uv 0.12.10 revokes trusted-publishing tokens on the way out, including after a failed upload.

The September 4 release adds token revocation to uv publish (#21423), closing the window where a short-lived PyPI token stays valid after a failed publish in CI. It also speeds up locking large workspaces with conflicts by excluding unrelated extras and dependency groups from conflict simplification, and requires an explicit --name when uv init would infer a project name reserved for a Python interpreter (GitHub).