Python/uv
1
0
Fork 0
mirror of https://github.com/astral-sh/uv synced 2026-01-22 05:50:25 -05:00
Code Issues Packages Projects Releases Wiki Activity
8,122 Commits 588 Branches 246 Tags
824706ca871ebcb89c0ec9cc248fb7616a609cd7
Commit Graph

644 Commits

Author SHA1 Message Date
Zanie Blue
824706ca87 Move Windows registry test from test-system to test-integration (#17432) 
The Windows registry test (PEP 514 integration) tests Python
installation registration functionality rather than system Python
detection like the other tests in test-system, so it fits better in
test-integration.

Co-authored-by: Claude <noreply@anthropic.com>
 2026-01-13 00:49:45 +00:00
Zanie Blue
7fa30ab278 Move release plan checks to a separate workflow (#17422) 
We get a bunch of redundant skipped `Release / Build binary ...` jobs in
CI otherwise, and I would rather the release workflow didn't have a pull
request trigger at all.

Follows #17388
 2026-01-12 14:49:40 -06:00
Zanie Blue
903dd292b3 Split up ci.yml (#17388) 
This file is too big for an LLM context window and several contributors
have complained about it being too scary to touch.

This also gets us collapsible sections in the UI.

I renamed some jobs for clarity in the meantime. And added a meta-job
for required checks passing so we can avoid churn in our "Settings" when
we change job names.

Note this was entirely refactored by Claude.

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-12 12:34:30 -06:00
Zanie Blue
0da6f263a9 Only run trampoline checks in CI when trampolines change (#17386) 
I'm trying to avoid wasting CI time.

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2026-01-12 09:17:05 -06:00
renovate[bot]
ae1933f20f Update dependency astral-sh/uv to v0.9.24 (#17409) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
patch | `0.9.21` → `0.9.24` |

---

### Release Notes

<details>
<summary>astral-sh/uv (astral-sh/uv)</summary>

###
[`v0.9.24`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0924)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.23...0.9.24)

Released on 2026-01-09.

##### Bug fixes

- Fix handling of `UV_NO_SYNC=1 uv run ...`
([#&#8203;17391](https://redirect.github.com/astral-sh/uv/pull/17391))
- Rebuild dynamic distribution when version changes with `--no-cache`
([#&#8203;17387](https://redirect.github.com/astral-sh/uv/pull/17387))

##### Documentation

- Add Rust language classifier
([#&#8203;17389](https://redirect.github.com/astral-sh/uv/pull/17389))

###
[`v0.9.23`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0923)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.22...0.9.23)

Released on 2026-01-09.

##### Enhancements

- Only write portable paths in `RECORD` files
([#&#8203;17339](https://redirect.github.com/astral-sh/uv/pull/17339))
- Support relative paths in `UV_PYTHON_BIN_DIR` and `UV_TOOL_BIN_DIR`
([#&#8203;17367](https://redirect.github.com/astral-sh/uv/pull/17367))

##### Preview features

- Enable uploads to S3 via pre-signed URLs
([#&#8203;17349](https://redirect.github.com/astral-sh/uv/pull/17349))

##### Configuration

- Allow setting proxy variables via global / user configuration
([#&#8203;16918](https://redirect.github.com/astral-sh/uv/pull/16918))
- Manually parse and reconcile Boolean environment variables
([#&#8203;17321](https://redirect.github.com/astral-sh/uv/pull/17321))

##### Bug fixes

- Avoid broken build artifacts on build failure
([#&#8203;17276](https://redirect.github.com/astral-sh/uv/pull/17276))
- Fix missing dependencies on synthetic root in SBOM export
([#&#8203;17363](https://redirect.github.com/astral-sh/uv/pull/17363))
- Recognize `armv8l` as an alias for `armv7l` in platform tag parsing
([#&#8203;17384](https://redirect.github.com/astral-sh/uv/pull/17384))
- Fix redaction of a URL in a middleware trace log
([#&#8203;17346](https://redirect.github.com/astral-sh/uv/pull/17346))

##### Documentation

- Add `index.md` suggestion to `llms.txt`
([#&#8203;17362](https://redirect.github.com/astral-sh/uv/pull/17362))
- Clarify that `uv run` uses inexact syncing by default
([#&#8203;17366](https://redirect.github.com/astral-sh/uv/pull/17366))

###
[`v0.9.22`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0922)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.21...0.9.22)

Released on 2026-01-06.

