Python-uv

Latest version: v0.0.38

Safety actively analyzes 715032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 26

0.4.6

Enhancements

- Accept `--build-constraint` in `uv build` ([7085](https://github.com/astral-sh/uv/pull/7085))
- Add `--require-hashes` and `--verify-hashes` to `uv build` ([7094](https://github.com/astral-sh/uv/pull/7094))
- Add `--show-version-specifiers` to `uv tool list` ([7050](https://github.com/astral-sh/uv/pull/7050))
- Respect hashes in constraints files ([7093](https://github.com/astral-sh/uv/pull/7093))
- Upgrade installer scripts ([7092](https://github.com/astral-sh/uv/pull/7092))
- Allow specifying multiple packages in `uv tool upgrade` and `uninstall` ([7037](https://github.com/astral-sh/uv/pull/7037))
- Sort by implementation in `uv python list` ([6918](https://github.com/astral-sh/uv/pull/6918))

Bug fixes

- Invalidate lockfile when member versions change ([7102](https://github.com/astral-sh/uv/pull/7102))
- Strip fragments from direct source URLs in lockfile ([7061](https://github.com/astral-sh/uv/pull/7061))
- Support `--no-build` and `--no-binary` in `uv sync` et al ([7100](https://github.com/astral-sh/uv/pull/7100))
- Use distribution hash over registry hash ([7060](https://github.com/astral-sh/uv/pull/7060))
- Fix inverted log message ([7063](https://github.com/astral-sh/uv/pull/7063))
- Adjust Docker `ENTRYPOINT` and `CMD` for inherited images ([7054](https://github.com/astral-sh/uv/pull/7054))

Documentation

- Add winget to installers ([7088](https://github.com/astral-sh/uv/pull/7088))
- Document how to disable path modifications during install ([7090](https://github.com/astral-sh/uv/pull/7090))
- Document how to manually update locked package version ([7083](https://github.com/astral-sh/uv/pull/7083))
- Document official `setup-uv` action ([7056](https://github.com/astral-sh/uv/pull/7056))
- Update docs on `.python-version` file ([7051](https://github.com/astral-sh/uv/pull/7051))

0.4.5

Enhancements

- Implement `uv build` ([6895](https://github.com/astral-sh/uv/pull/6895))
- Add `--package` support to `uv build` ([6990](https://github.com/astral-sh/uv/pull/6990))
- Prune unreachable packages from lockfile ([6959](https://github.com/astral-sh/uv/pull/6959))
- Prune unreachable wheels from lockfile ([6961](https://github.com/astral-sh/uv/pull/6961))
- Show build output by default in `uv build` ([6912](https://github.com/astral-sh/uv/pull/6912))
- Support `uv build --wheel` from source distributions ([6898](https://github.com/astral-sh/uv/pull/6898))
- Use the root project name for the project virtual environment prompt ([7021](https://github.com/astral-sh/uv/pull/7021))

Bug fixes

- Fix handling of inline optional dependencies in `uv add` ([7023](https://github.com/astral-sh/uv/pull/7023))
- Reflect exit code in `uv tool run` and `uv run` ([6994](https://github.com/astral-sh/uv/pull/6994))
- Revert `pyproject.toml` modifications on Ctrl-C ([7024](https://github.com/astral-sh/uv/pull/7024))
- Rollback `pyproject.toml` changes on all errors ([7022](https://github.com/astral-sh/uv/pull/7022))
- Use correct ordering semantics for narrowing upper-bounded Python requirements ([7031](https://github.com/astral-sh/uv/pull/7031))
- Fix segfault in Windows trampolines ([6955](https://github.com/astral-sh/uv/pull/6955))
- Remove unused `__future__.annotations` import in `_virtualenv.py` ([6996](https://github.com/astral-sh/uv/pull/6996))

Documentation

- Add documentation for `uv build` ([6991](https://github.com/astral-sh/uv/pull/6991))
- Add note to `extra` and `all-extras` in `uv sync` help ([7013](https://github.com/astral-sh/uv/pull/7013))
- Add project docs for `project.scripts` ([7010](https://github.com/astral-sh/uv/pull/7010))
- Fix available Docker image tag rendering and shorten list ([7017](https://github.com/astral-sh/uv/pull/7017))
- Touchup to the project environment config section ([7038](https://github.com/astral-sh/uv/pull/7038))
- Clarify precedence of `uv.toml` ([6986](https://github.com/astral-sh/uv/pull/6986))
- Fix available Docker tags for `-slim` variants ([7041](https://github.com/astral-sh/uv/pull/7041))

0.4.4

Enhancements

- Allow customizing the project environment path with `UV_PROJECT_ENVIRONMENT` ([6834](https://github.com/astral-sh/uv/pull/6834))
- Warn when `VIRTUAL_ENV` is set but will not be respected in project commands ([6864](https://github.com/astral-sh/uv/pull/6864))
- Add `--no-hashes` to `uv export` ([6954](https://github.com/astral-sh/uv/pull/6954))
- Make HTTP headers title case for backward compatibility ([6887](https://github.com/astral-sh/uv/pull/6887))
- Pin `.python-version` in `uv init` ([6869](https://github.com/astral-sh/uv/pull/6869))
- Support `file://` URLs for `UV_PYTHON_INSTALL_MIRROR` ([6950](https://github.com/astral-sh/uv/pull/6950))
- Introduce more docker tags for uv ([6053](https://github.com/astral-sh/uv/pull/6053))

