531 changed files with 15260 additions and 12007 deletions
--- a/.claude/hooks/post-edit-format.py
+++ b/.claude/hooks/post-edit-format.py
@ -1,81 +0,0 @@
 # /// script
 # requires-python = ">=3.12"
 # dependencies = []
 # ///
 """Post-edit hook to auto-format files after Claude edits."""
 import json
 import subprocess
 import sys
 from pathlib import Path
 def format_rust(file_path: str, cwd: str) -> None:
    """Format Rust files with cargo fmt."""
    try:
        subprocess.run(
            ["cargo", "fmt", "--", file_path],
            cwd=cwd,
            capture_output=True,
        )
    except FileNotFoundError:
        pass
 def format_python(file_path: str, cwd: str) -> None:
    """Format Python files with ruff."""
    try:
        subprocess.run(
            ["uvx", "ruff", "format", file_path],
            cwd=cwd,
            capture_output=True,
        )
    except FileNotFoundError:
        pass
 def format_prettier(file_path: str, cwd: str, prose_wrap: bool = False) -> None:
    """Format files with prettier."""
    args = ["npx", "prettier", "--write"]
    if prose_wrap:
        args.extend(["--prose-wrap", "always"])
    args.append(file_path)
    try:
        subprocess.run(args, cwd=cwd, capture_output=True)
    except FileNotFoundError:
        pass
 def main() -> None:
    import os
    input_data = json.load(sys.stdin)
    tool_name = input_data.get("tool_name")
    tool_input = input_data.get("tool_input", {})
    file_path = tool_input.get("file_path")
    # Only process Write, Edit, and MultiEdit tools
    if tool_name not in ("Write", "Edit", "MultiEdit"):
        return
    if not file_path:
        return
    cwd = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
    path = Path(file_path)
    ext = path.suffix
    if ext == ".rs":
        format_rust(file_path, cwd)
    elif ext in (".py", ".pyi"):
        format_python(file_path, cwd)
    elif ext in (".json5", ".yaml", ".yml"):
        format_prettier(file_path, cwd)
    elif ext == ".md":
        format_prettier(file_path, cwd, prose_wrap=True)
 if __name__ == "__main__":
    main()
--- a/.claude/settings.json
+++ b/.claude/settings.json
@ -1,15 +0,0 @@
 {
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "uv run .claude/hooks/post-edit-format.py"
          }
        ]
      }
    ]
  }
 }
--- a/.github/workflows/build-binaries.yml
+++ b/.github/workflows/build-binaries.yml
@ -98,7 +98,7 @@ jobs:
  macos-x86_64:
    if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-build') }}
-    runs-on: depot-macos-14
+    runs-on: macos-14
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
@ -157,7 +157,7 @@ jobs:
  macos-aarch64:
    if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-build') }}
-    runs-on: depot-macos-14
+    runs-on: macos-14
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
@ -417,7 +417,7 @@ jobs:
  linux-arm:
    if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-build') }}
-    runs-on: depot-ubuntu-22.04-8
+    runs-on: ubuntu-latest
    timeout-minutes: 30
    strategy:
      matrix:
@ -956,7 +956,7 @@ jobs:
  musllinux-cross:
    if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-build') }}
-    runs-on: depot-ubuntu-22.04-8
+    runs-on: ubuntu-latest
    strategy:
      matrix:
        platform:
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@ -184,13 +184,13 @@ jobs:
          - buildpack-deps:trixie,trixie,debian
          - debian:bookworm-slim,bookworm-slim
          - buildpack-deps:bookworm,bookworm
-          - python:3.14-alpine3.23,python3.14-alpine3.23,python3.14-alpine
+          - python:3.14-alpine,python3.14-alpine
-          - python:3.13-alpine3.23,python3.13-alpine3.23,python3.13-alpine
+          - python:3.13-alpine,python3.13-alpine
-          - python:3.12-alpine3.23,python3.12-alpine3.23,python3.12-alpine
+          - python:3.12-alpine,python3.12-alpine
-          - python:3.11-alpine3.23,python3.11-alpine3.23,python3.11-alpine
+          - python:3.11-alpine,python3.11-alpine
-          - python:3.10-alpine3.23,python3.10-alpine3.23,python3.10-alpine
+          - python:3.10-alpine,python3.10-alpine
-          - python:3.9-alpine3.22,python3.9-alpine3.22,python3.9-alpine
+          - python:3.9-alpine,python3.9-alpine
-          - python:3.8-alpine3.20,python3.8-alpine3.20,python3.8-alpine
+          - python:3.8-alpine,python3.8-alpine
          - python:3.14-trixie,python3.14-trixie
          - python:3.13-trixie,python3.13-trixie
          - python:3.12-trixie,python3.12-trixie
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -27,8 +27,6 @@ jobs:
    outputs:
      # Flag that is raised when any code is changed
      code: ${{ steps.changed.outputs.code_any_changed }}
      # Flag that is raised when uv.schema.json is changed (e.g., in a release PR)
      schema: ${{ steps.changed.outputs.schema_changed }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
@ -42,16 +40,10 @@ jobs:
          CHANGED_FILES=$(git diff --name-only ${{ github.event.pull_request.base.sha || 'origin/main' }}...HEAD)
          CODE_CHANGED=false
          SCHEMA_CHANGED=false
          while IFS= read -r file; do
-            # Check if the schema file changed (e.g., in a release PR)
+            # Generated markdown and JSON files are checked during test runs.
-            if [[ "${file}" == "uv.schema.json" ]]; then
+            if [[ "${file}" =~ ^docs/ && ! "${file}" =~ ^docs/reference/(cli|settings).md && ! "${file}" =~ ^docs/reference/environment.md ]]; then
              echo "Detected schema change: ${file}"
              SCHEMA_CHANGED=true
            fi
            if [[ "${file}" =~ ^docs/ ]]; then
              echo "Skipping ${file} (matches docs/ pattern)"
              continue
            fi
@ -78,7 +70,6 @@ jobs:
          done <<< "${CHANGED_FILES}"
          echo "code_any_changed=${CODE_CHANGED}" >> "${GITHUB_OUTPUT}"
          echo "schema_changed=${SCHEMA_CHANGED}" >> "${GITHUB_OUTPUT}"
  lint:
    timeout-minutes: 10
    name: "lint"
@ -144,7 +135,7 @@ jobs:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          save-if: ${{ github.ref == 'refs/heads/main' }}
      - name: "Check uv_build dependencies"
@ -176,7 +167,7 @@ jobs:
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:UV_WORKSPACE" -Recurse
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}
@ -197,7 +188,7 @@ jobs:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          save-if: ${{ github.ref == 'refs/heads/main' }}
      - name: "cargo publish dry-run"
@ -213,16 +204,11 @@ jobs:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          save-if: ${{ github.ref == 'refs/heads/main' }}
      - name: "Generate all"
-        run: cargo dev generate-all --mode dry-run
+        run: cargo dev generate-all --mode check
      - name: "Check sysconfig mappings"
        run: cargo dev generate-sysconfig-metadata --mode check
      - name: "Check JSON schema"
        if: ${{ needs.determine_changes.outputs.schema == 'true' }}
        run: cargo dev generate-json-schema --mode check
  cargo-shear:
    timeout-minutes: 10
@ -233,7 +219,7 @@ jobs:
        with:
          persist-credentials: false
      - name: "Install cargo shear"
-        uses: taiki-e/install-action@d850aa816998e5cf15f67a78c7b933f2a5033f8a # v2.63.3
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
        with:
          tool: cargo-shear
      - run: cargo shear
@ -255,7 +241,7 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Install Rust toolchain"
        run: rustup show
@ -289,7 +275,6 @@ jobs:
          UV_HTTP_RETRIES: 5
        run: |
          cargo nextest run \
            --cargo-profile fast-build \
            --features python-patch,native-auth,secret-service \
            --workspace \
            --status-level skip --failure-output immediate-final --no-fail-fast -j 20 --final-status-level slow
@ -308,7 +293,7 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Install Rust toolchain"
        run: rustup show
@ -331,7 +316,6 @@ jobs:
          UV_HTTP_RETRIES: 5
        run: |
          cargo nextest run \
            --cargo-profile fast-build \
            --no-default-features \
            --features python,python-managed,pypi,git,git-lfs,performance,crates-io,native-auth,apple-native \
            --workspace \
@ -363,7 +347,7 @@ jobs:
      - name: "Install required Python versions"
        run: uv python install
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}
@ -387,7 +371,6 @@ jobs:
        shell: bash
        run: |
          cargo nextest run \
            --cargo-profile fast-build \
            --no-default-features \
            --features python,pypi,python-managed,native-auth,windows-native \
            --workspace \
@ -417,7 +400,7 @@ jobs:
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:UV_WORKSPACE" -Recurse
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}/crates/uv-trampoline
@ -477,7 +460,7 @@ jobs:
      - name: Copy Git Repo to Dev Drive
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:UV_WORKSPACE" -Recurse
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}/crates/uv-trampoline
      - name: "Install Rust toolchain"
@ -527,14 +510,6 @@ jobs:
          version: "0.9.13"
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          save-if: ${{ github.ref == 'refs/heads/main' }}
      - name: "Generate reference documentation"
        run: |
          cargo dev generate-options-reference
          cargo dev generate-cli-reference
          cargo dev generate-env-vars-reference
      - name: "Add SSH key"
        if: ${{ env.MKDOCS_INSIDERS_SSH_KEY_EXISTS == 'true' }}
        uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
@ -561,18 +536,18 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Build"
-        run: cargo build --profile no-debug
+        run: cargo build
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-linux-libc-${{ github.sha }}
          path: |
-            ./target/no-debug/uv
+            ./target/debug/uv
-            ./target/no-debug/uvx
+            ./target/debug/uvx
          retention-days: 1
  build-binary-linux-aarch64:
@ -588,18 +563,18 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Build"
-        run: cargo build --profile no-debug
+        run: cargo build
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-linux-aarch64-${{ github.sha }}
          path: |
-            ./target/no-debug/uv
+            ./target/debug/uv
-            ./target/no-debug/uvx
+            ./target/debug/uvx
          retention-days: 1
  build-binary-linux-musl:
@ -620,18 +595,18 @@ jobs:
          sudo apt-get install musl-tools
          rustup target add x86_64-unknown-linux-musl
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Build"
-        run: cargo build --profile no-debug --target x86_64-unknown-linux-musl --bin uv --bin uvx
+        run: cargo build --target x86_64-unknown-linux-musl --bin uv --bin uvx
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-linux-musl-${{ github.sha }}
          path: |
-            ./target/x86_64-unknown-linux-musl/no-debug/uv
+            ./target/x86_64-unknown-linux-musl/debug/uv
-            ./target/x86_64-unknown-linux-musl/no-debug/uvx
+            ./target/x86_64-unknown-linux-musl/debug/uvx
          retention-days: 1
  build-binary-macos-aarch64:
@ -647,17 +622,17 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Build"
-        run: cargo build --profile no-debug --bin uv --bin uvx
+        run: cargo build --bin uv --bin uvx
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-macos-aarch64-${{ github.sha }}
          path: |
-            ./target/no-debug/uv
+            ./target/debug/uv
-            ./target/no-debug/uvx
+            ./target/debug/uvx
          retention-days: 1
  build-binary-macos-x86_64:
@ -673,17 +648,17 @@ jobs:
      - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Build"
-        run: cargo build --profile no-debug --bin uv --bin uvx
+        run: cargo build --bin uv --bin uvx
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-macos-x86_64-${{ github.sha }}
          path: |
-            ./target/no-debug/uv
+            ./target/debug/uv
-            ./target/no-debug/uvx
+            ./target/debug/uvx
          retention-days: 1
  build-binary-windows-x86_64:
@ -705,21 +680,21 @@ jobs:
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:UV_WORKSPACE" -Recurse
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}
      - name: "Build"
        working-directory: ${{ env.UV_WORKSPACE }}
-        run: cargo build --profile no-debug --bin uv --bin uvx
+        run: cargo build --bin uv --bin uvx
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-windows-x86_64-${{ github.sha }}
          path: |
-            ${{ env.UV_WORKSPACE }}/target/no-debug/uv.exe
+            ${{ env.UV_WORKSPACE }}/target/debug/uv.exe
-            ${{ env.UV_WORKSPACE }}/target/no-debug/uvx.exe
+            ${{ env.UV_WORKSPACE }}/target/debug/uvx.exe
          retention-days: 1
  build-binary-windows-aarch64:
@ -742,7 +717,7 @@ jobs:
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:UV_WORKSPACE" -Recurse
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
        with:
          workspaces: ${{ env.UV_WORKSPACE }}
@ -751,15 +726,15 @@ jobs:
      - name: "Build"
        working-directory: ${{ env.UV_WORKSPACE }}
-        run: cargo build --profile no-debug --target aarch64-pc-windows-msvc
+        run: cargo build --target aarch64-pc-windows-msvc
      - name: "Upload binary"
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: uv-windows-aarch64-${{ github.sha }}
          path: |
-            ${{ env.UV_WORKSPACE }}/target/aarch64-pc-windows-msvc/no-debug/uv.exe
+            ${{ env.UV_WORKSPACE }}/target/aarch64-pc-windows-msvc/debug/uv.exe
-            ${{ env.UV_WORKSPACE }}/target/aarch64-pc-windows-msvc/no-debug/uvx.exe
+            ${{ env.UV_WORKSPACE }}/target/aarch64-pc-windows-msvc/debug/uvx.exe
          retention-days: 1
  build-binary-msrv:
@ -783,11 +758,11 @@ jobs:
          MSRV: ${{ steps.msrv.outputs.value }}
      - name: "Install mold"
        uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
-      - run: cargo +${MSRV} build --profile no-debug
+      - run: cargo +${MSRV} build
        env:
          MSRV: ${{ steps.msrv.outputs.value }}
-      - run: ./target/no-debug/uv --version
+      - run: ./target/debug/uv --version
  build-binary-freebsd:
    needs: determine_changes
@ -800,7 +775,7 @@ jobs:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Cross build"
        run: |
          # Install cross from `freebsd-firecracker`
@ -808,7 +783,7 @@ jobs:
          chmod +x cross
          mv cross /usr/local/bin/cross
-          cross build --target x86_64-unknown-freebsd --profile no-debug
+          cross build --target x86_64-unknown-freebsd
      - name: Test in Firecracker VM
        uses: acj/freebsd-firecracker-action@a5a3fc1709c5b5368141a5699f10259aca3cd965 # v0.6.0
@ -822,8 +797,8 @@ jobs:
            cat <<EOF > $include_path
            target
            target/x86_64-unknown-freebsd
-            target/x86_64-unknown-freebsd/no-debug
+            target/x86_64-unknown-freebsd/debug
-            target/x86_64-unknown-freebsd/no-debug/uv
+            target/x86_64-unknown-freebsd/debug/uv
            EOF
            rsync -r -e "ssh" \
@ -833,7 +808,7 @@ jobs:
              --exclude "*" \
              . firecracker:
          run-in-vm: |
-            mv target/x86_64-unknown-freebsd/no-debug/uv uv
+            mv target/x86_64-unknown-freebsd/debug/uv uv
            chmod +x uv
            ./uv --version
@ -2067,22 +2042,22 @@ jobs:
          # Test the main path (`build_wheel`) through pip
          ./uv venv -v --seed
-          ./uv run --no-project python -m pip install -v test/packages/built-by-uv --find-links crates/uv-build/dist --no-index --no-deps
+          ./uv run --no-project python -m pip install -v scripts/packages/built-by-uv --find-links crates/uv-build/dist --no-index --no-deps
          ./uv run --no-project python -c "from built_by_uv import greet; print(greet())"
          # Test both `build_wheel` and `build_sdist` through uv
          ./uv venv -c -v
-          ./uv build -v --force-pep517 test/packages/built-by-uv --find-links crates/uv-build/dist --offline
+          ./uv build -v --force-pep517 scripts/packages/built-by-uv --find-links crates/uv-build/dist --offline
-          ./uv pip install -v test/packages/built-by-uv/dist/*.tar.gz --find-links crates/uv-build/dist --offline --no-deps
+          ./uv pip install -v scripts/packages/built-by-uv/dist/*.tar.gz --find-links crates/uv-build/dist --offline --no-deps
          ./uv run --no-project python -c "from built_by_uv import greet; print(greet())"
          # Test both `build_wheel` and `build_sdist` through the official `build`
-          rm -rf test/packages/built-by-uv/dist/
+          rm -rf scripts/packages/built-by-uv/dist/
          ./uv venv -c -v
          ./uv pip install build
          # Add the uv binary to PATH for `build` to find
-          PATH="$(pwd):$PATH" UV_OFFLINE=1 UV_FIND_LINKS=crates/uv-build/dist ./uv run --no-project python -m build -v --installer uv test/packages/built-by-uv
+          PATH="$(pwd):$PATH" UV_OFFLINE=1 UV_FIND_LINKS=crates/uv-build/dist ./uv run --no-project python -m build -v --installer uv scripts/packages/built-by-uv
-          ./uv pip install -v test/packages/built-by-uv/dist/*.tar.gz --find-links crates/uv-build/dist --offline --no-deps
+          ./uv pip install -v scripts/packages/built-by-uv/dist/*.tar.gz --find-links crates/uv-build/dist --offline --no-deps
          ./uv run --no-project python -c "from built_by_uv import greet; print(greet())"
  cache-test-ubuntu:
@ -2931,7 +2906,7 @@ jobs:
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Install Rust toolchain"
        run: rustup show
@ -2946,8 +2921,8 @@ jobs:
          sudo apt-get update
          sudo apt-get install -y libsasl2-dev libldap2-dev libkrb5-dev
          cargo run --bin uv -- venv --cache-dir .cache
-          cargo run --bin uv -- pip compile test/requirements/jupyter.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
+          cargo run --bin uv -- pip compile scripts/requirements/jupyter.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
-          cargo run --bin uv -- pip compile test/requirements/airflow.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
+          cargo run --bin uv -- pip compile scripts/requirements/airflow.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
      - name: "Build benchmarks"
        run: cargo codspeed build --profile profiling -p uv-bench
@ -2971,7 +2946,7 @@ jobs:
        with:
          persist-credentials: false
-      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
+      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Install Rust toolchain"
        run: rustup show
@ -2986,8 +2961,8 @@ jobs:
          sudo apt-get update
          sudo apt-get install -y libsasl2-dev libldap2-dev libkrb5-dev
          cargo run --bin uv -- venv --cache-dir .cache
-          cargo run --bin uv -- pip compile test/requirements/jupyter.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
+          cargo run --bin uv -- pip compile scripts/requirements/jupyter.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
-          cargo run --bin uv -- pip compile test/requirements/airflow.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
+          cargo run --bin uv -- pip compile scripts/requirements/airflow.in --universal --exclude-newer 2024-08-08 --cache-dir .cache
      - name: "Build benchmarks"
        run: cargo codspeed build --profile profiling -p uv-bench
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@ -36,14 +36,6 @@ jobs:
        with:
          python-version: 3.12
      - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
      - name: "Generate reference documentation"
        run: |
          cargo dev generate-options-reference
          cargo dev generate-cli-reference
          cargo dev generate-env-vars-reference
      - name: "Set docs display name"
        run: |
          version="${VERSION}"
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -222,31 +222,16 @@ jobs:
      "id-token": "write"
      "packages": "write"
  custom-publish-crates:
    needs:
      - plan
      - host
      - custom-publish-pypi # DIRTY: see #16989
    if: ${{ !fromJson(needs.plan.outputs.val).announcement_is_prerelease || fromJson(needs.plan.outputs.val).publish_prereleases }}
    uses: ./.github/workflows/publish-crates.yml
    with:
      plan: ${{ needs.plan.outputs.val }}
    secrets: inherit
    # publish jobs get escalated permissions
    permissions:
      "contents": "read"
  # Create a GitHub Release while uploading all files to it
  announce:
    needs:
      - plan
      - host
      - custom-publish-pypi
      - custom-publish-crates
    # use "always() && ..." to allow us to wait for all publish jobs while
    # still allowing individual publish jobs to skip themselves (for prereleases).
    # "host" however must run to completion, no skipping allowed!
-    if: ${{ always() && needs.host.result == 'success' && (needs.custom-publish-pypi.result == 'skipped' || needs.custom-publish-pypi.result == 'success') && (needs.custom-publish-crates.result == 'skipped' || needs.custom-publish-crates.result == 'success') }}
+    if: ${{ always() && needs.host.result == 'success' && (needs.custom-publish-pypi.result == 'skipped' || needs.custom-publish-pypi.result == 'success') }}
    runs-on: "depot-ubuntu-latest-4"
    permissions:
      "attestations": "write"
--- a/.gitignore
+++ b/.gitignore
@ -37,11 +37,6 @@ profile.json.gz
 # MkDocs
 /site
 # Generated reference docs (use `cargo dev generate-all` to regenerate)
 /docs/reference/cli.md
 /docs/reference/environment.md
 /docs/reference/settings.md
 # macOS
 **/.DS_Store
--- a/.prettierignore
+++ b/.prettierignore
@ -4,5 +4,5 @@ PREVIEW-CHANGELOG.md
 docs/reference/cli.md
 docs/reference/settings.md
 docs/reference/environment.md
-test/ecosystem/home-assistant-core/LICENSE.md
+ecosystem/home-assistant-core/LICENSE.md
 docs/guides/integration/gitlab.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -3,106 +3,6 @@
 <!-- prettier-ignore-start -->
 ## 0.9.18
 Released on 2025-12-16.
 ### Enhancements
 - Add value hints to command line arguments to improve shell completion accuracy ([#17080](https://github.com/astral-sh/uv/pull/17080))
 - Improve error handling in `uv publish` ([#17096](https://github.com/astral-sh/uv/pull/17096))
 - Improve rendering of multiline error messages ([#17132](https://github.com/astral-sh/uv/pull/17132))
 - Support redirects in `uv publish` ([#17130](https://github.com/astral-sh/uv/pull/17130))
 - Include Docker images with the alpine version, e.g., `python3.x-alpine3.23` ([#17100](https://github.com/astral-sh/uv/pull/17100))
 ### Configuration
 - Accept `--torch-backend` in `[tool.uv]` ([#17116](https://github.com/astral-sh/uv/pull/17116))
 ### Performance
 - Speed up `uv cache size` ([#17015](https://github.com/astral-sh/uv/pull/17015))
 - Initialize S3 signer once ([#17092](https://github.com/astral-sh/uv/pull/17092))
 ### Bug fixes
 - Avoid panics due to reads on failed requests ([#17098](https://github.com/astral-sh/uv/pull/17098))
 - Enforce latest-version in `@latest` requests ([#17114](https://github.com/astral-sh/uv/pull/17114))
 - Explicitly set `EntryType` for file entries in tar ([#17043](https://github.com/astral-sh/uv/pull/17043))
 - Ignore `pyproject.toml` index username in lockfile comparison ([#16995](https://github.com/astral-sh/uv/pull/16995))
 - Relax error when using `uv add` with `UV_GIT_LFS` set ([#17127](https://github.com/astral-sh/uv/pull/17127))
 - Support file locks on ExFAT on macOS ([#17115](https://github.com/astral-sh/uv/pull/17115))
 - Change schema for `exclude-newer` into optional string ([#17121](https://github.com/astral-sh/uv/pull/17121))
 ### Documentation
 - Drop arm musl caveat from Docker documentation ([#17111](https://github.com/astral-sh/uv/pull/17111))
 - Fix version reference in resolver example ([#17085](https://github.com/astral-sh/uv/pull/17085))
 - Better documentation for `exclude-newer*` ([#17079](https://github.com/astral-sh/uv/pull/17079))
 ## 0.9.17
 Released on 2025-12-09.
 ### Enhancements
 - Add `torch-tensorrt` and `torchao` to the PyTorch list ([#17053](https://github.com/astral-sh/uv/pull/17053))
 - Add hint for misplaced `--verbose`  in `uv tool run` ([#17020](https://github.com/astral-sh/uv/pull/17020))
 - Add support for relative durations in `exclude-newer` (a.k.a., dependency cooldowns) ([#16814](https://github.com/astral-sh/uv/pull/16814))
 - Add support for relocatable nushell activation script ([#17036](https://github.com/astral-sh/uv/pull/17036))
 ### Bug fixes
 - Respect dropped (but explicit) indexes in dependency groups ([#17012](https://github.com/astral-sh/uv/pull/17012))
 ### Documentation
 - Improve `source-exclude` reference docs ([#16832](https://github.com/astral-sh/uv/pull/16832))
 - Recommend `UV_NO_DEV` in Docker installs ([#17030](https://github.com/astral-sh/uv/pull/17030))
 - Update `UV_VERSION` in docs for GitLab CI/CD ([#17040](https://github.com/astral-sh/uv/pull/17040))
 ## 0.9.16
 Released on 2025-12-06.
 ### Python
 - Add CPython 3.14.2
 - Add CPython 3.13.11
 ### Enhancements
 - Add a 5m default timeout to acquiring file locks to fail faster on deadlock ([#16342](https://github.com/astral-sh/uv/pull/16342))
 - Add a stub `debug` subcommand to `uv pip` announcing its intentional absence ([#16966](https://github.com/astral-sh/uv/pull/16966))
 - Add bounds in `uv add --script` ([#16954](https://github.com/astral-sh/uv/pull/16954))
 - Add brew specific message for `uv self update` ([#16838](https://github.com/astral-sh/uv/pull/16838))
 - Error when built wheel is for the wrong platform ([#16074](https://github.com/astral-sh/uv/pull/16074))
 - Filter wheels from PEP 751 files based on `--no-binary` et al in `uv pip compile` ([#16956](https://github.com/astral-sh/uv/pull/16956))
 - Support `--target` and `--prefix` in `uv pip list`, `uv pip freeze`, and `uv pip show` ([#16955](https://github.com/astral-sh/uv/pull/16955))
 - Tweak language for build backend validation errors ([#16720](https://github.com/astral-sh/uv/pull/16720))
 - Use explicit credentials cache instead of global static ([#16768](https://github.com/astral-sh/uv/pull/16768))
 - Enable SIMD in HTML parsing ([#17010](https://github.com/astral-sh/uv/pull/17010))
 ### Preview features
 - Fix missing preview warning in `uv workspace metadata` ([#16988](https://github.com/astral-sh/uv/pull/16988))
 - Add a `uv auth helper --protocol bazel` command ([#16886](https://github.com/astral-sh/uv/pull/16886))
 ### Bug fixes
 - Fix Pyston wheel compatibility tags ([#16972](https://github.com/astral-sh/uv/pull/16972))
 - Allow redundant entries in `tool.uv.build-backend.module-name` but emit warnings ([#16928](https://github.com/astral-sh/uv/pull/16928))
 - Fix infinite loop in non-attribute re-treats during HTML parsing ([#17010](https://github.com/astral-sh/uv/pull/17010))
 ### Documentation
 - Clarify `--project` flag help text to indicate project discovery ([#16965](https://github.com/astral-sh/uv/pull/16965))
 - Regenerate the crates.io READMEs on release ([#16992](https://github.com/astral-sh/uv/pull/16992))
 - Update Docker integration guide to prefer `COPY` over `ADD` for simple cases ([#16883](https://github.com/astral-sh/uv/pull/16883))
 - Update PyTorch documentation to include information about supporting CUDA 13.0.x ([#16957](https://github.com/astral-sh/uv/pull/16957))
 - Update the versioning policy ([#16710](https://github.com/astral-sh/uv/pull/16710))
 - Upgrade PyTorch documentation to latest versions ([#16970](https://github.com/astral-sh/uv/pull/16970))
 ## 0.9.15
 Released on 2025-12-02.
@ -123,7 +23,7 @@ Released on 2025-12-02.
 ### Configuration
- Add `UV_HIDE_BUILD_OUTPUT` to omit build logs ([#16885](https://github.com/astral-sh/uv/pull/16885))
+- Add `UV_HIDE_BUILD_OUTPUT` to omit build logs ([#16855](https://github.com/astral-sh/uv/pull/16855))
 ### Bug fixes
@ -503,25 +403,25 @@ There are no breaking changes to [`uv_build`](https://docs.astral.sh/uv/concepts
 ### Breaking changes
 - **Python 3.14 is now the default stable version**
-
+  
  The default Python version has changed from 3.13 to 3.14. This applies to Python version installation when no Python version is requested, e.g., `uv python install`. By default, uv will use the system Python version if present, so this may not cause changes to general use of uv. For example, if Python 3.13 is installed already, then `uv venv` will use that version. If no Python versions are installed on a machine and automatic downloads are enabled, uv will now use 3.14 instead of 3.13, e.g., for `uv venv` or `uvx python`. This change will not affect users who are using a `.python-version` file to pin to a specific Python version.
 - **Allow use of free-threaded variants in Python 3.14+ without explicit opt-in** ([#16142](https://github.com/astral-sh/uv/pull/16142))
-
+  
  Previously, free-threaded variants of Python were considered experimental and required explicit opt-in (i.e., with `3.14t`) for usage. Now uv will allow use of free-threaded Python 3.14+ interpreters without explicit selection. The GIL-enabled build of Python will still be preferred, e.g., when performing an installation with `uv python install 3.14`. However, e.g., if a free-threaded interpreter comes before a GIL-enabled build on the `PATH`, it will be used. This change does not apply to free-threaded Python 3.13 interpreters, which will continue to require opt-in.
 - **Use Python 3.14 stable Docker images** ([#16150](https://github.com/astral-sh/uv/pull/16150))
-
+  
  Previously, the Python 3.14 images had an `-rc` suffix, e.g., `python:3.14-rc-alpine` or
 `python:3.14-rc-trixie`. Now, the `-rc` suffix has been removed to match the stable
 [upstream images](https://hub.docker.com/_/python). The `-rc` images tags will no longer be
 updated. This change should not break existing workflows.
 - **Upgrade Alpine Docker image to Alpine 3.22**
-
+  
  Previously, the `uv:alpine` Docker image was based on Alpine 3.21. Now, this image is based on Alpine 3.22. The previous image can be recovered with `uv:alpine3.21` and will continue to be updated until a future release.
 - **Upgrade Debian Docker images to Debian 13 "Trixie"**
-
+  
  Previously, the `uv:debian` and `uv:debian-slim` Docker images were based on Debian 12 "Bookworm". Now, these images are based on Debian 13 "Trixie". The previous images can be recovered with `uv:bookworm` and `uv:bookworm-slim` and will continue to be updated until a future release.
 - **Fix incorrect output path when a trailing `/` is used in `uv build`** ([#15133](https://github.com/astral-sh/uv/pull/15133))
-
+  
  When using `uv build` in a workspace, the artifacts are intended to be written to a `dist` directory in the workspace root. A bug caused workspace root determination to fail when the input path included a trailing `/` causing the `dist` directory to be placed in the child directory. This bug has been fixed in this release. For example, `uv build child/` is used, the output path will now be in `<workspace root>/dist/` rather than `<workspace root>/child/dist/`.
 ### Python
@ -578,4 +478,3 @@ See [changelogs/0.1.x](./changelogs/0.1.x.md)
 <!-- prettier-ignore-end -->
--- a/CODE_OF_CONDUCT.md
+++ b/CODE_OF_CONDUCT.md
@ -1,125 +0,0 @@
 # Contributor Covenant Code of Conduct
 - [Our Pledge](#our-pledge)
 - [Our Standards](#our-standards)
 - [Enforcement Responsibilities](#enforcement-responsibilities)
 - [Scope](#scope)
 - [Enforcement](#enforcement)
 - [Enforcement Guidelines](#enforcement-guidelines)
  - [1. Correction](#1-correction)
  - [2. Warning](#2-warning)
  - [3. Temporary Ban](#3-temporary-ban)
  - [4. Permanent Ban](#4-permanent-ban)
 - [Attribution](#attribution)
 ## Our Pledge
 We as members, contributors, and leaders pledge to make participation in our community a
 harassment-free experience for everyone, regardless of age, body size, visible or invisible
 disability, ethnicity, sex characteristics, gender identity and expression, level of experience,
 education, socio-economic status, nationality, personal appearance, race, religion, or sexual
 identity and orientation.
 We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and
 healthy community.
 ## Our Standards
 Examples of behavior that contributes to a positive environment for our community include:
 - Demonstrating empathy and kindness toward other people
 - Being respectful of differing opinions, viewpoints, and experiences
 - Giving and gracefully accepting constructive feedback
 - Accepting responsibility and apologizing to those affected by our mistakes, and learning from the
  experience
 - Focusing on what is best not just for us as individuals, but for the overall community
 Examples of unacceptable behavior include:
 - The use of sexualized language or imagery, and sexual attention or advances of any kind
 - Trolling, insulting or derogatory comments, and personal or political attacks
 - Public or private harassment
 - Publishing others' private information, such as a physical or email address, without their
  explicit permission
 - Other conduct which could reasonably be considered inappropriate in a professional setting
 ## Enforcement Responsibilities
 Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior
 and will take appropriate and fair corrective action in response to any behavior that they deem
 inappropriate, threatening, offensive, or harmful.
 Community leaders have the right and responsibility to remove, edit, or reject comments, commits,
 code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and
 will communicate reasons for moderation decisions when appropriate.
 ## Scope
 This Code of Conduct applies within all community spaces, and also applies when an individual is
 officially representing the community in public spaces. Examples of representing our community
 include using an official e-mail address, posting via an official social media account, or acting as
 an appointed representative at an online or offline event.
 ## Enforcement
 Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community
 leaders responsible for enforcement at <hey@astral.sh>. All complaints will be reviewed and
 investigated promptly and fairly.
 All community leaders are obligated to respect the privacy and security of the reporter of any
 incident.
 ## Enforcement Guidelines
 Community leaders will follow these Community Impact Guidelines in determining the consequences for
 any action they deem in violation of this Code of Conduct:
 ### 1. Correction
 **Community Impact**: Use of inappropriate language or other behavior deemed unprofessional or
 unwelcome in the community.
 **Consequence**: A private, written warning from community leaders, providing clarity around the
 nature of the violation and an explanation of why the behavior was inappropriate. A public apology
 may be requested.
 ### 2. Warning
 **Community Impact**: A violation through a single incident or series of actions.
 **Consequence**: A warning with consequences for continued behavior. No interaction with the people
 involved, including unsolicited interaction with those enforcing the Code of Conduct, for a
 specified period of time. This includes avoiding interactions in community spaces as well as
 external channels like social media. Violating these terms may lead to a temporary or permanent ban.
 ### 3. Temporary Ban
 **Community Impact**: A serious violation of community standards, including sustained inappropriate
 behavior.
 **Consequence**: A temporary ban from any sort of interaction or public communication with the
 community for a specified period of time. No public or private interaction with the people involved,
 including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this
 period. Violating these terms may lead to a permanent ban.
 ### 4. Permanent Ban
 **Community Impact**: Demonstrating a pattern of violation of community standards, including
 sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement
 of classes of individuals.
 **Consequence**: A permanent ban from any sort of public interaction within the community.
 ## Attribution
 This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.0, available
 [here](https://www.contributor-covenant.org/version/2/0/code_of_conduct.html).
 Community Impact Guidelines were inspired by
 [Mozilla's code of conduct enforcement ladder](https://github.com/mozilla/diversity).
 For answers to common questions about this code of conduct, see the
 [FAQ](https://www.contributor-covenant.org/faq). Translations are available
 [here](https://www.contributor-covenant.org/translations).
 [homepage]: https://www.contributor-covenant.org
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@ -102,15 +102,6 @@ cargo run -- venv
 cargo run -- pip install requests
 ```
 ## Crate structure
 Rust does not allow circular dependencies between crates. To visualize the crate hierarchy, install
 [cargo-depgraph](https://github.com/jplatte/cargo-depgraph) and graphviz, then run:
 ```shell
 cargo depgraph --dedup-transitive-deps --workspace-only | dot -Tpng > graph.png
 ```
 ## Running inside a Docker container
 Source distributions can run arbitrary code on build and can make unwanted modifications to your
@ -136,7 +127,7 @@ Please refer to Ruff's
 it applies to uv, too.
 We provide diverse sets of requirements for testing and benchmarking the resolver in
-`test/requirements` and for the installer in `test/requirements/compiled`.
+`scripts/requirements` and for the installer in `scripts/requirements/compiled`.
 You can use `scripts/benchmark` to benchmark predefined workloads between uv versions and with other
 tools, e.g., from the `scripts/benchmark` directory:
@ -147,7 +138,7 @@ uv run resolver \
    --poetry \
    --benchmark \
    resolve-cold \
-    ../test/requirements/trio.in
+    ../scripts/requirements/trio.in
 ```
 ### Analyzing concurrency
@ -157,7 +148,7 @@ visualize parallel requests and find any spots where uv is CPU-bound. Example us
 `uv-dev` respectively:
 ```shell
-RUST_LOG=uv=info TRACING_DURATIONS_FILE=target/traces/jupyter.ndjson cargo run --features tracing-durations-export --profile profiling -- pip compile test/requirements/jupyter.in
+RUST_LOG=uv=info TRACING_DURATIONS_FILE=target/traces/jupyter.ndjson cargo run --features tracing-durations-export --profile profiling -- pip compile scripts/requirements/jupyter.in
 ```
 ```shell
--- a/Cargo.lock
+++ b/Cargo.lock
@ -45,9 +45,9 @@ checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
 [[package]]
 name = "ambient-id"
-version = "0.0.7"
+version = "0.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8cad022ed72ad2176498be1c097bb46e598193e92f3491ea0766980edeee168"
+checksum = "36b48a3b1ad866e5034859be45edd1ebba2f097289c8a34b61623c76f10480f3"
 dependencies = [
 "astral-reqwest-middleware",
 "reqwest",
@ -248,12 +248,9 @@ dependencies = [
 [[package]]
 name = "astral-tl"
-version = "0.7.11"
+version = "0.7.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d90933ffb0f97e2fc2e0de21da9d3f20597b804012d199843a6fe7c2810d28f3"
+checksum = "915b5af1203c9c635c62edcbdaa36ee54b17f84809f7769912d356c35f9a6cd7"
 dependencies = [
 "memchr",
 ]
 [[package]]
 name = "astral-tokio-tar"
@ -1038,15 +1035,6 @@ dependencies = [
 "itertools 0.10.5",
 ]
 [[package]]
 name = "crossbeam-channel"
 version = "0.5.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
 dependencies = [
 "crossbeam-utils",
 ]
 [[package]]
 name = "crossbeam-deque"
 version = "0.8.6"
@ -1264,16 +1252,6 @@ dependencies = [
 "windows-sys 0.61.0",
 ]
 [[package]]
 name = "diskus"
 version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ec07379c016f78e7ddcd953663b9ed17928ff384928d34d824ed7e463bd3d908"
 dependencies = [
 "crossbeam-channel",
 "rayon",
 ]
 [[package]]
 name = "dispatch2"
 version = "0.3.0"
@ -3462,9 +3440,9 @@ dependencies = [
 [[package]]
 name = "rayon"
-version = "1.11.0"
+version = "1.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "368f01d005bf8fd9b1206fb6fa653e6c4a81ceb1466406b81792d87c5677a58f"
+checksum = "b418a60154510ca1a002a752ca9714984e21e4241e804d32555251faf8b78ffa"
 dependencies = [
 "either",
 "rayon-core",
@ -3472,9 +3450,9 @@ dependencies = [
 [[package]]
 name = "rayon-core"
-version = "1.13.0"
+version = "1.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
+checksum = "1465873a3dfdaa8ae7cb14b4383657caab0b3e8a0aa9ae8e04b044854c8dfce2"
 dependencies = [
 "crossbeam-deque",
 "crossbeam-utils",
@ -4397,9 +4375,9 @@ dependencies = [
 [[package]]
 name = "spdx"
-version = "0.13.2"
+version = "0.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35107b1c818f4e9cb9e6c4444ca560ba03b4ee1288dcecc6d7830c2023a7609e"
+checksum = "41cf87c0efffc158b9dde4d6e0567a43e4383adc4c949e687a2039732db2f23a"
 dependencies = [
 "smallvec",
 ]
@ -5406,7 +5384,7 @@ dependencies = [
 [[package]]
 name = "uv"
-version = "0.9.18"
+version = "0.9.15"
 dependencies = [
 "anstream",
 "anyhow",
@ -5421,7 +5399,6 @@ dependencies = [
 "clap",
 "console 0.16.1",
 "ctrlc",
 "diskus",
 "dotenvy",
 "dunce",
 "embed-manifest",
@ -5429,6 +5406,7 @@ dependencies = [
 "flate2",
 "fs-err",
 "futures",
 "h2",
 "http",
 "ignore",
 "indexmap",
@ -5525,7 +5503,7 @@ dependencies = [
 [[package]]
 name = "uv-auth"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "arcstr",
@ -5568,7 +5546,7 @@ dependencies = [
 [[package]]
 name = "uv-bench"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "codspeed-criterion-compat",
@ -5595,7 +5573,7 @@ dependencies = [
 [[package]]
 name = "uv-bin-install"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "astral-reqwest-middleware",
 "astral-reqwest-retry",
@ -5619,7 +5597,7 @@ dependencies = [
 [[package]]
 name = "uv-build"
-version = "0.9.18"
+version = "0.9.15"
 dependencies = [
 "anstream",
 "anyhow",
@ -5631,7 +5609,7 @@ dependencies = [
 [[package]]
 name = "uv-build-backend"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "astral-version-ranges",
 "base64 0.22.1",
@ -5647,7 +5625,7 @@ dependencies = [
 "schemars",
 "serde",
 "sha2",
- "spdx 0.13.2",
+ "spdx 0.12.0",
 "tar",
 "tempfile",
 "thiserror 2.0.17",
@ -5671,7 +5649,7 @@ dependencies = [
 [[package]]
 name = "uv-build-frontend"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anstream",
 "fs-err",
@ -5688,7 +5666,6 @@ dependencies = [
 "tokio",
 "toml_edit 0.23.7",
 "tracing",
 "uv-auth",
 "uv-cache-key",
 "uv-configuration",
 "uv-distribution",
@ -5709,7 +5686,7 @@ dependencies = [
 [[package]]
 name = "uv-cache"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "clap",
 "fs-err",
@ -5719,7 +5696,6 @@ dependencies = [
 "same-file",
 "serde",
 "tempfile",
 "thiserror 2.0.17",
 "tracing",
 "uv-cache-info",
 "uv-cache-key",
@ -5735,7 +5711,7 @@ dependencies = [
 [[package]]
 name = "uv-cache-info"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "fs-err",
@ -5752,7 +5728,7 @@ dependencies = [
 [[package]]
 name = "uv-cache-key"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "hex",
 "memchr",
@ -5764,7 +5740,7 @@ dependencies = [
 [[package]]
 name = "uv-cli"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anstream",
 "anyhow",
@ -5796,7 +5772,7 @@ dependencies = [
 [[package]]
 name = "uv-client"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "astral-reqwest-middleware",
@ -5859,7 +5835,7 @@ dependencies = [
 [[package]]
 name = "uv-configuration"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "clap",
@ -5888,14 +5864,14 @@ dependencies = [
 [[package]]
 name = "uv-console"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "console 0.16.1",
 ]
 [[package]]
 name = "uv-dev"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anstream",
 "anyhow",
@ -5944,7 +5920,7 @@ dependencies = [
 [[package]]
 name = "uv-dirs"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "assert_fs",
 "etcetera",
@ -5956,7 +5932,7 @@ dependencies = [
 [[package]]
 name = "uv-dispatch"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "futures",
@ -5988,7 +5964,7 @@ dependencies = [
 [[package]]
 name = "uv-distribution"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "astral-reqwest-middleware",
@ -6037,7 +6013,7 @@ dependencies = [
 [[package]]
 name = "uv-distribution-filename"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "insta",
 "memchr",
@ -6054,7 +6030,7 @@ dependencies = [
 [[package]]
 name = "uv-distribution-types"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "arcstr",
 "astral-version-ranges",
@ -6094,7 +6070,7 @@ dependencies = [
 [[package]]
 name = "uv-extract"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "astral-tokio-tar",
 "astral_async_zip",
@ -6124,14 +6100,14 @@ dependencies = [
 [[package]]
 name = "uv-flags"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "bitflags 2.9.4",
 ]
 [[package]]
 name = "uv-fs"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "backon",
 "dunce",
@ -6146,16 +6122,14 @@ dependencies = [
 "schemars",
 "serde",
 "tempfile",
 "thiserror 2.0.17",
 "tokio",
 "tracing",
 "uv-static",
 "windows 0.59.0",
 ]
 [[package]]
 name = "uv-git"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "astral-reqwest-middleware",
@ -6181,7 +6155,7 @@ dependencies = [
 [[package]]
 name = "uv-git-types"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "serde",
 "thiserror 2.0.17",
@ -6193,7 +6167,7 @@ dependencies = [
 [[package]]
 name = "uv-globfilter"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anstream",
 "fs-err",
@ -6210,7 +6184,7 @@ dependencies = [
