4831 commits

Author	SHA1	Message	Date
Zanie Blue	a4cec56dca	Bump to 0.6.14 (#12786)	2025-04-09 16:29:25 -05:00
github-actions[bot]	1099867681	Sync latest Python releases (#12784) ... Automated update for Python releases. Co-authored-by: zanieb <2586601+zanieb@users.noreply.github.com>	2025-04-09 12:32:00 -05:00
konsti	a45ca9a36d	Build backend: Check module dir exists for sdist build (#12779) ... Check that the source and module directory exist when build a source distribution, instead of delaying the check to building the wheel. This prevents building source distributions that can never be built into wheels.	2025-04-09 15:47:01 +00:00
leiserfg	980599f4fa	Fix sdist with long directories (#12764) ... I removed the `set_cksum` as the value of it is replaced inside of `append_data`. ## Summary This should fix #12762 but I don't know how to test it. --------- Co-authored-by: konstin <konstin@mailbox.org>	2025-04-09 13:01:21 +00:00
konsti	173d6f73d3	Add uv-build and uv_build aliases to uv init --build-backend (#12776) ... This matches similar aliases for pdm/pdm-backend and hatch/hatchling.	2025-04-09 12:33:38 +00:00
Charlie Marsh	d99983a630	Avoid querying GitHub on repeated install invocations (#12767) ... ## Summary If you run `cargo run pip install "pip-test-package @ git+https://github.com/pypa/pip-test-package@5547fa909e83df8bd743d3978d6667497983a4b7"` repeatedly, then every time, we'll take the "GitHub fast path" every time, even if the package is already cached. This PR adds logic to skip the fast path if the reference looks like a commit that we've already checked out. Closes https://github.com/astral-sh/uv/issues/12760.	2025-04-08 22:00:40 -04:00
Charlie Marsh	3ece75fc12	Error when tool.uv.sources is set in system-level configuration file (#12757) ... ## Summary I think the lack of enforcement here is an oversight. We _do_ already enforce this for user-level configuration files (contrary to the issue -- at least, in my testing and from reading the code). Closes https://github.com/astral-sh/uv/issues/12753.	2025-04-08 17:01:12 -04:00
Charlie Marsh	8a1967d299	Split workspace members onto their own lines in uv init (#12756) ... ## Summary See the test cases. Previously, you could end up with something like: ```toml [tool.uv.workspace] members = [ "foo", "bar", "baz", "bop", ] ```	2025-04-08 19:51:23 +00:00
Christopher Tee	7921667ced	Emit dedicated error message for Conda environment.yml files (#12669) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary Fixes #12606. Two options considered, thanks to @zanieb's guidance are: 1. Special-casing on parse error and encountering the `environment.yml` filename, possibly at `RequirementsTxt::parse` 2. Adding a new `RequirementsSource::EnvironmentYml` variant and erroring on `RequirementSpecification::from_source` I went with the latter for the following reasons: - This edge case is explicitly modelled within the type system. However, it changes the semantics of `RequirementsSource` to also model _unsupported_ sources. - (**Separation of concerns**) The special-casing would occur in the `uv-requirements-txt` crate, which seems to be relatively deep in the guts of the codebase. In my opinion, maintainers working in `uv-requirements-txt` would reasonably assume the input file to be a `requirements.txt` file, instead of having to be concerned with it being another file format (`environment.yml`, `pyproject.toml`, etc.) <!-- What's the purpose of the change? What does it do, and why? --> ## Test Plan Manually tested as follows: ```sh >>> cargo run -- pip install -r environment.yml error: Conda environment file `environment.yml` is not supported >>> cargo run -- add -r environment.yml error: Conda environment file `environment.yml` is not supported ``` If you can point me to the appropriate test module, I can write up tests for these to use `insta`. <!-- How was it tested? -->	2025-04-07 18:11:43 -05:00
Zanie Blue	8ea34b56a1	Extend the reference documentation for uv pip sync (#12683) ... See https://github.com/astral-sh/uv/issues/12680	2025-04-07 22:40:26 +00:00
Charlie Marsh	a0f5c7250b	Avoid infinite loop in uv export with conflicts (#12726) ... ## Summary Closes https://github.com/astral-sh/uv/issues/12695. Closes https://github.com/astral-sh/uv/issues/12719.	2025-04-07 19:10:58 +00:00
Zanie Blue	1cca93c099	Bump version to 0.6.13 (#12725)	2025-04-07 13:44:32 -05:00
Charlie Marsh	ce3affa07e	Unset SCRIPT_PATH in relocatable activation script (#12672) ... ## Summary Restore it if it was previously set, etc. Closes https://github.com/astral-sh/uv/issues/12662.	2025-04-07 13:11:47 -05:00
Meitar Reihan	2b62f73064	Add UV_PYTHON_DOWNLOADS_JSON_URL to set custom managed python sources (#10939) ... ## Summary Add an option to overwrite the list of available Python downloads from a local JSON file by using the environment variable `UV_PYTHON_DOWNLOADS_JSON_URL` as an experimental support for providing custom sources for Python distribution binaries #8015 related #10203 I probably should make the JSON to be fetched from a remote URL instead of a local file. please let me know what you think and I will modify the code accordingly. ## Test Plan ### normal run ``` root@75c66494ba8b:/# /code/target/release/uv python list cpython-3.14.0a4+freethreaded-linux-x86_64-gnu <download available> cpython-3.14.0a4-linux-x86_64-gnu <download available> cpython-3.13.1+freethreaded-linux-x86_64-gnu <download available> cpython-3.13.1-linux-x86_64-gnu <download available> cpython-3.12.8-linux-x86_64-gnu <download available> cpython-3.11.11-linux-x86_64-gnu <download available> cpython-3.10.16-linux-x86_64-gnu <download available> cpython-3.9.21-linux-x86_64-gnu <download available> cpython-3.8.20-linux-x86_64-gnu <download available> cpython-3.7.9-linux-x86_64-gnu <download available> pypy-3.10.14-linux-x86_64-gnu <download available> pypy-3.9.19-linux-x86_64-gnu <download available> pypy-3.8.16-linux-x86_64-gnu <download available> pypy-3.7.13-linux-x86_64-gnu <download available> ``` ### empty JSON file ```sh root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=/code/crates/uv-python/my-download-metadata.json root@75c66494ba8b:/# cat $UV_PYTHON_DOWNLOADS_JSON_URL {} root@75c66494ba8b:/# /code/target/release/uv python list root@75c66494ba8b:/# ``` ### JSON file with valid version ```sh root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=/code/crates/uv-python/my-download-metadata.json root@75c66494ba8b:/# cat $UV_PYTHON_DOWNLOADS_JSON_URL { "cpython-3.11.9-linux-x86_64-gnu": { "name": "cpython", "arch": { "family": "x86_64", "variant": null }, "os": "linux", "libc": "gnu", "major": 3, "minor": 11, "patch": 9, "prerelease": "", "url": "20240814/cpython-3.11.9%2B20240814-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz", "sha256": "daa487c7e73005c4426ac393273117cf0e2dc4ab9b2eeda366e04cd00eea00c9", "variant": null } } root@75c66494ba8b:/# /code/target/release/uv python list cpython-3.11.9-linux-x86_64-gnu <download available> root@75c66494ba8b:/# ``` ### Remote Path ```sh root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=http://a.com/file.json root@75c66494ba8b:/# /code/target/release/uv python list error: Remote python downloads JSON is not yet supported, please use a local path (without `file://` prefix) ``` --------- Co-authored-by: Aria Desires <aria.desires@gmail.com>	2025-04-07 13:55:00 -04:00
Aria Desires	c0ed5693a7	only warn if CRC appears to be missing (#12722) ... an alternative to #12706 fixes #12694	2025-04-07 12:49:05 -05:00
renovate[bot]	2f297b179d	Update Rust crate mimalloc to v0.1.45 (#12704)	2025-04-07 10:01:04 -04:00
Charlie Marsh	c4fd34f063	Use Credentials abstraction in uv-publish (#12682) ... ## Summary I noticed that we aren't using these here -- we have a separate username and password situation.	2025-04-04 19:07:51 -04:00
justin	1ff7265e8a	respect --offline flag for git cli operations (#12619) ... ## Summary closes #12234 [fetch_with_cli](e0f81f0d4a/crates/uv-git/src/git.rs (L573)) doesn't respect the registry client's [connectivity setting](e0f81f0d4a/crates/uv-client/src/registry_client.rs (L1009)) - this pr updates `fetch_with_cli` to set `GIT_ALLOW_PROTOCOL=file` when the client's connectivity setting is `Connectivity::Offline` ## Test Plan E2E ```sh cargo run add "pycurl @ git+https://github.com/pycurl/pycurl.git" --directory ~/src/offline-test/ --offline ``` ```sh Compiling uv-cli v0.0.1 (/Users/justinchapman/src/uv/crates/uv-cli) Compiling uv v0.6.11 (/Users/justinchapman/src/uv/crates/uv) Finished `dev` profile [unoptimized + debuginfo] target(s) in 4.47s Running `target/debug/uv add 'pycurl @ git+https://github.com/pycurl/pycurl.git' --directory /Users/justinchapman/src/offline-test/ --offline` Updating https://github.com/pycurl/pycurl.git (HEAD) × Failed to download and build `pycurl @ git+https://github.com/pycurl/pycurl.git` ├─▶ Git operation failed ├─▶ failed to fetch into: /Users/justinchapman/.cache/uv/git-v0/db/9a596e5213c3162d ╰─▶ process didn't exit successfully: `/usr/bin/git fetch --force --update-head-ok 'https://github.com/pycurl/pycurl.git' '+HEAD:refs/remotes/origin/HEAD'` (exit status: 128) --- stderr fatal: transport 'https' not allowed help: If you want to add the package regardless of the failed resolution, provide the `--frozen` flag to skip locking and syncing. ``` --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-04-04 11:02:54 -05:00
Charlie Marsh	42dcea0ee2	Bump MSRV to 1.84 (#12670) ... ## Summary Closes https://github.com/astral-sh/uv/issues/12649.	2025-04-04 11:49:26 -04:00
Charlie Marsh	420fc287fa	Reject pyproject.toml files in uv pip compile -o (#12673) ... ## Summary Closes https://github.com/astral-sh/uv/issues/12646.	2025-04-04 14:09:51 +00:00
Zanie Blue	ac145d8150	Skip repeated directories in PATH when searching for Python interpreters (#12367) ... Closes https://github.com/astral-sh/uv/issues/12302 The change is visible in [this commit](49be22dad9).	2025-04-03 11:13:07 -05:00
Zanie Blue	be3d5dfa84	Add --show-version to uv python find (#12376) ... @jtfmumm mentioned a desire for this. I'm not sure how we should do this. I kind of want to change this to something like... ``` $ uv python find CPython 3.13 @ <path> $ uv python find --only-path <path> $ uv python find --short <path> $ uv python find --only-version 3.13 ``` The change in defaults would be breaking though.	2025-04-03 08:34:45 -05:00
Jo	a6c621d4a5	Remove --no-config warning from uv pip compile and uv pip sync (#12642) ... uv has a global `--no-config` option, which indeed has an effect. ## Test Plan ```console ❯ cat pyproject.toml [project] name = "hello" version = "0.1.0" [[tool.uv.index]] url = "http://non-exist-host.com/simple" default = true ❯ echo requests | uv pip compile - ⠦ Resolving dependencies... error: Failed to fetch: `http://non-exist-host.com/simple/requests/` Caused by: Could not connect, are you offline? Caused by: Request failed after 3 retries Caused by: error sending request for url (http://non-exist-host.com/simple/requests/) Caused by: client error (Connect) Caused by: dns error: failed to lookup address information: nodename nor servname provided, or not known Caused by: failed to lookup address information: nodename nor servname provided, or not known # Before ❯ echo requests | uv pip compile --no-config - warning: pip-compile's `--no-config` has no effect (uv does not use a configuration file) Resolved 5 packages in 13ms # This file was autogenerated by uv via the following command: # uv pip compile --no-config - certifi==2025.1.31 # via requests charset-normalizer==3.4.1 # via requests idna==3.10 # via requests requests==2.32.3 urllib3==2.3.0 # via requests # After ❯ echo requests | uv pip compile --no-config - Resolved 5 packages in 13ms # This file was autogenerated by uv via the following command: # uv pip compile --no-config - certifi==2025.1.31 # via requests charset-normalizer==3.4.1 # via requests idna==3.10 # via requests requests==2.32.3 urllib3==2.3.0 # via requests ```	2025-04-03 08:52:29 -04:00
Tom Boshoven	e4e03833fc	[docs] Fix suggestion for index strategy (#12634) ... ## Summary Fix a suggestion in the docs on configs through environment variables, which lists an option value that doesn't appear to exist. The description implies that `unsafe-best-match` was intended here. ## Test Plan Verified by providing `unsafe-any-match` as a parameter to `uv`. It didn't error, but appeared to use the `first-index` strategy instead. The value I changed it to behaves as described by the documentation.	2025-04-02 15:22:28 -05:00
Zanie Blue	4a9dd27179	Bump to 0.6.12 (#12637)	2025-04-02 15:22:15 -05:00
Zanie Blue	12e63eb1ed	Report the queried executable path in uv python list (#12628) ... In an attempt to avoid reporting shims as their resolved `sys.executable` path, we report the queried executable path instead. This seems more correct for this command, broadly? Interestingly, it changes the reported paths for Homebrew Python <img width="1430" alt="Screenshot 2025-04-02 at 11 05 18 AM" src="https://github.com/user-attachments/assets/0e1600e8-fb07-40c7-a6d6-56eaeb4b9293" /> Closes #9979	2025-04-02 14:24:58 -05:00
