Merged
Merged
Conversation
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| astral-sh/uv | uses-with | patch | 0.9.5 -> 0.9.7 |
Release Notes
astral-sh/uv (astral-sh/uv)v0.9.7
Released on 2025-10-30.
Enhancements
- Add Windows x86-32 emulation support to interpreter architecture checks (#13475)
- Improve readability of progress bars (#16509)
- Add GitHub attestations for uv release artifacts (#11357)
Bug fixes
- Drop terminal coloring from
uv auth tokenoutput (#16504) - Don't use UV_LOCKED to enable
--checkflag (#16521)
v0.9.6
Released on 2025-10-29.
This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details.
Security
- Address ZIP parsing differentials (GHSA-pqhf-p39g-3x64)
Python
- Upgrade GraalPy to 25.0.1 (#16401)
Enhancements
- Add
--cleartouv buildto remove old build artifacts (#16371) - Add
--no-create-gitignoretouv build(#16369) - Do not error when a virtual environment directory cannot be removed due to a busy error (#16394)
- Improve hint on
pip install --systemwhen externally managed (#16392) - Running
uv lock --checkwith outdated lockfile will print that--checkwas passed, instead of--locked(#16322) - Update
uv inittemplate for Maturin (#16449) - Improve ordering of Python sources in logs (#16463)
- Restore DockerHub release images and annotations (#16441)
Bug fixes
- Check for matching Python implementation during
uv python upgrade(#16420) - Deterministically order
--find-linksdistributions (#16446) - Don't panic in
uv export --frozenwhen the lockfile is outdated (#16407) - Fix root of
uv treewhen--packageis used with circular dependencies (#15908) - Show package list with
pip freeze --quiet(#16491) - Limit
uv auth login pyx.devretries to 60s (#16498) - Add an empty group with
uv add --group ... -r ...(#16490)
Documentation
- Update docs for maturin build backend init template (#16469)
- Update docs to reflect previous changes to signal forwarding semantics (#16430)
- Add instructions for installing via MacPorts (#16039)
Configuration
📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
renovate Bot deleted the renovate/astral-sh-uv-0.x branch
November 1, 2025 03:33