 [[package]]
 name = "uv-install-wheel"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "assert_fs",
@ -6250,7 +6224,7 @@ dependencies = [
 [[package]]
 name = "uv-installer"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "async-channel",
@ -6291,7 +6265,7 @@ dependencies = [
 [[package]]
 name = "uv-keyring"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "async-trait",
 "byteorder",
@ -6308,7 +6282,7 @@ dependencies = [
 [[package]]
 name = "uv-logging"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "jiff",
 "owo-colors",
@ -6318,7 +6292,7 @@ dependencies = [
 [[package]]
 name = "uv-macros"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "proc-macro2",
 "quote",
@ -6328,7 +6302,7 @@ dependencies = [
 [[package]]
 name = "uv-metadata"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "astral_async_zip",
 "fs-err",
@ -6345,7 +6319,7 @@ dependencies = [
 [[package]]
 name = "uv-normalize"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "rkyv",
 "schemars",
@ -6355,7 +6329,7 @@ dependencies = [
 [[package]]
 name = "uv-once-map"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "dashmap",
 "futures",
@ -6364,14 +6338,14 @@ dependencies = [
 [[package]]
 name = "uv-options-metadata"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "serde",
 ]
 [[package]]
 name = "uv-pep440"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "astral-version-ranges",
 "indoc",
@ -6385,7 +6359,7 @@ dependencies = [
 [[package]]
 name = "uv-pep508"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "arcstr",
 "astral-version-ranges",
@ -6414,7 +6388,7 @@ dependencies = [
 [[package]]
 name = "uv-performance-memory-allocator"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "mimalloc",
 "tikv-jemallocator",
@ -6422,7 +6396,7 @@ dependencies = [
 [[package]]
 name = "uv-platform"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "fs-err",
 "goblin",
@ -6439,7 +6413,7 @@ dependencies = [
 [[package]]
 name = "uv-platform-tags"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "insta",
 "memchr",
@ -6452,7 +6426,7 @@ dependencies = [
 [[package]]
 name = "uv-preview"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "bitflags 2.9.4",
 "thiserror 2.0.17",
@ -6461,10 +6435,9 @@ dependencies = [
 [[package]]
 name = "uv-publish"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "ambient-id",
 "anstream",
 "astral-reqwest-middleware",
 "astral-reqwest-retry",
 "astral-tokio-tar",
@ -6498,12 +6471,11 @@ dependencies = [
 "uv-redacted",
 "uv-static",
 "uv-warnings",
 "wiremock",
 ]
 [[package]]
 name = "uv-pypi-types"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "hashbrown 0.16.1",
@ -6535,7 +6507,7 @@ dependencies = [
 [[package]]
 name = "uv-python"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "assert_fs",
@ -6597,7 +6569,7 @@ dependencies = [
 [[package]]
 name = "uv-redacted"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "ref-cast",
 "schemars",
@ -6608,7 +6580,7 @@ dependencies = [
 [[package]]
 name = "uv-requirements"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "configparser",
@ -6643,7 +6615,7 @@ dependencies = [
 [[package]]
 name = "uv-requirements-txt"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "assert_fs",
@ -6676,7 +6648,7 @@ dependencies = [
 [[package]]
 name = "uv-resolver"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "arcstr",
 "astral-pubgrub",
@ -6741,7 +6713,7 @@ dependencies = [
 [[package]]
 name = "uv-scripts"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "fs-err",
 "indoc",
@ -6765,7 +6737,7 @@ dependencies = [
 [[package]]
 name = "uv-settings"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "clap",
 "fs-err",
@ -6800,7 +6772,7 @@ dependencies = [
 [[package]]
 name = "uv-shell"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "fs-err",
@ -6817,7 +6789,7 @@ dependencies = [
 [[package]]
 name = "uv-small-str"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "arcstr",
 "rkyv",
@ -6827,7 +6799,7 @@ dependencies = [
 [[package]]
 name = "uv-state"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "fs-err",
 "tempfile",
@ -6836,14 +6808,14 @@ dependencies = [
 [[package]]
 name = "uv-static"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "uv-macros",
 ]
 [[package]]
 name = "uv-tool"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "fs-err",
 "pathdiff",
@ -6872,7 +6844,7 @@ dependencies = [
 [[package]]
 name = "uv-torch"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "clap",
 "either",
@ -6892,7 +6864,7 @@ dependencies = [
 [[package]]
 name = "uv-trampoline-builder"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "assert_cmd",
@ -6909,7 +6881,7 @@ dependencies = [
 [[package]]
 name = "uv-types"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "dashmap",
@ -6931,11 +6903,11 @@ dependencies = [
 [[package]]
 name = "uv-version"
-version = "0.9.18"
+version = "0.9.15"
 [[package]]
 name = "uv-virtualenv"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "console 0.16.1",
 "fs-err",
@ -6957,19 +6929,16 @@ dependencies = [
 [[package]]
 name = "uv-warnings"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anstream",
 "anyhow",
 "indoc",
 "insta",
 "owo-colors",
 "rustc-hash",
 ]
 [[package]]
 name = "uv-workspace"
-version = "0.0.8"
+version = "0.0.5"
 dependencies = [
 "anyhow",
 "assert_fs",
--- a/Cargo.toml
+++ b/Cargo.toml
@ -16,66 +16,66 @@ authors = ["uv"]
 license = "MIT OR Apache-2.0"
 [workspace.dependencies]
-uv-auth = { version = "0.0.8", path = "crates/uv-auth" }
+uv-auth = { version = "0.0.5", path = "crates/uv-auth" }
-uv-bin-install = { version = "0.0.8", path = "crates/uv-bin-install" }
+uv-bin-install = { version = "0.0.5", path = "crates/uv-bin-install" }
-uv-build-backend = { version = "0.0.8", path = "crates/uv-build-backend" }
+uv-build-backend = { version = "0.0.5", path = "crates/uv-build-backend" }
-uv-build-frontend = { version = "0.0.8", path = "crates/uv-build-frontend" }
+uv-build-frontend = { version = "0.0.5", path = "crates/uv-build-frontend" }
-uv-cache = { version = "0.0.8", path = "crates/uv-cache" }
+uv-cache = { version = "0.0.5", path = "crates/uv-cache" }
-uv-cache-info = { version = "0.0.8", path = "crates/uv-cache-info" }
+uv-cache-info = { version = "0.0.5", path = "crates/uv-cache-info" }
-uv-cache-key = { version = "0.0.8", path = "crates/uv-cache-key" }
+uv-cache-key = { version = "0.0.5", path = "crates/uv-cache-key" }
-uv-cli = { version = "0.0.8", path = "crates/uv-cli" }
+uv-cli = { version = "0.0.5", path = "crates/uv-cli" }
-uv-client = { version = "0.0.8", path = "crates/uv-client" }
+uv-client = { version = "0.0.5", path = "crates/uv-client" }
-uv-configuration = { version = "0.0.8", path = "crates/uv-configuration" }
+uv-configuration = { version = "0.0.5", path = "crates/uv-configuration" }
-uv-console = { version = "0.0.8", path = "crates/uv-console" }
+uv-console = { version = "0.0.5", path = "crates/uv-console" }
-uv-dirs = { version = "0.0.8", path = "crates/uv-dirs" }
+uv-dirs = { version = "0.0.5", path = "crates/uv-dirs" }
-uv-dispatch = { version = "0.0.8", path = "crates/uv-dispatch" }
+uv-dispatch = { version = "0.0.5", path = "crates/uv-dispatch" }
-uv-distribution = { version = "0.0.8", path = "crates/uv-distribution" }
+uv-distribution = { version = "0.0.5", path = "crates/uv-distribution" }
-uv-distribution-filename = { version = "0.0.8", path = "crates/uv-distribution-filename" }
+uv-distribution-filename = { version = "0.0.5", path = "crates/uv-distribution-filename" }
-uv-distribution-types = { version = "0.0.8", path = "crates/uv-distribution-types" }
+uv-distribution-types = { version = "0.0.5", path = "crates/uv-distribution-types" }
-uv-extract = { version = "0.0.8", path = "crates/uv-extract" }
+uv-extract = { version = "0.0.5", path = "crates/uv-extract" }
-uv-flags = { version = "0.0.8", path = "crates/uv-flags" }
+uv-flags = { version = "0.0.5", path = "crates/uv-flags" }
-uv-fs = { version = "0.0.8", path = "crates/uv-fs", features = ["serde", "tokio"] }
+uv-fs = { version = "0.0.5", path = "crates/uv-fs", features = ["serde", "tokio"] }
-uv-git = { version = "0.0.8", path = "crates/uv-git" }
+uv-git = { version = "0.0.5", path = "crates/uv-git" }
-uv-git-types = { version = "0.0.8", path = "crates/uv-git-types" }
+uv-git-types = { version = "0.0.5", path = "crates/uv-git-types" }
-uv-globfilter = { version = "0.0.8", path = "crates/uv-globfilter" }
+uv-globfilter = { version = "0.0.5", path = "crates/uv-globfilter" }
-uv-install-wheel = { version = "0.0.8", path = "crates/uv-install-wheel", default-features = false }
+uv-install-wheel = { version = "0.0.5", path = "crates/uv-install-wheel", default-features = false }
-uv-installer = { version = "0.0.8", path = "crates/uv-installer" }
+uv-installer = { version = "0.0.5", path = "crates/uv-installer" }
-uv-keyring = { version = "0.0.8", path = "crates/uv-keyring" }
+uv-keyring = { version = "0.0.5", path = "crates/uv-keyring" }
-uv-logging = { version = "0.0.8", path = "crates/uv-logging" }
+uv-logging = { version = "0.0.5", path = "crates/uv-logging" }
-uv-macros = { version = "0.0.8", path = "crates/uv-macros" }
+uv-macros = { version = "0.0.5", path = "crates/uv-macros" }
-uv-metadata = { version = "0.0.8", path = "crates/uv-metadata" }
+uv-metadata = { version = "0.0.5", path = "crates/uv-metadata" }
-uv-normalize = { version = "0.0.8", path = "crates/uv-normalize" }
+uv-normalize = { version = "0.0.5", path = "crates/uv-normalize" }
-uv-once-map = { version = "0.0.8", path = "crates/uv-once-map" }
+uv-once-map = { version = "0.0.5", path = "crates/uv-once-map" }
-uv-options-metadata = { version = "0.0.8", path = "crates/uv-options-metadata" }
+uv-options-metadata = { version = "0.0.5", path = "crates/uv-options-metadata" }
-uv-performance-memory-allocator = { version = "0.0.8", path = "crates/uv-performance-memory-allocator" }
+uv-performance-memory-allocator = { version = "0.0.5", path = "crates/uv-performance-memory-allocator" }
-uv-pep440 = { version = "0.0.8", path = "crates/uv-pep440", features = ["tracing", "rkyv", "version-ranges"] }
+uv-pep440 = { version = "0.0.5", path = "crates/uv-pep440", features = ["tracing", "rkyv", "version-ranges"] }
-uv-pep508 = { version = "0.0.8", path = "crates/uv-pep508", features = ["non-pep508-extensions"] }
+uv-pep508 = { version = "0.0.5", path = "crates/uv-pep508", features = ["non-pep508-extensions"] }
-uv-platform = { version = "0.0.8", path = "crates/uv-platform" }
+uv-platform = { version = "0.0.5", path = "crates/uv-platform" }
-uv-platform-tags = { version = "0.0.8", path = "crates/uv-platform-tags" }
+uv-platform-tags = { version = "0.0.5", path = "crates/uv-platform-tags" }
-uv-preview = { version = "0.0.8", path = "crates/uv-preview" }
+uv-preview = { version = "0.0.5", path = "crates/uv-preview" }
-uv-publish = { version = "0.0.8", path = "crates/uv-publish" }
+uv-publish = { version = "0.0.5", path = "crates/uv-publish" }
-uv-pypi-types = { version = "0.0.8", path = "crates/uv-pypi-types" }
+uv-pypi-types = { version = "0.0.5", path = "crates/uv-pypi-types" }
-uv-python = { version = "0.0.8", path = "crates/uv-python" }
+uv-python = { version = "0.0.5", path = "crates/uv-python" }
-uv-redacted = { version = "0.0.8", path = "crates/uv-redacted" }
+uv-redacted = { version = "0.0.5", path = "crates/uv-redacted" }
-uv-requirements = { version = "0.0.8", path = "crates/uv-requirements" }
+uv-requirements = { version = "0.0.5", path = "crates/uv-requirements" }
-uv-requirements-txt = { version = "0.0.8", path = "crates/uv-requirements-txt" }
+uv-requirements-txt = { version = "0.0.5", path = "crates/uv-requirements-txt" }
-uv-resolver = { version = "0.0.8", path = "crates/uv-resolver" }
+uv-resolver = { version = "0.0.5", path = "crates/uv-resolver" }
-uv-scripts = { version = "0.0.8", path = "crates/uv-scripts" }
+uv-scripts = { version = "0.0.5", path = "crates/uv-scripts" }
-uv-settings = { version = "0.0.8", path = "crates/uv-settings" }
+uv-settings = { version = "0.0.5", path = "crates/uv-settings" }
-uv-shell = { version = "0.0.8", path = "crates/uv-shell" }
+uv-shell = { version = "0.0.5", path = "crates/uv-shell" }
-uv-small-str = { version = "0.0.8", path = "crates/uv-small-str" }
+uv-small-str = { version = "0.0.5", path = "crates/uv-small-str" }
-uv-state = { version = "0.0.8", path = "crates/uv-state" }
+uv-state = { version = "0.0.5", path = "crates/uv-state" }
-uv-static = { version = "0.0.8", path = "crates/uv-static" }
+uv-static = { version = "0.0.5", path = "crates/uv-static" }
-uv-tool = { version = "0.0.8", path = "crates/uv-tool" }
+uv-tool = { version = "0.0.5", path = "crates/uv-tool" }
-uv-torch = { version = "0.0.8", path = "crates/uv-torch" }
+uv-torch = { version = "0.0.5", path = "crates/uv-torch" }
-uv-trampoline-builder = { version = "0.0.8", path = "crates/uv-trampoline-builder" }
+uv-trampoline-builder = { version = "0.0.5", path = "crates/uv-trampoline-builder" }
-uv-types = { version = "0.0.8", path = "crates/uv-types" }
+uv-types = { version = "0.0.5", path = "crates/uv-types" }
-uv-version = { version = "0.9.18", path = "crates/uv-version" }
+uv-version = { version = "0.9.15", path = "crates/uv-version" }
-uv-virtualenv = { version = "0.0.8", path = "crates/uv-virtualenv" }
+uv-virtualenv = { version = "0.0.5", path = "crates/uv-virtualenv" }
-uv-warnings = { version = "0.0.8", path = "crates/uv-warnings" }
+uv-warnings = { version = "0.0.5", path = "crates/uv-warnings" }
-uv-workspace = { version = "0.0.8", path = "crates/uv-workspace" }
+uv-workspace = { version = "0.0.5", path = "crates/uv-workspace" }
-ambient-id = { version = "0.0.7", default-features = false, features = ["astral-reqwest-middleware"] }
+ambient-id = { version = "0.0.6", default-features = false, features = ["astral-reqwest-middleware"] }
 anstream = { version = "0.6.15" }
 anyhow = { version = "1.0.89" }
 arcstr = { version = "1.2.0" }
@ -103,7 +103,6 @@ ctrlc = { version = "3.4.5" }
 cyclonedx-bom = { version = "0.8.0" }
 dashmap = { version = "6.1.0" }
 data-encoding = { version = "2.6.0" }
 diskus = { version = "0.9.0", default-features = false }
 dotenvy = { version = "0.15.7" }
 dunce = { version = "1.0.5" }
 either = { version = "1.13.0" }
@ -170,7 +169,7 @@ serde-untagged = { version = "0.1.6" }
 serde_json = { version = "1.0.128" }
 sha2 = { version = "0.10.8" }
 smallvec = { version = "1.13.2" }
-spdx = { version = "0.13.0" }
+spdx = { version = "0.12.0" }
 syn = { version = "2.0.77" }
 sys-info = { version = "0.9.1" }
 tar = { version = "0.4.43" }
@ -178,8 +177,8 @@ target-lexicon = { version = "0.13.0" }
 tempfile = { version = "3.14.0" }
 textwrap = { version = "0.16.1" }
 thiserror = { version = "2.0.0" }
-astral-tl = { version = "0.7.11" }
+astral-tl = { version = "0.7.9" }
-tokio = { version = "1.40.0", features = ["fs", "io-util", "macros", "process", "rt", "signal", "sync", "time"] }
+tokio = { version = "1.40.0", features = ["fs", "io-util", "macros", "process", "rt", "signal", "sync"] }
 tokio-stream = { version = "0.1.16" }
 tokio-util = { version = "0.7.12", features = ["compat", "io"] }
 toml = { version = "0.9.2", features = ["fast_hash"] }
@ -225,6 +224,9 @@ test-log = { version = "0.2.16", features = ["trace"], default-features = false
 tokio-rustls = { version = "0.26.2", default-features = false }
 whoami = { version = "1.6.0" }
 [workspace.metadata.cargo-shear]
 ignored = ["flate2", "xz2", "h2", "uv-performance-memory-allocator"]
 [workspace.lints.rust]
 unsafe_code = "warn"
 unreachable_pub = "warn"
@ -310,21 +312,12 @@ strip = false
 debug = "full"
 lto = false
 # Profile for fast test execution: Skip debug info generation, and
 # apply basic optimization, which speed up build and running tests.
 [profile.fast-build]
 inherits = "dev"
 opt-level = 1
 debug = 0
 strip = "debuginfo"
 # Profile for faster builds: Skip debug info generation, for faster
 # builds of smaller binaries.
 [profile.no-debug]
 inherits = "dev"
 debug = 0
 strip = "debuginfo"
 # Profile to build a minimally sized binary for uv-build
 [profile.minimal-size]
 inherits = "release"
--- a/README.md
+++ b/README.md
@ -42,7 +42,7 @@ An extremely fast Python package and project manager, written in Rust.
 - 🖥️ Supports macOS, Linux, and Windows.
 uv is backed by [Astral](https://astral.sh), the creators of
-[Ruff](https://github.com/astral-sh/ruff) and [ty](https://github.com/astral-sh/ty).
+[Ruff](https://github.com/astral-sh/ruff).
 ## Installation
@ -192,12 +192,14 @@ uv installs Python and allows quickly switching between versions.
 Install multiple Python versions:
 ```console
-$ uv python install 3.12 3.13 3.14
+$ uv python install 3.10 3.11 3.12
-Installed 3 versions in 972ms
+Searching for Python versions matching: Python 3.10
- + cpython-3.12.12-macos-aarch64-none (python3.12)
+Searching for Python versions matching: Python 3.11
- + cpython-3.13.9-macos-aarch64-none (python3.13)
+Searching for Python versions matching: Python 3.12
- + cpython-3.14.0-macos-aarch64-none (python3.14)
+Installed 3 versions in 3.42s
-
+ + cpython-3.10.14-macos-aarch64-none
 + cpython-3.11.9-macos-aarch64-none
 + cpython-3.12.4-macos-aarch64-none
 ```
 Download Python versions as needed:
@ -268,6 +270,14 @@ Installed 43 packages in 208ms
 See the [pip interface documentation](https://docs.astral.sh/uv/pip/index/) to get started.
 ## Platform support
 See uv's [platform support](https://docs.astral.sh/uv/reference/platforms/) document.
 ## Versioning policy
 See uv's [versioning policy](https://docs.astral.sh/uv/reference/versioning/) document.
 ## Contributing
 We are passionate about supporting contributors of all levels of experience and would love to see
@ -284,15 +294,6 @@ It's pronounced as "you - vee" ([`/juː viː/`](https://en.wikipedia.org/wiki/He
 Just "uv", please. See the [style guide](./STYLE.md#styling-uv) for details.
 #### What platforms does uv support?
 See uv's [platform support](https://docs.astral.sh/uv/reference/platforms/) document.
 #### Is uv ready for production?
 Yes, uv is stable and widely used in production. See uv's
 [versioning policy](https://docs.astral.sh/uv/reference/versioning/) document for details.
 ## Acknowledgements
 uv's dependency resolver uses [PubGrub](https://github.com/pubgrub-rs/pubgrub) under the hood. We're
--- a/_typos.toml
+++ b/_typos.toml
@ -1,8 +1,8 @@
 [files]
 extend-exclude = [
    "**/snapshots/",
-    "test/ecosystem/**",
+    "ecosystem/**",
-    "test/requirements/**/*.in",
+    "scripts/**/*.in",
    "crates/uv-build-frontend/src/pipreqs/mapping",
 ]
 ignore-hidden = false
--- a/crates/uv-auth/Cargo.toml
+++ b/crates/uv-auth/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-auth"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-auth/README.md
+++ b/crates/uv-auth/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-auth).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-auth).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-auth/src/cache.rs
+++ b/crates/uv-auth/src/cache.rs
@ -11,8 +11,8 @@ use url::Url;
 use uv_once_map::OnceMap;
 use uv_redacted::DisplaySafeUrl;
 use crate::Realm;
 use crate::credentials::{Authentication, Username};
 use crate::{Credentials, Realm};
 type FxOnceMap<K, V> = OnceMap<K, V, BuildHasherDefault<FxHasher>>;
@ -33,7 +33,6 @@ impl Display for FetchUrl {
    }
 }
 #[derive(Debug)] // All internal types are redacted.
 pub struct CredentialsCache {
    /// A cache per realm and username
    realms: RwLock<FxHashMap<(Realm, Username), Arc<Authentication>>>,
@ -59,27 +58,6 @@ impl CredentialsCache {
        }
    }
    /// Populate the global authentication store with credentials on a URL, if there are any.
    ///
    /// Returns `true` if the store was updated.
    pub fn store_credentials_from_url(&self, url: &DisplaySafeUrl) -> bool {
        if let Some(credentials) = Credentials::from_url(url) {
            trace!("Caching credentials for {url}");
            self.insert(url, Arc::new(Authentication::from(credentials)));
            true
        } else {
            false
        }
    }
    /// Populate the global authentication store with credentials on a URL, if there are any.
    ///
    /// Returns `true` if the store was updated.
    pub fn store_credentials(&self, url: &DisplaySafeUrl, credentials: Credentials) {
        trace!("Caching credentials for {url}");
        self.insert(url, Arc::new(Authentication::from(credentials)));
    }
    /// Return the credentials that should be used for a realm and username, if any.
    pub(crate) fn get_realm(
        &self,
--- a/crates/uv-auth/src/lib.rs
+++ b/crates/uv-auth/src/lib.rs
@ -1,5 +1,12 @@
 use std::sync::{Arc, LazyLock};
 use tracing::trace;
 use uv_redacted::DisplaySafeUrl;
 use crate::credentials::Authentication;
 pub use access_token::AccessToken;
-pub use cache::CredentialsCache;
+use cache::CredentialsCache;
 pub use credentials::{Credentials, Username};
 pub use index::{AuthPolicy, Index, Indexes};
 pub use keyring::KeyringProvider;
@ -22,3 +29,32 @@ mod pyx;
 mod realm;
 mod service;
 mod store;
 // TODO(zanieb): Consider passing a cache explicitly throughout
 /// Global authentication cache for a uv invocation
 ///
 /// This is used to share credentials across uv clients.
 pub(crate) static CREDENTIALS_CACHE: LazyLock<CredentialsCache> =
    LazyLock::new(CredentialsCache::default);
 /// Populate the global authentication store with credentials on a URL, if there are any.
 ///
 /// Returns `true` if the store was updated.
 pub fn store_credentials_from_url(url: &DisplaySafeUrl) -> bool {
    if let Some(credentials) = Credentials::from_url(url) {
        trace!("Caching credentials for {url}");
        CREDENTIALS_CACHE.insert(url, Arc::new(Authentication::from(credentials)));
        true
    } else {
        false
    }
 }
 /// Populate the global authentication store with credentials on a URL, if there are any.
 ///
 /// Returns `true` if the store was updated.
 pub fn store_credentials(url: &DisplaySafeUrl, credentials: Credentials) {
    trace!("Caching credentials for {url}");
    CREDENTIALS_CACHE.insert(url, Arc::new(Authentication::from(credentials)));
 }
--- a/crates/uv-auth/src/middleware.rs
+++ b/crates/uv-auth/src/middleware.rs
@ -17,13 +17,13 @@ use crate::credentials::Authentication;
 use crate::providers::{HuggingFaceProvider, S3EndpointProvider};
 use crate::pyx::{DEFAULT_TOLERANCE_SECS, PyxTokenStore};
 use crate::{
-    AccessToken, CredentialsCache, KeyringProvider,
+    AccessToken, CREDENTIALS_CACHE, CredentialsCache, KeyringProvider,
    cache::FetchUrl,
    credentials::{Credentials, Username},
    index::{AuthPolicy, Indexes},
    realm::Realm,
 };
-use crate::{Index, TextCredentialStore};
+use crate::{Index, TextCredentialStore, TomlCredentialError};
 /// Cached check for whether we're running in Dependabot.
 static IS_DEPENDABOT: LazyLock<bool> =
@ -65,55 +65,49 @@ impl NetrcMode {
 /// Strategy for loading text-based credential files.
 enum TextStoreMode {
-    Automatic(tokio::sync::OnceCell<Option<TextCredentialStore>>),
+    Automatic(LazyLock<Option<TextCredentialStore>>),
    Enabled(TextCredentialStore),
    Disabled,
 }
 impl Default for TextStoreMode {
    fn default() -> Self {
-        Self::Automatic(tokio::sync::OnceCell::new())
+        // TODO(zanieb): Reconsider this pattern. We're just mirroring the [`NetrcMode`]
        // implementation for now.
        Self::Automatic(LazyLock::new(|| {
            let path = TextCredentialStore::default_file()
                .inspect_err(|err| {
                    warn!("Failed to determine credentials file path: {}", err);
                })
                .ok()?;
            match TextCredentialStore::read(&path) {
                Ok((store, _lock)) => {
                    debug!("Loaded credential file {}", path.display());
                    Some(store)
                }
                Err(TomlCredentialError::Io(err)) if err.kind() == std::io::ErrorKind::NotFound => {
                    debug!("No credentials file found at {}", path.display());
                    None
                }
                Err(err) => {
                    warn!(
                        "Failed to load credentials from {}: {}",
                        path.display(),
                        err
                    );
                    None
                }
            }
        }))
    }
 }
 impl TextStoreMode {
    async fn load_default_store() -> Option<TextCredentialStore> {
        let path = TextCredentialStore::default_file()
            .inspect_err(|err| {
                warn!("Failed to determine credentials file path: {}", err);
            })
            .ok()?;
        match TextCredentialStore::read(&path).await {
            Ok((store, _lock)) => {
                debug!("Loaded credential file {}", path.display());
                Some(store)
            }
            Err(err)
                if err
                    .as_io_error()
                    .is_some_and(|err| err.kind() == std::io::ErrorKind::NotFound) =>
            {
                debug!("No credentials file found at {}", path.display());
                None
            }
            Err(err) => {
                warn!(
                    "Failed to load credentials from {}: {}",
                    path.display(),
                    err
                );
                None
            }
        }
    }
    /// Get the parsed credential store, if enabled.
-    async fn get(&self) -> Option<&TextCredentialStore> {
+    fn get(&self) -> Option<&TextCredentialStore> {
        match self {
-            // TODO(zanieb): Reconsider this pattern. We're just mirroring the [`NetrcMode`]
+            Self::Automatic(lock) => lock.as_ref(),
            // implementation for now.
            Self::Automatic(lock) => lock.get_or_init(Self::load_default_store).await.as_ref(),
            Self::Enabled(store) => Some(store),
            Self::Disabled => None,
        }
@ -129,15 +123,6 @@ enum TokenState {
    Initialized(Option<AccessToken>),
 }
 #[derive(Clone)]
 enum S3CredentialState {
    /// The S3 credential state has not yet been initialized.
    Uninitialized,
    /// The S3 credential state has been initialized, with either a signer or `None` if
    /// no S3 endpoint is configured.
    Initialized(Option<Arc<Authentication>>),
 }
 /// A middleware that adds basic authentication to requests.
 ///
 /// Uses a cache to propagate credentials from previously seen requests and
@ -146,8 +131,7 @@ pub struct AuthMiddleware {
    netrc: NetrcMode,
    text_store: TextStoreMode,
    keyring: Option<KeyringProvider>,
-    /// Global authentication cache for a uv invocation to share credentials across uv clients.
+    cache: Option<CredentialsCache>,
    cache: Arc<CredentialsCache>,
    /// Auth policies for specific URLs.
    indexes: Indexes,
    /// Set all endpoints as needing authentication. We never try to send an
@ -159,31 +143,21 @@ pub struct AuthMiddleware {
    pyx_token_store: Option<PyxTokenStore>,
    /// Tokens to use for persistent credentials.
    pyx_token_state: Mutex<TokenState>,
    /// Cached S3 credentials to avoid running the credential helper multiple times.
    s3_credential_state: Mutex<S3CredentialState>,
    preview: Preview,
 }
 impl Default for AuthMiddleware {
    fn default() -> Self {
        Self::new()
    }
 }
 impl AuthMiddleware {
    pub fn new() -> Self {
        Self {
            netrc: NetrcMode::default(),
            text_store: TextStoreMode::default(),
            keyring: None,
-            // TODO(konsti): There shouldn't be a credential cache without that in the initializer.
+            cache: None,
            cache: Arc::new(CredentialsCache::default()),
            indexes: Indexes::new(),
            only_authenticated: false,
            base_client: None,
            pyx_token_store: None,
            pyx_token_state: Mutex::new(TokenState::Uninitialized),
            s3_credential_state: Mutex::new(S3CredentialState::Uninitialized),
            preview: Preview::default(),
        }
    }
@ -231,14 +205,7 @@ impl AuthMiddleware {
    /// Configure the [`CredentialsCache`] to use.
    #[must_use]
    pub fn with_cache(mut self, cache: CredentialsCache) -> Self {
-        self.cache = Arc::new(cache);
+        self.cache = Some(cache);
        self
    }
    /// Configure the [`CredentialsCache`] to use from an existing [`Arc`].
    #[must_use]
    pub fn with_cache_arc(mut self, cache: Arc<CredentialsCache>) -> Self {
        self.cache = cache;
        self
    }
@ -271,9 +238,17 @@ impl AuthMiddleware {
        self
    }
-    /// Global authentication cache for a uv invocation to share credentials across uv clients.
+    /// Get the configured authentication store.
    ///
    /// If not set, the global store is used.
    fn cache(&self) -> &CredentialsCache {
-        &self.cache
+        self.cache.as_ref().unwrap_or(&CREDENTIALS_CACHE)
    }
 }
 impl Default for AuthMiddleware {
    fn default() -> Self {
        Self::new()
    }
 }
@ -690,26 +665,13 @@ impl AuthMiddleware {
            return Some(credentials);
        }
-        if S3EndpointProvider::is_s3_endpoint(url, self.preview) {
+        if let Some(credentials) = S3EndpointProvider::credentials_for(url, self.preview)
-            let mut s3_state = self.s3_credential_state.lock().await;
+            .map(Authentication::from)
-
+            .map(Arc::new)
-            // If the S3 credential state is uninitialized, initialize it.
+        {
-            let credentials = match &*s3_state {
+            debug!("Found S3 credentials for {url}");
-                S3CredentialState::Uninitialized => {
+            self.cache().fetches.done(key, Some(credentials.clone()));
-                    trace!("Initializing S3 credentials for {url}");
+            return Some(credentials);
                    let signer = S3EndpointProvider::create_signer();
                    let credentials = Arc::new(Authentication::from(signer));
                    *s3_state = S3CredentialState::Initialized(Some(credentials.clone()));
                    Some(credentials)
                }
                S3CredentialState::Initialized(credentials) => credentials.clone(),
            };
            if let Some(credentials) = credentials {
                debug!("Found S3 credentials for {url}");
                self.cache().fetches.done(key, Some(credentials.clone()));
                return Some(credentials);
            }
        }
        // If this is a known URL, authenticate it via the token store.
@ -767,16 +729,9 @@ impl AuthMiddleware {
            Some(credentials)
        // Text credential store support.
-        } else if let Some(credentials) = self.text_store.get().await.and_then(|text_store| {
+        } else if let Some(credentials) = self.text_store.get().and_then(|text_store| {
            debug!("Checking text store for credentials for {url}");
-            text_store
+            text_store.get_credentials(url, credentials.as_ref().and_then(|credentials| credentials.username())).cloned()
                .get_credentials(
                    url,
                    credentials
                        .as_ref()
                        .and_then(|credentials| credentials.username()),
                )
                .cloned()
        }) {
            debug!("Found credentials in plaintext store for {url}");
            Some(credentials)
@ -792,16 +747,10 @@ impl AuthMiddleware {
                if let Some(index) = index {
                    // N.B. The native store performs an exact look up right now, so we use the root
                    // URL of the index instead of relying on prefix-matching.
-                    debug!(
+                    debug!("Checking native store for credentials for index URL {}{}", display_username, index.root_url);
                        "Checking native store for credentials for index URL {}{}",
                        display_username, index.root_url
                    );
                    native_store.fetch(&index.root_url, username).await
                } else {
-                    debug!(
+                    debug!("Checking native store for credentials for URL {}{}", display_username, url);
                        "Checking native store for credentials for URL {}{}",
                        display_username, url
                    );
                    native_store.fetch(url, username).await
                }
                // TODO(zanieb): We should have a realm fallback here too
@ -822,18 +771,10 @@ impl AuthMiddleware {
                // always authenticate.
                if let Some(username) = credentials.and_then(|credentials| credentials.username()) {
                    if let Some(index) = index {
-                        debug!(
+                        debug!("Checking keyring for credentials for index URL {}@{}", username, index.url);
-                            "Checking keyring for credentials for index URL {}@{}",
+                        keyring.fetch(DisplaySafeUrl::ref_cast(&index.url), Some(username)).await
                            username, index.url
                        );
                        keyring
                            .fetch(DisplaySafeUrl::ref_cast(&index.url), Some(username))
                            .await
                    } else {
-                        debug!(
+                        debug!("Checking keyring for credentials for full URL {}@{}", username, url);
                            "Checking keyring for credentials for full URL {}@{}",
                            username, url
                        );
                        keyring.fetch(url, Some(username)).await
                    }
                } else if matches!(auth_policy, AuthPolicy::Always) {
@ -842,16 +783,12 @@ impl AuthMiddleware {
                            "Checking keyring for credentials for index URL {} without username due to `authenticate = always`",
                            index.url
                        );
-                        keyring
+                        keyring.fetch(DisplaySafeUrl::ref_cast(&index.url), None).await
                            .fetch(DisplaySafeUrl::ref_cast(&index.url), None)
                            .await
                    } else {
                        None
                    }
                } else {
-                    debug!(
+                    debug!("Skipping keyring fetch for {url} without username; use `authenticate = always` to force");
                        "Skipping keyring fetch for {url} without username; use `authenticate = always` to force"
                    );
                    None
                }
            }
@ -861,9 +798,9 @@ impl AuthMiddleware {
            Some(credentials)
        } else {
            None
-        };
+        }
-
+        .map(Authentication::from)
-        let credentials = credentials.map(Authentication::from).map(Arc::new);
+        .map(Arc::new);
        // Register the fetch for this key
        self.cache().fetches.done(key, credentials.clone());
--- a/crates/uv-auth/src/providers.rs
+++ b/crates/uv-auth/src/providers.rs
@ -66,8 +66,8 @@ static S3_ENDPOINT_REALM: LazyLock<Option<Realm>> = LazyLock::new(|| {
 pub(crate) struct S3EndpointProvider;
 impl S3EndpointProvider {
-    /// Returns `true` if the URL matches the configured S3 endpoint.
+    /// Returns the credentials for the S3 endpoint, if available.
-    pub(crate) fn is_s3_endpoint(url: &Url, preview: Preview) -> bool {
+    pub(crate) fn credentials_for(url: &Url, preview: Preview) -> Option<DefaultSigner> {
        if let Some(s3_endpoint_realm) = S3_ENDPOINT_REALM.as_ref().map(RealmRef::from) {
            if !preview.is_enabled(PreviewFeatures::S3_ENDPOINT) {
                warn_user_once!(
@ -79,26 +79,19 @@ impl S3EndpointProvider {
            // Treat any URL on the same domain or subdomain as available for S3 signing.
            let realm = RealmRef::from(url);
            if realm == s3_endpoint_realm || realm.is_subdomain_of(s3_endpoint_realm) {
-                return true;
+                // TODO(charlie): Can `reqsign` infer the region for us? Profiles, for example,
                // often have a region set already.
                let region = std::env::var(EnvVars::AWS_REGION)
                    .map(Cow::Owned)
                    .unwrap_or_else(|_| {
                        std::env::var(EnvVars::AWS_DEFAULT_REGION)
                            .map(Cow::Owned)
                            .unwrap_or_else(|_| Cow::Borrowed("us-east-1"))
                    });
                let signer = reqsign::aws::default_signer("s3", &region);
                return Some(signer);
            }
        }
-        false
+        None
    }
    /// Creates a new S3 signer with the configured region.
    ///
    /// This is potentially expensive as it may invoke credential helpers, so the result
    /// should be cached.
    pub(crate) fn create_signer() -> DefaultSigner {
        // TODO(charlie): Can `reqsign` infer the region for us? Profiles, for example,
        // often have a region set already.
        let region = std::env::var(EnvVars::AWS_REGION)
            .map(Cow::Owned)
            .unwrap_or_else(|_| {
                std::env::var(EnvVars::AWS_DEFAULT_REGION)
                    .map(Cow::Owned)
                    .unwrap_or_else(|_| Cow::Borrowed("us-east-1"))
            });
        reqsign::aws::default_signer("s3", &region)
    }
 }
--- a/crates/uv-auth/src/store.rs
+++ b/crates/uv-auth/src/store.rs
@ -5,7 +5,7 @@ use fs_err as fs;
 use rustc_hash::FxHashMap;
 use serde::{Deserialize, Serialize};
 use thiserror::Error;
-use uv_fs::{LockedFile, LockedFileError, LockedFileMode, with_added_extension};
+use uv_fs::{LockedFile, with_added_extension};
 use uv_preview::{Preview, PreviewFeatures};
 use uv_redacted::DisplaySafeUrl;
@ -28,7 +28,7 @@ pub enum AuthBackend {
 }
 impl AuthBackend {
-    pub async fn from_settings(preview: Preview) -> Result<Self, TomlCredentialError> {
+    pub fn from_settings(preview: Preview) -> Result<Self, TomlCredentialError> {
        // If preview is enabled, we'll use the system-native store
        if preview.is_enabled(PreviewFeatures::NATIVE_AUTH) {
            return Ok(Self::System(KeyringProvider::native()));
@ -36,16 +36,12 @@ impl AuthBackend {
        // Otherwise, we'll use the plaintext credential store
        let path = TextCredentialStore::default_file()?;
-        match TextCredentialStore::read(&path).await {
+        match TextCredentialStore::read(&path) {
            Ok((store, lock)) => Ok(Self::TextStore(store, lock)),
-            Err(err)
+            Err(TomlCredentialError::Io(err)) if err.kind() == std::io::ErrorKind::NotFound => {
                if err
                    .as_io_error()
                    .is_some_and(|err| err.kind() == std::io::ErrorKind::NotFound) =>
            {
                Ok(Self::TextStore(
                    TextCredentialStore::default(),
-                    TextCredentialStore::lock(&path).await?,
+                    TextCredentialStore::lock(&path)?,
                ))
            }
            Err(err) => Err(err),
@ -73,8 +69,6 @@ pub enum AuthScheme {
 pub enum TomlCredentialError {
    #[error(transparent)]
    Io(#[from] std::io::Error),
    #[error(transparent)]
    LockedFile(#[from] LockedFileError),
    #[error("Failed to parse TOML credential file: {0}")]
    ParseError(#[from] toml::de::Error),
    #[error("Failed to serialize credentials to TOML")]
@ -89,21 +83,6 @@ pub enum TomlCredentialError {
    TokenNotUnicode(#[from] std::string::FromUtf8Error),
 }
 impl TomlCredentialError {
    pub fn as_io_error(&self) -> Option<&std::io::Error> {
        match self {
            Self::Io(err) => Some(err),
            Self::LockedFile(err) => err.as_io_error(),
            Self::ParseError(_)
            | Self::SerializeError(_)
            | Self::BasicAuthError(_)
            | Self::BearerAuthError(_)
            | Self::CredentialsDirError
            | Self::TokenNotUnicode(_) => None,
        }
    }
 }
 #[derive(Debug, Error)]
 pub enum BasicAuthError {
    #[error("`username` is required with `scheme = basic`")]
@ -254,12 +233,12 @@ impl TextCredentialStore {
    }
    /// Acquire a lock on the credentials file at the given path.
-    pub async fn lock(path: &Path) -> Result<LockedFile, TomlCredentialError> {
+    pub fn lock(path: &Path) -> Result<LockedFile, TomlCredentialError> {
        if let Some(parent) = path.parent() {
            fs::create_dir_all(parent)?;
        }
        let lock = with_added_extension(path, ".lock");
-        Ok(LockedFile::acquire(lock, LockedFileMode::Exclusive, "credentials store").await?)
+        Ok(LockedFile::acquire_blocking(lock, "credentials store")?)
    }
    /// Read credentials from a file.
@ -290,8 +269,8 @@ impl TextCredentialStore {
    /// Returns [`TextCredentialStore`] and a [`LockedFile`] to hold if mutating the store.
    ///
    /// If the store will not be written to following the read, the lock can be dropped.
-    pub async fn read<P: AsRef<Path>>(path: P) -> Result<(Self, LockedFile), TomlCredentialError> {
+    pub fn read<P: AsRef<Path>>(path: P) -> Result<(Self, LockedFile), TomlCredentialError> {
-        let lock = Self::lock(path.as_ref()).await?;
+        let lock = Self::lock(path.as_ref())?;
        let store = Self::from_file(path)?;
        Ok((store, lock))
    }
@ -471,8 +450,8 @@ mod tests {
        assert!(store.get_credentials(&url, None).is_none());
    }
-    #[tokio::test]
+    #[test]
-    async fn test_file_operations() {
+    fn test_file_operations() {
        let mut temp_file = NamedTempFile::new().unwrap();
        writeln!(
            temp_file,
@ -508,7 +487,7 @@ password = "pass2"
        store
            .write(
                temp_output.path(),
-                TextCredentialStore::lock(temp_file.path()).await.unwrap(),
+                TextCredentialStore::lock(temp_file.path()).unwrap(),
            )
            .unwrap();
--- a/crates/uv-bench/Cargo.toml
+++ b/crates/uv-bench/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-bench"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 publish = false
 authors = { workspace = true }
@ -22,14 +22,14 @@ name = "uv"
 path = "benches/uv.rs"
 harness = false
-[dev-dependencies]
+[dependencies]
 uv-cache = { workspace = true }
 uv-client = { workspace = true }
 uv-configuration = { workspace = true }
 uv-dispatch = { workspace = true }
 uv-distribution = { workspace = true }
 uv-distribution-types = { workspace = true }
-uv-extract = { workspace = true }
+uv-extract = { workspace = true, optional = true }
 uv-install-wheel = { workspace = true }
 uv-pep440 = { workspace = true }
 uv-pep508 = { workspace = true }
--- a/crates/uv-bench/README.md
+++ b/crates/uv-bench/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-bench).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-bench).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-bench/benches/uv.rs
+++ b/crates/uv-bench/benches/uv.rs
@ -59,10 +59,7 @@ fn setup(manifest: Manifest) -> impl Fn(bool) {
        .build()
        .unwrap();
-    let cache = Cache::from_path("../../.cache")
+    let cache = Cache::from_path("../../.cache").init().unwrap();
        .init_no_wait()
        .expect("No cache contention when running benchmarks")
        .unwrap();
    let interpreter = PythonEnvironment::from_root("../../.venv", &cache)
        .unwrap()
        .into_interpreter();
@ -134,7 +131,7 @@ mod resolver {
    );
    static TAGS: LazyLock<Tags> = LazyLock::new(|| {
-        Tags::from_env(&PLATFORM, (3, 11), "cpython", (3, 11), false, false, false).unwrap()
+        Tags::from_env(&PLATFORM, (3, 11), "cpython", (3, 11), false, false).unwrap()
    });
    pub(crate) async fn resolve(
--- a/crates/uv-bin-install/Cargo.toml
+++ b/crates/uv-bin-install/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-bin-install"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
@ -23,7 +23,6 @@ uv-extract = { workspace = true }
 uv-pep440 = { workspace = true }
 uv-platform = { workspace = true }
 uv-redacted = { workspace = true }
 fs-err = { workspace = true, features = ["tokio"] }
 futures = { workspace = true }
 reqwest = { workspace = true }
--- a/crates/uv-bin-install/README.md
+++ b/crates/uv-bin-install/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-bin-install).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-bin-install).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-bin-install/src/lib.rs
+++ b/crates/uv-bin-install/src/lib.rs
@ -19,7 +19,7 @@ use tracing::debug;
 use url::Url;
 use uv_distribution_filename::SourceDistExtension;
-use uv_cache::{Cache, CacheBucket, CacheEntry, Error as CacheError};
+use uv_cache::{Cache, CacheBucket, CacheEntry};
 use uv_client::{BaseClient, is_transient_network_error};
 use uv_extract::{Error as ExtractError, stream};
 use uv_pep440::Version;
@ -135,9 +135,6 @@ pub enum Error {
    #[error(transparent)]
    Io(#[from] std::io::Error),
    #[error(transparent)]
    Cache(#[from] CacheError),
    #[error("Failed to detect platform")]
    Platform(#[from] uv_platform::Error),
--- a/crates/uv-build-backend/Cargo.toml
+++ b/crates/uv-build-backend/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-build-backend"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-build-backend/README.md
+++ b/crates/uv-build-backend/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-build-backend).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-build-backend).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-build-backend/src/lib.rs
+++ b/crates/uv-build-backend/src/lib.rs
@ -1,4 +1,3 @@
 use itertools::Itertools;
 mod metadata;
 mod serde_verbatim;
 mod settings;
@ -8,10 +7,8 @@ mod wheel;
 pub use metadata::{PyProjectToml, check_direct_build};
 pub use settings::{BuildBackendSettings, WheelDataIncludes};
 pub use source_dist::{build_source_dist, list_source_dist};
 use uv_warnings::warn_user_once;
 pub use wheel::{build_editable, build_wheel, list_wheel, metadata};
 use std::collections::HashSet;
 use std::ffi::OsStr;
 use std::io;
 use std::path::{Path, PathBuf};
@ -32,9 +29,9 @@ use crate::settings::ModuleName;
 pub enum Error {
    #[error(transparent)]
    Io(#[from] io::Error),
-    #[error("Invalid metadata format in: {}", _0.user_display())]
+    #[error("Invalid pyproject.toml")]
-    Toml(PathBuf, #[source] toml::de::Error),
+    Toml(#[from] toml::de::Error),
-    #[error("Invalid project metadata")]
+    #[error("Invalid pyproject.toml")]
    Validation(#[from] ValidationError),
    #[error("Invalid module name: {0}")]
    InvalidModuleName(String, #[source] IdentifierParseError),
@ -194,60 +191,6 @@ fn check_metadata_directory(
    Ok(())
 }
 /// Returns the list of module names without names which would be included twice
 ///
 /// In normal cases it should do nothing:
 ///
 /// * `["aaa"] -> ["aaa"]`
 /// * `["aaa", "bbb"] -> ["aaa", "bbb"]`
 ///
 /// Duplicate elements are removed:
 ///
 /// * `["aaa", "aaa"] -> ["aaa"]`
 /// * `["bbb", "aaa", "bbb"] -> ["aaa", "bbb"]`
 ///
 /// Names with more specific paths are removed in favour of more general paths:
 ///
 /// * `["aaa.foo", "aaa"] -> ["aaa"]`
 /// * `["bbb", "aaa", "bbb.foo", "ccc.foo", "ccc.foo.bar", "aaa"] -> ["aaa", "bbb.foo", "ccc.foo"]`
 ///
 /// This does not preserve the order of the elements.
 fn prune_redundant_modules(mut names: Vec<String>) -> Vec<String> {
    names.sort();
    let mut pruned = Vec::with_capacity(names.len());
    for name in names {
        if let Some(last) = pruned.last() {
            if name == *last {
                continue;
            }
            // This is a more specific (narrow) module name than what came before
            if name
                .strip_prefix(last)
                .is_some_and(|suffix| suffix.starts_with('.'))
            {
                continue;
            }
        }
        pruned.push(name);
    }
    pruned
 }
 /// Wraps [`prune_redundant_modules`] with a conditional warning when modules are ignored
 fn prune_redundant_modules_warn(names: &[String], show_warnings: bool) -> Vec<String> {
    let pruned = prune_redundant_modules(names.to_vec());
    if show_warnings && names.len() != pruned.len() {
        let mut pruned: HashSet<_> = pruned.iter().collect();
        let ignored: Vec<_> = names.iter().filter(|name| !pruned.remove(name)).collect();
        let s = if ignored.len() == 1 { "" } else { "s" };
        warn_user_once!(
            "Ignoring redundant module name{s} in `tool.uv.build-backend.module-name`: `{}`",
            ignored.into_iter().join("`, `")
        );
    }
    pruned
 }
 /// Returns the source root and the module path(s) with the `__init__.py[i]`  below to it while
 /// checking the project layout and names.
 ///
@ -270,7 +213,6 @@ fn find_roots(
    relative_module_root: &Path,
    module_name: Option<&ModuleName>,
    namespace: bool,
    show_warnings: bool,
 ) -> Result<(PathBuf, Vec<PathBuf>), Error> {
    let relative_module_root = uv_fs::normalize_path(relative_module_root);
    // Check that even if a path contains `..`, we only include files below the module root.
@ -289,8 +231,8 @@ fn find_roots(
                ModuleName::Name(name) => {
                    vec![name.split('.').collect::<PathBuf>()]
                }
-                ModuleName::Names(names) => prune_redundant_modules_warn(names, show_warnings)
+                ModuleName::Names(names) => names
-                    .into_iter()
+                    .iter()
                    .map(|name| name.split('.').collect::<PathBuf>())
                    .collect(),
            }
@ -308,9 +250,9 @@ fn find_roots(
    let modules_relative = if let Some(module_name) = module_name {
        match module_name {
            ModuleName::Name(name) => vec![module_path_from_module_name(&src_root, name)?],
-            ModuleName::Names(names) => prune_redundant_modules_warn(names, show_warnings)
+            ModuleName::Names(names) => names
-                .into_iter()
+                .iter()
-                .map(|name| module_path_from_module_name(&src_root, &name))
+                .map(|name| module_path_from_module_name(&src_root, name))
                .collect::<Result<_, _>>()?,
        }
    } else {
@ -478,20 +420,19 @@ mod tests {
    fn build(source_root: &Path, dist: &Path) -> Result<BuildResults, Error> {
        // Build a direct wheel, capture all its properties to compare it with the indirect wheel
        // latest and remove it since it has the same filename as the indirect wheel.
-        let (_name, direct_wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION, false)?;
+        let (_name, direct_wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION)?;
-        let direct_wheel_filename = build_wheel(source_root, dist, None, MOCK_UV_VERSION, false)?;
+        let direct_wheel_filename = build_wheel(source_root, dist, None, MOCK_UV_VERSION)?;
        let direct_wheel_path = dist.join(direct_wheel_filename.to_string());
        let direct_wheel_contents = wheel_contents(&direct_wheel_path);
        let direct_wheel_hash = sha2::Sha256::digest(fs_err::read(&direct_wheel_path)?);
        fs_err::remove_file(&direct_wheel_path)?;
        // Build a source distribution.
-        let (_name, source_dist_list_files) =
+        let (_name, source_dist_list_files) = list_source_dist(source_root, MOCK_UV_VERSION)?;
            list_source_dist(source_root, MOCK_UV_VERSION, false)?;
        // TODO(konsti): This should run in the unpacked source dist tempdir, but we need to
        // normalize the path.
-        let (_name, wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION, false)?;
+        let (_name, wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION)?;
-        let source_dist_filename = build_source_dist(source_root, dist, MOCK_UV_VERSION, false)?;
+        let source_dist_filename = build_source_dist(source_root, dist, MOCK_UV_VERSION)?;
        let source_dist_path = dist.join(source_dist_filename.to_string());
        let source_dist_contents = sdist_contents(&source_dist_path);
@ -505,13 +446,7 @@ mod tests {
            source_dist_filename.name.as_dist_info_name(),
            source_dist_filename.version
        ));
-        let wheel_filename = build_wheel(
+        let wheel_filename = build_wheel(&sdist_top_level_directory, dist, None, MOCK_UV_VERSION)?;
            &sdist_top_level_directory,
            dist,
            None,
            MOCK_UV_VERSION,
            false,
        )?;
        let wheel_contents = wheel_contents(&dist.join(wheel_filename.to_string()));
        // Check that direct and indirect wheels are identical.
@ -599,7 +534,7 @@ mod tests {
    /// platform-independent deterministic builds.
    #[test]
    fn built_by_uv_building() {
-        let built_by_uv = Path::new("../../test/packages/built-by-uv");
+        let built_by_uv = Path::new("../../scripts/packages/built-by-uv");
        let src = TempDir::new().unwrap();
        for dir in [
            "src",
@ -662,7 +597,7 @@ mod tests {
        // Check that the source dist is reproducible across platforms.
        assert_snapshot!(
            format!("{:x}", sha2::Sha256::digest(fs_err::read(&source_dist_path).unwrap())),
-            @"bb74bff575b135bb39e5c9bce56349441fb0923bb8857e32a5eaf34ec1843967"
+            @"871d1f859140721b67cbeaca074e7a2740c88c38028d0509eba87d1285f1da9e"
        );
        // Check both the files we report and the actual files
        assert_snapshot!(format_file_list(build.source_dist_list_files, src.path()), @r"
@ -821,7 +756,7 @@ mod tests {
        // Build a wheel from a source distribution
        let output_dir = TempDir::new().unwrap();
-        build_source_dist(src.path(), output_dir.path(), "0.5.15", false).unwrap();
+        build_source_dist(src.path(), output_dir.path(), "0.5.15").unwrap();
        let sdist_tree = TempDir::new().unwrap();
        let source_dist_path = output_dir.path().join("pep_pep639_license-1.0.0.tar.gz");
        let sdist_reader = BufReader::new(File::open(&source_dist_path).unwrap());
@ -832,7 +767,6 @@ mod tests {
            output_dir.path(),
            None,
            "0.5.15",
            false,
        )
        .unwrap();
        let wheel = output_dir
@ -897,7 +831,6 @@ mod tests {
            output_dir.path(),
            Some(&metadata_dir.path().join(&dist_info_dir)),
            "0.5.15",
            false,
        )
        .unwrap();
        let wheel = output_dir
@ -1481,114 +1414,4 @@ mod tests {
        simple_namespace_part-1.0.0.dist-info/WHEEL
        ");
    }
    /// `prune_redundant_modules` should remove modules which are already
    /// included (either directly or via their parent)
    #[test]
    fn test_prune_redundant_modules() {
        fn check(input: &[&str], expect: &[&str]) {
            let input = input.iter().map(|s| (*s).to_string()).collect();
            let expect: Vec<_> = expect.iter().map(|s| (*s).to_string()).collect();
            assert_eq!(prune_redundant_modules(input), expect);
        }
        // Basic cases
        check(&[], &[]);
        check(&["foo"], &["foo"]);
        check(&["foo", "bar"], &["bar", "foo"]);
        // Deshadowing
        check(&["foo", "foo.bar"], &["foo"]);
        check(&["foo.bar", "foo"], &["foo"]);
        check(
            &["foo.bar.a", "foo.bar.b", "foo.bar", "foo", "foo.bar.a.c"],
            &["foo"],
        );
        check(
            &["bar.one", "bar.two", "baz", "bar", "baz.one"],
            &["bar", "baz"],
        );
        // Potential false positives
        check(&["foo", "foobar"], &["foo", "foobar"]);
        check(
            &["foo", "foobar", "foo.bar", "foobar.baz"],
            &["foo", "foobar"],
        );
        check(&["foo.bar", "foo.baz"], &["foo.bar", "foo.baz"]);
        check(&["foo", "foo", "foo.bar", "foo.bar"], &["foo"]);
        // Everything
        check(
            &[
                "foo.inner",
                "foo.inner.deeper",
                "foo",
                "bar",
                "bar.sub",
                "bar.sub.deep",
                "foobar",
                "baz.baz.bar",
                "baz.baz",
                "qux",
            ],
            &["bar", "baz.baz", "foo", "foobar", "qux"],
        );
    }
    /// A package with duplicate module names.
    #[test]
    fn duplicate_module_names() {
        let src = TempDir::new().unwrap();
        let pyproject_toml = indoc! {r#"
            [project]
            name = "duplicate"
            version = "1.0.0"
            [tool.uv.build-backend]
            module-name = ["foo", "foo", "bar.baz", "bar.baz.submodule"]
            [build-system]
            requires = ["uv_build>=0.5.15,<0.6.0"]
            build-backend = "uv_build"
            "#
        };
        fs_err::write(src.path().join("pyproject.toml"), pyproject_toml).unwrap();
        fs_err::create_dir_all(src.path().join("src").join("foo")).unwrap();
        File::create(src.path().join("src").join("foo").join("__init__.py")).unwrap();
        fs_err::create_dir_all(src.path().join("src").join("bar").join("baz")).unwrap();
        File::create(
            src.path()
                .join("src")
                .join("bar")
                .join("baz")
                .join("__init__.py"),
        )
        .unwrap();
        let dist = TempDir::new().unwrap();
        let build = build(src.path(), dist.path()).unwrap();
        assert_snapshot!(build.source_dist_contents.join("\n"), @r"
        duplicate-1.0.0/
        duplicate-1.0.0/PKG-INFO
        duplicate-1.0.0/pyproject.toml
        duplicate-1.0.0/src
        duplicate-1.0.0/src/bar
        duplicate-1.0.0/src/bar/baz
        duplicate-1.0.0/src/bar/baz/__init__.py
        duplicate-1.0.0/src/foo
        duplicate-1.0.0/src/foo/__init__.py
        ");
        assert_snapshot!(build.wheel_contents.join("\n"), @r"
        bar/
        bar/baz/
        bar/baz/__init__.py
        duplicate-1.0.0.dist-info/
        duplicate-1.0.0.dist-info/METADATA
        duplicate-1.0.0.dist-info/RECORD
        duplicate-1.0.0.dist-info/WHEEL
        foo/
        foo/__init__.py
        ");
    }
 }
--- a/crates/uv-build-backend/src/metadata.rs
+++ b/crates/uv-build-backend/src/metadata.rs
@ -154,11 +154,8 @@ impl PyProjectToml {
        &self.project.version
    }
-    pub(crate) fn parse(path: &Path) -> Result<Self, Error> {
+    pub(crate) fn parse(contents: &str) -> Result<Self, Error> {
-        let contents = fs_err::read_to_string(path)?;
+        Ok(toml::from_str(contents)?)
        let pyproject_toml =
            toml::from_str(&contents).map_err(|err| Error::Toml(path.to_path_buf(), err))?;
        Ok(pyproject_toml)
    }
    pub(crate) fn readme(&self) -> Option<&Readme> {
@ -952,7 +949,7 @@ mod tests {
            requires = ["uv_build>=0.4.15,<0.5.0"]
            build-backend = "uv_build"
        "#;
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        let temp_dir = TempDir::new().unwrap();
        let metadata = pyproject_toml.to_metadata(temp_dir.path()).unwrap();
@ -1037,7 +1034,7 @@ mod tests {
        "#
        };
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        let metadata = pyproject_toml.to_metadata(temp_dir.path()).unwrap();
        assert_snapshot!(metadata.core_metadata_format(), @r###"
@ -1131,7 +1128,7 @@ mod tests {
        "#
        };
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        let metadata = pyproject_toml.to_metadata(temp_dir.path()).unwrap();
        assert_snapshot!(metadata.core_metadata_format(), @r"
@ -1223,7 +1220,7 @@ mod tests {
        "#
        };
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        let metadata = pyproject_toml.to_metadata(temp_dir.path()).unwrap();
        assert_snapshot!(metadata.core_metadata_format(), @r###"
@ -1284,7 +1281,7 @@ mod tests {
    #[test]
    fn build_system_valid() {
        let contents = extend_project("");
-        let pyproject_toml: PyProjectToml = toml::from_str(&contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(&contents).unwrap();
        assert_snapshot!(
            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
            @""
@ -1302,7 +1299,7 @@ mod tests {
            requires = ["uv_build"]
            build-backend = "uv_build"
        "#};
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        assert_snapshot!(
            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
            @r###"`build_system.requires = ["uv_build"]` is missing an upper bound on the `uv_build` version such as `<0.5`. Without bounding the `uv_build` version, the source distribution will break when a future, breaking version of `uv_build` is released."###
@ -1320,7 +1317,7 @@ mod tests {
            requires = ["uv_build>=0.4.15,<0.5.0", "wheel"]
            build-backend = "uv_build"
        "#};
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        assert_snapshot!(
            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
            @"Expected a single uv requirement in `build-system.requires`, found ``"
@ -1338,7 +1335,7 @@ mod tests {
            requires = ["setuptools"]
            build-backend = "uv_build"
        "#};
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        assert_snapshot!(
            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
            @"Expected a single uv requirement in `build-system.requires`, found ``"
@ -1356,7 +1353,7 @@ mod tests {
            requires = ["uv_build>=0.4.15,<0.5.0"]
            build-backend = "setuptools"
        "#};
-        let pyproject_toml: PyProjectToml = toml::from_str(contents).unwrap();
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
        assert_snapshot!(
            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
            @r###"The value for `build_system.build-backend` should be `"uv_build"`, not `"setuptools"`"###
@ -1367,7 +1364,7 @@ mod tests {
    fn minimal() {
        let contents = extend_project("");
-        let metadata = toml::from_str::<PyProjectToml>(&contents)
+        let metadata = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap();
@ -1386,14 +1383,15 @@ mod tests {
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents).unwrap_err();
+        let err = PyProjectToml::parse(&contents).unwrap_err();
-        assert_snapshot!(format_err(err), @r#"
+        assert_snapshot!(format_err(err), @r###"
-        TOML parse error at line 4, column 10
+        Invalid pyproject.toml
          Caused by: TOML parse error at line 4, column 10
          |
        4 | readme = { path = "Readme.md" }
          |          ^^^^^^^^^^^^^^^^^^^^^^
        data did not match any variant of untagged enum Readme
-        "#);
+        "###);
    }
    #[test]
@ -1403,7 +1401,7 @@ mod tests {
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents)
+        let err = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap_err();
@ -1425,14 +1423,14 @@ mod tests {
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents)
+        let err = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap_err();
-        assert_snapshot!(format_err(err), @r"
+        assert_snapshot!(format_err(err), @r###"
-        Invalid project metadata
+        Invalid pyproject.toml
          Caused by: `project.description` must be a single line
-        ");
+        "###);
    }
    #[test]
@ -1443,14 +1441,14 @@ mod tests {
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents)
+        let err = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap_err();
-        assert_snapshot!(format_err(err), @r"
+        assert_snapshot!(format_err(err), @r###"
-        Invalid project metadata
+        Invalid pyproject.toml
          Caused by: When `project.license-files` is defined, `project.license` must be an SPDX expression string
-        ");
+        "###);
    }
    #[test]
@ -1459,7 +1457,7 @@ mod tests {
            license = "MIT OR Apache-2.0"
        "#
        });
-        let metadata = toml::from_str::<PyProjectToml>(&contents)
+        let metadata = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap();
@ -1477,13 +1475,13 @@ mod tests {
            license = "MIT XOR Apache-2"
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents)
+        let err = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap_err();
        // TODO(konsti): We mess up the indentation in the error.
        assert_snapshot!(format_err(err), @r"
-        Invalid project metadata
+        Invalid pyproject.toml
          Caused by: `project.license` is not a valid SPDX expression: MIT XOR Apache-2
          Caused by: MIT XOR Apache-2
            ^^^ unknown term
@ -1497,18 +1495,18 @@ mod tests {
        "#
        });
-        let err = toml::from_str::<PyProjectToml>(&contents)
+        let err = PyProjectToml::parse(&contents)
            .unwrap()
            .to_metadata(Path::new("/do/not/read"))
            .unwrap_err();
-        assert_snapshot!(format_err(err), @r"
+        assert_snapshot!(format_err(err), @r###"
-        Invalid project metadata
+        Invalid pyproject.toml
          Caused by: Dynamic metadata is not supported
-        ");
+        "###);
    }
    fn script_error(contents: &str) -> String {
-        let err = toml::from_str::<PyProjectToml>(contents)
+        let err = PyProjectToml::parse(contents)
            .unwrap()
            .to_entry_points()
            .unwrap_err();
--- a/crates/uv-build-backend/src/settings.rs
+++ b/crates/uv-build-backend/src/settings.rs
@ -70,9 +70,6 @@ pub struct BuildBackendSettings {
    pub default_excludes: bool,
    /// Glob expressions which files and directories to exclude from the source distribution.
    ///
    /// These exclusions are also applied to wheels to ensure that a wheel built from a source tree
    /// is consistent with a wheel built from a source distribution.
    #[option(
        default = r#"[]"#,
        value_type = "list[str]",
--- a/crates/uv-build-backend/src/source_dist.rs
+++ b/crates/uv-build-backend/src/source_dist.rs
@ -24,9 +24,9 @@ pub fn build_source_dist(
    source_tree: &Path,
    source_dist_directory: &Path,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<SourceDistFilename, Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    let filename = SourceDistFilename {
        name: pyproject_toml.name().clone(),
        version: pyproject_toml.version().clone(),
@ -34,7 +34,7 @@ pub fn build_source_dist(
    };
    let source_dist_path = source_dist_directory.join(filename.to_string());
    let writer = TarGzWriter::new(&source_dist_path)?;
-    write_source_dist(source_tree, writer, uv_version, show_warnings)?;
+    write_source_dist(source_tree, writer, uv_version)?;
    Ok(filename)
 }
@ -42,9 +42,9 @@ pub fn build_source_dist(
 pub fn list_source_dist(
    source_tree: &Path,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<(SourceDistFilename, FileList), Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    let filename = SourceDistFilename {
        name: pyproject_toml.name().clone(),
        version: pyproject_toml.version().clone(),
@ -52,7 +52,7 @@ pub fn list_source_dist(
    };
    let mut files = FileList::new();
    let writer = ListWriter::new(&mut files);
-    write_source_dist(source_tree, writer, uv_version, show_warnings)?;
+    write_source_dist(source_tree, writer, uv_version)?;
    Ok((filename, files))
 }
@ -61,7 +61,6 @@ fn source_dist_matcher(
    source_tree: &Path,
    pyproject_toml: &PyProjectToml,
    settings: BuildBackendSettings,
    show_warnings: bool,
 ) -> Result<(GlobDirFilter, GlobSet), Error> {
    // File and directories to include in the source directory
    let mut include_globs = Vec::new();
@ -76,7 +75,6 @@ fn source_dist_matcher(
        &settings.module_root,
        settings.module_name.as_ref(),
        settings.namespace,
        show_warnings,
    )?;
    for module_relative in modules_relative {
        // The wheel must not include any files included by the source distribution (at least until we
@ -184,9 +182,9 @@ fn write_source_dist(
    source_tree: &Path,
    mut writer: impl DirectoryWriter,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<SourceDistFilename, Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    for warning in pyproject_toml.check_build_system(uv_version) {
        warn_user_once!("{warning}");
    }
@ -220,7 +218,7 @@ fn write_source_dist(
    )?;
    let (include_matcher, exclude_matcher) =
-        source_dist_matcher(source_tree, &pyproject_toml, settings, show_warnings)?;
+        source_dist_matcher(source_tree, &pyproject_toml, settings)?;
    let mut files_visited = 0;
    for entry in WalkDir::new(source_tree)
@ -299,10 +297,6 @@ impl TarGzWriter {
 impl DirectoryWriter for TarGzWriter {
    fn write_bytes(&mut self, path: &str, bytes: &[u8]) -> Result<(), Error> {
        let mut header = Header::new_gnu();
        // Work around bug in Python's std tar module
        // https://github.com/python/cpython/issues/141707
        // https://github.com/astral-sh/uv/pull/17043#issuecomment-3636841022
        header.set_entry_type(EntryType::Regular);
        header.set_size(bytes.len() as u64);
        // Reasonable default to avoid 0o000 permissions, the user's umask will be applied on
        // unpacking.