##### Enhancements

- Use a dedicated error message when lockfile can't be found
([#&#8203;17318](https://redirect.github.com/astral-sh/uv/pull/17318))

##### Bug fixes

- Filter unusable wheels from the lockfile for more architectures
([#&#8203;17317](https://redirect.github.com/astral-sh/uv/pull/17317))
- Correctly count retries originating from early middleware errors
([#&#8203;17274](https://redirect.github.com/astral-sh/uv/pull/17274))

##### Documentation

- Clarify requirements file format in docs
([#&#8203;17284](https://redirect.github.com/astral-sh/uv/pull/17284))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-12 11:00:34 +01:00
renovate[bot]
cfaf1430a2 Update peter-evans/create-pull-request action to v8 (#17392) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request)
| action | major | `v7.0.8` → `v8.0.0` |

---

### Release Notes

<details>
<summary>peter-evans/create-pull-request
(peter-evans/create-pull-request)</summary>

###
[`v8.0.0`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v8.0.0):
Create Pull Request v8.0.0

[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.11...v8.0.0)

##### What's new in v8

- Requires [Actions Runner
v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
or later if you are using a self-hosted runner for Node 24 support.

##### What's Changed

- chore: Update checkout action version to v6 by
[@&#8203;yonas](https://redirect.github.com/yonas) in
[#&#8203;4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258)
- Update actions/checkout references to
[@&#8203;v6](https://redirect.github.com/v6) in docs by
[@&#8203;Copilot](https://redirect.github.com/Copilot) in
[#&#8203;4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259)
- feat: v8 by
[@&#8203;peter-evans](https://redirect.github.com/peter-evans) in
[#&#8203;4260](https://redirect.github.com/peter-evans/create-pull-request/pull/4260)

##### New Contributors

- [@&#8203;yonas](https://redirect.github.com/yonas) made their first
contribution in
[#&#8203;4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258)
- [@&#8203;Copilot](https://redirect.github.com/Copilot) made their
first contribution in
[#&#8203;4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259)

**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.11...v8.0.0>

###
[`v7.0.11`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.11):
Create Pull Request v7.0.11

[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.10...v7.0.11)

##### What's Changed

- fix: restrict remote prune to self-hosted runners by
[@&#8203;peter-evans](https://redirect.github.com/peter-evans) in
[#&#8203;4250](https://redirect.github.com/peter-evans/create-pull-request/pull/4250)

**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.10...v7.0.11>

###
[`v7.0.10`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.10):
Create Pull Request v7.0.10

[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.9...v7.0.10)

⚙️ Fixes an issue where updating a pull request failed when targeting a
forked repository with the same owner as its parent.

##### What's Changed

- build(deps): bump the github-actions group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4235](https://redirect.github.com/peter-evans/create-pull-request/pull/4235)
- build(deps-dev): bump prettier from 3.6.2 to 3.7.3 in the npm group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4240](https://redirect.github.com/peter-evans/create-pull-request/pull/4240)
- fix: provider list pulls fallback for multi fork same owner by
[@&#8203;peter-evans](https://redirect.github.com/peter-evans) in
[#&#8203;4245](https://redirect.github.com/peter-evans/create-pull-request/pull/4245)

##### New Contributors

- [@&#8203;obnyis](https://redirect.github.com/obnyis) made their first
contribution in
[#&#8203;4064](https://redirect.github.com/peter-evans/create-pull-request/pull/4064)

**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.9...v7.0.10>

###
[`v7.0.9`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.9):
Create Pull Request v7.0.9

[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.8...v7.0.9)

⚙️ Fixes an
[incompatibility](https://redirect.github.com/peter-evans/create-pull-request/issues/4228)
with the recently released `actions/checkout@v6`.

