Uv

Latest version: v0.5.18

Safety actively analyzes 696771 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 24 of 24

0.1.1

Not secure
Bug fixes

- Fix bug where `python3` is not found in the global path ([1351](https://github.com/astral-sh/uv/pull/1351))

Documentation

- Fix diagram alignment ([1354](https://github.com/astral-sh/uv/pull/1354))
- Grammar nit ([1345](https://github.com/astral-sh/uv/pull/1345))

<!-- prettier-ignore-end -->

0.1.0

Not secure
requires-python = ">=3.12.0"

[project.optional-dependencies]
Include `torch` whenever `--extra cpu` or `--extra gpu` is provided.
cpu = ["torch>=2.5.1"]
gpu = ["torch>=2.5.1"]

[tool.uv]
But allow `cpu` and `gpu` to choose conflicting versions of `torch`.
conflicts = [[{ extra = "cpu" }, { extra = "gpu" }]]

[tool.uv.sources]
torch = [
With `--extra cpu`, pull PyTorch from the CPU-only index.
{ index = "pytorch-cpu", extra = "cpu", marker = "platform_system != 'Darwin'" },
With `--extra gpu`, pull PyTorch from the GPU-enabled index.
{ index = "pytorch-gpu", extra = "gpu" },
]

[[tool.uv.index]]
name = "pytorch-cpu"
url = "https://download.pytorch.org/whl/cpu"
explicit = true

[[tool.uv.index]]
name = "pytorch-gpu"
url = "https://download.pytorch.org/whl/cu124"
explicit = true


See the [PyTorch](https://docs.astral.sh/uv/guides/integration/pytorch/) documentation for more.

Enhancements

- Allow conflicting extras in explicit index assignments ([9160](https://github.com/astral-sh/uv/pull/9160))
- Support overrides and constraints in PEP 723 scripts ([9162](https://github.com/astral-sh/uv/pull/9162))
- Update `uv tool install --force` to imply `--reinstall-package <name>` ([9074](https://github.com/astral-sh/uv/pull/9074))
- Turn `--verify-hashes` on by default ([9170](https://github.com/astral-sh/uv/pull/9170))

Performance

- Enable `zlib-rs` on all platforms ([9202](https://github.com/astral-sh/uv/pull/9202))

Bug fixes

- Allow apostrophe in virtual environment name ([8984](https://github.com/astral-sh/uv/pull/8984))
- Automatically retry body errors when processing response ([9213](https://github.com/astral-sh/uv/pull/9213))
- Detect nested workspace inside the current workspace and members with identical names ([9094](https://github.com/astral-sh/uv/pull/9094))
- Only install the specified project with `--frozen --package` in legacy non-`[project]` workspaces ([9215](https://github.com/astral-sh/uv/pull/9215))
- Respect `[[tool.uv.index]]` in PEP 723 scripts ([9208](https://github.com/astral-sh/uv/pull/9208))
- Show derivation markers for resolutions with project name ([9136](https://github.com/astral-sh/uv/pull/9136))
- Sort distributions when computing hash ([9185](https://github.com/astral-sh/uv/pull/9185))
- Include trampolines in source distributions on Windows ([9172](https://github.com/astral-sh/uv/pull/9172))

Documentation

- Add `--index <name>=<url>` syntax to index documentation ([9139](https://github.com/astral-sh/uv/pull/9139))
- Add documentation for using uv with PyTorch ([9210](https://github.com/astral-sh/uv/pull/9210))

Error messages

- Add a dedicated error for `include = "dev"` with `tool.uv.dev-dependencies` ([9173](https://github.com/astral-sh/uv/pull/9173))
- Avoid showing disjoint marker error with `true` ([9169](https://github.com/astral-sh/uv/pull/9169))
- Improve error message when `git` is not found ([9206](https://github.com/astral-sh/uv/pull/9206))
- Include extras and dependency groups in derivation chains ([9113](https://github.com/astral-sh/uv/pull/9113))
- Include version constraints in derivation chains ([9112](https://github.com/astral-sh/uv/pull/9112))

Page 24 of 24

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.