Home Original page

chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 by dependabot[bot] · Pull Request #1026 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.10.10

Release Notes

Released on 2026-03-13.

Python

  • Add CPython 3.15.0a7 (#18403)

Enhancements

  • Add --outdated flag to uv tool list (#18318)
  • Add riscv64 musl target to build-release-binaries workflow (#18228)
  • Fetch Ruff from an Astral mirror (#18286)
  • Improve error handling for platform detection in Python downloads (#18453)
  • Warn if --project directory does not exist (#17714)
  • Warn when workspace member scripts are skipped due to missing build system (#18389)
  • Update build backend versions used in uv init (#18417)
  • Log explicit config file path in verbose output (#18353)
  • Make uv cache clear an alias of uv cache clean (#18420)
  • Reject invalid classifiers, warn on license classifiers in uv_build (#18419)

Preview features

  • Add links to uv audit output (#18392)
  • Output/report formatting for uv audit (#18193)
  • Switch to batched OSV queries for uv audit (#18394)

Bug fixes

  • Avoid sharing version metadata across indexes (#18373)
  • Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows (#18362)
  • Filter out unsupported environment wheels (#18445)
  • Preserve absolute/relative paths in lockfiles (#18176)
  • Recreate Python environments under uv tool install --force (#18399)
  • Respect timestamp and other cache keys in cached environments (#18396)
  • Simplify selected extra markers in uv export (#18433)
  • Send pyx mint-token requests with a proper Content-Type (#18334)
  • Fix Windows operating system and version reporting (#18383)

Documentation

  • Update the platform support policy with a tier 3 section including freebsd and 32-bit windows (#18345)

Install uv 0.10.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.10.10/uv-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from uv's changelog.

0.10.10

Released on 2026-03-13.

Python

  • Add CPython 3.15.0a7 (#18403)

Enhancements

  • Add --outdated flag to uv tool list (#18318)
  • Add riscv64 musl target to build-release-binaries workflow (#18228)
  • Fetch Ruff from an Astral mirror (#18286)
  • Improve error handling for platform detection in Python downloads (#18453)
  • Warn if --project directory does not exist (#17714)
  • Warn when workspace member scripts are skipped due to missing build system (#18389)
  • Update build backend versions used in uv init (#18417)
  • Log explicit config file path in verbose output (#18353)
  • Make uv cache clear an alias of uv cache clean (#18420)
  • Reject invalid classifiers, warn on license classifiers in uv_build (#18419)

Preview features

  • Add links to uv audit output (#18392)
  • Output/report formatting for uv audit (#18193)
  • Switch to batched OSV queries for uv audit (#18394)

Bug fixes

  • Avoid sharing version metadata across indexes (#18373)
  • Bump zlib-rs to 0.6.2 to fix panic on decompression of large wheels on Windows (#18362)
  • Filter out unsupported environment wheels (#18445)
  • Preserve absolute/relative paths in lockfiles (#18176)
  • Recreate Python environments under uv tool install --force (#18399)
  • Respect timestamp and other cache keys in cached environments (#18396)
  • Simplify selected extra markers in uv export (#18433)
  • Send pyx mint-token requests with a proper Content-Type (#18334)
  • Fix Windows operating system and version reporting (#18383)

Documentation

  • Update the platform support policy with a tier 3 section including freebsd and 32-bit windows (#18345)

0.10.9

Released on 2026-03-06.

Enhancements

  • Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list (#18338)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)