#### What's Changed

- \~70 dependency updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
- docs: fix workaround description about `ready_for_review` by
[@&#8203;ybiquitous](https://redirect.github.com/ybiquitous) in
[#&#8203;3939](https://redirect.github.com/peter-evans/create-pull-request/pull/3939)
- Docs: `add-paths` default behavior by
[@&#8203;joeflack4](https://redirect.github.com/joeflack4) in
[#&#8203;3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928)
- docs: update to create-github-app-token v2 by
[@&#8203;Goooler](https://redirect.github.com/Goooler) in
[#&#8203;4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063)
- Fix compatibility with actions/checkout\@&#8203;v6 by
[@&#8203;ericsciple](https://redirect.github.com/ericsciple) in
[#&#8203;4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230)

#### New Contributors

- [@&#8203;joeflack4](https://redirect.github.com/joeflack4) made their
first contribution in
[#&#8203;3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928)
- [@&#8203;Goooler](https://redirect.github.com/Goooler) made their
first contribution in
[#&#8203;4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063)
- [@&#8203;ericsciple](https://redirect.github.com/ericsciple) made
their first contribution in
[#&#8203;4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230)

**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.8...v7.0.9>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-12 10:52:09 +01:00
Zanie Blue
600a332bec Add Renovate automation for maturin version bumps (#17353) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-01-08 07:15:17 -06:00
Zanie Blue
c71ba13b6d Avoid checking formatting of all files during windows trampoline checks (#17348) 
I've noticed this escapes the trampoline crates so these fail whenever
there's bad formatting in the workspace.

Co-authored-by: Claude <noreply@anthropic.com>
 2026-01-07 13:14:47 -06:00
Jo
29c44c71c2 Use ty to type-check Python files (#17229) 
I added mypy type‑checking in https://github.com/astral-sh/uv/pull/5332,
so I think it's a good time to switch to ty now :)
 2026-01-07 12:25:15 -06:00
William Woodruff
6f9fced6c6 Replace deprecated benchmarking mode (#17222) 
## Summary

Minor, noticed this with #17221. CodSpeed has deprecated
`instrumentation` and replaced it with `simulation`, which has the same
meaning:

https://codspeed.io/docs/instruments/cpu/overview#legacy-terminology

## Test Plan

No functional changes.

---------

Signed-off-by: William Woodruff <william@astral.sh>
 2026-01-05 19:52:29 +01:00
renovate[bot]
1b66f24b4c Update docker/metadata-action action to v5.10.0 (#17301) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 13:05:27 -05:00
renovate[bot]
0f53c48dd9 Update actions/setup-python action to v6 (#17299) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 12:51:49 -05:00
renovate[bot]
9ea4d1afa7 Update docker/login-action action to v3.6.0 (#17300) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 17:46:33 +00:00
renovate[bot]
8e8881e2fa Update EmbarkStudios/cargo-deny-action action to v2.0.14 (#16898) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 12:40:56 -05:00
renovate[bot]
1a1eab6ad5 Update actions/checkout action to v6 (#17295) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 17:01:41 +00:00
renovate[bot]
2d71e39a8b Update actions/attest-build-provenance action to v3 (#17294) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 16:55:47 +00:00
renovate[bot]
0fafde3f6e Update astral-sh/setup-uv action to v7 (#17291) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 16:21:18 +00:00
renovate[bot]
34b04fa97f Update zizmorcore/zizmor-action action to v0.3.0 (#17290) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 16:20:14 +00:00
renovate[bot]
e54056f71a Update dependency astral-sh/uv to v0.9.21 (#17289) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-02 16:14:52 +00:00
renovate[bot]
805e327f75 Update dependency astral-sh/uv to v0.9.18 (#17286) 2026-01-02 15:43:29 +00:00
renovate[bot]
edafa2c020 Update actions/checkout digest to 8e8c483 (#13905) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-29 17:14:09 -05:00
renovate[bot]
3d745d2261 Update actions/attest-build-provenance digest to 00014ed (#16556) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: William Woodruff <william@astral.sh>
 2025-12-29 16:15:40 -05:00
Tomasz Kramkowski
c19e22fb0b Use nextest profiles to configure CI (#17220) 
This centralises the configuration and allows certain overrides to be CI
specific.
 2025-12-29 13:13:43 +00:00
Arthur Pastel
137edcf239 Bump CodSpeed action to v4.4.1 (#17198) 
## Summary

This fixes the report generation issues caused by large profile data now
properly handled by this newer version

## Test Plan

Reports should be generated on this PR
 2025-12-20 10:28:04 -06:00
Zanie Blue
e006a69fe8 Configure prettier prose-wrap in .prettierrc instead of the CLI (#17184) 
This also removes the file-specific targets from prettier execution
which means we're including `.json`, `.css`, and `.html` files, which
seems like an improvement.

Co-authored-by: Claude <noreply@anthropic.com>
 2025-12-18 18:54:23 -06:00
konsti
af95677b9b Update cargo shear (#17106) 
Requires a companion PR that updates the GitHub Action.
 2025-12-15 18:46:35 +01:00
Zanie Blue
5a55bbe883 Include Docker images with the alpine version, e.g., python3.x-alpine3.23 (#17100) 
Closes https://github.com/astral-sh/uv/issues/17095

This also stabilizes the Alpine version for users that do not choose to
pin it. We could add this to the build matrix separately to avoid that,
but I think that's okay?
 2025-12-12 14:17:15 +00:00
konsti
ebdffaf728 CI Perf: fast-build (#16780) 
Co-authored-by: Zanie Blue <contact@zanie.dev>
 2025-12-11 13:51:37 +00:00
Zanie Blue
b931c6687c Increase the size of binary build runners (#17016) 
Summary from asking Claude to compare the runtime

```
  | Job                       | Before | After | Saved | Reduction |
  |---------------------------|--------|-------|-------|-----------|
  | macos-aarch64             | 19.1m  | 9.8m  | 9.2m  | 48%       |
  | macos-x86_64              | 15.1m  | 9.2m  | 5.9m  | 39%       |
  | linux-arm (aarch64)       | 18.6m  | 12.2m | 6.4m  | 34%       |
  | linux-arm (armv7)         | 17.4m  | 11.5m | 5.9m  | 34%       |
  | musllinux-cross (aarch64) | 19.3m  | 13.2m | 6.1m  | 32%       |
  | linux-arm (arm)           | 16.6m  | 11.4m | 5.2m  | 31%       |
  | musllinux-cross (armv7)   | 16.4m  | 10.8m | 5.6m  | 34%       |
```
The longest-running affected job went from 19.3m → 13.2m (saved 6.1
minutes, 32% faster).
 2025-12-09 16:04:43 -06:00
William Woodruff
69910b4aab Publish PyPI releases before crates.io artifacts (#16989) 
## Summary

Closes #16987.

## Test Plan

We need a good way to dry-run this...

---------

Signed-off-by: William Woodruff <william@astral.sh>
 2025-12-09 15:20:21 -06:00
Zanie Blue
a70ee58ae1 Move test support files out of scripts/ into test/ 
(#17032)

It's been bothering me that we have a bunch of stub packages and such in
a `scripts` directory.
 2025-12-09 10:06:05 -06:00
Zanie Blue
5a6f2ea319 Generate reference documentation at publish-time and the JSON schema at release-time (#16969) 
It'd be nice to avoid churn for contributors. This is a pretty frequent
cause of CI failures and I don't think we really need to have the
reference documentation committed.
 2025-12-08 12:31:38 +00:00
renovate[bot]
1d8252599a Update Swatinem/rust-cache action to v2.8.2 (#16128) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [Swatinem/rust-cache](https://redirect.github.com/Swatinem/rust-cache)
| action | patch | `v2.8.0` -> `v2.8.2` |

---

### Release Notes

<details>
<summary>Swatinem/rust-cache (Swatinem/rust-cache)</summary>

###
[`v2.8.2`](https://redirect.github.com/Swatinem/rust-cache/releases/tag/v2.8.2)

[Compare
Source](https://redirect.github.com/Swatinem/rust-cache/compare/v2.8.1...v2.8.2)

##### What's Changed

- ci: address lint findings, add zizmor workflow by
[@&#8203;woodruffw](https://redirect.github.com/woodruffw) in
[#&#8203;262](https://redirect.github.com/Swatinem/rust-cache/pull/262)
- feat: Implement ability to disable adding job ID + rust environment
hashes to cache names by
[@&#8203;Ryan-Brice](https://redirect.github.com/Ryan-Brice) in
[#&#8203;279](https://redirect.github.com/Swatinem/rust-cache/pull/279)
- Don't overwrite env for cargo-metadata call by
[@&#8203;MaeIsBad](https://redirect.github.com/MaeIsBad) in
[#&#8203;285](https://redirect.github.com/Swatinem/rust-cache/pull/285)

