5386 commits

Author	SHA1	Message	Date
Zanie Blue	e176e17144	Bump version to 0.8.4 (#14980)	2025-07-30 16:24:20 +00:00
Zanie Blue	630394476e	Copy entrypoints that have a shebang that differs in python vs python3 (#14970) ... In https://github.com/astral-sh/uv/issues/14919 it was reported that uv's behavior differed after the first invocation. I noticed we weren't copying entrypoints after the first invocation. It turns out the shebangs were written with `.../python` but on a subsequent invocation the `sys.executable` was `.../python3` so we didn't detect these as matching. This is a pretty naive fix, but it seems much easier than ensuring the entry point path exactly matches the subsequent `sys.executable` we find. I guess we should fix this in reverse too? but I think we might always prefer `python3` when loading interpreters from environments. See #14790 for more background.	2025-07-30 11:00:16 -05:00
Zanie Blue	c9d3d60a18	Implement CacheKey for all Pep508Url variants (#14978) ... Closes #14973	2025-07-30 10:44:06 -05:00
Charlie Marsh	a76e538aa5	Extend wheel filtering to Android tags (#14977) ... ## Summary Just while I'm here for https://github.com/astral-sh/uv/pull/14976.	2025-07-30 15:26:44 +00:00
Charlie Marsh	9b8ff44a04	Perform wheel lockfile filtering based on platform and OS intersection (#14976) ... ## Summary Ensures that if the user filters to macOS ARM, we don't include macOS x86_64 wheels. Closes https://github.com/astral-sh/uv/issues/14901.	2025-07-30 15:12:22 +00:00
Zanie Blue	6856a27711	Add extra-build-dependencies (#14735) ... Replaces https://github.com/astral-sh/uv/pull/14092 Adds `tool.uv.extra-build-dependencies = {package = [dependency, ...]}` which extends `build-system.requires` during package builds. These are lowered via workspace sources, are applied to transitive dependencies, and are included in the wheel cache shard hash. There are some features we need to follow-up on, but are out of scope here: - Preferring locked versions for build dependencies - Settings for requiring locked versions for build depencies There are some quality of life follow-ups we should also do: - Warn on `extra-build-dependencies` that do not apply to any packages - Add test cases and improve error messaging when the `extra-build-dependencies` resolve fails ------- There ~are~ were a few open decisions to be made here 1. Should we resolve these dependencies alongside the `build-system.requires` dependencies? Or should we resolve separately? (I think the latter is more powerful? because you can override things? but it opens the door to breaking your build) 2. Should we install these dependencies into the same environment? Or should we layer it on top as we do elsewhere? (I think it's fine to install into the same environment) 3. Should we respect sources defined in the parent project? (I think yes, but then we need to lower the dependencies earlier — I don't think that's a big deal, but it's not implemented) 4. Should we respect sources defined in the child project? (I think no, this gets really complicated and seems weird to allow) 5. Should we apply this to transitive dependencies? (I think so) --------- Co-authored-by: Aria Desires <aria.desires@gmail.com> Co-authored-by: konstin <konstin@mailbox.org>	2025-07-30 09:53:07 -05:00
Boseong Choi	b2eff990df	Fix typo in uv-pep440/README.md (#14965) ... ## Summary I noticed what appears to be a small typo in the documentation. In the section describing dev versions, it says `sbpth table releases`. I believe this was meant to be `both stable releases`, to match the structure of the previous sentence about post versions.	2025-07-30 12:25:48 +02:00
Charlie Marsh	b31d786fe9	Add UV_ prefix to installer environment variables (#14964) ... ## Summary Available as of https://github.com/astral-sh/cargo-dist/pull/46.	2025-07-30 01:24:59 +00:00
Zanie Blue	e7c8b47b7a	Clarify messaging when a new resolution needs to be performed (#14938) ... We do not just "ignore" the existing lockfile here. We retain the existing messaging for cases where we do actually throw out the lockfile, like `--upgrade`.	2025-07-29 21:13:30 -04:00
Zanie Blue	11fe8f70f9	Add exclude-newer-package (#14489) ... Adds `exclude-newer-package = { package = timestamp, ... } ` and `--exclude-newer-package package=timestamp`. These take precedence over `exclude-newer` for a given package. This does need to be serialized to the lockfile, so the revision is bumped to 3. I tested a previous version and we can read a lockfile with this information just fine. Closes https://github.com/astral-sh/uv/issues/14394	2025-07-29 17:00:25 -05:00
