Python-uv

Latest version: v0.0.38

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 26

0.2.20

- Fix issue where the standalone installer failed due to a missing `uvx`
binary ([4743](https://github.com/astral-sh/uv/pull/4743))

0.2.19

Enhancements

- Indicate when we retried requests during network errors ([4725](https://github.com/astral-sh/uv/pull/4725))

CLI

- Add `--disable-pip-version-check` to compatibility arguments ([4672](https://github.com/astral-sh/uv/pull/4672))
- Allow `uv pip sync` to clear an environment with opt-in ([4517](https://github.com/astral-sh/uv/pull/4517))
- Add `--invert` to `uv pip tree` ([4621](https://github.com/astral-sh/uv/pull/4621))
- Omit `(*)` in `uv pip tree` for empty packages ([4673](https://github.com/astral-sh/uv/pull/4673))
- Add `--package` to `uv pip tree` ([4655](https://github.com/astral-sh/uv/pull/4655))

Bug fixes

- Fix bug where git cache did not validate commits correctly ([4698](https://github.com/astral-sh/uv/pull/4698))
- Narrow `requires-python` requirement in resolver forks ([4707](https://github.com/astral-sh/uv/pull/4707))
- Fix bug when pruning the last package in `uv pip tree` ([4652](https://github.com/astral-sh/uv/pull/4652))

Preview features

- Remove dangling environments in `uv tool uninstall` ([4740](https://github.com/astral-sh/uv/pull/4740))
- Respect upgrades in `uv tool install` ([4736](https://github.com/astral-sh/uv/pull/4736))
- Add PEP 723 support to `uv run` ([4656](https://github.com/astral-sh/uv/pull/4656))
- Add `tool dir` and `toolchain dir` commands ([4695](https://github.com/astral-sh/uv/pull/4695))
- Omit `pythonX.Y` segment in stdlib path for managed toolchains on
Windows ([4727](https://github.com/astral-sh/uv/pull/4727))
- Add `uv toolchain uninstall` ([4646](https://github.com/astral-sh/uv/pull/4646))
- Add `uvx` alias for `uv tool run` ([4632](https://github.com/astral-sh/uv/pull/4632))
- Allow configuring the toolchain fetch strategy ([4601](https://github.com/astral-sh/uv/pull/4601))
- Drop `prefer` prefix from `toolchain-preference` values ([4602](https://github.com/astral-sh/uv/pull/4602))
- Enable projects to opt-out of workspace management ([4565](https://github.com/astral-sh/uv/pull/4565))
- Fetch managed toolchains if necessary in `uv tool install`
and `uv tool run` ([4717](https://github.com/astral-sh/uv/pull/4717))
- Fix tool dist-info directory normalization ([4686](https://github.com/astral-sh/uv/pull/4686))
- Lock the toolchains directory during toolchain operations ([4733](https://github.com/astral-sh/uv/pull/4733))
- Log when we start solving a fork ([4684](https://github.com/astral-sh/uv/pull/4684))
- Reinstall entrypoints with `--force` ([4697](https://github.com/astral-sh/uv/pull/4697))
- Respect data scripts in `uv tool install` ([4693](https://github.com/astral-sh/uv/pull/4693))
- Set fork solution as preference when resolving ([4662](https://github.com/astral-sh/uv/pull/4662))
- Show dedicated message for tools with no entrypoints ([4694](https://github.com/astral-sh/uv/pull/4694))
- Support unnamed requirements in `uv tool install` ([4716](https://github.com/astral-sh/uv/pull/4716))

0.2.18

CLI

- Make `--universal` and `--python-platform` mutually exclusive ([4598](https://github.com/astral-sh/uv/pull/4598))
- Add `--depth` and `--prune` support to `pip tree` ([4440](https://github.com/astral-sh/uv/pull/4440))

Bug fixes

- Handle cycles when propagating markers ([4595](https://github.com/astral-sh/uv/pull/4595))
- Ignore `py` not found errors during interpreter discovery ([4620](https://github.com/astral-sh/uv/pull/4620))
- Merge markers when applying constraints ([4648](https://github.com/astral-sh/uv/pull/4648))
- Retry on spurious failures when caching built wheels ([4605](https://github.com/astral-sh/uv/pull/4605))
- Sort indexes during graph edge removal ([4649](https://github.com/astral-sh/uv/pull/4649))
- Treat Python version as a lower bound in `--universal` ([4597](https://github.com/astral-sh/uv/pull/4597))
- Fix the incorrect handling of markers in `pip tree` ([4611](https://github.com/astral-sh/uv/pull/4611))
- Improve toolchain and environment missing error messages ([4596](https://github.com/astral-sh/uv/pull/4596))

Documentation

- Explicitly mention use of seed packages during `uv venv --seed` ([4588](https://github.com/astral-sh/uv/pull/4588))

Preview features

- Add `uv tool list` ([4630](https://github.com/astral-sh/uv/pull/4630))
- Add `uv tool uninstall` ([4641](https://github.com/astral-sh/uv/pull/4641))
- Add support for specifying `nameversion` in `uv tool run` ([4572](https://github.com/astral-sh/uv/pull/4572))
- Allow `uv add` to specify optional dependency groups ([4607](https://github.com/astral-sh/uv/pull/4607))
- Allow the package spec to be passed positionally in `uv tool install` ([4564](https://github.com/astral-sh/uv/pull/4564))
- Avoid infinite loop for cyclic installs ([4633](https://github.com/astral-sh/uv/pull/4633))
- Indent wheels like dependencies in the lockfile ([4582](https://github.com/astral-sh/uv/pull/4582))
- Sync all packages in a virtual workspace ([4636](https://github.com/astral-sh/uv/pull/4636))
- Use inline table for dependencies in lockfile ([4581](https://github.com/astral-sh/uv/pull/4581))
- Make `source` field in lock file more structured ([4627](https://github.com/astral-sh/uv/pull/4627))

0.2.17

Bug fixes

- Avoid enforcing extra-only constraints ([4570](https://github.com/astral-sh/uv/pull/4570))

Preview features

- Add `--extra` to `uv add` and enable fine-grained updates ([4566](https://github.com/astral-sh/uv/pull/4566))

0.2.16

Enhancements

- Add a universal resolution mode to `uv pip compile`
with `--universal` ([4505](https://github.com/astral-sh/uv/pull/4505))
- Add support for `--no-strip-markers` in `uv pip compile` output ([4503](https://github.com/astral-sh/uv/pull/4503))
- Add `--no-dedupe` support to `uv pip tree` ([4449](https://github.com/astral-sh/uv/pull/4449))

Bug fixes

- Enable more precise environment locking with `--prefix` ([4506](https://github.com/astral-sh/uv/pull/4506))
- Allow local index references in `requirements.txt` files ([4525](https://github.com/astral-sh/uv/pull/4525))
- Allow non-`file://` paths to serve as `--index-url` values ([4524](https://github.com/astral-sh/uv/pull/4524))
- Make `.egg-info` filename parsing spec compliant ([4533](https://github.com/astral-sh/uv/pull/4533))
- Gracefully handle non-existent packages in local indexes ([4545](https://github.com/astral-sh/uv/pull/4545))
- Read content length from response rather than request ([4488](https://github.com/astral-sh/uv/pull/4488))
- Read persistent configuration from non-workspace `pyproject.toml` ([4526](https://github.com/astral-sh/uv/pull/4526))
- Avoid panic for invalid, non-base index URLs ([4527](https://github.com/astral-sh/uv/pull/4527))

Performance

- Skip submodule update for fresh clones ([4482](https://github.com/astral-sh/uv/pull/4482))
- Use shared client in Git fetch implementation ([4487](https://github.com/astral-sh/uv/pull/4487))

Preview features

- Add `--package` argument to `uv add` and `uv remove` ([4556](https://github.com/astral-sh/uv/pull/4556))
- Add `uv tool install` ([4492](https://github.com/astral-sh/uv/pull/4492))
- Fallback to interpreter discovery in `uv run` ([4549](https://github.com/astral-sh/uv/pull/4549))
- Make `uv.sources` without `--preview` non-fatal ([4558](https://github.com/astral-sh/uv/pull/4558))
- Remove non-existent extras from lockfile ([4479](https://github.com/astral-sh/uv/pull/4479))
- Support conflicting URL in separate forks ([4435](https://github.com/astral-sh/uv/pull/4435))
- Automatically detect workspace packages in `uv add` ([4557](https://github.com/astral-sh/uv/pull/4557))
- Omit `distribution.sdist` from lockfile when it is redundant ([4528](https://github.com/astral-sh/uv/pull/4528))
- Remove `source` and `version` from lock file when unambiguous ([4513](https://github.com/astral-sh/uv/pull/4513))
- Allow `uv lock` to read overrides from `tool.uv` (4108) ([4369](https://github.com/astral-sh/uv/pull/4369))

0.2.15

Enhancements

- Add `--emit-build-options` flag to `uv pip compile` interface ([4463](https://github.com/astral-sh/uv/pull/4463))
- Add `pythonw` support for gui scripts on Windows ([4409](https://github.com/astral-sh/uv/pull/4409))
- Add `uv pip tree` ([3859](https://github.com/astral-sh/uv/pull/3859))

CLI

- Adjust the docs for the pip CLI commands ([4445](https://github.com/astral-sh/uv/pull/4445))
- Fix casing of `--no-compile` alias ([4453](https://github.com/astral-sh/uv/pull/4453))

Bug fixes

- Fix ordering of prefer-system toolchain preference ([4441](https://github.com/astral-sh/uv/pull/4441))
- Respect index strategy in source distribution builds ([4468](https://github.com/astral-sh/uv/pull/4468))

Documentation

- Add documentation for using uv in a Docker image ([4433](https://github.com/astral-sh/uv/pull/4433))

Page 10 of 26

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.