chore(deps-dev): Update uv requirement from 0.9.8 to 0.9.9 by dependabot[bot] · Pull Request #994 · CycloneDX/cyclonedx-python
Updates the requirements on uv to permit the latest version.
Release notes
Sourced from uv's releases.
0.9.9
Release Notes
Released on 2025-11-12.
Deprecations
- Deprecate use of
--projectinuv init(#16674)Enhancements
- Add iOS support to Python interpreter discovery (#16686)
- Reject ambiguously parsed URLs (#16622)
- Allow explicit values in
uv version --bump(#16555)- Warn on use of managed pre-release Python versions when a stable version is available (#16619)
- Allow signing trampolines on Windows by using
.rcdatato store metadata (#15068)- Add
--only-emit-workspaceand similar variants touv export(#16681)Preview features
Configuration
- Add
UV_NO_DEFAULT_GROUPSenvironment variable (#16645)Bug fixes
- Remove
torch-model-archiverandtorch-tb-profilerfrom PyTorch backend (#16655)- Fix Pixi environment detection (#16585)
Documentation
- Fix
CMDpath in FastAPI Dockerfile (#16701)Install uv 0.9.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.9.9/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.9/uv-installer.ps1 | iex"
... (truncated)
Changelog
Sourced from uv's changelog.
0.9.9
Released on 2025-11-12.
Deprecations
- Deprecate use of
--projectinuv init(#16674)Enhancements
- Add iOS support to Python interpreter discovery (#16686)
- Reject ambiguously parsed URLs (#16622)
- Allow explicit values in
uv version --bump(#16555)- Warn on use of managed pre-release Python versions when a stable version is available (#16619)
- Allow signing trampolines on Windows by using
.rcdatato store metadata (#15068)- Add
--only-emit-workspaceand similar variants touv export(#16681)Preview features
Configuration
- Add
UV_NO_DEFAULT_GROUPSenvironment variable (#16645)Bug fixes
- Remove
torch-model-archiverandtorch-tb-profilerfrom PyTorch backend (#16655)- Fix Pixi environment detection (#16585)
Documentation
- Fix
CMDpath in FastAPI Dockerfile (#16701)0.9.8
Released on 2025-11-07.
Enhancements
- Accept multiple packages in
uv export(#16603)- Accept multiple packages in
uv sync(#16543)- Add a
uv cache sizecommand (#16032)- Add prerelease guidance for build-system resolution failures (#16550)
- Allow Python requests to include
+gilto require a GIL-enabled interpreter (#16537)- Avoid pluralizing 'retry' for single value (#16535)
- Enable first-class dependency exclusions (#16528)
- Fix inclusive constraints on available package versions in resolver errors (#16629)
... (truncated)
Commits
4fac4cbBump version to 0.9.9 (#16708)e96354aAlways attach linehaul data (#16705)2c0d166Addonly-emit-workspaceand similar variants touv export(#16681)ae1edefReject ambiguously parsed URLs (#16622)82c6127chore: fix typo in crates/uv-virtualenv/README.md (#16700)c16a5fdFix shell-specific test snapshots (#16688)d32cc63Deny stdout/stderr printing inuvcrate via clippy (#16695)2de987eSkip python_install_emulated_macos except on ARM64 macos with rosetta (#16687)1b38b47Warn on managed prerelease interpreters when a stable build is available (#16...92230baFix CMD path in FastAPI Dockerfile (#16701)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)