##### New Contributors

- [@&#8203;woodruffw](https://redirect.github.com/woodruffw) made their
first contribution in
[#&#8203;262](https://redirect.github.com/Swatinem/rust-cache/pull/262)
- [@&#8203;Ryan-Brice](https://redirect.github.com/Ryan-Brice) made
their first contribution in
[#&#8203;279](https://redirect.github.com/Swatinem/rust-cache/pull/279)
- [@&#8203;MaeIsBad](https://redirect.github.com/MaeIsBad) made their
first contribution in
[#&#8203;285](https://redirect.github.com/Swatinem/rust-cache/pull/285)

**Full Changelog**:
<https://github.com/Swatinem/rust-cache/compare/v2.8.1...v2.8.2>

###
[`v2.8.1`](https://redirect.github.com/Swatinem/rust-cache/releases/tag/v2.8.1)

[Compare
Source](https://redirect.github.com/Swatinem/rust-cache/compare/v2.8.0...v2.8.1)

##### What's Changed

- Set empty `CARGO_ENCODED_RUSTFLAGS` in workspace metadata retrieval by
[@&#8203;ark0f](https://redirect.github.com/ark0f) in
[#&#8203;249](https://redirect.github.com/Swatinem/rust-cache/pull/249)
- chore(deps): update dependencies by
[@&#8203;reneleonhardt](https://redirect.github.com/reneleonhardt) in
[#&#8203;251](https://redirect.github.com/Swatinem/rust-cache/pull/251)
- chore: fix dependabot groups by
[@&#8203;reneleonhardt](https://redirect.github.com/reneleonhardt) in
[#&#8203;253](https://redirect.github.com/Swatinem/rust-cache/pull/253)
- Bump the prd-patch group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;254](https://redirect.github.com/Swatinem/rust-cache/pull/254)
- chore(dependabot): regenerate and commit dist/ by
[@&#8203;reneleonhardt](https://redirect.github.com/reneleonhardt) in
[#&#8203;257](https://redirect.github.com/Swatinem/rust-cache/pull/257)
- Bump [@&#8203;types/node](https://redirect.github.com/types/node) from
22.16.3 to 24.2.1 in the dev-major group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;255](https://redirect.github.com/Swatinem/rust-cache/pull/255)
- Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;256](https://redirect.github.com/Swatinem/rust-cache/pull/256)
- Bump actions/setup-node from 4 to 5 in the actions group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;259](https://redirect.github.com/Swatinem/rust-cache/pull/259)
- Update README.md by
[@&#8203;Propfend](https://redirect.github.com/Propfend) in
[#&#8203;234](https://redirect.github.com/Swatinem/rust-cache/pull/234)
- Bump [@&#8203;types/node](https://redirect.github.com/types/node) from
24.2.1 to 24.3.0 in the dev-minor group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;258](https://redirect.github.com/Swatinem/rust-cache/pull/258)

##### New Contributors

- [@&#8203;ark0f](https://redirect.github.com/ark0f) made their first
contribution in
[#&#8203;249](https://redirect.github.com/Swatinem/rust-cache/pull/249)
- [@&#8203;reneleonhardt](https://redirect.github.com/reneleonhardt)
made their first contribution in
[#&#8203;251](https://redirect.github.com/Swatinem/rust-cache/pull/251)
- [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
made their first contribution in
[#&#8203;254](https://redirect.github.com/Swatinem/rust-cache/pull/254)
- [@&#8203;Propfend](https://redirect.github.com/Propfend) made their
first contribution in
[#&#8203;234](https://redirect.github.com/Swatinem/rust-cache/pull/234)

**Full Changelog**:
<https://github.com/Swatinem/rust-cache/compare/v2...v2.8.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQyLjE5LjkiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-03 15:10:44 +01:00
Zanie Blue
7954b34989 Revert "Temporarily drop crates-publish from the release for 0.9.15 re-run (#16945)" (#16947) 
This reverts commit 89c411f0ae /
https://github.com/astral-sh/uv/pull/16945 restoring crates publish.
 2025-12-02 19:46:55 -06:00
Zanie Blue
89c411f0ae Temporarily drop crates-publish from the release for 0.9.15 re-run (#16945) 
See https://github.com/astral-sh/uv/pull/16944

The `crates.io` publish succeeded and is not idempotent (i.e., it'll
fail on another publish attempt) so we will skip it for a re-run of the
release workflow.
 2025-12-02 18:57:47 -06:00
William Woodruff
18a36528ea Disable PEP 740 attestations for PyPI publishing (#16944) 
## Summary

This broke the release and I haven't figured out why yet.

