.tool-versions(uv) uv 0.12.15 -> 0.12.18

why: 0.12.18 fixes GHSA-2cv4-cqwr-gwf7, a medium-severity path
traversal during wheel installation that affects Windows only. The
span also verifies downloaded wheels and sdists against
index-supplied hashes (0.12.16), keeps local and editable dependency
paths relative in uv.lock instead of absolutizing them (0.12.16),
and evaluates wheel tags per Python-resolution fork (0.12.18). This
lock resolves several Python-version forks, so the per-fork tag fix
applies here, and gp-libs' own editable entry in uv.lock is what the
relative-path fix keeps stable.

`uv lock --dry-run` under 0.12.18 reports no lockfile changes. 0.12.19
(2026-09-25) stays excluded by the 3-day cooldown until 2026-09-28.

See also:
- https://github.com/astral-sh/uv/releases/tag/0.12.16
- https://github.com/astral-sh/uv/releases/tag/0.12.17
- https://github.com/astral-sh/uv/releases/tag/0.12.18
- https://github.com/astral-sh/uv/blob/0.12.18/CHANGELOG.md
- GHSA-2cv4-cqwr-gwf7

Author: tony

.tool-versions

@@ -1,3 +1,3 @@
 just 1.58.0
-uv 0.12.15
+uv 0.12.18
 python 3.14 3.13 3.12 3.11 3.10