Uv

Latest version: v0.5.9

Safety actively analyzes 688917 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 22

0.4.22

Enhancements

- Respect `[tool.uv.sources]` in build requirements ([7172](https://github.com/astral-sh/uv/pull/7172))

Preview features

- Add a dedicated `uv publish` error message for missing usernames ([8045](https://github.com/astral-sh/uv/pull/8045))
- Support interactive input in `uv publish` ([8158](https://github.com/astral-sh/uv/pull/8158))
- Use raw filenames in `uv publish` ([8204](https://github.com/astral-sh/uv/pull/8204))

Performance

- Reuse the result of `which git` ([8224](https://github.com/astral-sh/uv/pull/8224))

Bug fixes

- Avoid environment check optimization for `uv pip install --exact` ([8219](https://github.com/astral-sh/uv/pull/8219))
- Do not use free-threaded interpreters without a free-threaded request ([8191](https://github.com/astral-sh/uv/pull/8191))
- Don't recommend `--prerelease=allow` during build requirement resolution errors ([8192](https://github.com/astral-sh/uv/pull/8192))
- Prefer optimized builds for free-threaded Python downloads ([8196](https://github.com/astral-sh/uv/pull/8196))
- Retain old `python-build-standalone` releases ([8216](https://github.com/astral-sh/uv/pull/8216))
- Run `uv build` builds in the source distribution bucket ([8220](https://github.com/astral-sh/uv/pull/8220))

0.4.21

Enhancements

- Add support for managed installations of free-threaded Python ([8100](https://github.com/astral-sh/uv/pull/8100))
- Add note about `uvx` to `uv tool run` short help ([7695](https://github.com/astral-sh/uv/pull/7695))
- Enable HTTP/2 requests ([8049](https://github.com/astral-sh/uv/pull/8049))
- Support `uv tree --no-dev` ([8109](https://github.com/astral-sh/uv/pull/8109))
- Support PEP 723 metadata with `uv run -` ([8111](https://github.com/astral-sh/uv/pull/8111))
- Support `pip install --exact` ([8044](https://github.com/astral-sh/uv/pull/8044))
- Support `uv export --no-header` ([8096](https://github.com/astral-sh/uv/pull/8096))
- Add Python 3.13 images to Docker publish ([8105](https://github.com/astral-sh/uv/pull/8105))
- Support remote (`https://`) scripts in `uv run` ([#6375](https://github.com/astral-sh/uv/pull/6375))
- Allow comma value-delimited arguments in `uv run --with` ([7909](https://github.com/astral-sh/uv/pull/7909))

Configuration

- Support wildcards in `UV_INSECURE_HOST` ([8052](https://github.com/astral-sh/uv/pull/8052))

Performance

- Use shared index when fetching metadata in lock satisfaction routine ([8147](https://github.com/astral-sh/uv/pull/8147))

Bug fixes

- Add prerelease compatibility check to `uv python` CLI ([8020](https://github.com/astral-sh/uv/pull/8020))
- Avoid deleting a project environment directory if we cannot tell if a `pyvenv.cfg` file exists ([8012](https://github.com/astral-sh/uv/pull/8012))
- Avoid excluding valid wheels for exact `requires-python` bounds ([8140](https://github.com/astral-sh/uv/pull/8140))
- Bump `netrc` crate to latest commit ([8021](https://github.com/astral-sh/uv/pull/8021))
- Fix `uv python pin 3.13t` failure when parsing version for project requires check ([8056](https://github.com/astral-sh/uv/pull/8056))
- Fix handling of != intersections in `requires-python` ([7897](https://github.com/astral-sh/uv/pull/7897))
- Remove the newly created tool environment if sync failed ([8038](https://github.com/astral-sh/uv/pull/8038))
- Respect dynamic extras in `uv lock` and `uv sync` ([8091](https://github.com/astral-sh/uv/pull/8091))
- Treat resolver failures as fatal in lockfile validation ([8083](https://github.com/astral-sh/uv/pull/8083))
- Use `git config --get` for author information for improved backwards compatibility ([8101](https://github.com/astral-sh/uv/pull/8101))
- Use comma-separated values for `UV_FIND_LINKS` ([8061](https://github.com/astral-sh/uv/pull/8061))
- Use shared resolver state between add and lock to avoid double Git update ([8146](https://github.com/astral-sh/uv/pull/8146))
- Make `--relocatable` entrypoints robust to symlinking ([8079](https://github.com/astral-sh/uv/pull/8079))
- Improve compatibility with VSCode PS1 prompt ([8006](https://github.com/astral-sh/uv/pull/8006))
- Fix "Stream did not contain valid UTF-8" failures in Windows ([8120](https://github.com/astral-sh/uv/pull/8120))
- Use `--with-requirements` in `uvx` error hint ([8112](https://github.com/astral-sh/uv/pull/8112))