## Test Plan

Blame my past self.

Signed-off-by: William Woodruff <william@astral.sh>
 2025-12-02 18:50:20 -06:00
William Woodruff
e38cab64ce Use our org-wide Renovate preset (#16935) 2025-12-02 18:28:55 +00:00
Zanie Blue
e4d193a5f8 Fix uv-trampoline-builder builds from crates.io by moving bundled executables (#16922) 
Closes https://github.com/astral-sh/uv/issues/16836
 2025-12-02 07:50:39 -06:00
samypr100
fee7f9d093 Support Git LFS with opt-in (#16143) 
## Summary

Follow up to https://github.com/astral-sh/uv/pull/15563
Closes https://github.com/astral-sh/uv/issues/13485

This is a first-pass at adding support for conditional support for Git
LFS between git sources, initial feedback welcome.

e.g.
```
[tool.uv.sources]
test-lfs-repo = { git = "https://github.com/zanieb/test-lfs-repo.git", lfs = true }
```

For context previously a user had to set `UV_GIT_LFS` to have uv fetch
lfs objects on git sources. This env var was all or nothing, meaning you
must always have it set to get consistent behavior and it applied to all
git sources. If you fetched lfs objects at a revision and then turned
off lfs (or vice versa), the git db, corresponding checkout lfs
artifacts would not be updated properly. Similarly, when git source
distributions were built, there would be no distinction between sources
with lfs and without lfs. Hence, it could corrupt the git, sdist, and
archive caches.

In order to support some sources being LFS enabled and other not, this
PR adds a stateful layer roughly similar to how `subdirectory` works but
for `lfs` since the git database, the checkouts and the corresponding
caching layers needed to be LFS aware (requested vs installed). The
caches also had to isolated and treated entirely separate when handling
LFS sources.

Summary
* Adds `lfs = true` or `lfs = false` to git sources in pyproject.toml
* Added `lfs=true` query param / fragments to most relevant url structs
(not parsed as user input)
  * In the case of uv add / uv tool, `--lfs` is supported instead
* `UV_GIT_LFS` environment variable support is still functional for
non-project entrypoints (e.g. uv pip)
* `direct-url.json` now has an custom `git_lfs` entry under VcsInfo
(note, this is not in the spec currently -- see caveats).
* git database and checkouts have an different cache key as the sources
should be treated effectively different for the same rev.
* sdists cache also differ in the cache key of a built distribution if
it was built using LFS enabled revisions to distinguish between non-LFS
same revisions. This ensures the strong assumption for archive-v0 that
an unpacked revision "doesn't change sources" stays valid.

Caveats
* `pylock.toml` import support has not been added via git_lfs=true,
going through the spec it wasn't clear to me it's something we'd support
outside of the env var (for now).
* direct-url struct was modified by adding a non-standard `git_lfs`
field under VcsInfo which may be undersirable although the PEP 610 does
say `Additional fields that would be necessary to support such VCS
SHOULD be prefixed with the VCS command name` which could be interpret
this change as ok.
* There will be a slight lockfile and cache churn for users that use
`UV_GIT_LFS` as all git lockfile entries will get a `lfs=true` fragment.
The cache version does not need an update, but LFS sources will get
their own namespace under git-v0 and sdist-v9/git hence a cache-miss
will occur once but this can be sufficient to label this as breaking for
workflows always setting `UV_GIT_LFS`.

## Test Plan

Some initial tests were added. More tests likely to follow as we reach
consensus on a final approach.

For IT test, we may want to move to use a repo under astral namespace in
order to test lfs functionality.

Manual testing was done for common pathological cases like killing LFS
fetch mid-way, uninstalling LFS after installing an sdist with it and
reinstalling, fetching LFS artifacts in different commits, etc.

PSA: Please ignore the docker build failures as its related to depot
OIDC issues.

