Uv

Latest version: v0.5.9

Safety actively analyzes 688924 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 12 of 22

0.2.18

CLI

- Make `--universal` and `--python-platform` mutually exclusive ([4598](https://github.com/astral-sh/uv/pull/4598))
- Add `--depth` and `--prune` support to `pip tree` ([4440](https://github.com/astral-sh/uv/pull/4440))

Bug fixes

- Handle cycles when propagating markers ([4595](https://github.com/astral-sh/uv/pull/4595))
- Ignore `py` not found errors during interpreter discovery ([4620](https://github.com/astral-sh/uv/pull/4620))
- Merge markers when applying constraints ([4648](https://github.com/astral-sh/uv/pull/4648))
- Retry on spurious failures when caching built wheels ([4605](https://github.com/astral-sh/uv/pull/4605))
- Sort indexes during graph edge removal ([4649](https://github.com/astral-sh/uv/pull/4649))
- Treat Python version as a lower bound in `--universal` ([4597](https://github.com/astral-sh/uv/pull/4597))
- Fix the incorrect handling of markers in `pip tree` ([4611](https://github.com/astral-sh/uv/pull/4611))
- Improve toolchain and environment missing error messages ([4596](https://github.com/astral-sh/uv/pull/4596))

Documentation

- Explicitly mention use of seed packages during `uv venv --seed` ([4588](https://github.com/astral-sh/uv/pull/4588))

Preview features

- Add `uv tool list` ([4630](https://github.com/astral-sh/uv/pull/4630))
- Add `uv tool uninstall` ([4641](https://github.com/astral-sh/uv/pull/4641))
- Add support for specifying `nameversion` in `uv tool run` ([4572](https://github.com/astral-sh/uv/pull/4572))
- Allow `uv add` to specify optional dependency groups ([4607](https://github.com/astral-sh/uv/pull/4607))
- Allow the package spec to be passed positionally in `uv tool install` ([4564](https://github.com/astral-sh/uv/pull/4564))
- Avoid infinite loop for cyclic installs ([4633](https://github.com/astral-sh/uv/pull/4633))
- Indent wheels like dependencies in the lockfile ([4582](https://github.com/astral-sh/uv/pull/4582))
- Sync all packages in a virtual workspace ([4636](https://github.com/astral-sh/uv/pull/4636))
- Use inline table for dependencies in lockfile ([4581](https://github.com/astral-sh/uv/pull/4581))
- Make `source` field in lock file more structured ([4627](https://github.com/astral-sh/uv/pull/4627))

0.2.17

Bug fixes

- Avoid enforcing extra-only constraints ([4570](https://github.com/astral-sh/uv/pull/4570))

Preview features

- Add `--extra` to `uv add` and enable fine-grained updates ([4566](https://github.com/astral-sh/uv/pull/4566))

0.2.16

Enhancements

- Add a universal resolution mode to `uv pip compile`
with `--universal` ([4505](https://github.com/astral-sh/uv/pull/4505))
- Add support for `--no-strip-markers` in `uv pip compile` output ([4503](https://github.com/astral-sh/uv/pull/4503))
- Add `--no-dedupe` support to `uv pip tree` ([4449](https://github.com/astral-sh/uv/pull/4449))

Bug fixes

- Enable more precise environment locking with `--prefix` ([4506](https://github.com/astral-sh/uv/pull/4506))
- Allow local index references in `requirements.txt` files ([4525](https://github.com/astral-sh/uv/pull/4525))
- Allow non-`file://` paths to serve as `--index-url` values ([4524](https://github.com/astral-sh/uv/pull/4524))
- Make `.egg-info` filename parsing spec compliant ([4533](https://github.com/astral-sh/uv/pull/4533))
- Gracefully handle non-existent packages in local indexes ([4545](https://github.com/astral-sh/uv/pull/4545))
- Read content length from response rather than request ([4488](https://github.com/astral-sh/uv/pull/4488))
- Read persistent configuration from non-workspace `pyproject.toml` ([4526](https://github.com/astral-sh/uv/pull/4526))
- Avoid panic for invalid, non-base index URLs ([4527](https://github.com/astral-sh/uv/pull/4527))

Performance

- Skip submodule update for fresh clones ([4482](https://github.com/astral-sh/uv/pull/4482))
- Use shared client in Git fetch implementation ([4487](https://github.com/astral-sh/uv/pull/4487))

Preview features

- Add `--package` argument to `uv add` and `uv remove` ([4556](https://github.com/astral-sh/uv/pull/4556))
- Add `uv tool install` ([4492](https://github.com/astral-sh/uv/pull/4492))
- Fallback to interpreter discovery in `uv run` ([4549](https://github.com/astral-sh/uv/pull/4549))
- Make `uv.sources` without `--preview` non-fatal ([4558](https://github.com/astral-sh/uv/pull/4558))
- Remove non-existent extras from lockfile ([4479](https://github.com/astral-sh/uv/pull/4479))
- Support conflicting URL in separate forks ([4435](https://github.com/astral-sh/uv/pull/4435))
- Automatically detect workspace packages in `uv add` ([4557](https://github.com/astral-sh/uv/pull/4557))
- Omit `distribution.sdist` from lockfile when it is redundant ([4528](https://github.com/astral-sh/uv/pull/4528))
- Remove `source` and `version` from lock file when unambiguous ([4513](https://github.com/astral-sh/uv/pull/4513))
- Allow `uv lock` to read overrides from `tool.uv` (4108) ([4369](https://github.com/astral-sh/uv/pull/4369))

0.2.15

Enhancements

- Add `--emit-build-options` flag to `uv pip compile` interface ([4463](https://github.com/astral-sh/uv/pull/4463))
- Add `pythonw` support for gui scripts on Windows ([4409](https://github.com/astral-sh/uv/pull/4409))
- Add `uv pip tree` ([3859](https://github.com/astral-sh/uv/pull/3859))

CLI

- Adjust the docs for the pip CLI commands ([4445](https://github.com/astral-sh/uv/pull/4445))
- Fix casing of `--no-compile` alias ([4453](https://github.com/astral-sh/uv/pull/4453))

Bug fixes

- Fix ordering of prefer-system toolchain preference ([4441](https://github.com/astral-sh/uv/pull/4441))
- Respect index strategy in source distribution builds ([4468](https://github.com/astral-sh/uv/pull/4468))

Documentation

- Add documentation for using uv in a Docker image ([4433](https://github.com/astral-sh/uv/pull/4433))

0.2.14

Enhancements

- Support toolchain requests with platform-tag style Python implementations and
version ([4407](https://github.com/astral-sh/uv/pull/4407))

CLI

- Use "Prepared" instead of "Downloaded" in logs ([4394](https://github.com/astral-sh/uv/pull/4394))

Bug fixes

- Treat mismatched directory and file urls as unsatisfied
requirements ([4393](https://github.com/astral-sh/uv/pull/4393))

Preview features

- Expose `toolchain-preference` as a CLI and configuration file
option ([4424](https://github.com/astral-sh/uv/pull/4424))
- Improve handling of command arguments in `uv run`
and `uv tool run` ([4404](https://github.com/astral-sh/uv/pull/4404))
- Add `tool.uv.sources` support for `uv add` ([4406](https://github.com/astral-sh/uv/pull/4406))
- Use correct lock path for workspace dependencies ([4421](https://github.com/astral-sh/uv/pull/4421))
- Filter out sibling dependencies in resolver forks ([4415](https://github.com/astral-sh/uv/pull/4415))

0.2.13

Enhancements

- Add resolver tracing logs for when we filter requirements ([4381](https://github.com/astral-sh/uv/pull/4381))

Preview features

- Add `--workspace` option to `uv add` ([4362](https://github.com/astral-sh/uv/pull/4362))
- Ignore query errors during `uv toolchain list` ([4382](https://github.com/astral-sh/uv/pull/4382))
- Respect `.python-version` files and fetch managed toolchains in uv project
commands ([4361](https://github.com/astral-sh/uv/pull/4361))
- Respect `.python-version` in `uv venv --preview` ([4360](https://github.com/astral-sh/uv/pull/4360))

Page 12 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.