Spaces: drop BuildKit cache mounts; use user HOME cache for uv; avoid permission denied on /home/user/.cache/uv

Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim
+FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim
 
 ARG USERNAME=user
 ARG USER_UID=1000
@@ -19,17 +19,15 @@ USER ${USERNAME}
 # Writable UV cache for non-root user
 ENV UV_CACHE_DIR=${HOME}/.cache/uv
 
-# Install dependencies from lockfile using cache/bind mounts
-RUN --mount=type=cache,target=${HOME}/.cache/uv \
-    --mount=type=bind,source=uv.lock,target=uv.lock,readonly \
+# Install dependencies from lockfile using bind mounts (no cache mount to avoid perms issues)
+RUN --mount=type=bind,source=uv.lock,target=uv.lock,readonly \
     --mount=type=bind,source=pyproject.toml,target=pyproject.toml,readonly \
     uv sync --locked --no-install-project --no-dev
 
 # Then, add the rest of the project source code and install it
 # Installing separately from its dependencies allows optimal layer caching
 COPY --chown=${USERNAME}:${USERNAME} . ${HOME}/app
-RUN --mount=type=cache,target=${HOME}/.cache/uv \
-    uv sync --locked --no-dev
+RUN uv sync --locked --no-dev
 
 # Place executables in the environment at the front of the path
 ENV PATH="${HOME}/app/.venv/bin:$PATH"