Zanie Blue	00efde06b6	Split platform detection code into a dedicated uv-platform crate (#14918) ... In service of some subsequent work...	2025-07-28 14:12:04 -05:00
Zanie Blue	5686771464	Cache Python downloads by default in python install tests (#14326) ... Adds a cache bucket for Python installs and uses it by default during tests, extending the opt-in cache added in https://github.com/astral-sh/uv/pull/12175 Updates the `python_install` tests to use a shared cache for Python installs. This reduces the `python_install` test runtime on my machine from 23s -> 17s. The difference should be much larger on machines with slower internet and less cores for test workers :) This should also improve stability in CI by reducing reliance on the network during test runs, see #14327	2025-07-28 17:33:57 +00:00
konsti	ac135278c3	Better warning chain styling (#14934) ... Improve the styling of warning chains for Python installation errors. Apply the same logic to other internal warning and error formatting locations. **Before** <img width="1232" height="364" alt="Screenshot from 2025-07-28 10-06-41" src="https://github.com/user-attachments/assets/e3befe14-ad4c-44ed-8b0a-57d9c9a3b815" /> **After** <img width="1232" height="364" alt="Screenshot from 2025-07-28 10-23-49" src="https://github.com/user-attachments/assets/1bd890c1-5dbb-4662-93bd-14430c060a69" />	2025-07-28 16:23:39 +00:00
shikinamiasuka	55df845922	Fix incorrect file permissions in wheel packages (#14930) ... Fixes #14920 ## Summary Problem: When building wheel packages, metadata files (such as RECORD, METADATA, WHEEL, and license files) were being created with incorrect Unix permissions (--w--wx---), lacking read permissions and having unexpected executable permissions. Solution: The fix ensures that all metadata files in wheel packages are created with proper 644 (rw-r--r--) permissions by: - Adding explicit unix_permissions(0o644) setting in the write_bytes method for metadata files - Updating permission constants to use octal notation for clarity - Improving code comments to document the permission settings Impact: This change ensures wheel packages created by uv have standard file permissions consistent with other Python build tools like setuptools, improving compatibility and following Python packaging best practices.	2025-07-28 15:56:08 +02:00
Zanie Blue	c97d12bcf3	Unhide uv from --build-backend options (#14939) ... Closes https://github.com/astral-sh/uv/issues/14921	2025-07-28 13:26:23 +00:00
renovate[bot]	8cd8c95071	Update Rust crate criterion to 0.7.0 (#14927) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [criterion](https://bheisler.github.io/criterion.rs/book/index.html) ([source](https://redirect.github.com/bheisler/criterion.rs)) | dependencies | minor | `0.6.0` -> `0.7.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>bheisler/criterion.rs (criterion)</summary> ### [`v0.7.0`](https://redirect.github.com/bheisler/criterion.rs/blob/HEAD/CHANGELOG.md#070---2025-07-25) [Compare Source](https://redirect.github.com/bheisler/criterion.rs/compare/0.6.0...0.7.0) - Bump version of criterion-plot to align dependencies. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40MC4wIiwidXBkYXRlZEluVmVyIjoiNDEuNDAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-07-28 08:10:06 -05:00
konsti	8cb36d6f40	Move all retry tests to network.rs (#14935) ... Retry behavior isn't tied to a specific installation method, but underlies all of them.	2025-07-28 07:33:54 -05:00
Charlie Marsh	0a51489ec4	Remove resolved TODO in allowed_indexes (#14912) ... ## Summary This got solved in #14858.	2025-07-26 04:04:28 +00:00
Zanie Blue	ae1964935f	Remove extra newline (#14907) ... Fixes https://github.com/astral-sh/uv/pull/14905#discussion_r2231915714	2025-07-25 20:40:09 +00:00
Zanie Blue	7b8dd5cfaf	Run cargo update (#14899)	2025-07-25 15:19:38 -05:00
Zanie Blue	396e198081	Update documentation for preview flags (#14902) ... Follows #14823	2025-07-25 15:19:24 -05:00
Zanie Blue	c489fcb633	Update validation for enviroments and required-environments in uv.toml (#14905) ... See https://github.com/astral-sh/uv/pull/14322/files#r2231891679 Closes https://github.com/astral-sh/uv/issues/14904	2025-07-25 15:19:07 -05:00
Zanie Blue	a701d3c447	Use workspace dependencies for crate dev-dependencies (#14903)	2025-07-25 13:57:49 -05:00
