Home Original page

chore(deps-dev): Update uv requirement from 0.8.0 to 0.8.14 by dependabot[bot] · Pull Request #961 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.8.14

Release Notes

Python

  • Add managed CPython distributions for aarch64 musl

Enhancements

  • Add --python-platform to uv pip check (#15486)
  • Add an environment variable for UV_ISOLATED (#15428)
  • Add logging to the uv build backend (#15533)
  • Allow more trailing null bytes in zip files (#15452)
  • Allow pinning managed Python versions to specific build versions (#15314)
  • Cache PyTorch wheels by default (#15481)
  • Reject already-installed wheels that don't match the target platform (#15484)
  • Add --no-install-local option to uv sync, uv add and uv export (#15328)
  • Include cycle error message in uv pip CLI (#15453)

Preview features

  • Fix format of {version} on uv format failure (#15527)
  • Lock during installs in uv format to prevent races (#15551)
  • Respect --project in uv format (#15438)
  • Run uv format in the project root (#15440)

Configuration

  • Add file-to-CLI overrides for build isolation configuration (#15437)
  • Add file-to-CLI overrides for reinstall configuration (#15426)

Performance

  • Cache WHEEL and METADATA reads in installed distributions (#15489)

Bug fixes

  • Avoid erroring when creating venv in current working directory (#15537)
  • Avoid introducing unnecessary system dependency on CUDA (#15449)
  • Clear discovered site packages when creating virtual environment (#15522)
  • Read index credentials from the environment during uv publish checks (#15545)
  • Refuse to remove non-virtual environments in uv venv (#15538)
  • Stop setting CLICOLOR_FORCE=1 when calling build backends (#15472)
  • Support file or directory removal for Windows symlinks (#15543)

Documentation

  • Fix GitHub guide highlight lines (#15443)
  • Move Resolver to new Internals section in the Reference (#15465)
  • Split the "Authentication" page into sections (#15575)

... (truncated)

Changelog

Sourced from uv's changelog.

0.8.14

Python

  • Add managed CPython distributions for aarch64 musl

Enhancements

  • Add --python-platform to uv pip check (#15486)
  • Add an environment variable for UV_ISOLATED (#15428)
  • Add logging to the uv build backend (#15533)
  • Allow more trailing null bytes in zip files (#15452)
  • Allow pinning managed Python versions to specific build versions (#15314)
  • Cache PyTorch wheels by default (#15481)
  • Reject already-installed wheels that don't match the target platform (#15484)
  • Add --no-install-local option to uv sync, uv add and uv export (#15328)
  • Include cycle error message in uv pip CLI (#15453)

Preview features

  • Fix format of {version} on uv format failure (#15527)
  • Lock during installs in uv format to prevent races (#15551)
  • Respect --project in uv format (#15438)
  • Run uv format in the project root (#15440)

Configuration

  • Add file-to-CLI overrides for build isolation configuration (#15437)
  • Add file-to-CLI overrides for reinstall configuration (#15426)

Performance

  • Cache WHEEL and METADATA reads in installed distributions (#15489)

Bug fixes

  • Avoid erroring when creating venv in current working directory (#15537)
  • Avoid introducing unnecessary system dependency on CUDA (#15449)
  • Clear discovered site packages when creating virtual environment (#15522)
  • Read index credentials from the environment during uv publish checks (#15545)
  • Refuse to remove non-virtual environments in uv venv (#15538)
  • Stop setting CLICOLOR_FORCE=1 when calling build backends (#15472)
  • Support file or directory removal for Windows symlinks (#15543)

Documentation

  • Fix GitHub guide highlight lines (#15443)
  • Move Resolver to new Internals section in the Reference (#15465)
  • Split the "Authentication" page into sections (#15575)
  • Update uninstall docs to mention uvw.exe needs to be removed (#15536)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)