Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: astral-sh/uv
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0.9.10
Choose a base ref
...
head repository: astral-sh/uv
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 0.9.11
Choose a head ref
  • 20 commits
  • 126 files changed
  • 14 contributors

Commits on Nov 17, 2025

  1. Configuration menu
    Copy the full SHA
    cda7fc3 View commit details
    Browse the repository at this point in the history
  2. Open PRs as drafts for sync-python-releases (#16763)

    ## Summary
    
    This is a little goofy, but it saves us a click: when automation PRs are
    opened as drafts, they don't need to be cycled through closed/opened to
    force the CI to run. Instead, once undrafted the CI runs.
    
    See #16505 for an example of the closed/opened cycle hack this avoids.
    
    ## Test Plan
    
    No functional changes besides CI automation.
    
    Signed-off-by: William Woodruff <william@astral.sh>
    woodruffw authored Nov 17, 2025
    Configuration menu
    Copy the full SHA
    512c0ca View commit details
    Browse the repository at this point in the history

Commits on Nov 18, 2025

  1. Configuration menu
    Copy the full SHA
    f78ddf0 View commit details
    Browse the repository at this point in the history
  2. Update dependency astral-sh/uv to v0.9.10 (#16753)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    | [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
    patch | `0.9.8` -> `0.9.10` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>astral-sh/uv (astral-sh/uv)</summary>
    
    ###
    [`v0.9.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0910)
    
    [Compare
    Source](https://redirect.github.com/astral-sh/uv/compare/0.9.9...0.9.10)
    
    Released on 2025-11-17.
    
    ##### Enhancements
    
    - Add support for `SSL_CERT_DIR`
    ([#&#8203;16473](https://redirect.github.com/astral-sh/uv/pull/16473))
    - Enforce UTF‑8-encoded license files during `uv build`
    ([#&#8203;16699](https://redirect.github.com/astral-sh/uv/pull/16699))
    - Error when a `project.license-files` glob matches nothing
    ([#&#8203;16697](https://redirect.github.com/astral-sh/uv/pull/16697))
    - `pip install --target` (and `sync`) install Python if necessary
    ([#&#8203;16694](https://redirect.github.com/astral-sh/uv/pull/16694))
    - Account for `python_downloads_json_url` in pre-release Python version
    warnings
    ([#&#8203;16737](https://redirect.github.com/astral-sh/uv/pull/16737))
    - Support HTTP/HTTPS URLs in `uv python --python-downloads-json-url`
    ([#&#8203;16542](https://redirect.github.com/astral-sh/uv/pull/16542))
    
    ##### Preview features
    
    - Add support for `--upgrade` in `uv python install`
    ([#&#8203;16676](https://redirect.github.com/astral-sh/uv/pull/16676))
    - Fix handling of `python install --default` for pre-release Python
    versions
    ([#&#8203;16706](https://redirect.github.com/astral-sh/uv/pull/16706))
    - Add `uv workspace list` to list workspace members
    ([#&#8203;16691](https://redirect.github.com/astral-sh/uv/pull/16691))
    
    ##### Bug fixes
    
    - Don't check file URLs for ambiguously parsed credentials
    ([#&#8203;16759](https://redirect.github.com/astral-sh/uv/pull/16759))
    
    ##### Documentation
    
    - Add a "storage" reference document
    ([#&#8203;15954](https://redirect.github.com/astral-sh/uv/pull/15954))
    
    ###
    [`v0.9.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#099)
    
    [Compare
    Source](https://redirect.github.com/astral-sh/uv/compare/0.9.8...0.9.9)
    
    Released on 2025-11-12.
    
