Home Original page

chore(deps-dev): Update uv requirement from 0.8.15 to 0.8.17 by dependabot[bot] · Pull Request #968 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.8.17

Release Notes

Released on 2025-09-10.

Enhancements

  • Improve error message for HTTP validation in auth services (#15768)
  • Respect PYX_API_URL when suggesting uv auth login on 401 (#15774)
  • Add pyx as a supported PyTorch index URL (#15769)

Bug fixes

  • Avoid initiating login flow for invalid API keys (#15773)
  • Do not search for a password for requests with a token attached already (#15772)
  • Filter pre-release Python versions in uv init --script (#15747)

Install uv 0.8.17

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.8.17/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.8.17/uv-installer.ps1 | iex"

Download uv 0.8.17

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-loongarch64-unknown-linux-gnu.tar.gz LOONGARCH64 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.8.17

Released on 2025-09-10.

Enhancements

  • Improve error message for HTTP validation in auth services (#15768)
  • Respect PYX_API_URL when suggesting uv auth login on 401 (#15774)
  • Add pyx as a supported PyTorch index URL (#15769)

Bug fixes

  • Avoid initiating login flow for invalid API keys (#15773)
  • Do not search for a password for requests with a token attached already (#15772)
  • Filter pre-release Python versions in uv init --script (#15747)

0.8.16

Enhancements

  • Allow --editable to override editable = false annotations (#15712)
  • Allow editable = false for workspace sources (#15708)
  • Show a dedicated error for virtual environments in source trees on build (#15748)
  • Support Android platform tags (#15646)
  • Support iOS platform tags (#15640)
  • Support scripts with inline metadata in --with-requirements and --requirements (#12763)

Preview features

  • Support --no-project in uv format (#15572)
  • Allow uv format in unmanaged projects (#15553)

Bug fixes

  • Avoid erroring when match-runtime target is optional (#15671)
  • Ban empty usernames and passwords in uv auth (#15743)
  • Error early for parent path in build backend (#15733)
  • Retry on IO errors during HTTP/2 streaming (#15675)
  • Support recursive requirements and constraints inclusion (#15657)
  • Use token store credentials for uv publish (#15759)
  • Fix virtual environment activation script compatibility with latest nushell (#15272)
  • Skip Python interpreters that cannot be queried with permission errors (#15685)

Documentation

  • Clarify that uv auth commands take a URL (#15664)
  • Improve the CLI help for options that accept requirements files (#15706)
  • Adds example for caching for managed Python downloads in Docker builds (#15689)

0.8.15

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)