-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Comparing changes
Open a pull request
base repository: astral-sh/uv
base: 0.9.10
head repository: astral-sh/uv
compare: 0.9.11
- 20 commits
- 126 files changed
- 14 contributors
Commits on Nov 17, 2025
-
Revert "Fix CMD path in FastAPI Dockerfile (#16701)" (#16752)
This reverts commit 92230ba from #16701 See #16701 (comment)
Configuration menu - View commit details
-
Copy full SHA for cda7fc3 - Browse repository at this point
Copy the full SHA cda7fc3View commit details -
Open PRs as drafts for sync-python-releases (#16763)
## Summary This is a little goofy, but it saves us a click: when automation PRs are opened as drafts, they don't need to be cycled through closed/opened to force the CI to run. Instead, once undrafted the CI runs. See #16505 for an example of the closed/opened cycle hack this avoids. ## Test Plan No functional changes besides CI automation. Signed-off-by: William Woodruff <william@astral.sh>
Configuration menu - View commit details
-
Copy full SHA for 512c0ca - Browse repository at this point
Copy the full SHA 512c0caView commit details
Commits on Nov 18, 2025
-
Configuration menu - View commit details
-
Copy full SHA for f78ddf0 - Browse repository at this point
Copy the full SHA f78ddf0View commit details -
Update dependency astral-sh/uv to v0.9.10 (#16753)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with | patch | `0.9.8` -> `0.9.10` | --- ### Release Notes <details> <summary>astral-sh/uv (astral-sh/uv)</summary> ### [`v0.9.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0910) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.9...0.9.10) Released on 2025-11-17. ##### Enhancements - Add support for `SSL_CERT_DIR` ([#​16473](https://redirect.github.com/astral-sh/uv/pull/16473)) - Enforce UTF‑8-encoded license files during `uv build` ([#​16699](https://redirect.github.com/astral-sh/uv/pull/16699)) - Error when a `project.license-files` glob matches nothing ([#​16697](https://redirect.github.com/astral-sh/uv/pull/16697)) - `pip install --target` (and `sync`) install Python if necessary ([#​16694](https://redirect.github.com/astral-sh/uv/pull/16694)) - Account for `python_downloads_json_url` in pre-release Python version warnings ([#​16737](https://redirect.github.com/astral-sh/uv/pull/16737)) - Support HTTP/HTTPS URLs in `uv python --python-downloads-json-url` ([#​16542](https://redirect.github.com/astral-sh/uv/pull/16542)) ##### Preview features - Add support for `--upgrade` in `uv python install` ([#​16676](https://redirect.github.com/astral-sh/uv/pull/16676)) - Fix handling of `python install --default` for pre-release Python versions ([#​16706](https://redirect.github.com/astral-sh/uv/pull/16706)) - Add `uv workspace list` to list workspace members ([#​16691](https://redirect.github.com/astral-sh/uv/pull/16691)) ##### Bug fixes - Don't check file URLs for ambiguously parsed credentials ([#​16759](https://redirect.github.com/astral-sh/uv/pull/16759)) ##### Documentation - Add a "storage" reference document ([#​15954](https://redirect.github.com/astral-sh/uv/pull/15954)) ### [`v0.9.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#099) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.8...0.9.9) Released on 2025-11-12. ##### Deprecations - Deprecate use of `--project` in `uv init` ([#​16674](https://redirect.github.com/astral-sh/uv/pull/16674)) ##### Enhancements - Add iOS support to Python interpreter discovery ([#​16686](https://redirect.github.com/astral-sh/uv/pull/16686)) - Reject ambiguously parsed URLs ([#​16622](https://redirect.github.com/astral-sh/uv/pull/16622)) - Allow explicit values in `uv version --bump` ([#​16555](https://redirect.github.com/astral-sh/uv/pull/16555)) - Warn on use of managed pre-release Python versions when a stable version is available ([#​16619](https://redirect.github.com/astral-sh/uv/pull/16619)) - Allow signing trampolines on Windows by using `.rcdata` to store metadata ([#​15068](https://redirect.github.com/astral-sh/uv/pull/15068)) - Add `--only-emit-workspace` and similar variants to `uv export` ([#​16681](https://redirect.github.com/astral-sh/uv/pull/16681)) ##### Preview features - Add `uv workspace dir` command ([#​16678](https://redirect.github.com/astral-sh/uv/pull/16678)) - Add `uv workspace metadata` command ([#​16516](https://redirect.github.com/astral-sh/uv/pull/16516)) ##### Configuration - Add `UV_NO_DEFAULT_GROUPS` environment variable ([#​16645](https://redirect.github.com/astral-sh/uv/pull/16645)) ##### Bug fixes - Remove `torch-model-archiver` and `torch-tb-profiler` from PyTorch backend ([#​16655](https://redirect.github.com/astral-sh/uv/pull/16655)) - Fix Pixi environment detection ([#​16585](https://redirect.github.com/astral-sh/uv/pull/16585)) ##### Documentation - Fix `CMD` path in FastAPI Dockerfile ([#​16701](https://redirect.github.com/astral-sh/uv/pull/16701)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 0e88114 - Browse repository at this point
Copy the full SHA 0e88114View commit details -
Disable always-authenticate when running under Dependabot (#16773)
Dependabot appears to run a proxy which intercepts all requests and adds credentials — credentials are _not_ provided via the CLI or environment variables and there's no way for a user to do so. This means that when `authenticate = "always"` is used (or when the index URL is on a pyx domain), uv will fail even though Dependabot may intercept the request and add credentials. See https://github.com/dependabot/dependabot-core/#private-registry-credential-management
Configuration menu - View commit details
-
Copy full SHA for 3ac43e8 - Browse repository at this point
Copy the full SHA 3ac43e8View commit details
Commits on Nov 19, 2025
-
Configuration menu - View commit details
-
Copy full SHA for fc0cf90 - Browse repository at this point
Copy the full SHA fc0cf90View commit details
Commits on Nov 20, 2025
-
Fix status messages without TTY (#16785)
<!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary #12175 changed the behavior of `on_request_complete` when stderr is not a tty to output `Downloading`/`Uploading` (via `Direction::as_str`). This fixes it to output `Downloaded`/`Uploaded` again. ## Test Plan Tested locally to verify new output. Old: ``` $ uv sync --no-cache 2>&1 | tee /dev/null Using CPython 3.14.0 Creating virtual environment at: .venv Resolved 12 packages in 19ms Downloading numpy (15.8MiB) Downloading matplotlib (9.4MiB) Downloading fonttools (4.6MiB) Downloading pillow (6.7MiB) Downloading kiwisolver (1.4MiB) Downloading kiwisolver Downloading fonttools Downloading pillow Downloading matplotlib Downloading numpy ``` New: ``` $ uv sync --no-cache 2>&1 | tee /dev/null Using CPython 3.14.0 Creating virtual environment at: .venv Resolved 12 packages in 3ms Downloading numpy (15.8MiB) Downloading fonttools (4.6MiB) Downloading matplotlib (9.4MiB) Downloading kiwisolver (1.4MiB) Downloading pillow (6.7MiB) Downloaded kiwisolver Downloaded pillow Downloaded fonttools Downloaded matplotlib Downloaded numpy ```
Configuration menu - View commit details
-
Copy full SHA for 4a867dc - Browse repository at this point
Copy the full SHA 4a867dcView commit details -
Document the new behavior for free-threaded python versions (#16781)
## Summary I noticed that after first installing the free-threaded version, then the gil version of 3.14, I wasn't able to install greenlet, because it doesn't ship with wheels for the free-threaded version (I think it isn't safe for it to use that interpreter). I noticed that the change made in 3.14 wasn't updated in the docs. ## Test Plan N/A --------- Co-authored-by: Wade Roberts <wade.roberts@centralsquare.com> Co-authored-by: Zanie Blue <contact@zanie.dev>
Configuration menu - View commit details
-
Copy full SHA for 7d8634b - Browse repository at this point
Copy the full SHA 7d8634bView commit details -
Add SBOM export support (#16523)
Co-authored-by: Will Rollason <william.rollason@snyk.io>
Configuration menu - View commit details
-
Copy full SHA for fd7e6d0 - Browse repository at this point
Copy the full SHA fd7e6d0View commit details -
Move do not upload publish note out of the guide into concepts (#16789)
This feels a little out of place here and it seems nice to be able to link to it.
Configuration menu - View commit details
-
Copy full SHA for 75bd2ea - Browse repository at this point
Copy the full SHA 75bd2eaView commit details -
Configuration menu - View commit details
-
Copy full SHA for 5b4446f - Browse repository at this point
Copy the full SHA 5b4446fView commit details -
Preserve end-of-line comment whitespace when editing
pyproject.toml(……#16734) Resolves #16719 `uv add` collapses multiple spaces before inline comments in `[project.dependencies]`, causing unrelated diffs and moving comments onto the wrong columns. This diff captures the exact whitespace padding that preceded each end-of-line comment when parsing the array and reuses it when formatting. --------- Co-authored-by: konstin <konstin@mailbox.org>
Configuration menu - View commit details
-
Copy full SHA for 79bfa2b - Browse repository at this point
Copy the full SHA 79bfa2bView commit details -
Add
uv workspace list --paths(#16776)I initially thought I didn't need this, but in some contexts, the workspace member name is not useful at all and I just want to iterate over the paths without composing with `uv workspace dir --package <name>`
Configuration menu - View commit details
-
Copy full SHA for aebd757 - Browse repository at this point
Copy the full SHA aebd757View commit details -
Configuration menu - View commit details
-
Copy full SHA for 5eda329 - Browse repository at this point
Copy the full SHA 5eda329View commit details -
Sync latest Python releases (#16792)
Automated update for Python releases. --------- Co-authored-by: jjhelmus <1050278+jjhelmus@users.noreply.github.com> Co-authored-by: Jonathan Helmus <jjhelmus@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for e799a08 - Browse repository at this point
Copy the full SHA e799a08View commit details -
Configuration menu - View commit details
-
Copy full SHA for dfe8904 - Browse repository at this point
Copy the full SHA dfe8904View commit details -
Configuration menu - View commit details
-
Copy full SHA for 4be1e0a - Browse repository at this point
Copy the full SHA 4be1e0aView commit details -
Cache Dependabot lookup (#16795)
## Summary Small nit, but I wanted to avoid doing this access in the hot path. (Probably not important in practice.) --------- Co-authored-by: Zanie Blue <contact@zanie.dev>
Configuration menu - View commit details
-
Copy full SHA for c5c4416 - Browse repository at this point
Copy the full SHA c5c4416View commit details -
Increase walltime timeout by 5m (#16796)
It is failing while caching the dependencies
Configuration menu - View commit details
-
Copy full SHA for f2e92b4 - Browse repository at this point
Copy the full SHA f2e92b4View commit details -
Configuration menu - View commit details
-
Copy full SHA for 8d8aabb - Browse repository at this point
Copy the full SHA 8d8aabbView commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 0.9.10...0.9.11