its stru...
• a8b7f0a chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• da2aacc release 21.8.0
• 3d3537e 🔧 chore(deps): watch pip ecosystem with Dependabot (#3264)
• 777dc41 ✨ feat(build): ship a CycloneDX SBOM in every wheel (#3265)
• 3e95492 ✨ feat(build): publish a third-party notices file (#3266)
• See full diff in compare view

Updates wcwidth from 0.8.4 to 0.8.5

Release notes

Sourced from wcwidth's releases.

0.8.5

What's Changed

• Measure hyphen break positions by display width by @​jakezwang in jquast/wcwidth#262

Full Changelog: jquast/wcwidth@0.8.4...0.8.5

Changelog

Sourced from wcwidth's changelog.

0.8.5 2026-09-23

• Bugfix CJK hyphen break positions for wrap(), PR [#262](https://github.com/jquast/wcwidth/issues/262).

Commits

• 1a3e1b8 bump for 0.8.5
• 728de28 fix 0.8.5 release date
• bb0c92c draft rewrite of documentation (#264)
• 61b7885 docs: demonstrate centering with a combining accent (#263)
• d87b6a3 Measure hyphen break positions by display width (#262)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions