6757 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Zanie Blue	db356ab8d4	Update find_uv_bin to locate uv in the base prefix	2025-06-21 06:47:44 -05:00
Zanie Blue	1dbe750452	Refactor PythonVersionFile global loading (#14107) ... I was looking into `uv tool` not supporting version files, and noticed this implementation was confusing and skipped handling like a tracing log if `--no-config` excludes selection a file. I've refactored it in preparation for the next change.	2025-06-20 15:31:32 -05:00
Lucas Vittor	563e9495ba	Replace cuda124 with cuda128 (#14168) ... ## Summary <!-- What's the purpose of the change? What does it do, and why? --> Replace wrong `cuda124` version to the correct `cuda128` version in torch docs ## Test Plan <!-- How was it tested? -->	2025-06-20 16:05:17 -04:00
Aria Desires	c710246d76	Update cargo-dist (#14156) ... Also took the time to migrate to the external config format to normalize our projects for team comfort (`ty` *has* to use this format for its workspace structure).	2025-06-20 14:20:01 -04:00
John Mumm	e9d5780369	Support transparent Python patch version upgrades (#13954) ... > NOTE: The PRs that were merged into this feature branch have all been independently reviewed. But it's also useful to see all of the changes in their final form. I've added comments to significant changes throughout the PR to aid discussion. This PR introduces transparent Python version upgrades to uv, allowing for a smoother experience when upgrading to new patch versions. Previously, upgrading Python patch versions required manual updates to each virtual environment. Now, virtual environments can transparently upgrade to newer patch versions. Due to significant changes in how uv installs and executes managed Python executables, this functionality is initially available behind a `--preview` flag. Once an installation has been made upgradeable through `--preview`, subsequent operations (like `uv venv -p 3.10` or patch upgrades) will work without requiring the flag again. This is accomplished by checking for the existence of a minor version symlink directory (or junction on Windows). ### Features * New `uv python upgrade` command to upgrade installed Python versions to the latest available patch release: ``` # Upgrade specific minor version uv python upgrade 3.12 --preview # Upgrade all installed minor versions uv python upgrade --preview ``` * Transparent upgrades also occur when installing newer patch versions: ``` uv python install 3.10.8 --preview # Automatically upgrades existing 3.10 environments uv python install 3.10.18 ``` * Support for transparently upgradeable Python `bin` installations via `--preview` flag ``` uv python install 3.13 --preview # Automatically upgrades the `bin` installation if there is a newer patch version available uv python upgrade 3.13 --preview ``` * Virtual environments can still be tied to a patch version if desired (ignoring patch upgrades): ``` uv venv -p 3.10.8 ``` ### Implementation Transparent upgrades are implemented using: * Minor version symlink directories (Unix) or junctions (Windows) * On Windows, trampolines simulate paths with junctions * Symlink directory naming follows Python build standalone format: e.g., `cpython-3.10-macos-aarch64-none` * Upgrades are scoped to the minor version key (as represented in the naming format: implementation-minor version+variant-os-arch-libc) * If the context does not provide a patch version request and the interpreter is from a managed CPython installation, the `Interpreter` used by `uv python run` will use the full symlink directory executable path when available, enabling transparently upgradeable environments created with the `venv` module (`uv run python -m venv`) New types: * `PythonMinorVersionLink`: in a sense, the core type for this PR, this is a representation of a minor version symlink directory (or junction on Windows) that points to the highest installed managed CPython patch version for a minor version key. * `PythonInstallationMinorVersionKey`: provides a view into a `PythonInstallationKey` that excludes the patch and prerelease. This is used for grouping installations by minor version key (e.g., to find the highest available patch installation for that minor version key) and for minor version directory naming. ### Compatibility * Supports virtual environments created with: * `uv venv` * `uv run python -m venv` (using managed Python that was installed or upgraded with `--preview`) * Virtual environments created within these environments * Existing virtual environments from before these changes continue to work but aren't transparently upgradeable without being recreated * Supports both standard Python (`python3.10`) and freethreaded Python (`python3.10t`) * Support for transparently upgrades is currently only available for managed CPython installations Closes #7287 Closes #7325 Closes #7892 Closes #9031 Closes #12977 --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-06-20 16:17:13 +02:00
John Mumm	62365d4ec8	Support netrc and same-origin credential propagation on index redirects (#14126) ... This PR is a combination of #12920 and #13754. Prior to these changes, following a redirect when searching indexes would bypass our authentication middleware. This PR updates uv to support propagating credentials through our middleware on same-origin redirects and to support netrc credentials for both same- and cross-origin redirects. It does not handle the case described in #11097 where the redirect location itself includes credentials (e.g., `https://user:pass@redirect-location.com`). That will be addressed in follow-up work. This includes unit tests for the new redirect logic and integration tests for credential propagation. The automated external registries test is also passing for AWS CodeArtifact, Azure Artifacts, GCP Artifact Registry, JFrog Artifactory, GitLab, Cloudsmith, and Gemfury.	2025-06-20 09:21:32 +02:00
Jack O'Connor	cc8d5a9215	handle an existing shebang in uv init --script (#14141) ... Closes https://github.com/astral-sh/uv/issues/14085.	2025-06-19 14:47:22 -07:00
Jack O'Connor	c3e4b63806	document the way member sources shadow workspace sources ... Closes https://github.com/astral-sh/uv/issues/14093.	2025-06-18 15:31:23 -07:00
Zanie Blue	e1046242e7	Fix Docker attestations (#14133) ... These regressed in #14088 and were found during my test publish from a fork.	2025-06-18 18:46:30 +00:00
Zanie Blue	1fc65a1d9d	Publish to DockerHub (#14088) ... The primary motivation here is to avoid confusion with non-official repositories, e.g., https://github.com/astral-sh/uv/issues/13958 which could lead to attacks against our users. Resolves - https://github.com/astral-sh/uv/issues/12679 - #8699	2025-06-18 11:30:37 -05:00
Zanie Blue	75d4cd30d6	Use Depot for Windows cargo test (#14122) ... Replaces https://github.com/astral-sh/uv/pull/12320 Switches to Depot for the large Windows runner we use for `cargo test`. The runtime goes from 8m 20s -> 6m 44s (total) and 7m 18s -> 4m 41s (test run) which are 20% and 35% speedups respectively. A few things got marginally slower, like Python installs went from 11s -> 38s, the Rust cache went from 15s -> 30s, and drive setup went from 7s -> 20s.	2025-06-18 09:55:09 -05:00
John Mumm	611a13c841	Fix benchmark compilation failure: cannot find attribute clap in this scope (#14128) ... [Two benchmark jobs](4433771099) were failing with `error: cannot find attribute clap in this scope` based on #14120. This updates the recently added `#[clap(name = rocm...` lines to use `cfg_attr(feature = "clap",`.	2025-06-18 16:30:12 +02:00
konsti	ee0ba65eb2	Unify test venv python command creation (#14117) ... Refactoring in preparation for https://github.com/astral-sh/uv/pull/14080	2025-06-18 15:06:09 +02:00
Charlie Marsh	4d9c9a1e76	Add ROCm backends to --torch-backend (#14120) ... We don't yet support automatic detection, but this at least allows explicit selection (e.g., `uv pip install --torch-backend rocm5.3`). Closes #14087.	2025-06-18 07:35:05 -04:00
Aaron Ang	0cac73dc1f	Warn on empty index directory (#13940) ... Close #13922 ## Summary Add a warning if the directory given by the `--index` argument is empty. ## Test Plan Added test case `add_index_empty_directory` in `edit.rs`	2025-06-18 10:48:21 +02:00
konsti	499c8aa808	Fix PyPI publish test script (#14116) ... The script stumbled over a newline introduced in https://github.com/pypi/warehouse/pull/18266 (which is valid). Also fixed: Don't read versions for the same package from other indexes. We were using `project_name` here instead of `target`, while using the latter and only reading from a single index simplifies the code too.	2025-06-18 09:51:53 +02:00
John Mumm	2fc922144a	Add script for testing uv against different registries (#13615) ... This PR provides a script that uses environment variables to determine which registries to test. This script is being used to run automated registry tests in CI for AWS, Azure, GCP, Artifactory, GitLab, Cloudsmith, and Gemfury. You must configure the following required env vars for each registry: ``` UV_TEST_<registry_name>_URL URL for the registry UV_TEST_<registry_name>_TOKEN authentication token UV_TEST_<registry_name>_PKG private package to install ``` The username defaults to "\_\_token\_\_" but can be optionally set with: ``` UV_TEST_<registry_name>_USERNAME ``` For each configured registry, the test will attempt to install the specified package. Some registries can fall back to PyPI internally, so it's important to choose a package that only exists in the registry you are testing. Currently, a successful test means that it finds the line “ + <package_name>” in the output. This is because in its current form we don’t know ahead of time what package it is and hence what the exact expected output would be. The advantage if that anyone can run this locally, though they would have to have access to the registries they want to test. You can also use the `--use-op` command line argument to derive these test env vars from a 1Password vault (default is "RegistryTests" but can be configured with `--op-vault`). It will look at all items in the vault with names following the pattern `UV_TEST_<registry_name>` and will derive the env vars as follows: ``` `UV_TEST_<registry_name>_USERNAME` from the `username` field `UV_TEST_<registry_name>_TOKEN` from the `password` field `UV_TEST_<registry_name>_URL` from a field with the label `url` `UV_TEST_<registry_name>_PKG` from a field with the label `pkg` ```	2025-06-18 09:43:45 +02:00
Zanie Blue	47c522f9be	Serialize Python requests for tools as canonicalized strings (#14109) ... When working on support for reading global Python pins in tool operations, I noticed that we weren't using the canonicalized Python request in receipts — we were using the raw string provided by the user. Since we'll need to compare these values, we should be using the canonicalized string. The `Tool` and `ToolReceipt` types have been updated to hold a `PythonRequest` instead of a `String`, and `Serialize` was implemented for `PythonRequest` so canonicalization can happen at the edge instead of being the caller's responsibility.	2025-06-17 17:45:11 -05:00
Charlie Marsh	6c096246d8	Remove preview label from --torch-backend (#14119) ... This is now used in enough places that I'm comfortable committing to maintaining it under our versioning policy. Closes #14091.	2025-06-17 16:49:00 -04:00
Zanie Blue	8808e67cff	Add a docker-plan step to consolidate push and tag logic (#14083) ... The dist plan parsing is pretty hard to understand, and I want to add more images, e.g., for DockerHub in #14088. As a simplifying precursor... move the dist plan processing into a dedicated step.	2025-06-17 15:04:39 -05:00
Zanie Blue	c25c800367	Fix Ruff linting (#14111)	2025-06-17 17:28:23 +00:00
konsti	10e1d17cfc	Don't use walrus operator in interpreter query script (#14108) ... Fix `uv run -p 3.7` by not using a walrus operator. Python 3.7 isn't really supported anymore, but there's no reason to break interpreter discovery for it.	2025-06-17 12:18:08 -05:00
Andrew Gallant	3d4f0c934e	Fix handling of changes to requires-python (#14076) ... When using `uv lock --upgrade-package=python` after changing `requires-python`, it was possible to get into a state where the fork markers produced corresponded to the empty set. This in turn resulted in an empty lock file. There was already some infrastructure in place that I think was perhaps intended to handle this. In particular, `Lock::check_marker_coverage` checks whether the fork markers have some overlap with the supported environments (including the `requires-python`). But there were two problems with this. First is that in lock validation, this marker coverage check came _after_ a path that returned `Preferable` (meaning that the fork markers should be kept) when `--upgrade-package` was used. Second is that the marker coverage check used the `requires-python` in the lock file and _not_ the `requires-python` in the now updated `pyproject.toml`. We attempt to solve this conundrum by slightly re-arranging lock file validation and by explicitly checking whether the *new* `requires-python` is disjoint from the fork markers in the lock file. If it is, then we return `Versions` from lock file validation (indicating that the fork markers should be dropped). Fixes #13951	2025-06-17 11:50:05 -04:00
FishAlchemist	d653fbb133	doc: Sync PyTorch integration index for CUDA and ROCm versions from PyTorch website. (#14100) ... ## Summary Just to sync the documentation with PyTorch's officially recommended installation method.  **Change:** * CUDA 12.1 to CUDA 12.6 * CUDA 12.4 to CUDA 12.8 * ROCm 6.2 to ROCm 6.3 ## Test Plan Run doc server in local. Result: <details><summary>CUDA 12.6</summary> <p>   </p> </details> <details><summary>CUDA 12.8</summary> <p>   </p> </details> <details><summary>ROCm6</summary> <p>   </p> </details>	2025-06-17 09:55:03 -04:00
John Mumm	e02cd74e64	Turn off clippy::struct_excessive_bools rule (#14102) ... We always ignore the `clippy::struct_excessive_bools` rule and formerly annotated this at the function level. This PR specifies the allow in `workspace.lints.clippy` in `Cargo.toml`.	2025-06-17 12:18:54 +02:00
Zanie Blue	cf67d9c633	Clear XDG_DATA_HOME during test runs (#14075)	2025-06-16 15:01:17 -05:00
Kyle Galbraith	d73d3e8b53	Refactor Docker image builds to use Depot (#13459) ... ## Summary Simplify the Docker image build process to leverage Depot container builders for faster layer caching and native multi-platform image builds. The combo of the two removes the need to save cache to registries and do complex merge operations across GHA runners to get a multi-platform image. ## Test Plan UV team will need to add a trust relationship in Depot so that the container builds can authenticate and run. This can be done following these docs: https://depot.dev/docs/cli/authentication#adding-a-trust-relationship-for-github-actions. Once that is done, this should just work as before, but without all of the extra work around manifests. We should double that all of the tagging still makes sense for you all, as some bits of that were unclear. Additional context in this draft PR: https://github.com/astral-sh/uv/pull/9156 --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-06-16 13:32:35 -05:00
konsti	423cfaabf5	Show backtraces for CI crashes (#14081) ... I only just realized that we can get backtraces for crashes with `RUST_BACKTRACE: 1`, even non-panics (https://github.com/astral-sh/uv/pull/14079). This is much better than trying to analyze crash dumps.	2025-06-16 17:10:21 +00:00
Andrew Gallant	5c1ebf902b	Add rustfmt.toml (#14072) ... We've gotten away without this file for a while. In particular, we explicitly use its default settings. However, this is occasionally problematic in certain contexts where `rustfmt` is invoked directly. Or in contexts where the Rust Edition is otherwise not specified. At least, this happens when using the Rust vim plugin. When an edition isn't explicitly specified, it defaults back to the 2015 edition. I think that there aren't a lot of rustfmt changes, and so we've been able to get away with this for a while. But it looks like something in the 2024 edition changes how imports are ordered. So to make it explicit that we want to use the 2024 edition of rustfmt, we opt into it. This is analogous to a change made to the Ruff repository somewhat recently: https://github.com/astral-sh/ruff/pull/18197	2025-06-16 10:05:56 -04:00
konsti	cd71ad1672	Show retries for HTTP status code errors (#13897) ... Using a companion change in the middleware (https://github.com/TrueLayer/reqwest-middleware/pull/235, forked&tagged pending review), we can check and show retries for HTTP status core errors, to consistently report retries again. We fix two cases: * Show retries for status code errors for cache client requests * Show retries for status code errors for Python download requests Not handled: * Show previous retries when a distribution download fails mid-streaming * Perform retries when a distribution download fails mid-streaming * Show previous retries when a Python download fails mid-streaming * Perform retries when a Python download fails mid-streaming	2025-06-16 10:14:00 +00:00
renovate[bot]	7c90c5be02	Update conda-incubator/setup-miniconda action to v3.2.0 (#14061) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [conda-incubator/setup-miniconda](https://redirect.github.com/conda-incubator/setup-miniconda) | action | minor | `v3.1.1` -> `v3.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>conda-incubator/setup-miniconda (conda-incubator/setup-miniconda)</summary> ### [`v3.2.0`](https://redirect.github.com/conda-incubator/setup-miniconda/blob/HEAD/CHANGELOG.md#v320-2025-06-04) [Compare Source](https://redirect.github.com/conda-incubator/setup-miniconda/compare/v3.1.1...v3.2.0) ##### Fixes - Check all `.condarc` files when removing `defaults` by [@&#8203;marcoesters](https://redirect.github.com/marcoesters) in [https://github.com/conda-incubator/setup-miniconda/pull/398](https://redirect.github.com/conda-incubator/setup-miniconda/pull/398)/398 - Add version normalization for minicondaVersion in input validation by [@&#8203;jezdez](https://redirect.github.com/jezdez) [https://github.com/conda-incubator/setup-miniconda/pull/397](https://redirect.github.com/conda-incubator/setup-miniconda/pull/397)/397 - Workaround for auto_activate_base deprecation by [@&#8203;jaimergp](https://redirect.github.com/jaimergp) in [https://github.com/conda-incubator/setup-miniconda/pull/402](https://redirect.github.com/conda-incubator/setup-miniconda/pull/402)/402 ##### Tasks and Maintenance - Bump conda-incubator/setup-miniconda from 3.1.0 to 3.1.1 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/conda-incubator/setup-miniconda/pull/391](https://redirect.github.com/conda-incubator/setup-miniconda/pull/391)/391 - Bump undici from 5.28.4 to 5.28.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/conda-incubator/setup-miniconda/pull/390](https://redirect.github.com/conda-incubator/setup-miniconda/pull/390)/390 - Bump semver and [@&#8203;types/semver](https://redirect.github.com/types/semver) by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/conda-incubator/setup-miniconda/pull/399](https://redirect.github.com/conda-incubator/setup-miniconda/pull/399)/399 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-06-16 11:53:56 +02:00
renovate[bot]	77ec5f9b17	Update actions/setup-python action to v5.6.0 (#14060) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v5` -> `v5.6.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v5.6.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.6.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.5.0...v5.6.0) ##### What's Changed - Workflow updates related to Ubuntu 20.04 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [https://github.com/actions/setup-python/pull/1065](https://redirect.github.com/actions/setup-python/pull/1065) - Fix for Candidate Not Iterable Error by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [https://github.com/actions/setup-python/pull/1082](https://redirect.github.com/actions/setup-python/pull/1082) - Upgrade semver and [@&#8203;types/semver](https://redirect.github.com/types/semver) by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1091](https://redirect.github.com/actions/setup-python/pull/1091) - Upgrade prettier from 2.8.8 to 3.5.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1046](https://redirect.github.com/actions/setup-python/pull/1046) - Upgrade ts-jest from 29.1.2 to 29.3.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1081](https://redirect.github.com/actions/setup-python/pull/1081) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.6.0 ### [`v5.5.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.5.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.4.0...v5.5.0) ##### What's Changed ##### Enhancements: - Support free threaded Python versions like '3.13t' by [@&#8203;colesbury](https://redirect.github.com/colesbury) in [https://github.com/actions/setup-python/pull/973](https://redirect.github.com/actions/setup-python/pull/973) - Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade [@&#8203;action/cache](https://redirect.github.com/action/cache) from 4.0.0 to 4.0.3 by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/1056](https://redirect.github.com/actions/setup-python/pull/1056) - Add support for .tool-versions file in setup-python by [@&#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) in [https://github.com/actions/setup-python/pull/1043](https://redirect.github.com/actions/setup-python/pull/1043) ##### Bug fixes: - Fix architecture for pypy on Linux ARM64 by [@&#8203;mayeut](https://redirect.github.com/mayeut) in [https://github.com/actions/setup-python/pull/1011](https://redirect.github.com/actions/setup-python/pull/1011) This update maps arm64 to aarch64 for Linux ARM64 PyPy installations. ##### Dependency updates: - Upgrade [@&#8203;vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.1 to 0.38.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1016](https://redirect.github.com/actions/setup-python/pull/1016) - Upgrade [@&#8203;actions/glob](https://redirect.github.com/actions/glob) from 0.4.0 to 0.5.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1015](https://redirect.github.com/actions/setup-python/pull/1015) ##### New Contributors - [@&#8203;colesbury](https://redirect.github.com/colesbury) made their first contribution in [https://github.com/actions/setup-python/pull/973](https://redirect.github.com/actions/setup-python/pull/973) - [@&#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) made their first contribution in [https://github.com/actions/setup-python/pull/1043](https://redirect.github.com/actions/setup-python/pull/1043) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.5.0 ### [`v5.4.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.4.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.3.0...v5.4.0) ##### What's Changed ##### Enhancements: - Update cache error message by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [https://github.com/actions/setup-python/pull/968](https://redirect.github.com/actions/setup-python/pull/968) - Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/985](https://redirect.github.com/actions/setup-python/pull/985) - Configure Dependabot settings by [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [https://github.com/actions/setup-python/pull/1008](https://redirect.github.com/actions/setup-python/pull/1008) ##### Documentation changes: - Readme update - recommended permissions by [@&#8203;benwells](https://redirect.github.com/benwells) in [https://github.com/actions/setup-python/pull/1009](https://redirect.github.com/actions/setup-python/pull/1009) - Improve Advanced Usage examples by [@&#8203;lrq3000](https://redirect.github.com/lrq3000) in [https://github.com/actions/setup-python/pull/645](https://redirect.github.com/actions/setup-python/pull/645) ##### Dependency updates: - Upgrade `undici` from 5.28.4 to 5.28.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1012](https://redirect.github.com/actions/setup-python/pull/1012) - Upgrade `urllib3` from 1.25.9 to 1.26.19 in /**tests**/data by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/895](https://redirect.github.com/actions/setup-python/pull/895) - Upgrade `actions/publish-immutable-action` from 0.0.3 to 0.0.4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1014](https://redirect.github.com/actions/setup-python/pull/1014) - Upgrade `@actions/http-client` from 2.2.1 to 2.2.3 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1020](https://redirect.github.com/actions/setup-python/pull/1020) - Upgrade `requests` from 2.24.0 to 2.32.2 in /**tests**/data by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/1019](https://redirect.github.com/actions/setup-python/pull/1019) - Upgrade `@actions/cache` to `^4.0.0` by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [https://github.com/actions/setup-python/pull/1007](https://redirect.github.com/actions/setup-python/pull/1007) ##### New Contributors - [@&#8203;benwells](https://redirect.github.com/benwells) made their first contribution in [https://github.com/actions/setup-python/pull/1009](https://redirect.github.com/actions/setup-python/pull/1009) - [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) made their first contribution in [https://github.com/actions/setup-python/pull/1008](https://redirect.github.com/actions/setup-python/pull/1008) - [@&#8203;lrq3000](https://redirect.github.com/lrq3000) made their first contribution in [https://github.com/actions/setup-python/pull/645](https://redirect.github.com/actions/setup-python/pull/645) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.4.0 ### [`v5.3.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.3.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.2.0...v5.3.0) #### What's Changed - Add workflow file for publishing releases to immutable action package by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in [https://github.com/actions/setup-python/pull/941](https://redirect.github.com/actions/setup-python/pull/941) - Upgrade IA publish by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in [https://github.com/actions/setup-python/pull/943](https://redirect.github.com/actions/setup-python/pull/943) ##### Bug Fixes: - Normalise Line Endings to Ensure Cross-Platform Consistency by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/938](https://redirect.github.com/actions/setup-python/pull/938) - Revise `isGhes` logic by [@&#8203;jww3](https://redirect.github.com/jww3) in [https://github.com/actions/setup-python/pull/963](https://redirect.github.com/actions/setup-python/pull/963) - Bump pillow from 7.2 to 10.2.0 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [https://github.com/actions/setup-python/pull/956](https://redirect.github.com/actions/setup-python/pull/956) ##### Enhancements: - Enhance workflows and documentation updates by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/965](https://redirect.github.com/actions/setup-python/pull/965) - Bump default versions to latest by [@&#8203;jeffwidman](https://redirect.github.com/jeffwidman) in [https://github.com/actions/setup-python/pull/905](https://redirect.github.com/actions/setup-python/pull/905) #### New Contributors - [@&#8203;Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [https://github.com/actions/setup-python/pull/941](https://redirect.github.com/actions/setup-python/pull/941) - [@&#8203;jww3](https://redirect.github.com/jww3) made their first contribution in [https://github.com/actions/setup-python/pull/963](https://redirect.github.com/actions/setup-python/pull/963) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.3.0 ### [`v5.2.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.2.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.1.1...v5.2.0) #### What's Changed ##### Bug fixes: - Add `.zip` extension to Windows package downloads for `Expand-Archive` Compatibility by [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in [https://github.com/actions/setup-python/pull/916](https://redirect.github.com/actions/setup-python/pull/916) This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly. - Add arch to cache key by [@&#8203;Zxilly](https://redirect.github.com/Zxilly) in [https://github.com/actions/setup-python/pull/896](https://redirect.github.com/actions/setup-python/pull/896) This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format. ##### Documentation changes: - Fix display of emojis in contributors doc by [@&#8203;sciencewhiz](https://redirect.github.com/sciencewhiz) in [https://github.com/actions/setup-python/pull/899](https://redirect.github.com/actions/setup-python/pull/899) - Documentation update for caching poetry dependencies by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [https://github.com/actions/setup-python/pull/908](https://redirect.github.com/actions/setup-python/pull/908) ##### Dependency updates: - Bump [@&#8203;iarna/toml](https://redirect.github.com/iarna/toml) version from 2.2.5 to 3.0.0 by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/912](https://redirect.github.com/actions/setup-python/pull/912) - Bump pyinstaller from 3.6 to 5.13.1 by [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [https://github.com/actions/setup-python/pull/923](https://redirect.github.com/actions/setup-python/pull/923) #### New Contributors - [@&#8203;sciencewhiz](https://redirect.github.com/sciencewhiz) made their first contribution in [https://github.com/actions/setup-python/pull/899](https://redirect.github.com/actions/setup-python/pull/899) - [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) made their first contribution in [https://github.com/actions/setup-python/pull/916](https://redirect.github.com/actions/setup-python/pull/916) - [@&#8203;Zxilly](https://redirect.github.com/Zxilly) made their first contribution in [https://github.com/actions/setup-python/pull/896](https://redirect.github.com/actions/setup-python/pull/896) - [@&#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) made their first contribution in [https://github.com/actions/setup-python/pull/923](https://redirect.github.com/actions/setup-python/pull/923) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.2.0 ### [`v5.1.1`](https://redirect.github.com/actions/setup-python/releases/tag/v5.1.1) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5.1.0...v5.1.1) #### What's Changed ##### Bug fixes: - fix(ci): update all failing workflows by [@&#8203;mayeut](https://redirect.github.com/mayeut) in [https://github.com/actions/setup-python/pull/863](https://redirect.github.com/actions/setup-python/pull/863) This update ensures compatibility and optimal performance of workflows on the latest macOS version. ##### Documentation changes: - Documentation update for cache by [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) in [https://github.com/actions/setup-python/pull/873](https://redirect.github.com/actions/setup-python/pull/873) ##### Dependency updates: - Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/setup-python/pull/893](https://redirect.github.com/actions/setup-python/pull/893) #### New Contributors - [@&#8203;gowridurgad](https://redirect.github.com/gowridurgad) made their first contribution in [https://github.com/actions/setup-python/pull/873](https://redirect.github.com/actions/setup-python/pull/873) **Full Changelog**: https://github.com/actions/setup-python/compare/v5...v5.1.1 ### [`v5.1.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.1.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v5...v5.1.0) #### What's Changed - Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by [@&#8203;Shegox](https://redirect.github.com/Shegox) in [https://github.com/actions/setup-python/pull/766](https://redirect.github.com/actions/setup-python/pull/766). - Dependency updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) and [@&#8203;HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [https://github.com/actions/setup-python/pull/817](https://redirect.github.com/actions/setup-python/pull/817) - Documentation changes for version in README by [@&#8203;basnijholt](https://redirect.github.com/basnijholt) in [https://github.com/actions/setup-python/pull/776](https://redirect.github.com/actions/setup-python/pull/776) - Documentation changes for link in README by [@&#8203;ukd1](https://redirect.github.com/ukd1) in [https://github.com/actions/setup-python/pull/793](https://redirect.github.com/actions/setup-python/pull/793) - Documentation changes for link in Advanced Usage by [@&#8203;Jamim](https://redirect.github.com/Jamim) in [https://github.com/actions/setup-python/pull/782](https://redirect.github.com/actions/setup-python/pull/782) - Documentation changes for avoiding rate limit issues on GHES by [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in [https://github.com/actions/setup-python/pull/835](https://redirect.github.com/actions/setup-python/pull/835) #### New Contributors - [@&#8203;basnijholt](https://redirect.github.com/basnijholt) made their first contribution in [https://github.com/actions/setup-python/pull/776](https://redirect.github.com/actions/setup-python/pull/776) - [@&#8203;ukd1](https://redirect.github.com/ukd1) made their first contribution in [https://github.com/actions/setup-python/pull/793](https://redirect.github.com/actions/setup-python/pull/793) - [@&#8203;Jamim](https://redirect.github.com/Jamim) made their first contribution in [https://github.com/actions/setup-python/pull/782](https://redirect.github.com/actions/setup-python/pull/782) - [@&#8203;Shegox](https://redirect.github.com/Shegox) made their first contribution in [https://github.com/actions/setup-python/pull/766](https://redirect.github.com/actions/setup-python/pull/766) - [@&#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) made their first contribution in [https://github.com/actions/setup-python/pull/835](https://redirect.github.com/actions/setup-python/pull/835) **Full Changelog**: https://github.com/actions/setup-python/compare/v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-06-16 09:48:19 +00:00
renovate[bot]	5beeda7cdc	Update acj/freebsd-firecracker-action action to v0.5.0 (#14057) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [acj/freebsd-firecracker-action](https://redirect.github.com/acj/freebsd-firecracker-action) | action | minor | `v0.4.2` -> `v0.5.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>acj/freebsd-firecracker-action (acj/freebsd-firecracker-action)</summary> ### [`v0.5.0`](https://redirect.github.com/acj/freebsd-firecracker-action/releases/tag/v0.5.0) [Compare Source](https://redirect.github.com/acj/freebsd-firecracker-action/compare/v0.4.2...v0.5.0) Changes: - Add `disk-size` option to control the size of the VM's disk and root filesystem - Retired obsolete workaround that disabled TCP segmentation offload (TSO) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-06-16 07:42:01 +00:00
