Home Original page

chore(deps-dev): Update uv requirement from 0.7.19 to 0.7.20 by dependabot[bot] · Pull Request #933 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.7.20

Release Notes

Python

  • Add Python 3.14.0b4
  • Add zstd support to Python 3.14 on Unix (it already was available on Windows)
  • Add PyPy 7.3.20 (for Python 3.11.13)

See the PyPy and python-build-standalone release notes for more details.

Enhancements

  • Add --workspace flag to uv add (#14496)
  • Add auto-detection for Intel GPUs (#14386)
  • Drop trailing arguments when writing shebangs (#14519)
  • Add debug message when skipping Python downloads (#14509)
  • Add support for declaring multiple modules in namespace packages (#14460)

Bug fixes

  • Revert normalization of trailing slashes on index URLs (#14511)
  • Fix forced resolution with all extras in uv version (#14434)
  • Fix handling of pre-releases in preferences (#14498)
  • Remove transparent variants in uv-extract to enable retries (#14450)

Rust API

  • Add method to get packages involved in a NoSolutionError (#14457)
  • Make ErrorTree for NoSolutionError public (#14444)

Documentation

  • Finish incomplete sentence in pip migration guide (#14432)
  • Remove cache-dependency-glob examples for setup-uv (#14493)
  • Remove uv pip sync suggestion with pyproject.toml (#14510)
  • Update documentation for GitHub to use setup-uv@v6 (#14490)

Install uv 0.7.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.7.20/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.7.20/uv-installer.ps1 | iex"
</tr></table>

... (truncated)

Changelog

Sourced from uv's changelog.

0.7.20

Python

  • Add Python 3.14.0b4
  • Add zstd support to Python 3.14 on Unix (it already was available on Windows)
  • Add PyPy 7.3.20 (for Python 3.11.13)

See the PyPy and python-build-standalone release notes for more details.

Enhancements

  • Add --workspace flag to uv add (#14496)
  • Add auto-detection for Intel GPUs (#14386)
  • Drop trailing arguments when writing shebangs (#14519)
  • Add debug message when skipping Python downloads (#14509)
  • Add support for declaring multiple modules in namespace packages (#14460)

Bug fixes

  • Revert normalization of trailing slashes on index URLs (#14511)
  • Fix forced resolution with all extras in uv version (#14434)
  • Fix handling of pre-releases in preferences (#14498)
  • Remove transparent variants in uv-extract to enable retries (#14450)

Rust API

  • Add method to get packages involved in a NoSolutionError (#14457)
  • Make ErrorTree for NoSolutionError public (#14444)

Documentation

  • Finish incomplete sentence in pip migration guide (#14432)
  • Remove cache-dependency-glob examples for setup-uv (#14493)
  • Remove uv pip sync suggestion with pyproject.toml (#14510)
  • Update documentation for GitHub to use setup-uv@v6 (#14490)

0.7.19

The uv build backend is now stable, and considered ready for production use.

The uv build backend is a great choice for pure Python projects. It has reasonable defaults, with the goal of requiring zero configuration for most users, but provides flexible configuration to accommodate most Python project structures. It integrates tightly with uv, to improve messaging and user experience. It validates project metadata and structures, preventing common mistakes. And, finally, it's very fast — uv sync on a new project (from uv init) is 10-30x faster than with other build backends.

To use uv as a build backend in an existing project, add uv_build to the [build-system] section in your pyproject.toml:

[build-system]
requires = ["uv_build>=0.7.19,<0.8.0"]
build-backend = "uv_build"

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)