Zanie Blue	bfb4bc2aeb	Split preview mode into separate feature flags (#14823) ... I think this would give us better hygiene than a global flag. It makes it easier for users to opt-in to overlapping features, such as Python upgrades and Python bin installations and to disable warnings for preview mode without opting in to a bunch of other features. In general, I want to reduce the burden for putting something under preview. The `--preview` and `--no-preview` flags are retained as global overrides. A new `--preview-features` option is added which accepts comma separated features or can be passed multiple times, e.g., `--preview-features add-bounds,pylock`. There's a `UV_PREVIEW_FEATURES` environment variable for that option (I'm not sure if we should overload `UV_PREVIEW`, but could be convinced).	2025-07-25 11:01:57 -05:00
konsti	9376cf5482	Remove prioritized dist duplication (#14887) ... `Candidate` has an optional field `prioritized`, which was mostly redundant with `CandidateDist`. Specifically, it was only `None`, if `CandidateDist` was `Installed`. This commit removes this duplication.	2025-07-25 17:18:24 +02:00
Charlie Marsh	1146f3f62d	Avoid invalidating lockfile when path or workspace dependencies define explicit indexes (#14876) ... ## Summary This is an alternative to #14003 that takes advantage of the fact that we already validate that the requirements are up-to-date when validating the lockfile, and the requirements for pinned requirements include the index itself -- so rather than collecting all the explicit indexes upfront, we can just add them to the available list as we iterate over the lockfile's dependency graph. This gets all the tests passing from that PR, but with ~no performance impact and a much less invasive change. It also gets the "circular dependency" test passing, which is marked with a TODO in that PR. Closes https://github.com/astral-sh/uv/issues/11419.	2025-07-25 08:18:28 -04:00
Zanie Blue	05031becc3	Fix snapshot for GitHub message (#14881)	2025-07-24 22:40:55 +00:00
Zanie Blue	e48a9c0992	Remove redundant let Some (#14880)	2025-07-24 17:29:56 -05:00
Zanie Blue	cd4cf27d88	Add test cases for dependent conflicting extras (#14879) ... Picked from #9130	2025-07-24 17:29:40 -05:00
Zanie Blue	7e78f54e7c	Bump version to 0.8.3 (#14875)	2025-07-24 15:51:15 -05:00
Zanie Blue	23ed31b94d	Consolidate environment hash filtering (#14864)	2025-07-24 12:35:45 +00:00
konsti	1150de3fc5	uv_build: Allow non-standard entrypoint names (#14867) ... It seems that non-standard entrypoints are still widely used, downgrading the error to a tracing warning. Fixes #14442 --------- Co-authored-by: Ed Morley <501702+edmorley@users.noreply.github.com>	2025-07-24 14:12:36 +02:00
Elijah Hartvigsen	3b59515614	Fix typos in uv_build reference documentation (#14853) ... ## Summary Fixes both typos mentioned in #14845. ## Test Plan It wasn't :D --------- Co-authored-by: konstin <konstin@mailbox.org>	2025-07-24 09:55:14 +00:00
Charlie Marsh	02e103f867	Respect --with versions over base environment versions (#14863) ... ## Summary This fixes a regression from https://github.com/astral-sh/uv/pull/14447 that we seemingly didn't have test coverage for. Specifically, if you have a version of a package in your project, and then install a different version with `--with`, the environment should import the `--with` version. Closes #14860.	2025-07-24 02:00:03 +00:00
Zanie Blue	1ddfcee9e9	Fix missed stabilization of removal of registry entry during Python uninstall (#14859) ... Funny enough, I caught this via https://github.com/astral-sh/uv/pull/14823	2025-07-23 17:44:48 -05:00
Charlie Marsh	faa12f50ce	Respect credentials from all defined indexes (#14858) ... ## Summary The core problem here is that `allowed_indexes` only includes at most one "default" index. This is problematic for tool upgrades, since the index in the receipt will be marked as default, but credentials will be omitted; if credentials are then defined in a `uv.toml`, we'll never look at those, since that will _also_ be marked as default, and we only look at the first default. Instead, we should consider all defined indexes in priority order. Closes https://github.com/astral-sh/uv/issues/14806.	2025-07-23 21:23:51 +00:00
Charlie Marsh	4dd0392086	Avoid writing redacted credentials to tool receipt (#14855) ... ## Summary Right now, we write index URLs to the tool receipt with redacted credentials (i.e., a username, and `****` in lieu of a password). This is always wrong and unusable. Instead, this PR drops them entirely. Part of https://github.com/astral-sh/uv/issues/14806.	2025-07-23 16:01:10 -04:00
Charlie Marsh	09549c2e71	Use cache_index_credentials in uv venv (#14854)	2025-07-23 16:00:56 -04:00
konsti	f7ac6875c3	Improve concurrency safety of Python downloads into cache (#14846)	2025-07-23 11:52:39 -05:00
github-actions[bot]	310a9d3426	Sync latest Python releases (#14847) ... Automated update for Python releases. Co-authored-by: zanieb <2586601+zanieb@users.noreply.github.com>	2025-07-23 11:01:09 -05:00