@ -316,10 +310,6 @@ impl DirectoryWriter for TarGzWriter {
    fn write_file(&mut self, path: &str, file: &Path) -> Result<(), Error> {
        let metadata = fs_err::metadata(file)?;
        let mut header = Header::new_gnu();
        // Work around bug in Python's std tar module
        // https://github.com/python/cpython/issues/141707
        // https://github.com/astral-sh/uv/pull/17043#issuecomment-3636841022
        header.set_entry_type(EntryType::Regular);
        // Preserve the executable bit, especially for scripts
        #[cfg(unix)]
        let executable_bit = {
--- a/crates/uv-build-backend/src/wheel.rs
+++ b/crates/uv-build-backend/src/wheel.rs
@ -29,9 +29,9 @@ pub fn build_wheel(
    wheel_dir: &Path,
    metadata_directory: Option<&Path>,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<WheelFilename, Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    for warning in pyproject_toml.check_build_system(uv_version) {
        warn_user_once!("{warning}");
    }
@ -58,7 +58,6 @@ pub fn build_wheel(
        &filename,
        uv_version,
        wheel_writer,
        show_warnings,
    )?;
    Ok(filename)
@ -68,9 +67,9 @@ pub fn build_wheel(
 pub fn list_wheel(
    source_tree: &Path,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<(WheelFilename, FileList), Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    for warning in pyproject_toml.check_build_system(uv_version) {
        warn_user_once!("{warning}");
    }
@ -88,14 +87,7 @@ pub fn list_wheel(
    let mut files = FileList::new();
    let writer = ListWriter::new(&mut files);
-    write_wheel(
+    write_wheel(source_tree, &pyproject_toml, &filename, uv_version, writer)?;
        source_tree,
        &pyproject_toml,
        &filename,
        uv_version,
        writer,
        show_warnings,
    )?;
    Ok((filename, files))
 }
@ -105,7 +97,6 @@ fn write_wheel(
    filename: &WheelFilename,
    uv_version: &str,
    mut wheel_writer: impl DirectoryWriter,
    show_warnings: bool,
 ) -> Result<(), Error> {
    let settings = pyproject_toml
        .settings()
@ -141,7 +132,6 @@ fn write_wheel(
        &settings.module_root,
        settings.module_name.as_ref(),
        settings.namespace,
        show_warnings,
    )?;
    let mut files_visited = 0;
@ -269,9 +259,9 @@ pub fn build_editable(
    wheel_dir: &Path,
    metadata_directory: Option<&Path>,
    uv_version: &str,
    show_warnings: bool,
 ) -> Result<WheelFilename, Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    for warning in pyproject_toml.check_build_system(uv_version) {
        warn_user_once!("{warning}");
    }
@ -305,7 +295,6 @@ pub fn build_editable(
        &settings.module_root,
        settings.module_name.as_ref(),
        settings.namespace,
        show_warnings,
    )?;
    wheel_writer.write_bytes(
@ -332,7 +321,8 @@ pub fn metadata(
    metadata_directory: &Path,
    uv_version: &str,
 ) -> Result<String, Error> {
-    let pyproject_toml = PyProjectToml::parse(&source_tree.join("pyproject.toml"))?;
+    let contents = fs_err::read_to_string(source_tree.join("pyproject.toml"))?;
    let pyproject_toml = PyProjectToml::parse(&contents)?;
    for warning in pyproject_toml.check_build_system(uv_version) {
        warn_user_once!("{warning}");
    }
@ -840,7 +830,7 @@ mod test {
    #[test]
    fn test_prepare_metadata() {
        let metadata_dir = TempDir::new().unwrap();
-        let built_by_uv = Path::new("../../test/packages/built-by-uv");
+        let built_by_uv = Path::new("../../scripts/packages/built-by-uv");
        metadata(built_by_uv, metadata_dir.path(), "1.0.0+test").unwrap();
        let mut files: Vec<_> = WalkDir::new(metadata_dir.path())
--- a/crates/uv-build-frontend/Cargo.toml
+++ b/crates/uv-build-frontend/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-build-frontend"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
@ -16,7 +16,6 @@ doctest = false
 workspace = true
 [dependencies]
 uv-auth = { workspace = true }
 uv-cache-key = { workspace = true }
 uv-configuration = { workspace = true }
 uv-distribution = { workspace = true }
--- a/crates/uv-build-frontend/README.md
+++ b/crates/uv-build-frontend/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-build-frontend).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-build-frontend).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-build-frontend/src/lib.rs
+++ b/crates/uv-build-frontend/src/lib.rs
@ -28,7 +28,7 @@ use tokio::io::AsyncBufReadExt;
 use tokio::process::Command;
 use tokio::sync::{Mutex, Semaphore};
 use tracing::{Instrument, debug, info_span, instrument, warn};
-use uv_auth::CredentialsCache;
+
 use uv_cache_key::cache_digest;
 use uv_configuration::{BuildKind, BuildOutput, SourceStrategy};
 use uv_distribution::BuildRequires;
@ -36,7 +36,7 @@ use uv_distribution_types::{
    ConfigSettings, ExtraBuildRequirement, ExtraBuildRequires, IndexLocations, Requirement,
    Resolution,
 };
-use uv_fs::{LockedFile, LockedFileMode};
+use uv_fs::LockedFile;
 use uv_fs::{PythonExt, Simplified};
 use uv_normalize::PackageName;
 use uv_pep440::Version;
@ -292,7 +292,6 @@ impl SourceBuild {
        mut environment_variables: FxHashMap<OsString, OsString>,
        level: BuildOutput,
        concurrent_builds: usize,
        credentials_cache: &CredentialsCache,
        preview: Preview,
    ) -> Result<Self, Error> {
        let temp_dir = build_context.cache().venv_dir()?;
@ -311,7 +310,6 @@ impl SourceBuild {
            locations,
            source_strategy,
            workspace_cache,
            credentials_cache,
        )
        .await
        .map_err(|err| *err)?;
@ -454,7 +452,6 @@ impl SourceBuild {
                &environment_variables,
                &modified_path,
                &temp_dir,
                credentials_cache,
            )
            .await?;
        }
@ -493,16 +490,12 @@ impl SourceBuild {
                "uv-setuptools-{}.lock",
                cache_digest(&canonical_source_path)
            ));
-            source_tree_lock = LockedFile::acquire(
+            source_tree_lock = LockedFile::acquire(lock_path, self.source_tree.to_string_lossy())
-                lock_path,
+                .await
-                LockedFileMode::Exclusive,
+                .inspect_err(|err| {
-                self.source_tree.to_string_lossy(),
+                    warn!("Failed to acquire build lock: {err}");
-            )
+                })
-            .await
+                .ok();
            .inspect_err(|err| {
                warn!("Failed to acquire build lock: {err}");
            })
            .ok();
        }
        Ok(source_tree_lock)
    }
@ -563,7 +556,6 @@ impl SourceBuild {
        locations: &IndexLocations,
        source_strategy: SourceStrategy,
        workspace_cache: &WorkspaceCache,
        credentials_cache: &CredentialsCache,
    ) -> Result<(Pep517Backend, Option<Project>), Box<Error>> {
        match fs::read_to_string(source_tree.join("pyproject.toml")) {
            Ok(toml) => {
@ -592,7 +584,6 @@ impl SourceBuild {
                                    locations,
                                    source_strategy,
                                    workspace_cache,
                                    credentials_cache,
                                )
                                .await
                                .map_err(Error::Lowering)?;
@ -965,7 +956,6 @@ async fn create_pep517_build_environment(
    environment_variables: &FxHashMap<OsString, OsString>,
    modified_path: &OsString,
    temp_dir: &TempDir,
    credentials_cache: &CredentialsCache,
 ) -> Result<(), Error> {
    // Write the hook output to a file so that we can read it back reliably.
    let outfile = temp_dir
@ -1060,7 +1050,6 @@ async fn create_pep517_build_environment(
                locations,
                source_strategy,
                workspace_cache,
                credentials_cache,
            )
            .await
            .map_err(Error::Lowering)?;
--- a/crates/uv-build/Cargo.toml
+++ b/crates/uv-build/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-build"
-version = "0.9.18"
+version = "0.9.15"
 description = "A Python build backend"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-build/pyproject.toml
+++ b/crates/uv-build/pyproject.toml
@ -1,6 +1,6 @@
 [project]
 name = "uv-build"
-version = "0.9.18"
+version = "0.9.15"
 description = "The uv build backend"
 authors = [{ name = "Astral Software Inc.", email = "hey@astral.sh" }]
 requires-python = ">=3.8"
--- a/crates/uv-build/src/main.rs
+++ b/crates/uv-build/src/main.rs
@ -44,7 +44,6 @@ fn main() -> Result<()> {
                &env::current_dir()?,
                &sdist_directory,
                uv_version::version(),
                false,
            )?;
            // Tell the build frontend about the name of the artifact we built
            writeln!(&mut std::io::stdout(), "{filename}").context("stdout is closed")?;
@ -57,7 +56,6 @@ fn main() -> Result<()> {
                &wheel_directory,
                metadata_directory.as_deref(),
                uv_version::version(),
                false,
            )?;
            // Tell the build frontend about the name of the artifact we built
            writeln!(&mut std::io::stdout(), "{filename}").context("stdout is closed")?;
@ -70,7 +68,6 @@ fn main() -> Result<()> {
                &wheel_directory,
                metadata_directory.as_deref(),
                uv_version::version(),
                false,
            )?;
            // Tell the build frontend about the name of the artifact we built
            writeln!(&mut std::io::stdout(), "{filename}").context("stdout is closed")?;
--- a/crates/uv-cache-info/Cargo.toml
+++ b/crates/uv-cache-info/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-cache-info"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-cache-info/README.md
+++ b/crates/uv-cache-info/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-cache-info).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-cache-info).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-cache-key/Cargo.toml
+++ b/crates/uv-cache-key/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-cache-key"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-cache-key/README.md
+++ b/crates/uv-cache-key/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-cache-key).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-cache-key).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-cache/Cargo.toml
+++ b/crates/uv-cache/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-cache"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
@ -34,6 +34,5 @@ rustc-hash = { workspace = true }
 same-file = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 tempfile = { workspace = true }
 thiserror = { workspace = true }
 tracing = { workspace = true }
 walkdir = { workspace = true }
--- a/crates/uv-cache/README.md
+++ b/crates/uv-cache/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-cache).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-cache).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-cache/src/cli.rs
+++ b/crates/uv-cache/src/cli.rs
@ -3,7 +3,7 @@ use std::path::{Path, PathBuf};
 use uv_static::EnvVars;
 use crate::Cache;
-use clap::{Parser, ValueHint};
+use clap::Parser;
 use tracing::{debug, warn};
 #[derive(Parser, Debug, Clone)]
@ -27,7 +27,7 @@ pub struct CacheArgs {
    /// `%LOCALAPPDATA%\uv\cache` on Windows.
    ///
    /// To view the location of the cache directory, run `uv cache dir`.
-    #[arg(global = true, long, env = EnvVars::UV_CACHE_DIR, value_hint = ValueHint::DirPath)]
+    #[arg(global = true, long, env = EnvVars::UV_CACHE_DIR)]
    pub cache_dir: Option<PathBuf>,
 }
--- a/crates/uv-cache/src/lib.rs
+++ b/crates/uv-cache/src/lib.rs
@ -10,7 +10,7 @@ use rustc_hash::FxHashMap;
 use tracing::{debug, trace, warn};
 use uv_cache_info::Timestamp;
-use uv_fs::{LockedFile, LockedFileError, LockedFileMode, Simplified, cachedir, directories};
+use uv_fs::{LockedFile, Simplified, cachedir, directories};
 use uv_normalize::PackageName;
 use uv_pypi_types::ResolutionMetadata;
@ -35,17 +35,6 @@ mod wheel;
 /// Must be kept in-sync with the version in [`CacheBucket::to_str`].
 pub const ARCHIVE_VERSION: u8 = 0;
 /// Error locking a cache entry or shard
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
    #[error(transparent)]
    Io(#[from] io::Error),
    #[error("Could not make the path absolute")]
    Absolute(#[source] io::Error),
    #[error("Could not acquire lock")]
    Acquire(#[from] LockedFileError),
 }
 /// A [`CacheEntry`] which may or may not exist yet.
 #[derive(Debug, Clone)]
 pub struct CacheEntry(PathBuf);
@ -91,14 +80,9 @@ impl CacheEntry {
    }
    /// Acquire the [`CacheEntry`] as an exclusive lock.
-    pub async fn lock(&self) -> Result<LockedFile, Error> {
+    pub async fn lock(&self) -> Result<LockedFile, io::Error> {
        fs_err::create_dir_all(self.dir())?;
-        Ok(LockedFile::acquire(
+        LockedFile::acquire(self.path(), self.path().display()).await
            self.path(),
            LockedFileMode::Exclusive,
            self.path().display(),
        )
        .await?)
    }
 }
@ -125,14 +109,9 @@ impl CacheShard {
    }
    /// Acquire the cache entry as an exclusive lock.
-    pub async fn lock(&self) -> Result<LockedFile, Error> {
+    pub async fn lock(&self) -> Result<LockedFile, io::Error> {
        fs_err::create_dir_all(self.as_ref())?;
-        Ok(LockedFile::acquire(
+        LockedFile::acquire(self.join(".lock"), self.display()).await
            self.join(".lock"),
            LockedFileMode::Exclusive,
            self.display(),
        )
        .await?)
    }
    /// Return the [`CacheShard`] as a [`PathBuf`].
@ -203,7 +182,7 @@ impl Cache {
    }
    /// Acquire a lock that allows removing entries from the cache.
-    pub async fn with_exclusive_lock(self) -> Result<Self, LockedFileError> {
+    pub fn with_exclusive_lock(self) -> Result<Self, io::Error> {
        let Self {
            root,
            refresh,
@ -219,12 +198,8 @@ impl Cache {
                ),
            );
        }
-        let lock_file = LockedFile::acquire(
+        let lock_file =
-            root.join(".lock"),
+            LockedFile::acquire_blocking(root.join(".lock"), root.simplified_display())?;
            LockedFileMode::Exclusive,
            root.simplified_display(),
        )
        .await?;
        Ok(Self {
            root,
@ -245,11 +220,7 @@ impl Cache {
            lock_file,
        } = self;
-        match LockedFile::acquire_no_wait(
+        match LockedFile::acquire_no_wait(root.join(".lock"), root.simplified_display()) {
            root.join(".lock"),
            LockedFileMode::Exclusive,
            root.simplified_display(),
        ) {
            Some(lock_file) => Ok(Self {
                root,
                refresh,
@ -401,8 +372,10 @@ impl Cache {
        self.temp_dir.is_some()
    }
-    /// Populate the cache scaffold.
+    /// Initialize the [`Cache`].
-    fn create_base_files(root: &PathBuf) -> io::Result<()> {
+    pub fn init(self) -> Result<Self, io::Error> {
        let root = &self.root;
        // Create the cache directory, if it doesn't exist.
        fs_err::create_dir_all(root)?;
@ -448,66 +421,29 @@ impl Cache {
                .join(".git"),
        )?;
        Ok(())
    }
    /// Initialize the [`Cache`].
    pub async fn init(self) -> Result<Self, Error> {
        let root = &self.root;
        Self::create_base_files(root)?;
        // Block cache removal operations from interfering.
-        let lock_file = match LockedFile::acquire(
+        let lock_file = match LockedFile::acquire_shared_blocking(
            root.join(".lock"),
            LockedFileMode::Shared,
            root.simplified_display(),
-        )
+        ) {
        .await
        {
            Ok(lock_file) => Some(Arc::new(lock_file)),
-            Err(err)
+            Err(err) if err.kind() == io::ErrorKind::Unsupported => {
                if err
                    .as_io_error()
                    .is_some_and(|err| err.kind() == io::ErrorKind::Unsupported) =>
            {
                warn!(
                    "Shared locking is not supported by the current platform or filesystem, \
-                        reduced parallel process safety with `uv cache clean` and `uv cache prune`."
+                    reduced parallel process safety with `uv cache clean` and `uv cache prune`."
                );
                None
            }
-            Err(err) => return Err(err.into()),
+            Err(err) => return Err(err),
        };
        Ok(Self {
-            root: std::path::absolute(root).map_err(Error::Absolute)?,
+            root: std::path::absolute(root)?,
            lock_file,
            ..self
        })
    }
    /// Initialize the [`Cache`], assuming that there are no other uv processes running.
    pub fn init_no_wait(self) -> Result<Option<Self>, Error> {
        let root = &self.root;
        Self::create_base_files(root)?;
        // Block cache removal operations from interfering.
        let Some(lock_file) = LockedFile::acquire_no_wait(
            root.join(".lock"),
            LockedFileMode::Shared,
            root.simplified_display(),
        ) else {
            return Ok(None);
        };
        Ok(Some(Self {
            root: std::path::absolute(root).map_err(Error::Absolute)?,
            lock_file: Some(Arc::new(lock_file)),
            ..self
        }))
    }
    /// Clear the cache, removing all entries.
    pub fn clear(self, reporter: Box<dyn CleanReporter>) -> Result<Removal, io::Error> {
        // Remove everything but `.lock`, Windows does not allow removal of a locked file
@ -542,7 +478,7 @@ impl Cache {
    /// Remove a package from the cache.
    ///
    /// Returns the number of entries removed from the cache.
-    pub fn remove(&self, name: &PackageName) -> io::Result<Removal> {
+    pub fn remove(&self, name: &PackageName) -> Result<Removal, io::Error> {
        // Collect the set of referenced archives.
        let references = self.find_archive_references()?;
--- a/crates/uv-cli/Cargo.toml
+++ b/crates/uv-cli/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-cli"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-cli/README.md
+++ b/crates/uv-cli/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-cli).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-cli).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-cli/src/lib.rs
+++ b/crates/uv-cli/src/lib.rs
--- a/crates/uv-cli/src/options.rs
+++ b/crates/uv-cli/src/options.rs
@ -366,7 +366,6 @@ pub fn resolver_options(
            exclude_newer_package.unwrap_or_default(),
        ),
        link_mode,
        torch_backend: None,
        no_build: flag(no_build, build, "build"),
        no_build_package: Some(no_build_package),
        no_binary: flag(no_binary, binary, "binary"),
@ -496,6 +495,5 @@ pub fn resolver_installer_options(
            Some(no_binary_package)
        },
        no_sources: if no_sources { Some(true) } else { None },
        torch_backend: None,
    }
 }
--- a/crates/uv-client/Cargo.toml
+++ b/crates/uv-client/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-client"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-client/README.md
+++ b/crates/uv-client/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-client).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-client).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-client/src/base_client.rs
+++ b/crates/uv-client/src/base_client.rs
@ -28,7 +28,7 @@ use tracing::{debug, trace};
 use url::ParseError;
 use url::Url;
-use uv_auth::{AuthMiddleware, Credentials, CredentialsCache, Indexes, PyxTokenStore};
+use uv_auth::{AuthMiddleware, Credentials, Indexes, PyxTokenStore};
 use uv_configuration::{KeyringProviderType, TrustedHost};
 use uv_fs::Simplified;
 use uv_pep508::MarkerEnvironment;
@ -50,7 +50,7 @@ pub const DEFAULT_RETRIES: u32 = 3;
 /// Maximum number of redirects to follow before giving up.
 ///
 /// This is the default used by [`reqwest`].
-pub const DEFAULT_MAX_REDIRECTS: u32 = 10;
+const DEFAULT_MAX_REDIRECTS: u32 = 10;
 /// Selectively skip parts or the entire auth middleware.
 #[derive(Debug, Clone, Copy, Default)]
@ -78,8 +78,6 @@ pub struct BaseClientBuilder<'a> {
    markers: Option<&'a MarkerEnvironment>,
    platform: Option<&'a Platform>,
    auth_integration: AuthIntegration,
    /// Global authentication cache for a uv invocation to share credentials across uv clients.
    credentials_cache: Arc<CredentialsCache>,
    indexes: Indexes,
    timeout: Duration,
    extra_middleware: Option<ExtraMiddleware>,
@ -104,8 +102,6 @@ pub enum RedirectPolicy {
    BypassMiddleware,
    /// Handle redirects manually, re-triggering our custom middleware for each request.
    RetriggerMiddleware,
    /// No redirect for non-cloneable (e.g., streaming) requests with custom redirect logic.
    NoRedirect,
 }
 impl RedirectPolicy {
@ -113,7 +109,6 @@ impl RedirectPolicy {
        match self {
            Self::BypassMiddleware => reqwest::redirect::Policy::default(),
            Self::RetriggerMiddleware => reqwest::redirect::Policy::none(),
            Self::NoRedirect => reqwest::redirect::Policy::none(),
        }
    }
 }
@ -143,7 +138,6 @@ impl Default for BaseClientBuilder<'_> {
            markers: None,
            platform: None,
            auth_integration: AuthIntegration::default(),
            credentials_cache: Arc::new(CredentialsCache::default()),
            indexes: Indexes::new(),
            timeout: Duration::from_secs(30),
            extra_middleware: None,
@ -156,7 +150,7 @@ impl Default for BaseClientBuilder<'_> {
    }
 }
-impl<'a> BaseClientBuilder<'a> {
+impl BaseClientBuilder<'_> {
    pub fn new(
        connectivity: Connectivity,
        native_tls: bool,
@ -175,7 +169,9 @@ impl<'a> BaseClientBuilder<'a> {
            ..Self::default()
        }
    }
 }
 impl<'a> BaseClientBuilder<'a> {
    /// Use a custom reqwest client instead of creating a new one.
    ///
    /// This allows you to provide your own reqwest client with custom configuration.
