Skip to content

Update dependency astral-sh/uv to v0.9.7#5032

Merged
renovate[bot] merged 2 commits into
masterfrom
renovate/astral-sh-uv-0.x
Nov 1, 2025
Merged

Update dependency astral-sh/uv to v0.9.7#5032
renovate[bot] merged 2 commits into
masterfrom
renovate/astral-sh-uv-0.x

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
astral-sh/uv uses-with patch 0.9.5 -> 0.9.7

Release Notes

astral-sh/uv (astral-sh/uv)

v0.9.7

Compare Source

Released on 2025-10-30.

Enhancements
  • Add Windows x86-32 emulation support to interpreter architecture checks (#​13475)
  • Improve readability of progress bars (#​16509)
  • Add GitHub attestations for uv release artifacts (#​11357)
Bug fixes
  • Drop terminal coloring from uv auth token output (#​16504)
  • Don't use UV_LOCKED to enable --check flag (#​16521)

v0.9.6

Compare Source

Released on 2025-10-29.

This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details.

Security
Python
Enhancements
  • Add --clear to uv build to remove old build artifacts (#​16371)
  • Add --no-create-gitignore to uv build (#​16369)
  • Do not error when a virtual environment directory cannot be removed due to a busy error (#​16394)
  • Improve hint on pip install --system when externally managed (#​16392)
  • Running uv lock --check with outdated lockfile will print that --check was passed, instead of --locked (#​16322)
  • Update uv init template for Maturin (#​16449)
  • Improve ordering of Python sources in logs (#​16463)
  • Restore DockerHub release images and annotations (#​16441)
Bug fixes
  • Check for matching Python implementation during uv python upgrade (#​16420)
  • Deterministically order --find-links distributions (#​16446)
  • Don't panic in uv export --frozen when the lockfile is outdated (#​16407)
  • Fix root of uv tree when --package is used with circular dependencies (#​15908)
  • Show package list with pip freeze --quiet (#​16491)
  • Limit uv auth login pyx.dev retries to 60s (#​16498)
  • Add an empty group with uv add --group ... -r ... (#​16490)
Documentation
  • Update docs for maturin build backend init template (#​16469)
  • Update docs to reflect previous changes to signal forwarding semantics (#​16430)
  • Add instructions for installing via MacPorts (#​16039)

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the ⚙️ ci-cd affected functionality: ci-cd label Nov 1, 2025
@renovate renovate Bot enabled auto-merge (squash) November 1, 2025 03:31
@renovate renovate Bot merged commit 3d8bf32 into master Nov 1, 2025
8 of 9 checks passed
@renovate renovate Bot deleted the renovate/astral-sh-uv-0.x branch November 1, 2025 03:33
@github-actions github-actions Bot locked and limited conversation to collaborators Nov 8, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⚙️ ci-cd affected functionality: ci-cd

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants