6880 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
renovate[bot]	e44a64ee13	Update Rust crate windows-registry to v0.5.3 (#14359)	2025-06-29 22:18:26 -04:00
renovate[bot]	e9533a0e29	Update aws-actions/configure-aws-credentials digest to 3d8cba3 (#14354)	2025-06-29 22:18:12 -04:00
renovate[bot]	40386e438f	Update Rust crate owo-colors to v4.2.2 (#14357)	2025-06-29 22:17:59 -04:00
renovate[bot]	a8b838dee9	Update astral-sh/setup-uv action to v6.3.1 (#14360)	2025-06-29 22:17:48 -04:00
renovate[bot]	d7e1fced43	Update Rust crate cargo-util to v0.2.21 (#14356)	2025-06-29 22:17:41 -04:00
Charlie Marsh	7603153f5b	Allow alpha, beta, and rc prefixes in tests (#14352) ... ## Summary A bunch of tests currently fail if you try to use a pre-release version. This PR makes the regular expressions more lenient.	2025-06-29 19:30:52 +00:00
Charlie Marsh	d15efb7d91	Add an IntoIterator for FormMetadata (#14351) ... ## Summary Clippy would lint for this if the symbol were public as a matter of API hygiene, so adding it.	2025-06-29 15:07:07 -04:00
Zanie Blue	17b7eec287	Consistently normalize trailing slashes on URLs with no path segments (#14349) ... Alternative to https://github.com/astral-sh/uv/pull/14348	2025-06-29 12:25:10 -05:00
Zanie Blue	c0ebe6871d	Improve trace message for cached Python interpreter query (#14328)	2025-06-29 09:40:29 -05:00
Charlie Marsh	41c218a89b	Bump version to 0.7.17 (#14347)	2025-06-29 09:58:33 -04:00
Charlie Marsh	734b228edf	Drop trailing slashes when converting index URL from URL (#14346) ... ## Summary In #14245, we started normalizing index URLs by dropping the trailing slash in the lockfile. We added tests to ensure that this didn't cause existing lockfiles to be invalidated, but we missed one of the constructors (specifically, the path that's used with `tool.uv.sources`).	2025-06-29 09:36:13 -04:00
Zanie Blue	f9d3f8ea3b	Fix error message ordering for pyvenv.cfg version conflict (#14329) ... These were reversed, and we're missing an "a".	2025-06-29 09:19:05 -04:00
Zanie Blue	ec18f4813a	Fix typo (#14341)	2025-06-28 11:32:03 -05:00
Zanie Blue	0cfbdcec09	Ignore UV_PYTHON_CACHE_DIR when empty (#14336) ... To match our semantics elsewhere	2025-06-28 09:42:27 -05:00
Zanie Blue	608a1020c6	Update the Python query cache comment (#14330)	2025-06-28 09:42:23 -05:00
Zanie Blue	692667cbb0	Use the canonical ImplementationName -> &str implementation (#14337) ... Motivated by some code duplication highlighted in https://github.com/astral-sh/uv/pull/14201, I noticed we weren't taking advantage of the existing implementation for casting to a str here. Unfortunately, we do need a special case for CPython still.	2025-06-28 09:42:18 -05:00
github-actions[bot]	db14cc3005	Sync latest Python releases (#14339) ... Automated update for Python releases. Co-authored-by: zanieb <2586601+zanieb@users.noreply.github.com>	2025-06-28 03:08:53 +00:00
Charlie Marsh	731689e503	Apply build constraints when resolving --with dependencies (#14340) ... ## Summary We were applying these at install time, but not resolve time.	2025-06-28 01:39:35 +00:00
Zanie Blue	b6b7409d13	Bump version to 0.7.16 (#14334)	2025-06-27 16:46:36 -05:00
Aaron Ang	eab938b7b4	Warn users on ~= python version specifier (#14008) ... Close #7426 ## Summary Picking up on #8284, I noticed that the `requires_python` object already has its specifiers canonicalized in the `intersection` method, meaning `~=3.12` is converted to `>=3.12, <4`. To fix this, we check and warn in `intersection`. ## Test Plan Used the same tests from #8284.	2025-06-27 15:48:41 -05:00
Charlie Marsh	6a5d2f1ec4	Share workspace cache between lock and sync operations (#14321) ... ## Summary Closes #14316.	2025-06-27 14:48:40 -04:00
Charlie Marsh	4eef79e5e8	Avoid rendering desugared prefix matches in error messages (#14195) ... ## Summary When the user provides a requirement like `==2.4.*`, we desugar that to `>=2.4.dev0,<2.5.dev0`. These bounds then appear in error messages, and worse, they also trick the error message reporter into thinking that the user asked for a pre-release. This PR adds logic to convert to the more-concise `==2.4.*` representation when possible. We could probably do a similar thing for the compatible release operator (`~=`). Closes https://github.com/astral-sh/uv/issues/14177. Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-06-27 18:06:19 +00:00
John Mumm	f892b8564f	Return Cow from UrlString::with_ methods (#14319) ... A minor performance improvement as a follow-up to #14245 (and an accompanying test).	2025-06-27 13:54:52 -04:00
Zanie Blue	74468dac15	Bump python-build-standalone releases to include 3.14.0b3 (#14301) ... See 20250626	2025-06-27 12:36:07 -05:00
John Mumm	880c5e4949	Ensure preview default Python installs are upgradeable (#14261) ... Python `bin` installations installed with `uv python install --default --preview` (no version specified) were not being installed as upgradeable. Instead each link was pointed at the highest patch version for a minor version. This change ensures that these preview default installations are also treated as upgradeable. The PR includes some updates to the related tests. First, it checks the default install without specified version case. Second, since it's adding more read link checks, it creates a new `read_link` helper method to consolidate repeated logic and replace instances of `#[cfg(unix/windows)` with `if cfg!(unix/windows)`. Fixes #14247	2025-06-27 19:26:28 +02:00
John Mumm	5754f2f2db	Normalize index URLs to remove trailing slash (#14245) ... This PR updates `IndexUrl` parsing to normalize non-file URLs by removing trailing slashes. It also normalizes registry source URLs when using them to validate the lockfile. Prior to this change, when writing an index URL to the lockfile, uv would use a trailing slash if present in the provided URL and no trailing slash otherwise. This can cause surprising behavior. For example, `uv lock --locked` will fail when a package is added with an `--index` value without a trailing slash and then `uv lock --locked` is run with a `pyproject.toml` version of the index URL that contains a trailing slash. This PR fixes this and adds a test for the scenario. It might be safe to normalize file URLs in the same way, but since slashes have a well-defined meaning in the context of files and directories, I chose not to normalize them here. Closes #13707.	2025-06-27 17:11:21 +02:00
John Mumm	a824468c8b	Respect URL-encoded credentials in redirect location (#14315) ... uv currently ignores URL-encoded credentials in a redirect location. This PR adds a check for these credentials to the redirect handling logic. If found, they are moved to the Authorization header in the redirect request. Closes #11097	2025-06-27 16:41:14 +02:00
Charlie Marsh	56266447e2	Bump MSRV and rust-toolchain version (#14303) ... ## Summary Per our versioning policy, we stay two versions back (and 1.88 was released today).	2025-06-27 10:27:45 -04:00
Jack O'Connor	efc361223c	move the test buckets dir into the canonicalized temp dir ... Previously we were using the XDG data dir to avoid symlinks, but there's no particular guarantee that that's not going to be a symlink too. Using the canonicalized temp dir by default is also slightly nicer for a couple reasons: It's sometimes faster (an in-memory tempfs on e.g. Arch), and it makes overriding `$TMPDIR` or `%TMP%` sufficient to control where tests put temp files, without needing to override `UV_INTERNAL__TEST_DIR` too.	2025-06-26 14:56:20 -07:00
Zanie Blue	9ee34dc69b	Fix Indexes::new doc (#14293)	2025-06-26 20:40:40 +00:00
Charlie Marsh	326e4497da	Allow local indexes to reference remote files (#14294) ... ## Summary Previously, we assumed that local indexes only referenced local files. However, it's fine for a local index (like, a `file://`-based Simple API) to reference a remote file, and in fact Pyodide operates this way. Closes https://github.com/astral-sh/uv/issues/14227. ## Test Plan Ran `UV_INDEX=$(pyodide config get package_index) cargo run add anyio`, which produced this lockfile: ```toml version = 1 revision = 2 requires-python = ">=3.13.2" [[package]] name = "anyio" version = "4.9.0" source = { registry = "../../../Library/Caches/.pyodide-xbuildenv-0.30.5/0.27.7/xbuildenv/pyodide-root/package_index" } dependencies = [ { name = "idna" }, { name = "sniffio" }, ] wheels = [ { url = "https://cdn.jsdelivr.net/pyodide/v0.27.7/full/anyio-4.9.0-py3-none-any.whl", hash = "sha256:e1d9180d4361fd71d1bc4a7007fea6cae1d18792dba9d07eaad89f2a8562f71c" }, ] [[package]] name = "foo" version = "0.1.0" source = { virtual = "." } dependencies = [ { name = "anyio" }, ] [package.metadata] requires-dist = [{ name = "anyio", specifier = ">=4.9.0" }] [[package]] name = "idna" version = "3.7" source = { registry = "../../../Library/Caches/.pyodide-xbuildenv-0.30.5/0.27.7/xbuildenv/pyodide-root/package_index" } wheels = [ { url = "https://cdn.jsdelivr.net/pyodide/v0.27.7/full/idna-3.7-py3-none-any.whl", hash = "sha256:9d4685891e3e37434e09b1becda7e96a284e660c7aea9222564d88b6c3527c09" }, ] [[package]] name = "sniffio" version = "1.3.1" source = { registry = "../../../Library/Caches/.pyodide-xbuildenv-0.30.5/0.27.7/xbuildenv/pyodide-root/package_index" } wheels = [ { url = "https://cdn.jsdelivr.net/pyodide/v0.27.7/full/sniffio-1.3.1-py3-none-any.whl", hash = "sha256:9215f9917b34fc73152b134a3fc0a2eb0e4a49b0b956100cad75e84943412bb9" }, ] ```	2025-06-26 20:17:42 +00:00
Charlie Marsh	05ab266200	Avoid using path URL for workspace Git dependencies in requirements.txt (#14288) ... ## Summary Closes https://github.com/astral-sh/uv/issues/13020.	2025-06-26 19:48:12 +00:00
Charlie Marsh	c291d4329a	Include path or URL when failing to convert in lockfile (#14292) ... ## Summary E.g., in #14227, we now get: ``` error: Failed to convert URL to path: https://cdn.jsdelivr.net/pyodide/v0.27.7/full/sniffio-1.3.1-py3-none-any.whl ```	2025-06-26 19:42:04 +00:00
Jack O'Connor	d4d6ede23b	Lock the source tree when running setuptools, to protect concurrent builds ... Fixes https://github.com/astral-sh/uv/issues/13703	2025-06-26 12:28:15 -07:00
Jack O'Connor	60528e3e25	Annotate LockedFile with #[must_use] ... Standard lock guards have the same annotation, because creating them without binding them to a local variable is almost always a mistake.	2025-06-26 12:28:15 -07:00
Zanie Blue	1ff8fc0947	Use Flit instead of Poetry for uninstall tests (#14285) ... Investigating https://github.com/astral-sh/uv/issues/14158	2025-06-26 18:09:04 +00:00
Zanie Blue	8c27c2b494	Add verbose output on flake for run_groups_requires_python (#14275) ... See https://github.com/astral-sh/uv/issues/14160 Same as https://github.com/astral-sh/uv/pull/13817	2025-06-26 12:11:34 -05:00
Zanie Blue	d27cec78b4	Restore snapshot for sync_dry_run (#14274) ... In addition to our flake catch, keep a snapshot. Extends https://github.com/astral-sh/uv/pull/13817	2025-06-26 16:23:37 +00:00
Aria Desires	1e02008d8b	add more proper docker login if (#14278)	2025-06-26 12:05:45 -04:00
Zanie Blue	469246d177	Fix emit_index_annotation_multiple_indexes test case (#14277) ... uv is taken on Test PyPI now, so the existing test fails	2025-06-26 14:58:24 +00:00
John Mumm	a27e60a22f	Temporarily disable Artifactory registry test (#14276) ... I'm waiting on a response to get our subscription back up. Then I can re-enable this. But for now, this would cause failing CI tests.	2025-06-26 09:47:18 -05:00
Daniel Vianna	4b348512c2	GCP Artifact Registry download URLs must have /simple path (#14251)	2025-06-25 17:35:41 +02:00
John Mumm	4ed9c5791b	Bump version to 0.7.15 (#14254)	2025-06-25 12:06:41 +02:00
John Mumm	177df19f30	Add check for using minor version link when creating a venv on Windows (#14252) ... There was a regression introduced in #13954 on Windows where creating a venv behaved as if there was a minor version link even if none existed. This PR adds a check to fix this. Closes #14249.	2025-06-25 10:12:32 +02:00
John Mumm	5b2c3595a7	Require disambiguated relative paths for --index (#14152) ... We do not currently support passing index names to `--index` for installing packages. However, we do accept relative paths that can look like index names. This PR adds the requirement that `--index` values must be disambiguated with a prefix (`./` or `../` on Unix and Windows or `.\\` or `..\\` on Windows). For now, if an ambiguous value is provided, uv will warn that this will not be supported in the future. Currently, if you provide an index name like `--index test` when there is no `test` directory, uv will error with a `Directory not found...` error. That's not very informative if you thought index names were supported. The new warning makes the context clearer. Closes #13921	2025-06-25 10:02:06 +02:00
konsti	283323a78a	Allow symlinks in the build backend (#14212) ... In workspaces with multiple packages, you usually don't want to include shared files such as the license repeatedly. Instead, we reading from symlinked files. This would be supported if we had used std's `is_file` and read methods, but walkdir's `is_file` does not consider symlinked files as files. See https://github.com/astral-sh/uv/issues/3957#issuecomment-2994675003	2025-06-25 07:44:22 +00:00
ya7010	ac788d7cde	Update schemars 1.0.0 (#13693) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary Update [schemars 0.9.0](https://github.com/GREsau/schemars/releases/tag/v0.9.0) There are differences in the generated JSON Schema and I will [contact the author](https://github.com/GREsau/schemars/issues/407). ## Test Plan --------- Co-authored-by: konstin <konstin@mailbox.org>	2025-06-24 21:43:31 +02:00
Christopher Tee	9fba7a4768	Consistently use Ordering::Relaxed for standalone atomic use cases (#14190)	2025-06-24 12:30:26 -07:00
Christopher Tee	fe11ceedfa	Skip GitHub fast path when rate-limited (#13033)	2025-06-24 12:11:41 -07:00
dmitry-bychkov	61265b0c14	Add a link to PyPI FAQ to clarify what per-project token is. (#14242) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary This change adds a link to PyPI FAQ about API tokens on the package publishing guide page. To me it wasn't clear what are meant in this section of the docs and it required a little bit of research. Adding explicit link might help beginners. <!-- What's the purpose of the change? What does it do, and why? --> Co-authored-by: Dmitry Bychkov <dbychkov@alarislabs.com>	2025-06-24 11:56:36 -04:00