Documentation

- Include `uvx` installation in Docker examples ([8179](https://github.com/astral-sh/uv/pull/8179))
- Make the instructions for the Windows standalone installer consistent across README and documentation ([8125](https://github.com/astral-sh/uv/pull/8125))
- Update pip compatibility guide to note transitive URL dependency support ([8081](https://github.com/astral-sh/uv/pull/8081))
- Document `--reinstall` with `--exclude-newer` to ensure downgrades ([6721](https://github.com/astral-sh/uv/pull/6721))

0.4.20

Enhancements

- Add managed downloads for CPython 3.13.0 (final) ([8010](https://github.com/astral-sh/uv/pull/8010))
- Python 3.13 is the default version for `uv python install` ([8010](https://github.com/astral-sh/uv/pull/8010))
- Hint at wrong endpoint in `uv publish` failures ([7872](https://github.com/astral-sh/uv/pull/7872))
- List available scripts when a command is not specified for `uv run` ([7687](https://github.com/astral-sh/uv/pull/7687))
- Fill in `authors` field during `uv init` ([7756](https://github.com/astral-sh/uv/pull/7756))

Documentation

- Add snapshot testing to contribution guide ([7882](https://github.com/astral-sh/uv/pull/7882))
- Fix and improve GitLab integration docs ([8000](https://github.com/astral-sh/uv/pull/8000))

0.4.19

Enhancements

- Add managed downloads for CPython 3.13.0rc3 and 3.12.7 ([7880](https://github.com/astral-sh/uv/pull/7880))
- Display the target virtual environment path if non-default ([7850](https://github.com/astral-sh/uv/pull/7850))
- Preserve case-insensitive sorts in `uv add` ([7864](https://github.com/astral-sh/uv/pull/7864))
- Respect project upper bounds when filtering wheels on `requires-python` ([7904](https://github.com/astral-sh/uv/pull/7904))
- Add `--script` to `uv run` to treat an input as PEP 723 regardless of extension ([7739](https://github.com/astral-sh/uv/pull/7739))
- Improve legibility of build failure errors ([7854](https://github.com/astral-sh/uv/pull/7854))
- Show interpreter source during Python discovery query errors ([7928](https://github.com/astral-sh/uv/pull/7928))

Configuration

- Add `UV_FIND_LINKS` environment variable for `--find-links` ([7912](https://github.com/astral-sh/uv/pull/7912))
- Ignore empty string values for `UV_PYTHON` environment variable ([7878](https://github.com/astral-sh/uv/pull/7878))

Bug fixes

- Allow `py3x-none` tags in newer than Python 3.x ([7867](https://github.com/astral-sh/uv/pull/7867))
- Allow self-dependencies in the `dev` section ([7943](https://github.com/astral-sh/uv/pull/7943))
- Always ignore `cp2` wheels in resolution ([7902](https://github.com/astral-sh/uv/pull/7902))
- Clear the publish progress bar on retry ([7921](https://github.com/astral-sh/uv/pull/7921))
- Fix parsing of `gnueabi` libc variants in Python version requests ([7975](https://github.com/astral-sh/uv/pull/7975))
- Simplify supported environments when comparing to lockfile ([7894](https://github.com/astral-sh/uv/pull/7894))
- Trim commits when reading from Git refs ([7922](https://github.com/astral-sh/uv/pull/7922))
- Use a higher HTTP read timeout when publishing packages ([7923](https://github.com/astral-sh/uv/pull/7923))
- Remove the first empty line for `uv tree --package foo` ([7885](https://github.com/astral-sh/uv/pull/7885))

Documentation

- Add 3.13 support to the platform reference ([7971](https://github.com/astral-sh/uv/pull/7971))
- Clarify project environment creation ([7941](https://github.com/astral-sh/uv/pull/7941))
- Fix code block title in Gitlab integration docs ([7861](https://github.com/astral-sh/uv/pull/7861))
- Fix project guide section on adding a Git dependency ([7916](https://github.com/astral-sh/uv/pull/7916))
- Fix uninstallation command for Windows ([7944](https://github.com/astral-sh/uv/pull/7944))
- Clearly specify the minimum supported Windows Server version ([7946](https://github.com/astral-sh/uv/pull/7946))

Rust API

- Remove unused `Sha256Reader` ([7929](https://github.com/astral-sh/uv/pull/7929))
- Remove unnecessary `Deserialize` derives on settings ([7856](https://github.com/astral-sh/uv/pull/7856))

