Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump uv from 0.5.10 to 0.5.18 #1616

Closed
wants to merge 1 commit into from
Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps uv from 0.5.10 to 0.5.18.

Release notes

Sourced from uv's releases.

0.5.18

Release Notes

Bug fixes

  • Avoid forking for identical markers (#10490)
  • Avoid panic in uv remove when only comments exist (#10484)
  • Revert "improve shell compatibility of venv activate scripts (#10397)" (#10497)

Install uv 0.5.18

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.5.18/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/uv/releases/download/0.5.18/uv-installer.ps1 | iex"

Download uv 0.5.18

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

0.5.17

Release Notes

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

... (truncated)

Changelog

Sourced from uv's changelog.

0.5.18

Bug fixes

  • Avoid forking for identical markers (#10490)
  • Avoid panic in uv remove when only comments exist (#10484)
  • Revert "improve shell compatibility of venv activate scripts (#10397)" (#10497)

0.5.17

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

This release also includes support for uv export --script and uv tree --script. Both commands support PEP 723 scripts with and without accompanying lockfiles.

Enhancements

  • Add support for locking PEP 723 scripts (#10135)
  • Respect PEP 723 script lockfiles in uv run (#10136)
  • Update PEP 723 lockfile in uv add --script (#10145)
  • Update PEP 723 lockfile in uv remove --script (#10162)
  • Add --script support to uv export for PEP 723 scripts (#10160)
  • Add --script support to uv tree for PEP 723 scripts (#10159)
  • Add ls alias to uv {tool, python, pip} list (#10240)
  • Allow reading --with-requirements from stdin in uv add and uv run (#10447)
  • Warn-and-ignore for unsupported requirements.txt options (#10420)

Preview features

  • Add remaining Python type annotations to build backend (#10434)

Performance

  • Avoid allocating for names in the PEP 508 parser (#10476)
  • Fetch concurrently for non-first-match index strategies (#10432)
  • Remove unnecessary .to_string() call (#10419)
  • Respect sentinels in package prioritization (#10443)
  • Use ArcStr for marker values (#10453)
  • Use ArcStr for package, extra, and group names (#10475)
  • Use matches! rather than contains in requirements.txt parsing (#10423)
  • Use faster disjointness check for markers (#10439)
  • Pre-compute PEP 508 markers from universal markers (#10472)

Bug fixes

  • Fix UV_FIND_LINKS delimiter to split on commas (#10477)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file maintenance Maintenance task labels Jan 13, 2025
Bumps [uv](https://github.com/astral-sh/uv) from 0.5.10 to 0.5.18.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.5.10...0.5.18)

---
updated-dependencies:
- dependency-name: uv
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/uv-0.5.18 branch from 4a0eace to ac482e6 Compare January 13, 2025 23:29
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 16, 2025

Superseded by #1625.

@dependabot dependabot bot closed this Jan 16, 2025
@dependabot dependabot bot deleted the dependabot/pip/uv-0.5.18 branch January 16, 2025 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file maintenance Maintenance task
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants