Merged

Conversation

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv	uses-with	patch	`0.10.7` → `0.10.10`

Release Notes

astral-sh/uv (astral-sh/uv)

`v0.10.10`

Compare Source

Released on 2026-03-13.

Python

Add CPython 3.15.0a7 (#18403)

Enhancements

Add --outdated flag to uv tool list (#18318)
Add riscv64 musl target to build-release-binaries workflow (#18228)
Fetch Ruff from an Astral mirror (#18286)
Improve error handling for platform detection in Python downloads (#18453)
Warn if --project directory does not exist (#17714)
Warn when workspace member scripts are skipped due to missing build system (#18389)
Update build backend versions used in uv init (#18417)
Log explicit config file path in verbose output (#18353)
Make uv cache clear an alias of uv cache clean (#18420)
Reject invalid classifiers, warn on license classifiers in uv_build (#18419)

Preview features

Add links to uv audit output (#18392)
Output/report formatting for uv audit (#18193)
Switch to batched OSV queries for uv audit (#18394)

Bug fixes

Avoid sharing version metadata across indexes (#18373)
Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows (#18362)
Filter out unsupported environment wheels (#18445)
Preserve absolute/relative paths in lockfiles (#18176)
Recreate Python environments under uv tool install --force (#18399)
Respect timestamp and other cache keys in cached environments (#18396)
Simplify selected extra markers in uv export (#18433)
Send pyx mint-token requests with a proper Content-Type (#18334)
Fix Windows operating system and version reporting (#18383)

Documentation

Update the platform support policy with a tier 3 section including freebsd and 32-bit windows (#18345)

`v0.10.9`

Compare Source

Released on 2026-03-06.

Enhancements

Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list (#18338)
Add torchcodec to PyTorch List (#18336)
Log the duration we took before erroring (#18231)
Warn when using uv_build settings without uv_build (#15750)
Add fallback to /usr/lib/os-release on Linux system lookup failure (#18349)
Use cargo auditable to include SBOM in uv builds (#18276)

Configuration

Add an environment variable for UV_VENV_RELOCATABLE (#18331)

Performance

Avoid toml Document overhead (#18306)
Use a single global workspace cache (#18307)

Bug fixes

Continue on trampoline job assignment failures (#18291)
Handle the hard link limit gracefully instead of failing (#17699)
Respect build constraints for workspace members (#18350)
Revalidate editables and other dependencies in scripts (#18328)
Support Python 3.13+ on Android (#18301)
Support cp3-none-any (#17064)
Skip tool environments with broken links to Python on Windows (#17176)

Documentation

Add documentation for common marker values (#18327)
Improve documentation on virtual dependencies (#18346)

`v0.10.8`

Compare Source

Released on 2026-03-03.

Python

Add CPython 3.10.20
Add CPython 3.11.15
Add CPython 3.12.13

Enhancements

Add Docker images based on Docker Hardened Images (#18247)
Add resolver hint when --exclude-newer filters out all versions of a package (#18217)
Configure a real retry minimum delay of 1s (#18201)
Expand uv_build direct build compatibility (#17902)
Fetch CPython from an Astral mirror by default (#18207)
Download uv releases from an Astral mirror in installers by default (#18191)
Add SBOM attestations to Docker images (#18252)
Improve hint for installing meson-python when missing as build backend (#15826)

Configuration

Add UV_INIT_BARE environment variable for uv init (#18210)

Bug fixes

Prevent uv tool upgrade from installing excluded dependencies (#18022)
Promote authentication policy when saving tool receipts (#18246)
Respect exclusions in scripts (#18269)
Retain default-branch Git SHAs in pylock.toml files (#18227)
Skip installed Python check for URL dependencies (#18211)
Respect constraints during --upgrade (#18226)
Fix uv tree orphaned roots and premature deduplication (#17212)

Documentation

Mention cooldown and tweak inline script metadata in dependency bots documentation (#18230)
Move cache prune in GitLab to after_script (#18206)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot deleted the renovate/astral-sh-uv-0.x branch

March 16, 2026 07:14