Uv

Latest version: v0.1.42

Safety actively analyzes 626004 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 7

0.1.42

This release includes stabilized support for persistent configuration in uv.

uv will now read project configuration from a `pyproject.toml` or `uv.toml` file in the current
directory or any parent directory, along with user configuration at `~/.config/uv/uv.toml`
(or `$XDG_CONFIG_HOME/uv/uv.toml`) on macOS and Linux, and `%APPDATA%\uv\uv.toml` on Windows.

See: [Persistent Configuration](https://github.com/astral-sh/uv?tab=readme-ov-file#persistent-configuration) for more.

Enhancements

- Respect `MACOSX_DEPLOYMENT_TARGET` in `--python-platform` ([3470](https://github.com/astral-sh/uv/pull/3470))

Configuration

- Add documentation for persistent configuration ([3467](https://github.com/astral-sh/uv/pull/3467))
- Add JSON Schema export to SchemaStore ([3461](https://github.com/astral-sh/uv/pull/3461))
- Merge user and workspace settings ([3462](https://github.com/astral-sh/uv/pull/3462))

Bug fixes

- Use Metadata10 to parse PKG-INFO of legacy editable ([3450](https://github.com/astral-sh/uv/pull/3450))
- Apply normcase to line from easy-install.pth ([3451](https://github.com/astral-sh/uv/pull/3451))
- Upgrade `async_http_range_reader` to v0.8.0 to respect redirects in range requests ([3460](https://github.com/astral-sh/uv/pull/3460))
- Use last non-EOL version for `--python-platform` macOS ([3469](https://github.com/astral-sh/uv/pull/3469))

0.1.41

Bug fixes

- Remove unconstrained version error from requirements ([3443](https://github.com/astral-sh/uv/pull/3443))

0.1.40

Enhancements

- Add `--allow-existing` to overwrite existing virtualenv ([2548](https://github.com/astral-sh/uv/pull/2548))
- Respect and enable uninstalls of legacy editables (`.egg-link`) ([3415](https://github.com/astral-sh/uv/pull/3415))
- Respect and enable uninstalls of existing `.egg-info` packages ([3380](https://github.com/astral-sh/uv/pull/3380))

CLI

- Accept `--no-upgrade`, `--no-refresh`, etc. on the CLI ([3328](https://github.com/astral-sh/uv/pull/3328))

Configuration

- Expose `UV_NO_BUILD_ISOLATION` as environment variable ([3318](https://github.com/astral-sh/uv/pull/3318))
- Expose `UV_PYTHON` as an environment variable ([3284](https://github.com/astral-sh/uv/pull/3284))
- Expose `UV_LINK_MODE` as environment variable ([3315](https://github.com/astral-sh/uv/pull/3315))
- Add `UV_CUSTOM_COMPILE_COMMAND` to environment variable docs ([3382](https://github.com/astral-sh/uv/pull/3382))

Bug fixes

- Ignore 401 HTTP responses with multiple indexes ([3292](https://github.com/astral-sh/uv/pull/3292))
- Avoid panic for file URLs ([3306](https://github.com/astral-sh/uv/pull/3306))
- Quote version parse errors consistently ([3325](https://github.com/astral-sh/uv/pull/3325))
- Detect current environment when `uv` is invoked from within a virtualenv ([3379](https://github.com/astral-sh/uv/pull/3379))
- Unset target when creating virtual environments ([3362](https://github.com/astral-sh/uv/pull/3362))
- Update activation scripts from virtualenv ([3376](https://github.com/astral-sh/uv/pull/3376))
- Use canonical URLs in satisfaction check ([3373](https://github.com/astral-sh/uv/pull/3373))

0.1.39

Enhancements

- Add `--target` support to `sync` and `install` ([3257](https://github.com/astral-sh/uv/pull/3257))
- Implement `--index-strategy unsafe-best-match` ([3138](https://github.com/astral-sh/uv/pull/3138))

Bug fixes

- Fix `platform_machine` tag for `--python-platform` on macOS ARM ([3267](https://github.com/astral-sh/uv/pull/3267))

Release

- Build a separate ARM wheel for macOS ([3268](https://github.com/astral-sh/uv/pull/3268))
- Use `macos-12` to build release wheels ([3264](https://github.com/astral-sh/uv/pull/3264))

0.1.38

Enhancements

- Add alternate manylinux targets to `--python-platform` ([3229](https://github.com/astral-sh/uv/pull/3229))
- An enum and backticks for lookahead error ([3216](https://github.com/astral-sh/uv/pull/3216))
- Upgrade macOS target to `12.0` ([3228](https://github.com/astral-sh/uv/pull/3228))
- Add keyring logs for URL and host fetches ([3212](https://github.com/astral-sh/uv/pull/3212))
- Combine unresolvable error dependency clauses with the same root ([3225](https://github.com/astral-sh/uv/pull/3225))

CLI

- Gave a better name to the `--color` placeholder ([3226](https://github.com/astral-sh/uv/pull/3226))
- Warn when an unsupported Python version is encountered ([3250](https://github.com/astral-sh/uv/pull/3250))

Configuration

- Use directory instead of file when searching for `uv.toml` file ([3203](https://github.com/astral-sh/uv/pull/3203))

Performance

- Only perform fetches of credentials for a realm and username combination once ([3237](https://github.com/astral-sh/uv/pull/3237))
- Unroll self-dependencies via extras ([3230](https://github.com/astral-sh/uv/pull/3230))
- Use read-write locks instead of mutexes in authentication handling ([3210](https://github.com/astral-sh/uv/pull/3210))

Bug fixes

- Avoid removing quites from requirements markers ([3214](https://github.com/astral-sh/uv/pull/3214))
- Avoid adding extras when expanding constraints ([3232](https://github.com/astral-sh/uv/pull/3232))
- Reinstall package when editable label is removed ([3219](https://github.com/astral-sh/uv/pull/3219))

Documentation

- Add `RAYON_NUM_THREADS` to environment variable docs ([3223](https://github.com/astral-sh/uv/pull/3223))
- Document support for HTTP proxy variables ([3247](https://github.com/astral-sh/uv/pull/3247))
- Fix documentation for `--python-platfor`m ([3220](https://github.com/astral-sh/uv/pull/3220))

0.1.37

Enhancements

- Change default HTTP read timeout to 30s ([3182](https://github.com/astral-sh/uv/pull/3182))
- Add `--python-platform` to `sync` and `install` commands ([3154](https://github.com/astral-sh/uv/pull/3154))
- Add ticks around error messages more consistently ([3004](https://github.com/astral-sh/uv/pull/3004))
- Fix Docker publish permissions in release pipeline ([3195](https://github.com/astral-sh/uv/pull/3195))
- Improve tracing for keyring provider ([3207](https://github.com/astral-sh/uv/pull/3207))

Performance

- Update keyring provider to be async ([3089](https://github.com/astral-sh/uv/pull/3089))

Bug fixes

- Fix fetch of credentials when cache is seeded with username ([3206](https://github.com/astral-sh/uv/pull/3206))

Documentation

- Improve `--python-platform` documentation ([3202](https://github.com/astral-sh/uv/pull/3202))

Page 1 of 7

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.