    ##### Deprecations
    
    - Deprecate use of `--project` in `uv init`
    ([#&#8203;16674](https://redirect.github.com/astral-sh/uv/pull/16674))
    
    ##### Enhancements
    
    - Add iOS support to Python interpreter discovery
    ([#&#8203;16686](https://redirect.github.com/astral-sh/uv/pull/16686))
    - Reject ambiguously parsed URLs
    ([#&#8203;16622](https://redirect.github.com/astral-sh/uv/pull/16622))
    - Allow explicit values in `uv version --bump`
    ([#&#8203;16555](https://redirect.github.com/astral-sh/uv/pull/16555))
    - Warn on use of managed pre-release Python versions when a stable
    version is available
    ([#&#8203;16619](https://redirect.github.com/astral-sh/uv/pull/16619))
    - Allow signing trampolines on Windows by using `.rcdata` to store
    metadata
    ([#&#8203;15068](https://redirect.github.com/astral-sh/uv/pull/15068))
    - Add `--only-emit-workspace` and similar variants to `uv export`
    ([#&#8203;16681](https://redirect.github.com/astral-sh/uv/pull/16681))
    
    ##### Preview features
    
    - Add `uv workspace dir` command
    ([#&#8203;16678](https://redirect.github.com/astral-sh/uv/pull/16678))
    - Add `uv workspace metadata` command
    ([#&#8203;16516](https://redirect.github.com/astral-sh/uv/pull/16516))
    
    ##### Configuration
    
    - Add `UV_NO_DEFAULT_GROUPS` environment variable
    ([#&#8203;16645](https://redirect.github.com/astral-sh/uv/pull/16645))
    
    ##### Bug fixes
    
    - Remove `torch-model-archiver` and `torch-tb-profiler` from PyTorch
    backend
    ([#&#8203;16655](https://redirect.github.com/astral-sh/uv/pull/16655))
    - Fix Pixi environment detection
    ([#&#8203;16585](https://redirect.github.com/astral-sh/uv/pull/16585))
    
    ##### Documentation
    
    - Fix `CMD` path in FastAPI Dockerfile
    ([#&#8203;16701](https://redirect.github.com/astral-sh/uv/pull/16701))
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
    Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
    defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/uv).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Nov 18, 2025
    Configuration menu
    Copy the full SHA
    0e88114 View commit details
    Browse the repository at this point in the history
  3. Disable always-authenticate when running under Dependabot (#16773)

    Dependabot appears to run a proxy which intercepts all requests and adds
    credentials — credentials are _not_ provided via the CLI or environment
    variables and there's no way for a user to do so. This means that when
    `authenticate = "always"` is used (or when the index URL is on a pyx
    domain), uv will fail even though Dependabot may intercept the request
    and add credentials.
    
    See
    https://github.com/dependabot/dependabot-core/#private-registry-credential-management
    zanieb authored Nov 18, 2025
    Configuration menu
    Copy the full SHA
    3ac43e8 View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2025

  1. Configuration menu
    Copy the full SHA
    fc0cf90 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2025

  1. Fix status messages without TTY (#16785)

    <!--
    Thank you for contributing to uv! To help us out with reviewing, please
    consider the following:
    
    - Does this pull request include a summary of the change? (See below.)
    - Does this pull request include a descriptive title?
    - Does this pull request include references to any relevant issues?
    -->
    
    ## Summary
    
    #12175 changed the behavior of `on_request_complete` when stderr is not
    a tty to output `Downloading`/`Uploading` (via `Direction::as_str`).
    This fixes it to output `Downloaded`/`Uploaded` again.
    
    ## Test Plan
    
    Tested locally to verify new output.
    
    Old:
    ```
    $ uv sync --no-cache 2>&1 | tee /dev/null
    Using CPython 3.14.0
    Creating virtual environment at: .venv
    Resolved 12 packages in 19ms
    Downloading numpy (15.8MiB)
    Downloading matplotlib (9.4MiB)
    Downloading fonttools (4.6MiB)
    Downloading pillow (6.7MiB)
    Downloading kiwisolver (1.4MiB)
     Downloading kiwisolver
     Downloading fonttools
     Downloading pillow
     Downloading matplotlib
     Downloading numpy
    ```
    New:
    ```
    $ uv sync --no-cache 2>&1 | tee /dev/null
    Using CPython 3.14.0
    Creating virtual environment at: .venv
    Resolved 12 packages in 3ms
    Downloading numpy (15.8MiB)
    Downloading fonttools (4.6MiB)
    Downloading matplotlib (9.4MiB)
    Downloading kiwisolver (1.4MiB)
    Downloading pillow (6.7MiB)
     Downloaded kiwisolver
     Downloaded pillow
     Downloaded fonttools
     Downloaded matplotlib
     Downloaded numpy
    ```
    rzblue authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    4a867dc View commit details
    Browse the repository at this point in the history
  2. Document the new behavior for free-threaded python versions (#16781)

