Bump uv from 0.5.5 to 0.5.17

[dependabot]

Bumps uv from 0.5.5 to 0.5.17.

Release notes

Sourced from uv's releases.

0.5.17

Release Notes

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

This release also includes support for uv export --script and uv tree --script. Both commands support PEP 723 scripts with and without accompanying lockfiles.

Enhancements

• Add support for locking PEP 723 scripts (#10135)
• Respect PEP 723 script lockfiles in uv run (#10136)
• Update PEP 723 lockfile in uv add --script (#10145)
• Update PEP 723 lockfile in uv remove --script (#10162)
• Add --script support to uv export for PEP 723 scripts (#10160)
• Add --script support to uv tree for PEP 723 scripts (#10159)
• Add ls alias to uv {tool, python, pip} list (#10240)
• Allow reading --with-requirements from stdin in uv add and uv run (#10447)
• Warn-and-ignore for unsupported requirements.txt options (#10420)

Preview features

• Add remaining Python type annotations to build backend (#10434)

Performance

• Avoid allocating for names in the PEP 508 parser (#10476)
• Fetch concurrently for non-first-match index strategies (#10432)
• Remove unnecessary .to_string() call (#10419)
• Respect sentinels in package prioritization (#10443)
• Use ArcStr for marker values (#10453)
• Use ArcStr for package, extra, and group names (#10475)
• Use matches! rather than contains in requirements.txt parsing (#10423)
• Use faster disjointness check for markers (#10439)
• Pre-compute PEP 508 markers from universal markers (#10472)

Bug fixes

• Fix UV_FIND_LINKS delimiter to split on commas (#10477)
• Improve uv tool list output when tool environment is broken (#10409)
• Only track markers for compatible versions (#10457)
• Respect requires-python when installing tools (#10401)
• Visit proxy packages eagerly (#10441)
• Improve shell compatibility of venv activate scripts (#10397)
• Read publish username from URL (#10469)

Documentation

• Add Lambda layer instructions to AWS Lambda guide (#10411)

... (truncated)

Changelog

Sourced from uv's changelog.

0.5.17

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

This release also includes support for uv export --script and uv tree --script. Both commands support PEP 723 scripts with and without accompanying lockfiles.

Enhancements

• Add support for locking PEP 723 scripts (#10135)
• Respect PEP 723 script lockfiles in uv run (#10136)
• Update PEP 723 lockfile in uv add --script (#10145)
• Update PEP 723 lockfile in uv remove --script (#10162)
• Add --script support to uv export for PEP 723 scripts (#10160)
• Add --script support to uv tree for PEP 723 scripts (#10159)
• Add ls alias to uv {tool, python, pip} list (#10240)
• Allow reading --with-requirements from stdin in uv add and uv run (#10447)
• Warn-and-ignore for unsupported requirements.txt options (#10420)

Preview features

• Add remaining Python type annotations to build backend (#10434)

Performance

• Avoid allocating for names in the PEP 508 parser (#10476)
• Fetch concurrently for non-first-match index strategies (#10432)
• Remove unnecessary .to_string() call (#10419)
• Respect sentinels in package prioritization (#10443)
• Use ArcStr for marker values (#10453)
• Use ArcStr for package, extra, and group names (#10475)
• Use matches! rather than contains in requirements.txt parsing (#10423)
• Use faster disjointness check for markers (#10439)
• Pre-compute PEP 508 markers from universal markers (#10472)

Bug fixes

• Fix UV_FIND_LINKS delimiter to split on commas (#10477)
• Improve uv tool list output when tool environment is broken (#10409)
• Only track markers for compatible versions (#10457)
• Respect requires-python when installing tools (#10401)
• Visit proxy packages eagerly (#10441)
• Improve shell compatibility of venv activate scripts (#10397)
• Read publish username from URL (#10469)

Documentation

... (truncated)

Commits

• c198e22 Bump version to v0.5.17 (#10480)
• 8420195 Use ArcStr for marker values (#10453)
• 7a21b71 Avoid allocating for names in the PEP 508 parser (#10476)
• d44affa Read publish username from URL (#10469)
• 2982c20 Fix UV_FIND_LINKS delimiter to split on commas (#10477)
• b3d7beb Use arcstr for package, extra, and group names (#10475)
• 503f9a9 uv-resolver: pre-compute PEP 508 markers from universal markers (#10472)
• 685a53d Add second apache airflow test case (#10463)
• bee2baa Misc. changes based on ABI explorations (#10458)
• 8d25f29 Only track markers for compatible versions (#10457)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #106.