@ -289,20 +285,6 @@ impl<'a> BaseClientBuilder<'a> {
        self
    }
    pub fn credentials_cache(&self) -> &CredentialsCache {
        &self.credentials_cache
    }
    /// See [`CredentialsCache::store_credentials_from_url`].
    pub fn store_credentials_from_url(&self, url: &DisplaySafeUrl) -> bool {
        self.credentials_cache.store_credentials_from_url(url)
    }
    /// See [`CredentialsCache::store_credentials`].
    pub fn store_credentials(&self, url: &DisplaySafeUrl, credentials: Credentials) {
        self.credentials_cache.store_credentials(url, credentials);
    }
    pub fn is_native_tls(&self) -> bool {
        self.native_tls
    }
@ -351,7 +333,6 @@ impl<'a> BaseClientBuilder<'a> {
            dangerous_client,
            raw_dangerous_client,
            timeout,
            credentials_cache: self.credentials_cache.clone(),
        }
    }
@ -378,7 +359,6 @@ impl<'a> BaseClientBuilder<'a> {
            raw_client: existing.raw_client.clone(),
            raw_dangerous_client: existing.raw_dangerous_client.clone(),
            timeout: existing.timeout,
            credentials_cache: existing.credentials_cache.clone(),
        }
    }
@ -583,7 +563,6 @@ impl<'a> BaseClientBuilder<'a> {
                match self.auth_integration {
                    AuthIntegration::Default => {
                        let mut auth_middleware = AuthMiddleware::new()
                            .with_cache_arc(self.credentials_cache.clone())
                            .with_base_client(base_client)
                            .with_indexes(self.indexes.clone())
                            .with_keyring(self.keyring.to_provider())
@ -595,7 +574,6 @@ impl<'a> BaseClientBuilder<'a> {
                    }
                    AuthIntegration::OnlyAuthenticated => {
                        let mut auth_middleware = AuthMiddleware::new()
                            .with_cache_arc(self.credentials_cache.clone())
                            .with_base_client(base_client)
                            .with_indexes(self.indexes.clone())
                            .with_keyring(self.keyring.to_provider())
@ -639,8 +617,6 @@ pub struct BaseClient {
    allow_insecure_host: Vec<TrustedHost>,
    /// The number of retries to attempt on transient errors.
    retries: u32,
    /// Global authentication cache for a uv invocation to share credentials across uv clients.
    credentials_cache: Arc<CredentialsCache>,
 }
 #[derive(Debug, Clone, Copy)]
@ -692,10 +668,6 @@ impl BaseClient {
        }
        builder.build_with_max_retries(self.retries)
    }
    pub fn credentials_cache(&self) -> &CredentialsCache {
        &self.credentials_cache
    }
 }
 /// Wrapper around [`ClientWithMiddleware`] that manages redirects.
@ -732,7 +704,6 @@ impl RedirectClientWithMiddleware {
        match self.redirect_policy {
            RedirectPolicy::BypassMiddleware => self.client.execute(req).await,
            RedirectPolicy::RetriggerMiddleware => self.execute_with_redirect_handling(req).await,
            RedirectPolicy::NoRedirect => self.client.execute(req).await,
        }
    }
--- a/crates/uv-client/src/error.rs
+++ b/crates/uv-client/src/error.rs
@ -5,7 +5,6 @@ use std::fmt::{Display, Formatter};
 use std::ops::Deref;
 use std::path::PathBuf;
 use uv_cache::Error as CacheError;
 use uv_distribution_filename::{WheelFilename, WheelFilenameError};
 use uv_normalize::PackageName;
 use uv_redacted::DisplaySafeUrl;
@ -338,9 +337,6 @@ pub enum ErrorKind {
    #[error("Failed to write to the client cache")]
    CacheWrite(#[source] std::io::Error),
    #[error("Failed to acquire lock on the client cache")]
    CacheLock(#[source] CacheError),
    #[error(transparent)]
    Io(std::io::Error),
--- a/crates/uv-client/src/lib.rs
+++ b/crates/uv-client/src/lib.rs
@ -1,7 +1,7 @@
 pub use base_client::{
-    AuthIntegration, BaseClient, BaseClientBuilder, DEFAULT_MAX_REDIRECTS, DEFAULT_RETRIES,
+    AuthIntegration, BaseClient, BaseClientBuilder, DEFAULT_RETRIES, ExtraMiddleware,
-    ExtraMiddleware, RedirectClientWithMiddleware, RedirectPolicy, RequestBuilder,
+    RedirectClientWithMiddleware, RequestBuilder, RetryParsingError, UvRetryableStrategy,
-    RetryParsingError, UvRetryableStrategy, is_transient_network_error,
+    is_transient_network_error,
 };
 pub use cached_client::{CacheControl, CachedClient, CachedClientError, DataWithCachePolicy};
 pub use error::{Error, ErrorKind, WrappedReqwestError};
--- a/crates/uv-client/src/registry_client.rs
+++ b/crates/uv-client/src/registry_client.rs
@ -15,7 +15,7 @@ use tokio::sync::{Mutex, Semaphore};
 use tracing::{Instrument, debug, info_span, instrument, trace, warn};
 use url::Url;
-use uv_auth::{CredentialsCache, Indexes, PyxTokenStore};
+use uv_auth::{Indexes, PyxTokenStore};
 use uv_cache::{Cache, CacheBucket, CacheEntry, WheelCache};
 use uv_configuration::IndexStrategy;
 use uv_configuration::KeyringProviderType;
@ -148,30 +148,8 @@ impl<'a> RegistryClientBuilder<'a> {
        self
    }
-    /// Add all authenticated sources to the cache.
+    pub fn build(self) -> RegistryClient {
-    pub fn cache_index_credentials(&mut self) {
+        self.index_locations.cache_index_credentials();
        for index in self.index_locations.known_indexes() {
            if let Some(credentials) = index.credentials() {
                trace!(
                    "Read credentials for index {}",
                    index
                        .name
                        .as_ref()
                        .map(ToString::to_string)
                        .unwrap_or_else(|| index.url.to_string())
                );
                if let Some(root_url) = index.root_url() {
                    self.base_client_builder
                        .store_credentials(&root_url, credentials.clone());
                }
                self.base_client_builder
                    .store_credentials(index.raw_url(), credentials);
            }
        }
    }
    pub fn build(mut self) -> RegistryClient {
        self.cache_index_credentials();
        let index_urls = self.index_locations.index_urls();
        // Build a base client
@ -202,8 +180,8 @@ impl<'a> RegistryClientBuilder<'a> {
    }
    /// Share the underlying client between two different middleware configurations.
-    pub fn wrap_existing(mut self, existing: &BaseClient) -> RegistryClient {
+    pub fn wrap_existing(self, existing: &BaseClient) -> RegistryClient {
-        self.cache_index_credentials();
+        self.index_locations.cache_index_credentials();
        let index_urls = self.index_locations.index_urls();
        // Wrap in any relevant middleware and handle connectivity.
@ -291,10 +269,6 @@ impl RegistryClient {
        self.timeout
    }
    pub fn credentials_cache(&self) -> &CredentialsCache {
        self.client.uncached().credentials_cache()
    }
    /// Return the appropriate index URLs for the given [`PackageName`].
    fn index_urls_for(
        &self,
@ -539,7 +513,7 @@ impl RegistryClient {
        #[cfg(windows)]
        let _lock = {
            let lock_entry = cache_entry.with_file(format!("{package_name}.lock"));
-            lock_entry.lock().await.map_err(ErrorKind::CacheLock)?
+            lock_entry.lock().await.map_err(ErrorKind::CacheWrite)?
        };
        let result = if matches!(index, IndexUrl::Path(_)) {
@ -1031,7 +1005,7 @@ impl RegistryClient {
            #[cfg(windows)]
            let _lock = {
                let lock_entry = cache_entry.with_file(format!("{}.lock", filename.stem()));
-                lock_entry.lock().await.map_err(ErrorKind::CacheLock)?
+                lock_entry.lock().await.map_err(ErrorKind::CacheWrite)?
            };
            let response_callback = async |response: Response| {
@ -1115,7 +1089,7 @@ impl RegistryClient {
        #[cfg(windows)]
        let _lock = {
            let lock_entry = cache_entry.with_file(format!("{}.lock", filename.stem()));
-            lock_entry.lock().await.map_err(ErrorKind::CacheLock)?
+            lock_entry.lock().await.map_err(ErrorKind::CacheWrite)?
        };
        // Attempt to fetch via a range request.
--- a/crates/uv-client/tests/it/remote_metadata.rs
+++ b/crates/uv-client/tests/it/remote_metadata.rs
@ -11,7 +11,7 @@ use uv_redacted::DisplaySafeUrl;
 #[tokio::test]
 async fn remote_metadata_with_and_without_cache() -> Result<()> {
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    // The first run is without cache (the tempdir is empty), the second has the cache from the
--- a/crates/uv-client/tests/it/ssl_certs.rs
+++ b/crates/uv-client/tests/it/ssl_certs.rs
@ -84,7 +84,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_user_agent_server(&standalone_server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
@ -142,7 +142,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_user_agent_server(&standalone_server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
@ -171,7 +171,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_user_agent_server(&standalone_server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
@ -194,7 +194,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_user_agent_server(&standalone_server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
@ -259,7 +259,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_mtls_user_agent_server(&ca_cert, &server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
@ -283,7 +283,7 @@ async fn ssl_env_vars() -> Result<()> {
    }
    let (server_task, addr) = start_https_mtls_user_agent_server(&ca_cert, &server_cert).await?;
    let url = DisplaySafeUrl::from_str(&format!("https://{addr}"))?;
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    let res = client
        .cached_client()
--- a/crates/uv-client/tests/it/user_agent_version.rs
+++ b/crates/uv-client/tests/it/user_agent_version.rs
@ -20,7 +20,7 @@ async fn test_user_agent_has_version() -> Result<()> {
    let (server_task, addr) = start_http_user_agent_server().await?;
    // Initialize uv-client
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(BaseClientBuilder::default(), cache).build();
    // Send request to our dummy server
@ -75,7 +75,7 @@ async fn test_user_agent_has_subcommand() -> Result<()> {
    let (server_task, addr) = start_http_user_agent_server().await?;
    // Initialize uv-client
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let client = RegistryClientBuilder::new(
        BaseClientBuilder::default().subcommand(vec!["foo".to_owned(), "bar".to_owned()]),
        cache,
@ -152,7 +152,7 @@ async fn test_user_agent_has_linehaul() -> Result<()> {
    })?;
    // Initialize uv-client
-    let cache = Cache::temp()?.init().await?;
+    let cache = Cache::temp()?.init()?;
    let mut builder =
        RegistryClientBuilder::new(BaseClientBuilder::default(), cache).markers(&markers);
--- a/crates/uv-configuration/Cargo.toml
+++ b/crates/uv-configuration/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-configuration"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-configuration/README.md
+++ b/crates/uv-configuration/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-configuration).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-configuration).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-configuration/src/vcs.rs
+++ b/crates/uv-configuration/src/vcs.rs
@ -94,32 +94,3 @@ wheels/
 # Virtual environments
 .venv
 ";
 /// Setting for Git LFS (Large File Storage) support.
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
 pub enum GitLfsSetting {
    /// Git LFS is disabled (default).
    #[default]
    Disabled,
    /// Git LFS is enabled. Tracks whether it came from an environment variable.
    Enabled { from_env: bool },
 }
 impl GitLfsSetting {
    pub fn new(from_arg: Option<bool>, from_env: Option<bool>) -> Self {
        match (from_arg, from_env) {
            (Some(true), _) => Self::Enabled { from_env: false },
            (_, Some(true)) => Self::Enabled { from_env: true },
            _ => Self::Disabled,
        }
    }
 }
 impl From<GitLfsSetting> for Option<bool> {
    fn from(setting: GitLfsSetting) -> Self {
        match setting {
            GitLfsSetting::Enabled { .. } => Some(true),
            GitLfsSetting::Disabled => None,
        }
    }
 }
--- a/crates/uv-console/Cargo.toml
+++ b/crates/uv-console/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-console"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-console/README.md
+++ b/crates/uv-console/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-console).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-console).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-dev/Cargo.toml
+++ b/crates/uv-dev/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-dev"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 publish = false
@ -79,4 +79,4 @@ performance-memory-allocator = ["dep:uv-performance-memory-allocator"]
 render = ["poloto", "resvg", "tagu"]
 [package.metadata.cargo-shear]
-ignored = ["uv-performance-memory-allocator"]
+ignored = ["flate2", "uv-extract", "uv-performance-memory-allocator"]
--- a/crates/uv-dev/README.md
+++ b/crates/uv-dev/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-dev).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-dev).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-dev/src/compile.rs
+++ b/crates/uv-dev/src/compile.rs
@ -18,7 +18,7 @@ pub(crate) struct CompileArgs {
 }
 pub(crate) async fn compile(args: CompileArgs) -> anyhow::Result<()> {
-    let cache = Cache::try_from(args.cache_args)?.init().await?;
+    let cache = Cache::try_from(args.cache_args)?.init()?;
    let interpreter = if let Some(python) = args.python {
        python
--- a/crates/uv-dev/src/generate_cli_reference.rs
+++ b/crates/uv-dev/src/generate_cli_reference.rs
@ -342,3 +342,31 @@ fn emit_possible_options(opt: &clap::Arg, output: &mut String) {
        output.push_str(&markdown::to_html(&value));
    }
 }
 #[cfg(test)]
 mod tests {
    use std::env;
    use anyhow::Result;
    use uv_static::EnvVars;
    use crate::generate_all::Mode;
    use super::{Args, main};
    #[test]
    fn test_generate_cli_reference() -> Result<()> {
        // Skip this test in CI to avoid redundancy with the dedicated CI job
        if env::var_os(EnvVars::CI).is_some() {
            return Ok(());
        }
        let mode = if env::var(EnvVars::UV_UPDATE_SCHEMA).as_deref() == Ok("1") {
            Mode::Write
        } else {
            Mode::Check
        };
        main(&Args { mode })
    }
 }
--- a/crates/uv-dev/src/generate_env_vars_reference.rs
+++ b/crates/uv-dev/src/generate_env_vars_reference.rs
@ -106,3 +106,31 @@ fn render(var: &str, doc: &str, added_in: Option<&str>) -> String {
        format!("### `{var}`\n\n{doc}\n\n")
    }
 }
 #[cfg(test)]
 mod tests {
    use std::env;
    use anyhow::Result;
    use uv_static::EnvVars;
    use crate::generate_all::Mode;
    use super::{Args, main};
    #[test]
    fn test_generate_env_vars_reference() -> Result<()> {
        // Skip this test in CI to avoid redundancy with the dedicated CI job
        if env::var_os(EnvVars::CI).is_some() {
            return Ok(());
        }
        let mode = if env::var(EnvVars::UV_UPDATE_SCHEMA).as_deref() == Ok("1") {
            Mode::Write
        } else {
            Mode::Check
        };
        main(&Args { mode })
    }
 }
--- a/crates/uv-dev/src/generate_options_reference.rs
+++ b/crates/uv-dev/src/generate_options_reference.rs
@ -387,3 +387,31 @@ impl Visit for CollectOptionsVisitor {
        self.fields.push((name.to_owned(), field));
    }
 }
 #[cfg(test)]
 mod tests {
    use std::env;
    use anyhow::Result;
    use uv_static::EnvVars;
    use crate::generate_all::Mode;
    use super::{Args, main};
    #[test]
    fn test_generate_options_reference() -> Result<()> {
        // Skip this test in CI to avoid redundancy with the dedicated CI job
        if env::var_os(EnvVars::CI).is_some() {
            return Ok(());
        }
        let mode = if env::var(EnvVars::UV_UPDATE_SCHEMA).as_deref() == Ok("1") {
            Mode::Write
        } else {
            Mode::Check
        };
        main(&Args { mode })
    }
 }
--- a/crates/uv-dev/src/generate_sysconfig_mappings.rs
+++ b/crates/uv-dev/src/generate_sysconfig_mappings.rs
@ -11,7 +11,7 @@ use crate::ROOT_DIR;
 use crate::generate_all::Mode;
 /// Contains current supported targets
-const TARGETS_YML_URL: &str = "https://raw.githubusercontent.com/astral-sh/python-build-standalone/refs/tags/20251209/cpython-unix/targets.yml";
+const TARGETS_YML_URL: &str = "https://raw.githubusercontent.com/astral-sh/python-build-standalone/refs/tags/20251120/cpython-unix/targets.yml";
 #[derive(clap::Args)]
 pub(crate) struct Args {
@ -130,7 +130,7 @@ async fn generate() -> Result<String> {
    output.push_str("//! DO NOT EDIT\n");
    output.push_str("//!\n");
    output.push_str("//! Generated with `cargo run dev generate-sysconfig-metadata`\n");
-    output.push_str("//! Targets from <https://github.com/astral-sh/python-build-standalone/blob/20251209/cpython-unix/targets.yml>\n");
+    output.push_str("//! Targets from <https://github.com/astral-sh/python-build-standalone/blob/20251120/cpython-unix/targets.yml>\n");
    output.push_str("//!\n");
    // Disable clippy/fmt
--- a/crates/uv-dev/src/list_packages.rs
+++ b/crates/uv-dev/src/list_packages.rs
@ -19,7 +19,7 @@ pub(crate) async fn list_packages(
    args: ListPackagesArgs,
    environment: EnvironmentOptions,
 ) -> Result<()> {
-    let cache = Cache::try_from(args.cache_args)?.init().await?;
+    let cache = Cache::try_from(args.cache_args)?.init()?;
    let client = RegistryClientBuilder::new(
        BaseClientBuilder::default().timeout(environment.http_timeout),
        cache,
--- a/crates/uv-dev/src/validate_zip.rs
+++ b/crates/uv-dev/src/validate_zip.rs
@ -22,7 +22,7 @@ pub(crate) async fn validate_zip(
    args: ValidateZipArgs,
    environment: EnvironmentOptions,
 ) -> Result<()> {
-    let cache = Cache::try_from(args.cache_args)?.init().await?;
+    let cache = Cache::try_from(args.cache_args)?.init()?;
    let client = RegistryClientBuilder::new(
        BaseClientBuilder::default().timeout(environment.http_timeout),
        cache,
--- a/crates/uv-dev/src/wheel_metadata.rs
+++ b/crates/uv-dev/src/wheel_metadata.rs
@ -23,7 +23,7 @@ pub(crate) async fn wheel_metadata(
    args: WheelMetadataArgs,
    environment: EnvironmentOptions,
 ) -> Result<()> {
-    let cache = Cache::try_from(args.cache_args)?.init().await?;
+    let cache = Cache::try_from(args.cache_args)?.init()?;
    let client = RegistryClientBuilder::new(
        BaseClientBuilder::default().timeout(environment.http_timeout),
        cache,
--- a/crates/uv-dirs/Cargo.toml
+++ b/crates/uv-dirs/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-dirs"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-dirs/README.md
+++ b/crates/uv-dirs/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-dirs).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-dirs).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-dispatch/Cargo.toml
+++ b/crates/uv-dispatch/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-dispatch"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-dispatch/README.md
+++ b/crates/uv-dispatch/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-dispatch).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-dispatch).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-dispatch/src/lib.rs
+++ b/crates/uv-dispatch/src/lib.rs
@ -492,7 +492,6 @@ impl BuildContext for BuildDispatch<'_> {
            environment_variables,
            build_output,
            self.concurrency.builds,
            self.client.credentials_cache(),
            self.preview,
        )
        .boxed_local()
@ -505,7 +504,6 @@ impl BuildContext for BuildDispatch<'_> {
        source: &'data Path,
        subdirectory: Option<&'data Path>,
        output_dir: &'data Path,
        sources: SourceStrategy,
        build_kind: BuildKind,
        version_id: Option<&'data str>,
    ) -> Result<Option<DistFilename>, BuildDispatchError> {
@ -534,7 +532,6 @@ impl BuildContext for BuildDispatch<'_> {
                        &output_dir,
                        None,
                        uv_version::version(),
                        sources == SourceStrategy::Enabled,
                    )?;
                    DistFilename::WheelFilename(wheel)
                }
@ -543,7 +540,6 @@ impl BuildContext for BuildDispatch<'_> {
                        &source_tree,
                        &output_dir,
                        uv_version::version(),
                        sources == SourceStrategy::Enabled,
                    )?;
                    DistFilename::SourceDistFilename(source_dist)
                }
@ -553,7 +549,6 @@ impl BuildContext for BuildDispatch<'_> {
                        &output_dir,
                        None,
                        uv_version::version(),
                        sources == SourceStrategy::Enabled,
                    )?;
                    DistFilename::WheelFilename(wheel)
                }
--- a/crates/uv-distribution-filename/Cargo.toml
+++ b/crates/uv-distribution-filename/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-distribution-filename"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-distribution-filename/README.md
+++ b/crates/uv-distribution-filename/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-distribution-filename).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-distribution-filename).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-distribution-types/Cargo.toml
+++ b/crates/uv-distribution-types/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-distribution-types"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-distribution-types/README.md
+++ b/crates/uv-distribution-types/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-distribution-types).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-distribution-types).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-distribution-types/src/index_url.rs
+++ b/crates/uv-distribution-types/src/index_url.rs
@ -8,6 +8,7 @@ use std::sync::{Arc, LazyLock, RwLock};
 use itertools::Either;
 use rustc_hash::{FxHashMap, FxHashSet};
 use thiserror::Error;
 use tracing::trace;
 use url::{ParseError, Url};
 use uv_auth::RealmRef;
 use uv_cache_key::CanonicalUrl;
@ -439,6 +440,26 @@ impl<'a> IndexLocations {
        }
    }
    /// Add all authenticated sources to the cache.
    pub fn cache_index_credentials(&self) {
        for index in self.known_indexes() {
            if let Some(credentials) = index.credentials() {
                trace!(
                    "Read credentials for index {}",
                    index
                        .name
                        .as_ref()
                        .map(ToString::to_string)
                        .unwrap_or_else(|| index.url.to_string())
                );
                if let Some(root_url) = index.root_url() {
                    uv_auth::store_credentials(&root_url, credentials.clone());
                }
                uv_auth::store_credentials(index.raw_url(), credentials);
            }
        }
    }
    /// Return the Simple API cache control header for an [`IndexUrl`], if configured.
    pub fn simple_api_cache_control_for(&self, url: &IndexUrl) -> Option<&str> {
        for index in &self.indexes {
--- a/crates/uv-distribution-types/src/lib.rs
+++ b/crates/uv-distribution-types/src/lib.rs
@ -159,9 +159,9 @@ pub enum InstalledVersion<'a> {
    Url(&'a DisplaySafeUrl, &'a Version),
 }
-impl<'a> InstalledVersion<'a> {
+impl InstalledVersion<'_> {
    /// If it is a URL, return its value.
-    pub fn url(&self) -> Option<&'a DisplaySafeUrl> {
+    pub fn url(&self) -> Option<&DisplaySafeUrl> {
        match self {
            Self::Version(_) => None,
            Self::Url(url, _) => Some(url),
@ -169,7 +169,7 @@ impl<'a> InstalledVersion<'a> {
    }
    /// If it is a version, return its value.
-    pub fn version(&self) -> &'a Version {
+    pub fn version(&self) -> &Version {
        match self {
            Self::Version(version) => version,
            Self::Url(_, version) => version,
--- a/crates/uv-distribution/Cargo.toml
+++ b/crates/uv-distribution/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-distribution"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/crates/uv-distribution/README.md
+++ b/crates/uv-distribution/README.md
@ -5,8 +5,8 @@
 This crate is an internal component of [uv](https://crates.io/crates/uv). The Rust API exposed here
 is unstable and will have frequent breaking changes.
