5657 commits

Author	SHA1	Message	Date
Zanie Blue	89a59749c0	Store native credentials for realms with the https scheme stripped (#15879) ... Closes https://github.com/astral-sh/uv/issues/15818 Unfortunately, this is how we perform lookups. We could also change the lookup to include the scheme. I expect all of this to change in the future anyway, as I want to redesign the storage model for native credentials.	2025-09-15 13:47:33 -05:00
Zanie Blue	31f46cd6a6	Use the root index URL when retrieving credentials from the native store (#15873) ... Part of https://github.com/astral-sh/uv/issues/15818 We use the root when we store the credentials, so we need to use the root when we retrieve them!	2025-09-15 13:47:24 -05:00
Zanie Blue	daff98988b	Add test for realm-level authentication (#15877) ... Test coverage for https://github.com/astral-sh/uv/issues/15818	2025-09-15 17:27:59 +00:00
Zanie Blue	e90d13e53b	Remove lock_git_change_log (#15880) ... This test is unstable	2025-09-15 12:04:18 -05:00
Zanie Blue	0aa3c4e094	Propagate preview flag to client for native-auth feature (#15872) ... Somehow propagation of this got dropped during a rebase, so we never actually used the native store during resolution. Part of https://github.com/astral-sh/uv/issues/15818	2025-09-15 10:51:44 -05:00
Charlie Marsh	d706c07ae3	Avoid re-parsing pyproject.toml when provided as a source (#15851) ... ## Summary In the process of making a different change, I noticed that we parse this during source discovery, throw it away, then parse it again later.	2025-09-15 10:07:38 -04:00
Charlie Marsh	ef17e7d0f4	Load credentials for explicit members when lowering (#15844) ... ## Summary If the target for `uv pip compile` is a `pyproject.toml` in a subdirectory, we won't have loaded the credentials when we go to lower (since it won't be loaded as part of "configuration discovery"). We now add those indexes just-in-time. Closes https://github.com/astral-sh/uv/issues/15362.	2025-09-15 13:54:38 +00:00
Charlie Marsh	64bcd4e8a6	Improve BSD tag construction (#15829) ... ## Summary I had to use ChatGPT to help with my research on the "correct" architecture names for these platforms; there could still be some rough edges, but this seems like an improvement. Closes https://github.com/astral-sh/uv/issues/15799.	2025-09-14 10:48:37 -04:00
Charlie Marsh	3c813cde76	Error when pyproject.toml target does not exist for dependency groups (#15831) ... ## Summary Closes https://github.com/astral-sh/uv/issues/15789.	2025-09-14 13:49:35 +00:00
Charlie Marsh	b770639c91	Rename provides_extras to provides_extra (#15825) ... ## Summary This is now consistent with `requires_dist` (singular).	2025-09-14 13:27:45 +00:00
Charlie Marsh	312084f2dd	Allow cached environment reuse with @latest (#15827) ... ## Summary I think this is leftover from a prior refactor whereby we used to avoid reusing the cached environment if `--reinstall` was passed; but then we stopped allowing `--reinstall` in `uv tool run` anyway, and this got changed to `--refresh`. It seems wrong to skip cache reuse with `--refresh`, though. Closes https://github.com/astral-sh/uv/issues/15824.	2025-09-14 09:10:46 -04:00
Charlie Marsh	0a2a7bc445	Log when the cache is disabled (#15828) ... ## Summary This strikes me as fairly reasonable. Closes https://github.com/astral-sh/uv/issues/15822.	2025-09-14 01:57:10 +00:00
Charlie Marsh	f59d00b479	Allow escaping spaces in --env-file handling (#15815) ... ## Summary We allow space-delimiting for `--env-file`, but Clap doesn't support any form of escaping, so as-is, there's no way to provide a `.env` file in a directory that contains a space. We now do the splitting ourselves and respect escapes. Closes https://github.com/astral-sh/uv/issues/15806.	2025-09-12 18:11:51 -04:00
Charlie Marsh	b1fbb524d2	Include SHA when listing lockfile changes (#15817) ... ## Summary Right now, we only list changes if the _version_ differs. This PR takes the SHA into account. We may want to list changes to _any_ sources, but that gets more complicated (e.g., if the user swaps the index URL, we'd have to show _all_ changes to the index URL). Closes #15810.	2025-09-12 17:57:58 +00:00
Charlie Marsh	bd8a9348bd	Document NO_PROXY support (#15816) ... Closes https://github.com/astral-sh/uv/issues/15785.	2025-09-12 13:11:05 -04:00
Ahmed Ilyas	9153d1a5e3	Deprecate tool.uv.dev-dependencies (#15469) ... ## Summary Closes https://github.com/astral-sh/uv/issues/15406 ## Test Plan `cargo test` --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-09-12 15:08:09 +00:00
Zanie Blue	8f3583a6e6	Allow selection of debug build interpreters (#11520) ... Extends the `PythonVariant` logic to support interpreters with the debug flag enabled.	2025-09-12 13:32:22 +00:00
rimathia	3081557159	Better defaults for native build backend cache keys (#15705) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary This change extends the default initialized projects with scikit and maturin build backends to ensure that the rust or C++ build gets invoked when a source file changes. ## Test Plan `cargo run init cppextension-test --build-backend=scikit` followed by manual testing of the behaviour of the resulting project under `uv run --with jupyter jupyter lab` and changes to the source file of the extension. Analogous for `cargo run init maturin-test --build-backend=maturin `. ## Relevant Issues The question of why the python extension is not rebuilt on source changes has been discussed in https://github.com/astral-sh/uv/issues/15701#issuecomment-3258714942.	2025-09-12 11:14:59 +02:00
William Woodruff	21a92c1632	feat(publish): include blake2b hash in upload form (#15794)	2025-09-11 16:17:07 -04:00
Harshith VH	a0f8359012	Add conflict detection between --only-group and --extra flags (#15788) ... <!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary - Added `conflicts_with = "only_group"` to `--extra` arguments in `SyncArgs`, `RunArgs`, and `ExportArgs` - Added tests to verify proper conflict detection and error messages **Before:** The `--extra` flag was silently ignored when used with `--only-group` **After:** Clear error message: `error: the argument '--only-group <ONLY_GROUP>' cannot be used with '--extra <EXTRA>'` fixes: #15676 ## Test Plan - Tests confirm proper error message format when `--only-group` and `--extra` are used together - Verified existing functionality remains unchanged when flags are used independently	2025-09-11 10:34:49 -05:00
Harsh Pratap Singh	5f2871e695	Support Gitlab CI/CD as a trusted publisher (#15583) ... Co-authored-by: William Woodruff <william@astral.sh>	2025-09-11 10:35:04 -04:00
Zanie Blue	cbb713f705	Review for #15769 (#15775) ... Addresses my review comments from https://github.com/astral-sh/uv/pull/15769	2025-09-11 13:20:13 +00:00
konsti	2ec71bd608	Update packse to 0.3.52: Fix requires python 3.12 (#15786) ... Pull in the latest packse changes to make all test work with the new default Python requirement, 3.12.	2025-09-11 13:19:34 +00:00
Zanie Blue	7789f5b217	Bump version to 0.8.17 (#15776)	2025-09-10 14:59:48 -05:00
Charlie Marsh	b195d523d5	Add pyx as a supported PyTorch index URL (#15769) ... ## Summary If the user explicitly authenticated to pyx, then we attempt to use the pyx PyTorch URLs; otherwise, we stick to `download.pytorch.org` as the default.	2025-09-10 14:38:00 -05:00
David Peter	0d174b79e2	Ignore pre-release versions in uv init --script (#15747) ... ## Summary Ignore managed pre-release versions of Python for purposes of creating a `requires-python` constraint when running `uv init --script`. This makes the behavior consistent with `uv init` for normal projects. ## Test Plan Added a regression test that makes sure that the constraint is `requires-python = ">=3.13"`, even though a pre-release version of 3.14 is installed.	2025-09-10 14:35:29 -05:00
Zanie Blue	27d205b0c3	Respect PYX_API_URL when suggesting uv auth login on 401 (#15774)	2025-09-10 19:24:46 +00:00
Charlie Marsh	ccf01fff66	Avoid initiating login flow for invalid API keys (#15773) ... ## Summary If the login flow fails, and the user provided an API key, it's unintuitive to initiate the login flow.	2025-09-10 19:07:29 +00:00
Zanie Blue	b2c59a8ace	Do not search for a password for requests with a token attached already (#15772)	2025-09-10 13:52:09 -05:00
Zanie Blue	7c716d5227	Improve error message for HTTP validation in auth services (#15768) ... Follows https://github.com/astral-sh/uv/pull/15755	2025-09-10 13:15:19 -05:00
