948 commits

Author	SHA1	Message	Date
Zanie Blue	dc3fd46472	Bump version to 0.7.12 (#13892)	2025-06-06 19:42:06 +00:00
Jack O'Connor	94ed6f880f	update Git and GitHub Actions docs to mention gh auth login (#13850)	2025-06-05 20:44:59 +00:00
Zanie Blue	262ca73965	Remove the configuration section in favor of concepts / reference (#13842) ... Extends https://github.com/astral-sh/uv/pull/13841 — I'll drop that commit later after that pull request merges but it's small. I find the split into a "Configuration" section awkward and don't think it's helping us. Everything moved into the "Concepts" section, except the "Environment variables" page which definitely belongs in the reference and the "Installer" page which is fairly niche and seems better in the reference. Before / After <img src="https://github.com/user-attachments/assets/80d8304b-17da-4900-a5f4-c3ccac96fcc5" width="400">	2025-06-05 17:09:49 +00:00
Zanie Blue	062b6ab743	Add uv python pin --rm to remove .python-version pins (#13860) ... I realized it is non-trivial to delete the global Python version pin, and that we were missing this simple functionality	2025-06-05 12:05:42 -05:00
Zanie Blue	789a246cf3	Move the pip interface documentation into the concepts section (#13841) ... The motivation here being a reduction in the length of the navigation. I don't think we did this in the first place because we didn't have the capability to do another nested level, but now we're doing that for Projects.	2025-06-05 11:53:27 -05:00
Abhishek Upadhye	efd4652faa	List .gitignore in project init files (#13855) ... Fixes https://github.com/astral-sh/uv/issues/13639 Just added a missing `.gitignore` file in the docs, so that there would be no confusion for readers referring it. Thank you!	2025-06-05 09:21:15 -05:00
Jack O'Connor	90a4416ab8	Bump version to 0.7.11 (#13844)	2025-06-04 12:35:56 -07:00
Zanie Blue	3ca8d074a4	Use "terminal driver" instead of "shell" in SIGINT docs (#13787) ... Addressing the comment at https://github.com/astral-sh/uv/issues/12108#issuecomment-2925703719	2025-06-03 22:07:03 +00:00
Hood Chatham	f9d3f24728	Add Pyodide support (#12731) ... This includes some initial work on adding Pyodide support (issue #12729). It is enough to get ``` uv pip compile -p /path/to/pyodide --extra-index-url file:/path/to/simple-index ``` to work which should already be quite useful. ## Test Plan * added a unit test for `pyodide_platform` * integration tested manually with: ``` cargo run pip install \ -p /home/rchatham/Documents/programming/tmp/pyodide-venv-test/.pyodide-xbuildenv-0.29.3/0.27.4/xbuildenv/pyodide-root/dist/python \ --extra-index-url file:/home/rchatham/Documents/programming/tmp/pyodide-venv-test/.pyodide-xbuildenv-0.29.3/0.27.4/xbuildenv/pyodide-root/package_index \ --index-strategy unsafe-best-match --target blah --no-build \ numpy pydantic ``` --------- Co-authored-by: konsti <konstin@mailbox.org> Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-06-03 12:01:26 -05:00
Zanie Blue	1e5120e15c	Bump version to 0.7.10 (#13821)	2025-06-03 11:07:21 -05:00
Tobias Gårdhus	459c902425	add --show-extras to uv tool list to list extra requirements installed with tools (#13783) ... ## Summary Implemented as suggested in #13761 eg. ``` $ uv tool install 'harlequin[postgres]' $ uv tool list --show-extras harlequin v2.1.2 [extras: postgres] - harlequin ``` ## Test Plan Added a new test with the argument along with the others from the `uv tool list` cli.	2025-06-02 14:59:40 +00:00
Zanie Blue	13a86a23b3	Bump version to 0.7.9 (#13739)	2025-05-30 14:30:37 -05:00
johnthagen	72e2821d26	Fix exclude-newer date format in docs (#13706) ... ## Summary Closes #13704	2025-05-28 20:23:10 +00:00
