Uv

Latest version: v0.5.9

Safety actively analyzes 688931 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 16 of 22

0.1.40

Not secure
Enhancements

- Add `--allow-existing` to overwrite existing virtualenv ([2548](https://github.com/astral-sh/uv/pull/2548))
- Respect and enable uninstalls of legacy editables (`.egg-link`) ([3415](https://github.com/astral-sh/uv/pull/3415))
- Respect and enable uninstalls of existing `.egg-info` packages ([3380](https://github.com/astral-sh/uv/pull/3380))

CLI

- Accept `--no-upgrade`, `--no-refresh`, etc. on the CLI ([3328](https://github.com/astral-sh/uv/pull/3328))

Configuration

- Expose `UV_NO_BUILD_ISOLATION` as environment variable ([3318](https://github.com/astral-sh/uv/pull/3318))
- Expose `UV_PYTHON` as an environment variable ([3284](https://github.com/astral-sh/uv/pull/3284))
- Expose `UV_LINK_MODE` as environment variable ([3315](https://github.com/astral-sh/uv/pull/3315))
- Add `UV_CUSTOM_COMPILE_COMMAND` to environment variable docs ([3382](https://github.com/astral-sh/uv/pull/3382))

Bug fixes

- Ignore 401 HTTP responses with multiple indexes ([3292](https://github.com/astral-sh/uv/pull/3292))
- Avoid panic for file URLs ([3306](https://github.com/astral-sh/uv/pull/3306))
- Quote version parse errors consistently ([3325](https://github.com/astral-sh/uv/pull/3325))
- Detect current environment when `uv` is invoked from within a
virtualenv ([3379](https://github.com/astral-sh/uv/pull/3379))
- Unset target when creating virtual environments ([3362](https://github.com/astral-sh/uv/pull/3362))
- Update activation scripts from virtualenv ([3376](https://github.com/astral-sh/uv/pull/3376))
- Use canonical URLs in satisfaction check ([3373](https://github.com/astral-sh/uv/pull/3373))

Preview features

- Add basic `tool.uv.sources` support ([3263](https://github.com/astral-sh/uv/pull/3263))
- Improve non-git error message ([3403](https://github.com/astral-sh/uv/pull/3403))
- Preserve given for `tool.uv.sources` paths ([3412](https://github.com/astral-sh/uv/pull/3412))
- Restore verbatim in error message ([3402](https://github.com/astral-sh/uv/pull/3402))
- Use preview mode for tool.uv.sources ([3277](https://github.com/astral-sh/uv/pull/3277))
- Use top-level `--isolated` for `uv run` ([3431](https://github.com/astral-sh/uv/pull/3431))
- add basic "install from lock file" operation ([3340](https://github.com/astral-sh/uv/pull/3340))
- uv-resolver: add initial version of universal lock file format ([3314](https://github.com/astral-sh/uv/pull/3314))

0.1.39

Not secure
Enhancements

- Add `--target` support to `sync` and `install` ([3257](https://github.com/astral-sh/uv/pull/3257))
- Implement `--index-strategy unsafe-best-match` ([3138](https://github.com/astral-sh/uv/pull/3138))

Bug fixes

- Fix `platform_machine` tag for `--python-platform` on macOS ARM ([3267](https://github.com/astral-sh/uv/pull/3267))

Release

- Build a separate ARM wheel for macOS ([3268](https://github.com/astral-sh/uv/pull/3268))
- Use `macos-12` to build release wheels ([3264](https://github.com/astral-sh/uv/pull/3264))

0.1.38

Not secure
Enhancements

- Add alternate manylinux targets to `--python-platform` ([3229](https://github.com/astral-sh/uv/pull/3229))
- An enum and backticks for lookahead error ([3216](https://github.com/astral-sh/uv/pull/3216))
- Upgrade macOS target to `12.0` ([3228](https://github.com/astral-sh/uv/pull/3228))
- Add keyring logs for URL and host fetches ([3212](https://github.com/astral-sh/uv/pull/3212))
- Combine unresolvable error dependency clauses with the same root ([3225](https://github.com/astral-sh/uv/pull/3225))