Charlie Marsh	2de677b0d3	Bump version to v0.8.16 (#15761) ... Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-09-09 21:41:56 -04:00
konsti	e691ac7c9a	Build backend error message style consistency (#15735) ... Consistently omit backticks after a colon in build backend messages, following https://github.com/astral-sh/uv/pull/15733#discussion_r2330156783. There's still 74 matches for `: {}"` and 183 matches for `: {[^{]*}"`, but this PR clears all matches in the build backend.	2025-09-09 17:34:56 +00:00
Zsolt Dollenstein	ae2dce6d25	auth: allow insecure http only on localhost (#15755) ... ## Summary This is useful for testing purposes. ## Test Plan I tested using testing purposes.	2025-09-09 17:21:14 +01:00
Charlie Marsh	5494645fba	Use token store credentials for uv publish (#15759) ... ## Summary Running `uv publish` to pyx should re-use the already-stored token rather than prompting for credentials. Closes https://github.com/astral-sh/uv/issues/15758.	2025-09-09 16:13:31 +00:00
konsti	cd49e1d11f	Use the windows crate facade consistently (#15737) ... The initial motivation for this change was that we were using both the `windows`, the `window_sys` and the `windows_core` crate in various places. These crates have slightly unconventional versioning scheme where there is a large workspace with the same version in general, but only some crates get breaking releases when a new breaking release happens, the others stay on the previous breaking version. The `windows` crate is a shim for all three of them, with a single version. This simplifies handling the versions. Using `windows` over `windows_sys` has the advantage of a higher level error interface, we now get a `Result` for all windows API calls instead of C-style int-returns and get-last-error calls. This makes the uv-keyring crate more resilient. We keep using the `windows_registry` crate, which provides a higher level interface to windows registry access.	2025-09-09 15:07:14 +00:00
konsti	12764df8b2	Show a dedicated error for venvs in source trees (#15748) ... A user in the support chat had an error message for `uv build` with the `uv_build` backend they didn't understand, which was caused by them having a venv in their build directory. This PR adds a dedicated error message when adding something to a distribution that looks like a venv.	2025-09-09 12:41:58 +00:00
Zanie Blue	9d3a3843c3	Ban empty usernames and passwords in uv auth (#15743) ... Otherwise, you can get yourself in a weird state?	2025-09-09 06:23:33 -05:00
konsti	d9b63dc547	Use workspace dependencies in uv-keyring (#15738) ... It seems that this was during the vendoring of the keyring crate.	2025-09-09 09:05:43 +02:00
Yiğit Ö. Ünver	19ea0f4932	support --no-project in uv format (#15572) ... When a user passes `--no-project` argument to `uv format` command, instead of running the formatter in the context of the current project, run it in the context of the current directory. This is useful when the current directory is not a project. Closes https://github.com/astral-sh/uv/issues/15462	2025-09-08 16:16:40 -05:00
renovate[bot]	bd36952492	Update Rust crate toml to v0.9.5 (#15727) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [toml](https://redirect.github.com/toml-rs/toml) | workspace.dependencies | patch | `0.9.2` -> `0.9.5` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>toml-rs/toml (toml)</summary> ### [`v0.9.5`](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.4...toml-v0.9.5) [Compare Source](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.4...toml-v0.9.5) ### [`v0.9.4`](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.3...toml-v0.9.4) [Compare Source](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.3...toml-v0.9.4) ### [`v0.9.3`](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.2...toml-v0.9.3) [Compare Source](https://redirect.github.com/toml-rs/toml/compare/toml-v0.9.2...toml-v0.9.3) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-08 15:06:38 +00:00
