| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
Sorry, something went wrong.
Renovate PR Review Results⚖️ Safety Assessment: ✅ Safe🔍 Release Content AnalysisVersion Jump: 0.9.24 → 0.11.6 (spans versions 0.9.24 through 0.11.6, including breaking changes in 0.10.0) Major Changes Across Versions: Version 0.10.0 (Breaking Changes):
Version 0.11.x Enhancements:
Security Fixes:
🎯 Impact Scope InvestigationCommands Used in Codebase:
Analysis Results: ✅ No Breaking Changes Affect This Project:
✅ Commands Used Are Stable:
✅ Python Version Compatibility:
✅ Dependency Resolution:
💡 Recommended ActionsImmediate Actions:
Optional Improvements (Not Required):
No Migration Required:
🔗 Reference LinksGenerated by koki-develop/claude-renovate-review |
Sorry, something went wrong.
| Back | FazBrowse Home | New Git URL |
This PR contains the following updates:
Release Notes
astral-sh/uv (pipx:uv)v0.11.6
Compare Source
Released on 2026-04-09.
Bug fixes
v0.11.5
Compare Source
Released on 2026-04-08.
Python
Enhancements
Preview features
Bug fixes
Documentation
v0.11.4
Compare Source
Released on 2026-04-07.
Python
Enhancements
Bug fixes
Documentation
v0.11.3
Compare Source
Released on 2026-04-01.
Enhancements
Preview features
Bug fixes
Documentation
v0.11.2
Compare Source
Released on 2026-03-26.
Enhancements
Preview features
Bug fixes
v0.11.1
Compare Source
Released on 2026-03-24.
Bug fixes
Documentation
v0.11.0
Compare Source
Released on 2026-03-23.
Breaking changes
This release includes changes to the networking stack used by uv. While we think that breakage will be rare, it is possible that these changes will result in the rejection of certificates previously trusted by uv so we have marked the change as breaking out of an abundance of caution.
The changes are largely driven by the upgrade of reqwest, which powers uv's HTTP clients, to v0.13 which included some breaking changes to TLS certificate verification.
The following changes are included:
rustls-platform-verifier is used instead of rustls-native-certs and webpki for certificate verification
This change should have no effect unless you are using the native-tls option to enable reading system certificates.
rustls-platform-verifier delegates to the system for certificate validation (e.g., Security.framework on macOS) instead of eagerly loading certificates from the system and verifying them via webpki. The effects of this change will vary based on the operating system. In general, uv's certificate validation should now be more consistent with browsers and other native applications. However, this is the most likely cause of breaking changes in this release. Some previously failing certificate chains may succeed, and some previously accepted certificate chains may fail. In either case, we expect the validation to be more correct and welcome reports of regressions.
In particular, because more responsibility for validating the certificate is transferred to your system's security library, some features like CA constraints or revocation of certificates via OCSP and CRLs may now be used.
This change should improve performance when using system certificate on macOS, as uv no longer needs to load all certificates from the keychain at startup.
aws-lc is used instead of ring for a cryptography backend
There should not be breaking changes from this change. We expect this to expand support for certificate signature algorithms.
--native-tls is deprecated in favor of a new --system-certs flag
The --native-tls flag is still usable and has identical behavior to --system-certs.
This change was made to reduce confusion about the TLS implementation uv uses. uv always uses rustls not native-tls.
Building uv on x86-64 and i686 Windows requires NASM
NASM is required by aws-lc. If not found on the system, a prebuilt blob provided by aws-lc-sys will be used.
If you are not building uv from source, this change has no effect.
See the CONTRIBUTING guide for details.
Empty SSL_CERT_FILE values are ignored (for consistency with SSL_CERT_DIR)
See #18550 for details.
Python
See the python-build-standalone release notes for details.
Enhancements
Preview features
Performance
Bug fixes
Documentation
v0.10.12
Compare Source
Released on 2026-03-19.
Python
Enhancements
Preview features
Bug fixes
Documentation
v0.10.11
Compare Source
Released on 2026-03-16.
Enhancements
Performance
Bug fixes
Documentation
v0.10.10
Compare Source
Released on 2026-03-13.
Python
Enhancements
Preview features
Bug fixes
Documentation
v0.10.9
Compare Source
Released on 2026-03-06.
Enhancements
Configuration
Performance
Bug fixes
Documentation
v0.10.8
Compare Source
Released on 2026-03-03.
Python
Enhancements
Configuration
Bug fixes
Documentation
v0.10.7
Compare Source
Released on 2026-02-27.
Bug fixes
Enhancements
v0.10.6
Compare Source
Released on 2026-02-24.
Bug fixes
Documentation
v0.10.5
Compare Source
Released on 2026-02-23.
Enhancements
Performance
Bug fixes
Documentation
v0.10.4
Compare Source
Released on 2026-02-17.
Enhancements
Bug fixes
v0.10.3
Compare Source
Released on 2026-02-16.
Python
Enhancements
Preview features
Bug fixes
Documentation
v0.10.2
Compare Source
Released on 2026-02-10.
Enhancements
Bug fixes
v0.10.1
Compare Source
Released on 2026-03-19.
Python
Enhancements
Preview features
Bug fixes
Documentation
v0.10.0
Compare Source
Since we released uv 0.9.0 in October of 2025, we've accumulated various changes that improve correctness and user experience, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution. We expect most users to be able to upgrade without making changes.
This release also includes the stabilization of preview features. Python upgrades are now stable, including the uv python upgrade command, uv python install --upgrade, and automatically upgrading Python patch versions in virtual environments when a new version is installed. The add-bounds and extra-build-dependencies settings are now stable. Finally, the uv workspace dir and uv workspace list utilities for writing scripts against workspace members are now stable.
There are no breaking changes to uv_build. If you have an upper bound in your [build-system] table, you should update it, e.g., from <0.10.0 to <0.11.0.
Breaking changes
Require --clear to remove existing virtual environments in uv venv (#17757)
Previously, uv venv would prompt for confirmation before removing an existing virtual environment in interactive contexts, and remove it without confirmation in non-interactive contexts. Now, uv venv requires the --clear flag to remove an existing virtual environment. A warning for this change was added in uv 0.8.
You can opt out of this behavior by passing the --clear flag or setting UV_VENV_CLEAR=1.
Error if multiple indexes include default = true (#17011)
Previously, uv would silently accept multiple indexes with default = true and use the first one. Now, uv will error if multiple indexes are marked as the default.
You cannot opt out of this behavior. Remove default = true from all but one index.
Error when an explicit index is unnamed (#17777)
Explicit indexes can only be used via the [tool.uv.sources] table, which requires referencing the index by name. Previously, uv would silently accept unnamed explicit indexes, which could never be referenced. Now, uv will error if an explicit index does not have a name.
You cannot opt out of this behavior. Add a name to the explicit index or remove the entry.
Install alternative Python executables using their implementation name (#17756, #17760)
Previously, uv python install would install PyPy, GraalPy, and Pyodide executables with names like python3.10 into the bin directory. Now, these executables will be named using their implementation name, e.g., pypy3.10, graalpy3.10, and pyodide3.12, to avoid conflicting with CPython installations.
You cannot opt out of this behavior.
Respect global Python version pins in uv tool run and uv tool install (#14112)
Previously, uv tool run and uv tool install did not respect the global Python version pin (set via uv python pin --global). Now, these commands will use the global Python version when no explicit version is requested.
For uv tool install, if the tool is already installed, the Python version will not change unless --reinstall or --python is provided. If the tool was previously installed with an explicit --python flag, the global pin will not override it.
You can opt out of this behavior by providing an explicit --python flag.
Remove Debian Bookworm, Alpine 3.21, and Python 3.8 Docker images (#17755)
The Debian Bookworm and Alpine 3.21 images were replaced by Debian Trixie and Alpine 3.22 as defaults in uv 0.9. These older images are now removed. Python 3.8 images are also removed, as Python 3.8 is no longer supported in the Trixie or Alpine base images.
The following image tags are no longer published:
Use uv:debian or uv:trixie instead of uv:bookworm, uv:alpine or uv:alpine3.22 instead of uv:alpine3.21, and a newer Python version instead of uv:python3.8-*.
Drop PPC64 (big endian) builds (#17626)
uv no longer provides pre-built binaries for PPC64 (big endian). This platform appears to be largely unused and is only supported on a single manylinux version. PPC64LE (little endian) builds are unaffected.
Building uv from source is still supported for this platform.
Skip generating activate.csh for relocatable virtual environments (#17759)
Previously, uv venv --relocatable would generate an activate.csh script that contained hardcoded paths, making it incompatible with relocation. Now, the activate.csh script is not generated for relocatable virtual environments.
You cannot opt out of this behavior.
Require username when multiple credentials match a URL (#16983)
When using uv auth login to store credentials, you can register multiple username and password combinations for the same host. Previously, when uv needed to authenticate and multiple credentials matched the URL (e.g., when retrieving a token with uv auth token), uv would pick the first match. Now, uv will error instead.
You cannot opt out of this behavior. Include the username in the request, e.g., uv auth token --username foo example.com.
Avoid invalidating the lockfile versions after an exclude-newer change (#17721)
Previously, changing the exclude-newer setting would cause package versions to be upgraded, ignoring the lockfile entirely. Now, uv will only change package versions if they are no longer within the exclude-newer range.
You can restore the previous behavior by using --upgrade or --upgrade-package to opt-in to package version changes.
Upgrade uv format to Ruff 0.15.0 (#17838)
uv format now uses Ruff 0.15.0, which uses the 2026 style guide. See the blog post for details.
The formatting of code is likely to change. You can opt out of this behavior by requesting an older Ruff version, e.g., uv format --version 0.14.14.
Update uv crate test features to use test- as a prefix (#17860)
This change only affects redistributors of uv. The Cargo features used to gate test dependencies, e.g., pypi, have been renamed with a test- prefix for clarity, e.g., test-pypi.
Stabilizations
uv python upgrade and uv python install --upgrade (#17766)
When installing Python versions, an intermediary directory without the patch version attached will be created, and virtual environments will be transparently upgraded to new patch versions.
See the Python version documentation for more details.
uv add --bounds and the add-bounds configuration option (#17660)
This does not come with any behavior changes. You will no longer see an experimental warning when using uv add --bounds or add-bounds in configuration.
uv workspace list and uv workspace dir (#17768)
This does not come with any behavior changes. You will no longer see an experimental warning when using these commands.
extra-build-dependencies (#17767)
This does not come with any behavior changes. You will no longer see an experimental warning when using extra-build-dependencies in configuration.
Enhancements
Bug fixes
v0.9.30
Compare Source
Release Notes
Released on 2026-02-04.
Python
Enhancements
Preview features
Bug fixes
Install uv 0.9.30
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.30/uv-installer.ps1 | iex"Download uv 0.9.30
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
You can also download the attestation from GitHub and verify against that directly:
v0.9.29
Compare Source
Release Notes
Released on 2026-02-03.
Python
Enhancements
Preview features
Bug fixes
Documentation
Security
Install uv 0.9.29
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https: