Home Original page

chore(deps-dev): Update uv requirement from 0.8.22 to 0.9.2 by dependabot[bot] · Pull Request #980 · CycloneDX/cyclonedx-python

Updates the requirements on uv to permit the latest version.

Release notes

Sourced from uv's releases.

0.9.2

Release Notes

Released on 2025-10-10.

Python

  • Add CPython 3.9.24.
  • Add CPython 3.10.19.
  • Add CPython 3.11.14.
  • Add CPython 3.12.12.

Enhancements

  • Avoid inferring check URLs for pyx in uv publish (#16234)
  • Add uv tool list --show-python (#15814)

Documentation

  • Add missing "added in" to new environment variables in reference (#16217)

Install uv 0.9.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.9.2/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.2/uv-installer.ps1 | iex"

Download uv 0.9.2

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.9.2

Released on 2025-10-10.

Python

  • Add CPython 3.9.24.
  • Add CPython 3.10.19.
  • Add CPython 3.11.14.
  • Add CPython 3.12.12.

Enhancements

  • Avoid inferring check URLs for pyx in uv publish (#16234)
  • Add uv tool list --show-python (#15814)

Documentation

  • Add missing "added in" to new environment variables in reference (#16217)

0.9.1

Released on 2025-10-09.

Enhancements

  • Log Python choice in uv init (#16182)
  • Fix pylock.toml config conflict error messages (#16211)

Configuration

  • Add UV_UPLOAD_HTTP_TIMEOUT and respect UV_HTTP_TIMEOUT in uploads (#16040)
  • Support UV_WORKING_DIRECTORY for setting --directory (#16125)

Bug fixes

  • Allow missing Scripts directory (#16206)
  • Fix handling of Python requests with pre-releases in ranges (#16208)
  • Preserve comments on version bump (#16141)
  • Retry all HTTP/2 errors (#16038)
  • Treat deleted Windows registry keys as equivalent to missing ones (#16194)
  • Ignore pre-release Python versions when a patch version is requested (#16210)

Documentation

  • Document why uv discards upper bounds on requires-python (#15927)
  • Document uv version environment variables were added in (#15196)

0.9.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)