chore(deps-dev): Update uv requirement from 0.9.9 to 0.9.13 by dependabot[bot] · Pull Request #1001 · CycloneDX/cyclonedx-python
Updates the requirements on uv to permit the latest version.
Release notes
Sourced from uv's releases.
0.9.13
Release Notes
Released on 2025-11-26.
Bug fixes
- Revert "Allow
--with-requirementsto load extensionless inline-metadata scripts" to fix reading of requirements files from streams (#16861)- Validate URL wheel tags against
Requires-Pythonand required environments (#16824)Documentation
- Drop unpublished crates from the uv crates.io README (#16847)
- Fix the links to uv in crates.io member READMEs (#16848)
Install uv 0.9.13
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.9.13/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.13/uv-installer.ps1 | iex"Download uv 0.9.13
... (truncated)
Changelog
Sourced from uv's changelog.
0.9.13
Released on 2025-11-26.
Bug fixes
- Revert "Allow
--with-requirementsto load extensionless inline-metadata scripts" to fix reading of requirements files from streams (#16861)- Validate URL wheel tags against
Requires-Pythonand required environments (#16824)Documentation
- Drop unpublished crates from the uv crates.io README (#16847)
- Fix the links to uv in crates.io member READMEs (#16848)
0.9.12
Released on 2025-11-24.
Enhancements
- Allow
--with-requirementsto load extensionless inline-metadata scripts (#16744)- Collect and upload PEP 740 attestations during
uv publish(#16731)- Prevent
uv exportfrom overwritingpyproject.toml(#16745)Documentation
- Add a crates.io README for uv (#16809)
- Add documentation for intermediate Docker layers in a workspace (#16787)
- Enumerate workspace members in the uv crate README (#16811)
- Fix documentation links for crates (#16801)
- Generate a crates.io README for uv workspace members (#16812)
- Move the "Export" guide to the projects concept section (#16835)
- Update the cargo install recommendation to use crates (#16800)
- Use the word "internal" in crate descriptions (#16810)
0.9.11
Released on 2025-11-20.
Python
- Add CPython 3.15.0a2
See the
python-build-standalonerelease notes for details.Enhancements
... (truncated)
Commits
7ca92dcBump setup-uv action to v7 in docs (#16858)735b870Bump version to 0.9.13 (#16862)ca62066Revert "Allow--with-requirementsto load extensionless inline-metadata scr...4d747f6Avoid eagerly reading input streams in-r(#16857)4bb219fFixuv pip install -r /dev/stdin(#16855)bfdee80Validate URL wheel tags againstRequires-Pythonand required environments (...17c1061Fix the links to uv in crates.io member READMEs (#16848)d735e27Drop unpublished crates from the uv crates.io README (#16847)0fb1233Bump version to 0.9.12 (#16840)7b3199fCollect and upload PEP 740 attestations duringuv publish(#16731)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)