Python-uv

Latest version: v0.0.38

Safety actively analyzes 715032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 19 of 26

0.1.12

CLI

- Add a `--python` flag to allow installation into arbitrary Python
interpreters ([2000](https://github.com/astral-sh/uv/pull/2000))
- Add a `--system` flag for opt-in non-virtualenv installs ([2046](https://github.com/astral-sh/uv/pull/2046))

Enhancements

- Add a `--pre` alias for `--prerelease=allow` ([2049](https://github.com/astral-sh/uv/pull/2049))
- Enable `freeze` and `list` to introspect non-virtualenv Pythons ([2033](https://github.com/astral-sh/uv/pull/2033))
- Support environment variables in index URLs in requirements files ([2036](https://github.com/astral-sh/uv/pull/2036))
- Add `--exclude-editable` and `--exclude` args to `uv pip list` ([1985](https://github.com/astral-sh/uv/pull/1985))
- Always remove color codes from output file ([2018](https://github.com/astral-sh/uv/pull/2018))
- Support recursive extras in direct `pyproject.toml` files ([1990](https://github.com/astral-sh/uv/pull/1990))
- Un-cache editable requirements with dynamic metadata ([2029](https://github.com/astral-sh/uv/pull/2029))
- Use a non-local lockfile for locking system interpreters ([2045](https://github.com/astral-sh/uv/pull/2045))
- Surface the `EXTERNALLY-MANAGED` message to users ([2032](https://github.com/astral-sh/uv/pull/2032))

0.1.11

Enhancements

- Add support for pip-compile's `--unsafe-package` flag ([1889](https://github.com/astral-sh/uv/pull/1889))
- Improve interpreter discovery logging ([1909](https://github.com/astral-sh/uv/pull/1909))
- Implement `uv pip list` ([1662](https://github.com/astral-sh/uv/pull/1662))
- Allow round-trip via `freeze` command ([1936](https://github.com/astral-sh/uv/pull/1936))
- Don't write pip compile output to stdout with `-q` ([1962](https://github.com/astral-sh/uv/pull/1962))
- Add long-form version output ([1930](https://github.com/astral-sh/uv/pull/1930))

Compatibility

- Accept single string for `backend-path` ([1969](https://github.com/astral-sh/uv/pull/1969))
- Add compatibility for deprecated `python_implementation` marker ([1933](https://github.com/astral-sh/uv/pull/1933))
- Generate versioned `pip` launchers ([1918](https://github.com/astral-sh/uv/pull/1918))

Bug fixes

- Avoid erroring for source distributions with symlinks in archive ([1944](https://github.com/astral-sh/uv/pull/1944))
- Expand scope of archive timestamping ([1960](https://github.com/astral-sh/uv/pull/1960))
- Gracefully handle virtual environments with conflicting packages ([1893](https://github.com/astral-sh/uv/pull/1893))
- Invalidate dependencies when editables are updated ([1955](https://github.com/astral-sh/uv/pull/1955))
- Make < exclusive for non-pre-release markers ([1878](https://github.com/astral-sh/uv/pull/1878))
- Properly apply constraints in venv audit ([1956](https://github.com/astral-sh/uv/pull/1956))
- Re-sync editables on-change ([1959](https://github.com/astral-sh/uv/pull/1959))
- Remove current directory from PATH in PEP 517 hooks ([1975](https://github.com/astral-sh/uv/pull/1975))
- Remove `--upgrade` and `--quiet` flags from generated output
files ([1873](https://github.com/astral-sh/uv/pull/1873))
- Use full python version in `pyvenv.cfg` ([1979](https://github.com/astral-sh/uv/pull/1979))

Performance

- fix `uv pip install` handling of gzip'd response and PEP 691 ([1978](https://github.com/astral-sh/uv/pull/1978))
- Remove `spawn_blocking` from version map ([1966](https://github.com/astral-sh/uv/pull/1966))

Documentation

- Clarify `lowest` vs. `lowest-direct` resolution strategies ([1954](https://github.com/astral-sh/uv/pull/1954))
- Improve error message for network timeouts ([1961](https://github.com/astral-sh/uv/pull/1961))

0.1.10

Enhancements

- Omit `--find-links` from annotation header unless requested ([1898](https://github.com/astral-sh/uv/pull/1898))
- Write to stdout when `--output-file` is present ([1892](https://github.com/astral-sh/uv/pull/1892))

Bug fixes

- Retain authentication when making range requests ([1902](https://github.com/astral-sh/uv/pull/1902))
- Fix uv-created venv detection ([1908](https://github.com/astral-sh/uv/pull/1908))
- Fix Windows `py` failure from spurious stderr ([1885](https://github.com/astral-sh/uv/pull/1885))
- Ignore Python 2 installations when querying for interpreters ([1905](https://github.com/astral-sh/uv/pull/1905))