renovate[bot]	9d0d612131	Update Rust crate which to v8 (#14066) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [which](https://redirect.github.com/harryfei/which-rs) | workspace.dependencies | major | `7.0.0` -> `8.0.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>harryfei/which-rs (which)</summary> ### [`v8.0.0`](https://redirect.github.com/harryfei/which-rs/blob/HEAD/CHANGELOG.md#800) [Compare Source](https://redirect.github.com/harryfei/which-rs/compare/7.0.3...8.0.0) - Add new `Sys` trait to allow abstracting over the underlying filesystem. Particularly useful for `wasm32-unknown-unknown` targets. Thanks [@&#8203;dsherret](https://redirect.github.com/dsherret) for this contribution to which! - Add more debug level tracing for otherwise silent I/O errors. - Call the `NonFatalHandler` in more places to catch previously ignored I/O errors. - Remove use of the `either` dependency. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41MC4wIiwidXBkYXRlZEluVmVyIjoiNDAuNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-06-16 09:37:38 +02:00
Frazer McLean	87827b6d82	Fix implied platform_machine marker for win_amd64 platform tag (#14041) ... ## Summary Fixes #14040 ## Test Plan Added a test using required-environments	2025-06-15 22:37:40 -04:00
renovate[bot]	67c0f93e37	Update actions/checkout action to v4.2.2 (#14059)	2025-06-16 02:27:03 +00:00
renovate[bot]	ba6413f81f	Update actions/attest-build-provenance action to v2.4.0 (#14058)	2025-06-16 02:17:30 +00:00
renovate[bot]	a0ea520fe3	Update taiki-e/install-action action to v2.52.8 (#14056)	2025-06-16 02:05:57 +00:00
renovate[bot]	4d104dd004	Update Rust crate windows to v0.61.3 (#14055)	2025-06-16 02:05:34 +00:00
renovate[bot]	4b5da24fe0	Update Rust crate unicode-width to v0.2.1 (#14054)	2025-06-16 02:04:46 +00:00
renovate[bot]	f38e96bddd	Update actions/setup-python digest to a26af69 (#14045)	2025-06-15 21:47:33 -04:00
renovate[bot]	59f1b4bee4	Update Rust crate syn to v2.0.103 (#14051)	2025-06-15 21:41:54 -04:00
renovate[bot]	96cb90a1fd	Update Rust crate toml to v0.8.23 (#14052)	2025-06-15 21:41:31 -04:00
renovate[bot]	f0e0ad4d09	Update Rust crate smallvec to v1.15.1 (#14050)	2025-06-15 21:37:31 -04:00
renovate[bot]	3c00d6d7df	Update Rust crate memchr to v2.7.5 (#14048)	2025-06-15 21:37:22 -04:00
renovate[bot]	ce16a0fc9b	Update Rust crate boxcar to v0.2.13 (#14046)	2025-06-15 21:37:16 -04:00
renovate[bot]	15256722d8	Update Rust crate clap to v4.5.40 (#14047)	2025-06-15 21:36:58 -04:00
Aria Desires	ff9c2c35d7	Support reading dependency-groups from pyproject.tomls with no project (#13742) ... (or legacy tool.uv.workspace). This cleaves out a dedicated SourcedDependencyGroups type based on RequiresDist but with only the DependencyGroup handling implemented. This allows `uv pip` to read `dependency-groups` from pyproject.tomls that only have that table defined, per PEP 735, and as implemented by `pip`. However we want our implementation to respect various uv features when they're available: * `tool.uv.sources` * `tool.uv.index` * `tool.uv.dependency-groups.mygroup.requires-python` (#13735) As such we want to opportunistically detect "as much as possible" while doing as little as possible when things are missing. The issue with the old RequiresDist path was that it fundamentally wanted to build the package, and if `[project]` was missing it would try to desperately run setuptools on the pyproject.toml to try to find metadata and make a hash of things. At the same time, the old code also put in a lot of effort to try to pretend that `uv pip` dependency-groups worked like `uv` dependency-groups with defaults and non-only semantics, only to separate them back out again. By explicitly separating them out, we confidently get the expected behaviour. Note that dependency-group support is still included in RequiresDist, as some `uv` paths still use it. It's unclear to me if those paths want this same treatment -- for now I conclude no. Fixes #13138	2025-06-13 22:16:48 +00:00
Aria Desires	5021840919	Add [tool.uv.dependency-groups].mygroup.requires-python (#13735) ... This allows you to specify requires-python on individual dependency-groups, with the intended usecase being "oh my dev-dependencies have a higher requires-python than my actual project". This includes a large driveby move of the RequiresPython type to uv-distribution-types to allow us to generate the appropriate markers at this point in the code. It also migrates RequiresPython from pubgrub::Range to version_ranges::Ranges, and makes several pub(crate) items pub, as it's no longer defined in uv_resolver. Fixes #11606	2025-06-13 22:04:13 +00:00
Andrew Gallant	26db29caac	Update to jiff 0.2.15 (#14035) ... This brings in https://github.com/BurntSushi/jiff/pull/385, which makes cold resolves about 10% faster. Or, stated differently, as fast as they were a few weeks ago before the perf regression introduced by `jiff 0.2.14`.	2025-06-13 14:43:46 -04:00