perf(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.16 (#591)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
final | patch | `0.11.15` → `0.11.16` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.11.16`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01116)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.15...0.11.16)

Released on 2026-05-21.

##### Enhancements

- Add support for direct archive dependencies in Git
([#&#8203;10072](https://redirect.github.com/astral-sh/uv/pull/10072))
- Adjust hint rendering
([#&#8203;18090](https://redirect.github.com/astral-sh/uv/pull/18090))

##### Preview features

- uv audit: specialize malformed OSV error
([#&#8203;19515](https://redirect.github.com/astral-sh/uv/pull/19515))
- Reject locked malware installations
([#&#8203;18936](https://redirect.github.com/astral-sh/uv/pull/18936))

##### Configuration

- Allow disabling reading the system config with `UV_NO_SYSTEM_CONFIG`
([#&#8203;19476](https://redirect.github.com/astral-sh/uv/pull/19476))

##### Bug fixes

- Allow environment variables that take a list to be empty
([#&#8203;19503](https://redirect.github.com/astral-sh/uv/pull/19503))
- Ensure that incompatible wheel hints do not leak secrets
([#&#8203;19504](https://redirect.github.com/astral-sh/uv/pull/19504))
- Reject unsafe entry points in `uv-build`
([#&#8203;19495](https://redirect.github.com/astral-sh/uv/pull/19495))
- Restrict delimiters in entry point parsing
([#&#8203;19471](https://redirect.github.com/astral-sh/uv/pull/19471))
- uv-netrc: fix multi-word no-space comment lines causing parse errors
([#&#8203;19494](https://redirect.github.com/astral-sh/uv/pull/19494))

##### Documentation

- Document and test relative exclude-newer support for uv pip
([#&#8203;19475](https://redirect.github.com/astral-sh/uv/pull/19475))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Dublin)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Only on Sunday and Saturday (`* * * * 0,6`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/bss-web-file-api).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xODUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.14.5-alpine@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4
 
 FROM python AS builder
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.15@sha256:e590846f4776907b254ac0f44b5b380347af5d90d668138ca7938d1b0c2f98d3 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.16@sha256:440fd6477af86a2f1b38080c539f1672cd22acb1b1a47e321dba5158ab08864d /uv /uvx /bin/
 
 ENV UV_LINK_MODE=copy \
     UV_COMPILE_BYTECODE=1 \