-This version (0.0.8) is a component of [uv 0.9.18](https://crates.io/crates/uv/0.9.18). The source
+This version (0.0.4) is a component of [uv 0.9.14](https://crates.io/crates/uv/0.9.14). The source
-can be found [here](https://github.com/astral-sh/uv/blob/0.9.18/crates/uv-distribution).
+can be found [here](https://github.com/astral-sh/uv/blob/0.9.14/crates/uv-distribution).
 See uv's
 [crate versioning policy](https://docs.astral.sh/uv/reference/policies/versioning/#crate-versioning)
--- a/crates/uv-distribution/src/distribution_database.rs
+++ b/crates/uv-distribution/src/distribution_database.rs
@ -385,27 +385,6 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
            .boxed_local()
            .await?;
        // Check that the wheel is compatible with its install target.
        //
        // When building a build dependency for a cross-install, the build dependency needs
        // to install and run on the host instead of the target. In this case the `tags` are already
        // for the host instead of the target, so this check passes.
        if !built_wheel.filename.is_compatible(tags) {
            return if tags.is_cross() {
                Err(Error::BuiltWheelIncompatibleTargetPlatform {
                    filename: built_wheel.filename,
                    python_platform: tags.python_platform().clone(),
                    python_version: tags.python_version(),
                })
            } else {
                Err(Error::BuiltWheelIncompatibleHostPlatform {
                    filename: built_wheel.filename,
                    python_platform: tags.python_platform().clone(),
                    python_version: tags.python_version(),
                })
            };
        }
        // Acquire the advisory lock.
        #[cfg(windows)]
        let _lock = {
@ -416,7 +395,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                    built_wheel.target.file_name().unwrap().to_str().unwrap()
                ),
            );
-            lock_entry.lock().await.map_err(Error::CacheLock)?
+            lock_entry.lock().await.map_err(Error::CacheWrite)?
        };
        // If the wheel was unzipped previously, respect it. Source distributions are
@ -575,11 +554,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
        pyproject_toml: &PyProjectToml,
    ) -> Result<Option<RequiresDist>, Error> {
        self.builder
-            .source_tree_requires_dist(
+            .source_tree_requires_dist(path, pyproject_toml)
                path,
                pyproject_toml,
                self.client.unmanaged.credentials_cache(),
            )
            .await
    }
@ -599,7 +574,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
        #[cfg(windows)]
        let _lock = {
            let lock_entry = wheel_entry.with_file(format!("{}.lock", filename.stem()));
-            lock_entry.lock().await.map_err(Error::CacheLock)?
+            lock_entry.lock().await.map_err(Error::CacheWrite)?
        };
        // Create an entry for the HTTP cache.
@ -770,7 +745,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
        #[cfg(windows)]
        let _lock = {
            let lock_entry = wheel_entry.with_file(format!("{}.lock", filename.stem()));
-            lock_entry.lock().await.map_err(Error::CacheLock)?
+            lock_entry.lock().await.map_err(Error::CacheWrite)?
        };
        // Create an entry for the HTTP cache.
@ -972,7 +947,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
        #[cfg(windows)]
        let _lock = {
            let lock_entry = wheel_entry.with_file(format!("{}.lock", filename.stem()));
-            lock_entry.lock().await.map_err(Error::CacheLock)?
+            lock_entry.lock().await.map_err(Error::CacheWrite)?
        };
        // Determine the last-modified time of the wheel.
--- a/crates/uv-distribution/src/error.rs
+++ b/crates/uv-distribution/src/error.rs
@ -5,15 +5,13 @@ use tokio::task::JoinError;
 use zip::result::ZipError;
 use crate::metadata::MetadataError;
 use uv_cache::Error as CacheError;
 use uv_client::WrappedReqwestError;
-use uv_distribution_filename::{WheelFilename, WheelFilenameError};
+use uv_distribution_filename::WheelFilenameError;
 use uv_distribution_types::{InstalledDist, InstalledDistError, IsBuildBackendError};
 use uv_fs::Simplified;
 use uv_git::GitError;
 use uv_normalize::PackageName;
 use uv_pep440::{Version, VersionSpecifiers};
 use uv_platform_tags::Platform;
 use uv_pypi_types::{HashAlgorithm, HashDigest};
 use uv_redacted::DisplaySafeUrl;
 use uv_types::AnyErrorBuild;
@ -42,8 +40,6 @@ pub enum Error {
    CacheRead(#[source] std::io::Error),
    #[error("Failed to write to the distribution cache")]
    CacheWrite(#[source] std::io::Error),
    #[error("Failed to acquire lock on the distribution cache")]
    CacheLock(#[source] CacheError),
    #[error("Failed to deserialize cache entry")]
    CacheDecode(#[from] rmp_serde::decode::Error),
    #[error("Failed to serialize cache entry")]
@ -79,35 +75,6 @@ pub enum Error {
        filename: Version,
        metadata: Version,
    },
    /// This shouldn't happen, it's a bug in the build backend.
    #[error(
        "The built wheel `{}` is not compatible with the current Python {}.{} on {} {}",
        filename,
        python_version.0,
        python_version.1,
        python_platform.os(),
        python_platform.arch(),
    )]
    BuiltWheelIncompatibleHostPlatform {
        filename: WheelFilename,
        python_platform: Platform,
        python_version: (u8, u8),
    },
    /// This may happen when trying to cross-install native dependencies without their build backend
    /// being aware that the target is a cross-install.
    #[error(
        "The built wheel `{}` is not compatible with the target Python {}.{} on {} {}. Consider using `--no-build` to disable building wheels.",
        filename,
        python_version.0,
        python_version.1,
        python_platform.os(),
        python_platform.arch(),
    )]
    BuiltWheelIncompatibleTargetPlatform {
        filename: WheelFilename,
        python_platform: Platform,
        python_version: (u8, u8),
    },
    #[error("Failed to parse metadata from built wheel")]
    Metadata(#[from] uv_pypi_types::MetadataError),
    #[error("Failed to read metadata: `{}`", _0.user_display())]
--- a/crates/uv-distribution/src/metadata/build_requires.rs
+++ b/crates/uv-distribution/src/metadata/build_requires.rs
@ -1,6 +1,6 @@
 use std::collections::BTreeMap;
 use std::path::Path;
-use uv_auth::CredentialsCache;
+
 use uv_configuration::SourceStrategy;
 use uv_distribution_types::{
    ExtraBuildRequirement, ExtraBuildRequires, IndexLocations, Requirement,
@ -42,7 +42,6 @@ impl BuildRequires {
        locations: &IndexLocations,
        sources: SourceStrategy,
        cache: &WorkspaceCache,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        let discovery = match sources {
            SourceStrategy::Enabled => DiscoveryOptions::default(),
@ -57,13 +56,7 @@ impl BuildRequires {
            return Ok(Self::from_metadata23(metadata));
        };
-        Self::from_project_workspace(
+        Self::from_project_workspace(metadata, &project_workspace, locations, sources)
            metadata,
            &project_workspace,
            locations,
            sources,
            credentials_cache,
        )
    }
    /// Lower the `build-system.requires` field from a `pyproject.toml` file.
@ -72,7 +65,6 @@ impl BuildRequires {
        project_workspace: &ProjectWorkspace,
        locations: &IndexLocations,
        source_strategy: SourceStrategy,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        // Collect any `tool.uv.index` entries.
        let empty = vec![];
@ -122,7 +114,6 @@ impl BuildRequires {
                        locations,
                        project_workspace.workspace(),
                        None,
                        credentials_cache,
                    )
                    .map(move |requirement| match requirement {
                        Ok(requirement) => Ok(requirement.into_inner()),
@ -148,7 +139,6 @@ impl BuildRequires {
        workspace: &Workspace,
        locations: &IndexLocations,
        source_strategy: SourceStrategy,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        // Collect any `tool.uv.index` entries.
        let empty = vec![];
@ -196,7 +186,6 @@ impl BuildRequires {
                        locations,
                        workspace,
                        None,
                        credentials_cache,
                    )
                    .map(move |requirement| match requirement {
                        Ok(requirement) => Ok(requirement.into_inner()),
@ -236,7 +225,6 @@ impl LoweredExtraBuildDependencies {
        workspace: &Workspace,
        index_locations: &IndexLocations,
        source_strategy: SourceStrategy,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        match source_strategy {
            SourceStrategy::Enabled => {
@ -283,7 +271,6 @@ impl LoweredExtraBuildDependencies {
                                    index_locations,
                                    workspace,
                                    None,
                                    credentials_cache,
                                )
                                .map(move |requirement| {
                                    match requirement {
--- a/crates/uv-distribution/src/metadata/dependency_groups.rs
+++ b/crates/uv-distribution/src/metadata/dependency_groups.rs
@ -1,6 +1,6 @@
 use std::collections::BTreeMap;
 use std::path::{Path, PathBuf};
-use uv_auth::CredentialsCache;
+
 use uv_configuration::SourceStrategy;
 use uv_distribution_types::{IndexLocations, Requirement};
 use uv_normalize::{GroupName, PackageName};
@ -57,7 +57,6 @@ impl SourcedDependencyGroups {
        locations: &IndexLocations,
        source_strategy: SourceStrategy,
        cache: &WorkspaceCache,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        // If the `pyproject.toml` doesn't exist, fail early.
        if !pyproject_path.is_file() {
@ -157,7 +156,6 @@ impl SourcedDependencyGroups {
                            locations,
                            project.workspace(),
                            git_member,
                            credentials_cache,
                        )
                        .map(move |requirement| match requirement {
                            Ok(requirement) => Ok(requirement.into_inner()),
--- a/crates/uv-distribution/src/metadata/lowering.rs
+++ b/crates/uv-distribution/src/metadata/lowering.rs
@ -4,7 +4,7 @@ use std::path::{Path, PathBuf};
 use either::Either;
 use thiserror::Error;
-use uv_auth::CredentialsCache;
+
 use uv_distribution_filename::DistExtension;
 use uv_distribution_types::{
    Index, IndexLocations, IndexMetadata, IndexName, Origin, Requirement, RequirementSource,
@ -44,7 +44,6 @@ impl LoweredRequirement {
        locations: &'data IndexLocations,
        workspace: &'data Workspace,
        git_member: Option<&'data GitWorkspaceMember<'data>>,
        credentials_cache: &'data CredentialsCache,
    ) -> impl Iterator<Item = Result<Self, LoweringError>> + use<'data> + 'data {
        // Identify the source from the `tool.uv.sources` table.
        let (sources, origin) = if let Some(source) = project_sources.get(&requirement.name) {
@ -232,7 +231,7 @@ impl LoweredRequirement {
                                ));
                            };
                            if let Some(credentials) = index.credentials() {
-                                credentials_cache.store_credentials(index.raw_url(), credentials);
+                                uv_auth::store_credentials(index.raw_url(), credentials);
                            }
                            let index = IndexMetadata {
                                url: index.url.clone(),
@ -359,7 +358,6 @@ impl LoweredRequirement {
        sources: &'data BTreeMap<PackageName, Sources>,
        indexes: &'data [Index],
        locations: &'data IndexLocations,
        credentials_cache: &'data CredentialsCache,
    ) -> impl Iterator<Item = Result<Self, LoweringError>> + 'data {
        let source = sources.get(&requirement.name).cloned();
@ -468,7 +466,7 @@ impl LoweredRequirement {
                                ));
                            };
                            if let Some(credentials) = index.credentials() {
-                                credentials_cache.store_credentials(index.raw_url(), credentials);
+                                uv_auth::store_credentials(index.raw_url(), credentials);
                            }
                            let index = IndexMetadata {
                                url: index.url.clone(),
--- a/crates/uv-distribution/src/metadata/mod.rs
+++ b/crates/uv-distribution/src/metadata/mod.rs
@ -2,7 +2,7 @@ use std::collections::BTreeMap;
 use std::path::{Path, PathBuf};
 use thiserror::Error;
-use uv_auth::CredentialsCache;
+
 use uv_configuration::SourceStrategy;
 use uv_distribution_types::{GitSourceUrl, IndexLocations, Requirement};
 use uv_normalize::{ExtraName, GroupName, PackageName};
@ -91,7 +91,6 @@ impl Metadata {
        locations: &IndexLocations,
        sources: SourceStrategy,
        cache: &WorkspaceCache,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        // Lower the requirements.
        let requires_dist = uv_pypi_types::RequiresDist {
@ -113,7 +112,6 @@ impl Metadata {
            locations,
            sources,
            cache,
            credentials_cache,
        )
        .await?;
--- a/crates/uv-distribution/src/metadata/requires_dist.rs
+++ b/crates/uv-distribution/src/metadata/requires_dist.rs
@ -3,7 +3,7 @@ use std::path::Path;
 use std::slice;
 use rustc_hash::FxHashSet;
-use uv_auth::CredentialsCache;
+
 use uv_configuration::SourceStrategy;
 use uv_distribution_types::{IndexLocations, Requirement};
 use uv_normalize::{ExtraName, GroupName, PackageName};
@ -48,7 +48,6 @@ impl RequiresDist {
        locations: &IndexLocations,
        sources: SourceStrategy,
        cache: &WorkspaceCache,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        let discovery = DiscoveryOptions {
            stop_discovery_at: git_member.map(|git_member| {
@ -70,14 +69,7 @@ impl RequiresDist {
            return Ok(Self::from_metadata23(metadata));
        };
-        Self::from_project_workspace(
+        Self::from_project_workspace(metadata, &project_workspace, git_member, locations, sources)
            metadata,
            &project_workspace,
            git_member,
            locations,
            sources,
            credentials_cache,
        )
    }
    fn from_project_workspace(
@ -86,7 +78,6 @@ impl RequiresDist {
        git_member: Option<&GitWorkspaceMember<'_>>,
        locations: &IndexLocations,
        source_strategy: SourceStrategy,
        credentials_cache: &CredentialsCache,
    ) -> Result<Self, MetadataError> {
        // Collect any `tool.uv.index` entries.
        let empty = vec![];
@ -149,7 +140,6 @@ impl RequiresDist {
                                locations,
                                project_workspace.workspace(),
                                git_member,
                                credentials_cache,
                            )
                            .map(
                                move |requirement| match requirement {
@ -192,7 +182,6 @@ impl RequiresDist {
                        locations,
                        project_workspace.workspace(),
                        git_member,
                        credentials_cache,
                    )
                    .map(move |requirement| match requirement {
                        Ok(requirement) => Ok(requirement.into_inner()),
@ -443,7 +432,7 @@ mod test {
    use anyhow::Context;
    use indoc::indoc;
    use insta::assert_snapshot;
-    use uv_auth::CredentialsCache;
+
    use uv_configuration::SourceStrategy;
    use uv_distribution_types::IndexLocations;
    use uv_normalize::PackageName;
@ -479,7 +468,6 @@ mod test {
            None,
            &IndexLocations::default(),
            SourceStrategy::default(),
            &CredentialsCache::new(),
        )?)
    }
--- a/crates/uv-distribution/src/source/mod.rs
+++ b/crates/uv-distribution/src/source/mod.rs
@ -20,9 +20,9 @@ use reqwest::{Response, StatusCode};
 use tokio_util::compat::FuturesAsyncReadCompatExt;
 use tracing::{Instrument, debug, info_span, instrument, warn};
 use url::Url;
 use uv_redacted::DisplaySafeUrl;
 use zip::ZipArchive;
 use uv_auth::CredentialsCache;
 use uv_cache::{Cache, CacheBucket, CacheEntry, CacheShard, Removal, WheelCache};
 use uv_cache_info::CacheInfo;
 use uv_client::{
@ -44,7 +44,6 @@ use uv_normalize::PackageName;
 use uv_pep440::{Version, release_specifiers_to_ranges};
 use uv_platform_tags::Tags;
 use uv_pypi_types::{HashAlgorithm, HashDigest, HashDigests, PyProjectToml, ResolutionMetadata};
 use uv_redacted::DisplaySafeUrl;
 use uv_types::{BuildContext, BuildKey, BuildStack, SourceBuildTrait};
 use uv_workspace::pyproject::ToolUvSources;
@ -327,25 +326,14 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                .await?
            }
            BuildableSource::Dist(SourceDist::Git(dist)) => {
-                self.git_metadata(
+                self.git_metadata(source, &GitSourceUrl::from(dist), hashes, client)
-                    source,
+                    .boxed_local()
-                    &GitSourceUrl::from(dist),
+                    .await?
                    hashes,
                    client,
                    client.unmanaged.credentials_cache(),
                )
                .boxed_local()
                .await?
            }
            BuildableSource::Dist(SourceDist::Directory(dist)) => {
-                self.source_tree_metadata(
+                self.source_tree_metadata(source, &DirectorySourceUrl::from(dist), hashes)
-                    source,
+                    .boxed_local()
-                    &DirectorySourceUrl::from(dist),
+                    .await?
                    hashes,
                    client.unmanaged.credentials_cache(),
                )
                .boxed_local()
                .await?
            }
            BuildableSource::Dist(SourceDist::Path(dist)) => {
                let cache_shard = self.build_context.cache().shard(
@ -377,25 +365,14 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                .await?
            }
            BuildableSource::Url(SourceUrl::Git(resource)) => {
-                self.git_metadata(
+                self.git_metadata(source, resource, hashes, client)
-                    source,
+                    .boxed_local()
-                    resource,
+                    .await?
                    hashes,
                    client,
                    client.unmanaged.credentials_cache(),
                )
                .boxed_local()
                .await?
            }
            BuildableSource::Url(SourceUrl::Directory(resource)) => {
-                self.source_tree_metadata(
+                self.source_tree_metadata(source, resource, hashes)
-                    source,
+                    .boxed_local()
-                    resource,
+                    .await?
                    hashes,
                    client.unmanaged.credentials_cache(),
                )
                .boxed_local()
                .await?
            }
            BuildableSource::Url(SourceUrl::Path(resource)) => {
                let cache_shard = self.build_context.cache().shard(
@ -457,7 +434,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        hashes: HashPolicy<'_>,
        client: &ManagedClient<'_>,
    ) -> Result<BuiltWheelMetadata, Error> {
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let revision = self
@ -587,7 +564,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        hashes: HashPolicy<'_>,
        client: &ManagedClient<'_>,
    ) -> Result<ArchiveMetadata, Error> {
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let revision = self
@ -859,7 +836,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        tags: &Tags,
        hashes: HashPolicy<'_>,
    ) -> Result<BuiltWheelMetadata, Error> {
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let LocalRevisionPointer {
@ -964,7 +941,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        cache_shard: &CacheShard,
        hashes: HashPolicy<'_>,
    ) -> Result<ArchiveMetadata, Error> {
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let LocalRevisionPointer { revision, .. } = self
@ -1185,7 +1162,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        );
        // Acquire the advisory lock.
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let LocalRevisionPointer {
@ -1272,7 +1249,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        source: &BuildableSource<'_>,
        resource: &DirectorySourceUrl<'_>,
        hashes: HashPolicy<'_>,
        credentials_cache: &CredentialsCache,
    ) -> Result<ArchiveMetadata, Error> {
        // Before running the build, check that the hashes match.
        if hashes.is_validate() {
@ -1290,7 +1266,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                        self.build_context.locations(),
                        self.build_context.sources(),
                        self.build_context.workspace_cache(),
                        credentials_cache,
                    )
                    .await?,
                ));
@ -1309,7 +1284,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        );
        // Acquire the advisory lock.
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // Fetch the revision for the source distribution.
        let LocalRevisionPointer { revision, .. } = self
@ -1344,7 +1319,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                            self.build_context.locations(),
                            self.build_context.sources(),
                            self.build_context.workspace_cache(),
                            credentials_cache,
                        )
                        .await?,
                    ));
@ -1394,7 +1368,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                    self.build_context.locations(),
                    self.build_context.sources(),
                    self.build_context.workspace_cache(),
                    credentials_cache,
                )
                .await?,
            ));
@ -1456,7 +1429,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                self.build_context.locations(),
                self.build_context.sources(),
                self.build_context.workspace_cache(),
                credentials_cache,
            )
            .await?,
        ))
@ -1519,7 +1491,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        &self,
        path: &Path,
        pyproject_toml: &PyProjectToml,
        credentials_cache: &CredentialsCache,
    ) -> Result<Option<RequiresDist>, Error> {
        // Attempt to read static metadata from the `pyproject.toml`.
        match uv_pypi_types::RequiresDist::from_pyproject_toml(pyproject_toml.clone()) {
@ -1532,7 +1503,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                    self.build_context.locations(),
                    self.build_context.sources(),
                    self.build_context.workspace_cache(),
                    credentials_cache,
                )
                .await?;
                Ok(Some(requires_dist))
@ -1614,7 +1584,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        let metadata_entry = cache_shard.entry(METADATA);
        // Acquire the advisory lock.
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        // We don't track any cache information for Git-based source distributions; they're assumed
        // to be immutable.
@ -1692,7 +1662,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        resource: &GitSourceUrl<'_>,
        hashes: HashPolicy<'_>,
        client: &ManagedClient<'_>,
        credentials_cache: &CredentialsCache,
    ) -> Result<ArchiveMetadata, Error> {
        // Before running the build, check that the hashes match.
        if hashes.is_validate() {
@ -1829,7 +1798,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        let metadata_entry = cache_shard.entry(METADATA);
        // Acquire the advisory lock.
-        let _lock = cache_shard.lock().await.map_err(Error::CacheLock)?;
+        let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
        let path = if let Some(subdirectory) = resource.subdirectory {
            Cow::Owned(fetch.path().join(subdirectory))
@ -1854,7 +1823,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                            self.build_context.locations(),
                            self.build_context.sources(),
                            self.build_context.workspace_cache(),
                            credentials_cache,
                        )
                        .await?,
                    ));
@ -1888,7 +1856,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                                self.build_context.locations(),
                                self.build_context.sources(),
                                self.build_context.workspace_cache(),
                                credentials_cache,
                            )
                            .await?,
                        ));
@ -1941,7 +1908,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                    self.build_context.locations(),
                    self.build_context.sources(),
                    self.build_context.workspace_cache(),
                    credentials_cache,
                )
                .await?,
            ));
@ -2003,7 +1969,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                self.build_context.locations(),
                self.build_context.sources(),
                self.build_context.workspace_cache(),
                credentials_cache,
            )
            .await?,
        ))
@ -2470,7 +2435,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                source_root,
                subdirectory,
                temp_dir.path(),
                source_strategy,
                if source.is_editable() {
                    BuildKind::Editable
                } else {
@ -2575,7 +2539,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
        .await
        .map_err(Error::CacheWrite)?;
-        debug!("Built `{source}` into `{disk_filename}`");
+        debug!("Finished building: {source}");
        Ok((disk_filename, filename, metadata))
    }
--- a/crates/uv-extract/Cargo.toml
+++ b/crates/uv-extract/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "uv-extract"
-version = "0.0.8"
+version = "0.0.5"
 description = "This is an internal component crate of uv"
 edition = { workspace = true }
 rust-version = { workspace = true }
--- a/Show More
+++ b/Show More