Use consistent workspace inheritance (#15031)

Following a CI failure in https://github.com/astral-sh/uv/pull/15028,
ensure that all workspace crates are inheriting the MSRV and other
workspace configuration from the workspace root.

.github/workflows/build-binaries.yml

@@ -718,7 +718,7 @@ jobs:
           manylinux: auto
           docker-options: ${{ matrix.platform.maturin_docker_options }}
           args: --release --locked --out dist --features self-update
-      - uses: uraimo/run-on-arch-action@ac33288c3728ca72563c97b8b88dda5a65a84448 # v2
+      - uses: uraimo/run-on-arch-action@d94c13912ea685de38fccc1109385b83fd79427d # v3.0.1
         name: "Test wheel"
         with:
           arch: ${{ matrix.platform.arch }}
@@ -767,7 +767,7 @@ jobs:
           manylinux: auto
           docker-options: ${{ matrix.platform.maturin_docker_options }}
           args: --profile minimal-size --locked --out crates/uv-build/dist -m crates/uv-build/Cargo.toml
-      - uses: uraimo/run-on-arch-action@ac33288c3728ca72563c97b8b88dda5a65a84448 # v2
+      - uses: uraimo/run-on-arch-action@d94c13912ea685de38fccc1109385b83fd79427d # v3.0.1
         name: "Test wheel uv-build"
         with:
           arch: ${{ matrix.platform.arch }}
@@ -814,7 +814,7 @@ jobs:
           args: --release --locked --out dist --features self-update
       - name: "Test wheel"
         if: matrix.target == 'x86_64-unknown-linux-musl'
-        uses: addnab/docker-run-action@v3
+        uses: addnab/docker-run-action@4f65fabd2431ebc8d299f8e5a018d79a769ae185 # v3
         with:
           image: alpine:3.12
           options: -v ${{ github.workspace }}:/io -w /io
@@ -861,7 +861,7 @@ jobs:
           args: --profile minimal-size --locked --out crates/uv-build/dist -m crates/uv-build/Cargo.toml
       - name: "Test wheel uv-build"
         if: matrix.target == 'x86_64-unknown-linux-musl'
-        uses: addnab/docker-run-action@v3
+        uses: addnab/docker-run-action@4f65fabd2431ebc8d299f8e5a018d79a769ae185 # v3
         with:
           image: alpine:3.12
           options: -v ${{ github.workspace }}:/io -w /io

.github/workflows/build-docker.yml

@@ -225,6 +225,7 @@ jobs:
           cat <<EOF > Dockerfile
           FROM ${BASE_IMAGE}
           COPY --from=${{ env.UV_GHCR_IMAGE }}:latest /uv /uvx /usr/local/bin/
+          ENV UV_TOOL_BIN_DIR="/usr/local/bin"
           ENTRYPOINT []
           CMD ["/usr/local/bin/uv"]
           EOF

.github/workflows/ci.yml

@@ -82,7 +82,7 @@ jobs:
         run: rustup component add rustfmt
 
       - name: "Install uv"
-        uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
 
       - name: "rustfmt"
         run: cargo fmt --all --check
@@ -188,7 +188,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: "Install cargo shear"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-shear
       - run: cargo shear
@@ -206,23 +206,26 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
 
       - name: "Install Rust toolchain"
         run: rustup show
 
-      - uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+      - uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - name: "Install required Python versions"
         run: uv python install
 
       - name: "Install cargo nextest"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-nextest
 
       - name: "Cargo test"
+        env:
+          # Retry more than default to reduce flakes in CI
+          UV_HTTP_RETRIES: 5
         run: |
           cargo nextest run \
             --features python-patch \
@@ -232,29 +235,33 @@ jobs:
   cargo-test-macos:
     timeout-minutes: 15
     needs: determine_changes
-    if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-test') && (needs.determine_changes.outputs.code == 'true' || github.ref == 'refs/heads/main') }}
+    # Only run macOS tests on main without opt-in
+    if: ${{ contains(github.event.pull_request.labels.*.name, 'test:macos') || github.ref == 'refs/heads/main' }}
     runs-on: macos-latest-xlarge # github-macos-14-aarch64-6
     name: "cargo test | macos"
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
 
       - name: "Install Rust toolchain"
         run: rustup show
 
-      - uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+      - uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - name: "Install required Python versions"
         run: uv python install
 
       - name: "Install cargo nextest"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-nextest
 
       - name: "Cargo test"
+        env:
+          # Retry more than default to reduce flakes in CI
+          UV_HTTP_RETRIES: 5
         run: |
           cargo nextest run \
             --no-default-features \
@@ -279,7 +286,7 @@ jobs:
         run: |
           Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.UV_WORKSPACE }}" -Recurse
 
-      - uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+      - uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - name: "Install required Python versions"
         run: uv python install
 
@@ -292,13 +299,15 @@ jobs:
         run: rustup show
 
       - name: "Install cargo nextest"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-nextest
 
       - name: "Cargo test"
         working-directory: ${{ env.UV_WORKSPACE }}
         env:
+          # Retry more than default to reduce flakes in CI
+          UV_HTTP_RETRIES: 5
           # Avoid permission errors during concurrent tests
           # See https://github.com/astral-sh/uv/issues/6940
           UV_LINK_MODE: copy
@@ -343,7 +352,7 @@ jobs:
           rustup component add rust-src --target ${{ matrix.target-arch }}-pc-windows-msvc
 
       - name: "Install cargo-bloat"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-bloat
 
@@ -418,7 +427,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: crate-ci/typos@master
+      - uses: crate-ci/typos@392b78fe18a52790c53f42456e46124f77346842 # v1.34.0
 
   docs:
     timeout-minutes: 10
@@ -430,7 +439,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
-      - uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+      - uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
       - name: "Add SSH key"
         if: ${{ env.MKDOCS_INSIDERS_SSH_KEY_EXISTS == 'true' }}
@@ -454,7 +463,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
 
@@ -479,7 +488,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
 
@@ -504,7 +513,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - name: "Setup musl"
         run: |
@@ -534,7 +543,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
       - name: "Build"
@@ -558,7 +567,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: rui314/setup-mold@v1
+      - uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
 
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
       - name: "Build"
@@ -645,8 +654,8 @@ jobs:
             ${{ env.UV_WORKSPACE }}/target/aarch64-pc-windows-msvc/debug/uvx.exe
           retention-days: 1
 
-  cargo-build-msrv:
+  build-binary-msrv:
-    name: "cargo build (msrv)"
+    name: "build binary | msrv"
     needs: determine_changes
     if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-test') && (needs.determine_changes.outputs.code == 'true' || github.ref == 'refs/heads/main') }}
     runs-on: github-ubuntu-24.04-x86_64-8
@@ -661,7 +670,7 @@ jobs:
       - name: "Install Rust toolchain"
         run: rustup default ${{ steps.msrv.outputs.value }}
       - name: "Install mold"
-        uses: rui314/setup-mold@v1
+        uses: rui314/setup-mold@702b1908b5edf30d71a8d1666b724e0f0c6fa035 # v1
       - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
       - run: cargo +${{ steps.msrv.outputs.value }} build
       - run: ./target/debug/uv --version
@@ -1033,7 +1042,7 @@ jobs:
 
       - name: "Create a virtual environment (uv)"
         run: |
-          ./uv venv -p 3.13t --managed-python
+          ./uv venv -c -p 3.13t --managed-python
 
       - name: "Check version (uv)"
         run: |
@@ -1078,7 +1087,7 @@ jobs:
 
       - name: "Create a virtual environment (uv)"
         run: |
-          ./uv venv -p 3.13 --managed-python
+          ./uv venv -c -p 3.13 --managed-python
 
       - name: "Check version (uv)"
         run: |
@@ -1123,7 +1132,7 @@ jobs:
 
       - name: "Create a virtual environment (uv)"
         run: |
-          ./uv venv -p 3.13 --managed-python
+          ./uv venv -c -p 3.13 --managed-python
 
       - name: "Check version (uv)"
         run: |
@@ -1585,7 +1594,7 @@ jobs:
         run: chmod +x ./uv
 
       - name: "Configure AWS credentials"
-        uses: aws-actions/configure-aws-credentials@3d8cba388a057b13744d61818a337e40a119b1a7
+        uses: aws-actions/configure-aws-credentials@a159d7bb5354cf786f855f2f5d1d8d768d9a08d1
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -1604,12 +1613,12 @@ jobs:
 
       - name: "Authenticate with GCP"
         id: "auth"
-        uses: "google-github-actions/auth@0920706a19e9d22c3d0da43d1db5939c6ad837a8"
+        uses: "google-github-actions/auth@140bb5113ffb6b65a7e9b937a81fa96cf5064462"
         with:
           credentials_json: "${{ secrets.GCP_SERVICE_ACCOUNT_KEY }}"
 
       - name: "Set up GCP SDK"
-        uses: "google-github-actions/setup-gcloud@a8b58010a5b2a061afd605f50e88629c9ec7536b"
+        uses: "google-github-actions/setup-gcloud@6a7c903a70c8625ed6700fa299f5ddb4ca6022e9"
 
       - name: "Get GCP Artifact Registry token"
         id: get_token
@@ -1749,14 +1758,14 @@ jobs:
           ./uv run --no-project python -c "from built_by_uv import greet; print(greet())"
 
           # Test both `build_wheel` and `build_sdist` through uv
-          ./uv venv -v
+          ./uv venv -c -v
           ./uv build -v --force-pep517 scripts/packages/built-by-uv --find-links crates/uv-build/dist --offline
           ./uv pip install -v scripts/packages/built-by-uv/dist/*.tar.gz --find-links crates/uv-build/dist --offline --no-deps
           ./uv run --no-project python -c "from built_by_uv import greet; print(greet())"
 
           # Test both `build_wheel` and `build_sdist` through the official `build`
           rm -rf scripts/packages/built-by-uv/dist/
-          ./uv venv -v
+          ./uv venv -c -v
           ./uv pip install build
           # Add the uv binary to PATH for `build` to find
           PATH="$(pwd):$PATH" UV_OFFLINE=1 UV_FIND_LINKS=crates/uv-build/dist ./uv run --no-project python -m build -v --installer uv scripts/packages/built-by-uv
@@ -1960,6 +1969,10 @@ jobs:
       - name: "Print Python path"
         run: echo $(which python3)
 
+      # Needed for building Pydantic
+      - name: "Install build tools"
+        run: dnf install -y gcc
+
       - name: "Validate global Python install"
         run: python3 scripts/check_system_python.py --uv ./uv
 
@@ -2252,7 +2265,7 @@ jobs:
           name: uv-windows-aarch64-${{ github.sha }}
 
       - name: "Validate global Python install"
-        run: py -3.13 ./scripts/check_system_python.py --uv ./uv.exe
+        run: py -3.13-arm64 ./scripts/check_system_python.py --uv ./uv.exe
 
   # Test our PEP 514 integration that installs Python into the Windows registry.
   system-test-windows-registry:
@@ -2456,6 +2469,9 @@ jobs:
       - name: "Print Python path"
         run: echo $(which python3)
 
+      - name: Install build tools
+        run: yum install -y gcc
+
       - name: "Validate global Python install"
         run: python3 scripts/check_system_python.py --uv ./uv
 
@@ -2507,7 +2523,7 @@ jobs:
         run: rustup show
 
       - name: "Install codspeed"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-codspeed
 
@@ -2523,7 +2539,7 @@ jobs:
         run: cargo codspeed build --profile profiling --features codspeed -p uv-bench
 
       - name: "Run benchmarks"
-        uses: CodSpeedHQ/action@0010eb0ca6e89b80c88e8edaaa07cfe5f3e6664d # v3.5.0
+        uses: CodSpeedHQ/action@0b6e7a3d96c9d2a6057e7bcea6b45aaf2f7ce60b # v3.8.0
         with:
           run: cargo codspeed run
           token: ${{ secrets.CODSPEED_TOKEN }}
@@ -2544,7 +2560,7 @@ jobs:
         run: rustup show
 
       - name: "Install codspeed"
-        uses: taiki-e/install-action@7b20dfd705618832f20d29066e34aa2f2f6194c2 # v2.52.8
+        uses: taiki-e/install-action@a416ddeedbd372e614cc1386e8b642692f66865e # v2.57.1
         with:
           tool: cargo-codspeed
 
@@ -2560,7 +2576,7 @@ jobs:
         run: cargo codspeed build --profile profiling --features codspeed -p uv-bench
 
       - name: "Run benchmarks"
-        uses: CodSpeedHQ/action@0010eb0ca6e89b80c88e8edaaa07cfe5f3e6664d # v3.5.0
+        uses: CodSpeedHQ/action@0b6e7a3d96c9d2a6057e7bcea6b45aaf2f7ce60b # v3.8.0
         with:
           run: cargo codspeed run
           token: ${{ secrets.CODSPEED_TOKEN }}

.github/workflows/publish-docs.yml

@@ -17,24 +17,28 @@ on:
         required: true
         type: string
 
+permissions: {}
+
 jobs:
   mkdocs:
     runs-on: ubuntu-latest
     env:
+      VERSION: ${{ (inputs.plan != '' && fromJson(inputs.plan).announcement_tag) || inputs.ref }}
       MKDOCS_INSIDERS_SSH_KEY_EXISTS: ${{ secrets.MKDOCS_INSIDERS_SSH_KEY != '' }}
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0
+          persist-credentials: false
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: 3.12
 
-      - name: "Set docs version"
+      - name: "Set docs display name"
         run: |
-          version="${{ (inputs.plan != '' && fromJson(inputs.plan).announcement_tag) || inputs.ref }}"
+          version="${VERSION}"
           # if version is missing, use 'latest'
           if [ -z "$version" ]; then
             echo "Using 'latest' as version"
@@ -44,21 +48,20 @@ jobs:
           # Use version as display name for now
           display_name="$version"
 
-          echo "version=$version" >> $GITHUB_ENV
+          echo "DISPLAY_NAME=$display_name" >> $GITHUB_ENV
-          echo "display_name=$display_name" >> $GITHUB_ENV
 
       - name: "Set branch name"
         run: |
-          version="${{ env.version }}"
+          version="${VERSION}"
-          display_name="${{ env.display_name }}"
+          display_name="${DISPLAY_NAME}"
           timestamp="$(date +%s)"
 
           # create branch_display_name from display_name by replacing all
           # characters disallowed in git branch names with hyphens
           branch_display_name="$(echo "$display_name" | tr -c '[:alnum:]._' '-' | tr -s '-')"
 
-          echo "branch_name=update-docs-$branch_display_name-$timestamp" >> $GITHUB_ENV
+          echo "BRANCH_NAME=update-docs-$branch_display_name-$timestamp" >> $GITHUB_ENV
-          echo "timestamp=$timestamp" >> $GITHUB_ENV
+          echo "TIMESTAMP=$timestamp" >> $GITHUB_ENV
 
       - name: "Add SSH key"
         if: ${{ env.MKDOCS_INSIDERS_SSH_KEY_EXISTS == 'true' }}
@@ -84,8 +87,10 @@ jobs:
 
       - name: "Clone docs repo"
         run: |
-          version="${{ env.version }}"
+          version="${VERSION}"
-          git clone https://${{ secrets.ASTRAL_DOCS_PAT }}@github.com/astral-sh/docs.git astral-docs
+          git clone https://${ASTRAL_DOCS_PAT}@github.com/astral-sh/docs.git astral-docs
+        env:
+          ASTRAL_DOCS_PAT: ${{ secrets.ASTRAL_DOCS_PAT }}
 
       - name: "Copy docs"
         run: rm -rf astral-docs/site/uv && mkdir -p astral-docs/site && cp -r site/uv astral-docs/site/
@@ -93,7 +98,7 @@ jobs:
       - name: "Commit docs"
         working-directory: astral-docs
         run: |
-          branch_name="${{ env.branch_name }}"
+          branch_name="${BRANCH_NAME}"
 
           git config user.name "astral-docs-bot"
           git config user.email "176161322+astral-docs-bot@users.noreply.github.com"
@@ -107,9 +112,9 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.ASTRAL_DOCS_PAT }}
         run: |
-          version="${{ env.version }}"
+          version="${VERSION}"
-          display_name="${{ env.display_name }}"
+          display_name="${DISPLAY_NAME}"
-          branch_name="${{ env.branch_name }}"
+          branch_name="${BRANCH_NAME}"
 
           # set the PR title
           pull_request_title="Update uv documentation for $display_name"
@@ -135,7 +140,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.ASTRAL_DOCS_PAT }}
         run: |
-          branch_name="${{ env.branch_name }}"
+          branch_name="${BRANCH_NAME}"
 
           # auto-merge the PR if the build was triggered by a release. Manual builds should be reviewed by a human.
           # give the PR a few seconds to be created before trying to auto-merge it

.github/workflows/publish-pypi.yml

@@ -22,14 +22,12 @@ jobs:
       id-token: write
     steps:
       - name: "Install uv"
-        uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           pattern: wheels_uv-*
           path: wheels_uv
           merge-multiple: true
-      - name: Remove wheels unsupported by PyPI
-        run: rm wheels_uv/*riscv*
       - name: Publish to PyPI
         run: uv publish -v wheels_uv/*
 
@@ -43,13 +41,11 @@ jobs:
       id-token: write
     steps:
       - name: "Install uv"
-        uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           pattern: wheels_uv_build-*
           path: wheels_uv_build
           merge-multiple: true
-      - name: Remove wheels unsupported by PyPI
-        run: rm wheels_uv_build/*riscv*
       - name: Publish to PyPI
         run: uv publish -v wheels_uv_build/*

.github/workflows/release.yml

@@ -69,7 +69,7 @@ jobs:
         # we specify bash to get pipefail; it guards against the `curl` command
         # failing. otherwise `sh` won't catch that `curl` returned non-0
         shell: bash
-        run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/cargo-dist/releases/download/v0.28.7-prerelease.1/cargo-dist-installer.sh | sh"
+        run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/cargo-dist/releases/download/v0.28.7-prerelease.2/cargo-dist-installer.sh | sh"
       - name: Cache dist
         uses: actions/upload-artifact@6027e3dd177782cd8ab9af838c04fd81a07f1d47
         with:

.github/workflows/sync-python-releases.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+      - uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
         with:
           version: "latest"
           enable-cache: true

.pre-commit-config.yaml

@@ -12,7 +12,7 @@ repos:
       - id: validate-pyproject
 
   - repo: https://github.com/crate-ci/typos
-    rev: v1.33.1
+    rev: v1.34.0
     hooks:
       - id: typos
 
@@ -42,7 +42,7 @@ repos:
         types_or: [yaml, json5]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.12.1
+    rev: v0.12.5
     hooks:
       - id: ruff-format
       - id: ruff

.python-versions

@@ -6,7 +6,6 @@
 3.8.20
 # The following are required for packse scenarios
 3.9.20
-3.9.18
 3.9.12
 # The following is needed for `==3.13` request tests
 3.13.0

CHANGELOG.md

@@ -3,634 +3,262 @@
 <!-- prettier-ignore-start -->
 
 
-## 0.7.19
+## 0.8.4
-
-The **[uv build backend](https://docs.astral.sh/uv/concepts/build-backend/) is now stable**, and considered ready for production use.
-
-The uv build backend is a great choice for pure Python projects. It has reasonable defaults, with the goal of requiring zero configuration for most users, but provides flexible configuration to accommodate most Python project structures. It integrates tightly with uv, to improve messaging and user experience. It validates project metadata and structures, preventing common mistakes. And, finally, it's very fast — `uv sync` on a new project (from `uv init`) is 10-30x faster than with other build backends.
-
-To use uv as a build backend in an existing project, add `uv_build` to the `[build-system]` section in your `pyproject.toml`:
-
-```toml
-[build-system]
-requires = ["uv_build>=0.7.19,<0.8.0"]
-build-backend = "uv_build"
-```
-
-In a future release, it will replace `hatchling` as the default in `uv init`. As before, uv will remain compatible with all standards-compliant build backends.
-
-### Python
-
-- Add PGO distributions of Python for aarch64 Linux, which are more optimized for better performance
-
-See the [python-build-standalone release](https://github.com/astral-sh/python-build-standalone/releases/tag/20250702) for more details.
 
 ### Enhancements
 
-- Ignore Python patch version for `--universal` pip compile ([#14405](https://github.com/astral-sh/uv/pull/14405))
+- Improve styling of warning cause chains  ([#14934](https://github.com/astral-sh/uv/pull/14934))
-- Update the tilde version specifier warning to include more context ([#14335](https://github.com/astral-sh/uv/pull/14335))
+- Extend wheel filtering to Android tags ([#14977](https://github.com/astral-sh/uv/pull/14977))
-- Clarify behavior and hint on tool install when no executables are available ([#14423](https://github.com/astral-sh/uv/pull/14423))
+- Perform wheel lockfile filtering based on platform and OS intersection ([#14976](https://github.com/astral-sh/uv/pull/14976))
-
+- Clarify messaging when a new resolution needs to be performed ([#14938](https://github.com/astral-sh/uv/pull/14938))
-### Bug fixes
-
-- Make project and interpreter lock acquisition non-fatal ([#14404](https://github.com/astral-sh/uv/pull/14404))
-- Includes `sys.prefix` in cached environment keys to avoid `--with` collisions across projects ([#14403](https://github.com/astral-sh/uv/pull/14403))
-
-### Documentation
-
-- Add a migration guide from pip to uv projects ([#12382](https://github.com/astral-sh/uv/pull/12382))
-
-## 0.7.18
-
-### Python
-
-- Added arm64 Windows Python 3.11, 3.12, 3.13, and 3.14
-
-  These are not downloaded by default, since x86-64 Python has broader ecosystem support on Windows.
-  However, they can be requested with `cpython-<version>-windows-aarch64`.
-
-See the [python-build-standalone release](https://github.com/astral-sh/python-build-standalone/releases/tag/20250630) for more details.
-
-### Enhancements
-
-- Keep track of retries in `ManagedPythonDownload::fetch_with_retry` ([#14378](https://github.com/astral-sh/uv/pull/14378))
-- Reuse build (virtual) environments across resolution and installation ([#14338](https://github.com/astral-sh/uv/pull/14338))
-- Improve trace message for cached Python interpreter query ([#14328](https://github.com/astral-sh/uv/pull/14328))
-- Use parsed URLs for conflicting URL error message ([#14380](https://github.com/astral-sh/uv/pull/14380))
 
 ### Preview features
 
-- Ignore invalid build backend settings when not building ([#14372](https://github.com/astral-sh/uv/pull/14372))
+- Add support for extending package's build dependencies with `extra-build-dependencies` ([#14735](https://github.com/astral-sh/uv/pull/14735))
-
+- Split preview mode into separate feature flags ([#14823](https://github.com/astral-sh/uv/pull/14823))
-### Bug fixes
-
-- Fix equals-star and tilde-equals with `python_version` and `python_full_version` ([#14271](https://github.com/astral-sh/uv/pull/14271))
-- Include the canonical path in the interpreter query cache key ([#14331](https://github.com/astral-sh/uv/pull/14331))
-- Only drop build directories on program exit ([#14304](https://github.com/astral-sh/uv/pull/14304))
-- Error instead of panic on conflict between global and subcommand flags ([#14368](https://github.com/astral-sh/uv/pull/14368))
-- Consistently normalize trailing slashes on URLs with no path segments ([#14349](https://github.com/astral-sh/uv/pull/14349))
-
-### Documentation
-
-- Add instructions for publishing to JFrog's Artifactory ([#14253](https://github.com/astral-sh/uv/pull/14253))
-- Edits to the build backend documentation ([#14376](https://github.com/astral-sh/uv/pull/14376))
-
-## 0.7.17
-
-### Bug fixes
-
-- Apply build constraints when resolving `--with` dependencies ([#14340](https://github.com/astral-sh/uv/pull/14340))
-- Drop trailing slashes when converting index URL from URL ([#14346](https://github.com/astral-sh/uv/pull/14346))
-- Ignore `UV_PYTHON_CACHE_DIR` when empty ([#14336](https://github.com/astral-sh/uv/pull/14336))
-- Fix error message ordering for `pyvenv.cfg` version conflict ([#14329](https://github.com/astral-sh/uv/pull/14329))
-
-## 0.7.16
-
-### Python
-
-- Add Python 3.14.0b3
-
-See the
-[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250626)
-for more details.
-
-### Enhancements
-
-- Include path or URL when failing to convert in lockfile ([#14292](https://github.com/astral-sh/uv/pull/14292))
-- Warn when `~=` is used as a Python version specifier without a patch version ([#14008](https://github.com/astral-sh/uv/pull/14008))
-
-### Preview features
-
-- Ensure preview default Python installs are upgradeable ([#14261](https://github.com/astral-sh/uv/pull/14261))
-
-### Performance
-
-- Share workspace cache between lock and sync operations ([#14321](https://github.com/astral-sh/uv/pull/14321))
-
-### Bug fixes
-
-- Allow local indexes to reference remote files ([#14294](https://github.com/astral-sh/uv/pull/14294))
-- Avoid rendering desugared prefix matches in error messages ([#14195](https://github.com/astral-sh/uv/pull/14195))
-- Avoid using path URL for workspace Git dependencies in `requirements.txt` ([#14288](https://github.com/astral-sh/uv/pull/14288))
-- Normalize index URLs to remove trailing slash ([#14245](https://github.com/astral-sh/uv/pull/14245))
-- Respect URL-encoded credentials in redirect location ([#14315](https://github.com/astral-sh/uv/pull/14315))
-- Lock the source tree when running setuptools, to protect concurrent builds ([#14174](https://github.com/astral-sh/uv/pull/14174))
-
-### Documentation
-
-- Note that GCP Artifact Registry download URLs must have `/simple` component ([#14251](https://github.com/astral-sh/uv/pull/14251))
-
-## 0.7.15
-
-### Enhancements
-
-- Consistently use `Ordering::Relaxed` for standalone atomic use cases ([#14190](https://github.com/astral-sh/uv/pull/14190))
-- Warn on ambiguous relative paths for `--index` ([#14152](https://github.com/astral-sh/uv/pull/14152))
-- Skip GitHub fast path when rate-limited ([#13033](https://github.com/astral-sh/uv/pull/13033))
-- Preserve newlines in `schema.json` descriptions ([#13693](https://github.com/astral-sh/uv/pull/13693))
-
-### Bug fixes
-
-- Add check for using minor version link when creating a venv on Windows ([#14252](https://github.com/astral-sh/uv/pull/14252))
-- Strip query parameters when parsing source URL ([#14224](https://github.com/astral-sh/uv/pull/14224))
-
-### Documentation
-
-- Add a link to PyPI FAQ to clarify what per-project token is ([#14242](https://github.com/astral-sh/uv/pull/14242))
-
-### Preview features
-
-- Allow symlinks in the build backend ([#14212](https://github.com/astral-sh/uv/pull/14212))
-
-## 0.7.14
-
-### Enhancements
-
-- Add XPU to `--torch-backend` ([#14172](https://github.com/astral-sh/uv/pull/14172))
-- Add ROCm backends to `--torch-backend` ([#14120](https://github.com/astral-sh/uv/pull/14120))
-- Remove preview label from `--torch-backend` ([#14119](https://github.com/astral-sh/uv/pull/14119))
-- Add `[tool.uv.dependency-groups].mygroup.requires-python` ([#13735](https://github.com/astral-sh/uv/pull/13735))
-- Add auto-detection for AMD GPUs ([#14176](https://github.com/astral-sh/uv/pull/14176))
-- Show retries for HTTP status code errors ([#13897](https://github.com/astral-sh/uv/pull/13897))
-- Support transparent Python patch version upgrades ([#13954](https://github.com/astral-sh/uv/pull/13954))
-- Warn on empty index directory ([#13940](https://github.com/astral-sh/uv/pull/13940))
-- Publish to DockerHub ([#14088](https://github.com/astral-sh/uv/pull/14088))
-
-### Performance
-
-- Make cold resolves about 10% faster ([#14035](https://github.com/astral-sh/uv/pull/14035))
-
-### Bug fixes
-
-- Don't use walrus operator in interpreter query script ([#14108](https://github.com/astral-sh/uv/pull/14108))
-- Fix handling of changes to `requires-python` ([#14076](https://github.com/astral-sh/uv/pull/14076))
-- Fix implied `platform_machine` marker for `win_amd64` platform tag ([#14041](https://github.com/astral-sh/uv/pull/14041))
-- Only update existing symlink directories on preview uninstall ([#14179](https://github.com/astral-sh/uv/pull/14179))
-- Serialize Python requests for tools as canonicalized strings ([#14109](https://github.com/astral-sh/uv/pull/14109))
-- Support netrc and same-origin credential propagation on index redirects ([#14126](https://github.com/astral-sh/uv/pull/14126))
-- Support reading `dependency-groups` from pyproject.tomls with no `[project]` ([#13742](https://github.com/astral-sh/uv/pull/13742))
-- Handle an existing shebang in `uv init --script` ([#14141](https://github.com/astral-sh/uv/pull/14141))
-- Prevent concurrent updates of the environment in `uv run` ([#14153](https://github.com/astral-sh/uv/pull/14153))
-- Filter managed Python distributions by platform before querying when included in request ([#13936](https://github.com/astral-sh/uv/pull/13936))
-
-### Documentation
-
-- Replace cuda124 with cuda128 ([#14168](https://github.com/astral-sh/uv/pull/14168))
-- Document the way member sources shadow workspace sources ([#14136](https://github.com/astral-sh/uv/pull/14136))
-- Sync documented PyTorch integration index for CUDA and ROCm versions from PyTorch website ([#14100](https://github.com/astral-sh/uv/pull/14100))
-
-## 0.7.13
-
-### Python
-
-- Add Python 3.14.0b2
-- Add Python 3.13.5
-- Fix stability of `uuid.getnode` on 3.13
-
-See the
-[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250612)
-for more details.
-
-### Enhancements
-
-- Download versions in `uv python pin` if not found ([#13946](https://github.com/astral-sh/uv/pull/13946))
-- Use TTY detection to determine if SIGINT forwarding is enabled ([#13925](https://github.com/astral-sh/uv/pull/13925))
-- Avoid fetching an exact, cached Git commit, even if it isn't locked ([#13748](https://github.com/astral-sh/uv/pull/13748))
-- Add `zstd` and `deflate` to `Accept-Encoding` ([#13982](https://github.com/astral-sh/uv/pull/13982))
-- Build binaries for riscv64  ([#12688](https://github.com/astral-sh/uv/pull/12688))
-
-### Bug fixes
-
-- Check if relative URL is valid directory before treating as index ([#13917](https://github.com/astral-sh/uv/pull/13917))
-- Ignore Python discovery errors during `uv python pin` ([#13944](https://github.com/astral-sh/uv/pull/13944))
-- Do not allow `uv add --group ... --script` ([#13997](https://github.com/astral-sh/uv/pull/13997))
-
-### Preview changes
-
-- Build backend: Support namespace packages ([#13833](https://github.com/astral-sh/uv/pull/13833))
-
-### Documentation
-
-- Add 3.14 to the supported platform reference ([#13990](https://github.com/astral-sh/uv/pull/13990))
-- Add an `llms.txt` to uv ([#13929](https://github.com/astral-sh/uv/pull/13929))
-- Add supported macOS version to the platform reference ([#13993](https://github.com/astral-sh/uv/pull/13993))
-- Update platform support reference to include Python implementation list ([#13991](https://github.com/astral-sh/uv/pull/13991))
-- Update pytorch.md ([#13899](https://github.com/astral-sh/uv/pull/13899))
-- Update the CLI help and reference to include references to the Python bin directory ([#13978](https://github.com/astral-sh/uv/pull/13978))
-
-## 0.7.12
-
-### Enhancements
-
-- Add `uv python pin --rm` to remove `.python-version` pins ([#13860](https://github.com/astral-sh/uv/pull/13860))
-- Don't hint at versions removed by `excluded-newer` ([#13884](https://github.com/astral-sh/uv/pull/13884))
-- Add hint to use `tool.uv.environments` on resolution error ([#13455](https://github.com/astral-sh/uv/pull/13455))
-- Add hint to use `tool.uv.required-environments` on resolution error ([#13575](https://github.com/astral-sh/uv/pull/13575))
-- Improve `python pin` error messages ([#13862](https://github.com/astral-sh/uv/pull/13862))
-
-### Bug fixes
-
-- Lock environments during `uv sync`, `uv add` and `uv remove` to prevent race conditions ([#13869](https://github.com/astral-sh/uv/pull/13869))
-- Add `--no-editable` to `uv export` for `pylock.toml` ([#13852](https://github.com/astral-sh/uv/pull/13852))
-
-### Documentation
-
-- List `.gitignore` in project init files ([#13855](https://github.com/astral-sh/uv/pull/13855))
-- Move the pip interface documentation into the concepts section ([#13841](https://github.com/astral-sh/uv/pull/13841))
-- Remove the configuration section in favor of concepts / reference ([#13842](https://github.com/astral-sh/uv/pull/13842))
-- Update Git and GitHub Actions docs to mention `gh auth login` ([#13850](https://github.com/astral-sh/uv/pull/13850))
-
-### Preview
-
-- Fix directory glob traversal fallback preventing exclusion of all files ([#13882](https://github.com/astral-sh/uv/pull/13882))
-
-## 0.7.11
-
-### Python
-
-- Add Python 3.14.0b1
-- Add Python 3.13.4
-- Add Python 3.12.11
-- Add Python 3.11.13
-- Add Python 3.10.18
-- Add Python 3.9.23
-
-### Enhancements
-
-- Add Pyodide support ([#12731](https://github.com/astral-sh/uv/pull/12731))
-- Better error message for version specifier with missing operator ([#13803](https://github.com/astral-sh/uv/pull/13803))
-
-### Bug fixes
-
-- Downgrade `reqwest` and `hyper-util` to resolve connection reset errors over IPv6 ([#13835](https://github.com/astral-sh/uv/pull/13835))
-- Prefer `uv`'s binary's version when checking if it's up to date ([#13840](https://github.com/astral-sh/uv/pull/13840))
-
-### Documentation
-
-- Use "terminal driver" instead of "shell" in `SIGINT` docs ([#13787](https://github.com/astral-sh/uv/pull/13787))
-
-## 0.7.10
-
-### Enhancements
-
-- Add `--show-extras` to `uv tool list` ([#13783](https://github.com/astral-sh/uv/pull/13783))
-- Add dynamically generated sysconfig replacement mappings ([#13441](https://github.com/astral-sh/uv/pull/13441))
-- Add data locations to install wheel logs ([#13797](https://github.com/astral-sh/uv/pull/13797))
-
-### Bug fixes
-
-- Avoid redaction of placeholder `git` username when using SSH authentication ([#13799](https://github.com/astral-sh/uv/pull/13799))
-- Propagate credentials to files on devpi indexes ending in `/+simple` ([#13743](https://github.com/astral-sh/uv/pull/13743))
-- Restore retention of credentials for direct URLs in `uv export` ([#13809](https://github.com/astral-sh/uv/pull/13809))
-
-## 0.7.9
-
-### Python
-
-The changes reverted in [0.7.8](#078) have been restored.
-
-See the
-[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250529)
-for more details.
-
-### Enhancements
-
-- Improve obfuscation of credentials in URLs ([#13560](https://github.com/astral-sh/uv/pull/13560))
-- Allow running non-default Python implementations via `uvx` ([#13583](https://github.com/astral-sh/uv/pull/13583))
-- Add `uvw` as alias for `uv` without console window on Windows ([#11786](https://github.com/astral-sh/uv/pull/11786))
-- Allow discovery of x86-64 managed Python builds on macOS ([#13722](https://github.com/astral-sh/uv/pull/13722))
-- Differentiate between implicit vs explicit architecture requests ([#13723](https://github.com/astral-sh/uv/pull/13723))
-- Implement ordering for Python architectures to prefer native installations ([#13709](https://github.com/astral-sh/uv/pull/13709))
-- Only show the first match per platform (and architecture) by default in `uv python list`  ([#13721](https://github.com/astral-sh/uv/pull/13721))
-- Write the path of the parent environment to an `extends-environment` key in the `pyvenv.cfg` file of an ephemeral environment ([#13598](https://github.com/astral-sh/uv/pull/13598))
-- Improve the error message when libc cannot be found, e.g., when using the distroless containers ([#13549](https://github.com/astral-sh/uv/pull/13549))
-
-### Performance
-
-- Avoid rendering info log level ([#13642](https://github.com/astral-sh/uv/pull/13642))
-- Improve performance of `uv-python` crate's manylinux submodule ([#11131](https://github.com/astral-sh/uv/pull/11131))
-- Optimize `Version` display ([#13643](https://github.com/astral-sh/uv/pull/13643))
-- Reduce number of reference-checks for `uv cache clean` ([#13669](https://github.com/astral-sh/uv/pull/13669))
-
-### Bug fixes
-
-- Avoid reinstalling dependency group members with `--all-packages` ([#13678](https://github.com/astral-sh/uv/pull/13678))
-- Don't fail direct URL hash checking with dependency metadata ([#13736](https://github.com/astral-sh/uv/pull/13736))
-- Exit early on `self update` if global `--offline` is set ([#13663](https://github.com/astral-sh/uv/pull/13663))
-- Fix cases where the uv lock is incorrectly marked as out of date ([#13635](https://github.com/astral-sh/uv/pull/13635))
-- Include pre-release versions in `uv python install --reinstall` ([#13645](https://github.com/astral-sh/uv/pull/13645))
-- Set `LC_ALL=C` for git when checking git worktree ([#13637](https://github.com/astral-sh/uv/pull/13637))
-- Avoid rejecting Windows paths for remote Python download JSON targets ([#13625](https://github.com/astral-sh/uv/pull/13625))
-
-### Preview
-
-- Add `uv add --bounds` to configure version constraints ([#12946](https://github.com/astral-sh/uv/pull/12946))
-
-### Documentation
-
-- Add documentation about Python versions to Tools concept page ([#7673](https://github.com/astral-sh/uv/pull/7673))
-- Add example of enabling Dependabot ([#13692](https://github.com/astral-sh/uv/pull/13692))
-- Fix `exclude-newer` date format for persistent configuration files ([#13706](https://github.com/astral-sh/uv/pull/13706))
-- Quote versions variables in GitLab documentation ([#13679](https://github.com/astral-sh/uv/pull/13679))
-- Update Dependabot support status ([#13690](https://github.com/astral-sh/uv/pull/13690))
-- Explicitly specify to add a new repo entry to the repos list item in the `.pre-commit-config.yaml` ([#10243](https://github.com/astral-sh/uv/pull/10243))
-- Add integration with marimo guide ([#13691](https://github.com/astral-sh/uv/pull/13691))
-- Add pronunciation to README ([#5336](https://github.com/astral-sh/uv/pull/5336))
-
-## 0.7.8
-
-### Python
-
-We are reverting most of our Python changes from `uv 0.7.6` and `uv 0.7.7` due to
-a miscompilation that makes the Python interpreter behave incorrectly, resulting
-in spurious type-errors involving str. This issue seems to be isolated to
-x86_64 Linux, and affected at least Python 3.12, 3.13, and 3.14.
-
-The following changes that were introduced in those versions of uv are temporarily
-being reverted while we test and deploy a proper fix for the miscompilation:
-
-- Add Python 3.14 on musl
-- free-threaded Python on musl
-- Add Python 3.14.0a7
-- Statically link `libpython` into the interpreter on Linux for a significant performance boost
-
-See [the issue for details](https://github.com/astral-sh/uv/issues/13610).
-
-### Documentation
-
-- Remove misleading line in pin documentation ([#13611](https://github.com/astral-sh/uv/pull/13611))
-
-## 0.7.7
-
-### Python
-
-- Work around third-party packages that (incorrectly) assume the interpreter is dynamically linking libpython
-- Allow the experimental JIT to be enabled at runtime on Python 3.13 and 3.14 on macOS on aarch64 aka Apple Silicon
-
-See the
-[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250521)
-for more details.
-
-### Bug fixes
-
-- Make `uv version` lock and sync ([#13317](https://github.com/astral-sh/uv/pull/13317))
-- Fix references to `ldd` in diagnostics to correctly refer to `ld.so` ([#13552](https://github.com/astral-sh/uv/pull/13552))
-
-### Documentation
-
-- Clarify adding SSH Git dependencies ([#13534](https://github.com/astral-sh/uv/pull/13534))
-
-## 0.7.6
-
-### Python
-
-- Add Python 3.14 on musl
-- Add free-threaded Python on musl
-- Add Python 3.14.0a7
-- Statically link `libpython` into the interpreter on Linux for a significant performance boost
-
-See the
-[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250517)
-for more details.
-
-### Enhancements
-
-- Improve compatibility of `VIRTUAL_ENV_PROMPT` value ([#13501](https://github.com/astral-sh/uv/pull/13501))
-- Bump MSRV to 1.85 and Edition 2024 ([#13516](https://github.com/astral-sh/uv/pull/13516))
-
-### Bug fixes
-
-- Respect default extras in uv remove ([#13380](https://github.com/astral-sh/uv/pull/13380))
-
-### Documentation
-
-- Fix PowerShell code blocks ([#13511](https://github.com/astral-sh/uv/pull/13511))
-
-## 0.7.5
-
-### Bug fixes
-
-- Support case-sensitive module discovery in the build backend ([#13468](https://github.com/astral-sh/uv/pull/13468))
-- Bump Simple cache bucket to v16 ([#13498](https://github.com/astral-sh/uv/pull/13498))
-- Don't error when the script is too short for the buffer ([#13488](https://github.com/astral-sh/uv/pull/13488))
-- Add missing word in "script not supported" error ([#13483](https://github.com/astral-sh/uv/pull/13483))
-
-## 0.7.4
-
-### Enhancements
-
-- Add more context to external errors ([#13351](https://github.com/astral-sh/uv/pull/13351))
-- Align indentation of long arguments ([#13394](https://github.com/astral-sh/uv/pull/13394))
-- Preserve order of dependencies which are sorted naively ([#13334](https://github.com/astral-sh/uv/pull/13334))
-- Align progress bars by largest name length ([#13266](https://github.com/astral-sh/uv/pull/13266))
-- Reinstall local packages in `uv add` ([#13462](https://github.com/astral-sh/uv/pull/13462))
-- Rename `--raw-sources` to `--raw` ([#13348](https://github.com/astral-sh/uv/pull/13348))
-- Show 'Downgraded' when `self update` is used to install an older version ([#13340](https://github.com/astral-sh/uv/pull/13340))
-- Suggest `uv self update` if required uv version is newer ([#13305](https://github.com/astral-sh/uv/pull/13305))
-- Add 3.14 beta images to uv Docker images ([#13390](https://github.com/astral-sh/uv/pull/13390))
-- Add comma after "i.e." in Conda environment error ([#13423](https://github.com/astral-sh/uv/pull/13423))
-- Be more precise in unpinned packages warning ([#13426](https://github.com/astral-sh/uv/pull/13426))
-- Fix detection of sorted dependencies when include-group is used ([#13354](https://github.com/astral-sh/uv/pull/13354))
-- Fix display of HTTP responses in trace logs for retry of errors ([#13339](https://github.com/astral-sh/uv/pull/13339))
-- Log skip reasons during Python installation key interpreter match checks ([#13472](https://github.com/astral-sh/uv/pull/13472))
-- Redact credentials when displaying URLs ([#13333](https://github.com/astral-sh/uv/pull/13333))
-
-### Bug fixes
-
-- Avoid erroring on `pylock.toml` dependency entries ([#13384](https://github.com/astral-sh/uv/pull/13384))
-- Avoid panics for cannot-be-a-base URLs ([#13406](https://github.com/astral-sh/uv/pull/13406))
-- Ensure cached realm credentials are applied if no password is found for index URL ([#13463](https://github.com/astral-sh/uv/pull/13463))
-- Fix `.tgz` parsing to respect true extension ([#13382](https://github.com/astral-sh/uv/pull/13382))
-- Fix double self-dependency ([#13366](https://github.com/astral-sh/uv/pull/13366))
-- Reject `pylock.toml` in `uv add -r` ([#13421](https://github.com/astral-sh/uv/pull/13421))
-- Retain dot-separated wheel tags during cache prune ([#13379](https://github.com/astral-sh/uv/pull/13379))
-- Retain trailing comments after PEP 723 metadata block ([#13460](https://github.com/astral-sh/uv/pull/13460))
-
-### Documentation
-
-- Use "export" instead of "install" in `uv export` arguments ([#13430](https://github.com/astral-sh/uv/pull/13430))
-- Remove extra newline ([#13461](https://github.com/astral-sh/uv/pull/13461))
-
-### Preview features
-
-- Build backend: Normalize glob paths ([#13465](https://github.com/astral-sh/uv/pull/13465))
-
-## 0.7.3
-
-### Enhancements
-
-- Add `--dry-run` support to `uv self update` ([#9829](https://github.com/astral-sh/uv/pull/9829))
-- Add `--show-with` to `uv tool list` to list packages included by `--with` ([#13264](https://github.com/astral-sh/uv/pull/13264))
-- De-duplicate fetched index URLs ([#13205](https://github.com/astral-sh/uv/pull/13205))
-- Support more zip compression formats: bzip2, lzma, xz, zstd ([#13285](https://github.com/astral-sh/uv/pull/13285))
-- Add support for downloading GraalPy ([#13172](https://github.com/astral-sh/uv/pull/13172))
-- Improve error message when a virtual environment Python symlink is broken ([#12168](https://github.com/astral-sh/uv/pull/12168))
-- Use `fs_err` for paths in symlinking errors ([#13303](https://github.com/astral-sh/uv/pull/13303))
-- Minify and embed managed Python JSON at compile time ([#12967](https://github.com/astral-sh/uv/pull/12967))
-
-### Preview features
-
-- Build backend: Make preview default and add configuration docs ([#12804](https://github.com/astral-sh/uv/pull/12804))
-- Build backend: Allow escaping in globs ([#13313](https://github.com/astral-sh/uv/pull/13313))
-- Build backend: Make builds reproducible across operating systems ([#13171](https://github.com/astral-sh/uv/pull/13171))
 
 ### Configuration
 
-- Add `python-downloads-json-url` option for `uv.toml` to configure custom Python installations via JSON URL ([#12974](https://github.com/astral-sh/uv/pull/12974))
+- Add support for package specific `exclude-newer` dates via `exclude-newer-package` ([#14489](https://github.com/astral-sh/uv/pull/14489))
 
 ### Bug fixes
 
-- Check nested IO errors for retries ([#13260](https://github.com/astral-sh/uv/pull/13260))
+- Avoid invalidating lockfile when path or workspace dependencies define explicit indexes ([#14876](https://github.com/astral-sh/uv/pull/14876))
-- Accept `musllinux_1_0` as a valid platform tag ([#13289](https://github.com/astral-sh/uv/pull/13289))
+- Copy entrypoints that have a shebang that differs in `python` vs `python3` ([#14970](https://github.com/astral-sh/uv/pull/14970))
-- Fix discovery of pre-release managed Python versions in range requests ([#13330](https://github.com/astral-sh/uv/pull/13330))
+- Fix incorrect file permissions in wheel packages ([#14930](https://github.com/astral-sh/uv/pull/14930))
-- Respect locked script preferences in `uv run --with` ([#13283](https://github.com/astral-sh/uv/pull/13283))
+- Update validation for `environments` and `required-environments` in `uv.toml` ([#14905](https://github.com/astral-sh/uv/pull/14905))
-- Retry streaming downloads on broken pipe errors ([#13281](https://github.com/astral-sh/uv/pull/13281))
-- Treat already-installed base environment packages as preferences in `uv run --with` ([#13284](https://github.com/astral-sh/uv/pull/13284))
-- Avoid enumerating sources in errors for path Python requests ([#13335](https://github.com/astral-sh/uv/pull/13335))
-- Avoid re-creating virtual environment with `--no-sync` ([#13287](https://github.com/astral-sh/uv/pull/13287))
 
 ### Documentation
 
-- Remove outdated description of index strategy ([#13326](https://github.com/astral-sh/uv/pull/13326))
+- Show `uv_build` in projects documentation ([#14968](https://github.com/astral-sh/uv/pull/14968))
-- Update "Viewing the version" docs ([#13241](https://github.com/astral-sh/uv/pull/13241))
+- Add `UV_` prefix to installer environment variables ([#14964](https://github.com/astral-sh/uv/pull/14964))
+- Un-hide `uv` from `--build-backend` options ([#14939](https://github.com/astral-sh/uv/pull/14939))
+- Update documentation for preview flags ([#14902](https://github.com/astral-sh/uv/pull/14902))
 
-## 0.7.2
+## 0.8.3
+
+### Python
+
+- Add CPython 3.14.0rc1
+
+See the [`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250723) for more details.
 
 ### Enhancements
 
-- Improve trace log for retryable errors ([#13228](https://github.com/astral-sh/uv/pull/13228))
+- Allow non-standard entrypoint names in `uv_build` ([#14867](https://github.com/astral-sh/uv/pull/14867))
-- Use "error" instead of "warning" for self-update message ([#13229](https://github.com/astral-sh/uv/pull/13229))
+- Publish riscv64 wheels to PyPI ([#14852](https://github.com/astral-sh/uv/pull/14852))
-- Error when `uv version` is used with project-specific flags but no project is found ([#13203](https://github.com/astral-sh/uv/pull/13203))
 
 ### Bug fixes
 
-- Fix incorrect virtual environment invalidation for pre-release Python versions ([#13234](https://github.com/astral-sh/uv/pull/13234))
+- Avoid writing redacted credentials to tool receipt ([#14855](https://github.com/astral-sh/uv/pull/14855))
-- Fix patching of `clang` in managed Python sysconfig ([#13237](https://github.com/astral-sh/uv/pull/13237))
+- Respect `--with` versions over base environment versions ([#14863](https://github.com/astral-sh/uv/pull/14863))
-- Respect `--project` in `uv version` ([#13230](https://github.com/astral-sh/uv/pull/13230))
+- Respect credentials from all defined indexes ([#14858](https://github.com/astral-sh/uv/pull/14858))
+- Fix missed stabilization of removal of registry entry during Python uninstall ([#14859](https://github.com/astral-sh/uv/pull/14859))
+- Improve concurrency safety of Python downloads into cache ([#14846](https://github.com/astral-sh/uv/pull/14846))
 
-## 0.7.1
+### Documentation
 
-### Enhancement
+- Fix typos in `uv_build` reference documentation ([#14853](https://github.com/astral-sh/uv/pull/14853))
+- Move the "Cargo" install method further down in docs ([#14842](https://github.com/astral-sh/uv/pull/14842))
 
-- Add support for BLAKE2b-256 ([#13204](https://github.com/astral-sh/uv/pull/13204))
+## 0.8.2
 
-### Bugfix
+### Enhancements
 
-- Revert fix handling of authentication when encountering redirects ([#13215](https://github.com/astral-sh/uv/pull/13215))
+- Add derivation chains for dependency errors ([#14824](https://github.com/astral-sh/uv/pull/14824))
 
-## 0.7.0
+### Configuration
 
-This release contains various changes that improve correctness and user experience, but could break some workflows; many changes have been marked as breaking out of an abundance of caution. We expect most users to be able to upgrade without making changes.
+- Add `UV_INIT_BUILD_BACKEND` ([#14821](https://github.com/astral-sh/uv/pull/14821))
+
+### Bug fixes
+
+- Avoid reading files in the environment bin that are not entrypoints ([#14830](https://github.com/astral-sh/uv/pull/14830))
+- Avoid removing empty directories when constructing virtual environments ([#14822](https://github.com/astral-sh/uv/pull/14822))
+- Preserve index URL priority order when writing to pyproject.toml ([#14831](https://github.com/astral-sh/uv/pull/14831))
+
+### Rust API
+
+- Expose `tls_built_in_root_certs` for client ([#14816](https://github.com/astral-sh/uv/pull/14816))
+
+### Documentation
+
+- Archive the 0.7.x changelog ([#14819](https://github.com/astral-sh/uv/pull/14819))
+
+## 0.8.1
+
+### Enhancements
+
+- Add support for `HF_TOKEN` ([#14797](https://github.com/astral-sh/uv/pull/14797))
+- Allow `--config-settings-package` to apply configuration settings at the package level ([#14573](https://github.com/astral-sh/uv/pull/14573))
+- Create (e.g.) `python3.13t` executables in `uv venv` ([#14764](https://github.com/astral-sh/uv/pull/14764))
+- Disallow writing symlinks outside the source distribution target directory ([#12259](https://github.com/astral-sh/uv/pull/12259))
+- Elide traceback when `python -m uv` in interrupted with Ctrl-C on Windows ([#14715](https://github.com/astral-sh/uv/pull/14715))
+- Match `--bounds` formatting for `uv_build` bounds in `uv init` ([#14731](https://github.com/astral-sh/uv/pull/14731))
+- Support `extras` and `dependency_groups` markers in PEP 508 grammar ([#14753](https://github.com/astral-sh/uv/pull/14753))
+- Support `extras` and `dependency_groups` markers on `uv pip install` and `uv pip sync` ([#14755](https://github.com/astral-sh/uv/pull/14755))
+- Add hint to use `uv self version` when `uv version` cannot find a project ([#14738](https://github.com/astral-sh/uv/pull/14738))
+- Improve error reporting when removing Python versions from the Windows registry ([#14722](https://github.com/astral-sh/uv/pull/14722))
+- Make warnings about masked `[tool.uv]` fields more precise ([#14325](https://github.com/astral-sh/uv/pull/14325))
+
+### Preview features
+
+- Emit JSON output in `uv sync` with `--quiet` ([#14810](https://github.com/astral-sh/uv/pull/14810))
+
+### Bug fixes
+
+- Allow removal of virtual environments with missing interpreters ([#14812](https://github.com/astral-sh/uv/pull/14812))
+- Apply `Cache-Control` overrides to response, not request headers ([#14736](https://github.com/astral-sh/uv/pull/14736))
+- Copy entry points into ephemeral environments to ensure layers are respected ([#14790](https://github.com/astral-sh/uv/pull/14790))
+- Workaround Jupyter Lab application directory discovery in ephemeral environments ([#14790](https://github.com/astral-sh/uv/pull/14790))
+- Enforce `requires-python` in `pylock.toml` ([#14787](https://github.com/astral-sh/uv/pull/14787))
+- Fix kebab casing of `README` variants in build backend ([#14762](https://github.com/astral-sh/uv/pull/14762))
+- Improve concurrency resilience of removing Python versions from the Windows registry ([#14717](https://github.com/astral-sh/uv/pull/14717))
+- Retry HTTP requests on invalid data errors ([#14703](https://github.com/astral-sh/uv/pull/14703))
+- Update virtual environment removal to delete `pyvenv.cfg` last ([#14808](https://github.com/astral-sh/uv/pull/14808))
+- Error on unknown fields in `dependency-metadata` ([#14801](https://github.com/astral-sh/uv/pull/14801))
+
+### Documentation
+
+- Recommend installing `setup-uv` after `setup-python` in Github Actions integration guide ([#14741](https://github.com/astral-sh/uv/pull/14741))
+- Clarify which portions of `requires-python` behavior are consistent with pip ([#14752](https://github.com/astral-sh/uv/pull/14752))
+
+## 0.8.0
+
+Since we released uv [0.7.0](https://github.com/astral-sh/uv/releases/tag/0.7.0) in April, we've accumulated various changes that improve correctness and user experience, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution. We expect most users to be able to upgrade without making changes.
+
+This release also includes the stabilization of a couple `uv python install` features, which have been available under preview since late last year.
 
 ### Breaking changes
 
-- **Update `uv version` to display and update project versions ([#12349](https://github.com/astral-sh/uv/pull/12349))**
+- **Install Python executables into a directory on the `PATH` ([#14626](https://github.com/astral-sh/uv/pull/14626))**
   
-  Previously, `uv version` displayed uv's version. Now, `uv version` will display or update the project's version. This interface was [heavily requested](https://github.com/astral-sh/uv/issues/6298) and, after much consideration, we decided that transitioning the top-level command was the best option.
+  `uv python install` now installs a versioned Python executable (e.g., `python3.13`) into a directory on the `PATH` (e.g., `~/.local/bin`) by default. This behavior has been available under the `--preview` flag since [Oct 2024](https://github.com/astral-sh/uv/pull/8458). This change should not be breaking unless it shadows a Python executable elsewhere on the `PATH`.
   
-  Here's a brief example:
+  To install unversioned executables, i.e., `python3` and `python`, use the `--default` flag. The `--default` flag has also been in preview, but is not stabilized in this release.
   
-  ```console
+  Note that these executables point to the base Python installation and only include the standard library. That means they will not include dependencies from your current project (use `uv run python` instead) and you cannot install packages into their environment (use `uvx --with <package> python` instead).
-  $ uv init example
-  Initialized project `example` at `./example`
-  $ cd example
-  $ uv version
-  example 0.1.0
-  $ uv version --bump major
-  example 0.1.0 => 1.0.0
-  $ uv version --short
-  1.0.0
-  ```
   
-  If used outside of a project, uv will fallback to showing its own version still:
+  As with tool installation, the target directory respects common variables like `XDG_BIN_HOME` and can be overridden with a `UV_PYTHON_BIN_DIR` variable.
   
-  ```console
+  You can opt out of this behavior with `uv python install --no-bin` or `UV_PYTHON_INSTALL_BIN=0`.
-  $ uv version
-  warning: failed to read project: No `pyproject.toml` found in current directory or any parent directory
-    running `uv self version` for compatibility with old `uv version` command.
-    this fallback will be removed soon, pass `--preview` to make this an error.
   
-  uv 0.7.0 (4433f41c9 2025-04-29)
+  See the [documentation on installing Python executables](https://docs.astral.sh/uv/concepts/python-versions/#installing-python-executables) for more details.
-  ```
+- **Register Python versions with the Windows Registry ([#14625](https://github.com/astral-sh/uv/pull/14625))**
   
-  As described in the warning, `--preview` can be used to error instead:
+  `uv python install` now registers the installed Python version with the Windows Registry as specified by [PEP 514](https://peps.python.org/pep-0514/). This allows using uv installed Python versions via the `py` launcher. This behavior has been available under the `--preview` flag since [Jan 2025](https://github.com/astral-sh/uv/pull/10634). This change should not be breaking, as using the uv Python versions with `py` requires explicit opt in.
   
-  ```console
+  You can opt out of this behavior with `uv python install --no-registry` or `UV_PYTHON_INSTALL_REGISTRY=0`.
-  $ uv version --preview
+- **Prompt before removing an existing directory in `uv venv` ([#14309](https://github.com/astral-sh/uv/pull/14309))**
-  error: No `pyproject.toml` found in current directory or any parent directory
-  ```
   
-  The previous functionality of `uv version` was moved to `uv self version`.
+  Previously, `uv venv` would remove an existing virtual environment without confirmation. While this is consistent with the behavior of project commands (e.g., `uv sync`), it's surprising to users that are using imperative workflows (i.e., `uv pip`). Now, `uv venv` will prompt for confirmation before removing an existing virtual environment. **If not in an interactive context, uv will still remove the virtual environment for backwards compatibility. However, this behavior is likely to change in a future release.**
-- **Avoid fallback to subsequent indexes on authentication failure ([#12805](https://github.com/astral-sh/uv/pull/12805))**
   
-  When using the `first-index` strategy (the default), uv will stop searching indexes for a package once it is found on a single index. Previously, uv considered a package as "missing" from an index during authentication failures, such as an HTTP 401 or HTTP 403 (normally, missing packages are represented by an HTTP 404). This behavior was motivated by unusual responses from some package indexes, but reduces the safety of uv's index strategy when authentication fails. Now, uv will consider an authentication failure as a stop-point when searching for a package across indexes. The `index.ignore-error-codes` option can be used to recover the existing behavior, e.g.:
+  The behavior for other commands (e.g., `uv sync`) is unchanged.
+  
+  You can opt out of this behavior by setting `UV_VENV_CLEAR=1` or passing the `--clear` flag.
+- **Validate that discovered interpreters meet the Python preference ([#7934](https://github.com/astral-sh/uv/pull/7934))**
+  
+  uv allows opting out of its managed Python versions with the `--no-managed-python` and `python-preference` options.
+  
+  Previously, uv would not enforce this option for Python interpreters discovered on the `PATH`. For example, if a symlink to a managed Python interpreter was created, uv would allow it to be used even if `--no-managed-python` was provided. Now, uv ignores Python interpreters that do not match the Python preference *unless* they are in an active virtual environment or are explicitly requested, e.g., with `--python /path/to/python3.13`.
+  
+  Similarly, uv would previously not invalidate existing project environments if they did not match the Python preference. Now, uv will invalidate and recreate project environments when the Python preference changes.
+  
+  You can opt out of this behavior by providing the explicit path to the Python interpreter providing `--managed-python` / `--no-managed-python` matching the interpreter you want.
+- **Install dependencies without build systems when they are `path` sources ([#14413](https://github.com/astral-sh/uv/pull/14413))**
+  
+  When working on a project, uv uses the [presence of a build system](https://docs.astral.sh/uv/concepts/projects/config/#build-systems) to determine if it should be built and installed into the environment. However, when a project is a dependency of another project, it can be surprising for the dependency to be missing from the environment.
+  
+  Previously, uv would not build and install dependencies with [`path` sources](https://docs.astral.sh/uv/concepts/projects/dependencies/#path) unless they declared a build system or set `tool.uv.package = true`. Now, dependencies with `path` sources are built and installed regardless of the presence of a build system. If a build system is not present, the `setuptools.build_meta:__legacy__ ` backend will be used (per [PEP 517](https://peps.python.org/pep-0517/#source-trees)).
+  
+  You can opt out of this behavior by setting `package = false` in the source declaration, e.g.:
   
   ```toml
-  [[tool.uv.index]]
+  [tool.uv.sources]
-  name = "pytorch"
+  foo = { path = "./foo", package = false }
-  url = "https://download.pytorch.org/whl/cpu"
-  ignore-error-codes = [401, 403]
   ```
   
-  Since PyTorch's indexes always return a HTTP 403 for missing packages, uv special-cases indexes on the `pytorch.org` domain to ignore that error code by default.
+  Or, by setting `tool.uv.package = false` in the dependent `pyproject.toml`.
-- **Require the command in `uvx <name>` to be available in the Python environment ([#11603](https://github.com/astral-sh/uv/pull/11603))**
   
-  Previously, `uvx` would attempt to execute a command even if it was not provided by a Python package. For example, if we presume `foo` is an empty Python package which provides no command, `uvx foo` would invoke the `foo` command on the `PATH` (if present). Now, uv will error early if the `foo` executable is not provided by the requested Python package. This check is not enforced when `--from` is used, so patterns like `uvx --from foo bash -c "..."` are still valid. uv also still allows `uvx foo` where the `foo` executable is provided by a dependency of `foo` instead of `foo` itself, as this is fairly common for packages which depend on a dedicated package for their command-line interface.
+  See the documentation on [virtual dependencies](https://docs.astral.sh/uv/concepts/projects/dependencies/#virtual-dependencies) for details.
-- **Use index URL instead of package URL for keyring credential lookups ([#12651](https://github.com/astral-sh/uv/pull/12651))**
+- **Install dependencies without build systems when they are workspace members ([#14663](https://github.com/astral-sh/uv/pull/14663))**
   
-  When determining credentials for querying a package URL, uv previously sent the full URL to the `keyring` command. However, some keyring plugins expect to receive the *index URL* (which is usually a parent of the package URL). Now, uv requests credentials for the index URL instead. This behavior matches `pip`.
+  As described above for dependencies with `path` sources, uv previously would not build and install workspace members that did not declare a build system. Now, uv will build and install workspace members that are a dependency of *another* workspace member regardless of the presence of a build system. The behavior is unchanged for workspace members that are not included in the `project.dependencies`, `project.optional-dependencies`, or `dependency-groups` tables of another workspace member.
-- **Remove `--version` from subcommands ([#13108](https://github.com/astral-sh/uv/pull/13108))**
   
-  Previously, uv allowed the `--version` flag on arbitrary subcommands, e.g., `uv run --version`. However, the `--version` flag is useful for other operations since uv is a package manager. Consequently, we've removed the `--version` flag from subcommands — it is only available as `uv --version`.
+  You can opt out of this behavior by setting `tool.uv.package = false` in the workspace member's `pyproject.toml`.
-- **Omit Python 3.7 downloads from managed versions ([#13022](https://github.com/astral-sh/uv/pull/13022))**
   
-  Python 3.7 is EOL and not formally supported by uv; however, Python 3.7 was previously available for download on a subset of platforms.
+  See the documentation on [virtual dependencies](https://docs.astral.sh/uv/concepts/projects/dependencies/#virtual-dependencies) for details.
-- **Reject non-PEP 751 TOML files in install, compile, and export commands ([#13120](https://github.com/astral-sh/uv/pull/13120), [#13119](https://github.com/astral-sh/uv/pull/13119))**
+- **Bump `--python-platform linux` to `manylinux_2_28` ([#14300](https://github.com/astral-sh/uv/pull/14300))**
   
-  Previously, uv treated arbitrary `.toml` files passed to commands (e.g., `uv pip install -r foo.toml` or `uv pip compile -o foo.toml`) as `requirements.txt`-formatted files. Now, uv will error instead. If using PEP 751 lockfiles, use the standardized format for custom names instead, e.g., `pylock.foo.toml`.
+  uv allows performing [platform-specific resolution](https://docs.astral.sh/uv/concepts/resolution/#platform-specific-resolution) for explicit targets and provides short aliases, e.g., `linux`, for common targets.
-- **Ignore arbitrary Python requests in version files ([#12909](https://github.com/astral-sh/uv/pull/12909))**
   
-  uv allows arbitrary strings to be used for Python version requests, in which they are treated as an executable name to search for in the `PATH`. However, using this form of request in `.python-version` files is non-standard and conflicts with `pyenv-virtualenv` which writes environment names to `.python-version` files. In this release, uv will now ignore requests that are arbitrary strings when found in `.python-version` files.
+  Previously, the default target for `--python-platform linux` was `manylinux_2_17`, which is compatible with most Linux distributions from 2014 or newer. We now default to `manylinux_2_28`, which is compatible with most Linux distributions from 2019 or newer.  This change follows the lead of other tools, such as `cibuildwheel`, which changed their default to `manylinux_2_28` in [Mar 2025](https://github.com/pypa/cibuildwheel/pull/2330).
-- **Error on unknown dependency object specifiers ([12811](https://github.com/astral-sh/uv/pull/12811))**
   
-  The `[dependency-groups]` entries can include "object specifiers", e.g. `set-phasers-to = ...` in:
+  This change only affects users requesting a specific target platform. Otherwise, uv detects the `manylinux` target from your local glibc version.
   
-  ```toml
+  You can opt out of this behavior by using `--python-platform x86_64-manylinux_2_17` instead.
-  [dependency-groups]
+- **Remove `uv version` fallback ([#14161](https://github.com/astral-sh/uv/pull/14161))**
-  foo = ["pyparsing"]
-  bar = [{set-phasers-to = "stun"}]
-  ```
   
-  However, the only current spec-compliant object specifier is `include-group`. Previously, uv would ignore unknown object specifiers. Now, uv will error.
+  In [Apr 2025](https://github.com/astral-sh/uv/pull/12349), uv changed the `uv version` command to an interface for viewing and updating the version of the current project. However, when outside a project, `uv version` would continue to display uv's version for backwards compatibility. Now, when used outside of a project, `uv version` will fail.
-- **Make `--frozen` and `--no-sources` conflicting options ([#12671](https://github.com/astral-sh/uv/pull/12671))**
   
-  Using `--no-sources` always requires a new resolution and `--frozen` will always fail when used with it. Now, this conflict is encoded in the CLI options for clarity.
+  You cannot opt out of this behavior. Use `uv self version` instead.
-- **Treat empty `UV_PYTHON_INSTALL_DIR` and `UV_TOOL_DIR` as unset ([#12907](https://github.com/astral-sh/uv/pull/12907), [#12905](https://github.com/astral-sh/uv/pull/12905))**
+- **Require `--global` for removal of the global Python pin ([#14169](https://github.com/astral-sh/uv/pull/14169))**
   
-  Previously, these variables were treated as set to the current working directory when set to an empty string. Now, uv will ignore these variables when empty. This matches uv's behavior for other environment variables which configure directories.
+  Previously, `uv python pin --rm` would allow you to remove the global Python pin without opt in. Now, uv requires the `--global` flag to remove the global Python pin.
   
-### Enhancements
+  You cannot opt out of this behavior. Use the `--global` flag instead.
+- **Support conflicting editable settings across groups ([#14197](https://github.com/astral-sh/uv/pull/14197))**
   
-- Disallow mixing requirements across PyTorch indexes ([#13179](https://github.com/astral-sh/uv/pull/13179))
+  Previously, uv would always treat a package as editable if any requirement requested it as editable. However, this prevented users from declaring `path` sources that toggled the `editable` setting across dependency groups. Now, uv allows declaring different `editable` values for conflicting groups. However, if a project includes a path dependency twice, once with `editable = true` and once without any editable annotation, those are now considered conflicting, and uv will exit with an error.
-- Add optional managed Python archive download cache ([#12175](https://github.com/astral-sh/uv/pull/12175))
-- Add `poetry-core` as a `uv init` build backend option ([#12781](https://github.com/astral-sh/uv/pull/12781))
-- Show tag hints when failing to find a compatible wheel in `pylock.toml` ([#13136](https://github.com/astral-sh/uv/pull/13136))
-- Report Python versions in `pyvenv.cfg` version mismatch ([#13027](https://github.com/astral-sh/uv/pull/13027))
   
-### Bug fixes
+  You cannot opt out of this behavior. Use consistent `editable` settings or [mark groups as conflicting](https://docs.astral.sh/uv/concepts/projects/config/#conflicting-dependencies).
+- **Make `uv_build` the default build backend in `uv init` ([#14661](https://github.com/astral-sh/uv/pull/14661))**
   
-- Avoid erroring on omitted wheel-only packages in `pylock.toml` ([#13132](https://github.com/astral-sh/uv/pull/13132))
+  The uv build backend (`uv_build`) was [stabilized in uv 0.7.19](https://github.com/astral-sh/uv/releases/tag/0.7.19). Now, it is the default build backend for `uv init --package` and `uv init --lib`. Previously, `hatchling` was the default build backend. A build backend is still not used without opt-in in `uv init`, but we expect to change this in a future release.
-- Fix display name for `uvx --version` ([#13109](https://github.com/astral-sh/uv/pull/13109))
-- Restore handling of authentication when encountering redirects ([#13050](https://github.com/astral-sh/uv/pull/13050))
-- Respect build options (`--no-binary` et al) in `pylock.toml` ([#13134](https://github.com/astral-sh/uv/pull/13134))
-- Use `upload-time` rather than `upload_time` in `uv.lock` ([#13176](https://github.com/astral-sh/uv/pull/13176))
   
-### Documentation
+  You can opt out of this behavior with `uv init --build-backend hatchling`.
+- **Set default `UV_TOOL_BIN_DIR` on Docker images ([#13391](https://github.com/astral-sh/uv/pull/13391))**
   
-- Changed `fish` completions append `>>` to overwrite `>` ([#13130](https://github.com/astral-sh/uv/pull/13130))
+  Previously, `UV_TOOL_BIN_DIR` was not set in Docker images which meant that `uv tool install` did not install tools into a directory on the `PATH` without additional configuration. Now, `UV_TOOL_BIN_DIR` is set to `/usr/local/bin` in all Docker derived images.
-- Add `pylock.toml` mentions where relevant ([#13115](https://github.com/astral-sh/uv/pull/13115))
+  
-- Add ROCm example to the PyTorch guide ([#13200](https://github.com/astral-sh/uv/pull/13200))
+  When the default image user is overridden (e.g. `USER <UID>`) with a less privileged user, this may cause `uv tool install` to fail.
-- Upgrade PyTorch guide to CUDA 12.8 and PyTorch 2.7 ([#13199](https://github.com/astral-sh/uv/pull/13199))
+  
+  You can opt out of this behavior by setting an alternative `UV_TOOL_BIN_DIR`.
+- **Update `--check` to return an exit code of 1 ([#14167](https://github.com/astral-sh/uv/pull/14167))**
+  
+  uv uses an exit code of 1 to indicate a "successful failure" and an exit code of 2 to indicate an "error".
+  
+  Previously, `uv lock --check` and `uv sync --check` would exit with a code of 2 when the lockfile or environment were outdated. Now, uv will exit with a code of 1.
+  
+  You cannot opt out of this behavior.
+- **Use an ephemeral environment for `uv run --with` invocations ([#14447](https://github.com/astral-sh/uv/pull/14447))**
+  
+  When using `uv run --with`, uv layers the requirements requested using `--with` into another virtual environment and caches it. Previously, uv would invoke the Python interpreter in this layered environment. However, this allows poisoning the cached environment and introduces race conditions for concurrent invocations. Now, uv will layer *another* empty virtual environment on top of the cached environment and invoke the Python interpreter there. This should only cause breakage in cases where the environment is being inspected at runtime.
+  
+  You cannot opt out of this behavior.
+- **Restructure the `uv venv` command output and exit codes ([#14546](https://github.com/astral-sh/uv/pull/14546))**
+  
+  Previously, uv used `miette` to format the `uv venv` output. However, this was inconsistent with most of the uv CLI. Now, the output is a little different and the exit code has switched from 1 to 2 for some error cases.
+  
+  You cannot opt out of this behavior.
+- **Default to `--workspace` when adding subdirectories ([#14529](https://github.com/astral-sh/uv/pull/14529))**
+  
+  When using `uv add` to add a subdirectory in a workspace, uv now defaults to adding the target as a workspace member.
+  
+  You can opt out of this behavior by providing `--no-workspace`.
+- **Add missing validations for disallowed `uv.toml` fields ([#14322](https://github.com/astral-sh/uv/pull/14322))**
+  
+  uv does not allow some settings in the `uv.toml`. Previously, some settings were silently ignored when present in the `uv.toml`. Now, uv will error.
+  
+  You cannot opt out of this behavior. Use `--no-config` or remove the invalid settings.
+
+### Configuration
+
+- Add support for toggling Python bin and registry install options via env vars ([#14662](https://github.com/astral-sh/uv/pull/14662))
+
+## 0.7.x
+
+See [changelogs/0.7.x](./changelogs/0.7.x.md)
 
 ## 0.6.x
 

CONTRIBUTING.md

@@ -165,6 +165,13 @@ After making changes to the documentation, format the markdown files with:
 npx prettier --prose-wrap always --write "**/*.md"
 ```
 
+Note that the command above requires Node.js and npm to be installed on your system. As an
+alternative, you can run this command using Docker:
+
+```console
+$ docker run --rm -v .:/src/ -w /src/ node:alpine npx prettier --prose-wrap always --write "**/*.md"
+```
+
 ## Releases
 
 Releases can only be performed by Astral team members.

Cargo.toml

@@ -49,6 +49,7 @@ uv-once-map = { path = "crates/uv-once-map" }
 uv-options-metadata = { path = "crates/uv-options-metadata" }
 uv-pep440 = { path = "crates/uv-pep440", features = ["tracing", "rkyv", "version-ranges"] }
 uv-pep508 = { path = "crates/uv-pep508", features = ["non-pep508-extensions"] }
+uv-platform = { path = "crates/uv-platform" }
 uv-platform-tags = { path = "crates/uv-platform-tags" }
 uv-publish = { path = "crates/uv-publish" }
 uv-pypi-types = { path = "crates/uv-pypi-types" }
@@ -75,12 +76,13 @@ uv-workspace = { path = "crates/uv-workspace" }
 anstream = { version = "0.6.15" }
 anyhow = { version = "1.0.89" }
 arcstr = { version = "1.2.0" }
-astral-tokio-tar = { version = "0.5.1" }
+arrayvec = { version = "0.7.6" }
+astral-tokio-tar = { version = "0.5.2" }
 async-channel = { version = "2.3.1" }
 async-compression = { version = "0.4.12", features = ["bzip2", "gzip", "xz", "zstd"] }
 async-trait = { version = "0.1.82" }
 async_http_range_reader = { version = "0.9.1" }
-async_zip = { git = "https://github.com/charliermarsh/rs-async-zip", rev = "c909fda63fcafe4af496a07bfda28a5aae97e58d", features = ["bzip2", "deflate", "lzma", "tokio", "xz", "zstd"] }
+async_zip = { git = "https://github.com/astral-sh/rs-async-zip", rev = "c909fda63fcafe4af496a07bfda28a5aae97e58d", features = ["bzip2", "deflate", "lzma", "tokio", "xz", "zstd"] }
 axoupdater = { version = "0.9.0", default-features = false }
 backon = { version = "1.3.0" }
 base64 = { version = "0.22.1" }
@@ -92,7 +94,7 @@ cargo-util = { version = "0.2.14" }
 clap = { version = "4.5.17", features = ["derive", "env", "string", "wrap_help"] }
 clap_complete_command = { version = "0.6.1" }
 configparser = { version = "3.1.0" }
-console = { version = "0.15.11", default-features = false }
+console = { version = "0.16.0", default-features = false, features = ["std"] }
 csv = { version = "1.3.0" }
 ctrlc = { version = "3.4.5" }
 dashmap = { version = "6.1.0" }
@@ -116,7 +118,7 @@ home = { version = "0.5.9" }
 html-escape = { version = "0.2.13" }
 http = { version = "1.1.0" }
 indexmap = { version = "2.5.0" }
-indicatif = { version = "0.17.8" }
+indicatif = { version = "0.18.0" }
 indoc = { version = "2.0.5" }
 itertools = { version = "0.14.0" }
 jiff = { version = "0.2.0", features = ["serde"] }
@@ -142,7 +144,7 @@ ref-cast = { version = "1.0.24" }
 reflink-copy = { version = "0.1.19" }
 regex = { version = "1.10.6" }
 regex-automata = { version = "0.4.8", default-features = false, features = ["dfa-build", "dfa-search", "perf", "std", "syntax"] }
-reqwest = { version = "=0.12.15", default-features = false, features = ["json", "gzip", "deflate", "zstd", "stream", "rustls-tls", "rustls-tls-native-roots", "socks", "multipart", "http2", "blocking"] }
+reqwest = { version = "0.12.22", default-features = false, features = ["json", "gzip", "deflate", "zstd", "stream", "rustls-tls", "rustls-tls-native-roots", "socks", "multipart", "http2", "blocking"] }
 reqwest-middleware = { git = "https://github.com/astral-sh/reqwest-middleware", rev = "ad8b9d332d1773fde8b4cd008486de5973e0a3f8", features = ["multipart"] }
 reqwest-retry = { git = "https://github.com/astral-sh/reqwest-middleware", rev = "ad8b9d332d1773fde8b4cd008486de5973e0a3f8" }
 rkyv = { version = "0.8.8", features = ["bytecheck"] }
@@ -171,8 +173,8 @@ tl = { git = "https://github.com/astral-sh/tl.git", rev = "6e25b2ee2513d75385101
 tokio = { version = "1.40.0", features = ["fs", "io-util", "macros", "process", "rt", "signal", "sync"] }
 tokio-stream = { version = "0.1.16" }
 tokio-util = { version = "0.7.12", features = ["compat", "io"] }
-toml = { version = "0.8.19" }
+toml = { version = "0.9.2", features = ["fast_hash"] }
-toml_edit = { version = "0.22.21", features = ["serde"] }
+toml_edit = { version = "0.23.2", features = ["serde"] }
 tracing = { version = "0.1.40" }
 tracing-durations-export = { version = "0.3.0", features = ["plot"] }
 tracing-subscriber = { version = "0.3.18", features = ["env-filter", "json", "registry"] }
@@ -184,7 +186,7 @@ url = { version = "2.5.2", features = ["serde"] }
 version-ranges = { git = "https://github.com/astral-sh/pubgrub", rev = "06ec5a5f59ffaeb6cf5079c6cb184467da06c9db" }
 walkdir = { version = "2.5.0" }
 which = { version = "8.0.0", features = ["regex"] }
-windows = { version = "0.59.0", features = ["Win32_Storage_FileSystem"] }
+windows = { version = "0.59.0", features = ["Win32_Globalization", "Win32_System_Console", "Win32_System_Kernel", "Win32_System_Diagnostics_Debug", "Win32_Storage_FileSystem"] }
 windows-core = { version = "0.59.0" }
 windows-registry = { version = "0.5.0" }
 windows-result = { version = "0.3.0" }
@@ -193,6 +195,23 @@ wiremock = { version = "0.6.4" }
 xz2 = { version = "0.1.7" }
 zip = { version = "2.2.3", default-features = false, features = ["deflate", "zstd", "bzip2", "lzma", "xz"] }
 
+# dev-dependencies
+assert_cmd = { version = "2.0.16" }
+assert_fs = { version = "1.1.2" }
+byteorder = { version = "1.5.0" }
+filetime = { version = "0.2.25" }
+http-body-util = { version = "0.1.2" }
+hyper = { version = "1.4.1", features = ["server", "http1"] }
+hyper-util = { version = "0.1.8", features = ["tokio"] }
+ignore = { version = "0.4.23" }
+insta = { version = "1.40.0", features = ["json", "filters", "redactions"] }
+predicates = { version = "3.1.2" }
+similar = { version = "2.6.0" }
+temp-env = { version = "0.3.6" }
+test-case = { version = "3.3.1" }
+test-log = { version = "0.2.16", features = ["trace"], default-features = false }
+whoami = { version = "1.6.0" }
+
 [workspace.metadata.cargo-shear]
 ignored = ["flate2", "xz2"]
 

changelogs/0.6.x.md

@@ -1,3 +1,5 @@
+# Changelog 0.6.x
+
 ## 0.6.0
 
 There have been 31 releases and 1135 pull requests since

changelogs/0.7.x.md

@@ -0,0 +1,995 @@
+# Changelog 0.7.x
+
+## 0.7.0
+
+This release contains various changes that improve correctness and user experience, but could break
+some workflows; many changes have been marked as breaking out of an abundance of caution. We expect
+most users to be able to upgrade without making changes.
+
+### Breaking changes
+
+- **Update `uv version` to display and update project versions
+  ([#12349](https://github.com/astral-sh/uv/pull/12349))**
+
+  Previously, `uv version` displayed uv's version. Now, `uv version` will display or update the
+  project's version. This interface was
+  [heavily requested](https://github.com/astral-sh/uv/issues/6298) and, after much consideration, we
+  decided that transitioning the top-level command was the best option.
+
+  Here's a brief example:
+
+  ```console
+  $ uv init example
+  Initialized project `example` at `./example`
+  $ cd example
+  $ uv version
+  example 0.1.0
+  $ uv version --bump major
+  example 0.1.0 => 1.0.0
+  $ uv version --short
+  1.0.0
+  ```
+
+  If used outside of a project, uv will fallback to showing its own version still:
+
+  ```console
+  $ uv version
+  warning: failed to read project: No `pyproject.toml` found in current directory or any parent directory
+    running `uv self version` for compatibility with old `uv version` command.
+    this fallback will be removed soon, pass `--preview` to make this an error.
+
+  uv 0.7.0 (4433f41c9 2025-04-29)
+  ```
+
+  As described in the warning, `--preview` can be used to error instead:
+
+  ```console
+  $ uv version --preview
+  error: No `pyproject.toml` found in current directory or any parent directory
+  ```
+
+  The previous functionality of `uv version` was moved to `uv self version`.
+
+- **Avoid fallback to subsequent indexes on authentication failure
+  ([#12805](https://github.com/astral-sh/uv/pull/12805))**
+
+  When using the `first-index` strategy (the default), uv will stop searching indexes for a package
+  once it is found on a single index. Previously, uv considered a package as "missing" from an index
+  during authentication failures, such as an HTTP 401 or HTTP 403 (normally, missing packages are
+  represented by an HTTP 404). This behavior was motivated by unusual responses from some package
+  indexes, but reduces the safety of uv's index strategy when authentication fails. Now, uv will
+  consider an authentication failure as a stop-point when searching for a package across indexes.
+  The `index.ignore-error-codes` option can be used to recover the existing behavior, e.g.:
+
+  ```toml
+  [[tool.uv.index]]
+  name = "pytorch"
+  url = "https://download.pytorch.org/whl/cpu"
+  ignore-error-codes = [401, 403]
+  ```
+
+  Since PyTorch's indexes always return a HTTP 403 for missing packages, uv special-cases indexes on
+  the `pytorch.org` domain to ignore that error code by default.
+
+- **Require the command in `uvx <name>` to be available in the Python environment
+  ([#11603](https://github.com/astral-sh/uv/pull/11603))**
+
+  Previously, `uvx` would attempt to execute a command even if it was not provided by a Python
+  package. For example, if we presume `foo` is an empty Python package which provides no command,
+  `uvx foo` would invoke the `foo` command on the `PATH` (if present). Now, uv will error early if
+  the `foo` executable is not provided by the requested Python package. This check is not enforced
+  when `--from` is used, so patterns like `uvx --from foo bash -c "..."` are still valid. uv also
+  still allows `uvx foo` where the `foo` executable is provided by a dependency of `foo` instead of
+  `foo` itself, as this is fairly common for packages which depend on a dedicated package for their
+  command-line interface.
+
+- **Use index URL instead of package URL for keyring credential lookups
+  ([#12651](https://github.com/astral-sh/uv/pull/12651))**
+
+  When determining credentials for querying a package URL, uv previously sent the full URL to the
+  `keyring` command. However, some keyring plugins expect to receive the _index URL_ (which is
+  usually a parent of the package URL). Now, uv requests credentials for the index URL instead. This
+  behavior matches `pip`.
+
+- **Remove `--version` from subcommands ([#13108](https://github.com/astral-sh/uv/pull/13108))**
+
+  Previously, uv allowed the `--version` flag on arbitrary subcommands, e.g., `uv run --version`.
+  However, the `--version` flag is useful for other operations since uv is a package manager.
+  Consequently, we've removed the `--version` flag from subcommands — it is only available as
+  `uv --version`.
+
+- **Omit Python 3.7 downloads from managed versions
+  ([#13022](https://github.com/astral-sh/uv/pull/13022))**
+
+  Python 3.7 is EOL and not formally supported by uv; however, Python 3.7 was previously available
+  for download on a subset of platforms.
+
+- **Reject non-PEP 751 TOML files in install, compile, and export commands
+  ([#13120](https://github.com/astral-sh/uv/pull/13120),
+  [#13119](https://github.com/astral-sh/uv/pull/13119))**
+
+  Previously, uv treated arbitrary `.toml` files passed to commands (e.g.,
+  `uv pip install -r foo.toml` or `uv pip compile -o foo.toml`) as `requirements.txt`-formatted
+  files. Now, uv will error instead. If using PEP 751 lockfiles, use the standardized format for
+  custom names instead, e.g., `pylock.foo.toml`.
+
+- **Ignore arbitrary Python requests in version files
+  ([#12909](https://github.com/astral-sh/uv/pull/12909))**
+
+  uv allows arbitrary strings to be used for Python version requests, in which they are treated as
+  an executable name to search for in the `PATH`. However, using this form of request in
+  `.python-version` files is non-standard and conflicts with `pyenv-virtualenv` which writes
+  environment names to `.python-version` files. In this release, uv will now ignore requests that
+  are arbitrary strings when found in `.python-version` files.
+
+- **Error on unknown dependency object specifiers
+  ([12811](https://github.com/astral-sh/uv/pull/12811))**
+
+  The `[dependency-groups]` entries can include "object specifiers", e.g. `set-phasers-to = ...` in:
+
+  ```toml
+  [dependency-groups]
+  foo = ["pyparsing"]
+  bar = [{set-phasers-to = "stun"}]
+  ```
+
+  However, the only current spec-compliant object specifier is `include-group`. Previously, uv would
+  ignore unknown object specifiers. Now, uv will error.
+
+- **Make `--frozen` and `--no-sources` conflicting options
+  ([#12671](https://github.com/astral-sh/uv/pull/12671))**
+
+  Using `--no-sources` always requires a new resolution and `--frozen` will always fail when used
+  with it. Now, this conflict is encoded in the CLI options for clarity.
+
+- **Treat empty `UV_PYTHON_INSTALL_DIR` and `UV_TOOL_DIR` as unset
+  ([#12907](https://github.com/astral-sh/uv/pull/12907),
+  [#12905](https://github.com/astral-sh/uv/pull/12905))**
+
+  Previously, these variables were treated as set to the current working directory when set to an
+  empty string. Now, uv will ignore these variables when empty. This matches uv's behavior for other
+  environment variables which configure directories.
+
+### Enhancements
+
+- Disallow mixing requirements across PyTorch indexes
+  ([#13179](https://github.com/astral-sh/uv/pull/13179))
+- Add optional managed Python archive download cache
+  ([#12175](https://github.com/astral-sh/uv/pull/12175))
+- Add `poetry-core` as a `uv init` build backend option
+  ([#12781](https://github.com/astral-sh/uv/pull/12781))
+- Show tag hints when failing to find a compatible wheel in `pylock.toml`
+  ([#13136](https://github.com/astral-sh/uv/pull/13136))
+- Report Python versions in `pyvenv.cfg` version mismatch
+  ([#13027](https://github.com/astral-sh/uv/pull/13027))
+
+### Bug fixes
+
+- Avoid erroring on omitted wheel-only packages in `pylock.toml`
+  ([#13132](https://github.com/astral-sh/uv/pull/13132))
+- Fix display name for `uvx --version` ([#13109](https://github.com/astral-sh/uv/pull/13109))
+- Restore handling of authentication when encountering redirects
+  ([#13050](https://github.com/astral-sh/uv/pull/13050))
+- Respect build options (`--no-binary` et al) in `pylock.toml`
+  ([#13134](https://github.com/astral-sh/uv/pull/13134))
+- Use `upload-time` rather than `upload_time` in `uv.lock`
+  ([#13176](https://github.com/astral-sh/uv/pull/13176))
+
+### Documentation
+
+- Changed `fish` completions append `>>` to overwrite `>`
+  ([#13130](https://github.com/astral-sh/uv/pull/13130))
+- Add `pylock.toml` mentions where relevant ([#13115](https://github.com/astral-sh/uv/pull/13115))
+- Add ROCm example to the PyTorch guide ([#13200](https://github.com/astral-sh/uv/pull/13200))
+- Upgrade PyTorch guide to CUDA 12.8 and PyTorch 2.7
+  ([#13199](https://github.com/astral-sh/uv/pull/13199))
+
+## 0.7.1
+
+### Enhancement
+
+- Add support for BLAKE2b-256 ([#13204](https://github.com/astral-sh/uv/pull/13204))
+
+### Bugfix
+
+- Revert fix handling of authentication when encountering redirects
+  ([#13215](https://github.com/astral-sh/uv/pull/13215))
+
+## 0.7.2
+
+### Enhancements
+
+- Improve trace log for retryable errors ([#13228](https://github.com/astral-sh/uv/pull/13228))
+- Use "error" instead of "warning" for self-update message
+  ([#13229](https://github.com/astral-sh/uv/pull/13229))
+- Error when `uv version` is used with project-specific flags but no project is found
+  ([#13203](https://github.com/astral-sh/uv/pull/13203))
+
+### Bug fixes
+
+- Fix incorrect virtual environment invalidation for pre-release Python versions
+  ([#13234](https://github.com/astral-sh/uv/pull/13234))
+- Fix patching of `clang` in managed Python sysconfig
+  ([#13237](https://github.com/astral-sh/uv/pull/13237))
+- Respect `--project` in `uv version` ([#13230](https://github.com/astral-sh/uv/pull/13230))
+
+## 0.7.3
+
+### Enhancements
+
+- Add `--dry-run` support to `uv self update` ([#9829](https://github.com/astral-sh/uv/pull/9829))
+- Add `--show-with` to `uv tool list` to list packages included by `--with`
+  ([#13264](https://github.com/astral-sh/uv/pull/13264))
+- De-duplicate fetched index URLs ([#13205](https://github.com/astral-sh/uv/pull/13205))
+- Support more zip compression formats: bzip2, lzma, xz, zstd
+  ([#13285](https://github.com/astral-sh/uv/pull/13285))
+- Add support for downloading GraalPy ([#13172](https://github.com/astral-sh/uv/pull/13172))
+- Improve error message when a virtual environment Python symlink is broken
+  ([#12168](https://github.com/astral-sh/uv/pull/12168))
+- Use `fs_err` for paths in symlinking errors ([#13303](https://github.com/astral-sh/uv/pull/13303))
+- Minify and embed managed Python JSON at compile time
+  ([#12967](https://github.com/astral-sh/uv/pull/12967))
+
+### Preview features
+
+- Build backend: Make preview default and add configuration docs
+  ([#12804](https://github.com/astral-sh/uv/pull/12804))
+- Build backend: Allow escaping in globs ([#13313](https://github.com/astral-sh/uv/pull/13313))
+- Build backend: Make builds reproducible across operating systems
+  ([#13171](https://github.com/astral-sh/uv/pull/13171))
+
+### Configuration
+
+- Add `python-downloads-json-url` option for `uv.toml` to configure custom Python installations via
+  JSON URL ([#12974](https://github.com/astral-sh/uv/pull/12974))
+
+### Bug fixes
+
+- Check nested IO errors for retries ([#13260](https://github.com/astral-sh/uv/pull/13260))
+- Accept `musllinux_1_0` as a valid platform tag
+  ([#13289](https://github.com/astral-sh/uv/pull/13289))
+- Fix discovery of pre-release managed Python versions in range requests
+  ([#13330](https://github.com/astral-sh/uv/pull/13330))
+- Respect locked script preferences in `uv run --with`
+  ([#13283](https://github.com/astral-sh/uv/pull/13283))
+- Retry streaming downloads on broken pipe errors
+  ([#13281](https://github.com/astral-sh/uv/pull/13281))
+- Treat already-installed base environment packages as preferences in `uv run --with`
+  ([#13284](https://github.com/astral-sh/uv/pull/13284))
+- Avoid enumerating sources in errors for path Python requests
+  ([#13335](https://github.com/astral-sh/uv/pull/13335))
+- Avoid re-creating virtual environment with `--no-sync`
+  ([#13287](https://github.com/astral-sh/uv/pull/13287))
+
+### Documentation
+
+- Remove outdated description of index strategy
+  ([#13326](https://github.com/astral-sh/uv/pull/13326))
+- Update "Viewing the version" docs ([#13241](https://github.com/astral-sh/uv/pull/13241))
+
+## 0.7.4
+
+### Enhancements
+
+- Add more context to external errors ([#13351](https://github.com/astral-sh/uv/pull/13351))
+- Align indentation of long arguments ([#13394](https://github.com/astral-sh/uv/pull/13394))
+- Preserve order of dependencies which are sorted naively
+  ([#13334](https://github.com/astral-sh/uv/pull/13334))
+- Align progress bars by largest name length ([#13266](https://github.com/astral-sh/uv/pull/13266))
+- Reinstall local packages in `uv add` ([#13462](https://github.com/astral-sh/uv/pull/13462))
+- Rename `--raw-sources` to `--raw` ([#13348](https://github.com/astral-sh/uv/pull/13348))
+- Show 'Downgraded' when `self update` is used to install an older version
+  ([#13340](https://github.com/astral-sh/uv/pull/13340))
+- Suggest `uv self update` if required uv version is newer
+  ([#13305](https://github.com/astral-sh/uv/pull/13305))
+- Add 3.14 beta images to uv Docker images ([#13390](https://github.com/astral-sh/uv/pull/13390))
+- Add comma after "i.e." in Conda environment error
+  ([#13423](https://github.com/astral-sh/uv/pull/13423))
+- Be more precise in unpinned packages warning
+  ([#13426](https://github.com/astral-sh/uv/pull/13426))
+- Fix detection of sorted dependencies when include-group is used
+  ([#13354](https://github.com/astral-sh/uv/pull/13354))
+- Fix display of HTTP responses in trace logs for retry of errors
+  ([#13339](https://github.com/astral-sh/uv/pull/13339))
+- Log skip reasons during Python installation key interpreter match checks
+  ([#13472](https://github.com/astral-sh/uv/pull/13472))
+- Redact credentials when displaying URLs ([#13333](https://github.com/astral-sh/uv/pull/13333))
+
+### Bug fixes
+
+- Avoid erroring on `pylock.toml` dependency entries
+  ([#13384](https://github.com/astral-sh/uv/pull/13384))
+- Avoid panics for cannot-be-a-base URLs ([#13406](https://github.com/astral-sh/uv/pull/13406))
+- Ensure cached realm credentials are applied if no password is found for index URL
+  ([#13463](https://github.com/astral-sh/uv/pull/13463))
+- Fix `.tgz` parsing to respect true extension
+  ([#13382](https://github.com/astral-sh/uv/pull/13382))
+- Fix double self-dependency ([#13366](https://github.com/astral-sh/uv/pull/13366))
+- Reject `pylock.toml` in `uv add -r` ([#13421](https://github.com/astral-sh/uv/pull/13421))
+- Retain dot-separated wheel tags during cache prune
+  ([#13379](https://github.com/astral-sh/uv/pull/13379))
+- Retain trailing comments after PEP 723 metadata block
+  ([#13460](https://github.com/astral-sh/uv/pull/13460))
+
+### Documentation
+
+- Use "export" instead of "install" in `uv export` arguments
+  ([#13430](https://github.com/astral-sh/uv/pull/13430))
+- Remove extra newline ([#13461](https://github.com/astral-sh/uv/pull/13461))
+
+### Preview features
+
+- Build backend: Normalize glob paths ([#13465](https://github.com/astral-sh/uv/pull/13465))
+
+## 0.7.5
+
+### Bug fixes
+
+- Support case-sensitive module discovery in the build backend
+  ([#13468](https://github.com/astral-sh/uv/pull/13468))
+- Bump Simple cache bucket to v16 ([#13498](https://github.com/astral-sh/uv/pull/13498))
+- Don't error when the script is too short for the buffer
+  ([#13488](https://github.com/astral-sh/uv/pull/13488))
+- Add missing word in "script not supported" error
+  ([#13483](https://github.com/astral-sh/uv/pull/13483))
+
+## 0.7.6
+
+### Python
+
+- Add Python 3.14 on musl
+- Add free-threaded Python on musl
+- Add Python 3.14.0a7
+- Statically link `libpython` into the interpreter on Linux for a significant performance boost
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250517)
+for more details.
+
+### Enhancements
+
+- Improve compatibility of `VIRTUAL_ENV_PROMPT` value
+  ([#13501](https://github.com/astral-sh/uv/pull/13501))
+- Bump MSRV to 1.85 and Edition 2024 ([#13516](https://github.com/astral-sh/uv/pull/13516))
+
+### Bug fixes
+
+- Respect default extras in uv remove ([#13380](https://github.com/astral-sh/uv/pull/13380))
+
+### Documentation
+
+- Fix PowerShell code blocks ([#13511](https://github.com/astral-sh/uv/pull/13511))
+
+## 0.7.7
+
+### Python
+
+- Work around third-party packages that (incorrectly) assume the interpreter is dynamically linking
+  libpython
+- Allow the experimental JIT to be enabled at runtime on Python 3.13 and 3.14 on macOS on aarch64
+  aka Apple Silicon
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250521)
+for more details.
+
+### Bug fixes
+
+- Make `uv version` lock and sync ([#13317](https://github.com/astral-sh/uv/pull/13317))
+- Fix references to `ldd` in diagnostics to correctly refer to `ld.so`
+  ([#13552](https://github.com/astral-sh/uv/pull/13552))
+
+### Documentation
+
+- Clarify adding SSH Git dependencies ([#13534](https://github.com/astral-sh/uv/pull/13534))
+
+## 0.7.8
+
+### Python
+
+We are reverting most of our Python changes from `uv 0.7.6` and `uv 0.7.7` due to a miscompilation
+that makes the Python interpreter behave incorrectly, resulting in spurious type-errors involving
+str. This issue seems to be isolated to x86_64 Linux, and affected at least Python 3.12, 3.13, and
+3.14.
+
+The following changes that were introduced in those versions of uv are temporarily being reverted
+while we test and deploy a proper fix for the miscompilation:
+
+- Add Python 3.14 on musl
+- free-threaded Python on musl
+- Add Python 3.14.0a7
+- Statically link `libpython` into the interpreter on Linux for a significant performance boost
+
+See [the issue for details](https://github.com/astral-sh/uv/issues/13610).
+
+### Documentation
+
+- Remove misleading line in pin documentation ([#13611](https://github.com/astral-sh/uv/pull/13611))
+
+## 0.7.9
+
+### Python
+
+The changes reverted in [0.7.8](#078) have been restored.
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250529)
+for more details.
+
+### Enhancements
+
+- Improve obfuscation of credentials in URLs ([#13560](https://github.com/astral-sh/uv/pull/13560))
+- Allow running non-default Python implementations via `uvx`
+  ([#13583](https://github.com/astral-sh/uv/pull/13583))
+- Add `uvw` as alias for `uv` without console window on Windows
+  ([#11786](https://github.com/astral-sh/uv/pull/11786))
+- Allow discovery of x86-64 managed Python builds on macOS
+  ([#13722](https://github.com/astral-sh/uv/pull/13722))
+- Differentiate between implicit vs explicit architecture requests
+  ([#13723](https://github.com/astral-sh/uv/pull/13723))
+- Implement ordering for Python architectures to prefer native installations
+  ([#13709](https://github.com/astral-sh/uv/pull/13709))
+- Only show the first match per platform (and architecture) by default in `uv python list`
+  ([#13721](https://github.com/astral-sh/uv/pull/13721))
+- Write the path of the parent environment to an `extends-environment` key in the `pyvenv.cfg` file
+  of an ephemeral environment ([#13598](https://github.com/astral-sh/uv/pull/13598))
+- Improve the error message when libc cannot be found, e.g., when using the distroless containers
+  ([#13549](https://github.com/astral-sh/uv/pull/13549))
+
+### Performance
+
+- Avoid rendering info log level ([#13642](https://github.com/astral-sh/uv/pull/13642))
+- Improve performance of `uv-python` crate's manylinux submodule
+  ([#11131](https://github.com/astral-sh/uv/pull/11131))
+- Optimize `Version` display ([#13643](https://github.com/astral-sh/uv/pull/13643))
+- Reduce number of reference-checks for `uv cache clean`
+  ([#13669](https://github.com/astral-sh/uv/pull/13669))
+
+### Bug fixes
+
+- Avoid reinstalling dependency group members with `--all-packages`
+  ([#13678](https://github.com/astral-sh/uv/pull/13678))
+- Don't fail direct URL hash checking with dependency metadata
+  ([#13736](https://github.com/astral-sh/uv/pull/13736))
+- Exit early on `self update` if global `--offline` is set
+  ([#13663](https://github.com/astral-sh/uv/pull/13663))
+- Fix cases where the uv lock is incorrectly marked as out of date
+  ([#13635](https://github.com/astral-sh/uv/pull/13635))
+- Include pre-release versions in `uv python install --reinstall`
+  ([#13645](https://github.com/astral-sh/uv/pull/13645))
+- Set `LC_ALL=C` for git when checking git worktree
+  ([#13637](https://github.com/astral-sh/uv/pull/13637))
+- Avoid rejecting Windows paths for remote Python download JSON targets
+  ([#13625](https://github.com/astral-sh/uv/pull/13625))
+
+### Preview
+
+- Add `uv add --bounds` to configure version constraints
+  ([#12946](https://github.com/astral-sh/uv/pull/12946))
+
+### Documentation
+
+- Add documentation about Python versions to Tools concept page
+  ([#7673](https://github.com/astral-sh/uv/pull/7673))
+- Add example of enabling Dependabot ([#13692](https://github.com/astral-sh/uv/pull/13692))
+- Fix `exclude-newer` date format for persistent configuration files
+  ([#13706](https://github.com/astral-sh/uv/pull/13706))
+- Quote versions variables in GitLab documentation
+  ([#13679](https://github.com/astral-sh/uv/pull/13679))
+- Update Dependabot support status ([#13690](https://github.com/astral-sh/uv/pull/13690))
+- Explicitly specify to add a new repo entry to the repos list item in the `.pre-commit-config.yaml`
+  ([#10243](https://github.com/astral-sh/uv/pull/10243))
+- Add integration with marimo guide ([#13691](https://github.com/astral-sh/uv/pull/13691))
+- Add pronunciation to README ([#5336](https://github.com/astral-sh/uv/pull/5336))
+
+## 0.7.10
+
+### Enhancements
+
+- Add `--show-extras` to `uv tool list` ([#13783](https://github.com/astral-sh/uv/pull/13783))
+- Add dynamically generated sysconfig replacement mappings
+  ([#13441](https://github.com/astral-sh/uv/pull/13441))
+- Add data locations to install wheel logs ([#13797](https://github.com/astral-sh/uv/pull/13797))
+
+### Bug fixes
+
+- Avoid redaction of placeholder `git` username when using SSH authentication
+  ([#13799](https://github.com/astral-sh/uv/pull/13799))
+- Propagate credentials to files on devpi indexes ending in `/+simple`
+  ([#13743](https://github.com/astral-sh/uv/pull/13743))
+- Restore retention of credentials for direct URLs in `uv export`
+  ([#13809](https://github.com/astral-sh/uv/pull/13809))
+
+## 0.7.11
+
+### Python
+
+- Add Python 3.14.0b1
+- Add Python 3.13.4
+- Add Python 3.12.11
+- Add Python 3.11.13
+- Add Python 3.10.18
+- Add Python 3.9.23
+
+### Enhancements
+
+- Add Pyodide support ([#12731](https://github.com/astral-sh/uv/pull/12731))
+- Better error message for version specifier with missing operator
+  ([#13803](https://github.com/astral-sh/uv/pull/13803))
+
+### Bug fixes
+
+- Downgrade `reqwest` and `hyper-util` to resolve connection reset errors over IPv6
+  ([#13835](https://github.com/astral-sh/uv/pull/13835))
+- Prefer `uv`'s binary's version when checking if it's up to date
+  ([#13840](https://github.com/astral-sh/uv/pull/13840))
+
+### Documentation
+
+- Use "terminal driver" instead of "shell" in `SIGINT` docs
+  ([#13787](https://github.com/astral-sh/uv/pull/13787))
+
+## 0.7.12
+
+### Enhancements
+
+- Add `uv python pin --rm` to remove `.python-version` pins
+  ([#13860](https://github.com/astral-sh/uv/pull/13860))
+- Don't hint at versions removed by `excluded-newer`
+  ([#13884](https://github.com/astral-sh/uv/pull/13884))
+- Add hint to use `tool.uv.environments` on resolution error
+  ([#13455](https://github.com/astral-sh/uv/pull/13455))
+- Add hint to use `tool.uv.required-environments` on resolution error
+  ([#13575](https://github.com/astral-sh/uv/pull/13575))
+- Improve `python pin` error messages ([#13862](https://github.com/astral-sh/uv/pull/13862))
+
+### Bug fixes
+
+- Lock environments during `uv sync`, `uv add` and `uv remove` to prevent race conditions
+  ([#13869](https://github.com/astral-sh/uv/pull/13869))
+- Add `--no-editable` to `uv export` for `pylock.toml`
+  ([#13852](https://github.com/astral-sh/uv/pull/13852))
+
+### Documentation
+
+- List `.gitignore` in project init files ([#13855](https://github.com/astral-sh/uv/pull/13855))
+- Move the pip interface documentation into the concepts section
+  ([#13841](https://github.com/astral-sh/uv/pull/13841))
+- Remove the configuration section in favor of concepts / reference
+  ([#13842](https://github.com/astral-sh/uv/pull/13842))
+- Update Git and GitHub Actions docs to mention `gh auth login`
+  ([#13850](https://github.com/astral-sh/uv/pull/13850))
+
+### Preview
+
+- Fix directory glob traversal fallback preventing exclusion of all files
+  ([#13882](https://github.com/astral-sh/uv/pull/13882))
+
+## 0.7.13
+
+### Python
+
+- Add Python 3.14.0b2
+- Add Python 3.13.5
+- Fix stability of `uuid.getnode` on 3.13
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250612)
+for more details.
+
+### Enhancements
+
+- Download versions in `uv python pin` if not found
+  ([#13946](https://github.com/astral-sh/uv/pull/13946))
+- Use TTY detection to determine if SIGINT forwarding is enabled
+  ([#13925](https://github.com/astral-sh/uv/pull/13925))
+- Avoid fetching an exact, cached Git commit, even if it isn't locked
+  ([#13748](https://github.com/astral-sh/uv/pull/13748))
+- Add `zstd` and `deflate` to `Accept-Encoding`
+  ([#13982](https://github.com/astral-sh/uv/pull/13982))
+- Build binaries for riscv64 ([#12688](https://github.com/astral-sh/uv/pull/12688))
+
+### Bug fixes
+
+- Check if relative URL is valid directory before treating as index
+  ([#13917](https://github.com/astral-sh/uv/pull/13917))
+- Ignore Python discovery errors during `uv python pin`
+  ([#13944](https://github.com/astral-sh/uv/pull/13944))
+- Do not allow `uv add --group ... --script` ([#13997](https://github.com/astral-sh/uv/pull/13997))
+
+### Preview changes
+
+- Build backend: Support namespace packages ([#13833](https://github.com/astral-sh/uv/pull/13833))
+
+### Documentation
+
+- Add 3.14 to the supported platform reference
+  ([#13990](https://github.com/astral-sh/uv/pull/13990))
+- Add an `llms.txt` to uv ([#13929](https://github.com/astral-sh/uv/pull/13929))
+- Add supported macOS version to the platform reference
+  ([#13993](https://github.com/astral-sh/uv/pull/13993))
+- Update platform support reference to include Python implementation list
+  ([#13991](https://github.com/astral-sh/uv/pull/13991))
+- Update pytorch.md ([#13899](https://github.com/astral-sh/uv/pull/13899))
+- Update the CLI help and reference to include references to the Python bin directory
+  ([#13978](https://github.com/astral-sh/uv/pull/13978))
+
+## 0.7.14
+
+### Enhancements
+
+- Add XPU to `--torch-backend` ([#14172](https://github.com/astral-sh/uv/pull/14172))
+- Add ROCm backends to `--torch-backend` ([#14120](https://github.com/astral-sh/uv/pull/14120))
+- Remove preview label from `--torch-backend` ([#14119](https://github.com/astral-sh/uv/pull/14119))
+- Add `[tool.uv.dependency-groups].mygroup.requires-python`
+  ([#13735](https://github.com/astral-sh/uv/pull/13735))
+- Add auto-detection for AMD GPUs ([#14176](https://github.com/astral-sh/uv/pull/14176))
+- Show retries for HTTP status code errors ([#13897](https://github.com/astral-sh/uv/pull/13897))
+- Support transparent Python patch version upgrades
+  ([#13954](https://github.com/astral-sh/uv/pull/13954))
+- Warn on empty index directory ([#13940](https://github.com/astral-sh/uv/pull/13940))
+- Publish to DockerHub ([#14088](https://github.com/astral-sh/uv/pull/14088))
+
+### Performance
+
+- Make cold resolves about 10% faster ([#14035](https://github.com/astral-sh/uv/pull/14035))
+
+### Bug fixes
+
+- Don't use walrus operator in interpreter query script
+  ([#14108](https://github.com/astral-sh/uv/pull/14108))
+- Fix handling of changes to `requires-python`
+  ([#14076](https://github.com/astral-sh/uv/pull/14076))
+- Fix implied `platform_machine` marker for `win_amd64` platform tag
+  ([#14041](https://github.com/astral-sh/uv/pull/14041))
+- Only update existing symlink directories on preview uninstall
+  ([#14179](https://github.com/astral-sh/uv/pull/14179))
+- Serialize Python requests for tools as canonicalized strings
+  ([#14109](https://github.com/astral-sh/uv/pull/14109))
+- Support netrc and same-origin credential propagation on index redirects
+  ([#14126](https://github.com/astral-sh/uv/pull/14126))
+- Support reading `dependency-groups` from pyproject.tomls with no `[project]`
+  ([#13742](https://github.com/astral-sh/uv/pull/13742))
+- Handle an existing shebang in `uv init --script`
+  ([#14141](https://github.com/astral-sh/uv/pull/14141))
+- Prevent concurrent updates of the environment in `uv run`
+  ([#14153](https://github.com/astral-sh/uv/pull/14153))
+- Filter managed Python distributions by platform before querying when included in request
+  ([#13936](https://github.com/astral-sh/uv/pull/13936))
+
+### Documentation
+
+- Replace cuda124 with cuda128 ([#14168](https://github.com/astral-sh/uv/pull/14168))
+- Document the way member sources shadow workspace sources
+  ([#14136](https://github.com/astral-sh/uv/pull/14136))
+- Sync documented PyTorch integration index for CUDA and ROCm versions from PyTorch website
+  ([#14100](https://github.com/astral-sh/uv/pull/14100))
+
+## 0.7.15
+
+### Enhancements
+
+- Consistently use `Ordering::Relaxed` for standalone atomic use cases
+  ([#14190](https://github.com/astral-sh/uv/pull/14190))
+- Warn on ambiguous relative paths for `--index`
+  ([#14152](https://github.com/astral-sh/uv/pull/14152))
+- Skip GitHub fast path when rate-limited ([#13033](https://github.com/astral-sh/uv/pull/13033))
+- Preserve newlines in `schema.json` descriptions
+  ([#13693](https://github.com/astral-sh/uv/pull/13693))
+
+### Bug fixes
+
+- Add check for using minor version link when creating a venv on Windows
+  ([#14252](https://github.com/astral-sh/uv/pull/14252))
+- Strip query parameters when parsing source URL
+  ([#14224](https://github.com/astral-sh/uv/pull/14224))
+
+### Documentation
+
+- Add a link to PyPI FAQ to clarify what per-project token is
+  ([#14242](https://github.com/astral-sh/uv/pull/14242))
+
+### Preview features
+
+- Allow symlinks in the build backend ([#14212](https://github.com/astral-sh/uv/pull/14212))
+
+## 0.7.16
+
+### Python
+
+- Add Python 3.14.0b3
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250626)
+for more details.
+
+### Enhancements
+
+- Include path or URL when failing to convert in lockfile
+  ([#14292](https://github.com/astral-sh/uv/pull/14292))
+- Warn when `~=` is used as a Python version specifier without a patch version
+  ([#14008](https://github.com/astral-sh/uv/pull/14008))
+
+### Preview features
+
+- Ensure preview default Python installs are upgradeable
+  ([#14261](https://github.com/astral-sh/uv/pull/14261))
+
+### Performance
+
+- Share workspace cache between lock and sync operations
+  ([#14321](https://github.com/astral-sh/uv/pull/14321))
+
+### Bug fixes
+
+- Allow local indexes to reference remote files
+  ([#14294](https://github.com/astral-sh/uv/pull/14294))
+- Avoid rendering desugared prefix matches in error messages
+  ([#14195](https://github.com/astral-sh/uv/pull/14195))
+- Avoid using path URL for workspace Git dependencies in `requirements.txt`
+  ([#14288](https://github.com/astral-sh/uv/pull/14288))
+- Normalize index URLs to remove trailing slash
+  ([#14245](https://github.com/astral-sh/uv/pull/14245))
+- Respect URL-encoded credentials in redirect location
+  ([#14315](https://github.com/astral-sh/uv/pull/14315))
+- Lock the source tree when running setuptools, to protect concurrent builds
+  ([#14174](https://github.com/astral-sh/uv/pull/14174))
+
+### Documentation
+
+- Note that GCP Artifact Registry download URLs must have `/simple` component
+  ([#14251](https://github.com/astral-sh/uv/pull/14251))
+
+## 0.7.17
+
+### Bug fixes
+
+- Apply build constraints when resolving `--with` dependencies
+  ([#14340](https://github.com/astral-sh/uv/pull/14340))
+- Drop trailing slashes when converting index URL from URL
+  ([#14346](https://github.com/astral-sh/uv/pull/14346))
+- Ignore `UV_PYTHON_CACHE_DIR` when empty ([#14336](https://github.com/astral-sh/uv/pull/14336))
+- Fix error message ordering for `pyvenv.cfg` version conflict
+  ([#14329](https://github.com/astral-sh/uv/pull/14329))
+
+## 0.7.18
+
+### Python
+
+- Added arm64 Windows Python 3.11, 3.12, 3.13, and 3.14 These are not downloaded by default, since
+  x86-64 Python has broader ecosystem support on Windows. However, they can be requested with
+  `cpython-<version>-windows-aarch64`.
+
+See the
+[python-build-standalone release](https://github.com/astral-sh/python-build-standalone/releases/tag/20250630)
+for more details.
+
+### Enhancements
+
+- Keep track of retries in `ManagedPythonDownload::fetch_with_retry`
+  ([#14378](https://github.com/astral-sh/uv/pull/14378))
+- Reuse build (virtual) environments across resolution and installation
+  ([#14338](https://github.com/astral-sh/uv/pull/14338))
+- Improve trace message for cached Python interpreter query
+  ([#14328](https://github.com/astral-sh/uv/pull/14328))
+- Use parsed URLs for conflicting URL error message
+  ([#14380](https://github.com/astral-sh/uv/pull/14380))
+
+### Preview features
+
+- Ignore invalid build backend settings when not building
+  ([#14372](https://github.com/astral-sh/uv/pull/14372))
+
+### Bug fixes
+
+- Fix equals-star and tilde-equals with `python_version` and `python_full_version`
+  ([#14271](https://github.com/astral-sh/uv/pull/14271))
+- Include the canonical path in the interpreter query cache key
+  ([#14331](https://github.com/astral-sh/uv/pull/14331))
+- Only drop build directories on program exit ([#14304](https://github.com/astral-sh/uv/pull/14304))
+- Error instead of panic on conflict between global and subcommand flags
+  ([#14368](https://github.com/astral-sh/uv/pull/14368))
+- Consistently normalize trailing slashes on URLs with no path segments
+  ([#14349](https://github.com/astral-sh/uv/pull/14349))
+
+### Documentation
+
+- Add instructions for publishing to JFrog's Artifactory
+  ([#14253](https://github.com/astral-sh/uv/pull/14253))
+- Edits to the build backend documentation ([#14376](https://github.com/astral-sh/uv/pull/14376))
+
+## 0.7.19
+
+The **[uv build backend](https://docs.astral.sh/uv/concepts/build-backend/) is now stable**, and
+considered ready for production use.
+
+The uv build backend is a great choice for pure Python projects. It has reasonable defaults, with
+the goal of requiring zero configuration for most users, but provides flexible configuration to
+accommodate most Python project structures. It integrates tightly with uv, to improve messaging and
+user experience. It validates project metadata and structures, preventing common mistakes. And,
+finally, it's very fast — `uv sync` on a new project (from `uv init`) is 10-30x faster than with
+other build backends.
+
+To use uv as a build backend in an existing project, add `uv_build` to the `[build-system]` section
+in your `pyproject.toml`:
+
+```toml
+[build-system]
+requires = ["uv_build>=0.7.19,<0.8.0"]
+build-backend = "uv_build"
+```
+
+In a future release, it will replace `hatchling` as the default in `uv init`. As before, uv will
+remain compatible with all standards-compliant build backends.
+
+### Python
+
+- Add PGO distributions of Python for aarch64 Linux, which are more optimized for better performance
+
+See the
+[python-build-standalone release](https://github.com/astral-sh/python-build-standalone/releases/tag/20250702)
+for more details.
+
+### Enhancements
+
+- Ignore Python patch version for `--universal` pip compile
+  ([#14405](https://github.com/astral-sh/uv/pull/14405))
+- Update the tilde version specifier warning to include more context
+  ([#14335](https://github.com/astral-sh/uv/pull/14335))
+- Clarify behavior and hint on tool install when no executables are available
+  ([#14423](https://github.com/astral-sh/uv/pull/14423))
+
+### Bug fixes
+
+- Make project and interpreter lock acquisition non-fatal
+  ([#14404](https://github.com/astral-sh/uv/pull/14404))
+- Includes `sys.prefix` in cached environment keys to avoid `--with` collisions across projects
+  ([#14403](https://github.com/astral-sh/uv/pull/14403))
+
+### Documentation
+
+- Add a migration guide from pip to uv projects
+  ([#12382](https://github.com/astral-sh/uv/pull/12382))
+
+## 0.7.20
+
+### Python
+
+- Add Python 3.14.0b4
+- Add zstd support to Python 3.14 on Unix (it already was available on Windows)
+- Add PyPy 7.3.20 (for Python 3.11.13)
+
+See the [PyPy](https://pypy.org/posts/2025/07/pypy-v7320-release.html) and
+[`python-build-standalone`](https://github.com/astral-sh/python-build-standalone/releases/tag/20250708)
+release notes for more details.
+
+### Enhancements
+
+- Add `--workspace` flag to `uv add` ([#14496](https://github.com/astral-sh/uv/pull/14496))
+- Add auto-detection for Intel GPUs ([#14386](https://github.com/astral-sh/uv/pull/14386))
+- Drop trailing arguments when writing shebangs
+  ([#14519](https://github.com/astral-sh/uv/pull/14519))
+- Add debug message when skipping Python downloads
+  ([#14509](https://github.com/astral-sh/uv/pull/14509))
+- Add support for declaring multiple modules in namespace packages
+  ([#14460](https://github.com/astral-sh/uv/pull/14460))
+
+### Bug fixes
+
+- Revert normalization of trailing slashes on index URLs
+  ([#14511](https://github.com/astral-sh/uv/pull/14511))
+- Fix forced resolution with all extras in `uv version`
+  ([#14434](https://github.com/astral-sh/uv/pull/14434))
+- Fix handling of pre-releases in preferences ([#14498](https://github.com/astral-sh/uv/pull/14498))
+- Remove transparent variants in `uv-extract` to enable retries
+  ([#14450](https://github.com/astral-sh/uv/pull/14450))
+
+### Rust API
+
+- Add method to get packages involved in a `NoSolutionError`
+  ([#14457](https://github.com/astral-sh/uv/pull/14457))
+- Make `ErrorTree` for `NoSolutionError` public
+  ([#14444](https://github.com/astral-sh/uv/pull/14444))
+
+### Documentation
+
+- Finish incomplete sentence in pip migration guide
+  ([#14432](https://github.com/astral-sh/uv/pull/14432))
+- Remove `cache-dependency-glob` examples for `setup-uv`
+  ([#14493](https://github.com/astral-sh/uv/pull/14493))
+- Remove `uv pip sync` suggestion with `pyproject.toml`
+  ([#14510](https://github.com/astral-sh/uv/pull/14510))
+- Update documentation for GitHub to use `setup-uv@v6`
+  ([#14490](https://github.com/astral-sh/uv/pull/14490))
+
+## 0.7.21
+
+### Python
+
+- Restore the SQLite `fts4`, `fts5`, `rtree`, and `geopoly` extensions on macOS and Linux
+
+See the
+[`python-build-standalone` release notes](https://github.com/astral-sh/python-build-standalone/releases/tag/20250712)
+for more details.
+
+### Enhancements
+
+- Add `--python-platform` to `uv sync` ([#14320](https://github.com/astral-sh/uv/pull/14320))
+- Support pre-releases in `uv version --bump` ([#13578](https://github.com/astral-sh/uv/pull/13578))
+- Add `-w` shorthand for `--with` ([#14530](https://github.com/astral-sh/uv/pull/14530))
+- Add an exception handler on Windows to display information on crash
+  ([#14582](https://github.com/astral-sh/uv/pull/14582))
+- Add hint when Python downloads are disabled ([#14522](https://github.com/astral-sh/uv/pull/14522))
+- Add `UV_HTTP_RETRIES` to customize retry counts
+  ([#14544](https://github.com/astral-sh/uv/pull/14544))
+- Follow leaf symlinks matched by globs in `cache-key`
+  ([#13438](https://github.com/astral-sh/uv/pull/13438))
+- Support parent path components (`..`) in globs in `cache-key`
+  ([#13469](https://github.com/astral-sh/uv/pull/13469))
+- Improve `cache-key` performance ([#13469](https://github.com/astral-sh/uv/pull/13469))
+
+### Preview features
+
+- Add `uv sync --output-format json` ([#13689](https://github.com/astral-sh/uv/pull/13689))
+
+### Bug fixes
+
+- Do not re-resolve with a new Python version in `uv tool` if it is incompatible with `--python`
+  ([#14606](https://github.com/astral-sh/uv/pull/14606))
+
+### Documentation
+
+- Document how to nest dependency groups with `include-group`
+  ([#14539](https://github.com/astral-sh/uv/pull/14539))
+- Fix repeated word in Pyodide doc ([#14554](https://github.com/astral-sh/uv/pull/14554))
+- Update CONTRIBUTING.md with instructions to format Markdown files via Docker
+  ([#14246](https://github.com/astral-sh/uv/pull/14246))
+- Fix version number for `setup-python` ([#14533](https://github.com/astral-sh/uv/pull/14533))
+
+## 0.7.22
+
+### Python
+
+- Upgrade GraalPy to 24.2.2
+
+See the [GraalPy release notes](https://github.com/oracle/graalpython/releases/tag/graal-24.2.2) for
+more details.
+
+### Configuration
+
+- Add `UV_COMPILE_BYTECODE_TIMEOUT` environment variable
+  ([#14369](https://github.com/astral-sh/uv/pull/14369))
+- Allow users to override index `cache-control` headers
+  ([#14620](https://github.com/astral-sh/uv/pull/14620))
+- Add `UV_LIBC` to override libc selection in multi-libc environment
+  ([#14646](https://github.com/astral-sh/uv/pull/14646))
+
+### Bug fixes
+
+- Fix `--all-arches` when paired with `--only-downloads`
+  ([#14629](https://github.com/astral-sh/uv/pull/14629))
+- Skip Windows Python interpreters that return a broken MSIX package code
+  ([#14636](https://github.com/astral-sh/uv/pull/14636))
+- Warn on invalid `uv.toml` when provided via direct path
+  ([#14653](https://github.com/astral-sh/uv/pull/14653))
+- Improve async signal safety in Windows exception handler
+  ([#14619](https://github.com/astral-sh/uv/pull/14619))
+
+### Documentation
+
+- Mention the `revision` in the lockfile versioning doc
+  ([#14634](https://github.com/astral-sh/uv/pull/14634))
+- Move "Conflicting dependencies" to the "Resolution" page
+  ([#14633](https://github.com/astral-sh/uv/pull/14633))
+- Rename "Dependency specifiers" section to exclude PEP 508 reference
+  ([#14631](https://github.com/astral-sh/uv/pull/14631))
+- Suggest `uv cache clean` prior to `--reinstall`
+  ([#14659](https://github.com/astral-sh/uv/pull/14659))
+
+### Preview features
+
+- Make preview Python registration on Windows non-fatal
+  ([#14614](https://github.com/astral-sh/uv/pull/14614))
+- Update preview installation of Python executables to be non-fatal
+  ([#14612](https://github.com/astral-sh/uv/pull/14612))
+- Add `uv python update-shell` ([#14627](https://github.com/astral-sh/uv/pull/14627))

crates/uv-auth/Cargo.toml

@@ -33,8 +33,8 @@ tracing = { workspace = true }
 url = { workspace = true }
 
 [dev-dependencies]
-insta = { version = "1.40.0" }
+insta = { workspace = true }
 tempfile = { workspace = true }
-test-log = { version = "0.2.16", features = ["trace"], default-features = false }
+test-log = { workspace = true }
 tokio = { workspace = true }
 wiremock = { workspace = true }

crates/uv-auth/src/lib.rs

@@ -15,6 +15,7 @@ mod credentials;
 mod index;
 mod keyring;
 mod middleware;
+mod providers;
 mod realm;
 
 // TODO(zanieb): Consider passing a cache explicitly throughout

crates/uv-auth/src/middleware.rs

@@ -7,6 +7,7 @@ use reqwest::{Request, Response};
 use reqwest_middleware::{Error, Middleware, Next};
 use tracing::{debug, trace, warn};
 
+use crate::providers::HuggingFaceProvider;
 use crate::{
     CREDENTIALS_CACHE, CredentialsCache, KeyringProvider,
     cache::FetchUrl,
@@ -457,9 +458,8 @@ impl AuthMiddleware {
             Some(credentials)
         };
 
-        return self
+        self.complete_request(credentials, request, extensions, next, auth_policy)
-            .complete_request(credentials, request, extensions, next, auth_policy)
+            .await
-            .await;
     }
 
     /// Fetch credentials for a URL.
@@ -503,6 +503,13 @@ impl AuthMiddleware {
             return credentials;
         }
 
+        // Support for known providers, like Hugging Face.
+        if let Some(credentials) = HuggingFaceProvider::credentials_for(url).map(Arc::new) {
+            debug!("Found Hugging Face credentials for {url}");
+            self.cache().fetches.done(key, Some(credentials.clone()));
+            return Some(credentials);
+        }
+
         // Netrc support based on: <https://github.com/gribouille/netrc>.
         let credentials = if let Some(credentials) = self.netrc.get().and_then(|netrc| {
             debug!("Checking netrc for credentials for {url}");

crates/uv-auth/src/providers.rs

@@ -0,0 +1,49 @@
+use std::sync::LazyLock;
+use tracing::debug;
+use url::Url;
+
+use uv_static::EnvVars;
+
+use crate::Credentials;
+use crate::realm::{Realm, RealmRef};
+
+/// The [`Realm`] for the Hugging Face platform.
+static HUGGING_FACE_REALM: LazyLock<Realm> = LazyLock::new(|| {
+    let url = Url::parse("https://huggingface.co").expect("Failed to parse Hugging Face URL");
+    Realm::from(&url)
+});
+
+/// The authentication token for the Hugging Face platform, if set.
+static HUGGING_FACE_TOKEN: LazyLock<Option<Vec<u8>>> = LazyLock::new(|| {
+    // Extract the Hugging Face token from the environment variable, if it exists.
+    let hf_token = std::env::var(EnvVars::HF_TOKEN)
+        .ok()
+        .map(String::into_bytes)
+        .filter(|token| !token.is_empty())?;
+
+    if std::env::var_os(EnvVars::UV_NO_HF_TOKEN).is_some() {
+        debug!("Ignoring Hugging Face token from environment due to `UV_NO_HF_TOKEN`");
+        return None;
+    }
+
+    debug!("Found Hugging Face token in environment");
+    Some(hf_token)
+});
+
+/// A provider for authentication credentials for the Hugging Face platform.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct HuggingFaceProvider;
+
+impl HuggingFaceProvider {
+    /// Returns the credentials for the Hugging Face platform, if available.
+    pub(crate) fn credentials_for(url: &Url) -> Option<Credentials> {
+        if RealmRef::from(url) == *HUGGING_FACE_REALM {
+            if let Some(token) = HUGGING_FACE_TOKEN.as_ref() {
+                return Some(Credentials::Bearer {
+                    token: token.clone(),
+                });
+            }
+        }
+        None
+    }
+}

crates/uv-auth/src/realm.rs

@@ -1,5 +1,5 @@
+use std::hash::{Hash, Hasher};
 use std::{fmt::Display, fmt::Formatter};
-
 use url::Url;
 use uv_small_str::SmallString;
 
@@ -22,7 +22,7 @@ use uv_small_str::SmallString;
 // The port is only allowed to differ if it matches the "default port" for the scheme.
 // However, `url` (and therefore `reqwest`) sets the `port` to `None` if it matches the default port
 // so we do not need any special handling here.
-#[derive(Debug, Clone, PartialEq, Eq, Hash)]
+#[derive(Debug, Clone)]
 pub(crate) struct Realm {
     scheme: SmallString,
     host: Option<SmallString>,
@@ -59,6 +59,76 @@ impl Display for Realm {
     }
 }
 
+impl PartialEq for Realm {
+    fn eq(&self, other: &Self) -> bool {
+        RealmRef::from(self) == RealmRef::from(other)
+    }
+}
+
+impl Eq for Realm {}
+
+impl Hash for Realm {
+    fn hash<H: Hasher>(&self, state: &mut H) {
+        RealmRef::from(self).hash(state);
+    }
+}
+
+/// A reference to a [`Realm`] that can be used for zero-allocation comparisons.
+#[derive(Debug, Copy, Clone)]
+pub(crate) struct RealmRef<'a> {
+    scheme: &'a str,
+    host: Option<&'a str>,
+    port: Option<u16>,
+}
+
+impl<'a> From<&'a Url> for RealmRef<'a> {
+    fn from(url: &'a Url) -> Self {
+        Self {
+            scheme: url.scheme(),
+            host: url.host_str(),
+            port: url.port(),
+        }
+    }
+}
+
+impl PartialEq for RealmRef<'_> {
+    fn eq(&self, other: &Self) -> bool {
+        self.scheme == other.scheme && self.host == other.host && self.port == other.port
+    }
+}
+
+impl Eq for RealmRef<'_> {}
+
+impl Hash for RealmRef<'_> {
+    fn hash<H: Hasher>(&self, state: &mut H) {
+        self.scheme.hash(state);
+        self.host.hash(state);
+        self.port.hash(state);
+    }
+}
+
+impl<'a> PartialEq<RealmRef<'a>> for Realm {
+    fn eq(&self, rhs: &RealmRef<'a>) -> bool {
+        RealmRef::from(self) == *rhs
+    }
+}
+
+impl PartialEq<Realm> for RealmRef<'_> {
+    fn eq(&self, rhs: &Realm) -> bool {
+        *self == RealmRef::from(rhs)
+    }
+}
+
+impl<'a> From<&'a Realm> for RealmRef<'a> {
+    fn from(realm: &'a Realm) -> Self {
+        Self {
+            scheme: &realm.scheme,
+            host: realm.host.as_deref(),
+            port: realm.port,
+        }
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use url::{ParseError, Url};

crates/uv-bench/Cargo.toml

@@ -43,7 +43,7 @@ uv-workspace = { workspace = true }
 
 anyhow = { workspace = true }
 codspeed-criterion-compat = { version = "3.0.2", default-features = false, optional = true }
-criterion = { version = "0.6.0", default-features = false, features = [
+criterion = { version = "0.7.0", default-features = false, features = [
   "async_tokio",
 ] }
 jiff = { workspace = true }

crates/uv-bench/benches/uv.rs

@@ -86,8 +86,8 @@ mod resolver {
     use uv_cache::Cache;
     use uv_client::RegistryClient;
     use uv_configuration::{
-        BuildOptions, Concurrency, ConfigSettings, Constraints, IndexStrategy, PreviewMode,
+        BuildOptions, Concurrency, ConfigSettings, Constraints, IndexStrategy,
-        SourceStrategy,
+        PackageConfigSettings, Preview, SourceStrategy,
     };
     use uv_dispatch::{BuildDispatch, SharedState};
     use uv_distribution::DistributionDatabase;
@@ -99,8 +99,8 @@ mod resolver {
     use uv_pypi_types::{Conflicts, ResolverMarkerEnvironment};
     use uv_python::Interpreter;
     use uv_resolver::{
-        FlatIndex, InMemoryIndex, Manifest, OptionsBuilder, PythonRequirement, Resolver,
+        ExcludeNewer, FlatIndex, InMemoryIndex, Manifest, OptionsBuilder, PythonRequirement,
-        ResolverEnvironment, ResolverOutput,
+        Resolver, ResolverEnvironment, ResolverOutput,
     };
     use uv_types::{BuildIsolation, EmptyInstalledPackages, HashStrategy};
     use uv_workspace::WorkspaceCache;
@@ -141,10 +141,12 @@ mod resolver {
         universal: bool,
     ) -> Result<ResolverOutput> {
         let build_isolation = BuildIsolation::default();
+        let extra_build_requires = uv_distribution::ExtraBuildRequires::default();
         let build_options = BuildOptions::default();
         let concurrency = Concurrency::default();
         let config_settings = ConfigSettings::default();
-        let exclude_newer = Some(
+        let config_settings_package = PackageConfigSettings::default();
+        let exclude_newer = ExcludeNewer::global(
             jiff::civil::date(2024, 9, 1)
                 .to_zoned(jiff::tz::TimeZone::UTC)
                 .unwrap()
@@ -158,7 +160,9 @@ mod resolver {
         let index = InMemoryIndex::default();
         let index_locations = IndexLocations::default();
         let installed_packages = EmptyInstalledPackages;
-        let options = OptionsBuilder::new().exclude_newer(exclude_newer).build();
+        let options = OptionsBuilder::new()
+            .exclude_newer(exclude_newer.clone())
+            .build();
         let sources = SourceStrategy::default();
         let dependency_metadata = DependencyMetadata::default();
         let conflicts = Conflicts::empty();
@@ -184,7 +188,9 @@ mod resolver {
             state,
             IndexStrategy::default(),
             &config_settings,
+            &config_settings_package,
             build_isolation,
+            &extra_build_requires,
             LinkMode::default(),
             &build_options,
             &hashes,
@@ -192,7 +198,7 @@ mod resolver {
             sources,
             workspace_cache,
             concurrency,
-            PreviewMode::Enabled,
+            Preview::default(),
         );
 
         let markers = if universal {

crates/uv-build-backend/Cargo.toml

@@ -1,13 +1,13 @@
 [package]
 name = "uv-build-backend"
 version = "0.1.0"
-edition.workspace = true
+edition = { workspace = true }
-rust-version.workspace = true
+rust-version = { workspace = true }
-homepage.workspace = true
+homepage = { workspace = true }
-documentation.workspace = true
+documentation = { workspace = true }
-repository.workspace = true
+repository = { workspace = true }
-authors.workspace = true
+authors = { workspace = true }
-license.workspace = true
+license = { workspace = true }
 
 [lib]
 doctest = false
@@ -31,6 +31,7 @@ flate2 = { workspace = true, default-features = false }
 fs-err = { workspace = true }
 globset = { workspace = true }
 itertools = { workspace = true }
+rustc-hash = { workspace = true }
 schemars = { workspace = true, optional = true }
 serde = { workspace = true }
 sha2 = { workspace = true }
@@ -55,5 +56,6 @@ schemars = ["dep:schemars", "uv-pypi-types/schemars"]
 
 [dev-dependencies]
 indoc = { workspace = true }
-insta = { version = "1.40.0", features = ["filters"] }
+insta = { workspace = true }
+regex = { workspace = true }
 tempfile = { workspace = true }

crates/uv-build-backend/src/lib.rs

@@ -22,6 +22,7 @@ use uv_normalize::PackageName;
 use uv_pypi_types::{Identifier, IdentifierParseError};
 
 use crate::metadata::ValidationError;
+use crate::settings::ModuleName;
 
 #[derive(Debug, Error)]
 pub enum Error {
@@ -184,7 +185,7 @@ fn check_metadata_directory(
     Ok(())
 }
 
-/// Returns the source root and the module path with the `__init__.py[i]`  below to it while
+/// Returns the source root and the module path(s) with the `__init__.py[i]`  below to it while
 /// checking the project layout and names.
 ///
 /// Some target platforms have case-sensitive filesystems, while others have case-insensitive
@@ -198,13 +199,15 @@ fn check_metadata_directory(
 /// dist-info-normalization, the rules are lowercasing, replacing `.` with `_` and
 /// replace `-` with `_`. Since `.` and `-` are not allowed in identifiers, we can use a string
 /// comparison with the module name.
+///
+/// While we recommend one module per package, it is possible to declare a list of modules.
 fn find_roots(
     source_tree: &Path,
     pyproject_toml: &PyProjectToml,
     relative_module_root: &Path,
-    module_name: Option<&str>,
+    module_name: Option<&ModuleName>,
     namespace: bool,
-) -> Result<(PathBuf, PathBuf), Error> {
+) -> Result<(PathBuf, Vec<PathBuf>), Error> {
     let relative_module_root = uv_fs::normalize_path(relative_module_root);
     let src_root = source_tree.join(&relative_module_root);
     if !src_root.starts_with(source_tree) {
@@ -215,22 +218,45 @@ fn find_roots(
 
     if namespace {
         // `namespace = true` disables module structure checks.
-        let module_relative = if let Some(module_name) = module_name {
+        let modules_relative = if let Some(module_name) = module_name {
-            module_name.split('.').collect::<PathBuf>()
+            match module_name {
+                ModuleName::Name(name) => {
+                    vec![name.split('.').collect::<PathBuf>()]
+                }
+                ModuleName::Names(names) => names
+                    .iter()
+                    .map(|name| name.split('.').collect::<PathBuf>())
+                    .collect(),
+            }
         } else {
-            PathBuf::from(pyproject_toml.name().as_dist_info_name().to_string())
+            vec![PathBuf::from(
+                pyproject_toml.name().as_dist_info_name().to_string(),
+            )]
         };
-        debug!("Namespace module path: {}", module_relative.user_display());
+        for module_relative in &modules_relative {
-        return Ok((src_root, module_relative));
+            debug!("Namespace module path: {}", module_relative.user_display());
+        }
+        return Ok((src_root, modules_relative));
     }
 
-    let module_relative = if let Some(module_name) = module_name {
+    let modules_relative = if let Some(module_name) = module_name {
-        module_path_from_module_name(&src_root, module_name)?
+        match module_name {
+            ModuleName::Name(name) => vec![module_path_from_module_name(&src_root, name)?],
+            ModuleName::Names(names) => names
+                .iter()
+                .map(|name| module_path_from_module_name(&src_root, name))
+                .collect::<Result<_, _>>()?,
+        }
     } else {
-        find_module_path_from_package_name(&src_root, pyproject_toml.name())?
+        vec![find_module_path_from_package_name(
+            &src_root,
+            pyproject_toml.name(),
+        )?]
     };
-    debug!("Module path: {}", module_relative.user_display());
+    for module_relative in &modules_relative {
-    Ok((src_root, module_relative))
+        debug!("Module path: {}", module_relative.user_display());
+    }
+    Ok((src_root, modules_relative))
 }
 
 /// Infer stubs packages from package name alone.
@@ -329,6 +355,7 @@ mod tests {
     use indoc::indoc;
     use insta::assert_snapshot;
     use itertools::Itertools;
+    use regex::Regex;
     use sha2::Digest;
     use std::io::{BufReader, Read};
     use std::iter;
@@ -336,6 +363,8 @@ mod tests {
     use uv_distribution_filename::{SourceDistFilename, WheelFilename};
     use uv_fs::{copy_dir_all, relative_to};
 
+    const MOCK_UV_VERSION: &str = "1.0.0+test";
+
     fn format_err(err: &Error) -> String {
         let context = iter::successors(std::error::Error::source(&err), |&err| err.source())
             .map(|err| format!("  Caused by: {err}"))
@@ -362,19 +391,19 @@ mod tests {
     fn build(source_root: &Path, dist: &Path) -> Result<BuildResults, Error> {
         // Build a direct wheel, capture all its properties to compare it with the indirect wheel
         // latest and remove it since it has the same filename as the indirect wheel.
-        let (_name, direct_wheel_list_files) = list_wheel(source_root, "1.0.0+test")?;
+        let (_name, direct_wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION)?;
-        let direct_wheel_filename = build_wheel(source_root, dist, None, "1.0.0+test")?;
+        let direct_wheel_filename = build_wheel(source_root, dist, None, MOCK_UV_VERSION)?;
         let direct_wheel_path = dist.join(direct_wheel_filename.to_string());
         let direct_wheel_contents = wheel_contents(&direct_wheel_path);
         let direct_wheel_hash = sha2::Sha256::digest(fs_err::read(&direct_wheel_path)?);
         fs_err::remove_file(&direct_wheel_path)?;
 
         // Build a source distribution.
-        let (_name, source_dist_list_files) = list_source_dist(source_root, "1.0.0+test")?;
+        let (_name, source_dist_list_files) = list_source_dist(source_root, MOCK_UV_VERSION)?;
         // TODO(konsti): This should run in the unpacked source dist tempdir, but we need to
         // normalize the path.
-        let (_name, wheel_list_files) = list_wheel(source_root, "1.0.0+test")?;
+        let (_name, wheel_list_files) = list_wheel(source_root, MOCK_UV_VERSION)?;
-        let source_dist_filename = build_source_dist(source_root, dist, "1.0.0+test")?;
+        let source_dist_filename = build_source_dist(source_root, dist, MOCK_UV_VERSION)?;
         let source_dist_path = dist.join(source_dist_filename.to_string());
         let source_dist_contents = sdist_contents(&source_dist_path);
 
@@ -388,7 +417,7 @@ mod tests {
             source_dist_filename.name.as_dist_info_name(),
             source_dist_filename.version
         ));
-        let wheel_filename = build_wheel(&sdist_top_level_directory, dist, None, "1.0.0+test")?;
+        let wheel_filename = build_wheel(&sdist_top_level_directory, dist, None, MOCK_UV_VERSION)?;
         let wheel_contents = wheel_contents(&dist.join(wheel_filename.to_string()));
 
         // Check that direct and indirect wheels are identical.
@@ -410,6 +439,15 @@ mod tests {
         })
     }
 
+    fn build_err(source_root: &Path) -> String {
+        let dist = TempDir::new().unwrap();
+        let build_err = build(source_root, dist.path()).unwrap_err();
+        let err_message: String = format_err(&build_err)
+            .replace(&source_root.user_display().to_string(), "[TEMP_PATH]")
+            .replace('\\', "/");
+        err_message
+    }
+
     fn sdist_contents(source_dist_path: &Path) -> Vec<String> {
         let sdist_reader = BufReader::new(File::open(source_dist_path).unwrap());
         let mut source_dist = tar::Archive::new(GzDecoder::new(sdist_reader));
@@ -480,14 +518,14 @@ mod tests {
         ] {
             copy_dir_all(built_by_uv.join(dir), src.path().join(dir)).unwrap();
         }
-        for dir in [
+        for filename in [
             "pyproject.toml",
             "README.md",
             "uv.lock",
             "LICENSE-APACHE",
             "LICENSE-MIT",
         ] {
-            fs_err::copy(built_by_uv.join(dir), src.path().join(dir)).unwrap();
+            fs_err::copy(built_by_uv.join(filename), src.path().join(filename)).unwrap();
         }
 
         // Clear executable bit on Unix to build the same archive between Unix and Windows.
@@ -504,6 +542,14 @@ mod tests {
             fs_err::set_permissions(&path, perms).unwrap();
         }
 
+        // Redact the uv_build version to keep the hash stable across releases
+        let pyproject_toml = fs_err::read_to_string(src.path().join("pyproject.toml")).unwrap();
+        let current_requires =
+            Regex::new(r#"requires = \["uv_build>=[0-9.]+,<[0-9.]+"\]"#).unwrap();
+        let mocked_requires = r#"requires = ["uv_build>=1,<2"]"#;
+        let pyproject_toml = current_requires.replace(pyproject_toml.as_str(), mocked_requires);
+        fs_err::write(src.path().join("pyproject.toml"), pyproject_toml.as_bytes()).unwrap();
+
         // Add some files to be excluded
         let module_root = src.path().join("src").join("built_by_uv");
         fs_err::create_dir_all(module_root.join("__pycache__")).unwrap();
@@ -522,7 +568,7 @@ mod tests {
         // Check that the source dist is reproducible across platforms.
         assert_snapshot!(
             format!("{:x}", sha2::Sha256::digest(fs_err::read(&source_dist_path).unwrap())),
-            @"dab46bcc4d66960a11cfdc19604512a8e1a3241a67536f7e962166760e9c575c"
+            @"871d1f859140721b67cbeaca074e7a2740c88c38028d0509eba87d1285f1da9e"
         );
         // Check both the files we report and the actual files
         assert_snapshot!(format_file_list(build.source_dist_list_files, src.path()), @r"
@@ -576,7 +622,7 @@ mod tests {
         // Check that the wheel is reproducible across platforms.
         assert_snapshot!(
             format!("{:x}", sha2::Sha256::digest(fs_err::read(&wheel_path).unwrap())),
-            @"ac3f68ac448023bca26de689d80401bff57f764396ae802bf4666234740ffbe3"
+            @"342bf60c8406144f459358cde92408686c1631fe22389d042ce80379e589d6ec"
         );
         assert_snapshot!(build.wheel_contents.join("\n"), @r"
         built_by_uv-0.1.0.data/data/
@@ -634,7 +680,7 @@ mod tests {
             license = { file = "license.txt" }
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
         "#
             },
@@ -702,7 +748,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
         "#
             },
@@ -766,7 +812,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
 
             [tool.uv.build-backend]
@@ -808,7 +854,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
 
             [tool.uv.build-backend]
@@ -833,7 +879,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
 
             [tool.uv.build-backend]
@@ -882,7 +928,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
 
             [tool.uv.build-backend]
@@ -913,7 +959,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -964,7 +1010,7 @@ mod tests {
             version = "1.0.0"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
 
             [tool.uv.build-backend]
@@ -990,7 +1036,7 @@ mod tests {
             module-name = "simple_namespace.part"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -998,13 +1044,8 @@ mod tests {
         fs_err::create_dir_all(src.path().join("src").join("simple_namespace").join("part"))
             .unwrap();
 
-        let dist = TempDir::new().unwrap();
-        let build_err = build(src.path(), dist.path()).unwrap_err();
-        let err_message = format_err(&build_err)
-            .replace(&src.path().user_display().to_string(), "[TEMP_PATH]")
-            .replace('\\', "/");
         assert_snapshot!(
-            err_message,
+            build_err(src.path()),
             @"Expected a Python module at: `[TEMP_PATH]/src/simple_namespace/part/__init__.py`"
         );
 
@@ -1025,16 +1066,13 @@ mod tests {
             .join("simple_namespace")
             .join("__init__.py");
         File::create(&bogus_init_py).unwrap();
-        let build_err = build(src.path(), dist.path()).unwrap_err();
-        let err_message = format_err(&build_err)
-            .replace(&src.path().user_display().to_string(), "[TEMP_PATH]")
-            .replace('\\', "/");
         assert_snapshot!(
-            err_message,
+            build_err(src.path()),
             @"For namespace packages, `__init__.py[i]` is not allowed in parent directory: `[TEMP_PATH]/src/simple_namespace`"
         );
         fs_err::remove_file(bogus_init_py).unwrap();
 
+        let dist = TempDir::new().unwrap();
         let build1 = build(src.path(), dist.path()).unwrap();
         assert_snapshot!(build1.source_dist_contents.join("\n"), @r"
         simple_namespace_part-1.0.0/
@@ -1066,7 +1104,7 @@ mod tests {
             namespace = true
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -1089,7 +1127,7 @@ mod tests {
             namespace = true
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -1150,7 +1188,7 @@ mod tests {
             namespace = true
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -1173,7 +1211,7 @@ mod tests {
             module-name = "cloud-stubs.db.schema"
 
             [build-system]
-            requires = ["uv_build>=0.5.15,<0.6"]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
             build-backend = "uv_build"
             "#
         };
@@ -1209,4 +1247,117 @@ mod tests {
         cloud_db_schema_stubs-1.0.0.dist-info/WHEEL
         ");
     }
+
+    /// A package with multiple modules, one a regular module and two namespace modules.
+    #[test]
+    fn multiple_module_names() {
+        let src = TempDir::new().unwrap();
+        let pyproject_toml = indoc! {r#"
+            [project]
+            name = "simple-namespace-part"
+            version = "1.0.0"
+
+            [tool.uv.build-backend]
+            module-name = ["foo", "simple_namespace.part_a", "simple_namespace.part_b"]
+
+            [build-system]
+            requires = ["uv_build>=0.5.15,<0.6.0"]
+            build-backend = "uv_build"
+            "#
+        };
+        fs_err::write(src.path().join("pyproject.toml"), pyproject_toml).unwrap();
+        fs_err::create_dir_all(src.path().join("src").join("foo")).unwrap();
+        fs_err::create_dir_all(
+            src.path()
+                .join("src")
+                .join("simple_namespace")
+                .join("part_a"),
+        )
+        .unwrap();
+        fs_err::create_dir_all(
+            src.path()
+                .join("src")
+                .join("simple_namespace")
+                .join("part_b"),
+        )
+        .unwrap();
+
+        // Most of these checks exist in other tests too, but we want to ensure that they apply
+        // with multiple modules too.
+
+        // The first module is missing an `__init__.py`.
+        assert_snapshot!(
+            build_err(src.path()),
+            @"Expected a Python module at: `[TEMP_PATH]/src/foo/__init__.py`"
+        );
+
+        // Create the first correct `__init__.py` file
+        File::create(src.path().join("src").join("foo").join("__init__.py")).unwrap();
+
+        // The second module, a namespace, is missing an `__init__.py`.
+        assert_snapshot!(
+            build_err(src.path()),
+            @"Expected a Python module at: `[TEMP_PATH]/src/simple_namespace/part_a/__init__.py`"
+        );
+
+        // Create the other two correct `__init__.py` files
+        File::create(
+            src.path()
+                .join("src")
+                .join("simple_namespace")
+                .join("part_a")
+                .join("__init__.py"),
+        )
+        .unwrap();
+        File::create(
+            src.path()
+                .join("src")
+                .join("simple_namespace")
+                .join("part_b")
+                .join("__init__.py"),
+        )
+        .unwrap();
+
+        // For the second module, a namespace, there must not be an `__init__.py` here.
+        let bogus_init_py = src
+            .path()
+            .join("src")
+            .join("simple_namespace")
+            .join("__init__.py");
+        File::create(&bogus_init_py).unwrap();
+        assert_snapshot!(
+            build_err(src.path()),
+            @"For namespace packages, `__init__.py[i]` is not allowed in parent directory: `[TEMP_PATH]/src/simple_namespace`"
+        );
+        fs_err::remove_file(bogus_init_py).unwrap();
+
+        let dist = TempDir::new().unwrap();
+        let build = build(src.path(), dist.path()).unwrap();
+        assert_snapshot!(build.source_dist_contents.join("\n"), @r"
+        simple_namespace_part-1.0.0/
+        simple_namespace_part-1.0.0/PKG-INFO
+        simple_namespace_part-1.0.0/pyproject.toml
+        simple_namespace_part-1.0.0/src
+        simple_namespace_part-1.0.0/src/foo
+        simple_namespace_part-1.0.0/src/foo/__init__.py
+        simple_namespace_part-1.0.0/src/simple_namespace
+        simple_namespace_part-1.0.0/src/simple_namespace/part_a
+        simple_namespace_part-1.0.0/src/simple_namespace/part_a/__init__.py
+        simple_namespace_part-1.0.0/src/simple_namespace/part_b
+        simple_namespace_part-1.0.0/src/simple_namespace/part_b/__init__.py
+        ");
+        assert_snapshot!(build.wheel_contents.join("\n"), @r"
+        foo/
+        foo/__init__.py
+        simple_namespace/
+        simple_namespace/part_a/
+        simple_namespace/part_a/__init__.py
+        simple_namespace/part_b/
+        simple_namespace/part_b/__init__.py
+        simple_namespace_part-1.0.0.dist-info/
+        simple_namespace_part-1.0.0.dist-info/METADATA
+        simple_namespace_part-1.0.0.dist-info/RECORD
+        simple_namespace_part-1.0.0.dist-info/WHEEL
+        ");
+    }
 }

crates/uv-build-backend/src/metadata.rs

@@ -7,7 +7,7 @@ use std::str::FromStr;
 
 use itertools::Itertools;
 use serde::Deserialize;
-use tracing::{debug, trace};
+use tracing::{debug, trace, warn};
 use version_ranges::Ranges;
 use walkdir::WalkDir;
 
@@ -54,10 +54,6 @@ pub enum ValidationError {
         "Entrypoint groups must consist of letters and numbers separated by dots, invalid group: `{0}`"
     )]
     InvalidGroup(String),
-    #[error(
-        "Entrypoint names must consist of letters, numbers, dots, underscores and dashes; invalid name: `{0}`"
-    )]
-    InvalidName(String),
     #[error("Use `project.scripts` instead of `project.entry-points.console_scripts`")]
     ReservedScripts,
     #[error("Use `project.gui-scripts` instead of `project.entry-points.gui_scripts`")]
@@ -171,7 +167,7 @@ impl PyProjectToml {
     ///
     /// ```toml
     /// [build-system]
-    /// requires = ["uv_build>=0.4.15,<5"]
+    /// requires = ["uv_build>=0.4.15,<0.5.0"]
     /// build-backend = "uv_build"
     /// ```
     pub fn check_build_system(&self, uv_version: &str) -> Vec<String> {
@@ -620,12 +616,14 @@ impl PyProjectToml {
 
         let _ = writeln!(writer, "[{group}]");
         for (name, object_reference) in entries {
-            // More strict than the spec, we enforce the recommendation
             if !name
                 .chars()
                 .all(|c| c.is_alphanumeric() || c == '.' || c == '-' || c == '_')
             {
-                return Err(ValidationError::InvalidName(name.to_string()));
+                warn!(
+                    "Entrypoint names should consist of letters, numbers, dots, underscores and \
+                    dashes; non-compliant name: `{name}`"
+                );
             }
 
             // TODO(konsti): Validate that the object references are valid Python identifiers.
@@ -703,7 +701,7 @@ struct Project {
 /// The optional `project.readme` key in a pyproject.toml as specified in
 /// <https://packaging.python.org/en/latest/specifications/pyproject-toml/#readme>.
 #[derive(Deserialize, Debug, Clone)]
-#[serde(untagged, rename_all = "kebab-case")]
+#[serde(untagged, rename_all_fields = "kebab-case")]
 pub(crate) enum Readme {
     /// Relative path to the README.
     String(PathBuf),
@@ -713,7 +711,7 @@ pub(crate) enum Readme {
         content_type: String,
         charset: Option<String>,
     },
-    /// The full description of the project as inline value.
+    /// The full description of the project as an inline value.
     Text {
         text: String,
         content_type: String,
@@ -826,7 +824,7 @@ mod tests {
             {payload}
 
             [build-system]
-            requires = ["uv_build>=0.4.15,<5"]
+            requires = ["uv_build>=0.4.15,<0.5.0"]
             build-backend = "uv_build"
         "#
         }
@@ -909,7 +907,7 @@ mod tests {
             foo-bar = "foo:bar"
 
             [build-system]
-            requires = ["uv_build>=0.4.15,<5"]
+            requires = ["uv_build>=0.4.15,<0.5.0"]
             build-backend = "uv_build"
         "#
         };
@@ -965,6 +963,65 @@ mod tests {
         "###);
     }
 
+    #[test]
+    fn readme() {
+        let temp_dir = TempDir::new().unwrap();
+
+        fs_err::write(
+            temp_dir.path().join("Readme.md"),
+            indoc! {r"
+            # Foo
+
+            This is the foo library.
+        "},
+        )
+        .unwrap();
+
+        fs_err::write(
+            temp_dir.path().join("License.txt"),
+            indoc! {r#"
+                THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+                INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+                PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+                HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
+                CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE
+                OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+        "#},
+        )
+        .unwrap();
+
+        let contents = indoc! {r#"
+            # See https://github.com/pypa/sampleproject/blob/main/pyproject.toml for another example
+
+            [project]
+            name = "hello-world"
+            version = "0.1.0"
+            description = "A Python package"
+            readme = { file = "Readme.md", content-type = "text/markdown" }
+            requires_python = ">=3.12"
+
+            [build-system]
+            requires = ["uv_build>=0.4.15,<0.5"]
+            build-backend = "uv_build"
+        "#
+        };
+
+        let pyproject_toml = PyProjectToml::parse(contents).unwrap();
+        let metadata = pyproject_toml.to_metadata(temp_dir.path()).unwrap();
+
+        assert_snapshot!(metadata.core_metadata_format(), @r"
+        Metadata-Version: 2.3
+        Name: hello-world
+        Version: 0.1.0
+        Summary: A Python package
+        Description-Content-Type: text/markdown
+
+        # Foo
+
+        This is the foo library.
+        ");
+    }
+
     #[test]
     fn self_extras() {
         let temp_dir = TempDir::new().unwrap();
@@ -1036,7 +1093,7 @@ mod tests {
             foo-bar = "foo:bar"
 
             [build-system]
-            requires = ["uv_build>=0.4.15,<5"]
+            requires = ["uv_build>=0.4.15,<0.5.0"]
             build-backend = "uv_build"
         "#
         };
@@ -1104,7 +1161,7 @@ mod tests {
         let contents = extend_project("");
         let pyproject_toml = PyProjectToml::parse(&contents).unwrap();
         assert_snapshot!(
-            pyproject_toml.check_build_system("1.0.0+test").join("\n"),
+            pyproject_toml.check_build_system("0.4.15+test").join("\n"),
             @""
         );
     }
@@ -1135,7 +1192,7 @@ mod tests {
             version = "0.1.0"
 
             [build-system]
-            requires = ["uv_build>=0.4.15,<5", "wheel"]
+            requires = ["uv_build>=0.4.15,<0.5.0", "wheel"]
             build-backend = "uv_build"
         "#};
         let pyproject_toml = PyProjectToml::parse(contents).unwrap();
@@ -1171,7 +1228,7 @@ mod tests {
             version = "0.1.0"
 
             [build-system]
-            requires = ["uv_build>=0.4.15,<5"]
+            requires = ["uv_build>=0.4.15,<0.5.0"]
             build-backend = "setuptools"
         "#};
         let pyproject_toml = PyProjectToml::parse(contents).unwrap();
@@ -1344,16 +1401,6 @@ mod tests {
         assert_snapshot!(script_error(&contents), @"Entrypoint groups must consist of letters and numbers separated by dots, invalid group: `a@b`");
     }
 
-    #[test]
-    fn invalid_entry_point_name() {
-        let contents = extend_project(indoc! {r#"
-            [project.scripts]
-            "a@b" = "bar"
-        "#
-        });
-        assert_snapshot!(script_error(&contents), @"Entrypoint names must consist of letters, numbers, dots, underscores and dashes; invalid name: `a@b`");
-    }
-
     #[test]
     fn invalid_entry_point_conflict_scripts() {
         let contents = extend_project(indoc! {r#"

crates/uv-build-backend/src/settings.rs

@@ -34,15 +34,19 @@ pub struct BuildBackendSettings {
     /// For namespace packages with a single module, the path can be dotted, e.g., `foo.bar` or
     /// `foo-stubs.bar`.
     ///
+    /// For namespace packages with multiple modules, the path can be a list, e.g.,
+    /// `["foo", "bar"]`. We recommend using a single module per package, splitting multiple
+    /// packages into a workspace.
+    ///
     /// Note that using this option runs the risk of creating two packages with different names but
     /// the same module names. Installing such packages together leads to unspecified behavior,
     /// often with corrupted files or directory trees.
     #[option(
         default = r#"None"#,
-        value_type = "str",
+        value_type = "str | list[str]",
         example = r#"module-name = "sklearn""#
     )]
-    pub module_name: Option<String>,
+    pub module_name: Option<ModuleName>,
 
     /// Glob expressions which files and directories to additionally include in the source
     /// distribution.
@@ -151,7 +155,7 @@ pub struct BuildBackendSettings {
     ///   with this package as build requirement use the include directory to find additional header
     ///   files.
     /// - `purelib` and `platlib`: Installed to the `site-packages` directory. It is not recommended
-    ///   to uses these two options.
+    ///   to use these two options.
     // TODO(konsti): We should show a flat example instead.
     // ```toml
     // [tool.uv.build-backend.data]
@@ -161,7 +165,7 @@ pub struct BuildBackendSettings {
     #[option(
         default = r#"{}"#,
         value_type = "dict[str, str]",
-        example = r#"data = { "headers": "include/headers", "scripts": "bin" }"#
+        example = r#"data = { headers = "include/headers", scripts = "bin" }"#
     )]
     pub data: WheelDataIncludes,
 }
@@ -181,6 +185,17 @@ impl Default for BuildBackendSettings {
     }
 }
 
+/// Whether to include a single module or multiple modules.
+#[derive(Deserialize, Serialize, Debug, Clone, PartialEq, Eq)]
+#[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
+#[serde(untagged)]
+pub enum ModuleName {
+    /// A single module name.
+    Name(String),
+    /// Multiple module names, which are all included.
+    Names(Vec<String>),
+}
+
 /// Data includes for wheels.
 ///
 /// See `BuildBackendSettings::data`.

crates/uv-build-backend/src/source_dist.rs

@@ -68,22 +68,24 @@ fn source_dist_matcher(
     includes.push(globset::escape("pyproject.toml"));
 
     // Check that the source tree contains a module.
-    let (src_root, module_relative) = find_roots(
+    let (src_root, modules_relative) = find_roots(
         source_tree,
         pyproject_toml,
         &settings.module_root,
-        settings.module_name.as_deref(),
+        settings.module_name.as_ref(),
         settings.namespace,
     )?;
-    // The wheel must not include any files included by the source distribution (at least until we
+    for module_relative in modules_relative {
-    // have files generated in the source dist -> wheel build step).
+        // The wheel must not include any files included by the source distribution (at least until we
-    let import_path = uv_fs::normalize_path(
+        // have files generated in the source dist -> wheel build step).
-        &uv_fs::relative_to(src_root.join(module_relative), source_tree)
+        let import_path = uv_fs::normalize_path(
-            .expect("module root is inside source tree"),
+            &uv_fs::relative_to(src_root.join(module_relative), source_tree)
-    )
+                .expect("module root is inside source tree"),
-    .portable_display()
+        )
-    .to_string();
+        .portable_display()
-    includes.push(format!("{}/**", globset::escape(&import_path)));
+        .to_string();
+        includes.push(format!("{}/**", globset::escape(&import_path)));
+    }
     for include in includes {
         let glob = PortableGlobParser::Uv
             .parse(&include)

crates/uv-build-backend/src/wheel.rs

@@ -1,6 +1,7 @@
 use fs_err::File;
 use globset::{GlobSet, GlobSetBuilder};
 use itertools::Itertools;
+use rustc_hash::FxHashSet;
 use sha2::{Digest, Sha256};
 use std::io::{BufReader, Read, Write};
 use std::path::{Path, PathBuf};
@@ -127,55 +128,61 @@ fn write_wheel(
         source_tree,
         pyproject_toml,
         &settings.module_root,
-        settings.module_name.as_deref(),
+        settings.module_name.as_ref(),
         settings.namespace,
     )?;
 
-    // For convenience, have directories for the whole tree in the wheel
-    for ancestor in module_relative.ancestors().skip(1) {
-        if ancestor == Path::new("") {
-            continue;
-        }
-        wheel_writer.write_directory(&ancestor.portable_display().to_string())?;
-    }
-
     let mut files_visited = 0;
-    for entry in WalkDir::new(src_root.join(module_relative))
+    let mut prefix_directories = FxHashSet::default();
-        .sort_by_file_name()
+    for module_relative in module_relative {
-        .into_iter()
+        // For convenience, have directories for the whole tree in the wheel
-        .filter_entry(|entry| !exclude_matcher.is_match(entry.path()))
+        for ancestor in module_relative.ancestors().skip(1) {
-    {
+            if ancestor == Path::new("") {
-        let entry = entry.map_err(|err| Error::WalkDir {
+                continue;
-            root: source_tree.to_path_buf(),
+            }
-            err,
+            // Avoid duplicate directories in the zip.
-        })?;
+            if prefix_directories.insert(ancestor.to_path_buf()) {
+                wheel_writer.write_directory(&ancestor.portable_display().to_string())?;
+            }
+        }
 
-        files_visited += 1;
+        for entry in WalkDir::new(src_root.join(module_relative))
-        if files_visited > 10000 {
+            .sort_by_file_name()
-            warn_user_once!(
+            .into_iter()
-                "Visited more than 10,000 files for wheel build. \
+            .filter_entry(|entry| !exclude_matcher.is_match(entry.path()))
+        {
+            let entry = entry.map_err(|err| Error::WalkDir {
+                root: source_tree.to_path_buf(),
+                err,
+            })?;
+
+            files_visited += 1;
+            if files_visited > 10000 {
+                warn_user_once!(
+                    "Visited more than 10,000 files for wheel build. \
                 Consider using more constrained includes or more excludes."
-            );
+                );
-        }
+            }
 
-        // We only want to take the module root, but since excludes start at the source tree root,
+            // We only want to take the module root, but since excludes start at the source tree root,
-        // we strip higher than we iterate.
+            // we strip higher than we iterate.
-        let match_path = entry
+            let match_path = entry
-            .path()
+                .path()
-            .strip_prefix(source_tree)
+                .strip_prefix(source_tree)
-            .expect("walkdir starts with root");
+                .expect("walkdir starts with root");
-        let entry_path = entry
+            let entry_path = entry
-            .path()
+                .path()
-            .strip_prefix(&src_root)
+                .strip_prefix(&src_root)
-            .expect("walkdir starts with root");
+                .expect("walkdir starts with root");
-        if exclude_matcher.is_match(match_path) {
+            if exclude_matcher.is_match(match_path) {
-            trace!("Excluding from module: `{}`", match_path.user_display());
+                trace!("Excluding from module: `{}`", match_path.user_display());
-            continue;
+                continue;
-        }
+            }
 
-        let entry_path = entry_path.portable_display().to_string();
+            let entry_path = entry_path.portable_display().to_string();
-        debug!("Adding to wheel: {entry_path}");
+            debug!("Adding to wheel: {entry_path}");
-        wheel_writer.write_dir_entry(&entry, &entry_path)?;
+            wheel_writer.write_dir_entry(&entry, &entry_path)?;
+        }
     }
     debug!("Visited {files_visited} files for wheel build");
 
@@ -269,7 +276,7 @@ pub fn build_editable(
         source_tree,
         &pyproject_toml,
         &settings.module_root,
-        settings.module_name.as_deref(),
+        settings.module_name.as_ref(),
         settings.namespace,
     )?;
 
@@ -614,8 +621,8 @@ impl ZipDirectoryWriter {
         path: &str,
         executable_bit: bool,
     ) -> Result<Box<dyn Write + 'slf>, Error> {
-        // 644 is the default of the zip crate.
+        // Set file permissions: 644 (rw-r--r--) for regular files, 755 (rwxr-xr-x) for executables
-        let permissions = if executable_bit { 775 } else { 664 };
+        let permissions = if executable_bit { 0o755 } else { 0o644 };
         let options = zip::write::SimpleFileOptions::default()
             .unix_permissions(permissions)
             .compression_method(self.compression);
@@ -627,7 +634,10 @@ impl ZipDirectoryWriter {
 impl DirectoryWriter for ZipDirectoryWriter {
     fn write_bytes(&mut self, path: &str, bytes: &[u8]) -> Result<(), Error> {
         trace!("Adding {}", path);
-        let options = zip::write::SimpleFileOptions::default().compression_method(self.compression);
+        // Set appropriate permissions for metadata files (644 = rw-r--r--)
+        let options = zip::write::SimpleFileOptions::default()
+            .unix_permissions(0o644)
+            .compression_method(self.compression);
         self.writer.start_file(path, options)?;
         self.writer.write_all(bytes)?;
 

crates/uv-build-frontend/Cargo.toml

@@ -48,4 +48,4 @@ tracing = { workspace = true }
 rustc-hash = { workspace = true }
 
 [dev-dependencies]
-insta = { version = "1.40.0" }
+insta = { workspace = true }

crates/uv-build-frontend/src/lib.rs

@@ -4,6 +4,7 @@
 
 mod error;
 
+use std::borrow::Cow;
 use std::ffi::OsString;
 use std::fmt::Formatter;
 use std::fmt::Write;
@@ -19,8 +20,8 @@ use fs_err as fs;
 use indoc::formatdoc;
 use itertools::Itertools;
 use rustc_hash::FxHashMap;
-use serde::de::{IntoDeserializer, SeqAccess, Visitor, value};
+use serde::de::{self, IntoDeserializer, SeqAccess, Visitor, value};
-use serde::{Deserialize, Deserializer, de};
+use serde::{Deserialize, Deserializer};
 use tempfile::TempDir;
 use tokio::io::AsyncBufReadExt;
 use tokio::process::Command;
@@ -28,7 +29,7 @@ use tokio::sync::{Mutex, Semaphore};
 use tracing::{Instrument, debug, info_span, instrument, warn};
 
 use uv_cache_key::cache_digest;
-use uv_configuration::PreviewMode;
+use uv_configuration::Preview;
 use uv_configuration::{BuildKind, BuildOutput, ConfigSettings, SourceStrategy};
 use uv_distribution::BuildRequires;
 use uv_distribution_types::{IndexLocations, Requirement, Resolution};
@@ -42,6 +43,7 @@ use uv_static::EnvVars;
 use uv_types::{AnyErrorBuild, BuildContext, BuildIsolation, BuildStack, SourceBuildTrait};
 use uv_warnings::warn_user_once;
 use uv_workspace::WorkspaceCache;
+use uv_workspace::pyproject::ExtraBuildDependencies;
 
 pub use crate::error::{Error, MissingHeaderCause};
 
@@ -281,12 +283,13 @@ impl SourceBuild {
         workspace_cache: &WorkspaceCache,
         config_settings: ConfigSettings,
         build_isolation: BuildIsolation<'_>,
+        extra_build_dependencies: &ExtraBuildDependencies,
         build_stack: &BuildStack,
         build_kind: BuildKind,
         mut environment_variables: FxHashMap<OsString, OsString>,
         level: BuildOutput,
         concurrent_builds: usize,
-        preview: PreviewMode,
+        preview: Preview,
     ) -> Result<Self, Error> {
         let temp_dir = build_context.cache().venv_dir()?;
 
@@ -297,7 +300,6 @@ impl SourceBuild {
         };
 
         let default_backend: Pep517Backend = DEFAULT_BACKEND.clone();
-
         // Check if we have a PEP 517 build backend.
         let (pep517_backend, project) = Self::extract_pep517_backend(
             &source_tree,
@@ -322,6 +324,14 @@ impl SourceBuild {
             .or(fallback_package_version)
             .cloned();
 
+        let extra_build_dependencies: Vec<Requirement> = package_name
+            .as_ref()
+            .and_then(|name| extra_build_dependencies.get(name).cloned())
+            .unwrap_or_default()
+            .into_iter()
+            .map(Requirement::from)
+            .collect();
+
         // Create a virtual environment, or install into the shared environment if requested.
         let venv = if let Some(venv) = build_isolation.shared_environment(package_name.as_ref()) {
             venv.clone()
@@ -331,7 +341,7 @@ impl SourceBuild {
                 interpreter.clone(),
                 uv_virtualenv::Prompt::None,
                 false,
-                false,
+                uv_virtualenv::OnExisting::Remove,
                 false,
                 false,
                 false,
@@ -344,11 +354,18 @@ impl SourceBuild {
         if build_isolation.is_isolated(package_name.as_ref()) {
             debug!("Resolving build requirements");
 
+            let dependency_sources = if extra_build_dependencies.is_empty() {
+                "`build-system.requires`"
+            } else {
+                "`build-system.requires` and `extra-build-dependencies`"
+            };
+
             let resolved_requirements = Self::get_resolved_requirements(
                 build_context,
                 source_build_context,
                 &default_backend,
                 &pep517_backend,
+                extra_build_dependencies,
                 build_stack,
             )
             .await?;
@@ -356,7 +373,7 @@ impl SourceBuild {
             build_context
                 .install(&resolved_requirements, &venv, build_stack)
                 .await
-                .map_err(|err| Error::RequirementsInstall("`build-system.requires`", err.into()))?;
+                .map_err(|err| Error::RequirementsInstall(dependency_sources, err.into()))?;
         } else {
             debug!("Proceeding without build isolation");
         }
@@ -471,10 +488,13 @@ impl SourceBuild {
         source_build_context: SourceBuildContext,
         default_backend: &Pep517Backend,
         pep517_backend: &Pep517Backend,
+        extra_build_dependencies: Vec<Requirement>,
         build_stack: &BuildStack,
     ) -> Result<Resolution, Error> {
         Ok(
-            if pep517_backend.requirements == default_backend.requirements {
+            if pep517_backend.requirements == default_backend.requirements
+                && extra_build_dependencies.is_empty()
+            {
                 let mut resolution = source_build_context.default_resolution.lock().await;
                 if let Some(resolved_requirements) = &*resolution {
                     resolved_requirements.clone()
@@ -489,12 +509,25 @@ impl SourceBuild {
                     resolved_requirements
                 }
             } else {
+                let (requirements, dependency_sources) = if extra_build_dependencies.is_empty() {
+                    (
+                        Cow::Borrowed(&pep517_backend.requirements),
+                        "`build-system.requires`",
+                    )
+                } else {
+                    // If there are extra build dependencies, we need to resolve them together with
+                    // the backend requirements.
+                    let mut requirements = pep517_backend.requirements.clone();
+                    requirements.extend(extra_build_dependencies);
+                    (
+                        Cow::Owned(requirements),
+                        "`build-system.requires` and `extra-build-dependencies`",
+                    )
+                };
                 build_context
-                    .resolve(&pep517_backend.requirements, build_stack)
+                    .resolve(&requirements, build_stack)
                     .await
-                    .map_err(|err| {
+                    .map_err(|err| Error::RequirementsResolve(dependency_sources, err.into()))?
-                        Error::RequirementsResolve("`build-system.requires`", err.into())
-                    })?
             },
         )
     }
@@ -511,12 +544,10 @@ impl SourceBuild {
     ) -> Result<(Pep517Backend, Option<Project>), Box<Error>> {
         match fs::read_to_string(source_tree.join("pyproject.toml")) {
             Ok(toml) => {
-                let pyproject_toml: toml_edit::ImDocument<_> =
+                let pyproject_toml = toml_edit::Document::from_str(&toml)
-                    toml_edit::ImDocument::from_str(&toml)
+                    .map_err(Error::InvalidPyprojectTomlSyntax)?;
-                        .map_err(Error::InvalidPyprojectTomlSyntax)?;
+                let pyproject_toml = PyProjectToml::deserialize(pyproject_toml.into_deserializer())
-                let pyproject_toml: PyProjectToml =
+                    .map_err(Error::InvalidPyprojectTomlSchema)?;
-                    PyProjectToml::deserialize(pyproject_toml.into_deserializer())
-                        .map_err(Error::InvalidPyprojectTomlSchema)?;
 
                 let backend = if let Some(build_system) = pyproject_toml.build_system {
                     // If necessary, lower the requirements.
@@ -606,6 +637,7 @@ impl SourceBuild {
                             );
                         }
                     }
+
                     default_backend.clone()
                 };
                 Ok((backend, pyproject_toml.project))

crates/uv-build/Cargo.toml

@@ -1,13 +1,13 @@
 [package]
 name = "uv-build"
-version = "0.7.19"
+version = "0.8.4"
-edition.workspace = true
+edition = { workspace = true }
-rust-version.workspace = true
+rust-version = { workspace = true }
-homepage.workspace = true
+homepage = { workspace = true }
-documentation.workspace = true
+documentation = { workspace = true }
-repository.workspace = true
+repository = { workspace = true }
-authors.workspace = true
+authors = { workspace = true }
-license.workspace = true
+license = { workspace = true }
 
 [dependencies]
 uv-build-backend = { workspace = true }

crates/uv-build/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "uv-build"
-version = "0.7.19"
+version = "0.8.4"
 description = "The uv build backend"
 authors = [{ name = "Astral Software Inc.", email = "hey@astral.sh" }]
 requires-python = ">=3.8"

crates/uv-cache-info/Cargo.toml

@@ -24,3 +24,7 @@ thiserror = { workspace = true }
 toml = { workspace = true }
 tracing = { workspace = true }
 walkdir = { workspace = true }
+
+[dev-dependencies]
+anyhow = { workspace = true }
+tempfile = { workspace = true }

crates/uv-cache-info/src/cache_info.rs

@@ -7,6 +7,7 @@ use serde::Deserialize;
 use tracing::{debug, warn};
 
 use crate::git_info::{Commit, Tags};
+use crate::glob::cluster_globs;
 use crate::timestamp::Timestamp;
 
 #[derive(Debug, thiserror::Error)]
@@ -212,34 +213,53 @@ impl CacheInfo {
             }
         }
 
-        // If we have any globs, process them in a single pass.
+        // If we have any globs, first cluster them using LCP and then do a single pass on each group.
         if !globs.is_empty() {
-            let walker = globwalk::GlobWalkerBuilder::from_patterns(directory, &globs)
+            for (glob_base, glob_patterns) in cluster_globs(&globs) {
+                let walker = globwalk::GlobWalkerBuilder::from_patterns(
+                    directory.join(glob_base),
+                    &glob_patterns,
+                )
                 .file_type(globwalk::FileType::FILE | globwalk::FileType::SYMLINK)
                 .build()?;
-            for entry in walker {
+                for entry in walker {
-                let entry = match entry {
+                    let entry = match entry {
-                    Ok(entry) => entry,
+                        Ok(entry) => entry,
-                    Err(err) => {
+                        Err(err) => {
-                        warn!("Failed to read glob entry: {err}");
+                            warn!("Failed to read glob entry: {err}");
+                            continue;
+                        }
+                    };
+                    let metadata = if entry.path_is_symlink() {
+                        // resolve symlinks for leaf entries without following symlinks while globbing
+                        match fs_err::metadata(entry.path()) {
+                            Ok(metadata) => metadata,
+                            Err(err) => {
+                                warn!("Failed to resolve symlink for glob entry: {err}");
+                                continue;
+                            }
+                        }
+                    } else {
+                        match entry.metadata() {
+                            Ok(metadata) => metadata,
+                            Err(err) => {
+                                warn!("Failed to read metadata for glob entry: {err}");
+                                continue;
+                            }
+                        }
+                    };
+                    if !metadata.is_file() {
+                        if !entry.path_is_symlink() {
+                            // don't warn if it was a symlink - it may legitimately resolve to a directory
+                            warn!(
+                                "Expected file for cache key, but found directory: `{}`",
+                                entry.path().display()
+                            );
+                        }
                         continue;
                     }
-                };
+                    timestamp = max(timestamp, Some(Timestamp::from_metadata(&metadata)));
-                let metadata = match entry.metadata() {
-                    Ok(metadata) => metadata,
-                    Err(err) => {
-                        warn!("Failed to read metadata for glob entry: {err}");
-                        continue;
-                    }
-                };
-                if !metadata.is_file() {
-                    warn!(
-                        "Expected file for cache key, but found directory: `{}`",
-                        entry.path().display()
-                    );
-                    continue;
                 }
-                timestamp = max(timestamp, Some(Timestamp::from_metadata(&metadata)));
             }
         }
 
@@ -340,3 +360,71 @@ enum DirectoryTimestamp {
     Timestamp(Timestamp),
     Inode(u64),
 }
+
+#[cfg(all(test, unix))]
+mod tests_unix {
+    use anyhow::Result;
+
+    use super::{CacheInfo, Timestamp};
+
+    #[test]
+    fn test_cache_info_symlink_resolve() -> Result<()> {
+        let dir = tempfile::tempdir()?;
+        let dir = dir.path().join("dir");
+        fs_err::create_dir_all(&dir)?;
+
+        let write_manifest = |cache_key: &str| {
+            fs_err::write(
+                dir.join("pyproject.toml"),
+                format!(
+                    r#"
+                [tool.uv]
+                cache-keys = [
+                    "{cache_key}"
+                ]
+                "#
+                ),
+            )
+        };
+
+        let touch = |path: &str| -> Result<_> {
+            let path = dir.join(path);
+            fs_err::create_dir_all(path.parent().unwrap())?;
+            fs_err::write(&path, "")?;
+            Ok(Timestamp::from_metadata(&path.metadata()?))
+        };
+
+        let cache_timestamp = || -> Result<_> { Ok(CacheInfo::from_directory(&dir)?.timestamp) };
+
+        write_manifest("x/**")?;
+        assert_eq!(cache_timestamp()?, None);
+        let y = touch("x/y")?;
+        assert_eq!(cache_timestamp()?, Some(y));
+        let z = touch("x/z")?;
+        assert_eq!(cache_timestamp()?, Some(z));
+
+        // leaf entry symlink should be resolved
+        let a = touch("../a")?;
+        fs_err::os::unix::fs::symlink(dir.join("../a"), dir.join("x/a"))?;
+        assert_eq!(cache_timestamp()?, Some(a));
+
+        // symlink directories should not be followed while globbing
+        let c = touch("../b/c")?;
+        fs_err::os::unix::fs::symlink(dir.join("../b"), dir.join("x/b"))?;
+        assert_eq!(cache_timestamp()?, Some(a));
+
+        // no globs, should work as expected
+        write_manifest("x/y")?;
+        assert_eq!(cache_timestamp()?, Some(y));
+        write_manifest("x/a")?;
+        assert_eq!(cache_timestamp()?, Some(a));
+        write_manifest("x/b/c")?;
+        assert_eq!(cache_timestamp()?, Some(c));
+
+        // symlink pointing to a directory
+        write_manifest("x/*b*")?;
+        assert_eq!(cache_timestamp()?, None);
+
+        Ok(())
+    }
+}

crates/uv-cache-info/src/glob.rs

@@ -0,0 +1,318 @@
+use std::{
+    collections::BTreeMap,
+    path::{Component, Components, Path, PathBuf},
+};
+
+/// Check if a component of the path looks like it may be a glob pattern.
+///
+/// Note: this function is being used when splitting a glob pattern into a long possible
+/// base and the glob remainder (scanning through components until we hit the first component
+/// for which this function returns true). It is acceptable for this function to return
+/// false positives (e.g. patterns like 'foo[bar' or 'foo{bar') in which case correctness
+/// will not be affected but efficiency might be (because we'll traverse more than we should),
+/// however it should not return false negatives.
+fn is_glob_like(part: Component) -> bool {
+    matches!(part, Component::Normal(_))
+        && part.as_os_str().to_str().is_some_and(|part| {
+            ["*", "{", "}", "?", "[", "]"]
+                .into_iter()
+                .any(|c| part.contains(c))
+        })
+}
+
+#[derive(Debug, Default, Clone, PartialEq, Eq)]
+struct GlobParts {
+    base: PathBuf,
+    pattern: PathBuf,
+}
+
+/// Split a glob into longest possible base + shortest possible glob pattern.
+fn split_glob(pattern: impl AsRef<str>) -> GlobParts {
+    let pattern: &Path = pattern.as_ref().as_ref();
+
+    let mut glob = GlobParts::default();
+    let mut globbing = false;
+    let mut last = None;
+
+    for part in pattern.components() {
+        if let Some(last) = last {
+            if last != Component::CurDir {
+                if globbing {
+                    glob.pattern.push(last);
+                } else {
+                    glob.base.push(last);
+                }
+            }
+        }
+        if !globbing {
+            globbing = is_glob_like(part);
+        }
+        // we don't know if this part is the last one, defer handling it by one iteration
+        last = Some(part);
+    }
+
+    if let Some(last) = last {
+        // defer handling the last component to prevent draining entire pattern into base
+        if globbing || matches!(last, Component::Normal(_)) {
+            glob.pattern.push(last);
+        } else {
+            glob.base.push(last);
+        }
+    }
+    glob
+}
+
+/// Classic trie with edges being path components and values being glob patterns.
+#[derive(Default)]
+struct Trie<'a> {
+    children: BTreeMap<Component<'a>, Trie<'a>>,
+    patterns: Vec<&'a Path>,
+}
+
+impl<'a> Trie<'a> {
+    fn insert(&mut self, mut components: Components<'a>, pattern: &'a Path) {
+        if let Some(part) = components.next() {
+            self.children
+                .entry(part)
+                .or_default()
+                .insert(components, pattern);
+        } else {
+            self.patterns.push(pattern);
+        }
+    }
+
+    #[allow(clippy::needless_pass_by_value)]
+    fn collect_patterns(
+        &self,
+        pattern_prefix: PathBuf,
+        group_prefix: PathBuf,
+        patterns: &mut Vec<PathBuf>,
+        groups: &mut Vec<(PathBuf, Vec<PathBuf>)>,
+    ) {
+        // collect all patterns beneath and including this node
+        for pattern in &self.patterns {
+            patterns.push(pattern_prefix.join(pattern));
+        }
+        for (part, child) in &self.children {
+            if let Component::Normal(_) = part {
+                // for normal components, collect all descendant patterns ('normal' edges only)
+                child.collect_patterns(
+                    pattern_prefix.join(part),
+                    group_prefix.join(part),
+                    patterns,
+                    groups,
+                );
+            } else {
+                // for non-normal component edges, kick off separate group collection at this node
+                child.collect_groups(group_prefix.join(part), groups);
+            }
+        }
+    }
+
+    #[allow(clippy::needless_pass_by_value)]
+    fn collect_groups(&self, prefix: PathBuf, groups: &mut Vec<(PathBuf, Vec<PathBuf>)>) {
+        // LCP-style grouping of patterns
+        if self.patterns.is_empty() {
+            // no patterns in this node; child nodes can form independent groups
+            for (part, child) in &self.children {
+                child.collect_groups(prefix.join(part), groups);
+            }
+        } else {
+            // pivot point, we've hit a pattern node; we have to stop here and form a group
+            let mut group = Vec::new();
+            self.collect_patterns(PathBuf::new(), prefix.clone(), &mut group, groups);
+            groups.push((prefix, group));
+        }
+    }
+}
+
+/// Given a collection of globs, cluster them into (base, globs) groups so that:
+/// - base doesn't contain any glob symbols
+/// - each directory would only be walked at most once
+/// - base of each group is the longest common prefix of globs in the group
+pub(crate) fn cluster_globs(patterns: &[impl AsRef<str>]) -> Vec<(PathBuf, Vec<String>)> {
+    // split all globs into base/pattern
+    let globs: Vec<_> = patterns.iter().map(split_glob).collect();
+
+    // construct a path trie out of all split globs
+    let mut trie = Trie::default();
+    for glob in &globs {
+        trie.insert(glob.base.components(), &glob.pattern);
+    }
+
+    // run LCP-style aggregation of patterns in the trie into groups
+    let mut groups = Vec::new();
+    trie.collect_groups(PathBuf::new(), &mut groups);
+
+    // finally, convert resulting patterns to strings
+    groups
+        .into_iter()
+        .map(|(base, patterns)| {
+            (
+                base,
+                patterns
+                    .iter()
+                    // NOTE: this unwrap is ok because input patterns are valid utf-8
+                    .map(|p| p.to_str().unwrap().to_owned())
+                    .collect(),
+            )
+        })
+        .collect()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{GlobParts, cluster_globs, split_glob};
+
+    fn windowsify(path: &str) -> String {
+        if cfg!(windows) {
+            path.replace('/', "\\")
+        } else {
+            path.to_owned()
+        }
+    }
+
+    #[test]
+    fn test_split_glob() {
+        #[track_caller]
+        fn check(input: &str, base: &str, pattern: &str) {
+            let result = split_glob(input);
+            let expected = GlobParts {
+                base: base.into(),
+                pattern: pattern.into(),
+            };
+            assert_eq!(result, expected, "{input:?} != {base:?} + {pattern:?}");
+        }
+
+        check("", "", "");
+        check("a", "", "a");
+        check("a/b", "a", "b");
+        check("a/b/", "a", "b");
+        check("a/.//b/", "a", "b");
+        check("./a/b/c", "a/b", "c");
+        check("c/d/*", "c/d", "*");
+        check("c/d/*/../*", "c/d", "*/../*");
+        check("a/?b/c", "a", "?b/c");
+        check("/a/b/*", "/a/b", "*");
+        check("../x/*", "../x", "*");
+        check("a/{b,c}/d", "a", "{b,c}/d");
+        check("a/[bc]/d", "a", "[bc]/d");
+        check("*", "", "*");
+        check("*/*", "", "*/*");
+        check("..", "..", "");
+        check("/", "/", "");
+    }
+
+    #[test]
+    fn test_cluster_globs() {
+        #[track_caller]
+        fn check(input: &[&str], expected: &[(&str, &[&str])]) {
+            let input = input.iter().map(|s| windowsify(s)).collect::<Vec<_>>();
+
+            let mut result_sorted = cluster_globs(&input);
+            for (_, patterns) in &mut result_sorted {
+                patterns.sort_unstable();
+            }
+            result_sorted.sort_unstable();
+
+            let mut expected_sorted = Vec::new();
+            for (base, patterns) in expected {
+                let mut patterns_sorted = Vec::new();
+                for pattern in *patterns {
+                    patterns_sorted.push(windowsify(pattern));
+                }
+                patterns_sorted.sort_unstable();
+                expected_sorted.push((windowsify(base).into(), patterns_sorted));
+            }
+            expected_sorted.sort_unstable();
+
+            assert_eq!(
+                result_sorted, expected_sorted,
+                "{input:?} != {expected_sorted:?} (got: {result_sorted:?})"
+            );
+        }
+
+        check(&["a/b/*", "a/c/*"], &[("a/b", &["*"]), ("a/c", &["*"])]);
+        check(&["./a/b/*", "a/c/*"], &[("a/b", &["*"]), ("a/c", &["*"])]);
+        check(&["/a/b/*", "/a/c/*"], &[("/a/b", &["*"]), ("/a/c", &["*"])]);
+        check(
+            &["../a/b/*", "../a/c/*"],
+            &[("../a/b", &["*"]), ("../a/c", &["*"])],
+        );
+        check(&["x/*", "y/*"], &[("x", &["*"]), ("y", &["*"])]);
+        check(&[], &[]);
+        check(
+            &["./*", "a/*", "../foo/*.png"],
+            &[("", &["*", "a/*"]), ("../foo", &["*.png"])],
+        );
+        check(
+            &[
+                "?",
+                "/foo/?",
+                "/foo/bar/*",
+                "../bar/*.png",
+                "../bar/../baz/*.jpg",
+            ],
+            &[
+                ("", &["?"]),
+                ("/foo", &["?", "bar/*"]),
+                ("../bar", &["*.png"]),
+                ("../bar/../baz", &["*.jpg"]),
+            ],
+        );
+        check(&["/abs/path/*"], &[("/abs/path", &["*"])]);
+        check(&["/abs/*", "rel/*"], &[("/abs", &["*"]), ("rel", &["*"])]);
+        check(&["a/{b,c}/*", "a/d?/*"], &[("a", &["{b,c}/*", "d?/*"])]);
+        check(
+            &[
+                "../shared/a/[abc].png",
+                "../shared/a/b/*",
+                "../shared/b/c/?x/d",
+                "docs/important/*.{doc,xls}",
+                "docs/important/very/*",
+            ],
+            &[
+                ("../shared/a", &["[abc].png", "b/*"]),
+                ("../shared/b/c", &["?x/d"]),
+                ("docs/important", &["*.{doc,xls}", "very/*"]),
+            ],
+        );
+        check(&["file.txt"], &[("", &["file.txt"])]);
+        check(&["/"], &[("/", &[""])]);
+        check(&[".."], &[("..", &[""])]);
+        check(
+            &["file1.txt", "file2.txt"],
+            &[("", &["file1.txt", "file2.txt"])],
+        );
+        check(
+            &["a/file1.txt", "a/file2.txt"],
+            &[("a", &["file1.txt", "file2.txt"])],
+        );
+        check(
+            &["*", "a/b/*", "a/../c/*.jpg", "a/../c/*.png", "/a/*", "/b/*"],
+            &[
+                ("", &["*", "a/b/*"]),
+                ("a/../c", &["*.jpg", "*.png"]),
+                ("/a", &["*"]),
+                ("/b", &["*"]),
+            ],
+        );
+
+        if cfg!(windows) {
+            check(
+                &[
+                    r"\\foo\bar\shared/a/[abc].png",
+                    r"\\foo\bar\shared/a/b/*",
+                    r"\\foo\bar/shared/b/c/?x/d",
+                    r"D:\docs\important/*.{doc,xls}",
+                    r"D:\docs/important/very/*",
+                ],
+                &[
+                    (r"\\foo\bar\shared\a", &["[abc].png", r"b\*"]),
+                    (r"\\foo\bar\shared\b\c", &[r"?x\d"]),
+                    (r"D:\docs\important", &["*.{doc,xls}", r"very\*"]),
+                ],
+            );
+        }
+    }
+}

crates/uv-cache-info/src/lib.rs

@@ -3,4 +3,5 @@ pub use crate::timestamp::*;
 
 mod cache_info;
 mod git_info;
+mod glob;
 mod timestamp;

crates/uv-cache/src/lib.rs

@@ -985,6 +985,8 @@ pub enum CacheBucket {
     Builds,
     /// Reusable virtual environments used to invoke Python tools.
     Environments,
+    /// Cached Python downloads
+    Python,
 }
 
 impl CacheBucket {
@@ -1007,6 +1009,7 @@ impl CacheBucket {
             Self::Archive => "archive-v0",
             Self::Builds => "builds-v0",
             Self::Environments => "environments-v2",
+            Self::Python => "python-v0",
         }
     }
 
@@ -1108,7 +1111,12 @@ impl CacheBucket {
                 let root = cache.bucket(self);
                 summary += rm_rf(root)?;
             }
-            Self::Git | Self::Interpreter | Self::Archive | Self::Builds | Self::Environments => {
+            Self::Git
+            | Self::Interpreter
+            | Self::Archive
+            | Self::Builds
+            | Self::Environments
+            | Self::Python => {
                 // Nothing to do.
             }
         }

crates/uv-cli/Cargo.toml

@@ -42,7 +42,7 @@ serde = { workspace = true }
 url = { workspace = true }
 
 [dev-dependencies]
-insta = { version = "1.40.0", features = ["filters", "json"] }
+insta = { workspace = true }
 
 [features]
 default = []

crates/uv-cli/src/compat.rs

@@ -266,9 +266,6 @@ enum Resolver {
 /// These represent a subset of the `virtualenv` interface that uv supports by default.
 #[derive(Args)]
 pub struct VenvCompatArgs {
-    #[clap(long, hide = true)]
-    clear: bool,
-
     #[clap(long, hide = true)]
     no_seed: bool,
 
@@ -289,12 +286,6 @@ impl CompatArgs for VenvCompatArgs {
     /// behavior. If an argument is passed that does _not_ match uv's behavior, this method will
     /// return an error.
     fn validate(&self) -> Result<()> {
-        if self.clear {
-            warn_user!(
-                "virtualenv's `--clear` has no effect (uv always clears the virtual environment)"
-            );
-        }
-
         if self.no_seed {
             warn_user!(
                 "virtualenv's `--no-seed` has no effect (uv omits seed packages by default)"

crates/uv-cli/src/lib.rs

@@ -10,8 +10,9 @@ use clap::{Args, Parser, Subcommand};
 
 use uv_cache::CacheArgs;
 use uv_configuration::{
-    ConfigSettingEntry, ExportFormat, IndexStrategy, KeyringProviderType, PackageNameSpecifier,
+    ConfigSettingEntry, ConfigSettingPackageEntry, ExportFormat, IndexStrategy,
-    ProjectBuildBackend, TargetTriple, TrustedHost, TrustedPublishing, VersionControlSystem,
+    KeyringProviderType, PackageNameSpecifier, PreviewFeatures, ProjectBuildBackend, TargetTriple,
+    TrustedHost, TrustedPublishing, VersionControlSystem,
 };
 use uv_distribution_types::{Index, IndexUrl, Origin, PipExtraIndex, PipFindLinks, PipIndex};
 use uv_normalize::{ExtraName, GroupName, PackageName, PipGroupName};
@@ -19,7 +20,10 @@ use uv_pep508::{MarkerTree, Requirement};
 use uv_pypi_types::VerbatimParsedUrl;
 use uv_python::{PythonDownloads, PythonPreference, PythonVersion};
 use uv_redacted::DisplaySafeUrl;
-use uv_resolver::{AnnotationStyle, ExcludeNewer, ForkStrategy, PrereleaseMode, ResolutionMode};
+use uv_resolver::{
+    AnnotationStyle, ExcludeNewerPackageEntry, ExcludeNewerTimestamp, ForkStrategy, PrereleaseMode,
+    ResolutionMode,
+};
 use uv_static::EnvVars;
 use uv_torch::TorchMode;
 use uv_workspace::pyproject_mut::AddBoundsKind;
@@ -46,6 +50,15 @@ pub enum PythonListFormat {
     Json,
 }
 
+#[derive(Debug, Default, Clone, Copy, clap::ValueEnum)]
+pub enum SyncFormat {
+    /// Display the result in a human-readable format.
+    #[default]
+    Text,
+    /// Display the result in JSON format.
+    Json,
+}
+
 #[derive(Debug, Default, Clone, clap::ValueEnum)]
 pub enum ListFormat {
     /// Display the list of packages in a human-readable table.
@@ -263,7 +276,7 @@ pub struct GlobalArgs {
     )]
     pub allow_insecure_host: Option<Vec<Maybe<TrustedHost>>>,
 
-    /// Whether to enable experimental, preview features.
+    /// Whether to enable all experimental preview features.
     ///
     /// Preview features may change without warning.
     #[arg(global = true, long, hide = true, env = EnvVars::UV_PREVIEW, value_parser = clap::builder::BoolishValueParser::new(), overrides_with("no_preview"))]
@@ -272,6 +285,25 @@ pub struct GlobalArgs {
     #[arg(global = true, long, overrides_with("preview"), hide = true)]
     pub no_preview: bool,
 
+    /// Enable experimental preview features.
+    ///
+    /// Preview features may change without warning.
+    ///
+    /// Use comma-separated values or pass multiple times to enable multiple features.
+    ///
+    /// The following features are available: `python-install-default`, `python-upgrade`,
+    /// `json-output`, `pylock`, `add-bounds`.
+    #[arg(
+        global = true,
+        long = "preview-features",
+        env = EnvVars::UV_PREVIEW_FEATURES,
+        value_delimiter = ',',
+        hide = true,
+        alias = "preview-feature",
+        value_enum,
+    )]
+    pub preview_features: Vec<PreviewFeatures>,
+
     /// Avoid discovering a `pyproject.toml` or `uv.toml` file.
     ///
     /// Normally, configuration files are discovered in the current directory,
@@ -532,8 +564,10 @@ pub struct VersionArgs {
     pub value: Option<String>,
 
     /// Update the project version using the given semantics
+    ///
+    /// This flag can be passed multiple times.
     #[arg(group = "operation", long)]
-    pub bump: Option<VersionBump>,
+    pub bump: Vec<VersionBump>,
 
     /// Don't write a new version to the `pyproject.toml`
     ///
@@ -608,14 +642,56 @@ pub struct VersionArgs {
     pub python: Option<Maybe<String>>,
 }
 
-#[derive(Debug, Copy, Clone, PartialEq, clap::ValueEnum)]
+// Note that the ordering of the variants is significant, as when given a list of operations
+// to perform, we sort them and apply them in order, so users don't have to think too hard about it.
+#[derive(Debug, Copy, Clone, PartialEq, Eq, PartialOrd, Ord, clap::ValueEnum)]
 pub enum VersionBump {
-    /// Increase the major version (1.2.3 => 2.0.0)
+    /// Increase the major version (e.g., 1.2.3 => 2.0.0)
     Major,
-    /// Increase the minor version (1.2.3 => 1.3.0)
+    /// Increase the minor version (e.g., 1.2.3 => 1.3.0)
     Minor,
-    /// Increase the patch version (1.2.3 => 1.2.4)
+    /// Increase the patch version (e.g., 1.2.3 => 1.2.4)
     Patch,
+    /// Move from a pre-release to stable version (e.g., 1.2.3b4.post5.dev6 => 1.2.3)
+    ///
+    /// Removes all pre-release components, but will not remove "local" components.
+    Stable,
+    /// Increase the alpha version (e.g., 1.2.3a4 => 1.2.3a5)
+    ///
+    /// To move from a stable to a pre-release version, combine this with a stable component, e.g.,
+    /// for 1.2.3 => 2.0.0a1, you'd also include [`VersionBump::Major`].
+    Alpha,
+    /// Increase the beta version (e.g., 1.2.3b4 => 1.2.3b5)
+    ///
+    /// To move from a stable to a pre-release version, combine this with a stable component, e.g.,
+    /// for 1.2.3 => 2.0.0b1, you'd also include [`VersionBump::Major`].
+    Beta,
+    /// Increase the rc version (e.g., 1.2.3rc4 => 1.2.3rc5)
+    ///
+    /// To move from a stable to a pre-release version, combine this with a stable component, e.g.,
+    /// for 1.2.3 => 2.0.0rc1, you'd also include [`VersionBump::Major`].]
+    Rc,
+    /// Increase the post version (e.g., 1.2.3.post5 => 1.2.3.post6)
+    Post,
+    /// Increase the dev version (e.g., 1.2.3a4.dev6 => 1.2.3.dev7)
+    Dev,
+}
+
+impl std::fmt::Display for VersionBump {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        let string = match self {
+            VersionBump::Major => "major",
+            VersionBump::Minor => "minor",
+            VersionBump::Patch => "patch",
+            VersionBump::Stable => "stable",
+            VersionBump::Alpha => "alpha",
+            VersionBump::Beta => "beta",
+            VersionBump::Rc => "rc",
+            VersionBump::Post => "post",
+            VersionBump::Dev => "dev",
+        };
+        string.fmt(f)
+    }
 }
 
 #[derive(Args)]
@@ -1148,6 +1224,14 @@ pub struct PipCompileArgs {
     #[arg(long, overrides_with("all_extras"), hide = true)]
     pub no_all_extras: bool,
 
+    /// Install the specified dependency group from a `pyproject.toml`.
+    ///
+    /// If no path is provided, the `pyproject.toml` in the working directory is used.
+    ///
+    /// May be provided multiple times.
+    #[arg(long, group = "sources")]
+    pub group: Vec<PipGroupName>,
+
     #[command(flatten)]
     pub resolver: ResolverArgs,
 
@@ -1162,14 +1246,6 @@ pub struct PipCompileArgs {
     #[arg(long, overrides_with("no_deps"), hide = true)]
     pub deps: bool,
 
-    /// Install the specified dependency group from a `pyproject.toml`.
-    ///
-    /// If no path is provided, the `pyproject.toml` in the working directory is used.
-    ///
-    /// May be provided multiple times.
-    #[arg(long, group = "sources")]
-    pub group: Vec<PipGroupName>,
-
     /// Write the compiled requirements to the given `requirements.txt` or `pylock.toml` file.
     ///
     /// If the file already exists, the existing versions will be preferred when resolving
@@ -1464,6 +1540,30 @@ pub struct PipSyncArgs {
     #[arg(long, short, alias = "build-constraint", env = EnvVars::UV_BUILD_CONSTRAINT, value_delimiter = ' ', value_parser = parse_maybe_file_path)]
     pub build_constraints: Vec<Maybe<PathBuf>>,
 
+    /// Include optional dependencies from the specified extra name; may be provided more than once.
+    ///
+    /// Only applies to `pylock.toml`, `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
+    #[arg(long, conflicts_with = "all_extras", value_parser = extra_name_with_clap_error)]
+    pub extra: Option<Vec<ExtraName>>,
+
+    /// Include all optional dependencies.
+    ///
+    /// Only applies to `pylock.toml`, `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
+    #[arg(long, conflicts_with = "extra", overrides_with = "no_all_extras")]
+    pub all_extras: bool,
+
+    #[arg(long, overrides_with("all_extras"), hide = true)]
+    pub no_all_extras: bool,
+
+    /// Install the specified dependency group from a `pylock.toml` or `pyproject.toml`.
+    ///
+    /// If no path is provided, the `pylock.toml` or `pyproject.toml` in the working directory is
+    /// used.
+    ///
+    /// May be provided multiple times.
+    #[arg(long, group = "sources")]
+    pub group: Vec<PipGroupName>,
+
     #[command(flatten)]
     pub installer: InstallerArgs,
 
@@ -1744,19 +1844,28 @@ pub struct PipInstallArgs {
 
     /// Include optional dependencies from the specified extra name; may be provided more than once.
     ///
-    /// Only applies to `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
+    /// Only applies to `pylock.toml`, `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
     #[arg(long, conflicts_with = "all_extras", value_parser = extra_name_with_clap_error)]
     pub extra: Option<Vec<ExtraName>>,
 
     /// Include all optional dependencies.
     ///
-    /// Only applies to `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
+    /// Only applies to `pylock.toml`, `pyproject.toml`, `setup.py`, and `setup.cfg` sources.
     #[arg(long, conflicts_with = "extra", overrides_with = "no_all_extras")]
     pub all_extras: bool,
 
     #[arg(long, overrides_with("all_extras"), hide = true)]
     pub no_all_extras: bool,
 
+    /// Install the specified dependency group from a `pylock.toml` or `pyproject.toml`.
+    ///
+    /// If no path is provided, the `pylock.toml` or `pyproject.toml` in the working directory is
+    /// used.
+    ///
+    /// May be provided multiple times.
+    #[arg(long, group = "sources")]
+    pub group: Vec<PipGroupName>,
+
     #[command(flatten)]
     pub installer: ResolverInstallerArgs,
 
@@ -1771,14 +1880,6 @@ pub struct PipInstallArgs {
     #[arg(long, overrides_with("no_deps"), hide = true)]
     pub deps: bool,
 
-    /// Install the specified dependency group from a `pyproject.toml`.
-    ///
-    /// If no path is provided, the `pyproject.toml` in the working directory is used.
-    ///
-    /// May be provided multiple times.
-    #[arg(long, group = "sources")]
-    pub group: Vec<PipGroupName>,
-
     /// Require a matching hash for each requirement.
     ///
     /// By default, uv will verify any available hashes in the requirements file, but will not
@@ -2562,16 +2663,23 @@ pub struct VenvArgs {
     #[arg(long, value_parser = clap::builder::BoolishValueParser::new(), env = EnvVars::UV_VENV_SEED)]
     pub seed: bool,
 
+    /// Remove any existing files or directories at the target path.
+    ///
+    /// By default, `uv venv` will exit with an error if the given path is non-empty. The
+    /// `--clear` option will instead clear a non-empty path before creating a new virtual
+    /// environment.
+    #[clap(long, short, overrides_with = "allow_existing", value_parser = clap::builder::BoolishValueParser::new(), env = EnvVars::UV_VENV_CLEAR)]
+    pub clear: bool,
+
     /// Preserve any existing files or directories at the target path.
     ///
-    /// By default, `uv venv` will remove an existing virtual environment at the given path, and
+    /// By default, `uv venv` will exit with an error if the given path is non-empty. The
-    /// exit with an error if the path is non-empty but _not_ a virtual environment. The
     /// `--allow-existing` option will instead write to the given path, regardless of its contents,
     /// and without clearing it beforehand.
     ///
     /// WARNING: This option can lead to unexpected behavior if the existing virtual environment and
     /// the newly-created virtual environment are linked to different Python interpreters.
-    #[clap(long)]
+    #[clap(long, overrides_with = "clear")]
     pub allow_existing: bool,
 
     /// The path to the virtual environment to create.
@@ -2644,7 +2752,16 @@ pub struct VenvArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER)]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
+
+    /// Limit candidate packages for a specific package to those that were uploaded prior to the given date.
+    ///
+    /// Accepts package-date pairs in the format `PACKAGE=DATE`, where `DATE` is an RFC 3339 timestamp
+    /// (e.g., `2006-12-02T02:07:43Z`) or local date (e.g., `2006-12-02`) in your system's configured time zone.
+    ///
+    /// Can be provided multiple times for different packages.
+    #[arg(long)]
+    pub exclude_newer_package: Option<Vec<ExcludeNewerPackageEntry>>,
 
     /// The method to use when installing packages from the global cache.
     ///
@@ -2805,7 +2922,7 @@ pub struct InitArgs {
     /// Initialize a build-backend of choice for the project.
     ///
     /// Implicitly sets `--package`.
-    #[arg(long, value_enum, conflicts_with_all=["script", "no_package"])]
+    #[arg(long, value_enum, conflicts_with_all=["script", "no_package"], env = EnvVars::UV_INIT_BUILD_BACKEND)]
     pub build_backend: Option<ProjectBuildBackend>,
 
     /// Invalid option name for build backend.
@@ -3001,7 +3118,7 @@ pub struct RunArgs {
     /// When used in a project, these dependencies will be layered on top of the project environment
     /// in a separate, ephemeral environment. These dependencies are allowed to conflict with those
     /// specified by the project.
-    #[arg(long)]
+    #[arg(short = 'w', long)]
     pub with: Vec<comma::CommaSeparatedRequirements>,
 
     /// Run with the given packages installed in editable mode.
@@ -3163,6 +3280,10 @@ pub struct SyncArgs {
     #[arg(long, conflicts_with = "all_extras", value_parser = extra_name_with_clap_error)]
     pub extra: Option<Vec<ExtraName>>,
 
+    /// Select the output format.
+    #[arg(long, value_enum, default_value_t = SyncFormat::default())]
+    pub output_format: SyncFormat,
+
     /// Include all optional dependencies.
     ///
     /// When two or more extras are declared as conflicting in `tool.uv.conflicts`, using this flag
@@ -3395,6 +3516,23 @@ pub struct SyncArgs {
     )]
     pub python: Option<Maybe<String>>,
 
+    /// The platform for which requirements should be installed.
+    ///
+    /// Represented as a "target triple", a string that describes the target platform in terms of
+    /// its CPU, vendor, and operating system name, like `x86_64-unknown-linux-gnu` or
+    /// `aarch64-apple-darwin`.
+    ///
+    /// When targeting macOS (Darwin), the default minimum version is `12.0`. Use
+    /// `MACOSX_DEPLOYMENT_TARGET` to specify a different minimum version, e.g., `13.0`.
+    ///
+    /// WARNING: When specified, uv will select wheels that are compatible with the _target_
+    /// platform; as a result, the installed distributions may not be compatible with the _current_
+    /// platform. Conversely, any distributions that are built from source may be incompatible with
+    /// the _target_ platform, as they will be built for the _current_ platform. The
+    /// `--python-platform` option is intended for advanced use cases.
+    #[arg(long)]
+    pub python_platform: Option<TargetTriple>,
+
     /// Check if the Python environment is synchronized with the project.
     ///
     /// If the environment is not up to date, uv will exit with an error.
@@ -3632,7 +3770,8 @@ pub struct AddArgs {
         long,
         conflicts_with = "dev",
         conflicts_with = "optional",
-        conflicts_with = "package"
+        conflicts_with = "package",
+        conflicts_with = "workspace"
     )]
     pub script: Option<PathBuf>,
 
@@ -3648,6 +3787,22 @@ pub struct AddArgs {
         value_parser = parse_maybe_string,
     )]
     pub python: Option<Maybe<String>>,
+
+    /// Add the dependency as a workspace member.
+    ///
+    /// By default, uv will add path dependencies that are within the workspace directory
+    /// as workspace members. When used with a path dependency, the package will be added
+    /// to the workspace's `members` list in the root `pyproject.toml` file.
+    #[arg(long, overrides_with = "no_workspace")]
+    pub workspace: bool,
+
+    /// Don't add the dependency as a workspace member.
+    ///
+    /// By default, when adding a dependency that's a local path and is within the workspace
+    /// directory, uv will add it as a workspace member; pass `--no-workspace` to add the package
+    /// as direct path dependency instead.
+    #[arg(long, overrides_with = "workspace")]
+    pub no_workspace: bool,
 }
 
 #[derive(Args)]
@@ -4204,7 +4359,7 @@ pub struct ToolRunArgs {
     pub from: Option<String>,
 
     /// Run with the given packages installed.
-    #[arg(long)]
+    #[arg(short = 'w', long)]
     pub with: Vec<comma::CommaSeparatedRequirements>,
 
     /// Run with the given packages installed in editable mode
@@ -4319,7 +4474,7 @@ pub struct ToolInstallArgs {
     pub from: Option<String>,
 
     /// Include the following additional requirements.
-    #[arg(long)]
+    #[arg(short = 'w', long)]
     pub with: Vec<comma::CommaSeparatedRequirements>,
 
     /// Include all requirements listed in the given `requirements.txt` files.
@@ -4335,6 +4490,10 @@ pub struct ToolInstallArgs {
     #[arg(long)]
     pub with_editable: Vec<comma::CommaSeparatedRequirements>,
 
+    /// Install executables from the following packages.
+    #[arg(long)]
+    pub with_executables_from: Vec<comma::CommaSeparatedRequirements>,
+
     /// Constrain versions using the given requirements files.
     ///
     /// Constraints files are `requirements.txt`-like files that only control the _version_ of a
@@ -4595,6 +4754,14 @@ pub struct ToolUpgradeArgs {
     )]
     pub config_setting: Option<Vec<ConfigSettingEntry>>,
 
+    /// Settings to pass to the PEP 517 build backend for a specific package, specified as `PACKAGE:KEY=VALUE` pairs.
+    #[arg(
+        long,
+        alias = "config-settings-package",
+        help_heading = "Build options"
+    )]
+    pub config_setting_package: Option<Vec<ConfigSettingPackageEntry>>,
+
     /// Disable isolation when building source distributions.
     ///
     /// Assumes that build dependencies specified by PEP 518 are already installed.
@@ -4626,7 +4793,16 @@ pub struct ToolUpgradeArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER, help_heading = "Resolver options")]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
+
+    /// Limit candidate packages for specific packages to those that were uploaded prior to the given date.
+    ///
+    /// Accepts package-date pairs in the format `PACKAGE=DATE`, where `DATE` is an RFC 3339 timestamp
+    /// (e.g., `2006-12-02T02:07:43Z`) or local date (e.g., `2006-12-02`) in your system's configured time zone.
+    ///
+    /// Can be provided multiple times for different packages.
+    #[arg(long, help_heading = "Resolver options")]
+    pub exclude_newer_package: Option<Vec<ExcludeNewerPackageEntry>>,
 
     /// The method to use when installing packages from the global cache.
     ///
@@ -4712,18 +4888,19 @@ pub enum PythonCommand {
     /// Python versions are installed into the uv Python directory, which can be retrieved with `uv
     /// python dir`.
     ///
-    /// A `python` executable is not made globally available, managed Python versions are only used
+    /// By default, Python executables are added to a directory on the path with a minor version
-    /// in uv commands or in active virtual environments. There is experimental support for adding
+    /// suffix, e.g., `python3.13`. To install `python3` and `python`, use the `--default` flag. Use
-    /// Python executables to a directory on the path — use the `--preview` flag to enable this
+    /// `uv python dir --bin` to see the target directory.
-    /// behavior and `uv python dir --bin` to retrieve the target directory.
     ///
     /// Multiple Python versions may be requested.
     ///
     /// See `uv help python` to view supported request formats.
     Install(PythonInstallArgs),
 
-    /// Upgrade installed Python versions to the latest supported patch release (requires the
+    /// Upgrade installed Python versions.
-    /// `--preview` flag).
+    ///
+    /// Upgrades versions to the latest supported patch release. Requires the `python-upgrade`
+    /// preview feature.
     ///
     /// A target Python minor version to upgrade may be provided, e.g., `3.13`. Multiple versions
     /// may be provided to perform more than one upgrade.
@@ -4774,6 +4951,19 @@ pub enum PythonCommand {
 
     /// Uninstall Python versions.
     Uninstall(PythonUninstallArgs),
+
+    /// Ensure that the Python executable directory is on the `PATH`.
+    ///
+    /// If the Python executable directory is not present on the `PATH`, uv will attempt to add it to
+    /// the relevant shell configuration files.
+    ///
+    /// If the shell configuration files already include a blurb to add the executable directory to
+    /// the path, but the directory is not present on the `PATH`, uv will exit with an error.
+    ///
+    /// The Python executable directory is determined according to the XDG standard and can be
+    /// retrieved with `uv python dir --bin`.
+    #[command(alias = "ensurepath")]
+    UpdateShell,
 }
 
 #[derive(Args)]
@@ -4859,6 +5049,38 @@ pub struct PythonInstallArgs {
     #[arg(long, short, env = EnvVars::UV_PYTHON_INSTALL_DIR)]
     pub install_dir: Option<PathBuf>,
 
+    /// Install a Python executable into the `bin` directory.
+    ///
+    /// This is the default behavior. If this flag is provided explicitly, uv will error if the
+    /// executable cannot be installed.
+    ///
+    /// This can also be set with `UV_PYTHON_INSTALL_BIN=1`.
+    ///
+    /// See `UV_PYTHON_BIN_DIR` to customize the target directory.
+    #[arg(long, overrides_with("no_bin"), hide = true)]
+    pub bin: bool,
+
+    /// Do not install a Python executable into the `bin` directory.
+    ///
+    /// This can also be set with `UV_PYTHON_INSTALL_BIN=0`.
+    #[arg(long, overrides_with("bin"), conflicts_with("default"))]
+    pub no_bin: bool,
+
+    /// Register the Python installation in the Windows registry.
+    ///
+    /// This is the default behavior on Windows. If this flag is provided explicitly, uv will error if the
+    /// registry entry cannot be created.
+    ///
+    /// This can also be set with `UV_PYTHON_INSTALL_REGISTRY=1`.
+    #[arg(long, overrides_with("no_registry"), hide = true)]
+    pub registry: bool,
+
+    /// Do not register the Python installation in the Windows registry.
+    ///
+    /// This can also be set with `UV_PYTHON_INSTALL_REGISTRY=0`.
+    #[arg(long, overrides_with("registry"))]
+    pub no_registry: bool,
+
     /// The Python version(s) to install.
     ///
     /// If not provided, the requested Python version(s) will be read from the `UV_PYTHON`
@@ -4921,7 +5143,7 @@ pub struct PythonInstallArgs {
     /// and `python`.
     ///
     /// If multiple Python versions are requested, uv will exit with an error.
-    #[arg(long)]
+    #[arg(long, conflicts_with("no_bin"))]
     pub default: bool,
 }
 
@@ -5342,6 +5564,14 @@ pub struct InstallerArgs {
     )]
     pub config_setting: Option<Vec<ConfigSettingEntry>>,
 
+    /// Settings to pass to the PEP 517 build backend for a specific package, specified as `PACKAGE:KEY=VALUE` pairs.
+    #[arg(
+        long,
+        alias = "config-settings-package",
+        help_heading = "Build options"
+    )]
+    pub config_settings_package: Option<Vec<ConfigSettingPackageEntry>>,
+
     /// Disable isolation when building source distributions.
     ///
     /// Assumes that build dependencies specified by PEP 518 are already installed.
@@ -5367,7 +5597,16 @@ pub struct InstallerArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER, help_heading = "Resolver options")]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
+
+    /// Limit candidate packages for specific packages to those that were uploaded prior to the given date.
+    ///
+    /// Accepts package-date pairs in the format `PACKAGE=DATE`, where `DATE` is an RFC 3339 timestamp
+    /// (e.g., `2006-12-02T02:07:43Z`) or local date (e.g., `2006-12-02`) in your system's configured time zone.
+    ///
+    /// Can be provided multiple times for different packages.
+    #[arg(long, help_heading = "Resolver options")]
+    pub exclude_newer_package: Option<Vec<ExcludeNewerPackageEntry>>,
 
     /// The method to use when installing packages from the global cache.
     ///
@@ -5529,6 +5768,14 @@ pub struct ResolverArgs {
     )]
     pub config_setting: Option<Vec<ConfigSettingEntry>>,
 
+    /// Settings to pass to the PEP 517 build backend for a specific package, specified as `PACKAGE:KEY=VALUE` pairs.
+    #[arg(
+        long,
+        alias = "config-settings-package",
+        help_heading = "Build options"
+    )]
+    pub config_settings_package: Option<Vec<ConfigSettingPackageEntry>>,
+
     /// Disable isolation when building source distributions.
     ///
     /// Assumes that build dependencies specified by PEP 518 are already installed.
@@ -5560,7 +5807,16 @@ pub struct ResolverArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER, help_heading = "Resolver options")]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
+
+    /// Limit candidate packages for a specific package to those that were uploaded prior to the given date.
+    ///
+    /// Accepts package-date pairs in the format `PACKAGE=DATE`, where `DATE` is an RFC 3339 timestamp
+    /// (e.g., `2006-12-02T02:07:43Z`) or local date (e.g., `2006-12-02`) in your system's configured time zone.
+    ///
+    /// Can be provided multiple times for different packages.
+    #[arg(long, help_heading = "Resolver options")]
+    pub exclude_newer_package: Option<Vec<ExcludeNewerPackageEntry>>,
 
     /// The method to use when installing packages from the global cache.
     ///
@@ -5718,6 +5974,14 @@ pub struct ResolverInstallerArgs {
     )]
     pub config_setting: Option<Vec<ConfigSettingEntry>>,
 
+    /// Settings to pass to the PEP 517 build backend for a specific package, specified as `PACKAGE:KEY=VALUE` pairs.
+    #[arg(
+        long,
+        alias = "config-settings-package",
+        help_heading = "Build options"
+    )]
+    pub config_settings_package: Option<Vec<ConfigSettingPackageEntry>>,
+
     /// Disable isolation when building source distributions.
     ///
     /// Assumes that build dependencies specified by PEP 518 are already installed.
@@ -5749,7 +6013,16 @@ pub struct ResolverInstallerArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER, help_heading = "Resolver options")]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
+
+    /// Limit candidate packages for specific packages to those that were uploaded prior to the given date.
+    ///
+    /// Accepts package-date pairs in the format `PACKAGE=DATE`, where `DATE` is an RFC 3339 timestamp
+    /// (e.g., `2006-12-02T02:07:43Z`) or local date (e.g., `2006-12-02`) in your system's configured time zone.
+    ///
+    /// Can be provided multiple times for different packages.
+    #[arg(long, help_heading = "Resolver options")]
+    pub exclude_newer_package: Option<Vec<ExcludeNewerPackageEntry>>,
 
     /// The method to use when installing packages from the global cache.
     ///
@@ -5838,7 +6111,7 @@ pub struct FetchArgs {
     /// Accepts both RFC 3339 timestamps (e.g., `2006-12-02T02:07:43Z`) and local dates in the same
     /// format (e.g., `2006-12-02`) in your system's configured time zone.
     #[arg(long, env = EnvVars::UV_EXCLUDE_NEWER, help_heading = "Resolver options")]
-    pub exclude_newer: Option<ExcludeNewer>,
+    pub exclude_newer: Option<ExcludeNewerTimestamp>,
 }
 
 #[derive(Args)]

crates/uv-cli/src/options.rs

@@ -1,8 +1,8 @@
 use anstream::eprintln;
 
 use uv_cache::Refresh;
-use uv_configuration::ConfigSettings;
+use uv_configuration::{ConfigSettings, PackageConfigSettings};
-use uv_resolver::PrereleaseMode;
+use uv_resolver::{ExcludeNewer, ExcludeNewerPackage, PrereleaseMode};
 use uv_settings::{Combine, PipOptions, ResolverInstallerOptions, ResolverOptions};
 use uv_warnings::owo_colors::OwoColorize;
 
@@ -62,12 +62,14 @@ impl From<ResolverArgs> for PipOptions {
             pre,
             fork_strategy,
             config_setting,
+            config_settings_package,
             no_build_isolation,
             no_build_isolation_package,
             build_isolation,
             exclude_newer,
             link_mode,
             no_sources,
+            exclude_newer_package,
         } = args;
 
         Self {
@@ -84,9 +86,15 @@ impl From<ResolverArgs> for PipOptions {
             },
             config_settings: config_setting
                 .map(|config_settings| config_settings.into_iter().collect::<ConfigSettings>()),
+            config_settings_package: config_settings_package.map(|config_settings| {
+                config_settings
+                    .into_iter()
+                    .collect::<PackageConfigSettings>()
+            }),
             no_build_isolation: flag(no_build_isolation, build_isolation, "build-isolation"),
             no_build_isolation_package: Some(no_build_isolation_package),
             exclude_newer,
+            exclude_newer_package: exclude_newer_package.map(ExcludeNewerPackage::from_iter),
             link_mode,
             no_sources: if no_sources { Some(true) } else { None },
             ..PipOptions::from(index_args)
@@ -104,6 +112,7 @@ impl From<InstallerArgs> for PipOptions {
             index_strategy,
             keyring_provider,
             config_setting,
+            config_settings_package,
             no_build_isolation,
             build_isolation,
             exclude_newer,
@@ -111,6 +120,7 @@ impl From<InstallerArgs> for PipOptions {
             compile_bytecode,
             no_compile_bytecode,
             no_sources,
+            exclude_newer_package,
         } = args;
 
         Self {
@@ -120,8 +130,14 @@ impl From<InstallerArgs> for PipOptions {
             keyring_provider,
             config_settings: config_setting
                 .map(|config_settings| config_settings.into_iter().collect::<ConfigSettings>()),
+            config_settings_package: config_settings_package.map(|config_settings| {
+                config_settings
+                    .into_iter()
+                    .collect::<PackageConfigSettings>()
+            }),
             no_build_isolation: flag(no_build_isolation, build_isolation, "build-isolation"),
             exclude_newer,
+            exclude_newer_package: exclude_newer_package.map(ExcludeNewerPackage::from_iter),
             link_mode,
             compile_bytecode: flag(compile_bytecode, no_compile_bytecode, "compile-bytecode"),
             no_sources: if no_sources { Some(true) } else { None },
@@ -147,6 +163,7 @@ impl From<ResolverInstallerArgs> for PipOptions {
             pre,
             fork_strategy,
             config_setting,
+            config_settings_package,
             no_build_isolation,
             no_build_isolation_package,
             build_isolation,
@@ -155,6 +172,7 @@ impl From<ResolverInstallerArgs> for PipOptions {
             compile_bytecode,
             no_compile_bytecode,
             no_sources,
+            exclude_newer_package,
         } = args;
 
         Self {
@@ -173,9 +191,15 @@ impl From<ResolverInstallerArgs> for PipOptions {
             fork_strategy,
             config_settings: config_setting
                 .map(|config_settings| config_settings.into_iter().collect::<ConfigSettings>()),
+            config_settings_package: config_settings_package.map(|config_settings| {
+                config_settings
+                    .into_iter()
+                    .collect::<PackageConfigSettings>()
+            }),
             no_build_isolation: flag(no_build_isolation, build_isolation, "build-isolation"),
             no_build_isolation_package: Some(no_build_isolation_package),
             exclude_newer,
+            exclude_newer_package: exclude_newer_package.map(ExcludeNewerPackage::from_iter),
             link_mode,
             compile_bytecode: flag(compile_bytecode, no_compile_bytecode, "compile-bytecode"),
             no_sources: if no_sources { Some(true) } else { None },
@@ -260,12 +284,14 @@ pub fn resolver_options(
         pre,
         fork_strategy,
         config_setting,
+        config_settings_package,
         no_build_isolation,
         no_build_isolation_package,
         build_isolation,
         exclude_newer,
         link_mode,
         no_sources,
+        exclude_newer_package,
     } = resolver_args;
 
     let BuildOptionsArgs {
@@ -321,9 +347,18 @@ pub fn resolver_options(
         dependency_metadata: None,
         config_settings: config_setting
             .map(|config_settings| config_settings.into_iter().collect::<ConfigSettings>()),
+        config_settings_package: config_settings_package.map(|config_settings| {
+            config_settings
+                .into_iter()
+                .collect::<PackageConfigSettings>()
+        }),
         no_build_isolation: flag(no_build_isolation, build_isolation, "build-isolation"),
         no_build_isolation_package: Some(no_build_isolation_package),
-        exclude_newer,
+        extra_build_dependencies: None,
+        exclude_newer: ExcludeNewer::from_args(
+            exclude_newer,
+            exclude_newer_package.unwrap_or_default(),
+        ),
         link_mode,
         no_build: flag(no_build, build, "build"),
         no_build_package: Some(no_build_package),
@@ -353,10 +388,12 @@ pub fn resolver_installer_options(
         pre,
         fork_strategy,
         config_setting,
+        config_settings_package,
         no_build_isolation,
         no_build_isolation_package,
         build_isolation,
         exclude_newer,
+        exclude_newer_package,
         link_mode,
         compile_bytecode,
         no_compile_bytecode,
@@ -428,13 +465,20 @@ pub fn resolver_installer_options(
         dependency_metadata: None,
         config_settings: config_setting
             .map(|config_settings| config_settings.into_iter().collect::<ConfigSettings>()),
+        config_settings_package: config_settings_package.map(|config_settings| {
+            config_settings
+                .into_iter()
+                .collect::<PackageConfigSettings>()
+        }),
         no_build_isolation: flag(no_build_isolation, build_isolation, "build-isolation"),
         no_build_isolation_package: if no_build_isolation_package.is_empty() {
             None
         } else {
             Some(no_build_isolation_package)
         },
+        extra_build_dependencies: None,
         exclude_newer,
+        exclude_newer_package: exclude_newer_package.map(ExcludeNewerPackage::from_iter),
         link_mode,
         compile_bytecode: flag(compile_bytecode, no_compile_bytecode, "compile-bytecode"),
         no_build: flag(no_build, build, "build"),

crates/uv-client/Cargo.toml

@@ -60,9 +60,9 @@ url = { workspace = true }
 
 [dev-dependencies]
 anyhow = { workspace = true }
-http-body-util = { version = "0.1.2" }
+http-body-util = { workspace = true }
-hyper = { version = "1.4.1", features = ["server", "http1"] }
+hyper = { workspace = true }
-hyper-util = { version = "0.1.8", features = ["tokio"] }
+hyper-util = { workspace = true }
-insta = { version = "1.40.0", features = ["filters", "json", "redactions"] }
+insta = { workspace = true }
 tokio = { workspace = true }
 wiremock = { workspace = true }

crates/uv-client/src/base_client.rs

@@ -6,6 +6,7 @@ use std::sync::Arc;
 use std::time::Duration;
 use std::{env, io, iter};
 
+use anyhow::Context;
 use anyhow::anyhow;
 use http::{
     HeaderMap, HeaderName, HeaderValue, Method, StatusCode,
@@ -66,6 +67,7 @@ pub struct BaseClientBuilder<'a> {
     keyring: KeyringProviderType,
     allow_insecure_host: Vec<TrustedHost>,
     native_tls: bool,
+    built_in_root_certs: bool,
