chore(deps-dev): Update uv requirement from 0.7.16 to 0.7.19 by dependabot[bot] · Pull Request #927 · CycloneDX/cyclonedx-python
Updates the requirements on uv to permit the latest version.
Release notes
Sourced from uv's releases.
0.7.19
Release Notes
The uv build backend is now stable, and considered ready for production use.
The uv build backend is a great choice for pure Python projects. It has reasonable defaults, with the goal of requiring zero configuration for most users, but provides flexible configuration to accommodate most Python project structures. It integrates tightly with uv, to improve messaging and user experience. It validates project metadata and structures, preventing common mistakes. And, finally, it's very fast —
uv syncon a new project (fromuv init) is 10-30x faster than with other build backends.To use uv as a build backend in an existing project, add
uv_buildto the[build-system]section in yourpyproject.toml:[build-system] requires = ["uv_build>=0.7.19,<0.8.0"] build-backend = "uv_build"In a future release, it will replace
hatchlingas the default inuv init. As before, uv will remain compatible with all standards-compliant build backends.Python
- Add PGO distributions of Python for aarch64 Linux, which are more optimized for better performance
See the python-build-standalone release for more details.
Enhancements
- Ignore Python patch version for
--universalpip compile (#14405)- Update the tilde version specifier warning to include more context (#14335)
- Clarify behavior and hint on tool install when no executables are available (#14423)
Bug fixes
- Make project and interpreter lock acquisition non-fatal (#14404)
- Includes
sys.prefixin cached environment keys to avoid--withcollisions across projects (#14403)Documentation
- Add a migration guide from pip to uv projects (#12382)
Install uv 0.7.19
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.7.19/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.7.19/uv-installer.ps1 | iex" </tr></table>
... (truncated)
Changelog
Sourced from uv's changelog.
0.7.19
The uv build backend is now stable, and considered ready for production use.
The uv build backend is a great choice for pure Python projects. It has reasonable defaults, with the goal of requiring zero configuration for most users, but provides flexible configuration to accommodate most Python project structures. It integrates tightly with uv, to improve messaging and user experience. It validates project metadata and structures, preventing common mistakes. And, finally, it's very fast —
uv syncon a new project (fromuv init) is 10-30x faster than with other build backends.To use uv as a build backend in an existing project, add
uv_buildto the[build-system]section in yourpyproject.toml:[build-system] requires = ["uv_build>=0.7.19,<0.8.0"] build-backend = "uv_build"In a future release, it will replace
hatchlingas the default inuv init. As before, uv will remain compatible with all standards-compliant build backends.Python
- Add PGO distributions of Python for aarch64 Linux, which are more optimized for better performance
See the python-build-standalone release for more details.
Enhancements
- Ignore Python patch version for
--universalpip compile (#14405)- Update the tilde version specifier warning to include more context (#14335)
- Clarify behavior and hint on tool install when no executables are available (#14423)
Bug fixes
- Make project and interpreter lock acquisition non-fatal (#14404)
- Includes
sys.prefixin cached environment keys to avoid--withcollisions across projects (#14403)Documentation
- Add a migration guide from pip to uv projects (#12382)
0.7.18
Python
Added arm64 Windows Python 3.11, 3.12, 3.13, and 3.14
These are not downloaded by default, since x86-64 Python has broader ecosystem support on Windows. However, they can be requested with
cpython-<version>-windows-aarch64.See the python-build-standalone release for more details.
Enhancements
... (truncated)
Commits
38ee6ecBump version to 0.7.19 (#14431)71b5ba1Stabilize the uv build backend (#14311)5f2857aAdd linux aarch64 smoke tests (#14427)a58969fFixworkspace_unsatisfiable_member_dependencies(#14429)3bb8ac6Sync latest Python releases (#14426)ec54dceIncludessys.prefixin cached environment keys to avoid--withcollisions...a6bb65cClarify behavior and hint on tool install when no executables are available (...743260bMake project and interpreter lock acquisition non-fatal (#14404)2f53ea5Add a migration guide from pip to uv projects (#12382)a9ea756Ignore Python patch version for--universalpip compile (#14405)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)