konsti	56203484a2	Add uv add --bounds to configure the version constraint (#12946) ... By default, uv uses only a lower bound in `uv add`, which avoids dependency conflicts due to upper bounds. With this PR, this cna be changed by setting a different bound kind. The bound kind can be configured in `uv.toml`, as a user preference, in `pyproject.toml`, as a project preference, or on the CLI, when adding a specific project. We add two options that add an upper bound on the constraint, one for SemVer (`>=1.2.3,<2.0.0`, dubbed "major", modeled after the SemVer caret) and another one for dependencies that make breaking changes in minor version (`>=1.2.3,<1.3.0`, dubbed "minor", modeled after the SemVer tilde). Intuitively, the major option bumps the most significant version component, while the minor option bumps the second most significant version component. There is also an exact bounds option (`==1.2.3`), though generally we recommend setting a wider bound and using the lockfile for pinning. Versions can have leading zeroes, such as `0.1` or `0.0.1`. For a single leading 0, we shift the the meaning of major and minor similar to cargo. For two or more leading zeroes, the difference between major and minor becomes inapplicable, instead both bump the most significant component: - major: `0.1` -> `>=0.1,<0.2` - major: `0.0.1` -> `>=0.0.1,<0.0.2` - major: `0.0.1.1` -> `>=0.0.1.1,<0.0.2.0` - major: `0.0.0.1` -> `>=0.0.0.1,<0.0.0.2` - minor: `0.1` -> `>=0.1,<0.1.1` - minor: `0.0.1` -> `>=0.0.1,<0.0.2` - minor: `0.0.1.1` -> `>=0.0.1.1,<0.0.2.0` - minor: `0.0.0.1` -> `>=0.0.0.1,<0.0.0.2` For a consistent appearance, we try to preserve the number of components in the upper bound. For example, adding a version `2.17` with the major option is stored as `>=2.17,<3.0`. If a version uses three components and is greater than 0, both bounds will also use three components (SemVer versions always have three components). Of the top 100 PyPI packages, 8 use a non-three-component version (docutils, idna, pycparser and soupsieve with two components, packaging, pytz and tzdata with two component, CalVer and trove-classifiers with four component CalVer). Example `pyproject.toml` files with the top 100 packages: [`--bounds major`](https://gist.github.com/konstin/0aaffa9ea53c4834c22759e8865409f4) and [`--bounds minor`](https://gist.github.com/konstin/e77f5e990a7efe8a3c8a97c5c5b76964). While many projects follow version scheme that roughly or directly matches the major or minor options, these compatibility ranges are usually not applicable for the also popular CalVer versioning. For pre-release versions, there are two framings we could take: One is that pre-releases generally make no guarantees about compatibility between them and are used to introduce breaking changes, so we should pin them exactly. In many cases however, pre-release specifiers are used because a project needs a bugfix or a feature that hasn't made it into a stable release, or because a project is compatible with the next version before a final version for that release is published. In those cases, compatibility with other packages that depend on the same library is more important, so the desired bound is the same as it would be for the stable release, except with the lower bound lowered to include pre-release. The names of the bounds and the name of the flag is up for bikeshedding. Currently, the option is call `tool.uv.bounds`, but we could also move it under `tool.uv.edit.bounds`, where it would be the first/only entry. Fixes #6783 --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-05-28 13:11:31 +00:00
Zanie Blue	90a21ae46a	Add example of enabling Dependabot (#13692) ... Follows https://github.com/astral-sh/uv/pull/13690 Tested in https://github.com/astral-sh/packse/blob/main/.github/dependabot.yml	2025-05-28 11:10:14 +02:00
Akshay Agrawal	20cfc93c58	docs: integration with marimo guide (#13691) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary This change adds a new integration guide, on using uv with marimo notebooks. It is similar to but simpler than the existing Jupyter guide, since marimo stores notebooks as Python files and also integrates tightly with uv for package management. The guide showcases four ways of using uv with marimo: 1. marimo as a standalone tool (`uvx`) 2. managing inline script metadata (an alternative to Jupyter kernels, marimo has no concept of kernels) 3. in project environments 4. in non-project environments ## Test Plan N/A as this is a docs-only change. --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-05-27 18:43:43 -05:00
konsti	95c1463965	Update dependabot support status (#13690) ... Following user reports and https://github.com/dependabot/dependabot-core/issues?q=state%3Aopen%20label%3A%22L%3A%20python%3Auv%22%20sort%3Areactions-%2B1-desc, we're updating the dependabot support as partial. See https://github.com/astral-sh/uv/issues/2512#issuecomment-2900063741	2025-05-27 16:55:12 -05:00
Eva Müller	df00189ec5	docs: Explicitly specify to add a new repo entry to the repos list item in the .pre-commit-config.yaml (#10243) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary When creating the `.pre-commit-config.yaml` from scratch, although following https://pre-commit.com/, it might be easy to overlook that the pre-commit repo examples need to be added below the `repos` list item to get a valid `yaml` file. Additionally, updated the version of the first two examples. ## Test Plan I followed the `CONTRIBUTING.md` and the result looked fine. --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-05-27 16:25:23 +00:00
Jay Qi	2db1630f54	Add documentation about Python versions to Tools concept page (#7673) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary Add documentation about Python versions to Tools concept page ## Test Plan N/A --------- Co-authored-by: Jay Qi <jayqi@users.noreply.github.com> Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-05-27 16:23:29 +00:00
Arne Küderle	f657359729	Quote versions variables in GitLab documentation ... ## Summary Fixes #13675 ## Test Plan New example was tested manually to verify that it works.	2025-05-27 08:43:30 -04:00
Aria Desires	0ddcc19055	Bump version to 0.7.8 (#13629)	2025-05-23 19:13:28 -04:00
John Mumm	3758c513a4	Remove misleading line in pin documentation (#13611) ... The documentation did not reflect #12921.	2025-05-23 09:04:50 +02:00
Aria Desires	8580b4bd2d	Bump version to 0.7.7 (#13601)	2025-05-22 14:42:26 -04:00
konsti	46bc7d3477	Build backend: Support stubs packages (#13563) ... Stubs packages are different in that their name ends with `-stubs`, their module is `<module name>-stubs` (with a dash, not the generally legal underscore) and their modules contain a `__init__.pyi` instead of an `__init__.py` (https://typing.python.org/en/latest/spec/distributing.html#stub-only-packages). We add support in the uv build backend by detecting the `-stubs` suffix. Fixes #13546 --------- Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>	2025-05-22 19:02:17 +02:00
renovate[bot]	c7cabfccd7	Update markdown to v1 and fix CLI reference links (#13166) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [markdown](https://redirect.github.com/wooorm/markdown-rs) | dependencies | major | `0.3.0` -> `1.0.0` | --- ### Release Notes <details> <summary>wooorm/markdown-rs (markdown)</summary> ### [`v1.0.0`](https://redirect.github.com/wooorm/markdown-rs/releases/tag/1.0.0) 💯 Nothing changed since the last alpha. It’s just that: this crate’s now being used a bunch and working well, so it’s time to be stable! </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjI1Ny4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: konstin <konstin@mailbox.org>	2025-05-21 22:50:09 +02:00
Aria Desires	38884da9b9	make uv version lock and sync (#13317) ... This adopts the logic from `uv remove` for locking and syncing, as the scope of the changes made are ultimately similar. Unlike `uv remove` there is no support for modifying PEP723 scripts, as these are not versioned. In doing this the `version` command gains a truckload of args for configuring lock/sync behaviour. Presumably most of these are passed via settings or env files, and not of particular concern. The most interesting additions are: * `--frozen`: makes `uv version` work ~exactly as it did before this PR * `--locked`: errors if the lockfile is out of date * `--no-sync`: updates the lockfile, but doesn't run the equivalent of `uv sync` * `--package name`: a convenience for referring to a package in the workspace Note that the existing `--dry-run` flag effectively implies `--frozen` for sets and bumps. Fixes #13254 Fixes #13548	2025-05-21 09:46:09 -04:00