     retries: u32,
     pub connectivity: Connectivity,
     markers: Option<&'a MarkerEnvironment>,
@@ -126,6 +128,7 @@ impl BaseClientBuilder<'_> {
             keyring: KeyringProviderType::default(),
             allow_insecure_host: vec![],
             native_tls: false,
+            built_in_root_certs: false,
             connectivity: Connectivity::Online,
             retries: DEFAULT_RETRIES,
             markers: None,
@@ -166,12 +169,37 @@ impl<'a> BaseClientBuilder<'a> {
         self
     }
 
+    /// Read the retry count from [`EnvVars::UV_HTTP_RETRIES`] if set, otherwise, make no change.
+    ///
+    /// Errors when [`EnvVars::UV_HTTP_RETRIES`] is not a valid u32.
+    pub fn retries_from_env(self) -> anyhow::Result<Self> {
+        // TODO(zanieb): We should probably parse this in another layer, but there's not a natural
+        // fit for it right now
+        if let Some(value) = env::var_os(EnvVars::UV_HTTP_RETRIES) {
+            Ok(self.retries(
+                value
+                    .to_string_lossy()
+                    .as_ref()
+                    .parse::<u32>()
+                    .context("Failed to parse `UV_HTTP_RETRIES`")?,
+            ))
+        } else {
+            Ok(self)
+        }
+    }
+
     #[must_use]
     pub fn native_tls(mut self, native_tls: bool) -> Self {
         self.native_tls = native_tls;
         self
     }
 
+    #[must_use]
+    pub fn built_in_root_certs(mut self, built_in_root_certs: bool) -> Self {
+        self.built_in_root_certs = built_in_root_certs;
+        self
+    }
+
     #[must_use]
     pub fn markers(mut self, markers: &'a MarkerEnvironment) -> Self {
         self.markers = Some(markers);
@@ -238,7 +266,11 @@ impl<'a> BaseClientBuilder<'a> {
 
     /// Create a [`RetryPolicy`] for the client.
     fn retry_policy(&self) -> ExponentialBackoff {
-        ExponentialBackoff::builder().build_with_max_retries(self.retries)
+        let mut builder = ExponentialBackoff::builder();
+        if env::var_os(EnvVars::UV_TEST_NO_HTTP_RETRY_DELAY).is_some() {
+            builder = builder.retry_bounds(Duration::from_millis(0), Duration::from_millis(0));
+        }
+        builder.build_with_max_retries(self.retries)
     }
 
     pub fn build(&self) -> BaseClient {
@@ -364,7 +396,7 @@ impl<'a> BaseClientBuilder<'a> {
             .user_agent(user_agent)
             .pool_max_idle_per_host(20)
             .read_timeout(timeout)
-            .tls_built_in_root_certs(false)
+            .tls_built_in_root_certs(self.built_in_root_certs)
             .redirect(redirect_policy.reqwest_policy());
 
         // If necessary, accept invalid certificates.
@@ -896,18 +928,34 @@ pub fn is_extended_transient_error(err: &dyn Error) -> bool {
     }
 
     // IO Errors may be nested through custom IO errors.
+    let mut has_io_error = false;
     for io_err in find_sources::<io::Error>(&err) {
-        if io_err.kind() == io::ErrorKind::ConnectionReset
+        has_io_error = true;
-            || io_err.kind() == io::ErrorKind::UnexpectedEof
+        let retryable_io_err_kinds = [
-            || io_err.kind() == io::ErrorKind::BrokenPipe
+            // https://github.com/astral-sh/uv/issues/12054
-        {
+            io::ErrorKind::BrokenPipe,
-            trace!("Retrying error: `ConnectionReset` or `UnexpectedEof`");
+            // From reqwest-middleware
+            io::ErrorKind::ConnectionAborted,
+            // https://github.com/astral-sh/uv/issues/3514
+            io::ErrorKind::ConnectionReset,
+            // https://github.com/astral-sh/uv/issues/14699
+            io::ErrorKind::InvalidData,
+            // https://github.com/astral-sh/uv/issues/9246
+            io::ErrorKind::UnexpectedEof,
+        ];
+        if retryable_io_err_kinds.contains(&io_err.kind()) {
+            trace!("Retrying error: `{}`", io_err.kind());
             return true;
         }
-        trace!("Cannot retry IO error: not one of `ConnectionReset` or `UnexpectedEof`");
+        trace!(
+            "Cannot retry IO error `{}`, not a retryable IO error kind",
+            io_err.kind()
+        );
     }
 
-    trace!("Cannot retry error: not an IO error");
+    if !has_io_error {
+        trace!("Cannot retry error: not an extended IO error");
+    }
     false
 }
 
@@ -982,6 +1030,45 @@ mod tests {
         Ok(())
     }
 
+    #[tokio::test]
+    async fn test_redirect_preserves_fragment() -> Result<()> {
+        for status in &[301, 302, 303, 307, 308] {
+            let server = MockServer::start().await;
+            Mock::given(method("GET"))
+                .respond_with(
+                    ResponseTemplate::new(*status)
+                        .insert_header("location", format!("{}/redirect", server.uri())),
+                )
+                .mount(&server)
+                .await;
+
+            let request = Client::new()
+                .get(format!("{}#fragment", server.uri()))
+                .build()
+                .unwrap();
+
+            let response = Client::builder()
+                .redirect(reqwest::redirect::Policy::none())
+                .build()
+                .unwrap()
+                .execute(request.try_clone().unwrap())
+                .await
+                .unwrap();
+
+            let redirect_request =
+                request_into_redirect(request, &response, CrossOriginCredentialsPolicy::Secure)?
+                    .unwrap();
+            assert!(
+                redirect_request
+                    .url()
+                    .fragment()
+                    .is_some_and(|fragment| fragment == "fragment")
+            );
+        }
+
+        Ok(())
+    }
+
     #[tokio::test]
     async fn test_redirect_removes_authorization_header_on_cross_origin() -> Result<()> {
         for status in &[301, 302, 303, 307, 308] {

crates/uv-client/src/cached_client.rs

@@ -176,36 +176,30 @@ impl<E: Into<Self> + std::error::Error + 'static> From<CachedClientError<E>> for
             CachedClientError::Client {
                 retries: Some(retries),
                 err,
-            } => ErrorKind::RequestWithRetries {
+            } => Error::new(err.into_kind(), retries),
-                source: Box::new(err.into_kind()),
-                retries,
-            }
-            .into(),
             CachedClientError::Client { retries: None, err } => err,
             CachedClientError::Callback {
                 retries: Some(retries),
                 err,
-            } => ErrorKind::RequestWithRetries {
+            } => Error::new(err.into().into_kind(), retries),
-                source: Box::new(err.into().into_kind()),
-                retries,
-            }
-            .into(),
             CachedClientError::Callback { retries: None, err } => err.into(),
         }
     }
 }
 
 #[derive(Debug, Clone, Copy)]
-pub enum CacheControl {
+pub enum CacheControl<'a> {
     /// Respect the `cache-control` header from the response.
     None,
     /// Apply `max-age=0, must-revalidate` to the request.
     MustRevalidate,
     /// Allow the client to return stale responses.
     AllowStale,
+    /// Override the cache control header with a custom value.
+    Override(&'a str),
 }
 
-impl From<Freshness> for CacheControl {
+impl From<Freshness> for CacheControl<'_> {
     fn from(value: Freshness) -> Self {
         match value {
             Freshness::Fresh => Self::None,
@@ -259,7 +253,7 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload, CachedClientError<CallBackError>> {
         let payload = self
@@ -292,7 +286,7 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload::Target, CachedClientError<CallBackError>> {
         let fresh_req = req.try_clone().expect("HTTP request must be cloneable");
@@ -302,7 +296,7 @@ impl CachedClient {
                 .await?
         } else {
             debug!("No cache entry for: {}", req.url());
-            let (response, cache_policy) = self.fresh_request(req).await?;
+            let (response, cache_policy) = self.fresh_request(req, cache_control).await?;
             CachedResponse::ModifiedOrNew {
                 response,
                 cache_policy,
@@ -316,8 +310,13 @@ impl CachedClient {
                         "Broken fresh cache entry (for payload) at {}, removing: {err}",
                         cache_entry.path().display()
                     );
-                    self.resend_and_heal_cache(fresh_req, cache_entry, response_callback)
+                    self.resend_and_heal_cache(
-                        .await
+                        fresh_req,
+                        cache_entry,
+                        cache_control,
+                        response_callback,
+                    )
+                    .await
                 }
             },
             CachedResponse::NotModified { cached, new_policy } => {
@@ -337,8 +336,13 @@ impl CachedClient {
                                  (for payload) at {}, removing: {err}",
                                 cache_entry.path().display()
                             );
-                            self.resend_and_heal_cache(fresh_req, cache_entry, response_callback)
+                            self.resend_and_heal_cache(
-                                .await
+                                fresh_req,
+                                cache_entry,
+                                cache_control,
+                                response_callback,
+                            )
+                            .await
                         }
                     }
                 }
@@ -353,8 +357,13 @@ impl CachedClient {
                 // ETag didn't match). We need to make a fresh request.
                 if response.status() == http::StatusCode::NOT_MODIFIED {
                     warn!("Server returned unusable 304 for: {}", fresh_req.url());
-                    self.resend_and_heal_cache(fresh_req, cache_entry, response_callback)
+                    self.resend_and_heal_cache(
-                        .await
+                        fresh_req,
+                        cache_entry,
+                        cache_control,
+                        response_callback,
+                    )
+                    .await
                 } else {
                     self.run_response_callback(
                         cache_entry,
@@ -377,9 +386,10 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload, CachedClientError<CallBackError>> {
-        let (response, cache_policy) = self.fresh_request(req).await?;
+        let (response, cache_policy) = self.fresh_request(req, cache_control).await?;
 
         let payload = self
             .run_response_callback(cache_entry, cache_policy, response, async |resp| {
@@ -399,10 +409,11 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload::Target, CachedClientError<CallBackError>> {
         let _ = fs_err::tokio::remove_file(&cache_entry.path()).await;
-        let (response, cache_policy) = self.fresh_request(req).await?;
+        let (response, cache_policy) = self.fresh_request(req, cache_control).await?;
         self.run_response_callback(cache_entry, cache_policy, response, response_callback)
             .await
     }
@@ -469,12 +480,12 @@ impl CachedClient {
     async fn send_cached(
         &self,
         mut req: Request,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
         cached: DataWithCachePolicy,
     ) -> Result<CachedResponse, Error> {
         // Apply the cache control header, if necessary.
         match cache_control {
-            CacheControl::None | CacheControl::AllowStale => {}
+            CacheControl::None | CacheControl::AllowStale | CacheControl::Override(..) => {}
             CacheControl::MustRevalidate => {
                 req.headers_mut().insert(
                     http::header::CACHE_CONTROL,
@@ -488,10 +499,15 @@ impl CachedClient {
                 CachedResponse::FreshCache(cached)
             }
             BeforeRequest::Stale(new_cache_policy_builder) => match cache_control {
-                CacheControl::None | CacheControl::MustRevalidate => {
+                CacheControl::None | CacheControl::MustRevalidate | CacheControl::Override(_) => {
                     debug!("Found stale response for: {}", req.url());
-                    self.send_cached_handle_stale(req, cached, new_cache_policy_builder)
+                    self.send_cached_handle_stale(
-                        .await?
+                        req,
+                        cache_control,
+                        cached,
+                        new_cache_policy_builder,
+                    )
+                    .await?
                 }
                 CacheControl::AllowStale => {
                     debug!("Found stale (but allowed) response for: {}", req.url());
@@ -504,7 +520,7 @@ impl CachedClient {
                     "Cached request doesn't match current request for: {}",
                     req.url()
                 );
-                let (response, cache_policy) = self.fresh_request(req).await?;
+                let (response, cache_policy) = self.fresh_request(req, cache_control).await?;
                 CachedResponse::ModifiedOrNew {
                     response,
                     cache_policy,
@@ -516,12 +532,13 @@ impl CachedClient {
     async fn send_cached_handle_stale(
         &self,
         req: Request,
+        cache_control: CacheControl<'_>,
         cached: DataWithCachePolicy,
         new_cache_policy_builder: CachePolicyBuilder,
     ) -> Result<CachedResponse, Error> {
         let url = DisplaySafeUrl::from(req.url().clone());
         debug!("Sending revalidation request for: {url}");
-        let response = self
+        let mut response = self
             .0
             .execute(req)
             .instrument(info_span!("revalidation_request", url = url.as_str()))
@@ -529,6 +546,16 @@ impl CachedClient {
             .map_err(|err| ErrorKind::from_reqwest_middleware(url.clone(), err))?
             .error_for_status()
             .map_err(|err| ErrorKind::from_reqwest(url.clone(), err))?;
+
+        // If the user set a custom `Cache-Control` header, override it.
+        if let CacheControl::Override(header) = cache_control {
+            response.headers_mut().insert(
+                http::header::CACHE_CONTROL,
+                http::HeaderValue::from_str(header)
+                    .expect("Cache-Control header must be valid UTF-8"),
+            );
+        }
+
         match cached
             .cache_policy
             .after_response(new_cache_policy_builder, &response)
@@ -557,16 +584,26 @@ impl CachedClient {
     async fn fresh_request(
         &self,
         req: Request,
+        cache_control: CacheControl<'_>,
     ) -> Result<(Response, Option<Box<CachePolicy>>), Error> {
         let url = DisplaySafeUrl::from(req.url().clone());
         trace!("Sending fresh {} request for {}", req.method(), url);
         let cache_policy_builder = CachePolicyBuilder::new(&req);
-        let response = self
+        let mut response = self
             .0
             .execute(req)
             .await
             .map_err(|err| ErrorKind::from_reqwest_middleware(url.clone(), err))?;
 
+        // If the user set a custom `Cache-Control` header, override it.
+        if let CacheControl::Override(header) = cache_control {
+            response.headers_mut().insert(
+                http::header::CACHE_CONTROL,
+                http::HeaderValue::from_str(header)
+                    .expect("Cache-Control header must be valid UTF-8"),
+            );
+        }
+
         let retry_count = response
             .extensions()
             .get::<reqwest_retry::RetryCount>()
@@ -599,7 +636,7 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload, CachedClientError<CallBackError>> {
         let payload = self
@@ -623,7 +660,7 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload::Target, CachedClientError<CallBackError>> {
         let mut past_retries = 0;
@@ -681,6 +718,7 @@ impl CachedClient {
         &self,
         req: Request,
         cache_entry: &CacheEntry,
+        cache_control: CacheControl<'_>,
         response_callback: Callback,
     ) -> Result<Payload, CachedClientError<CallBackError>> {
         let mut past_retries = 0;
@@ -689,7 +727,7 @@ impl CachedClient {
         loop {
             let fresh_req = req.try_clone().expect("HTTP request must be cloneable");
             let result = self
-                .skip_cache(fresh_req, cache_entry, &response_callback)
+                .skip_cache(fresh_req, cache_entry, cache_control, &response_callback)
                 .await;
 
             // Check if the middleware already performed retries

crates/uv-client/src/error.rs

@@ -11,19 +11,56 @@ use uv_redacted::DisplaySafeUrl;
 use crate::middleware::OfflineError;
 use crate::{FlatIndexError, html};
 
-#[derive(Debug, thiserror::Error)]
+#[derive(Debug)]
-#[error(transparent)]
 pub struct Error {
     kind: Box<ErrorKind>,
+    retries: u32,
+}
+
+impl Display for Error {
+    fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {
+        if self.retries > 0 {
+            write!(
+                f,
+                "Request failed after {retries} retries",
+                retries = self.retries
+            )
+        } else {
+            Display::fmt(&self.kind, f)
+        }
+    }
+}
+
+impl std::error::Error for Error {
+    fn source(&self) -> Option<&(dyn std::error::Error + 'static)> {
+        if self.retries > 0 {
+            Some(&self.kind)
+        } else {
+            self.kind.source()
+        }
+    }
 }
 
 impl Error {
-    /// Convert this error into its [`ErrorKind`] variant.
+    /// Create a new [`Error`] with the given [`ErrorKind`] and number of retries.
+    pub fn new(kind: ErrorKind, retries: u32) -> Self {
+        Self {
+            kind: Box::new(kind),
+            retries,
+        }
+    }
+
+    /// Return the number of retries that were attempted before this error was returned.
+    pub fn retries(&self) -> u32 {
+        self.retries
+    }
+
+    /// Convert this error into an [`ErrorKind`].
     pub fn into_kind(self) -> ErrorKind {
         *self.kind
     }
 
-    /// Get a reference to the [`ErrorKind`] variant of this error.
+    /// Return the [`ErrorKind`] of this error.
     pub fn kind(&self) -> &ErrorKind {
         &self.kind
     }
@@ -78,7 +115,7 @@ impl Error {
 
             // The server returned a "Method Not Allowed" error, indicating it doesn't support
             // HEAD requests, so we can't check for range requests.
-            ErrorKind::WrappedReqwestError(_url, err) => {
+            ErrorKind::WrappedReqwestError(_, err) => {
                 if let Some(status) = err.status() {
                     // If the server doesn't support HEAD requests, we can't check for range
                     // requests.
@@ -143,6 +180,7 @@ impl From<ErrorKind> for Error {
     fn from(kind: ErrorKind) -> Self {
         Self {
             kind: Box::new(kind),
+            retries: 0,
         }
     }
 }
@@ -152,9 +190,6 @@ pub enum ErrorKind {
     #[error(transparent)]
     InvalidUrl(#[from] uv_distribution_types::ToUrlError),
 
-    #[error(transparent)]
-    JoinRelativeUrl(#[from] uv_pypi_types::JoinRelativeError),
-
     #[error(transparent)]
     Flat(#[from] FlatIndexError),
 
@@ -262,13 +297,18 @@ pub enum ErrorKind {
         "Network connectivity is disabled, but the requested data wasn't found in the cache for: `{0}`"
     )]
     Offline(String),
+
+    #[error("Invalid cache control header: `{0}`")]
+    InvalidCacheControl(String),
 }
 
 impl ErrorKind {
+    /// Create an [`ErrorKind`] from a [`reqwest::Error`].
     pub(crate) fn from_reqwest(url: DisplaySafeUrl, error: reqwest::Error) -> Self {
         Self::WrappedReqwestError(url, WrappedReqwestError::from(error))
     }
 
+    /// Create an [`ErrorKind`] from a [`reqwest_middleware::Error`].
     pub(crate) fn from_reqwest_middleware(
         url: DisplaySafeUrl,
         err: reqwest_middleware::Error,

crates/uv-client/src/registry_client.rs

@@ -21,8 +21,8 @@ use uv_configuration::KeyringProviderType;
 use uv_configuration::{IndexStrategy, TrustedHost};
 use uv_distribution_filename::{DistFilename, SourceDistFilename, WheelFilename};
 use uv_distribution_types::{
-    BuiltDist, File, FileLocation, IndexCapabilities, IndexFormat, IndexLocations,
+    BuiltDist, File, IndexCapabilities, IndexFormat, IndexLocations, IndexMetadataRef,
-    IndexMetadataRef, IndexStatusCodeDecision, IndexStatusCodeStrategy, IndexUrl, IndexUrls, Name,
+    IndexStatusCodeDecision, IndexStatusCodeStrategy, IndexUrl, IndexUrls, Name,
 };
 use uv_metadata::{read_metadata_async_seek, read_metadata_async_stream};
 use uv_normalize::PackageName;
@@ -115,12 +115,25 @@ impl<'a> RegistryClientBuilder<'a> {
         self
     }
 
+    pub fn retries_from_env(mut self) -> anyhow::Result<Self> {
+        self.base_client_builder = self.base_client_builder.retries_from_env()?;
+        Ok(self)
+    }
+
     #[must_use]
     pub fn native_tls(mut self, native_tls: bool) -> Self {
         self.base_client_builder = self.base_client_builder.native_tls(native_tls);
         self
     }
 
+    #[must_use]
+    pub fn built_in_root_certs(mut self, built_in_root_certs: bool) -> Self {
+        self.base_client_builder = self
+            .base_client_builder
+            .built_in_root_certs(built_in_root_certs);
+        self
+    }
+
     #[must_use]
     pub fn cache(mut self, cache: Cache) -> Self {
         self.cache = cache;
@@ -506,11 +519,17 @@ impl RegistryClient {
             format!("{package_name}.rkyv"),
         );
         let cache_control = match self.connectivity {
-            Connectivity::Online => CacheControl::from(
+            Connectivity::Online => {
-                self.cache
+                if let Some(header) = self.index_urls.simple_api_cache_control_for(index) {
-                    .freshness(&cache_entry, Some(package_name), None)
+                    CacheControl::Override(header)
-                    .map_err(ErrorKind::Io)?,
+                } else {
-            ),
+                    CacheControl::from(
+                        self.cache
+                            .freshness(&cache_entry, Some(package_name), None)
+                            .map_err(ErrorKind::Io)?,
+                    )
+                }
+            }
             Connectivity::Offline => CacheControl::AllowStale,
         };
 
@@ -530,11 +549,11 @@ impl RegistryClient {
 
         match result {
             Ok(metadata) => Ok(SimpleMetadataSearchOutcome::Found(metadata)),
-            Err(err) => match err.into_kind() {
+            Err(err) => match err.kind() {
                 // The package could not be found in the remote index.
-                ErrorKind::WrappedReqwestError(url, err) => {
+                ErrorKind::WrappedReqwestError(.., reqwest_err) => {
-                    let Some(status_code) = err.status() else {
+                    let Some(status_code) = reqwest_err.status() else {
-                        return Err(ErrorKind::WrappedReqwestError(url, err).into());
+                        return Err(err);
                     };
                     let decision =
                         status_code_strategy.handle_status_code(status_code, index, capabilities);
@@ -543,7 +562,7 @@ impl RegistryClient {
                             status_code,
                             StatusCode::UNAUTHORIZED | StatusCode::FORBIDDEN
                         ) {
-                            return Err(ErrorKind::WrappedReqwestError(url, err).into());
+                            return Err(err);
                         }
                     }
                     Ok(SimpleMetadataSearchOutcome::from(decision))
@@ -555,7 +574,7 @@ impl RegistryClient {
                 // The package could not be found in the local index.
                 ErrorKind::FileNotFound(_) => Ok(SimpleMetadataSearchOutcome::NotFound),
 
-                err => Err(err.into()),
+                _ => Err(err),
             },
         }
     }
@@ -566,7 +585,7 @@ impl RegistryClient {
         package_name: &PackageName,
         url: &DisplaySafeUrl,
         cache_entry: &CacheEntry,
-        cache_control: CacheControl,
+        cache_control: CacheControl<'_>,
     ) -> Result<OwnedArchive<SimpleMetadata>, Error> {
         let simple_request = self
             .uncached_client(url)
@@ -682,30 +701,14 @@ impl RegistryClient {
 
                 let wheel = wheels.best_wheel();
 
-                let location = match &wheel.file.url {
+                let url = wheel.file.url.to_url().map_err(ErrorKind::InvalidUrl)?;
-                    FileLocation::RelativeUrl(base, url) => {
+                let location = if url.scheme() == "file" {
-                        let url = uv_pypi_types::base_url_join_relative(base, url)
+                    let path = url
-                            .map_err(ErrorKind::JoinRelativeUrl)?;
+                        .to_file_path()
-                        if url.scheme() == "file" {
+                        .map_err(|()| ErrorKind::NonFileUrl(url.clone()))?;
-                            let path = url
+                    WheelLocation::Path(path)
-                                .to_file_path()
+                } else {
-                                .map_err(|()| ErrorKind::NonFileUrl(url.clone()))?;
+                    WheelLocation::Url(url)
-                            WheelLocation::Path(path)
-                        } else {
-                            WheelLocation::Url(url)
-                        }
-                    }
-                    FileLocation::AbsoluteUrl(url) => {
-                        let url = url.to_url().map_err(ErrorKind::InvalidUrl)?;
-                        if url.scheme() == "file" {
-                            let path = url
-                                .to_file_path()
-                                .map_err(|()| ErrorKind::NonFileUrl(url.clone()))?;
-                            WheelLocation::Path(path)
-                        } else {
-                            WheelLocation::Url(url)
-                        }
-                    }
                 };
 
                 match location {
@@ -794,11 +797,17 @@ impl RegistryClient {
                 format!("{}.msgpack", filename.cache_key()),
             );
             let cache_control = match self.connectivity {
-                Connectivity::Online => CacheControl::from(
+                Connectivity::Online => {
-                    self.cache
+                    if let Some(header) = self.index_urls.artifact_cache_control_for(index) {
-                        .freshness(&cache_entry, Some(&filename.name), None)
+                        CacheControl::Override(header)
-                        .map_err(ErrorKind::Io)?,
+                    } else {
-                ),
+                        CacheControl::from(
+                            self.cache
+                                .freshness(&cache_entry, Some(&filename.name), None)
+                                .map_err(ErrorKind::Io)?,
+                        )
+                    }
+                }
                 Connectivity::Offline => CacheControl::AllowStale,
             };
 
@@ -864,11 +873,25 @@ impl RegistryClient {
             format!("{}.msgpack", filename.cache_key()),
         );
         let cache_control = match self.connectivity {
-            Connectivity::Online => CacheControl::from(
+            Connectivity::Online => {
-                self.cache
+                if let Some(index) = index {
-                    .freshness(&cache_entry, Some(&filename.name), None)
+                    if let Some(header) = self.index_urls.artifact_cache_control_for(index) {
-                    .map_err(ErrorKind::Io)?,
+                        CacheControl::Override(header)
-            ),
+                    } else {
+                        CacheControl::from(
+                            self.cache
+                                .freshness(&cache_entry, Some(&filename.name), None)
+                                .map_err(ErrorKind::Io)?,
+                        )
+                    }
+                } else {
+                    CacheControl::from(
+                        self.cache
+                            .freshness(&cache_entry, Some(&filename.name), None)
+                            .map_err(ErrorKind::Io)?,
+                    )
+                }
+            }
             Connectivity::Offline => CacheControl::AllowStale,
         };
 
@@ -1233,17 +1256,18 @@ mod tests {
 
     use url::Url;
     use uv_normalize::PackageName;
-    use uv_pypi_types::{JoinRelativeError, SimpleJson};
+    use uv_pypi_types::SimpleJson;
     use uv_redacted::DisplaySafeUrl;
 
     use crate::{SimpleMetadata, SimpleMetadatum, html::SimpleHtml};
 
+    use crate::RegistryClientBuilder;
     use uv_cache::Cache;
+    use uv_distribution_types::{FileLocation, ToUrlError};
+    use uv_small_str::SmallString;
     use wiremock::matchers::{basic_auth, method, path_regex};
     use wiremock::{Mock, MockServer, ResponseTemplate};
 
-    use crate::RegistryClientBuilder;
-
     type Error = Box<dyn std::error::Error>;
 
     async fn start_test_server(username: &'static str, password: &'static str) -> MockServer {
@@ -1416,44 +1440,6 @@ mod tests {
         Ok(())
     }
 
-    #[tokio::test]
-    async fn test_redirect_preserve_fragment() -> Result<(), Error> {
-        let redirect_server = MockServer::start().await;
-
-        // Configure the redirect server to respond with a 307 with a relative URL.
-        Mock::given(method("GET"))
-            .respond_with(ResponseTemplate::new(307).insert_header("Location", "/foo".to_string()))
-            .mount(&redirect_server)
-            .await;
-
-        Mock::given(method("GET"))
-            .and(path_regex("/foo"))
-            .respond_with(ResponseTemplate::new(200))
-            .mount(&redirect_server)
-            .await;
-
-        let cache = Cache::temp()?;
-        let registry_client = RegistryClientBuilder::new(cache).build();
-        let client = registry_client.cached_client().uncached();
-
-        let mut url = DisplaySafeUrl::parse(&redirect_server.uri())?;
-        url.set_fragment(Some("fragment"));
-
-        assert_eq!(
-            client
-                .for_host(&url)
-                .get(Url::from(url.clone()))
-                .send()
-                .await?
-                .url()
-                .to_string(),
-            format!("{}/foo#fragment", redirect_server.uri()),
-            "Requests should preserve fragment"
-        );
-
-        Ok(())
-    }
-
     #[test]
     fn ignore_failing_files() {
         // 1.7.7 has an invalid requires-python field (double comma), 1.7.8 is valid
@@ -1507,7 +1493,7 @@ mod tests {
     ///
     /// See: <https://github.com/astral-sh/uv/issues/1388>
     #[test]
-    fn relative_urls_code_artifact() -> Result<(), JoinRelativeError> {
+    fn relative_urls_code_artifact() -> Result<(), ToUrlError> {
         let text = r#"
         <!DOCTYPE html>
         <html>
@@ -1530,12 +1516,13 @@ mod tests {
         let base = DisplaySafeUrl::parse("https://account.d.codeartifact.us-west-2.amazonaws.com/pypi/shared-packages-pypi/simple/flask")
             .unwrap();
         let SimpleHtml { base, files } = SimpleHtml::parse(text, &base).unwrap();
+        let base = SmallString::from(base.as_str());
 
         // Test parsing of the file urls
         let urls = files
-            .iter()
+            .into_iter()
-            .map(|file| uv_pypi_types::base_url_join_relative(base.as_url().as_str(), &file.url))
+            .map(|file| FileLocation::new(file.url, &base).to_url())
-            .collect::<Result<Vec<_>, JoinRelativeError>>()?;
+            .collect::<Result<Vec<_>, _>>()?;
         let urls = urls
             .iter()
             .map(DisplaySafeUrl::to_string)

crates/uv-configuration/Cargo.toml

@@ -27,7 +27,9 @@ uv-pep440 = { workspace = true }
 uv-pep508 = { workspace = true, features = ["schemars"] }
 uv-platform-tags = { workspace = true }
 uv-static = { workspace = true }
+uv-warnings = { workspace = true }
 
+bitflags = { workspace = true }
 clap = { workspace = true, features = ["derive"], optional = true }
 either = { workspace = true }
 fs-err = { workspace = true }

crates/uv-configuration/src/config_settings.rs

@@ -3,6 +3,7 @@ use std::{
     str::FromStr,
 };
 use uv_cache_key::CacheKeyHasher;
+use uv_normalize::PackageName;
 
 #[derive(Debug, Clone)]
 pub struct ConfigSettingEntry {
@@ -28,6 +29,32 @@ impl FromStr for ConfigSettingEntry {
     }
 }
 
+#[derive(Debug, Clone)]
+pub struct ConfigSettingPackageEntry {
+    /// The package name to apply the setting to.
+    package: PackageName,
+    /// The config setting entry.
+    setting: ConfigSettingEntry,
+}
+
+impl FromStr for ConfigSettingPackageEntry {
+    type Err = String;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        let Some((package_str, config_str)) = s.split_once(':') else {
+            return Err(format!(
+                "Invalid config setting: {s} (expected `PACKAGE:KEY=VALUE`)"
+            ));
+        };
+
+        let package = PackageName::from_str(package_str.trim())
+            .map_err(|e| format!("Invalid package name: {e}"))?;
+        let setting = ConfigSettingEntry::from_str(config_str)?;
+
+        Ok(Self { package, setting })
+    }
+}
+
 #[derive(Debug, Clone, PartialEq, Eq)]
 #[cfg_attr(feature = "schemars", derive(schemars::JsonSchema), schemars(untagged))]
 enum ConfigSettingValue {
@@ -212,6 +239,111 @@ impl<'de> serde::Deserialize<'de> for ConfigSettings {
     }
 }
 
+/// Settings to pass to PEP 517 build backends on a per-package basis.
+#[derive(Debug, Default, Clone, PartialEq, Eq)]
+#[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
+pub struct PackageConfigSettings(BTreeMap<PackageName, ConfigSettings>);
+
+impl FromIterator<ConfigSettingPackageEntry> for PackageConfigSettings {
+    fn from_iter<T: IntoIterator<Item = ConfigSettingPackageEntry>>(iter: T) -> Self {
+        let mut package_configs: BTreeMap<PackageName, Vec<ConfigSettingEntry>> = BTreeMap::new();
+
+        for entry in iter {
+            package_configs
+                .entry(entry.package)
+                .or_default()
+                .push(entry.setting);
+        }
+
+        let configs = package_configs
+            .into_iter()
+            .map(|(package, entries)| (package, entries.into_iter().collect()))
+            .collect();
+
+        Self(configs)
+    }
+}
+
+impl PackageConfigSettings {
+    /// Returns the config settings for a specific package, if any.
+    pub fn get(&self, package: &PackageName) -> Option<&ConfigSettings> {
+        self.0.get(package)
+    }
+
+    /// Returns `true` if there are no package-specific settings.
+    pub fn is_empty(&self) -> bool {
+        self.0.is_empty()
+    }
+
+    /// Merge two sets of package config settings, with the values in `self` taking precedence.
+    #[must_use]
+    pub fn merge(mut self, other: PackageConfigSettings) -> PackageConfigSettings {
+        for (package, settings) in other.0 {
+            match self.0.entry(package) {
+                Entry::Vacant(vacant) => {
+                    vacant.insert(settings);
+                }
+                Entry::Occupied(mut occupied) => {
+                    let merged = occupied.get().clone().merge(settings);
+                    occupied.insert(merged);
+                }
+            }
+        }
+        self
+    }
+}
+
+impl uv_cache_key::CacheKey for PackageConfigSettings {
+    fn cache_key(&self, state: &mut CacheKeyHasher) {
+        for (package, settings) in &self.0 {
+            package.to_string().cache_key(state);
+            settings.cache_key(state);
+        }
+    }
+}
+
+impl serde::Serialize for PackageConfigSettings {
+    fn serialize<S: serde::Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error> {
+        use serde::ser::SerializeMap;
+
+        let mut map = serializer.serialize_map(Some(self.0.len()))?;
+        for (key, value) in &self.0 {
+            map.serialize_entry(&key.to_string(), value)?;
+        }
+        map.end()
+    }
+}
+
+impl<'de> serde::Deserialize<'de> for PackageConfigSettings {
+    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
+        struct Visitor;
+
+        impl<'de> serde::de::Visitor<'de> for Visitor {
+            type Value = PackageConfigSettings;
+
+            fn expecting(&self, formatter: &mut std::fmt::Formatter) -> std::fmt::Result {
+                formatter.write_str("a map from package name to config settings")
+            }
+
+            fn visit_map<A: serde::de::MapAccess<'de>>(
+                self,
+                mut map: A,
+            ) -> Result<Self::Value, A::Error> {
+                let mut config = BTreeMap::default();
+                while let Some((key, value)) = map.next_entry::<String, ConfigSettings>()? {
+                    let package = PackageName::from_str(&key).map_err(|e| {
+                        serde::de::Error::custom(format!("Invalid package name: {e}"))
+                    })?;
+                    config.insert(package, value);
+                }
+                Ok(PackageConfigSettings(config))
+            }
+        }
+
+        deserializer.deserialize_map(Visitor)
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -291,4 +423,56 @@ mod tests {
         );
         assert_eq!(settings.escape_for_python(), r#"{"key":"val\\1 {}value"}"#);
     }
+
+    #[test]
+    fn parse_config_setting_package_entry() {
+        // Test valid parsing
+        let entry = ConfigSettingPackageEntry::from_str("numpy:editable_mode=compat").unwrap();
+        assert_eq!(entry.package.as_ref(), "numpy");
+        assert_eq!(entry.setting.key, "editable_mode");
+        assert_eq!(entry.setting.value, "compat");
+
+        // Test with package name containing hyphens
+        let entry = ConfigSettingPackageEntry::from_str("my-package:some_key=value").unwrap();
+        assert_eq!(entry.package.as_ref(), "my-package");
+        assert_eq!(entry.setting.key, "some_key");
+        assert_eq!(entry.setting.value, "value");
+
+        // Test with spaces around values
+        let entry = ConfigSettingPackageEntry::from_str("  numpy : key = value  ").unwrap();
+        assert_eq!(entry.package.as_ref(), "numpy");
+        assert_eq!(entry.setting.key, "key");
+        assert_eq!(entry.setting.value, "value");
+    }
+
+    #[test]
+    fn collect_config_settings_package() {
+        let settings: PackageConfigSettings = vec![
+            ConfigSettingPackageEntry::from_str("numpy:editable_mode=compat").unwrap(),
+            ConfigSettingPackageEntry::from_str("numpy:another_key=value").unwrap(),
+            ConfigSettingPackageEntry::from_str("scipy:build_option=fast").unwrap(),
+        ]
+        .into_iter()
+        .collect();
+
+        let numpy_settings = settings
+            .get(&PackageName::from_str("numpy").unwrap())
+            .unwrap();
+        assert_eq!(
+            numpy_settings.0.get("editable_mode"),
+            Some(&ConfigSettingValue::String("compat".to_string()))
+        );
+        assert_eq!(
+            numpy_settings.0.get("another_key"),
+            Some(&ConfigSettingValue::String("value".to_string()))
+        );
+