Zanie Blue	21fadbcc13	Bump version to 0.8.2 (#14832)	2025-07-22 19:39:53 +00:00
Nils Koch	34cda1be44	expose tls_built_in_root_certs from reqwest client (#14816) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary We are using UV as a library and need to set `tls_built_in_root_certs` on the reqwest client. This PR exposes this property in the `BaseClientBuilder` and in the `RegistryClientBuilder`. The default is set to `false`, so this does not change any behaviour unless you explicitly opt into it. <!-- What's the purpose of the change? What does it do, and why? --> ## Test Plan <!-- How was it tested? -->	2025-07-22 14:25:33 -05:00
Zanie Blue	02cc49296b	Avoid reading files in the environment bin that are not entrypoints (#14830) ... Closes https://github.com/astral-sh/uv/issues/14829 I tested this against the given Dockerfile.	2025-07-22 19:11:15 +00:00
Zanie Blue	8289e38e8f	Add UV_INIT_BUILD_BACKEND (#14821) ... Closes https://github.com/astral-sh/uv/issues/14820	2025-07-22 14:10:08 -05:00
Charlie Marsh	27ade0676f	Preserve index URL priority order when writing to pyproject.toml (#14831) ... ## Summary A little nuanced, but... When you add multiple `--index` URLs on the CLI (e.g., in `uv pip install`), we check the first-provided index, then the second index, etc. However, when we _write_ those URLs to the `pyproject.toml` in `uv add`, we were adding them in reverse-order. We now add them in a way that preserves the priority order. Closes https://github.com/astral-sh/uv/issues/14817.	2025-07-22 19:09:59 +00:00
Charlie Marsh	3d1fec2732	Add derivation chains for dependency errors (#14824) ... ## Summary This PR adds derivation chain for another class of resolver failures. For example, if we encounter a transitive URL dependency, we now tell the user which package included it, and the full derivation chain: ``` × Failed to resolve dependencies for `foo` (v0.1.0) ╰─▶ Package `flask` was included as a URL dependency. URL dependencies must be expressed as direct requirements or constraints. Consider adding `flask @ 9d4508e893/flask-3.1.1-py3-none-any.whl` to your dependencies or constraints file. help: `foo` (v0.1.0) was included because `baz` (v0.1.0) depends on `foo` ``` Closes #14795.	2025-07-22 15:08:33 -04:00
Zanie Blue	076677da20	Avoid removing empty directories when constructing virtual environments (#14822) ... Closes https://github.com/astral-sh/uv/issues/14815 I tested this with the docker-compose reproduction. You can also see a regression test change at 2ae4464b7e	2025-07-22 13:50:14 -05:00
Zanie Blue	f0151f3a18	Bump version to 0.8.1 (#14818)	2025-07-22 11:36:20 -05:00
Zanie Blue	7d41bdb308	Allow removal of virtual environments with missing interpreters (#14812) ... Co-authored-by: konsti <konstin@mailbox.org>	2025-07-22 15:16:59 +00:00
Copilot	96b889bce3	Add hint to use uv self version when uv version cannot find a project (#14738) ... When users run `uv version` in a directory without a `pyproject.toml` file, they often intend to check uv's own version rather than a project's version. This change adds a helpful hint to guide users to the correct command. **Before:** ``` ❯ uv version error: No `pyproject.toml` found in current directory or any parent directory ``` **After:** ``` ❯ uv version error: No `pyproject.toml` found in current directory or any parent directory hint: If you meant to view uv's version, use `uv self version` instead ``` ## Changes - Modified `find_target()` function in `crates/uv/src/commands/project/version.rs` to catch `WorkspaceError::MissingPyprojectToml` specifically and enhance the error message with a helpful hint - Added import for `WorkspaceError` to access the specific error type - Updated existing tests to expect the new hint message in error output - Added new test case `version_get_missing_with_hint()` to verify behavior The hint appears consistently across all scenarios where `uv version` fails to find a project: - `uv version` (normal mode) - `uv version --project .` (explicit project mode) - `uv version --preview` (preview mode) The change maintains all existing functionality - when a `pyproject.toml` is found, `uv version` continues to work normally without showing the hint. Fixes #14730. <!-- START COPILOT CODING AGENT TIPS --> --- 💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more [Copilot coding agent tips](https://gh.io/copilot-coding-agent-tips) in the docs. --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: zanieb <2586601+zanieb@users.noreply.github.com>	2025-07-22 08:32:45 -05:00