---------

Co-authored-by: Zanie Blue <contact@zanie.dev>
Co-authored-by: konstin <konstin@mailbox.org>
 2025-12-02 12:23:51 +00:00
Zanie Blue
54f9932362 Bump timeout for macOS tests from 15m -> 20m (#16925) 
This has been failing on main since
fbf925ee63
 2025-12-02 05:01:43 -06:00
William Woodruff
fbf925ee63 Enable PEP 740 attestations when publishing to PyPI (#16910) 2025-12-01 13:01:33 -05:00
renovate[bot]
0b70eba917 Update dependency astral-sh/uv to v0.9.13 (#16897) 2025-12-01 02:30:23 +00:00
Zanie Blue
76d769d7a0 Use --no-verify to skip builds during crates.io publish (#16863) 
Otherwise, this is quite slow.
 2025-11-26 16:34:30 +00:00
renovate[bot]
fa6afd5a71 Update aws-actions/configure-aws-credentials action to v5.1.1 (#16573) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials)
| action | minor | `v5.0.0` -> `v5.1.1` |

---

### Release Notes

<details>
<summary>aws-actions/configure-aws-credentials
(aws-actions/configure-aws-credentials)</summary>

###
[`v5.1.1`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v5.1.1)

[Compare
Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v5.1.0...v5.1.1)

##### Miscellaneous Chores

- release 5.1.1
([56d6a58](56d6a583f0))
- various dependency updates

###
[`v5.1.0`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v5.1.0)

[Compare
Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v5.0.0...v5.1.0)

##### Features

- Add global timeout support
([#&#8203;1487](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1487))
([1584b8b](1584b8b0e2))
- add no-proxy support
([#&#8203;1482](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482))
([dde9b22](dde9b22a8e))
- Improve debug logging in retry logic
([#&#8203;1485](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1485))
([97ef425](97ef425d73))

##### Bug Fixes

- properly expose getProxyForUrl (introduced in
[#&#8203;1482](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482))
([#&#8203;1486](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1486))
([cea4298](cea42985ac))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQyLjE5LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-26 16:54:21 +01:00
renovate[bot]
1fa6612c08 Update dependency astral-sh/uv to v0.9.11 (#16825) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
patch | `0.9.10` -> `0.9.11` |

---

### Release Notes

<details>
<summary>astral-sh/uv (astral-sh/uv)</summary>

###
[`v0.9.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0911)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.10...0.9.11)

Released on 2025-11-20.

##### Python

- Add CPython 3.15.0a2

See the [`python-build-standalone` release
notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20251120)
for details.

##### Enhancements

- Add SBOM support to `uv export`
([#&#8203;16523](https://redirect.github.com/astral-sh/uv/pull/16523))
- Publish to `crates.io`
([#&#8203;16770](https://redirect.github.com/astral-sh/uv/pull/16770))

##### Preview features

- Add `uv workspace list --paths`
([#&#8203;16776](https://redirect.github.com/astral-sh/uv/pull/16776))
- Fix the preview warning on `uv workspace dir`
([#&#8203;16775](https://redirect.github.com/astral-sh/uv/pull/16775))

##### Bug fixes

- Fix `uv init` author serialization via `toml_edit` inline tables
([#&#8203;16778](https://redirect.github.com/astral-sh/uv/pull/16778))
- Fix status messages without TTY
([#&#8203;16785](https://redirect.github.com/astral-sh/uv/pull/16785))
- Preserve end-of-line comment whitespace when editing `pyproject.toml`
([#&#8203;16734](https://redirect.github.com/astral-sh/uv/pull/16734))
- Disable `always-authenticate` when running under Dependabot
([#&#8203;16773](https://redirect.github.com/astral-sh/uv/pull/16773))

##### Documentation

- Document the new behavior for free-threaded python versions
([#&#8203;16781](https://redirect.github.com/astral-sh/uv/pull/16781))
- Improve note about build system in publish guide
([#&#8203;16788](https://redirect.github.com/astral-sh/uv/pull/16788))
- Move do not upload publish note out of the guide into concepts
([#&#8203;16789](https://redirect.github.com/astral-sh/uv/pull/16789))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-24 10:10:22 +01:00
Zanie Blue
8d8aabb884 Add read permissions to publish-crates job (#16797) 2025-11-20 16:38:19 -06:00
Zanie Blue
f2e92b4bfb Increase walltime timeout by 5m (#16796) 
It is failing while caching the dependencies
 2025-11-20 22:36:38 +00:00
Zanie Blue
dfe89047bb Publish to crates.io (#16770) 2025-11-20 21:26:44 +00:00
renovate[bot]
0e88114882 Update dependency astral-sh/uv to v0.9.10 (#16753) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
patch | `0.9.8` -> `0.9.10` |

---

### Release Notes

<details>
<summary>astral-sh/uv (astral-sh/uv)</summary>

###
[`v0.9.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0910)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.9...0.9.10)

Released on 2025-11-17.