CLI

- Gave a better name to the `--color` placeholder ([3226](https://github.com/astral-sh/uv/pull/3226))
- Warn when an unsupported Python version is encountered ([3250](https://github.com/astral-sh/uv/pull/3250))

Configuration

- Use directory instead of file when searching for `uv.toml` file ([3203](https://github.com/astral-sh/uv/pull/3203))

Performance

- Only perform fetches of credentials for a realm and username combination
once ([3237](https://github.com/astral-sh/uv/pull/3237))
- Unroll self-dependencies via extras ([3230](https://github.com/astral-sh/uv/pull/3230))
- Use read-write locks instead of mutexes in authentication
handling ([3210](https://github.com/astral-sh/uv/pull/3210))

Bug fixes

- Avoid removing quotes from requirements markers ([3214](https://github.com/astral-sh/uv/pull/3214))
- Avoid adding extras when expanding constraints ([3232](https://github.com/astral-sh/uv/pull/3232))
- Reinstall package when editable label is removed ([3219](https://github.com/astral-sh/uv/pull/3219))

Documentation

- Add `RAYON_NUM_THREADS` to environment variable docs ([3223](https://github.com/astral-sh/uv/pull/3223))
- Document support for HTTP proxy variables ([3247](https://github.com/astral-sh/uv/pull/3247))
- Fix documentation for `--python-platform` ([3220](https://github.com/astral-sh/uv/pull/3220))

0.1.37

Not secure
Enhancements

- Change default HTTP read timeout to 30s ([3182](https://github.com/astral-sh/uv/pull/3182))
- Add `--python-platform` to `sync` and `install` commands ([3154](https://github.com/astral-sh/uv/pull/3154))
- Add ticks around error messages more consistently ([3004](https://github.com/astral-sh/uv/pull/3004))
- Fix Docker publish permissions in release pipeline ([3195](https://github.com/astral-sh/uv/pull/3195))
- Improve tracing for keyring provider ([3207](https://github.com/astral-sh/uv/pull/3207))

Performance

- Update keyring provider to be async ([3089](https://github.com/astral-sh/uv/pull/3089))

Bug fixes

- Fix fetch of credentials when cache is seeded with username ([3206](https://github.com/astral-sh/uv/pull/3206))

Documentation

- Improve `--python-platform` documentation ([3202](https://github.com/astral-sh/uv/pull/3202))

0.1.36

Not secure
Enhancements

- Add support for embedded Python on Windows ([3161](https://github.com/astral-sh/uv/pull/3161))
- Add Docker image publishing to release pipeline ([3155](https://github.com/astral-sh/uv/pull/3155))

Configuration

- Add `UV_CONSTRAINT` environment variable to provide value
for `--constraint` ([3162](https://github.com/astral-sh/uv/pull/3162))

Bug fixes

- Avoid waiting for metadata for `--no-deps` editables ([3188](https://github.com/astral-sh/uv/pull/3188))
- Fix `venvlauncher.exe` reference in venv creation ([3160](https://github.com/astral-sh/uv/pull/3160))
- Fix authentication for URLs with a shared realm ([3130](https://github.com/astral-sh/uv/pull/3130))
- Restrict observed requirements to direct when `--no-deps` is
specified ([3191](https://github.com/astral-sh/uv/pull/3191))

Documentation

- Add a versioning policy to the README ([3151](https://github.com/astral-sh/uv/pull/3151))

0.1.35

Not secure
Enhancements

- Add a `--python-platform` argument to enable resolving against a target
platform ([3111](https://github.com/astral-sh/uv/pull/3111))
- Enforce HTTP timeouts on a per-read (rather than per-request)
basis ([3144](https://github.com/astral-sh/uv/pull/3144))

Bug fixes

- Avoid preferring constrained over unconstrained packages ([3148](https://github.com/astral-sh/uv/pull/3148))
- Allow `UV_SYSTEM_PYTHON=1` in addition to `UV_SYSTEM_PYTHON=true` ([3136](https://github.com/astral-sh/uv/pull/3136))

Page 16 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.