Art O Cathain	1bee9320f1	Clarify adding SSH Git dependencies (#13534) ... The current instructions say > prefix a Git-compatible URL (i.e., that you would use with git clone) with git+. But this does not work with the URL that Github gives you when you choose Clone -> SSH via the UI, which is of the form `git@github.com:astral-sh/uv.git`. If you prefix this with `git+`, i.e. `git+git@github.com:astral-sh/uv.git` it does not work. --------- Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>	2025-05-20 14:20:15 +00:00
Zanie Blue	7f3e94a091	Bump version to 0.7.6 (#13537) ... Co-authored-by: Aria Desires <aria.desires@gmail.com>	2025-05-19 19:46:11 -04:00
Reza Gharibi	d4e8df9b94	Fix PowerShell code blocks (#13511) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary The PowerShell prompt is not `$`, so it is not detected as a `Generic.Prompt` token by Pygments lexers. Therefore, the JavaScript code does not strip the prompt when copying from PowerShell code blocks, such as [here](https://docs.astral.sh/uv/getting-started/installation/#__tabbed_5_2). Other places in the docs have removed the prompt completely to address this issue: * https://docs.astral.sh/uv/guides/projects/#__tabbed_1_2 * https://docs.astral.sh/uv/guides/integration/jupyter/#__tabbed_1_2 This PR updates the PowerShell prompt to `PS>` and changes the code fence language to `pwsh-session` to match the lexer name from [Pygments](https://pygments.org/docs/lexers/#pygments.lexers.shell.PowerShellSessionLexer). This allows the prompt to be correctly detected as a `Generic.Prompt` token and is stripped during copy. Related: https://github.com/astral-sh/uv/pull/12520	2025-05-17 21:06:48 -05:00
Charlie Marsh	9d1a14e1f9	Bump version to v0.7.5 (#13500)	2025-05-16 20:37:17 -04:00
konsti	77268ee152	Build backend: Case sensitive module discovery (#13468) ... We may run on case-sensitive file systems (Linux, generally) or on case-insensitive file systems (Windows, generally), while modules in Python may be lower or upper case. For robustness over filesystem casing, we require an explicit module name for modules with upper cases. Fixes #13419	2025-05-16 14:25:35 +02:00
Zanie Blue	6fbcd09b5a	Bump version to 0.7.4 (#13473)	2025-05-15 11:08:50 -05:00
samypr100	395039afd1	feat(docker): add 3.14 beta images to uv docker (#13390) ... ## Summary Now that Python 3.14 first beta is out, I think it's worth adding support for the official upstream RC images. Once 3.14 is released, we can remove the `-rc-` infix from the images we pull from. ## Test Plan Upstream images verified to be functional with uv.	2025-05-13 20:27:09 +02:00
konsti	73cf2b8d59	uv export docs: "export" instead of "install" (#13430) ... Change the two missing places in the `uv export` docs to say "export" instead of "install".	2025-05-13 15:53:10 +02:00
Zanie Blue	26e37f3a1e	Rename --raw-sources to --raw (#13348) ... This also omits bounds on constraints, and is useful for that. This retains `--raw-sources` as an alias. I've had this on my mind for a while, but https://github.com/astral-sh/uv/pull/12946 reminded me of it again.	2025-05-08 15:05:03 -05:00
Zanie Blue	3c413f74b9	Bump verison to 0.7.3 (#13337)	2025-05-07 14:37:22 -05:00
konsti	a43333351e	Build backend: Allow escaping in globs (#13313) ... PEP 639 does not allow any characters that aren't in either their limited glob syntax or the alphanumeric Unicode characters. This means there's no way to express a glob such as `**/@test` for the excludes. We extend the glob syntax from PEP 639 by introducing backslash escapes, which can escape all characters but path separators (forward and backwards slashes) to be parsed verbatim. This means we have two glob parsers: The strict PEP 639 parser for `project.license-files`, and our extended parser for `tool.uv`, with a slight difference if you need to use special characters, to both adhere to PEP 639 and to support cases such as #13280. Fixes #13280	2025-05-07 18:31:41 +02:00
