chore(deps-dev): Update uv requirement from 0.7.3 to 0.7.4 by dependabot[bot] · Pull Request #899 · CycloneDX/cyclonedx-python
Updates the requirements on uv to permit the latest version.
Release notes
Sourced from uv's releases.
0.7.4
Release Notes
Enhancements
- Add more context to external errors (#13351)
- Align indentation of long arguments (#13394)
- Preserve order of dependencies which are sorted naively (#13334)
- Align progress bars by largest name length (#13266)
- Reinstall local packages in
uv add(#13462)- Rename
--raw-sourcesto--raw(#13348)- Show 'Downgraded' when
self updateis used to install an older version (#13340)- Suggest
uv self updateif required uv version is newer (#13305)- Add 3.14 beta images to uv Docker images (#13390)
- Add comma after "i.e." in Conda environment error (#13423)
- Be more precise in unpinned packages warning (#13426)
- Fix detection of sorted dependencies when include-group is used (#13354)
- Fix display of HTTP responses in trace logs for retry of errors (#13339)
- Log skip reasons during Python installation key interpreter match checks (#13472)
- Redact credentials when displaying URLs (#13333)
Bug fixes
- Avoid erroring on
pylock.tomldependency entries (#13384)- Avoid panics for cannot-be-a-base URLs (#13406)
- Ensure cached realm credentials are applied if no password is found for index URL (#13463)
- Fix
.tgzparsing to respect true extension (#13382)- Fix double self-dependency (#13366)
- Reject
pylock.tomlinuv add -r(#13421)- Retain dot-separated wheel tags during cache prune (#13379)
- Retain trailing comments after PEP 723 metadata block (#13460)
Documentation
Preview features
- Build backend: Normalize glob paths (#13465)
Install uv 0.7.4
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.7.4/uv-installer.sh | shInstall prebuilt binaries via powershell script
... (truncated)
Changelog
Sourced from uv's changelog.
0.7.4
Enhancements
- Add more context to external errors (#13351)
- Align indentation of long arguments (#13394)
- Preserve order of dependencies which are sorted naively (#13334)
- Align progress bars by largest name length (#13266)
- Reinstall local packages in
uv add(#13462)- Rename
--raw-sourcesto--raw(#13348)- Show 'Downgraded' when
self updateis used to install an older version (#13340)- Suggest
uv self updateif required uv version is newer (#13305)- Add 3.14 beta images to uv Docker images (#13390)
- Add comma after "i.e." in Conda environment error (#13423)
- Be more precise in unpinned packages warning (#13426)
- Fix detection of sorted dependencies when include-group is used (#13354)
- Fix display of HTTP responses in trace logs for retry of errors (#13339)
- Log skip reasons during Python installation key interpreter match checks (#13472)
- Redact credentials when displaying URLs (#13333)
Bug fixes
- Avoid erroring on
pylock.tomldependency entries (#13384)- Avoid panics for cannot-be-a-base URLs (#13406)
- Ensure cached realm credentials are applied if no password is found for index URL (#13463)
- Fix
.tgzparsing to respect true extension (#13382)- Fix double self-dependency (#13366)
- Reject
pylock.tomlinuv add -r(#13421)- Retain dot-separated wheel tags during cache prune (#13379)
- Retain trailing comments after PEP 723 metadata block (#13460)
Documentation
Preview features
- Build backend: Normalize glob paths (#13465)
0.7.3
Enhancements
- Add
--dry-runsupport touv self update(#9829)- Add
--show-withtouv tool listto list packages included by--with(#13264)- De-duplicate fetched index URLs (#13205)
- Support more zip compression formats: bzip2, lzma, xz, zstd (#13285)
- Add support for downloading GraalPy (#13172)
- Improve error message when a virtual environment Python symlink is broken (#12168)
... (truncated)
Commits
6fbcd09Bump version to 0.7.4 (#13473)e92c178Log skip reasons during Python installation key interpreter match checks (#13...18a1f0dBuild backend: Normalize glob paths (#13465)7a83f51Reinstall local packages inuv add(#13462)dfa1b95Issue template: Please include the complete error message (#13451)7261edeRefactor build backend testing (#13464)4ea44beEnsure cached realm credentials are applied if no password is found for index...12860a9Remove extra newline (#13461)2d4d93aProgressReporter: align progress bars by largest name length (#13266)b326bb9Retain trailing comments after PEP 723 metadata block (#13460)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)