mirrors/uv
1
0
Fork 0
mirror of https://github.com/astral-sh/uv.git synced 2025-07-07 13:25:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

..

Browse source
This commit is contained in:
John Mumm 2025-05-01 10:28:13 +02:00
parent c9f2dfbab6
commit 976ecc8dfc
No known key found for this signature in database
GPG key ID: 08EFBF1E7471E2CF
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
crates/uv-configuration/src/build_options.rs
View file

@ -327,7 +327,7 @@ pub enum IndexStrategy {
/// but ignore any authentication failures.
///
/// This is more secure than pip's behavior but is still vulnerable to dependency confusion
/// if we encounter an authentication failure at an earlier index.
/// if we encounter an authentication failure at a higher-priority index.
#[cfg_attr(feature = "clap", clap(alias = "unsafe-first-index"))]
UnsafeFirstIndex,
/// Search for every package name across all indexes, exhausting the versions from the first

2
uv.schema.json generated
View file

@ -949,7 +949,7 @@
]
},
{
"description": "Only use results from the first index that returns a match for a given package name, but ignore any authentication failures.\n\nThis is more secure than pip's behavior but is still vulnerable to dependency confusion if we encounter an authentication failure at an earlier index.",
"description": "Only use results from the first index that returns a match for a given package name, but ignore any authentication failures.\n\nThis is more secure than pip's behavior but is still vulnerable to dependency confusion if we encounter an authentication failure at a higher-priority index.",
"type": "string",
"enum": [
"unsafe-first-index"