John Mumm	1eaa432e37	Remove outdated description of index strategy (#13326)	2025-05-07 08:18:21 -05:00
Tobias Gårdhus	5e7f3d2920	Add --show-with to uv tool list to list packages included by --with (#13264) ... ## Summary Add a `--show-extras` argument to the `uv tool list` cli, to show which extra dependencies were installed with the tool. i.e. ```bash $ uv tool install fastapi --with requests --with typer==0.14 ``` ```bash $ uv tool list --show-extras fastapi v0.115.12 [extras: requests, typer==0.14] - fastapi ``` ## Test Plan Added a new test function based on the others in the same file, with the other arguments tested with the new argument as well.	2025-05-06 15:23:50 -05:00
konsti	5386701cc1	Build backend: Make preview default and add configuration docs (#12804) ... Add configuration documentation for the build backend and make it the preview default. The build backend should generally work with default configuration unless you want specific features such as flat layout or module renaming, there is only a dedicated configuration, but no concept or guide page for the build backend. Once the build backend is stable, we can update the guide documentation to explain that uv defaults to its own build backend, but other build backends are also supported. The uv build backend becomes the default in preview, giving it more exposure from users and preparing it to make it the default proper. The current documentation retains warnings that the build backend is in preview. To see current uses of `uv_build` on GitHub: https://github.com/search?q=path%3A**%2Fpyproject.toml+uv_build%3E%3D0&type=code --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-05-05 13:52:31 +00:00
Zanie Blue	ea4284c041	Add --dry-run support to uv self update (#9829) ... See commentary at https://github.com/astral-sh/uv/issues/9828#issuecomment-2537542100 regarding the limitations and future upstream changes needed. ``` ❯ cargo build --features self-update Compiling uv v0.5.8 (/Users/zb/workspace/uv/crates/uv) Finished `dev` profile [unoptimized + debuginfo] target(s) in 7.28s ❯ cp ./target/debug/uv ~/.cargo/bin ❯ uv self update --dry-run info: Checking for updates... Nothing to do. You're on the latest version of uv (v0.5.8) ❯ uv self update --dry-run 0.5.7 info: Checking for updates... Would update uv from v0.5.8 to v0.5.7 ❯ vi ~/.config/uv/uv-receipt.json # Edit the receipt to think its on an older version ❯ uv self update --dry-run info: Checking for updates... Would update uv from v0.5.8 to the latest version ``` --------- Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>	2025-05-04 17:54:36 -04:00
Zanie Blue	21b9f62dbf	Update "Viewing the version" docs (#13241) ... Updates this section for - #12349 - #13108	2025-05-01 08:55:52 -04:00
Meitar Reihan	0593b967ba	Add python-downloads-json-url option for uv.toml to configure custom Python installations via JSON URL (#12974) ... ## Summary Part of #12838. Allow users to configure `python-downloads-json-url` in `uv.toml` and not just from env. I followed similar PR #8695, so same as there it's also available in the CLI (I think maybe it's better not to be configurable from the CLI, but since the mirror parameters are, I think it's better to do the same) ## Test Plan <!-- How was it tested? -->	2025-04-30 15:52:11 -04:00
Zanie Blue	481d05d8df	Bump version to 0.7.2 (#13240)	2025-04-30 14:01:58 -05:00
konsti	90f46f89a5	Bump version to 0.7.1 (#13218) ... Revert fix handling of authentication when encountering redirects ([#13215](https://github.com/astral-sh/uv/pull/13215))	2025-04-30 11:41:55 +02:00
Zanie Blue	1e8e08def2	Bump version to 0.7.0 and write changelog (#13201) ... The changelog diff is deranged. Rendered at https://github.com/astral-sh/uv/blob/zb/changelog-07/CHANGELOG.md#070 --------- Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com> Co-authored-by: Brent Westbrook <36778786+ntBre@users.noreply.github.com>	2025-04-29 16:37:00 -05:00