John Mumm	72f34157c6	Include explicit indexes in URL auth policies list (#12631) ... This will in principle fix the problem reported in #12611 that `authenticate = "always"` is ignored for an index when `explicit = true`. This change ensures all indexes are added to the URL auth policies list passed to our auth middleware. Incorporates #12624 Fixes #12611 --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-04-02 12:54:31 -05:00
Aria Desires	992f54ec17	improve archive error messages (#12627)	2025-04-02 15:57:00 +00:00
Aria Desires	9eaa9f789b	enforce crc32 checks when using async-zip (#12623) ... Fixes #12618 Instead of succeeding the user now gets: ``` uvdloc pip install osqp==1.0.2 --reinstall --python-platform=linux Resolved 7 packages in 171ms × Failed to download `osqp==1.0.2` ├─▶ Failed to extract archive ╰─▶ a computed CRC32 value did not match the expected value ``` I am not entirely sure if we have infra for testing this kind of thing, but it would be nice to check in a test or two. I'm also not entirely clear if there's any cases where these checks are overzealous.	2025-04-02 15:21:25 +00:00
Charlie Marsh	f491aa0f58	Add Bearer support to Credentials (#12610) ... ## Summary I noticed that these only support Basic credentials, but we may want to allow users to provide Bearer tokens? This PR just generalizes the type.	2025-04-01 17:48:21 -04:00
Aria Desires	c6e6478f66	fix parsing of python-platform in settings tomls (#12592) ... serde needs to be told where to put underscores. someone clearly noticed this when adding attributes for schemars, but they need to be present for serde too and then schemars gets them for free. Strictly speaking this would be a breaking change for anyone who noticed the parsing was messed up and worked around it. So we add aliases for backcompat, at least for a few releases. Fixes #12590	2025-04-01 09:08:35 -04:00
Charlie Marsh	3dad8fef2d	Normalize extra and group names in uv add and uv remove (#12586) ... ## Summary Closes https://github.com/astral-sh/uv/issues/12585.	2025-03-31 10:51:28 -04:00
Charlie Marsh	fe7fc323dd	Bump version to v0.6.11 (#12535)	2025-03-30 15:35:42 -04:00
Nozomi R	ac2dcd658e	Support UV_PROJECT environment to set project directory. (#12327) ... ## Summary <!-- What's the purpose of the change? What does it do, and why? --> Support the `UV_PROJECT` environment variable to set the project directory. #11946 ## Test Plan <!-- How was it tested? --> `cargo nextest run` passed except the cache_prune. ``` export UV_PROJECT=/path/to/project uv sync ``` works. Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>	2025-03-30 15:12:02 -04:00
Charlie Marsh	56914c9c60	Use Entry API in lockfile-to-requirements.txt construction (#12561)	2025-03-30 18:49:36 +00:00
Charlie Marsh	2a28dacf28	Respect transitive dependencies in uv tree --only-group (#12560) ... ## Summary The overall strategy here is to make this code look more like `requirements_txt.rs`: we seed the root members, then perform a DFS. Previously, we created all nodes upfront, which caused problems when using `--only-group`, since we'd omit "production" dependencies of development dependencies. Closes https://github.com/astral-sh/uv/issues/12526.	2025-03-30 14:48:47 -04:00
Zohar Meir	ab3bab1421	Add dependents ("via ..." comments) in export command (#12350) ... Adding dependency trace/parent comments ("via ...") to the export command output. This is a similar behavior to the pip compile output. #### Note to the eager reviewer: First of all - thanks! Secondly, this is still a very rough draft. These are the first lines of code I've ever written in Rust. This is still mostly an educational/fun exercise for myself. If opening a Draft PR is creating too much noise - I apologize and I will close it until it is ready. ## Summary Resolves #7777 ## Test Plan - [X] manual command execution - [x] update expected output in tests --------- Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>	2025-03-28 10:37:53 -04:00
Charlie Marsh	c6fb1216ff	Avoid writing empty requires-python to script blocks (#12517) ... ## Summary I don't know if we ever do this in practice, but we _do_ do it in tests.	2025-03-28 10:26:51 -04:00
Charlie Marsh	175017bf51	Bump least-recent non-EOL macOS version to 13.0 (#12518) ... ## Summary We use the least-recent non-EOL macOS version by default, and this has since changed (i.e., macOS 12 went EOL). Closes https://github.com/astral-sh/uv/issues/12487.	2025-03-28 07:49:45 -04:00
