Uv

Latest version: v0.5.9

Safety actively analyzes 688924 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 18 of 22

0.1.28

Not secure
Enhancements

- Recursively resolve direct URL references upfront ([2684](https://github.com/astral-sh/uv/pull/2684))

Performance

- Populate the in-memory index when resolving lookahead URLs ([2761](https://github.com/astral-sh/uv/pull/2761))

Bug fixes

- Detect Fish via `FISH_VERSION` ([2781](https://github.com/astral-sh/uv/pull/2781))
- Exclude installed distributions with multiple versions from consideration in the
resolver ([2779](https://github.com/astral-sh/uv/pull/2779))
- Resolve non-deterministic behavior in preferences due to site-packages
ordering ([2780](https://github.com/astral-sh/uv/pull/2780))
- Use canonical URL to key redirect map ([2764](https://github.com/astral-sh/uv/pull/2764))
- Use distribution database and index for all pre-resolution phases ([2766](https://github.com/astral-sh/uv/pull/2766))
- Fix `uv self update` on Linux ([2783](https://github.com/astral-sh/uv/pull/2783))

0.1.27

Not secure
Enhancements

- Add `--exclude-editable` support to `pip-freeze` ([2740](https://github.com/astral-sh/uv/pull/2740))
- Add `pyproject.toml` et al to list of prompted packages ([2746](https://github.com/astral-sh/uv/pull/2746))
- Consider installed packages during resolution ([2596](https://github.com/astral-sh/uv/pull/2596))
- Recursively allow URL requirements for local dependencies ([2702](https://github.com/astral-sh/uv/pull/2702))

Configuration

- Add `UV_RESOLUTION` environment variable for `--resolution` ([2720](https://github.com/astral-sh/uv/pull/2720))

Bug fixes

- Respect overrides in all direct-dependency iterators ([2742](https://github.com/astral-sh/uv/pull/2742))
- Respect subdirectories when reading static metadata ([2728](https://github.com/astral-sh/uv/pull/2728))

0.1.26

Not secure
Bug fixes

- Bump simple cache version ([2712](https://github.com/astral-sh/uv/pull/2712))

0.1.25

Not secure
Breaking changes

- Limit overrides and constraints to `requirements.txt` format ([2632](https://github.com/astral-sh/uv/pull/2632))

Enhancements

- Accept `setup.py` and `setup.cfg` files in compile ([2634](https://github.com/astral-sh/uv/pull/2634))
- Add `--no-binary` and `--only-binary` support
to `requirements.txt` ([2680](https://github.com/astral-sh/uv/pull/2680))
- Allow pre-releases, locals, and URLs in non-editable path
requirements ([2671](https://github.com/astral-sh/uv/pull/2671))
- Use PEP 517 to extract dynamic `pyproject.toml` metadata ([2633](https://github.com/astral-sh/uv/pull/2633))
- Add `Editable project location` and `Required-by` to `pip show` ([2589](https://github.com/astral-sh/uv/pull/2589))
- Avoid `prepare_metadata_for_build_wheel` calls for Hatch packages with dynamic
dependencies ([2645](https://github.com/astral-sh/uv/pull/2645))
- Fall back to PEP 517 hooks for non-compliant PEP 621 metadata ([2662](https://github.com/astral-sh/uv/pull/2662))
- Support `file://localhost/` schemes ([2657](https://github.com/astral-sh/uv/pull/2657))
- Use normal resolver in `pip sync` ([2696](https://github.com/astral-sh/uv/pull/2696))

CLI

- Disallow `pyproject.toml` from `pip uninstall -r` ([2663](https://github.com/astral-sh/uv/pull/2663))
- Unhide `--emit-index-url` and `--emit-find-links` ([2691](https://github.com/astral-sh/uv/pull/2691))
- Use dense formatting for requirement version specifiers in
diagnostics ([2601](https://github.com/astral-sh/uv/pull/2601))

Performance

- Add an in-memory cache for Git references ([2682](https://github.com/astral-sh/uv/pull/2682))
- Do not force-recompile `.pyc` files ([2642](https://github.com/astral-sh/uv/pull/2642))
- Read package metadata from `pyproject.toml` when it is statically
defined ([2676](https://github.com/astral-sh/uv/pull/2676))

Bug fixes

- Don't error on multiple matching index URLs ([2627](https://github.com/astral-sh/uv/pull/2627))
- Extract local versions from direct URL requirements ([2624](https://github.com/astral-sh/uv/pull/2624))
- Respect `--no-index` with `--find-links` in `pip sync` ([2692](https://github.com/astral-sh/uv/pull/2692))
- Use `Scripts` folder for virtualenv activation prompt ([2690](https://github.com/astral-sh/uv/pull/2690))