Zanie Blue	f84faf726a	Make uv’s first-index strategy more secure by default by failing early on authentication failure (#12805) ... uv’s default index strategy was designed with dependency confusion attacks in mind. [According to the docs](https://docs.astral.sh/uv/configuration/indexes/#searching-across-multiple-indexes), “if a package exists on an internal index, it should always be installed from the internal index, and never from PyPI”. Unfortunately, this is not true in the case where authentication fails on that internal index. In that case, uv will simply try the next index (even on the `first-index` strategy). This means that uv is not secure by default in this common scenario. This PR causes uv to stop searching for a package if it encounters an authentication failure at an index. It is possible to opt out of this behavior for an index with a new `pyproject.toml` option `ignore-error-codes`. For example: ``` [[tool.uv.index]] name = "my-index" url = "<index-url>" ignore-error-codes = [401, 403] ``` This will also enable users to handle idiosyncratic registries in a more fine-grained way. For example, PyTorch registries return a 403 when a package is not found. In this PR, we special-case PyTorch registries to ignore 403s, but users can use `ignore-error-codes` to handle similar behaviors if they encounter them on internal registries. Depends on #12651 Closes #9429 Closes #12362	2025-04-29 16:37:00 -05:00
Zanie Blue	60a164abbb	Remove --version from subcommands (#13108) ... Supersedes https://github.com/astral-sh/uv/pull/12439 — does not use the Clap macro so we retain control over the messages Closes #12431 0077a67b34 pulls `uv run` and `uv tool run` test changes from https://github.com/astral-sh/uv/pull/12439	2025-04-29 16:37:00 -05:00
Aria Desires	f401d9ba8f	change uv version to be an interface for project version reads and edits (#12349) ... This is a reimplementation of #7248 with a new CLI interface. The old `uv version` is now `uv self version` (also it has gained a `--short` flag for parity). The new `uv version` is now an interface for getting/setting the project version. To give a modicum of support for migration, if `uv version` is run and we fail to find/read a `pyproject.toml` we will fallback to `uv self version`. `uv version --project .` prevents this fallback from being allowed. The new API of `uv version` is as follows: * pass nothing to read the project version * pass a version to set the project version * `--bump major|minor|patch` to semver-bump the project version * `--dry-run` to show the result but not apply it * `--short` to have the final printout contain only the final version * `--output-format json` to get the final printout as json ``` $ uv version myfast 0.1.0 $ uv version --bump major --dry-run myfast 0.1.0 => 1.0.0 $ uv version 1.2.3 --dry-run myfast 0.1.0 => 1.2.3 $ uv version 1.2.3 myfast 0.1.0 => 1.2.3 $ uv version --short 1.2.3 $ uv version --output-format json { "package_name": "myfast", "version": "1.2.3", "commit_info": null } ``` Fixes #6298	2025-04-29 16:37:00 -05:00
Zanie Blue	de1479c4ef	Use index URL instead of package URL for keyring credential lookups (#12651) ... Some registries (like Azure Artifact) can require you to authenticate separately for every package URL if you do not authenticate for the /simple endpoint. These changes make the auth middleware aware of index URL endpoints and attempts to fetch keyring credentials for such an index URL when making a request to any URL it's a prefix of. The current uv behavior is to cache credentials either at the request URL or realm level. But with these changes, we also need to cache credentials at the index level. Note that when uv does not detect an index URL for a request URL, it will continue to apply the old behavior. Addresses part of #4056 Closes #4583 Closes #11236 Closes #11391 Closes #11507	2025-04-29 16:37:00 -05:00