##### Enhancements

- Add support for `SSL_CERT_DIR`
([#&#8203;16473](https://redirect.github.com/astral-sh/uv/pull/16473))
- Enforce UTF‑8-encoded license files during `uv build`
([#&#8203;16699](https://redirect.github.com/astral-sh/uv/pull/16699))
- Error when a `project.license-files` glob matches nothing
([#&#8203;16697](https://redirect.github.com/astral-sh/uv/pull/16697))
- `pip install --target` (and `sync`) install Python if necessary
([#&#8203;16694](https://redirect.github.com/astral-sh/uv/pull/16694))
- Account for `python_downloads_json_url` in pre-release Python version
warnings
([#&#8203;16737](https://redirect.github.com/astral-sh/uv/pull/16737))
- Support HTTP/HTTPS URLs in `uv python --python-downloads-json-url`
([#&#8203;16542](https://redirect.github.com/astral-sh/uv/pull/16542))

##### Preview features

- Add support for `--upgrade` in `uv python install`
([#&#8203;16676](https://redirect.github.com/astral-sh/uv/pull/16676))
- Fix handling of `python install --default` for pre-release Python
versions
([#&#8203;16706](https://redirect.github.com/astral-sh/uv/pull/16706))
- Add `uv workspace list` to list workspace members
([#&#8203;16691](https://redirect.github.com/astral-sh/uv/pull/16691))

##### Bug fixes

- Don't check file URLs for ambiguously parsed credentials
([#&#8203;16759](https://redirect.github.com/astral-sh/uv/pull/16759))

##### Documentation

- Add a "storage" reference document
([#&#8203;15954](https://redirect.github.com/astral-sh/uv/pull/15954))

###
[`v0.9.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#099)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.9.8...0.9.9)

Released on 2025-11-12.

##### Deprecations

- Deprecate use of `--project` in `uv init`
([#&#8203;16674](https://redirect.github.com/astral-sh/uv/pull/16674))

##### Enhancements

- Add iOS support to Python interpreter discovery
([#&#8203;16686](https://redirect.github.com/astral-sh/uv/pull/16686))
- Reject ambiguously parsed URLs
([#&#8203;16622](https://redirect.github.com/astral-sh/uv/pull/16622))
- Allow explicit values in `uv version --bump`
([#&#8203;16555](https://redirect.github.com/astral-sh/uv/pull/16555))
- Warn on use of managed pre-release Python versions when a stable
version is available
([#&#8203;16619](https://redirect.github.com/astral-sh/uv/pull/16619))
- Allow signing trampolines on Windows by using `.rcdata` to store
metadata
([#&#8203;15068](https://redirect.github.com/astral-sh/uv/pull/15068))
- Add `--only-emit-workspace` and similar variants to `uv export`
([#&#8203;16681](https://redirect.github.com/astral-sh/uv/pull/16681))

##### Preview features

- Add `uv workspace dir` command
([#&#8203;16678](https://redirect.github.com/astral-sh/uv/pull/16678))
- Add `uv workspace metadata` command
([#&#8203;16516](https://redirect.github.com/astral-sh/uv/pull/16516))

##### Configuration

- Add `UV_NO_DEFAULT_GROUPS` environment variable
([#&#8203;16645](https://redirect.github.com/astral-sh/uv/pull/16645))

##### Bug fixes

- Remove `torch-model-archiver` and `torch-tb-profiler` from PyTorch
backend
([#&#8203;16655](https://redirect.github.com/astral-sh/uv/pull/16655))
- Fix Pixi environment detection
([#&#8203;16585](https://redirect.github.com/astral-sh/uv/pull/16585))

##### Documentation

- Fix `CMD` path in FastAPI Dockerfile
([#&#8203;16701](https://redirect.github.com/astral-sh/uv/pull/16701))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-18 18:46:15 +01:00
William Woodruff
f78ddf05c4 Add an integration test for publishing to pyx (#16740) 2025-11-18 12:13:57 -05:00