0.1.24

Not secure
Breaking changes

- `uv pip uninstall` no longer supports specifying targets with the `-e` / `--editable`
flag ([2577](https://github.com/astral-sh/uv/pull/2577))

Enhancements

- Add a garbage collection mechanism to the CLI ([1217](https://github.com/astral-sh/uv/pull/1217))
- Add progress reporting for named requirement resolution ([2605](https://github.com/astral-sh/uv/pull/2605))
- Add support for parsing unnamed URL requirements ([2567](https://github.com/astral-sh/uv/pull/2567))
- Add support for unnamed local directory requirements ([2571](https://github.com/astral-sh/uv/pull/2571))
- Enable PEP 517 builds for unnamed requirements ([2600](https://github.com/astral-sh/uv/pull/2600))
- Enable install audits without resolving named requirements ([2575](https://github.com/astral-sh/uv/pull/2575))
- Enable unnamed requirements for direct URLs ([2569](https://github.com/astral-sh/uv/pull/2569))
- Respect HTTP client options when reading remote requirements
files ([2434](https://github.com/astral-sh/uv/pull/2434))
- Use PEP 517 build hooks to resolve unnamed requirements ([2604](https://github.com/astral-sh/uv/pull/2604))
- Use c-string literals and update trampolines ([2590](https://github.com/astral-sh/uv/pull/2590))
- Support unnamed requirements directly in `uv pip uninstall` ([2577](https://github.com/astral-sh/uv/pull/2577))
- Add support for unnamed Git and HTTP requirements ([2578](https://github.com/astral-sh/uv/pull/2578))
- Make self-update an opt-in Cargo feature ([2606](https://github.com/astral-sh/uv/pull/2606))
- Update minimum rust version (cargo) to 1.76 ([2618](https://github.com/astral-sh/uv/pull/2618))

Bug fixes

- Fix self-updates on Windows ([2598](https://github.com/astral-sh/uv/pull/2598))
- Fix authentication with usernames that contain `` characters ([2592](https://github.com/astral-sh/uv/pull/2592))
- Do not error when there are warnings on Python interpreter stderr ([2599](https://github.com/astral-sh/uv/pull/2599))
- Prevent discovery of cache gitignore when building distributions ([2615](https://github.com/astral-sh/uv/pull/2615))

Rust API

- Make `InstallDist.direct_url` public ([2584](https://github.com/astral-sh/uv/pull/2584))
- Make `AllowedYanks` public ([2608](https://github.com/astral-sh/uv/pull/2608))

Documentation

- Fix badge to current CI status ([2612](https://github.com/astral-sh/uv/pull/2612))

0.1.23

Not secure
Enhancements

- Implement `--no-strip-extras` to preserve extras in compilation ([2555](https://github.com/astral-sh/uv/pull/2555))
- Preserve hashes for pinned packages when compiling
without `--upgrade` ([2532](https://github.com/astral-sh/uv/pull/2532))
- Add a `uv self update` command ([2228](https://github.com/astral-sh/uv/pull/2228))
- Use relative paths for user-facing messages ([2559](https://github.com/astral-sh/uv/pull/2559))
- Add `CUSTOM_COMPILE_COMMAND` support to `uv pip compile` ([2554](https://github.com/astral-sh/uv/pull/2554))
- Add SHA384 and SHA512 hash algorithms ([2534](https://github.com/astral-sh/uv/pull/2534))
- Treat uninstallable packages as warnings, rather than errors ([2557](https://github.com/astral-sh/uv/pull/2557))

Bug fixes

- Allow `VIRTUAL_ENV` to take precedence over `CONDA_PREFIX` ([2574](https://github.com/astral-sh/uv/pull/2574))
- Ensure mtime of site packages is updated during wheel
installation ([2545](https://github.com/astral-sh/uv/pull/2545))
- Re-test validity after every lenient parsing change ([2550](https://github.com/astral-sh/uv/pull/2550))
- Run interpreter discovery under `-I` mode ([2552](https://github.com/astral-sh/uv/pull/2552))
- Search in both `purelib` and `platlib` for site-packages
population ([2537](https://github.com/astral-sh/uv/pull/2537))
- Fix wheel builds and uploads for musl ARM ([2518](https://github.com/astral-sh/uv/pull/2518))

Documentation

- Add `--link-mode` defaults to CLI ([2549](https://github.com/astral-sh/uv/pull/2549))
- Add an example workflow for compiling the current environment's
packages ([1968](https://github.com/astral-sh/uv/pull/1968))
- Add `uv pip check diagnostics` to `PIP_COMPATIBILITY.md` ([2544](https://github.com/astral-sh/uv/pull/2544))

Page 18 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.