Home Original page

chore(deps-dev): Update uv requirement from 0.7.8 to 0.7.9 by dependabot[bot] · Pull Request #905 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.7.9

Release Notes

Python

The changes reverted in 0.7.8 have been restored.

See the python-build-standalone release notes for more details.

Enhancements

  • Improve obfuscation of credentials in URLs (#13560)
  • Allow running non-default Python implementations via uvx (#13583)
  • Add uvw as alias for uv without console window on Windows (#11786)
  • Allow discovery of x86-64 managed Python builds on macOS (#13722)
  • Differentiate between implicit vs explicit architecture requests (#13723)
  • Implement ordering for Python architectures to prefer native installations (#13709)
  • Only show the first match per platform (and architecture) by default in uv python list (#13721)
  • Write the path of the parent environment to an extends-environment key in the pyvenv.cfg file of an ephemeral environment (#13598)
  • Improve the error message when libc cannot be found, e.g., when using the distroless containers (#13549)

Performance

  • Avoid rendering info log level (#13642)
  • Improve performance of uv-python crate's manylinux submodule (#11131)
  • Optimize Version display (#13643)
  • Reduce number of reference-checks for uv cache clean (#13669)

Bug fixes

  • Avoid reinstalling dependency group members with --all-packages (#13678)
  • Don't fail direct URL hash checking with dependency metadata (#13736)
  • Exit early on self update if global --offline is set (#13663)
  • Fix cases where the uv lock is incorrectly marked as out of date (#13635)
  • Include pre-release versions in uv python install --reinstall (#13645)
  • Set LC_ALL=C for git when checking git worktree (#13637)
  • Avoid rejecting Windows paths for remote Python download JSON targets (#13625)

Preview

  • Add uv add --bounds to configure version constraints (#12946)

Documentation

  • Add documentation about Python versions to Tools concept page (#7673)
  • Add example of enabling Dependabot (#13692)
  • Fix exclude-newer date format for persistent configuration files (#13706)
  • Quote versions variables in GitLab documentation (#13679)

... (truncated)

Changelog

Sourced from uv's changelog.

0.7.9

Python

The changes reverted in 0.7.8 have been restored.

See the python-build-standalone release notes for more details.

Enhancements

  • Improve obfuscation of credentials in URLs (#13560)
  • Allow running non-default Python implementations via uvx (#13583)
  • Add uvw as alias for uv without console window on Windows (#11786)
  • Allow discovery of x86-64 managed Python builds on macOS (#13722)
  • Differentiate between implicit vs explicit architecture requests (#13723)
  • Implement ordering for Python architectures to prefer native installations (#13709)
  • Only show the first match per platform (and architecture) by default in uv python list (#13721)
  • Write the path of the parent environment to an extends-environment key in the pyvenv.cfg file of an ephemeral environment (#13598)
  • Improve the error message when libc cannot be found, e.g., when using the distroless containers (#13549)

Performance

  • Avoid rendering info log level (#13642)
  • Improve performance of uv-python crate's manylinux submodule (#11131)
  • Optimize Version display (#13643)
  • Reduce number of reference-checks for uv cache clean (#13669)

Bug fixes

  • Avoid reinstalling dependency group members with --all-packages (#13678)
  • Don't fail direct URL hash checking with dependency metadata (#13736)
  • Exit early on self update if global --offline is set (#13663)
  • Fix cases where the uv lock is incorrectly marked as out of date (#13635)
  • Include pre-release versions in uv python install --reinstall (#13645)
  • Set LC_ALL=C for git when checking git worktree (#13637)
  • Avoid rejecting Windows paths for remote Python download JSON targets (#13625)

Preview

  • Add uv add --bounds to configure version constraints (#12946)

Documentation

  • Add documentation about Python versions to Tools concept page (#7673)
  • Add example of enabling Dependabot (#13692)
  • Fix exclude-newer date format for persistent configuration files (#13706)
  • Quote versions variables in GitLab documentation (#13679)
  • Update Dependabot support status (#13690)

... (truncated)

Commits
  • 13a86a2 Bump version to 0.7.9 (#13739)
  • 483b4c8 Don't fail direct URL hash checking with dependency metadata (#13736)
  • 891fe52 update python build standalone, unblocklist linux updates (#13732)
  • 7310ea7 allow running non-default Python interpreters directly via uvx (#13583)
  • 4cc5291 Allow discovery of x86-64 managed Python builds on macOS (#13722)
  • 0c5ae1f Differentiate between implicit vs explicit architecture requests (#13723)
  • 067b03c Only show the first match per platform (and architecture) by default in `uv p...
  • dfc8533 Implement ordering for Python architectures to prefer native installations (#...
  • 59070b5 Use codspeed runner for wall time benchmarking (#13586)
  • 08f2fa4 make the error message clearer when running distroless containers (#13549)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)