chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 by dependabot[bot] · Pull Request #1025 · CycloneDX/cyclonedx-python
Updates the requirements on uv to permit the latest version.
Release notes
Sourced from uv's releases.
0.10.9
Release Notes
Released on 2026-03-06.
Enhancements
- Add
fbgemm-gpu,fbgemm-gpu-genai,torchrec, andtorchtuneto the PyTorch list (#18338)- Add torchcodec to PyTorch List (#18336)
- Log the duration we took before erroring (#18231)
- Warn when using
uv_buildsettings withoutuv_build(#15750)- Add fallback to
/usr/lib/os-releaseon Linux system lookup failure (#18349)- Use
cargo auditableto include SBOM in uv builds (#18276)Configuration
- Add an environment variable for
UV_VENV_RELOCATABLE(#18331)Performance
Bug fixes
- Continue on trampoline job assignment failures (#18291)
- Handle the hard link limit gracefully instead of failing (#17699)
- Respect build constraints for workspace members (#18350)
- Revalidate editables and other dependencies in scripts (#18328)
- Support Python 3.13+ on Android (#18301)
- Support
cp3-none-any(#17064)- Skip tool environments with broken links to Python on Windows (#17176)
Documentation
- Add documentation for common marker values (#18327)
- Improve documentation on virtual dependencies (#18346)
Install uv 0.10.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.10.9/uv-installer.sh | shInstall prebuilt binaries via powershell script
... (truncated)
Changelog
Sourced from uv's changelog.
0.10.9
Released on 2026-03-06.
Enhancements
- Add
fbgemm-gpu,fbgemm-gpu-genai,torchrec, andtorchtuneto the PyTorch list (#18338)- Add torchcodec to PyTorch List (#18336)
- Log the duration we took before erroring (#18231)
- Warn when using
uv_buildsettings withoutuv_build(#15750)- Add fallback to
/usr/lib/os-releaseon Linux system lookup failure (#18349)- Use
cargo auditableto include SBOM in uv builds (#18276)Configuration
- Add an environment variable for
UV_VENV_RELOCATABLE(#18331)Performance
Bug fixes
- Continue on trampoline job assignment failures (#18291)
- Handle the hard link limit gracefully instead of failing (#17699)
- Respect build constraints for workspace members (#18350)
- Revalidate editables and other dependencies in scripts (#18328)
- Support Python 3.13+ on Android (#18301)
- Support
cp3-none-any(#17064)- Skip tool environments with broken links to Python on Windows (#17176)
Documentation
- Add documentation for common marker values (#18327)
- Improve documentation on virtual dependencies (#18346)
0.10.8
Released on 2026-03-03.
Python
- Add CPython 3.10.20
- Add CPython 3.11.15
- Add CPython 3.12.13
Enhancements
... (truncated)
Commits
f675560Bump version to 0.10.9 (#18357)8fedd25Use uv 0.10.8 for internal workflows (#18354)03b4d8aUse optimizedrustfmtstep in.pre-commit-config.yaml(#18355)9345450Usecargo auditableto include SBOM in uv builds (#18276)12caaf3Respect build constraints for workspace members (#18350)24e9b47Add fallback to/usr/lib/os-releaseon Linux (#18349)7520fe6Improve documentation on virtual dependencies (#18346)9dea237Revalidate editables and other dependencies in scripts (#18328)a13ba94Add a development build ofaarch64-linux-androidto CI (#18333)bb8970aAdd a Termux integration test (#18332)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)