Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 3, 2025

Bumps uv from 0.5.5 to 0.5.27.

Release notes

Sourced from uv's releases.

0.5.27

Release Notes

Enhancements

  • Avoid setting permissions during tar extraction (#11191)
  • Remove warnings for missing lower bounds (#11195)
  • Update PubGrub to set-based outdated priority tracking (#11169)
  • Improve error messages for uv pip install with --extra or --all-extras and invalid sources (#11193)
  • Sign Docker images using GitHub attestations (#8685)

Preview features

  • Don't expand self-referential extras in the build backend (#11142)

Performance

  • Filter discovered Python executables by source before querying (#11143)
  • Optimize exclusion computation for markers (#11158)
  • Use Astral-maintained tokio-tar fork (#11174)
  • Remove unneeded .clone() (#11127)

Bug fixes

  • Fix relative paths in bytecode compilation (#11177)
  • Percent-decode URLs in canonical comparisons (#11088)
  • Respect concurrency limits in parallel index fetch (#11182)
  • Use wire JSON schema for conflict items (#11196)
  • Use explicit _GLibCVersion tuple in uv-python crate (#11122)

Documentation

  • Add Git SHA locking behavior to docs (#11125)
  • Add best-practice flags to pip install example in troubleshooting guide (#11194)
  • Set VIRTUAL_ENV in Jupyter kernels (#11155)
  • Add instructions for deactivating an environment (#11200)

Install uv 0.5.27

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.5.27/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.5.27/uv-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from uv's changelog.

0.5.27

Enhancements

  • Avoid setting permissions during tar extraction (#11191)
  • Remove warnings for missing lower bounds (#11195)
  • Update PubGrub to set-based outdated priority tracking (#11169)
  • Improve error messages for uv pip install with --extra or --all-extras and invalid sources (#11193)
  • Sign Docker images using GitHub attestations (#8685)

Preview features

  • Don't expand self-referential extras in the build backend (#11142)

Performance

  • Filter discovered Python executables by source before querying (#11143)
  • Optimize exclusion computation for markers (#11158)
  • Use Astral-maintained tokio-tar fork (#11174)
  • Remove unneeded .clone() (#11127)

Bug fixes

  • Fix relative paths in bytecode compilation (#11177)
  • Percent-decode URLs in canonical comparisons (#11088)
  • Respect concurrency limits in parallel index fetch (#11182)
  • Use wire JSON schema for conflict items (#11196)
  • Use explicit _GLibCVersion tuple in uv-python crate (#11122)

Documentation

  • Add Git SHA locking behavior to docs (#11125)
  • Add best-practice flags to pip install example in troubleshooting guide (#11194)
  • Set VIRTUAL_ENV in Jupyter kernels (#11155)
  • Add instructions for deactivating an environment (#11200)

0.5.26

Enhancements

  • Add support for uvx python (#11076)
  • Allow --no-dev --invert in uv tree (#11068)
  • Update uv python install --reinstall to reinstall all previous versions (#11072)
  • Consistently write log messages with capitalized first word (#11111)
  • Suggest --build-backend when --backend is passed to uv init (#10958)
  • Improve retry trace message (#11108)

Performance

  • Remove unnecessary UTF-8 conversion in hash parsing (#11110)

... (truncated)

Commits
  • 73e9928 Bump version to 0.5.27 (#11201)
  • f54979f add instructions for deactivating an environment (#11200)
  • bb3ffcf Improve error messages for uv pip install with --extra or --all-extras ...
  • dd7cd2e Remove warnings for missing lower bounds (#11195)
  • efbc77b Use wire JSON schema for conflict items (#11196)
  • 1be8ba7 Add best-practice flags to pip install example in troubleshooting guide (#1...
  • 85461c2 Avoid setting permissions during tar extraction (#11191)
  • 7b43baf Use Astral-maintained tokio-tar fork (#11174)
  • 56684e4 Respect concurrency limits in parallel index fetch (#11182)
  • c54dbcb Use dev drive for trampoline CI to avoid timeout (#11015)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [uv](https://github.com/astral-sh/uv) from 0.5.5 to 0.5.27.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.5.5...0.5.27)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 3, 2025
@dependabot dependabot bot mentioned this pull request Feb 3, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 5, 2025

Superseded by #117.

@dependabot dependabot bot closed this Feb 5, 2025
@dependabot dependabot bot deleted the dependabot/pip/uv-0.5.27 branch February 5, 2025 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants