Uv

Latest version: v0.1.44

Safety actively analyzes 629004 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 8

0.1.20

Bug fixes

- Add in-URL credentials to store prior to creating requests ([2446](https://github.com/astral-sh/uv/pull/2446))
- Error when direct URL requirements don't match `Requires-Python` ([2196](https://github.com/astral-sh/uv/pull/2196))

0.1.19

Configuration

- Add `UV_NATIVE_TLS` environment variable ([2412](https://github.com/astral-sh/uv/pull/2412))
- Allow `SSL_CERT_FILE` without requiring `--native-tls` ([2401](https://github.com/astral-sh/uv/pull/2401))
- Add support for retrieving credentials from `keyring` ([2254](https://github.com/astral-sh/uv/pull/2254))

Bug fixes

- Add backoff for transient Windows failures ([2419](https://github.com/astral-sh/uv/pull/2419))
- Move architecture and operating system probing to Python ([2381](https://github.com/astral-sh/uv/pull/2381))
- Respect `--native-tls` in `venv` ([2433](https://github.com/astral-sh/uv/pull/2433))
- Treat non-existent site-packages as empty ([2413](https://github.com/astral-sh/uv/pull/2413))

Documentation

- Document HTTP authentication ([2425](https://github.com/astral-sh/uv/pull/2425))

Performance

- Improve performance of version range operations ([2421](https://github.com/astral-sh/uv/pull/2421))

0.1.18

Breaking changes

Users that rely on native root certificates (or the `SSL_CERT_FILE`) environment variable must now
pass the `--native-tls` command-line flag to enable this behavior.

- Enable TLS native root toggling at runtime ([2362](https://github.com/astral-sh/uv/pull/2362))

Enhancements

- Add `--dry-run` flag to `uv pip install` ([1436](https://github.com/astral-sh/uv/pull/1436))
- Implement "Requires" field in `pip show` ([2347](https://github.com/astral-sh/uv/pull/2347))
- Remove `wheel` from default PEP 517 backend ([2341](https://github.com/astral-sh/uv/pull/2341))
- Add `UV_SYSTEM_PYTHON` environment variable as alias to `--system` ([2354](https://github.com/astral-sh/uv/pull/2354))
- Add a `-vv` log level and make `-v` more readable ([2301](https://github.com/astral-sh/uv/pull/2301))

Bug fixes

- Expand environment variables prior to detecting scheme ([2394](https://github.com/astral-sh/uv/pull/2394))
- Fix bug where `--no-binary :all:` prevented build of editable packages ([2393](https://github.com/astral-sh/uv/pull/2393))
- Ignore inverse dependencies when building graph ([2360](https://github.com/astral-sh/uv/pull/2360))
- Skip prefetching when `--no-deps` is specified ([2373](https://github.com/astral-sh/uv/pull/2373))
- Trim injected `python_version` marker to (major, minor) ([2395](https://github.com/astral-sh/uv/pull/2395))
- Wait for request stream to flush before returning resolution ([2374](https://github.com/astral-sh/uv/pull/2374))
- Write relative paths for scripts in data directory ([2348](https://github.com/astral-sh/uv/pull/2348))
- Add dedicated error message for direct filesystem paths in requirements ([2369](https://github.com/astral-sh/uv/pull/2369))

0.1.17

Enhancements

- Allow more-precise Git URLs to override less-precise Git URLs ([2285](https://github.com/astral-sh/uv/pull/2285))
- Add support for Metadata 2.2 ([2293](https://github.com/astral-sh/uv/pull/2293))
- Added ability to select bytecode invalidation mode of generated `.pyc` files ([2297](https://github.com/astral-sh/uv/pull/2297))
- Add `Seek` fallback for zip files with data descriptors ([2320](https://github.com/astral-sh/uv/pull/2320))

Bug fixes

- Support reading UTF-16 requirements files ([2283](https://github.com/astral-sh/uv/pull/2283))
- Trim rows in `pip list` ([2298](https://github.com/astral-sh/uv/pull/2298))
- Avoid using setuptools shim of distutils ([2305](https://github.com/astral-sh/uv/pull/2305))
- Communicate PEP 517 hook results via files ([2314](https://github.com/astral-sh/uv/pull/2314))
- Increase default buffer size for wheel and source downloads ([2319](https://github.com/astral-sh/uv/pull/2319))
- Add `Accept-Encoding: identity` to remaining stream paths ([2321](https://github.com/astral-sh/uv/pull/2321))
- Avoid duplicating authorization header with netrc ([2325](https://github.com/astral-sh/uv/pull/2325))
- Remove duplicate `INSTALLER` in `RECORD` ([2336](https://github.com/astral-sh/uv/pull/2336))

Documentation

- Add a custom suggestion to install wheel into the build environment ([2307](https://github.com/astral-sh/uv/pull/2307))
- Document the environment variables that uv respects ([2318](https://github.com/astral-sh/uv/pull/2318))

0.1.16

Enhancements

- Add support for `--no-build-isolation` ([2258](https://github.com/astral-sh/uv/pull/2258))
- Add support for `--break-system-packages` ([2249](https://github.com/astral-sh/uv/pull/2249))
- Add support for `.netrc` authentication ([2241](https://github.com/astral-sh/uv/pull/2241))
- Add support for `--format=freeze` and `--format=json` in `uv pip list` ([1998](https://github.com/astral-sh/uv/pull/1998))
- Add support for remote `https://` requirements files (#1332) ([2081](https://github.com/astral-sh/uv/pull/2081))
- Implement `uv pip show` ([2115](https://github.com/astral-sh/uv/pull/2115))
- Allow `UV_PRERELEASE` to be set via environment variable ([2240](https://github.com/astral-sh/uv/pull/2240))
- Include exit code for build failures ([2108](https://github.com/astral-sh/uv/pull/2108))
- Query interpreter to determine correct `virtualenv` paths, enabling `uv venv` with PyPy and others ([2188](https://github.com/astral-sh/uv/pull/2188))
- Respect non-`sysconfig`-based system Pythons, enabling `--system` installs on Debian and others ([2193](https://github.com/astral-sh/uv/pull/2193))

Bug fixes

- Fallback to fresh request on non-validating 304 ([2218](https://github.com/astral-sh/uv/pull/2218))
- Add `.stdout()` and `.stderr()` outputs to `Printer` ([2227](https://github.com/astral-sh/uv/pull/2227))
- Close `RECORD` after reading entries during uninstall ([2259](https://github.com/astral-sh/uv/pull/2259))
- Fix Conda Python detection on Windows ([2279](https://github.com/astral-sh/uv/pull/2279))
- Fix parsing requirement where a variable follows an operator without a space ([2273](https://github.com/astral-sh/uv/pull/2273))
- Prefer more recent minor versions in wheel tags ([2263](https://github.com/astral-sh/uv/pull/2263))
- Retry on Python interpreter launch failures during `--compile` ([2278](https://github.com/astral-sh/uv/pull/2278))
- Show appropriate activation command based on shell detection ([2221](https://github.com/astral-sh/uv/pull/2221))
- Escape Windows paths with spaces in `venv` activation command ([2223](https://github.com/astral-sh/uv/pull/2223))
- Add specialized activation message for `cmd.exe` ([2226](https://github.com/astral-sh/uv/pull/2226))
- Cache wheel metadata in no-PEP 658 fallback ([2255](https://github.com/astral-sh/uv/pull/2255))
- Use reparse points to detect Windows installer shims ([2284](https://github.com/astral-sh/uv/pull/2284))

Documentation

- Add `PIP_COMPATIBILITY.md` to document known deviations from `pip` ([2244](https://github.com/astral-sh/uv/pull/2244))

0.1.15

Enhancements

- Add a `--compile` option to `install` to enable bytecode compilation ([2086](https://github.com/astral-sh/uv/pull/2086))
- Expose the `--exclude-newer` flag to limit candidate packages based on date ([2166](https://github.com/astral-sh/uv/pull/2166))
- Add `uv` version to user agent ([2136](https://github.com/astral-sh/uv/pull/2136))

Bug fixes

- Set `.metadata` suffix on URL path ([2123](https://github.com/astral-sh/uv/pull/2123))
- Fallback to non-range requests when HEAD returns 404 ([2186](https://github.com/astral-sh/uv/pull/2186))
- Allow direct URLs in optional dependencies in editables ([2206](https://github.com/astral-sh/uv/pull/2206))
- Allow empty values in WHEEL files ([2170](https://github.com/astral-sh/uv/pull/2170))
- Avoid Windows Store shims in `--python python3`-like invocations ([2212](https://github.com/astral-sh/uv/pull/2212))
- Expand Windows shim detection to include `python3.12.exe` ([2209](https://github.com/astral-sh/uv/pull/2209))
- HTML-decode URLs in HTML indexes ([2215](https://github.com/astral-sh/uv/pull/2215))
- Make direct dependency detection respect markers ([2207](https://github.com/astral-sh/uv/pull/2207))
- Respect `py --list-paths` fallback in `--python python3` invocations on Windows ([2214](https://github.com/astral-sh/uv/pull/2214))
- Respect local freshness when auditing installed environment ([2169](https://github.com/astral-sh/uv/pull/2169))
- Respect markers on URL dependencies in editables ([2176](https://github.com/astral-sh/uv/pull/2176))
- Respect nested editable requirements in parser ([2204](https://github.com/astral-sh/uv/pull/2204))
- Run Windows against Python 3.13 ([2171](https://github.com/astral-sh/uv/pull/2171))
- Error when editables don't match `Requires-Python` ([2194](https://github.com/astral-sh/uv/pull/2194))

Page 5 of 8

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.