Uv

Latest version: v0.5.9

Safety actively analyzes 688917 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 22

0.2.30

Enhancements

- Infer missing `.exe` in Windows Python discovery ([5456](https://github.com/astral-sh/uv/pull/5456))
- Make `--reinstall` imply `--refresh` ([5425](https://github.com/astral-sh/uv/pull/5425))

CLI

- Add `--no-config` to replace `--isolated` ([5463](https://github.com/astral-sh/uv/pull/5463))
- Cache metadata for source tree dependencies ([5423](https://github.com/astral-sh/uv/pull/5423))

Bug fixes

- Avoid canonicalizing executables on Windows ([5446](https://github.com/astral-sh/uv/pull/5446))
- Set standard permissions for temporary files ([5457](https://github.com/astral-sh/uv/pull/5457))

Preview features

- Allow distributions to be absent in deserialization ([5453](https://github.com/astral-sh/uv/pull/5453))
- Merge identical forks ([5405](https://github.com/astral-sh/uv/pull/5405))
- Minor consistency fixes for code blocks ([5437](https://github.com/astral-sh/uv/pull/5437))
- Prefer "lockfile" to "lock file" ([5427](https://github.com/astral-sh/uv/pull/5427))
- Update documentation sections ([5452](https://github.com/astral-sh/uv/pull/5452))
- Use `sitecustomize.py` to implement environment layering ([5462](https://github.com/astral-sh/uv/pull/5462))
- Use stripped variants by default in Python install ([5451](https://github.com/astral-sh/uv/pull/5451))

0.2.29

Enhancements

- Add `--ci` mode to `uv cache prune` ([5391](https://github.com/astral-sh/uv/pull/5391))
- Display Python installation key for discovered interpreters ([5365](https://github.com/astral-sh/uv/pull/5365))

Bug fixes

- Allow symlinks to files in scripts directory ([5380](https://github.com/astral-sh/uv/pull/5380))
- Always accept already-installed pre-releases ([5419](https://github.com/astral-sh/uv/pull/5419))
- Validate successful metadata fetch for direct dependencies ([5392](https://github.com/astral-sh/uv/pull/5392))

Documentation

- Add warning to `--link-mode=symlink` documentation ([5387](https://github.com/astral-sh/uv/pull/5387))

Preview features

- Add PyPy finder ([5337](https://github.com/astral-sh/uv/pull/5337))
- Add `uv init --virtual` ([5396](https://github.com/astral-sh/uv/pull/5396))
- Allow `uv init` in unmanaged projects ([5372](https://github.com/astral-sh/uv/pull/5372))
- Allow comments in `.python-version[s]` ([5350](https://github.com/astral-sh/uv/pull/5350))
- Always show lock updates in `uv lock` ([5413](https://github.com/astral-sh/uv/pull/5413))
- Improvements to the docs content ([5426](https://github.com/astral-sh/uv/pull/5426))
- Fix blurring from nav title box shadow ([5374](https://github.com/astral-sh/uv/pull/5374))
- Ignore Ctrl-C signals in `uv run` and `uv tool run` ([5395](https://github.com/astral-sh/uv/pull/5395))
- Ignore hidden directories in workspace discovery ([5408](https://github.com/astral-sh/uv/pull/5408))
- Increase padding between each nav section ([5373](https://github.com/astral-sh/uv/pull/5373))
- Mark `--raw-sources` as conflicting with sources-specific
arguments ([5378](https://github.com/astral-sh/uv/pull/5378))
- Omit empty uv.tool.dev-dependencies on `uv init` ([5406](https://github.com/astral-sh/uv/pull/5406))
- Omit interpreter path during `uv venv` with managed Python ([5311](https://github.com/astral-sh/uv/pull/5311))
- Omit interpreter path from output when using managed Python ([5313](https://github.com/astral-sh/uv/pull/5313))
- Reject Git CLI arguments with non-Git sources ([5377](https://github.com/astral-sh/uv/pull/5377))
- Retain dependency specifier in `uv add` with sources ([5370](https://github.com/astral-sh/uv/pull/5370))
- Show additions and removals in `uv lock` updates ([5410](https://github.com/astral-sh/uv/pull/5410))
- Skip 'Nothing to uninstall' message when removing dangling
environments ([5382](https://github.com/astral-sh/uv/pull/5382))
- Support `requirements.txt` files in `uv tool install`
and `uv tool run` ([5362](https://github.com/astral-sh/uv/pull/5362))
- Use env variables in Github Actions docs ([5411](https://github.com/astral-sh/uv/pull/5411))
- Use logo in documentation ([5421](https://github.com/astral-sh/uv/pull/5421))
- Warn on `requirements.txt`-provided arguments in `uv run` et al ([5364](https://github.com/astral-sh/uv/pull/5364))

0.2.28

Enhancements

- Output stable ordering to `requirements.txt` in universal mode ([5334](https://github.com/astral-sh/uv/pull/5334))
- Allow symlinks with `--find-links` ([5323](https://github.com/astral-sh/uv/pull/5323))
- Add support for variations of `pythonw.exe` ([5259](https://github.com/astral-sh/uv/pull/5259))

CLI

- Stylize `Requires-Python` consistently in CLI output ([5304](https://github.com/astral-sh/uv/pull/5304))
- Add `--show-version-specifiers` to `tree` ([5240](https://github.com/astral-sh/uv/pull/5240))

Performance

- Avoid always rebuilding dynamic metadata ([5206](https://github.com/astral-sh/uv/pull/5206))
- Avoid URL parsing when deserializing wheels ([5235](https://github.com/astral-sh/uv/pull/5235))

Bug fixes

- Avoid cache prune failure due to removed interpreter ([5286](https://github.com/astral-sh/uv/pull/5286))
- Avoid including empty extras in resolution ([5306](https://github.com/astral-sh/uv/pull/5306))
- If multiple indices contain the same version, use the first index ([5288](https://github.com/astral-sh/uv/pull/5288))
- Include URLs on graph edges ([5312](https://github.com/astral-sh/uv/pull/5312))
- Match wheel tags against `Requires-Python` major-minor ([5289](https://github.com/astral-sh/uv/pull/5289))
- Remove Simple API cache files for alternative indexes
in `cache clean` ([5353](https://github.com/astral-sh/uv/pull/5353))
- Remove extraneous `are` from wheel tag error messages ([5303](https://github.com/astral-sh/uv/pull/5303))
- Allow conflicting pre-release strategies when forking ([5150](https://github.com/astral-sh/uv/pull/5150))
- Use tag error rather than requires-python error for ABI filtering ([5296](https://github.com/astral-sh/uv/pull/5296))

Preview features

- Add `requires-python` to `uv init` ([5322](https://github.com/astral-sh/uv/pull/5322))
- Add `uv add --no-editable` ([5246](https://github.com/astral-sh/uv/pull/5246))
- Add constraint dependencies to pyproject.toml ([5248](https://github.com/astral-sh/uv/pull/5248))
- Add support for requirements files in `uv run` ([4973](https://github.com/astral-sh/uv/pull/4973))
- Avoid redundant members update in `uv init` ([5321](https://github.com/astral-sh/uv/pull/5321))
- Create member `pyproject.toml` prior to workspace discovery ([5317](https://github.com/astral-sh/uv/pull/5317))
- Fix `uv init .` ([5330](https://github.com/astral-sh/uv/pull/5330))
- Fix `uv init` creation of a sub-package by path ([5247](https://github.com/astral-sh/uv/pull/5247))
- Fix colors in `uv tool run` suggestion ([5267](https://github.com/astral-sh/uv/pull/5267))
- Improve consistency of `tool` CLI ([5326](https://github.com/astral-sh/uv/pull/5326))
- Make tool install robust to malformed receipts ([5305](https://github.com/astral-sh/uv/pull/5305))
- Reduce spacing between nav items ([5310](https://github.com/astral-sh/uv/pull/5310))
- Respect exclusions in `uv init` ([5318](https://github.com/astral-sh/uv/pull/5318))
- Store resolution options in lockfile ([5264](https://github.com/astral-sh/uv/pull/5264))
- Use backticks in project init message ([5302](https://github.com/astral-sh/uv/pull/5302))
- Ignores workspace when `--isolated` flag is used in `uv init` ([5290](https://github.com/astral-sh/uv/pull/5290))
- Normalize directory names in `uv init` ([5292](https://github.com/astral-sh/uv/pull/5292))
- Avoid project discovery in `uv python pin` if `--isolated` is
provided ([5354](https://github.com/astral-sh/uv/pull/5354))
- Show symbolic links in `uv python list` ([5343](https://github.com/astral-sh/uv/pull/5343))
- Discover workspace from target path in `uv init` ([5250](https://github.com/astral-sh/uv/pull/5250))
- Do not create nested workspace in `uv init` ([5293](https://github.com/astral-sh/uv/pull/5293))

0.2.27

Enhancements

- Add GraalPy support ([5141](https://github.com/astral-sh/uv/pull/5141))
- Add a `--verify-hashes` hash-checking mode ([4007](https://github.com/astral-sh/uv/pull/4007))
- Discover all `python3.x` executables in the `PATH` ([5148](https://github.com/astral-sh/uv/pull/5148))
- Support `--link-mode=symlink` ([5208](https://github.com/astral-sh/uv/pull/5208))
- Warn about unconstrained direct deps in lowest resolution ([5142](https://github.com/astral-sh/uv/pull/5142))
- Log origin of version selection ([5186](https://github.com/astral-sh/uv/pull/5186))
- Key hash policy on version, rather than package ([5169](https://github.com/astral-sh/uv/pull/5169))

CLI

- Make missing project table a tracing warning ([5194](https://github.com/astral-sh/uv/pull/5194))
- Remove trailing period from user-facing messages ([5218](https://github.com/astral-sh/uv/pull/5218))

Bug fixes

- Make entrypoint writes atomic to avoid overwriting symlinks ([5165](https://github.com/astral-sh/uv/pull/5165))
- Use `which`-retrieved path directly when spawning pager ([5198](https://github.com/astral-sh/uv/pull/5198))
- Don't apply irrelevant constraints when validating site-packages ([5231](https://github.com/astral-sh/uv/pull/5231))
- Respect local versions for all user requirements ([5232](https://github.com/astral-sh/uv/pull/5232))

Preview features

- Add `--frozen` to `uv add`, `uv remove`, and `uv tree` ([5214](https://github.com/astral-sh/uv/pull/5214))
- Add `--locked` and `--frozen` to `uv run` CLI ([5196](https://github.com/astral-sh/uv/pull/5196))
- Add `uv tool dir --bin` to show executable directory ([5160](https://github.com/astral-sh/uv/pull/5160))
- Add `uv tool list --show-paths` to show install paths ([5164](https://github.com/astral-sh/uv/pull/5164))
- Add color to `python pin` CLI ([5215](https://github.com/astral-sh/uv/pull/5215))
- Added a way to inspect installation scripts on Powershell(
Windows) ([5157](https://github.com/astral-sh/uv/pull/5157))
- Avoid TOCTOU errors in `.python-version` reads ([5223](https://github.com/astral-sh/uv/pull/5223))
- Only show the Python installed on the system if `--python-preference only-system` is
specified ([5219](https://github.com/astral-sh/uv/pull/5219))
- Check `python pin` compatibility with `Requires-Python` ([4989](https://github.com/astral-sh/uv/pull/4989))
- Enforce hashes in lockfile install ([5170](https://github.com/astral-sh/uv/pull/5170))
- Fix reference to `uv run` in `uv tree` CLI ([5216](https://github.com/astral-sh/uv/pull/5216))
- Handle universal vs. fork markers with `ResolverMarkers` ([5099](https://github.com/astral-sh/uv/pull/5099))
- Implement `uv init` ([4791](https://github.com/astral-sh/uv/pull/4791))
- Make Python install robust to individual failures ([5199](https://github.com/astral-sh/uv/pull/5199))
- Make registry hashes optional in the lockfile ([5166](https://github.com/astral-sh/uv/pull/5166))
- Merge extras in lockfile ([5181](https://github.com/astral-sh/uv/pull/5181))
- Move integration guide docs and edit Azure integration guide ([5117](https://github.com/astral-sh/uv/pull/5117))
- Process completed Python installs and uninstalls as a stream ([5203](https://github.com/astral-sh/uv/pull/5203))
- Skip invalid tools in `uv tool list` ([5156](https://github.com/astral-sh/uv/pull/5156))
- Touch-ups to tools guide ([5202](https://github.com/astral-sh/uv/pull/5202))
- Use +- install output for Python versions ([5201](https://github.com/astral-sh/uv/pull/5201))
- Use display representation for download error ([5173](https://github.com/astral-sh/uv/pull/5173))
- Use specialized error message for invalid Python install / uninstall
requests ([5171](https://github.com/astral-sh/uv/pull/5171))
- Use the strongest hash in the lockfile ([5167](https://github.com/astral-sh/uv/pull/5167))
- Write project guide ([5195](https://github.com/astral-sh/uv/pull/5195))
- Write tools concept document ([5207](https://github.com/astral-sh/uv/pull/5207))
- Fix reference to `projects.md` ([5154](https://github.com/astral-sh/uv/pull/5154))
- Fixes to the settings documentation ([5177](https://github.com/astral-sh/uv/pull/5177))
- Set exact version specifiers when resolving from lockfile ([5193](https://github.com/astral-sh/uv/pull/5193))

0.2.26

CLI

- Add `--no-progress` global option to hide all progress animations ([5098](https://github.com/astral-sh/uv/pull/5098))

Performance

- Cache downloaded wheel when range requests aren't supported ([5089](https://github.com/astral-sh/uv/pull/5089))

Bug fixes

- Download wheel to disk when streaming unzip failed with HTTP streaming
error ([5094](https://github.com/astral-sh/uv/pull/5094))
- Filter out invalid wheels based on `requires-python` ([5084](https://github.com/astral-sh/uv/pull/5084))
- Filter out none ABI wheels with mismatched Python versions ([5087](https://github.com/astral-sh/uv/pull/5087))
- Lock Git cache on resolve ([5051](https://github.com/astral-sh/uv/pull/5051))
- Change order of `pip compile` command checks to handle exact argument
first ([5111](https://github.com/astral-sh/uv/pull/5111))

Documentation

- Document that `--universal` implies `--no-strip-markers` ([5121](https://github.com/astral-sh/uv/pull/5121))

Preview features

- Indicate that `uv lock --upgrade` has updated the lock file ([5110](https://github.com/astral-sh/uv/pull/5110))
- Sort managed Python installations by version ([5140](https://github.com/astral-sh/uv/pull/5140))
- Support workspace to workspace path dependencies ([4833](https://github.com/astral-sh/uv/pull/4833))
- Allow conflicting locals when forking ([5104](https://github.com/astral-sh/uv/pull/5104))
- Rework `pyproject.toml` reformatting to respect original
indentation ([5075](https://github.com/astral-sh/uv/pull/5075))

0.2.25

Enhancements

- Include PyPy-specific executables when creating virtual environments
with `uv venv` ([5047](https://github.com/astral-sh/uv/pull/5047))
- Add a custom error message for `--no-build-isolation` `torch`
dependencies ([5041](https://github.com/astral-sh/uv/pull/5041))
- Improve missing `wheel` error message with `--no-build-isolation` ([4964](https://github.com/astral-sh/uv/pull/4964))

CLI

- Add `--no-pager` option in `help` command ([5007](https://github.com/astral-sh/uv/pull/5007))
- Unhide `--isolated` global argument ([5005](https://github.com/astral-sh/uv/pull/5005))
- Warn when unused `pyproject.toml` configuration is detected ([5025](https://github.com/astral-sh/uv/pull/5025))

Bug fixes

- Fall back to streaming wheel when `Content-Length` header is
absent ([5000](https://github.com/astral-sh/uv/pull/5000))
- Fix substring marker expression disjointness checks ([4998](https://github.com/astral-sh/uv/pull/4998))
- Lock directories to synchronize wheel-install copies ([4978](https://github.com/astral-sh/uv/pull/4978))
- Normalize out complementary == or != markers ([5050](https://github.com/astral-sh/uv/pull/5050))
- Retry on permission errors when persisting extracted source distributions to the
cache ([5076](https://github.com/astral-sh/uv/pull/5076))
- Set absolute URLs prior to uploading to PyPI ([5038](https://github.com/astral-sh/uv/pull/5038))
- Exclude `--upgrade-package` from the `pip compile` header ([5032](https://github.com/astral-sh/uv/pull/5032))
- Exclude `--upgrade-package` when option and value are passed as a single
argument ([5033](https://github.com/astral-sh/uv/pull/5033))
- Add split to cover marker universe when existing splits are
incomplete ([5074](https://github.com/astral-sh/uv/pull/5074))
- Use correct `pyproject.toml` path in warnings ([5069](https://github.com/astral-sh/uv/pull/5069))

Documentation

- Fix `CONTRIBUTING.md` instructions to install multiple Python
versions ([5015](https://github.com/astral-sh/uv/pull/5015))
- Use versioned badges when uploading to PyPI ([5039](https://github.com/astral-sh/uv/pull/5039))

Preview features

- Add documentation for running scripts ([4968](https://github.com/astral-sh/uv/pull/4968))
- Add guide for tools ([4982](https://github.com/astral-sh/uv/pull/4982))
- Allow URL dependencies in tool run `--from` ([5002](https://github.com/astral-sh/uv/pull/5002))
- Add guide for authenticating to Azure Artifacts ([4857](https://github.com/astral-sh/uv/pull/4857))
- Improve rc file detection based on rustup ([5026](https://github.com/astral-sh/uv/pull/5026))
- Rename `python install --force` parameter to `--reinstall` ([4999](https://github.com/astral-sh/uv/pull/4999))
- Use lockfile to prefill resolver index ([4495](https://github.com/astral-sh/uv/pull/4495))
- `uv tool install` hint the correct when the executable is
available ([5019](https://github.com/astral-sh/uv/pull/5019))
- `uv tool run` error messages references `uvx` when appropriate ([5014](https://github.com/astral-sh/uv/pull/5014))
- `uvx` warns when requested executable is not provided by the
package [5071](https://github.com/astral-sh/uv/pull/5071))
- Exit with zero when `uv tool install` request is already
satisfied ([4986](https://github.com/astral-sh/uv/pull/4986))
- Respect the libc of the execution environment
with `uv python list` ([5036](https://github.com/astral-sh/uv/pull/5036))
- Update standalone Pythons to include 3.12.4 ([5042](https://github.com/astral-sh/uv/pull/5042))
- `uv tool run` suggest valid commands when command is not found ([4997](https://github.com/astral-sh/uv/pull/4997))
- Add Windows path updates for `uv tool` ([5029](https://github.com/astral-sh/uv/pull/5029))
- Add a command to append uv's binary directory to PATH ([4975](https://github.com/astral-sh/uv/pull/4975))

Page 10 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.