    ## Summary
    
    I noticed that after first installing the free-threaded version, then
    the gil version of 3.14, I wasn't able
    to install greenlet, because it doesn't ship with wheels for the
    free-threaded version (I think it isn't
    safe for it to use that interpreter). I noticed that the change made in
    3.14 wasn't updated in the docs.
    
    ## Test Plan
    
    N/A
    
    ---------
    
    Co-authored-by: Wade Roberts <wade.roberts@centralsquare.com>
    Co-authored-by: Zanie Blue <contact@zanie.dev>
    3 people authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    7d8634b View commit details
    Browse the repository at this point in the history
  3. Add SBOM export support (#16523)

    Co-authored-by: Will Rollason <william.rollason@snyk.io>
    thomasschafer and snyk-will authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    fd7e6d0 View commit details
    Browse the repository at this point in the history
  4. Move do not upload publish note out of the guide into concepts (#16789)

    This feels a little out of place here and it seems nice to be able to
    link to it.
    zanieb authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    75bd2ea View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    5b4446f View commit details
    Browse the repository at this point in the history
  6. Preserve end-of-line comment whitespace when editing pyproject.toml (

    …#16734)
    
    Resolves #16719
    
    `uv add` collapses multiple spaces before inline comments in
    `[project.dependencies]`, causing unrelated diffs and moving comments
    onto the wrong columns. This diff captures the exact whitespace padding
    that preceded each end-of-line comment when parsing the array and reuses
    it when formatting.
    
    ---------
    
    Co-authored-by: konstin <konstin@mailbox.org>
    terror and konstin authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    79bfa2b View commit details
    Browse the repository at this point in the history
  7. Add uv workspace list --paths (#16776)

    I initially thought I didn't need this, but in some contexts, the
    workspace member name is not useful at all and I just want to iterate
    over the paths without composing with `uv workspace dir --package
    <name>`
    zanieb authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    aebd757 View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    5eda329 View commit details
    Browse the repository at this point in the history
  9. Sync latest Python releases (#16792)

    Automated update for Python releases.
    
    ---------
    
    Co-authored-by: jjhelmus <1050278+jjhelmus@users.noreply.github.com>
    Co-authored-by: Jonathan Helmus <jjhelmus@gmail.com>
    3 people authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    e799a08 View commit details
    Browse the repository at this point in the history
  10. Publish to crates.io (#16770)

    zanieb authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    dfe8904 View commit details
    Browse the repository at this point in the history
  11. Configuration menu
    Copy the full SHA
    4be1e0a View commit details
    Browse the repository at this point in the history
  12. Cache Dependabot lookup (#16795)

    ## Summary
    
    Small nit, but I wanted to avoid doing this access in the hot path.
    (Probably not important in practice.)
    
    ---------
    
    Co-authored-by: Zanie Blue <contact@zanie.dev>
    charliermarsh and zanieb authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    c5c4416 View commit details
    Browse the repository at this point in the history
  13. Increase walltime timeout by 5m (#16796)

    It is failing while caching the dependencies
    zanieb authored Nov 20, 2025
    Configuration menu
    Copy the full SHA
    f2e92b4 View commit details
    Browse the repository at this point in the history
  14. Configuration menu
    Copy the full SHA
    8d8aabb View commit details
    Browse the repository at this point in the history
Loading