perf(deps): update ghcr.io/astral-sh/uv docker tag to v0.10.8 (#458)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
final | patch | `0.10.7` → `0.10.8` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.10.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0108)

Released on 2026-03-03.

##### Python

- Add CPython 3.10.20
- Add CPython 3.11.15
- Add CPython 3.12.13

##### Enhancements

- Add Docker images based on Docker Hardened Images
([#&#8203;18247](https://redirect.github.com/astral-sh/uv/pull/18247))
- Add resolver hint when `--exclude-newer` filters out all versions of a
package
([#&#8203;18217](https://redirect.github.com/astral-sh/uv/pull/18217))
- Configure a real retry minimum delay of 1s
([#&#8203;18201](https://redirect.github.com/astral-sh/uv/pull/18201))
- Expand `uv_build` direct build compatibility
([#&#8203;17902](https://redirect.github.com/astral-sh/uv/pull/17902))
- Fetch CPython from an Astral mirror by default
([#&#8203;18207](https://redirect.github.com/astral-sh/uv/pull/18207))
- Download uv releases from an Astral mirror in installers by default
([#&#8203;18191](https://redirect.github.com/astral-sh/uv/pull/18191))
- Add SBOM attestations to Docker images
([#&#8203;18252](https://redirect.github.com/astral-sh/uv/pull/18252))
- Improve hint for installing meson-python when missing as build backend
([#&#8203;15826](https://redirect.github.com/astral-sh/uv/pull/15826))

##### Configuration

- Add `UV_INIT_BARE` environment variable for `uv init`
([#&#8203;18210](https://redirect.github.com/astral-sh/uv/pull/18210))

##### Bug fixes

- Prevent `uv tool upgrade` from installing excluded dependencies
([#&#8203;18022](https://redirect.github.com/astral-sh/uv/pull/18022))
- Promote authentication policy when saving tool receipts
([#&#8203;18246](https://redirect.github.com/astral-sh/uv/pull/18246))
- Respect exclusions in scripts
([#&#8203;18269](https://redirect.github.com/astral-sh/uv/pull/18269))
- Retain default-branch Git SHAs in `pylock.toml` files
([#&#8203;18227](https://redirect.github.com/astral-sh/uv/pull/18227))
- Skip installed Python check for URL dependencies
([#&#8203;18211](https://redirect.github.com/astral-sh/uv/pull/18211))
- Respect constraints during `--upgrade`
([#&#8203;18226](https://redirect.github.com/astral-sh/uv/pull/18226))
- Fix `uv tree` orphaned roots and premature deduplication
([#&#8203;17212](https://redirect.github.com/astral-sh/uv/pull/17212))

##### Documentation

- Mention cooldown and tweak inline script metadata in dependency bots
documentation
([#&#8203;18230](https://redirect.github.com/astral-sh/uv/pull/18230))
- Move cache prune in GitLab to `after_script`
([#&#8203;18206](https://redirect.github.com/astral-sh/uv/pull/18206))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Only on Sunday and Saturday ( * * * * 0,6 ) in timezone
Europe/Dublin.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/bss-web-file-api).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40OC4xIiwidXBkYXRlZEluVmVyIjoiNDMuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.14.3-alpine@sha256:faee120f7885a06fcc9677922331391fa690d911c020abb
 
 FROM python AS builder
 
-COPY --from=ghcr.io/astral-sh/uv:0.10.7@sha256:edd1fd89f3e5b005814cc8f777610445d7b7e3ed05361f9ddfae67bebfe8456a /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.10.8@sha256:88234bc9e09c2b2f6d176a3daf411419eb0370d450a08129257410de9cfafd2a /uv /uvx /bin/
 
 ENV UV_LINK_MODE=copy \
     UV_COMPILE_BYTECODE=1 \