konsti	39fe2d9eac	Error early for parent path in build backend (#15733) ... Paths referencing above the directory of the `pyproject.toml`, such as `module-root = ".."`, are not supported by the build backend. The check that should catch was not working properly, so the source distribution built successfully and only the wheel build failed. We now error early. The same fix is applied to data includes. Fix #15702	2025-09-08 13:53:16 +00:00
Zanie Blue	5f8c7181b9	Improve the CLI help for options that accept requirements files (#15706)	2025-09-08 08:23:52 -05:00
renovate[bot]	25ca424551	Update Rust crate mimalloc to v0.1.48 (#15724) ... This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [mimalloc](https://redirect.github.com/purpleprotocol/mimalloc_rust) | dependencies | patch | `0.1.47` -> `0.1.48` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>purpleprotocol/mimalloc_rust (mimalloc)</summary> ### [`v0.1.48`](https://redirect.github.com/purpleprotocol/mimalloc_rust/releases/tag/v0.1.48): Version 0.1.48 [Compare Source](https://redirect.github.com/purpleprotocol/mimalloc_rust/compare/v0.1.47...v0.1.48) ##### Changes - Mimalloc `v3` feature flag. (credits [@&#8203;gschulze](https://redirect.github.com/gschulze)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-08 07:08:37 +00:00
Charlie Marsh	5012b4e831	Allow --editable to override editable = false annotations (#15712) ... ## Summary We support `--no-editable` on the CLI, but now that workspace members and path dependencies can be marked as `editable = false`, I think it makes sense for `--editable` to override that.	2025-09-07 14:37:04 -04:00
Charlie Marsh	e84c9231aa	Allow editable = false for workspace sources (#15708) ... ## Summary This ended up being a bit more complex, similar to `package = false`, because we need to understand the editable status _globally_ across the workspace based on the packages that depend on it. Closes https://github.com/astral-sh/uv/issues/15686.	2025-09-07 15:41:17 +00:00
konsti	97777cda66	Don't trace logs all architectures (#15710) ... On my machine, this statement print over 500 lines for `uv python list -vv` of evident statements.	2025-09-07 17:31:50 +02:00
Brendan	cbcf51391f	fix: refresh activation scripts from upstream virtualenv (#15272) ... ## Summary This refreshes the venv activation scripts from upstream `virtualenv` project. This was largely triggered by a problem in the activate.nu script (for nushell): - #14888 - #14914 - #14917 I was careful to respect the git history going back to astral-sh/uv#3376 (the last time this was done). Actually I looked at the complete history from back when this `uv-virtualenv` crate was named after a Pokémon (⁉️), but I found nothing (about activation scripts) from back then that hasn't been overwritten since. ### Some post-processing was involved - Retained license info at top of scripts - Retained template vars (eg `{{ BIN_PATH }}`) to assure current support toward relocatable venv - Retained deviation from upstream in astral-sh/uv#5640. This seems to be the only deviation that isn't in sync with upstream. ### Notable changes from upstream - (omitted due to undesirable complexity) pypa/virtualenv#2928 and its follow-up pypa/virtualenv#2940 - pypa/virtualenv#2910 (what prompted astral-sh/uv#14917 from astral-sh/uv#14888) ## Test Plan There was a request in #14917 to add unit tests to detect breakage or errors. I have added a CI job that runs the nushell activation script. But I think it is better to have the CI test all/most supported shells. See also #15294 I have tested this locally using - [x] nushell (v0.106.1) - [x] cmd.exe (Microsoft Windows [Version 10.0.26100.4946]) - [x] bash in WSL (GNU bash, version 5.1.16(1)-release (x86_64-pc-linux-gnu)) - [x] pwsh (PSVersion 5.1.26100.4768)	2025-09-05 16:12:37 -05:00
Jorge Hermo	c59ead398d	Allow uv format in unmanaged projects (#15553) ... Closes #15550 --------- Co-authored-by: Zanie Blue <contact@zanie.dev>	2025-09-05 13:14:41 -05:00
Ahmed Ilyas	6eefde28e7	Support --with-requirements script.py and -r script.py to include inline dependency metadata from another script (#12763) ... ## Summary Closes #6542 ## Test Plan `cargo test`	2025-09-05 11:45:46 -05:00
Zanie Blue	e136a51f3d	Skip Python interpreters that cannot be queried with permission errors (#15685) ... Closes https://github.com/astral-sh/uv/issues/15651	2025-09-05 09:03:41 -05:00