Bug fixes

- Avoid canonicalizing the cache directory ([6949](https://github.com/astral-sh/uv/pull/6949))
- Show all PyPy versions in `uv python list --all-versions` ([6917](https://github.com/astral-sh/uv/pull/6917))
- Avoid incorrect `requires-python` marker simplifications ([6268](https://github.com/astral-sh/uv/pull/6268))

Documentation

- Add documentation for `UV_PROJECT_ENVIRONMENT` ([6987](https://github.com/astral-sh/uv/pull/6987))
- Add optional dependencies section to the lockfile document ([6982](https://github.com/astral-sh/uv/pull/6982))
- Document use of the `file://` scheme in Python installation mirrors ([6984](https://github.com/astral-sh/uv/pull/6984))
- Fix outdated references to the help menu documentation in the first steps page ([6980](https://github.com/astral-sh/uv/pull/6980))
- Show env option in CLI reference documentation ([6863](https://github.com/astral-sh/uv/pull/6863))
- Add bind mount example to `docker.md` ([6921](https://github.com/astral-sh/uv/pull/6921))

0.4.3

Enhancements

- Show build backend output when `--verbose` is provided ([6903](https://github.com/astral-sh/uv/pull/6903))
- Allow `uv sync --frozen --package` without copying member `pyproject.toml` ([6943](https://github.com/astral-sh/uv/pull/6943))

Bug fixes

- Avoid panic with missing temporary directory ([6929](https://github.com/astral-sh/uv/pull/6929))
- Avoid updating incorrect dependencies for sorted `uv add` ([6939](https://github.com/astral-sh/uv/pull/6939))
- Use lower-bound semantics for all Python compatibility comparisons ([6882](https://github.com/astral-sh/uv/pull/6882))

0.4.2

Enhancements

- Adding support for `.pyc` files in `uv run` ([6886](https://github.com/astral-sh/uv/pull/6886))
- Treat missing `top_level.txt` as non-fatal ([6881](https://github.com/astral-sh/uv/pull/6881))

Bug fixes

- Fix `is_disjoint` check for supported environments ([6902](https://github.com/astral-sh/uv/pull/6902))
- Remove dangling archives in `uv cache clean ${package}` ([6915](https://github.com/astral-sh/uv/pull/6915))
- Error when discovered Python is incompatible with `--isolated` workspace ([6885](https://github.com/astral-sh/uv/pull/6885))
- Warn when discovered Python is incompatible with PEP 723 script ([6884](https://github.com/astral-sh/uv/pull/6884))

0.4.1

Enhancements

- Add `uv export --format requirements-txt` ([6778](https://github.com/astral-sh/uv/pull/6778))
- Allow `` references in `uv tool install --from` ([6842](https://github.com/astral-sh/uv/pull/6842))
- Normalize version specifiers by sorting ([6333](https://github.com/astral-sh/uv/pull/6333))
- Respect the user's upper-bound in `requires-python` ([6824](https://github.com/astral-sh/uv/pull/6824))
- Use Windows registry to discover Python on Windows directly ([6761](https://github.com/astral-sh/uv/pull/6761))
- Hint at `--no-workspace` in `uv init` failures ([6815](https://github.com/astral-sh/uv/pull/6815))
- Update to last PyPy releases ([6784](https://github.com/astral-sh/uv/pull/6784))

Bug fixes

- Avoid deadlocks when multiple uv processes lock resources ([6790](https://github.com/astral-sh/uv/pull/6790))
- Expand tildes when matching against `PATH` ([6829](https://github.com/astral-sh/uv/pull/6829))
- Fix `uv init --no-project` alias ([6837](https://github.com/astral-sh/uv/pull/6837))
- Ignore pre-release segments when discovering via `requires-python` ([6813](https://github.com/astral-sh/uv/pull/6813))
- Support inline optional tables in `uv add` and `uv remove` ([6787](https://github.com/astral-sh/uv/pull/6787))
- Update default `hello.py` to pass `ruff format` ([6811](https://github.com/astral-sh/uv/pull/6811))
- Avoid stripping root for user path display ([6865](https://github.com/astral-sh/uv/pull/6865))
- Error when user-provided environments are disjoint with Python ([6841](https://github.com/astral-sh/uv/pull/6841))
- Retain alphabetical sorting for `pyproject.toml` in `uv add` operations ([6388](https://github.com/astral-sh/uv/pull/6388))))

Documentation

- Add a link to the multiple index docs in the alternative index guide ([6826](https://github.com/astral-sh/uv/pull/6826))
- Add docs for inline exclude newer in PEP 723 scripts ([6831](https://github.com/astral-sh/uv/pull/6831))
- Enumerate available Docker tags ([6768](https://github.com/astral-sh/uv/pull/6768))
- Omit `[pip]` section from configuration file docs ([6814](https://github.com/astral-sh/uv/pull/6814))
- Update `project.urls` in `pyproject.toml` ([6844](https://github.com/astral-sh/uv/pull/6844))
- Add docs for AWS CodeArtifact usage ([6816](https://github.com/astral-sh/uv/pull/6816))

Other changes

Page 5 of 26

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.