0.1.9

Enhancements

- Add support for `config_settings` in PEP 517 hooks ([1833](https://github.com/astral-sh/uv/pull/1833))
- feat: allow passing extra config k,v pairs for pyvenv.cfg when creating a
venv ([1852](https://github.com/astral-sh/uv/pull/1852))

Bug fixes

- Ensure authentication is passed from the index url to distribution
files ([1886](https://github.com/astral-sh/uv/pull/1886))
- Use `rustls-tls-native-roots` in `uv` crate ([1888](https://github.com/astral-sh/uv/pull/1888))
- pep440: fix version ordering ([1883](https://github.com/astral-sh/uv/pull/1883))
- Hide index URLs from header if not emitted ([1835](https://github.com/astral-sh/uv/pull/1835))

Documentation

- Add changelog ([1881](https://github.com/astral-sh/uv/pull/1881))

0.1.8

Bug fixes

- Allow duplicate URLs that resolve to the same canonical URL ([1877](https://github.com/astral-sh/uv/pull/1877))
- Retain authentication attached to URLs when making requests to the same
host ([1874](https://github.com/astral-sh/uv/pull/1874))
- Win Trampoline: Use Python executable path encoded in binary ([1803](https://github.com/astral-sh/uv/pull/1803))
- Expose types to implement custom `ResolverProvider` ([1862](https://github.com/astral-sh/uv/pull/1862))
- Search `PATH` when `python` can't be found with `py` ([1711](https://github.com/astral-sh/uv/pull/1711))
- Avoid displaying "root" package when formatting terms ([1871](https://github.com/astral-sh/uv/pull/1871))

Documentation

- Use more universal windows install instructions ([1811](https://github.com/astral-sh/uv/pull/1811))

Rust API

- Expose types to implement custom ResolverProvider ([1862](https://github.com/astral-sh/uv/pull/1862))

0.1.7

Enhancements

- Stream zip archive when fetching non-range-request metadata ([1792](https://github.com/astral-sh/uv/pull/1792))
- Support setting request timeout with `UV_HTTP_TIMEOUT`
and `HTTP_TIMEOUT` ([1780](https://github.com/astral-sh/uv/pull/1780))
- Improve error message when git ref cannot be fetched ([1826](https://github.com/astral-sh/uv/pull/1826))

Configuration

- Implement `--annotation-style` parameter for `uv pip compile` ([1679](https://github.com/astral-sh/uv/pull/1679))

Bug fixes

- Add fixup for `prefect<1.0.0` ([1825](https://github.com/astral-sh/uv/pull/1825))
- Add support for `>dev` specifier ([1776](https://github.com/astral-sh/uv/pull/1776))
- Avoid enforcing URL correctness for installed distributions ([1793](https://github.com/astral-sh/uv/pull/1793))
- Don't expect pinned packages for editables with non-existent
extras ([1847](https://github.com/astral-sh/uv/pull/1847))
- Linker copies files as a fallback when ref-linking fails ([1773](https://github.com/astral-sh/uv/pull/1773))
- Move conflicting dependencies into PubGrub ([1796](https://github.com/astral-sh/uv/pull/1796))
- Normalize `VIRTUAL_ENV` path in activation scripts ([1817](https://github.com/astral-sh/uv/pull/1817))
- Preserve executable bit when untarring archives ([1790](https://github.com/astral-sh/uv/pull/1790))
- Retain passwords in Git URLs ([1717](https://github.com/astral-sh/uv/pull/1717))
- Sort output when installing seed packages ([1822](https://github.com/astral-sh/uv/pull/1822))
- Treat ARM wheels as higher-priority than universal ([1843](https://github.com/astral-sh/uv/pull/1843))
- Use `git` command to fetch repositories instead of `libgit2` for robust SSH
support ([1781](https://github.com/astral-sh/uv/pull/1781))
- Use redirected URL as base for relative paths ([1816](https://github.com/astral-sh/uv/pull/1816))
- Use the right marker for the `implementation` field
of `pyvenv.cfg` ([1785](https://github.com/astral-sh/uv/pull/1785))
- Wait for distribution metadata with `--no-deps` ([1812](https://github.com/astral-sh/uv/pull/1812))
- platform-host: check /bin/sh, then /bin/dash and then /bin/ls ([1818](https://github.com/astral-sh/uv/pull/1818))
- Ensure that builds within the cache aren't considered Git
repositories ([1782](https://github.com/astral-sh/uv/pull/1782))
- Strip trailing `+` from version number of local Python builds ([1771](https://github.com/astral-sh/uv/pull/1771))

Documentation

- Add docs for git authentication ([1844](https://github.com/astral-sh/uv/pull/1844))
- Update venv activation for windows ([1836](https://github.com/astral-sh/uv/pull/1836))
- Update README.md to include extras example ([1806](https://github.com/astral-sh/uv/pull/1806))

Page 19 of 26

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.