Python-uv

Latest version: v0.0.38

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 26

0.4.12

Enhancements

- Allow users to provide pre-defined metadata for resolution ([7442](https://github.com/astral-sh/uv/pull/7442))
- Invalidate existing tool environments on Python interpreter mismatch ([7451](https://github.com/astral-sh/uv/pull/7451))

Bug fixes

- Avoid fatal error when searching for egg-info with missing directory ([7498](https://github.com/astral-sh/uv/pull/7498))

Documentation

- Add note on cache growth for self-hosted GitHub runners ([5757](https://github.com/astral-sh/uv/pull/5757))

0.4.11

Enhancements

- Add `--no-editable` support to `uv sync` and `uv export` ([7371](https://github.com/astral-sh/uv/pull/7371))
- Add support for `--only-dev` to `uv sync` and `uv export` ([7367](https://github.com/astral-sh/uv/pull/7367))
- Add support for remaining pip-supported file extensions ([7387](https://github.com/astral-sh/uv/pull/7387))
- Generate shell completion for `uvx` ([7388](https://github.com/astral-sh/uv/pull/7388))
- Include `uv export` command in `requirements.txt` output ([7374](https://github.com/astral-sh/uv/pull/7374))
- Prune unzipped source distributions in `uv cache prune --ci` ([7446](https://github.com/astral-sh/uv/pull/7446))
- Warn when trying to `uv sync` a package without build configuration ([7420](https://github.com/astral-sh/uv/pull/7420))
- Support requests for pre-releases in the `--python` option ([7335](https://github.com/astral-sh/uv/pull/7335))

Bug fixes

- Avoid erroneous version warning for `.dist-info` directories ([7444](https://github.com/astral-sh/uv/pull/7444))
- Avoid removing seed packages for `uv venv --seed` environments ([7410](https://github.com/astral-sh/uv/pull/7410))
- Avoid unnecessary progress bar initializations ([7412](https://github.com/astral-sh/uv/pull/7412))
- Error when `tool.uv.sources` contains duplicate package names ([7383](https://github.com/astral-sh/uv/pull/7383))
- Include `--branch` et al when resolving unnamed URLs in `uv add` ([7447](https://github.com/astral-sh/uv/pull/7447))
- Include `dev-dependencies` in `--no-sources` invocations ([7408](https://github.com/astral-sh/uv/pull/7408))
- Include the parent interpreter in Python discovery when `--system` is used ([7440](https://github.com/astral-sh/uv/pull/7440))
- Respect `--no-sources` in PEP 723 scripts ([7409](https://github.com/astral-sh/uv/pull/7409))
- Respect `pyproject.toml` credentials from user-provided requirements ([7474](https://github.com/astral-sh/uv/pull/7474))
- Use consistent PyPI cache bucket ([7443](https://github.com/astral-sh/uv/pull/7443))
- Use unambiguous relative paths in `uv export` ([7378](https://github.com/astral-sh/uv/pull/7378))

Documentation

- Add documentation on platform-specific dependencies ([7411](https://github.com/astral-sh/uv/pull/7411))
- Add documentation for passing installer options on Linux ([6839](https://github.com/astral-sh/uv/pull/6839))
- Separate project data from configuration settings ([7053](https://github.com/astral-sh/uv/pull/7053))

Error messages

- Hint at missing `project.name` ([6803](https://github.com/astral-sh/uv/pull/6803))
- Surface dedicated `project.name` error for workspaces ([7399](https://github.com/astral-sh/uv/pull/7399))
- Remove duplicate warning for settings discovery errors ([7384](https://github.com/astral-sh/uv/pull/7384))

0.4.10

Enhancements

- Allow `uv tool upgrade --all` to continue on individual upgrade failure ([7333](https://github.com/astral-sh/uv/pull/7333))
- Support globs as cache keys in `tool.uv.cache-keys` ([7268](https://github.com/astral-sh/uv/pull/7268))
- Add Python package (`__main__.py`) support to `uv run` ([7281](https://github.com/astral-sh/uv/pull/7281))
- Add zip application support to `uv run` ([7289](https://github.com/astral-sh/uv/pull/7289))
- Add `--token` option to `self update` command ([7279](https://github.com/astral-sh/uv/pull/7279))

Performance

- Use `globwalk` for `cache-keys` matching ([7337](https://github.com/astral-sh/uv/pull/7337))

Bug fixes

- Always treat archive-like requirements as local files ([7364](https://github.com/astral-sh/uv/pull/7364))
- Apply `--no-install` options when constructing resolution ([7277](https://github.com/astral-sh/uv/pull/7277))
- Avoid clobbering existing `py.typed` files contents in `uv init` ([7338](https://github.com/astral-sh/uv/pull/7338))
- Avoid enforcing platform compatibility when validating lockfile ([7305](https://github.com/astral-sh/uv/pull/7305))
- Avoid installing transitive dev dependencies ([7318](https://github.com/astral-sh/uv/pull/7318))
- Avoid selecting prerelease Python installations without opt-in ([7300](https://github.com/astral-sh/uv/pull/7300))
- Fix PPC64 page size in binary builds. ([7298](https://github.com/astral-sh/uv/pull/7298))
- Include pre-release Python versions in `uv python list` ([7290](https://github.com/astral-sh/uv/pull/7290))
- Make version ID optional for source builds ([7362](https://github.com/astral-sh/uv/pull/7362))
- Support relative paths in `uv add --script` ([7301](https://github.com/astral-sh/uv/pull/7301))

Documentation

- Fix documentation typos for `uv build --build-constraint` flag ([7330](https://github.com/astral-sh/uv/pull/7330))
- Fix grammatical error in CLI docs ([7353](https://github.com/astral-sh/uv/pull/7353))

Error messages

- Add dedicated lock errors for wheel-only distributions ([7307](https://github.com/astral-sh/uv/pull/7307))
- Avoid treating `.whl` sources as source distributions ([7303](https://github.com/astral-sh/uv/pull/7303))
- Clarify Python requirement source for script incompatibilities ([7339](https://github.com/astral-sh/uv/pull/7339))

0.4.9

Enhancements

- Add support for managed Python 3.13 ([7263](https://github.com/astral-sh/uv/pull/7263))
- Upgrade managed CPython versions to latest patch releases ([7263](https://github.com/astral-sh/uv/pull/7263))
- Allow setting a target version for `uv self update` ([7252](https://github.com/astral-sh/uv/pull/7252))
- Create `py.typed` files during `uv init --lib` ([7232](https://github.com/astral-sh/uv/pull/7232))
- Add a dedicated error for packages that fail due to `distutils` deprecation ([7239](https://github.com/astral-sh/uv/pull/7239))
- Improve error message when requested Python version is unsupported ([7269](https://github.com/astral-sh/uv/pull/7269))
- Add `uv run --no-sync` ([7192]((https://github.com/astral-sh/uv/pull/7192))

Bug fixes

- Avoid updating `pyproject.toml` offsets on non-add edits ([7262](https://github.com/astral-sh/uv/pull/7262))
- Invalidate cache when `--config-settings` change ([7139](https://github.com/astral-sh/uv/pull/7139))
- Remove workspace root for single-member workspace with `uv export` ([7254](https://github.com/astral-sh/uv/pull/7254))

0.4.8

Enhancements

- Add support for dynamic cache keys ([7136](https://github.com/astral-sh/uv/pull/7136))
- Allow `.dist-info` names with dashes for post releases ([7208](https://github.com/astral-sh/uv/pull/7208))
- Use type hints in code from `uv init` ([7225](https://github.com/astral-sh/uv/pull/7225))
- Treat `.tgz` the same as `.tar.gz` ([7201](https://github.com/astral-sh/uv/pull/7201))
- Direct users towards `uv venv` to create a virtual environment ([7188](https://github.com/astral-sh/uv/pull/7188))
- Improve error message for uv init already init-ed ([7198](https://github.com/astral-sh/uv/pull/7198))

Performance

- Avoid batch prefetching for un-optimized registries ([7226](https://github.com/astral-sh/uv/pull/7226))
- Avoid iteration for singleton selections ([7195](https://github.com/astral-sh/uv/pull/7195))

Bug fixes

- Avoid extra newlines in debug logging for source builds ([7174](https://github.com/astral-sh/uv/pull/7174))
- Prune unreachable packages from `--universal` output ([7209](https://github.com/astral-sh/uv/pull/7209))
- Respect exclusion when collecting workspace members ([7175](https://github.com/astral-sh/uv/pull/7175))
- Use path file instead of `sitecustomize.py` ([7161](https://github.com/astral-sh/uv/pull/7161))
- Replace incorrect `--source` and `--binary` flags with correct `--sdist` and `--wheel` flags in `uv build` ([7156](https://github.com/astral-sh/uv/pull/7156))

Documentation

- Document support for `UV_INSTALL_DIR` ([7107](https://github.com/astral-sh/uv/pull/7107))
- List all supported sdist formats ([7168](https://github.com/astral-sh/uv/pull/7168))

0.4.7

Enhancements

- Add `--no-emit-project` and friends to `uv export` ([7110](https://github.com/astral-sh/uv/pull/7110))
- Add `--output-file` to `uv export` ([7109](https://github.com/astral-sh/uv/pull/7109))
- Prune unused source distributions from the cache in `uv cache prune` ([7112](https://github.com/astral-sh/uv/pull/7112))
- Take intersection of constraint and requirements hashes ([7108](https://github.com/astral-sh/uv/pull/7108))

Performance

- Skip metadata fetch for `--no-deps` and `pip sync` ([7127](https://github.com/astral-sh/uv/pull/7127))

Bug fixes

- Avoid panicking when encountering an invalid Python version during `uv python list` ([7131](https://github.com/astral-sh/uv/pull/7131))
- Write trailing newline to `.python-version` files ([7140](https://github.com/astral-sh/uv/pull/7140))

Page 4 of 26

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.