Home Original page

chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 by dependabot[bot] · Pull Request #1023 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.10.7

Release Notes

Released on 2026-02-27.

Bug fixes

  • Fix handling of junctions in Windows Containers on Windows (#18192)

Enhancements

  • Activate logging for middleware retries (#18200)
  • Upload uv releases to a mirror (#18159)

Install uv 0.10.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.10.7/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.10.7/uv-installer.ps1 | iex"

Download uv 0.10.7

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.10.7

Released on 2026-02-27.

Bug fixes

  • Fix handling of junctions in Windows Containers on Windows (#18192)

Enhancements

  • Activate logging for middleware retries (#18200)
  • Upload uv releases to a mirror (#18159)

0.10.6

Released on 2026-02-24.

Bug fixes

  • Apply lockfile marker normalization for fork markers (#18116)
  • Fix Python version selection for scripts with a requires-python conflicting with .python-version (#18097)
  • Preserve file permissions when using reflinks on Linux (#18187)

Documentation

  • Remove verbose documentation from optional dependencies help text (#18180)

0.10.5

Released on 2026-02-23.

Enhancements

  • Add hint when named index is found in a parent config file (#18087)
  • Add warning for uv lock --frozen (#17859)
  • Attempt to use reflinks by default on Linux (#18117)
  • Fallback to hardlinks after reflink failure before copying (#18104)
  • Filter pylock.toml wheels by tags and requires-python (#18081)
  • Validate wheel filenames are normalized during uv publish (#17783)
  • Fix message when exclude-newer invalidates the lock file (#18100)
  • Change the missing files log level to debug (#18075)

Performance

  • Improve performance of repeated conflicts with an extra (#18094)

Bug fixes

  • Fix --no-emit-workspace with --all-packages on single-member workspaces (#18098)
  • Fix UV_NO_DEFAULT_GROUPS rejecting truthy values like 1 (#18057)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)