Merlin	5b2a8abef9	Add a newline after metadata when initializing scripts with other metadata blocks (#12501) ... ## Summary uv doesn't separate the metadata block from other blocks when adding the `script` block to a script, which results in the next block being considered part of the script block and causes errors when running. See #12499 for more details. Closes #12499 ## Test Plan I manually tested the most common scenario, but there's a few edge cases that would be good to have tests for. I would have written the tests also, but I was running into errors like this: ```bash $ cargo test --package uv-scripts Compiling uv-configuration v0.0.1 (/home/merlin/Projects/uv/crates/uv-configuration) error: cannot find attribute `value` in this scope --> crates/uv-configuration/src/project_build_backend.rs:8:38 | 8 | #[cfg_attr(feature = "schemars", value(hide = true))] | ^^^^^ error: could not compile `uv-configuration` (lib) due to 1 previous error ``` --------- Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>	2025-03-27 21:39:29 +00:00
Charlie Marsh	9e10f83ce7	Respect build constraints in uv sync (#12502) ... ## Summary There are still a few missing sites that we need to audit: - `uv tool install` (https://github.com/astral-sh/uv/issues/12496) - `uv tool run` (https://github.com/astral-sh/uv/issues/12496) - The `--with` dependencies in `uv run --with` (https://github.com/astral-sh/uv/issues/12505) Closes #12441.	2025-03-27 17:11:50 -04:00
Charlie Marsh	50cf7d19b0	Use a boxed slice for various requirement types (#12514) ... ## Summary Sorry I had five mins in between things.	2025-03-27 17:09:26 -04:00
Zanie Blue	6a13e4cedd	Bump pinned Python versions (#12515) ... Moves us to the latest patch for our test Python versions.	2025-03-27 20:16:10 +00:00
Charlie Marsh	7cb85fa08f	Remove TODOs around caching workspace discovery (#12510) ... ## Summary This happened!	2025-03-27 16:25:09 +00:00
John Mumm	882e2f9d3f	Improve trace message in auth middleware (#12497) ... Updated trace message to be clearer.	2025-03-27 15:10:02 +01:00
Charlie Marsh	82de40c2da	Enable necessary optional features in uv-settings (#12504) ... ## Summary We tend not to run tests for individual crates, which can lead to weird situations like this, where crates are missing optional features that are otherwise installed globally. ## Test Plan Run `cargo test --profile fast-build -p uv-scripts`, which otherwise fails to compile.	2025-03-27 02:30:00 +00:00
Charlie Marsh	6e03adc956	Fix schemars macro usage in build backend enum (#12503) ... ## Test Plan ``` cargo test --profile fast-build -p uv-scripts ```	2025-03-27 02:23:21 +00:00
Aria Desires	6c57c90ed3	distinguish -q and -qq (#12300) ... The idea here is that we introduce a new stdout_important method for things that want to care about the difference between "quiet" and "silent". This PR is WIP because it has no actual uses of stdout_important, and we should have at least one before landing this. Perhaps someone has a suggestion for commands that would really benefit from this distinction? Fixes #10431	2025-03-26 16:46:16 -04:00
Charlie Marsh	bd9c365b92	Support --find-links-style "flat" indexes in [[tool.uv.index]] (#12407) ... ## Summary This PR extends `[[tool.uv.index]]` to support `--find-links`-style "flat" indexes, so that users can point to such indexes without using `--find-links` _and_ get access to the full functionality of `[[tool.uv.index]]` (e.g., they can now pin packages to `--find-links`-style indexes). Note that, at present, `--find-links` indexes actually have some quirky behavior, in that we combine them into a single entity and then merge the discovered distributions into each Simple API-style index. The motivation here, IIRC, was to match pip's behavior quite closely. I'm interested in _removing_ that behavior, but it'd be breaking (and may also be inconvenient for some use-cases). So, the behavior for indexes passed in via `--find-links` remains completely unchanged. However, `[[tool.uv.index]]` entries with `format = "flat"` are now treated identically to those defined with `format = "simple"` (the default), in that we stop after we find the first-matching index, etc. Closes https://github.com/astral-sh/uv/issues/11634.	2025-03-25 21:14:44 -04:00
Charlie Marsh	f2a2d982b8	Bump version to v0.6.10 (#12430)	2025-03-25 20:43:41 -04:00