Skip to content

uv lock should redact username and password from source #5119

@ewianda

Description

@ewianda

eg

 
 [[distribution]]
 name = "absl-py"
 version = "2.0.0"
source = { registry = "https://username:secrete-token@private-registry/registry/pypi/simple/" }

to

[[distribution]]
 name = "absl-py"
 version = "2.0.0"
source = { registry = "https://private-registry/registry/pypi/simple/" }

similar to 

https://github.com/astral-sh/uv/issues/3106

uv --version
uv 0.2.24

similar #3106

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingpreviewExperimental behavior

Type

No type
No fields configured for issues without a type.

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions