Uv

Latest version: v0.5.9

Safety actively analyzes 688931 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 6 of 22

0.4.10

Enhancements

- Allow `uv tool upgrade --all` to continue on individual upgrade failure ([7333](https://github.com/astral-sh/uv/pull/7333))
- Support globs as cache keys in `tool.uv.cache-keys` ([7268](https://github.com/astral-sh/uv/pull/7268))
- Add Python package (`__main__.py`) support to `uv run` ([7281](https://github.com/astral-sh/uv/pull/7281))
- Add zip application support to `uv run` ([7289](https://github.com/astral-sh/uv/pull/7289))
- Add `--token` option to `self update` command ([7279](https://github.com/astral-sh/uv/pull/7279))

Performance

- Use `globwalk` for `cache-keys` matching ([7337](https://github.com/astral-sh/uv/pull/7337))

Bug fixes

- Always treat archive-like requirements as local files ([7364](https://github.com/astral-sh/uv/pull/7364))
- Apply `--no-install` options when constructing resolution ([7277](https://github.com/astral-sh/uv/pull/7277))
- Avoid clobbering existing `py.typed` files contents in `uv init` ([7338](https://github.com/astral-sh/uv/pull/7338))
- Avoid enforcing platform compatibility when validating lockfile ([7305](https://github.com/astral-sh/uv/pull/7305))
- Avoid installing transitive dev dependencies ([7318](https://github.com/astral-sh/uv/pull/7318))
- Avoid selecting prerelease Python installations without opt-in ([7300](https://github.com/astral-sh/uv/pull/7300))
- Fix PPC64 page size in binary builds. ([7298](https://github.com/astral-sh/uv/pull/7298))
- Include pre-release Python versions in `uv python list` ([7290](https://github.com/astral-sh/uv/pull/7290))
- Make version ID optional for source builds ([7362](https://github.com/astral-sh/uv/pull/7362))
- Support relative paths in `uv add --script` ([7301](https://github.com/astral-sh/uv/pull/7301))

Documentation

- Fix documentation typos for `uv build --build-constraint` flag ([7330](https://github.com/astral-sh/uv/pull/7330))
- Fix grammatical error in CLI docs ([7353](https://github.com/astral-sh/uv/pull/7353))

Error messages

- Add dedicated lock errors for wheel-only distributions ([7307](https://github.com/astral-sh/uv/pull/7307))
- Avoid treating `.whl` sources as source distributions ([7303](https://github.com/astral-sh/uv/pull/7303))
- Clarify Python requirement source for script incompatibilities ([7339](https://github.com/astral-sh/uv/pull/7339))

0.4.9

Enhancements

- Add support for managed Python 3.13 ([7263](https://github.com/astral-sh/uv/pull/7263))
- Upgrade managed CPython versions to latest patch releases ([7263](https://github.com/astral-sh/uv/pull/7263))
- Allow setting a target version for `uv self update` ([7252](https://github.com/astral-sh/uv/pull/7252))
- Create `py.typed` files during `uv init --lib` ([7232](https://github.com/astral-sh/uv/pull/7232))
- Add a dedicated error for packages that fail due to `distutils` deprecation ([7239](https://github.com/astral-sh/uv/pull/7239))
- Improve error message when requested Python version is unsupported ([7269](https://github.com/astral-sh/uv/pull/7269))
- Add `uv run --no-sync` ([7192]((https://github.com/astral-sh/uv/pull/7192))

Bug fixes

- Avoid updating `pyproject.toml` offsets on non-add edits ([7262](https://github.com/astral-sh/uv/pull/7262))
- Invalidate cache when `--config-settings` change ([7139](https://github.com/astral-sh/uv/pull/7139))
- Remove workspace root for single-member workspace with `uv export` ([7254](https://github.com/astral-sh/uv/pull/7254))

0.4.8

Enhancements

- Add support for dynamic cache keys ([7136](https://github.com/astral-sh/uv/pull/7136))
- Allow `.dist-info` names with dashes for post releases ([7208](https://github.com/astral-sh/uv/pull/7208))
- Use type hints in code from `uv init` ([7225](https://github.com/astral-sh/uv/pull/7225))
- Treat `.tgz` the same as `.tar.gz` ([7201](https://github.com/astral-sh/uv/pull/7201))
- Direct users towards `uv venv` to create a virtual environment ([7188](https://github.com/astral-sh/uv/pull/7188))
- Improve error message for uv init already init-ed ([7198](https://github.com/astral-sh/uv/pull/7198))

Performance

- Avoid batch prefetching for un-optimized registries ([7226](https://github.com/astral-sh/uv/pull/7226))
- Avoid iteration for singleton selections ([7195](https://github.com/astral-sh/uv/pull/7195))

Bug fixes

- Avoid extra newlines in debug logging for source builds ([7174](https://github.com/astral-sh/uv/pull/7174))
- Prune unreachable packages from `--universal` output ([7209](https://github.com/astral-sh/uv/pull/7209))
- Respect exclusion when collecting workspace members ([7175](https://github.com/astral-sh/uv/pull/7175))
- Use path file instead of `sitecustomize.py` ([7161](https://github.com/astral-sh/uv/pull/7161))
- Replace incorrect `--source` and `--binary` flags with correct `--sdist` and `--wheel` flags in `uv build` ([7156](https://github.com/astral-sh/uv/pull/7156))

Documentation

- Document support for `UV_INSTALL_DIR` ([7107](https://github.com/astral-sh/uv/pull/7107))
- List all supported sdist formats ([7168](https://github.com/astral-sh/uv/pull/7168))

0.4.7

Enhancements

- Add `--no-emit-project` and friends to `uv export` ([7110](https://github.com/astral-sh/uv/pull/7110))
- Add `--output-file` to `uv export` ([7109](https://github.com/astral-sh/uv/pull/7109))
- Prune unused source distributions from the cache in `uv cache prune` ([7112](https://github.com/astral-sh/uv/pull/7112))
- Take intersection of constraint and requirements hashes ([7108](https://github.com/astral-sh/uv/pull/7108))

Performance

- Skip metadata fetch for `--no-deps` and `pip sync` ([7127](https://github.com/astral-sh/uv/pull/7127))

Bug fixes

- Avoid panicking when encountering an invalid Python version during `uv python list` ([7131](https://github.com/astral-sh/uv/pull/7131))
- Write trailing newline to `.python-version` files ([7140](https://github.com/astral-sh/uv/pull/7140))

0.4.6

Enhancements

- Accept `--build-constraint` in `uv build` ([7085](https://github.com/astral-sh/uv/pull/7085))
- Add `--require-hashes` and `--verify-hashes` to `uv build` ([7094](https://github.com/astral-sh/uv/pull/7094))
- Add `--show-version-specifiers` to `uv tool list` ([7050](https://github.com/astral-sh/uv/pull/7050))
- Respect hashes in constraints files ([7093](https://github.com/astral-sh/uv/pull/7093))
- Upgrade installer scripts ([7092](https://github.com/astral-sh/uv/pull/7092))
- Allow specifying multiple packages in `uv tool upgrade` and `uninstall` ([7037](https://github.com/astral-sh/uv/pull/7037))
- Sort by implementation in `uv python list` ([6918](https://github.com/astral-sh/uv/pull/6918))

Bug fixes

- Invalidate lockfile when member versions change ([7102](https://github.com/astral-sh/uv/pull/7102))
- Strip fragments from direct source URLs in lockfile ([7061](https://github.com/astral-sh/uv/pull/7061))
- Support `--no-build` and `--no-binary` in `uv sync` et al ([7100](https://github.com/astral-sh/uv/pull/7100))
- Use distribution hash over registry hash ([7060](https://github.com/astral-sh/uv/pull/7060))
- Fix inverted log message ([7063](https://github.com/astral-sh/uv/pull/7063))
- Adjust Docker `ENTRYPOINT` and `CMD` for inherited images ([7054](https://github.com/astral-sh/uv/pull/7054))

Documentation

- Add winget to installers ([7088](https://github.com/astral-sh/uv/pull/7088))
- Document how to disable path modifications during install ([7090](https://github.com/astral-sh/uv/pull/7090))
- Document how to manually update locked package version ([7083](https://github.com/astral-sh/uv/pull/7083))
- Document official `setup-uv` action ([7056](https://github.com/astral-sh/uv/pull/7056))
- Update docs on `.python-version` file ([7051](https://github.com/astral-sh/uv/pull/7051))

0.4.5

Enhancements

- Implement `uv build` ([6895](https://github.com/astral-sh/uv/pull/6895))
- Add `--package` support to `uv build` ([6990](https://github.com/astral-sh/uv/pull/6990))
- Prune unreachable packages from lockfile ([6959](https://github.com/astral-sh/uv/pull/6959))
- Prune unreachable wheels from lockfile ([6961](https://github.com/astral-sh/uv/pull/6961))
- Show build output by default in `uv build` ([6912](https://github.com/astral-sh/uv/pull/6912))
- Support `uv build --wheel` from source distributions ([6898](https://github.com/astral-sh/uv/pull/6898))
- Use the root project name for the project virtual environment prompt ([7021](https://github.com/astral-sh/uv/pull/7021))

Bug fixes

- Fix handling of inline optional dependencies in `uv add` ([7023](https://github.com/astral-sh/uv/pull/7023))
- Reflect exit code in `uv tool run` and `uv run` ([6994](https://github.com/astral-sh/uv/pull/6994))
- Revert `pyproject.toml` modifications on Ctrl-C ([7024](https://github.com/astral-sh/uv/pull/7024))
- Rollback `pyproject.toml` changes on all errors ([7022](https://github.com/astral-sh/uv/pull/7022))
- Use correct ordering semantics for narrowing upper-bounded Python requirements ([7031](https://github.com/astral-sh/uv/pull/7031))
- Fix segfault in Windows trampolines ([6955](https://github.com/astral-sh/uv/pull/6955))
- Remove unused `__future__.annotations` import in `_virtualenv.py` ([6996](https://github.com/astral-sh/uv/pull/6996))

Documentation

- Add documentation for `uv build` ([6991](https://github.com/astral-sh/uv/pull/6991))
- Add note to `extra` and `all-extras` in `uv sync` help ([7013](https://github.com/astral-sh/uv/pull/7013))
- Add project docs for `project.scripts` ([7010](https://github.com/astral-sh/uv/pull/7010))
- Fix available Docker image tag rendering and shorten list ([7017](https://github.com/astral-sh/uv/pull/7017))
- Touchup to the project environment config section ([7038](https://github.com/astral-sh/uv/pull/7038))
- Clarify precedence of `uv.toml` ([6986](https://github.com/astral-sh/uv/pull/6986))
- Fix available Docker tags for `-slim` variants ([7041](https://github.com/astral-sh/uv/pull/7041))

Page 6 of 22

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.