0.4.18

Enhancements

- Allow multiple source entries for each package in `tool.uv.sources` ([7745](https://github.com/astral-sh/uv/pull/7745))
- Add `.gitignore` file to `uv build` output directory ([7835](https://github.com/astral-sh/uv/pull/7835))
- Disable jemalloc on FreeBSD ([7780](https://github.com/astral-sh/uv/pull/7780))
- Respect `PAGER` env var when paging in `uv help` command ([5511](https://github.com/astral-sh/uv/pull/5511))
- Support `uv run -m foo` to run a module ([7754](https://github.com/astral-sh/uv/pull/7754))
- Use a top-level output directory for `uv build` in workspaces ([7813](https://github.com/astral-sh/uv/pull/7813))
- Update `uv init --package` command to match project name ([7670](https://github.com/astral-sh/uv/pull/7670))
- Add a custom suggestion for `uv add dotenv` ([7799](https://github.com/astral-sh/uv/pull/7799))
- Add detailed errors for `tool.uv.sources` deserialization failures ([7823](https://github.com/astral-sh/uv/pull/7823))
- Improve error message copy for failed builds ([7849](https://github.com/astral-sh/uv/pull/7849))
- Use `serde-untagged` to improve some untagged enum error messages ([7822](https://github.com/astral-sh/uv/pull/7822))
- Use build failure hints for `dotenv` errors, rather than in `uv add` ([7825](https://github.com/astral-sh/uv/pull/7825))

Configuration

- Add `UV_NO_SYNC` environment variable ([7752](https://github.com/astral-sh/uv/pull/7752))

Bug fixes

- Accept `git+` prefix in `tool.uv.sources` ([7847](https://github.com/astral-sh/uv/pull/7847))
- Allow spaces in path requirements ([7767](https://github.com/astral-sh/uv/pull/7767))
- Avoid reusing cached downloaded binaries with `--no-binary` ([7772](https://github.com/astral-sh/uv/pull/7772))
- Correctly trims values during wheel WHEEL file parsing ([7770](https://github.com/astral-sh/uv/pull/7770))
- Fix `uv tree --invert` for platform dependencies ([7808](https://github.com/astral-sh/uv/pull/7808))
- Fix encoding mismatch between python child process and uv ([7757](https://github.com/astral-sh/uv/pull/7757))
- Reject self-dependencies in `uv add` ([7766](https://github.com/astral-sh/uv/pull/7766))
- Respect `tool.uv.environments` for legacy virtual workspace roots ([7824](https://github.com/astral-sh/uv/pull/7824))
- Retain empty extras on workspace members ([7762](https://github.com/astral-sh/uv/pull/7762))
- Use file stem when parsing cached wheel names ([7773](https://github.com/astral-sh/uv/pull/7773))

Rust API

- Make `FlatDistributions` public ([7833](https://github.com/astral-sh/uv/pull/7833))

Documentation

- Fix table of contents sizing ([7751](https://github.com/astral-sh/uv/pull/7751))
- GitLab Integration documentation ([6857](https://github.com/astral-sh/uv/pull/6857))
- Update documentation to setup-uvv3 ([7807](https://github.com/astral-sh/uv/pull/7807))
- Use `uv publish` instead of twine in docs ([7837](https://github.com/astral-sh/uv/pull/7837))
- Fix typo in `projects.md` ([7784](https://github.com/astral-sh/uv/pull/7784))

0.4.17

Enhancements

- Add `uv build --all` to build all packages in a workspace ([7724](https://github.com/astral-sh/uv/pull/7724))
- Add support for `uv init --script` ([7565](https://github.com/astral-sh/uv/pull/7565))
- Add support for upgrading build environment for installed tools (`uv tool upgrade --python`) ([7605](https://github.com/astral-sh/uv/pull/7605))
- Initialize a Git repository in `uv init` ([5476](https://github.com/astral-sh/uv/pull/5476))
- Respect `--quiet` flag in `uv build` ([7674](https://github.com/astral-sh/uv/pull/7674))
- Add context message before listing available tools in `uvx` ([7641](https://github.com/astral-sh/uv/pull/7641))

Bug fixes

- Don't create Python bytecode files during interpreter discovery ([7707](https://github.com/astral-sh/uv/pull/7707))
- Escape glob patterns in workspace member discovery ([7709](https://github.com/astral-sh/uv/pull/7709))
- Avoid prefetching source distributions with unbounded lower-bound ranges ([7683](https://github.com/astral-sh/uv/pull/7683))

Documentation

- Add `uv build` and `uv publish` to features overview ([7716](https://github.com/astral-sh/uv/pull/7716))
- Add documentation on cache versioning ([7693](https://github.com/astral-sh/uv/pull/7693))
- Spell out the names of the Docker images for easier copy-paste ([7706](https://github.com/astral-sh/uv/pull/7706))
- Document uv-with-Jupyter workflows ([7625](https://github.com/astral-sh/uv/pull/7625))
- Note that `uv lock --upgrade-package` retains locked versions ([7694](https://github.com/astral-sh/uv/pull/7694))

Page 4 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.