perf(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.9 (#467)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
final | patch | `0.10.8` → `0.10.9` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.10.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0109)

Released on 2026-03-06.

##### Enhancements

- Add `fbgemm-gpu`, `fbgemm-gpu-genai`, `torchrec`, and `torchtune` to
the PyTorch list
([#&#8203;18338](https://redirect.github.com/astral-sh/uv/pull/18338))
- Add torchcodec to PyTorch List
([#&#8203;18336](https://redirect.github.com/astral-sh/uv/pull/18336))
- Log the duration we took before erroring
([#&#8203;18231](https://redirect.github.com/astral-sh/uv/pull/18231))
- Warn when using `uv_build` settings without `uv_build`
([#&#8203;15750](https://redirect.github.com/astral-sh/uv/pull/15750))
- Add fallback to `/usr/lib/os-release` on Linux system lookup failure
([#&#8203;18349](https://redirect.github.com/astral-sh/uv/pull/18349))
- Use `cargo auditable` to include SBOM in uv builds
([#&#8203;18276](https://redirect.github.com/astral-sh/uv/pull/18276))

##### Configuration

- Add an environment variable for `UV_VENV_RELOCATABLE`
([#&#8203;18331](https://redirect.github.com/astral-sh/uv/pull/18331))

##### Performance

- Avoid toml `Document` overhead
([#&#8203;18306](https://redirect.github.com/astral-sh/uv/pull/18306))
- Use a single global workspace cache
([#&#8203;18307](https://redirect.github.com/astral-sh/uv/pull/18307))

##### Bug fixes

- Continue on trampoline job assignment failures
([#&#8203;18291](https://redirect.github.com/astral-sh/uv/pull/18291))
- Handle the hard link limit gracefully instead of failing
([#&#8203;17699](https://redirect.github.com/astral-sh/uv/pull/17699))
- Respect build constraints for workspace members
([#&#8203;18350](https://redirect.github.com/astral-sh/uv/pull/18350))
- Revalidate editables and other dependencies in scripts
([#&#8203;18328](https://redirect.github.com/astral-sh/uv/pull/18328))
- Support Python 3.13+ on Android
([#&#8203;18301](https://redirect.github.com/astral-sh/uv/pull/18301))
- Support `cp3-none-any`
([#&#8203;17064](https://redirect.github.com/astral-sh/uv/pull/17064))
- Skip tool environments with broken links to Python on Windows
([#&#8203;17176](https://redirect.github.com/astral-sh/uv/pull/17176))

##### Documentation

- Add documentation for common marker values
([#&#8203;18327](https://redirect.github.com/astral-sh/uv/pull/18327))
- Improve documentation on virtual dependencies
([#&#8203;18346](https://redirect.github.com/astral-sh/uv/pull/18346))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Only on Sunday and Saturday ( * * * * 0,6 ) in timezone
Europe/Dublin.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/bss-web-file-api).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.14.3-alpine@sha256:faee120f7885a06fcc9677922331391fa690d911c020abb
 
 FROM python AS builder
 
-COPY --from=ghcr.io/astral-sh/uv:0.10.8@sha256:88234bc9e09c2b2f6d176a3daf411419eb0370d450a08129257410de9cfafd2a /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82 /uv /uvx /bin/
 
 ENV UV_LINK_MODE=copy \
     UV_COMPILE_BYTECODE=1 \