+        let scipy_settings = settings
+            .get(&PackageName::from_str("scipy").unwrap())
+            .unwrap();
+        assert_eq!(
+            scipy_settings.0.get("build_option"),
+            Some(&ConfigSettingValue::String("fast".to_string()))
+        );
+    }
 }

crates/uv-configuration/src/dependency_groups.rs

@@ -186,6 +186,18 @@ impl DependencyGroupsInner {
         self.include.names().chain(&self.exclude)
     }
 
+    /// Returns an iterator over all groups that are included in the specification,
+    /// assuming `all_names` is an iterator over all groups.
+    pub fn group_names<'a, Names>(
+        &'a self,
+        all_names: Names,
+    ) -> impl Iterator<Item = &'a GroupName> + 'a
+    where
+        Names: Iterator<Item = &'a GroupName> + 'a,
+    {
+        all_names.filter(move |name| self.contains(name))
+    }
+
     /// Iterate over all groups the user explicitly asked for on the CLI
     pub fn explicit_names(&self) -> impl Iterator<Item = &GroupName> {
         let DependencyGroupsHistory {

crates/uv-configuration/src/extras.rs

@@ -155,7 +155,8 @@ impl ExtrasSpecificationInner {
         self.include.names().chain(&self.exclude)
     }
 
-    /// Returns `true` if the specification includes the given extra.
+    /// Returns an iterator over all extras that are included in the specification,
+    /// assuming `all_names` is an iterator over all extras.
     pub fn extra_names<'a, Names>(
         &'a self,
         all_names: Names,

crates/uv-configuration/src/name_specifiers.rs

@@ -1,4 +1,6 @@
-use std::{borrow::Cow, str::FromStr};
+#[cfg(feature = "schemars")]
+use std::borrow::Cow;
+use std::str::FromStr;
 
 use uv_pep508::PackageName;
 

crates/uv-configuration/src/preview.rs

@@ -1,37 +1,250 @@
-use std::fmt::{Display, Formatter};
+use std::{
+    fmt::{Display, Formatter},
+    str::FromStr,
+};
+
+use thiserror::Error;
+use uv_warnings::warn_user_once;
+
+bitflags::bitflags! {
+    #[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
+    pub struct PreviewFeatures: u32 {
+        const PYTHON_INSTALL_DEFAULT = 1 << 0;
+        const PYTHON_UPGRADE = 1 << 1;
+        const JSON_OUTPUT = 1 << 2;
+        const PYLOCK = 1 << 3;
+        const ADD_BOUNDS = 1 << 4;
+        const EXTRA_BUILD_DEPENDENCIES = 1 << 5;
+    }
+}
+
+impl PreviewFeatures {
+    /// Returns the string representation of a single preview feature flag.
+    ///
+    /// Panics if given a combination of flags.
+    fn flag_as_str(self) -> &'static str {
+        match self {
+            Self::PYTHON_INSTALL_DEFAULT => "python-install-default",
+            Self::PYTHON_UPGRADE => "python-upgrade",
+            Self::JSON_OUTPUT => "json-output",
+            Self::PYLOCK => "pylock",
+            Self::ADD_BOUNDS => "add-bounds",
+            Self::EXTRA_BUILD_DEPENDENCIES => "extra-build-dependencies",
+            _ => panic!("`flag_as_str` can only be used for exactly one feature flag"),
+        }
+    }
+}
+
+impl Display for PreviewFeatures {
+    fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {
+        if self.is_empty() {
+            write!(f, "none")
+        } else {
+            let features: Vec<&str> = self.iter().map(PreviewFeatures::flag_as_str).collect();
+            write!(f, "{}", features.join(","))
+        }
+    }
+}
+
+#[derive(Debug, Error, Clone)]
+pub enum PreviewFeaturesParseError {
+    #[error("Empty string in preview features: {0}")]
+    Empty(String),
+}
+
+impl FromStr for PreviewFeatures {
+    type Err = PreviewFeaturesParseError;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        let mut flags = PreviewFeatures::empty();
+
+        for part in s.split(',') {
+            let part = part.trim();
+            if part.is_empty() {
+                return Err(PreviewFeaturesParseError::Empty(
+                    "Empty string in preview features".to_string(),
+                ));
+            }
+
+            let flag = match part {
+                "python-install-default" => Self::PYTHON_INSTALL_DEFAULT,
+                "python-upgrade" => Self::PYTHON_UPGRADE,
+                "json-output" => Self::JSON_OUTPUT,
+                "pylock" => Self::PYLOCK,
+                "add-bounds" => Self::ADD_BOUNDS,
+                "extra-build-dependencies" => Self::EXTRA_BUILD_DEPENDENCIES,
+                _ => {
+                    warn_user_once!("Unknown preview feature: `{part}`");
+                    continue;
+                }
+            };
+
+            flags |= flag;
+        }
+
+        Ok(flags)
+    }
+}
 
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub enum PreviewMode {
+pub struct Preview {
-    #[default]
+    flags: PreviewFeatures,
-    Disabled,
-    Enabled,
 }
 
-impl PreviewMode {
+impl Preview {
-    pub fn is_enabled(&self) -> bool {
+    pub fn new(flags: PreviewFeatures) -> Self {
-        matches!(self, Self::Enabled)
+        Self { flags }
     }
 
-    pub fn is_disabled(&self) -> bool {
+    pub fn all() -> Self {
-        matches!(self, Self::Disabled)
+        Self::new(PreviewFeatures::all())
     }
-}
 
-impl From<bool> for PreviewMode {
+    pub fn from_args(
-    fn from(version: bool) -> Self {
+        preview: bool,
-        if version {
+        no_preview: bool,
-            PreviewMode::Enabled
+        preview_features: &[PreviewFeatures],
-        } else {
+    ) -> Self {
-            PreviewMode::Disabled
+        if no_preview {
+            return Self::default();
         }
+
+        if preview {
+            return Self::all();
+        }
+
+        let mut flags = PreviewFeatures::empty();
+
+        for features in preview_features {
+            flags |= *features;
+        }
+
+        Self { flags }
+    }
+
+    pub fn is_enabled(&self, flag: PreviewFeatures) -> bool {
+        self.flags.contains(flag)
     }
 }
 
-impl Display for PreviewMode {
+impl Display for Preview {
     fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {
-        match self {
+        if self.flags.is_empty() {
-            Self::Disabled => write!(f, "disabled"),
+            write!(f, "disabled")
-            Self::Enabled => write!(f, "enabled"),
+        } else if self.flags == PreviewFeatures::all() {
+            write!(f, "enabled")
+        } else {
+            write!(f, "{}", self.flags)
         }
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_preview_features_from_str() {
+        // Test single feature
+        let features = PreviewFeatures::from_str("python-install-default").unwrap();
+        assert_eq!(features, PreviewFeatures::PYTHON_INSTALL_DEFAULT);
+
+        // Test multiple features
+        let features = PreviewFeatures::from_str("python-upgrade,json-output").unwrap();
+        assert!(features.contains(PreviewFeatures::PYTHON_UPGRADE));
+        assert!(features.contains(PreviewFeatures::JSON_OUTPUT));
+        assert!(!features.contains(PreviewFeatures::PYLOCK));
+
+        // Test with whitespace
+        let features = PreviewFeatures::from_str("pylock , add-bounds").unwrap();
+        assert!(features.contains(PreviewFeatures::PYLOCK));
+        assert!(features.contains(PreviewFeatures::ADD_BOUNDS));
+
+        // Test empty string error
+        assert!(PreviewFeatures::from_str("").is_err());
+        assert!(PreviewFeatures::from_str("pylock,").is_err());
+        assert!(PreviewFeatures::from_str(",pylock").is_err());
+
+        // Test unknown feature (should be ignored with warning)
+        let features = PreviewFeatures::from_str("unknown-feature,pylock").unwrap();
+        assert!(features.contains(PreviewFeatures::PYLOCK));
+        assert_eq!(features.bits().count_ones(), 1);
+    }
+
+    #[test]
+    fn test_preview_features_display() {
+        // Test empty
+        let features = PreviewFeatures::empty();
+        assert_eq!(features.to_string(), "none");
+
+        // Test single feature
+        let features = PreviewFeatures::PYTHON_INSTALL_DEFAULT;
+        assert_eq!(features.to_string(), "python-install-default");
+
+        // Test multiple features
+        let features = PreviewFeatures::PYTHON_UPGRADE | PreviewFeatures::JSON_OUTPUT;
+        assert_eq!(features.to_string(), "python-upgrade,json-output");
+    }
+
+    #[test]
+    fn test_preview_display() {
+        // Test disabled
+        let preview = Preview::default();
+        assert_eq!(preview.to_string(), "disabled");
+
+        // Test enabled (all features)
+        let preview = Preview::all();
+        assert_eq!(preview.to_string(), "enabled");
+
+        // Test specific features
+        let preview = Preview::new(PreviewFeatures::PYTHON_UPGRADE | PreviewFeatures::PYLOCK);
+        assert_eq!(preview.to_string(), "python-upgrade,pylock");
+    }
+
+    #[test]
+    fn test_preview_from_args() {
+        // Test no_preview
+        let preview = Preview::from_args(true, true, &[]);
+        assert_eq!(preview.to_string(), "disabled");
+
+        // Test preview (all features)
+        let preview = Preview::from_args(true, false, &[]);
+        assert_eq!(preview.to_string(), "enabled");
+
+        // Test specific features
+        let features = vec![
+            PreviewFeatures::PYTHON_UPGRADE,
+            PreviewFeatures::JSON_OUTPUT,
+        ];
+        let preview = Preview::from_args(false, false, &features);
+        assert!(preview.is_enabled(PreviewFeatures::PYTHON_UPGRADE));
+        assert!(preview.is_enabled(PreviewFeatures::JSON_OUTPUT));
+        assert!(!preview.is_enabled(PreviewFeatures::PYLOCK));
+    }
+
+    #[test]
+    fn test_as_str_single_flags() {
+        assert_eq!(
+            PreviewFeatures::PYTHON_INSTALL_DEFAULT.flag_as_str(),
+            "python-install-default"
+        );
+        assert_eq!(
+            PreviewFeatures::PYTHON_UPGRADE.flag_as_str(),
+            "python-upgrade"
+        );
+        assert_eq!(PreviewFeatures::JSON_OUTPUT.flag_as_str(), "json-output");
+        assert_eq!(PreviewFeatures::PYLOCK.flag_as_str(), "pylock");
+        assert_eq!(PreviewFeatures::ADD_BOUNDS.flag_as_str(), "add-bounds");
+        assert_eq!(
+            PreviewFeatures::EXTRA_BUILD_DEPENDENCIES.flag_as_str(),
+            "extra-build-dependencies"
+        );
+    }
+
+    #[test]
+    #[should_panic(expected = "`flag_as_str` can only be used for exactly one feature flag")]
+    fn test_as_str_multiple_flags_panics() {
+        let features = PreviewFeatures::PYTHON_UPGRADE | PreviewFeatures::JSON_OUTPUT;
+        let _ = features.flag_as_str();
+    }
+}

crates/uv-configuration/src/project_build_backend.rs

@@ -4,11 +4,7 @@
 #[cfg_attr(feature = "clap", derive(clap::ValueEnum))]
 #[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
 pub enum ProjectBuildBackend {
-    #[cfg_attr(
+    #[cfg_attr(feature = "clap", value(alias = "uv-build", alias = "uv_build"))]
-        feature = "clap",
-        value(alias = "uv-build", alias = "uv_build", hide = true)
-    )]
-    #[cfg_attr(feature = "schemars", schemars(skip))]
     /// Use uv as the project build backend.
     Uv,
     #[serde(alias = "hatchling")]

crates/uv-configuration/src/required_version.rs

@@ -1,5 +1,6 @@
-use std::str::FromStr;
+#[cfg(feature = "schemars")]
-use std::{borrow::Cow, fmt::Formatter};
+use std::borrow::Cow;
+use std::{fmt::Formatter, str::FromStr};
 
 use uv_pep440::{Version, VersionSpecifier, VersionSpecifiers, VersionSpecifiersParseError};
 

crates/uv-configuration/src/target_triple.rs

@@ -33,7 +33,7 @@ pub enum TargetTriple {
     #[serde(rename = "i686-pc-windows-msvc")]
     I686PcWindowsMsvc,
 
-    /// An x86 Linux target. Equivalent to `x86_64-manylinux_2_17`.
+    /// An x86 Linux target. Equivalent to `x86_64-manylinux_2_28`.
     #[cfg_attr(feature = "clap", value(name = "x86_64-unknown-linux-gnu"))]
     #[serde(rename = "x86_64-unknown-linux-gnu")]
     #[serde(alias = "x8664-unknown-linux-gnu")]
@@ -56,7 +56,7 @@ pub enum TargetTriple {
     #[serde(alias = "x8664-apple-darwin")]
     X8664AppleDarwin,
 
-    /// An ARM64 Linux target. Equivalent to `aarch64-manylinux_2_17`.
+    /// An ARM64 Linux target. Equivalent to `aarch64-manylinux_2_28`.
     #[cfg_attr(feature = "clap", value(name = "aarch64-unknown-linux-gnu"))]
     #[serde(rename = "aarch64-unknown-linux-gnu")]
     Aarch64UnknownLinuxGnu,
@@ -227,7 +227,7 @@ pub enum TargetTriple {
     #[serde(alias = "aarch64-manylinux240")]
     Aarch64Manylinux240,
 
-    /// A wasm32 target using the the Pyodide 2024 platform. Meant for use with Python 3.12.
+    /// A wasm32 target using the Pyodide 2024 platform. Meant for use with Python 3.12.
     #[cfg_attr(feature = "clap", value(name = "wasm32-pyodide2024"))]
     Wasm32Pyodide2024,
 }
@@ -240,7 +240,7 @@ impl TargetTriple {
             Self::Linux | Self::X8664UnknownLinuxGnu => Platform::new(
                 Os::Manylinux {
                     major: 2,
-                    minor: 17,
+                    minor: 28,
                 },
                 Arch::X86_64,
             ),
@@ -262,7 +262,7 @@ impl TargetTriple {
             Self::Aarch64UnknownLinuxGnu => Platform::new(
                 Os::Manylinux {
                     major: 2,
-                    minor: 17,
+                    minor: 28,
                 },
                 Arch::Aarch64,
             ),

crates/uv-configuration/src/trusted_host.rs

@@ -1,5 +1,7 @@
 use serde::{Deserialize, Deserializer};
-use std::{borrow::Cow, str::FromStr};
+#[cfg(feature = "schemars")]
+use std::borrow::Cow;
+use std::str::FromStr;
 use url::Url;
 
 /// A host specification (wildcard, or host, with optional scheme and/or port) for which

crates/uv-console/Cargo.toml

@@ -1,8 +1,14 @@
 [package]
 name = "uv-console"
 version = "0.0.1"
-edition = { workspace = true }
 description = "Utilities for interacting with the terminal"
+edition = { workspace = true }
+rust-version = { workspace = true }
+homepage = { workspace = true }
+documentation = { workspace = true }
+repository = { workspace = true }
+authors = { workspace = true }
+license = { workspace = true }
 
 [lib]
 doctest = false

crates/uv-console/src/lib.rs

@@ -6,6 +6,25 @@ use std::{cmp::Ordering, iter};
 /// This is a slimmed-down version of `dialoguer::Confirm`, with the post-confirmation report
 /// enabled.
 pub fn confirm(message: &str, term: &Term, default: bool) -> std::io::Result<bool> {
+    confirm_inner(message, None, term, default)
+}
+
+/// Prompt the user for confirmation in the given [`Term`], with a hint.
+pub fn confirm_with_hint(
+    message: &str,
+    hint: &str,
+    term: &Term,
+    default: bool,
+) -> std::io::Result<bool> {
+    confirm_inner(message, Some(hint), term, default)
+}
+
+fn confirm_inner(
+    message: &str,
+    hint: Option<&str>,
+    term: &Term,
+    default: bool,
+) -> std::io::Result<bool> {
     let prompt = format!(
         "{} {} {} {} {}",
         style("?".to_string()).for_stderr().yellow(),
@@ -18,6 +37,13 @@ pub fn confirm(message: &str, term: &Term, default: bool) -> std::io::Result<boo
     );
 
     term.write_str(&prompt)?;
+    if let Some(hint) = hint {
+        term.write_str(&format!(
+            "\n\n{}{} {hint}",
+            style("hint").for_stderr().bold().cyan(),
+            style(":").for_stderr().bold()
+        ))?;
+    }
     term.hide_cursor()?;
     term.flush()?;
 
@@ -56,7 +82,14 @@ pub fn confirm(message: &str, term: &Term, default: bool) -> std::io::Result<boo
             .cyan(),
     );
 
-    term.clear_line()?;
+    if hint.is_some() {
+        term.clear_last_lines(2)?;
+        // It's not clear why we need to clear to the end of the screen here, but it fixes lingering
+        // display of the hint on `bash` (the issue did not reproduce on `zsh`).
+        term.clear_to_end_of_screen()?;
+    } else {
+        term.clear_line()?;
+    }
     term.write_line(&report)?;
     term.show_cursor()?;
     term.flush()?;

crates/uv-dev/src/compile.rs

@@ -4,7 +4,7 @@ use clap::Parser;
 use tracing::info;
 
 use uv_cache::{Cache, CacheArgs};
-use uv_configuration::{Concurrency, PreviewMode};
+use uv_configuration::{Concurrency, Preview};
 use uv_python::{EnvironmentPreference, PythonEnvironment, PythonRequest};
 
 #[derive(Parser)]
@@ -26,7 +26,7 @@ pub(crate) async fn compile(args: CompileArgs) -> anyhow::Result<()> {
             &PythonRequest::default(),
             EnvironmentPreference::OnlyVirtual,
             &cache,
-            PreviewMode::Disabled,
+            Preview::default(),
         )?
         .into_interpreter();
         interpreter.sys_executable().to_path_buf()

crates/uv-dev/src/generate_options_reference.rs

@@ -402,6 +402,11 @@ mod tests {
 
     #[test]
     fn test_generate_options_reference() -> Result<()> {
+        // Skip this test in CI to avoid redundancy with the dedicated CI job
+        if env::var_os(EnvVars::CI).is_some() {
+            return Ok(());
+        }
+
         let mode = if env::var(EnvVars::UV_UPDATE_SCHEMA).as_deref() == Ok("1") {
             Mode::Write
         } else {

crates/uv-dev/src/generate_sysconfig_mappings.rs

@@ -11,7 +11,7 @@ use crate::ROOT_DIR;
 use crate::generate_all::Mode;
 
 /// Contains current supported targets
-const TARGETS_YML_URL: &str = "https://raw.githubusercontent.com/astral-sh/python-build-standalone/refs/tags/20250702/cpython-unix/targets.yml";
+const TARGETS_YML_URL: &str = "https://raw.githubusercontent.com/astral-sh/python-build-standalone/refs/tags/20250723/cpython-unix/targets.yml";
 
 #[derive(clap::Args)]
 pub(crate) struct Args {
@@ -130,7 +130,7 @@ async fn generate() -> Result<String> {
     output.push_str("//! DO NOT EDIT\n");
     output.push_str("//!\n");
     output.push_str("//! Generated with `cargo run dev generate-sysconfig-metadata`\n");
-    output.push_str("//! Targets from <https://github.com/astral-sh/python-build-standalone/blob/20250702/cpython-unix/targets.yml>\n");
+    output.push_str("//! Targets from <https://github.com/astral-sh/python-build-standalone/blob/20250723/cpython-unix/targets.yml>\n");
     output.push_str("//!\n");
 
     // Disable clippy/fmt

crates/uv-dev/src/main.rs

@@ -6,7 +6,7 @@ use std::time::Instant;
 
 use anstream::eprintln;
 use owo_colors::OwoColorize;
-use tracing::debug;
+use tracing::{debug, trace};
 use tracing_durations_export::DurationsLayerBuilder;
 use tracing_durations_export::plot::PlotConfig;
 use tracing_subscriber::filter::Directive;
@@ -68,6 +68,7 @@ async fn main() -> ExitCode {
     let result = run().await;
     debug!("Took {}ms", start.elapsed().as_millis());
     if let Err(err) = result {
+        trace!("Error trace: {err:?}");
         eprintln!("{}", "uv-dev failed".red().bold());
         for err in err.chain() {
             eprintln!("  {}: {}", "Caused by".red().bold(), err.to_string().trim());

crates/uv-dirs/Cargo.toml

@@ -24,5 +24,5 @@ fs-err = { workspace = true }
 tracing = { workspace = true }
 
 [dev-dependencies]
-assert_fs = { version = "1.1.2" }
+assert_fs = { workspace = true }
 indoc = { workspace = true }

crates/uv-dispatch/src/lib.rs

@@ -17,11 +17,12 @@ use uv_build_frontend::{SourceBuild, SourceBuildContext};
 use uv_cache::Cache;
 use uv_client::RegistryClient;
 use uv_configuration::{
-    BuildKind, BuildOptions, ConfigSettings, Constraints, IndexStrategy, PreviewMode, Reinstall,
+    BuildKind, BuildOptions, ConfigSettings, Constraints, IndexStrategy, PackageConfigSettings,
-    SourceStrategy,
+    Preview, Reinstall, SourceStrategy,
 };
 use uv_configuration::{BuildOutput, Concurrency};
 use uv_distribution::DistributionDatabase;
+use uv_distribution::ExtraBuildRequires;
 use uv_distribution_filename::DistFilename;
 use uv_distribution_types::{
     CachedDist, DependencyMetadata, Identifier, IndexCapabilities, IndexLocations,
@@ -88,17 +89,19 @@ pub struct BuildDispatch<'a> {
     shared_state: SharedState,
     dependency_metadata: &'a DependencyMetadata,
     build_isolation: BuildIsolation<'a>,
+    extra_build_requires: &'a ExtraBuildRequires,
     link_mode: uv_install_wheel::LinkMode,
     build_options: &'a BuildOptions,
     config_settings: &'a ConfigSettings,
+    config_settings_package: &'a PackageConfigSettings,
     hasher: &'a HashStrategy,
-    exclude_newer: Option<ExcludeNewer>,
+    exclude_newer: ExcludeNewer,
     source_build_context: SourceBuildContext,
     build_extra_env_vars: FxHashMap<OsString, OsString>,
     sources: SourceStrategy,
     workspace_cache: WorkspaceCache,
     concurrency: Concurrency,
-    preview: PreviewMode,
+    preview: Preview,
 }
 
 impl<'a> BuildDispatch<'a> {
@@ -113,15 +116,17 @@ impl<'a> BuildDispatch<'a> {
         shared_state: SharedState,
         index_strategy: IndexStrategy,
         config_settings: &'a ConfigSettings,
+        config_settings_package: &'a PackageConfigSettings,
         build_isolation: BuildIsolation<'a>,
+        extra_build_requires: &'a ExtraBuildRequires,
         link_mode: uv_install_wheel::LinkMode,
         build_options: &'a BuildOptions,
         hasher: &'a HashStrategy,
-        exclude_newer: Option<ExcludeNewer>,
+        exclude_newer: ExcludeNewer,
         sources: SourceStrategy,
         workspace_cache: WorkspaceCache,
         concurrency: Concurrency,
-        preview: PreviewMode,
+        preview: Preview,
     ) -> Self {
         Self {
             client,
@@ -134,7 +139,9 @@ impl<'a> BuildDispatch<'a> {
             dependency_metadata,
             index_strategy,
             config_settings,
+            config_settings_package,
             build_isolation,
+            extra_build_requires,
             link_mode,
             build_options,
             hasher,
@@ -168,7 +175,7 @@ impl<'a> BuildDispatch<'a> {
 impl BuildContext for BuildDispatch<'_> {
     type SourceDistBuilder = SourceBuild;
 
-    fn interpreter(&self) -> &Interpreter {
+    async fn interpreter(&self) -> &Interpreter {
         self.interpreter
     }
 
@@ -200,6 +207,10 @@ impl BuildContext for BuildDispatch<'_> {
         self.config_settings
     }
 
+    fn config_settings_package(&self) -> &PackageConfigSettings {
+        self.config_settings_package
+    }
+
     fn sources(&self) -> SourceStrategy {
         self.sources
     }
@@ -212,6 +223,10 @@ impl BuildContext for BuildDispatch<'_> {
         &self.workspace_cache
     }
 
+    fn extra_build_dependencies(&self) -> &uv_workspace::pyproject::ExtraBuildDependencies {
+        &self.extra_build_requires.extra_build_dependencies
+    }
+
     async fn resolve<'data>(
         &'data self,
         requirements: &'data [Requirement],
@@ -224,7 +239,7 @@ impl BuildContext for BuildDispatch<'_> {
         let resolver = Resolver::new(
             Manifest::simple(requirements.to_vec()).with_constraints(self.constraints.clone()),
             OptionsBuilder::new()
-                .exclude_newer(self.exclude_newer)
+                .exclude_newer(self.exclude_newer.clone())
                 .index_strategy(self.index_strategy)
                 .build_options(self.build_options.clone())
                 .flexibility(Flexibility::Fixed)
@@ -295,6 +310,8 @@ impl BuildContext for BuildDispatch<'_> {
             self.hasher,
             self.index_locations,
             self.config_settings,
+            self.config_settings_package,
+            self.extra_build_dependencies(),
             self.cache(),
             venv,
             tags,
@@ -418,6 +435,17 @@ impl BuildContext for BuildDispatch<'_> {
             build_stack.insert(dist.distribution_id());
         }
 
+        // Get package-specific config settings if available; otherwise, use global settings.
+        let config_settings = if let Some(name) = dist_name {
+            if let Some(package_settings) = self.config_settings_package.get(name) {
+                package_settings.clone().merge(self.config_settings.clone())
+            } else {
+                self.config_settings.clone()
+            }
+        } else {
+            self.config_settings.clone()
+        };
+
         let builder = SourceBuild::setup(
             source,
             subdirectory,
@@ -431,8 +459,9 @@ impl BuildContext for BuildDispatch<'_> {
             self.index_locations,
             sources,
             self.workspace_cache(),
-            self.config_settings.clone(),
+            config_settings,
             self.build_isolation,
+            self.extra_build_dependencies(),
             &build_stack,
             build_kind,
             self.build_extra_env_vars.clone(),

crates/uv-distribution-filename/Cargo.toml

@@ -29,4 +29,4 @@ smallvec = { workspace = true }
 thiserror = { workspace = true }
 
 [dev-dependencies]
-insta = { version = "1.40.0" }
+insta = { workspace = true }

crates/uv-distribution-types/src/buildable.rs

@@ -124,7 +124,10 @@ impl SourceUrl<'_> {
     pub fn is_editable(&self) -> bool {
         matches!(
             self,
-            Self::Directory(DirectorySourceUrl { editable: true, .. })
+            Self::Directory(DirectorySourceUrl {
+                editable: Some(true),
+                ..
+            })
         )
     }
 
@@ -210,7 +213,7 @@ impl<'a> From<&'a PathSourceDist> for PathSourceUrl<'a> {
 pub struct DirectorySourceUrl<'a> {
     pub url: &'a DisplaySafeUrl,
     pub install_path: Cow<'a, Path>,
-    pub editable: bool,
+    pub editable: Option<bool>,
 }
 
 impl std::fmt::Display for DirectorySourceUrl<'_> {

crates/uv-distribution-types/src/dependency_metadata.rs

@@ -30,21 +30,20 @@ impl DependencyMetadata {
 
         if let Some(version) = version {
             // If a specific version was requested, search for an exact match, then a global match.
-            let metadata = versions
+            let metadata = if let Some(metadata) = versions
                 .iter()
-                .find(|v| v.version.as_ref() == Some(version))
+                .find(|entry| entry.version.as_ref() == Some(version))
-                .inspect(|_| {
+            {
-                    debug!("Found dependency metadata entry for `{package}=={version}`");
+                debug!("Found dependency metadata entry for `{package}=={version}`");
-                })
+                metadata
-                .or_else(|| versions.iter().find(|v| v.version.is_none()))
+            } else if let Some(metadata) = versions.iter().find(|entry| entry.version.is_none()) {
-                .inspect(|_| {
+                debug!("Found global metadata entry for `{package}`");
-                    debug!("Found global metadata entry for `{package}`");
+                metadata
-                });
+            } else {
-            let Some(metadata) = metadata else {
                 warn!("No dependency metadata entry found for `{package}=={version}`");
                 return None;
             };
-            debug!("Found dependency metadata entry for `{package}=={version}`");
+
             Some(ResolutionMetadata {
                 name: metadata.name.clone(),
                 version: version.clone(),
@@ -65,6 +64,7 @@ impl DependencyMetadata {
                 return None;
             };
             debug!("Found dependency metadata entry for `{package}` (assuming: `{version}`)");
+
             Some(ResolutionMetadata {
                 name: metadata.name.clone(),
                 version,
@@ -86,7 +86,7 @@ impl DependencyMetadata {
 /// <https://packaging.python.org/specifications/core-metadata/>.
 #[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, PartialOrd, Ord)]
 #[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
-#[serde(rename_all = "kebab-case")]
+#[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct StaticMetadata {
     // Mandatory fields
     pub name: PackageName,

crates/uv-distribution-types/src/dist_error.rs

@@ -131,11 +131,11 @@ impl DerivationChain {
                         ));
                         let target = edge.source();
                         let extra = match edge.weight() {
-                            Edge::Optional(extra, ..) => Some(extra.clone()),
+                            Edge::Optional(extra) => Some(extra.clone()),
                             _ => None,
                         };
                         let group = match edge.weight() {
-                            Edge::Dev(group, ..) => Some(group.clone()),
+                            Edge::Dev(group) => Some(group.clone()),
                             _ => None,
                         };
                         queue.push_back((target, extra, group, path));

crates/uv-distribution-types/src/file.rs

@@ -57,10 +57,7 @@ impl File {
                 .map_err(|err| FileConversionError::RequiresPython(err.line().clone(), err))?,
             size: file.size,
             upload_time_utc_ms: file.upload_time.map(Timestamp::as_millisecond),
-            url: match split_scheme(&file.url) {
+            url: FileLocation::new(file.url, base),
-                Some(..) => FileLocation::AbsoluteUrl(UrlString::new(file.url)),
-                None => FileLocation::RelativeUrl(base.clone(), file.url),
-            },
             yanked: file.yanked,
         })
     }
@@ -77,6 +74,17 @@ pub enum FileLocation {
 }
 
 impl FileLocation {
+    /// Parse a relative or absolute URL on a page with a base URL.
+    ///
+    /// This follows the HTML semantics where a link on a page is resolved relative to the URL of
+    /// that page.
+    pub fn new(url: SmallString, base: &SmallString) -> Self {
+        match split_scheme(&url) {
+            Some(..) => FileLocation::AbsoluteUrl(UrlString::new(url)),
+            None => FileLocation::RelativeUrl(base.clone(), url),
+        }
+    }
+
     /// Convert this location to a URL.
     ///
     /// A relative URL has its base joined to the path. An absolute URL is
@@ -169,26 +177,6 @@ impl UrlString {
             .map(|(path, _)| Cow::Owned(UrlString(SmallString::from(path))))
             .unwrap_or(Cow::Borrowed(self))
     }
-
-    /// Return the [`UrlString`] (as a [`Cow`]) with trailing slash removed.
-    ///
-    /// This matches the semantics of [`Url::pop_if_empty`], which will not trim a trailing slash if
-    /// it's the only path segment, e.g., `https://example.com/` would be unchanged.
-    #[must_use]
-    pub fn without_trailing_slash(&self) -> Cow<'_, Self> {
-        self.as_ref()
-            .strip_suffix('/')
-            .filter(|path| {
-                // Only strip the trailing slash if there's _another_ trailing slash that isn't a
-                // part of the scheme.
-                path.split_once("://")
-                    .map(|(_scheme, rest)| rest)
-                    .unwrap_or(path)
-                    .contains('/')
-            })
-            .map(|path| Cow::Owned(UrlString(SmallString::from(path))))
-            .unwrap_or(Cow::Borrowed(self))
-    }
 }
 
 impl AsRef<str> for UrlString {
@@ -283,38 +271,4 @@ mod tests {
         );
         assert!(matches!(url.without_fragment(), Cow::Owned(_)));
     }
-
-    #[test]
-    fn without_trailing_slash() {
-        // Borrows a URL without a slash
-        let url = UrlString("https://example.com/path".into());
-        assert_eq!(&*url.without_trailing_slash(), &url);
-        assert!(matches!(url.without_trailing_slash(), Cow::Borrowed(_)));
-
-        // Removes the trailing slash if present on the URL
-        let url = UrlString("https://example.com/path/".into());
-        assert_eq!(
-            &*url.without_trailing_slash(),
-            &UrlString("https://example.com/path".into())
-        );
-        assert!(matches!(url.without_trailing_slash(), Cow::Owned(_)));
-
-        // Does not remove a trailing slash if it's the only path segment
-        let url = UrlString("https://example.com/".into());
-        assert_eq!(&*url.without_trailing_slash(), &url);
-        assert!(matches!(url.without_trailing_slash(), Cow::Borrowed(_)));
-
-        // Does not remove a trailing slash if it's the only path segment with a missing scheme
-        let url = UrlString("example.com/".into());
-        assert_eq!(&*url.without_trailing_slash(), &url);
-        assert!(matches!(url.without_trailing_slash(), Cow::Borrowed(_)));
-
-        // Removes the trailing slash when the scheme is missing
-        let url = UrlString("example.com/path/".into());
-        assert_eq!(
-            &*url.without_trailing_slash(),
-            &UrlString("example.com/path".into())
-        );
-        assert!(matches!(url.without_trailing_slash(), Cow::Owned(_)));
-    }
 }

crates/uv-distribution-types/src/index.rs

@@ -6,11 +6,23 @@ use thiserror::Error;
 
 use uv_auth::{AuthPolicy, Credentials};
 use uv_redacted::DisplaySafeUrl;
+use uv_small_str::SmallString;
 
 use crate::index_name::{IndexName, IndexNameError};
 use crate::origin::Origin;
 use crate::{IndexStatusCodeStrategy, IndexUrl, IndexUrlError, SerializableStatusCode};
 
+/// Cache control configuration for an index.
+#[derive(Debug, Clone, Hash, Eq, PartialEq, Ord, PartialOrd, Serialize, Deserialize, Default)]
+#[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
+#[serde(rename_all = "kebab-case")]
+pub struct IndexCacheControl {
+    /// Cache control header for Simple API requests.
+    pub api: Option<SmallString>,
+    /// Cache control header for file downloads.
+    pub files: Option<SmallString>,
+}
+
 #[derive(Debug, Clone, Hash, Eq, PartialEq, Ord, PartialOrd, Serialize, Deserialize)]
 #[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]
 #[serde(rename_all = "kebab-case")]
@@ -104,6 +116,19 @@ pub struct Index {
     /// ```
     #[serde(default)]
     pub ignore_error_codes: Option<Vec<SerializableStatusCode>>,
+    /// Cache control configuration for this index.
+    ///
+    /// When set, these headers will override the server's cache control headers
+    /// for both package metadata requests and artifact downloads.
+    ///
+    /// ```toml
+    /// [[tool.uv.index]]
+    /// name = "my-index"
+    /// url = "https://<omitted>/simple"
+    /// cache-control = { api = "max-age=600", files = "max-age=3600" }
+    /// ```
+    #[serde(default)]
+    pub cache_control: Option<IndexCacheControl>,
 }
 
 #[derive(
@@ -142,6 +167,7 @@ impl Index {
             publish_url: None,
             authenticate: AuthPolicy::default(),
             ignore_error_codes: None,
+            cache_control: None,
         }
     }
 
@@ -157,6 +183,7 @@ impl Index {
             publish_url: None,
             authenticate: AuthPolicy::default(),
             ignore_error_codes: None,
+            cache_control: None,
         }
     }
 
@@ -172,6 +199,7 @@ impl Index {
             publish_url: None,
             authenticate: AuthPolicy::default(),
             ignore_error_codes: None,
+            cache_control: None,
         }
     }
 
@@ -250,6 +278,7 @@ impl From<IndexUrl> for Index {
             publish_url: None,
             authenticate: AuthPolicy::default(),
             ignore_error_codes: None,
+            cache_control: None,
         }
     }
 }
@@ -273,6 +302,7 @@ impl FromStr for Index {
                     publish_url: None,
                     authenticate: AuthPolicy::default(),
                     ignore_error_codes: None,
+                    cache_control: None,
                 });
             }
         }
@@ -289,6 +319,7 @@ impl FromStr for Index {
             publish_url: None,
             authenticate: AuthPolicy::default(),
             ignore_error_codes: None,
+            cache_control: None,
         })
     }
 }
@@ -384,3 +415,55 @@ pub enum IndexSourceError {
     #[error("Index included a name, but the name was empty")]
     EmptyName,
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_index_cache_control_headers() {
+        // Test that cache control headers are properly parsed from TOML
+        let toml_str = r#"
+            name = "test-index"
+            url = "https://test.example.com/simple"
+            cache-control = { api = "max-age=600", files = "max-age=3600" }
+        "#;
+
+        let index: Index = toml::from_str(toml_str).unwrap();
+        assert_eq!(index.name.as_ref().unwrap().as_ref(), "test-index");
+        assert!(index.cache_control.is_some());
+        let cache_control = index.cache_control.as_ref().unwrap();
+        assert_eq!(cache_control.api.as_deref(), Some("max-age=600"));
+        assert_eq!(cache_control.files.as_deref(), Some("max-age=3600"));
+    }
+
+    #[test]
+    fn test_index_without_cache_control() {
+        // Test that indexes work without cache control headers
+        let toml_str = r#"
+            name = "test-index"
+            url = "https://test.example.com/simple"
+        "#;
+
+        let index: Index = toml::from_str(toml_str).unwrap();
+        assert_eq!(index.name.as_ref().unwrap().as_ref(), "test-index");
+        assert_eq!(index.cache_control, None);
+    }
+
+    #[test]
+    fn test_index_partial_cache_control() {
+        // Test that cache control can have just one field
+        let toml_str = r#"
+            name = "test-index"
+            url = "https://test.example.com/simple"
+            cache-control = { api = "max-age=300" }
+        "#;
+
+        let index: Index = toml::from_str(toml_str).unwrap();
+        assert_eq!(index.name.as_ref().unwrap().as_ref(), "test-index");
+        assert!(index.cache_control.is_some());
+        let cache_control = index.cache_control.as_ref().unwrap();
+        assert_eq!(cache_control.api.as_deref(), Some("max-age=300"));
+        assert_eq!(cache_control.files, None);
+    }
+}

crates/uv-distribution-types/src/index_url.rs

@@ -38,36 +38,9 @@ impl IndexUrl {
     ///
     /// If no root directory is provided, relative paths are resolved against the current working
     /// directory.
-    ///
-    /// Normalizes non-file URLs by removing trailing slashes for consistency.
     pub fn parse(path: &str, root_dir: Option<&Path>) -> Result<Self, IndexUrlError> {
-        let url = match split_scheme(path) {
+        let url = VerbatimUrl::from_url_or_path(path, root_dir)?;
-            Some((scheme, ..)) => {
+        Ok(Self::from(url))
-                match Scheme::parse(scheme) {
-                    Some(_) => {
-                        // Ex) `https://pypi.org/simple`
-                        VerbatimUrl::parse_url(path)?
-                    }
-                    None => {
-                        // Ex) `C:\Users\user\index`
-                        if let Some(root_dir) = root_dir {
-                            VerbatimUrl::from_path(path, root_dir)?
-                        } else {
-                            VerbatimUrl::from_absolute_path(std::path::absolute(path)?)?
-                        }
-                    }
-                }
-            }
-            None => {
-                // Ex) `/Users/user/index`
-                if let Some(root_dir) = root_dir {
-                    VerbatimUrl::from_path(path, root_dir)?
-                } else {
-                    VerbatimUrl::from_absolute_path(std::path::absolute(path)?)?
-                }
-            }
-        };
-        Ok(Self::from(url.with_given(path)))
     }
 
     /// Return the root [`Url`] of the index, if applicable.
@@ -230,7 +203,11 @@ impl serde::ser::Serialize for IndexUrl {
     where
         S: serde::ser::Serializer,
     {
-        self.to_string().serialize(serializer)
+        match self {
+            Self::Pypi(url) => url.without_credentials().serialize(serializer),
+            Self::Url(url) => url.without_credentials().serialize(serializer),
+            Self::Path(url) => url.without_credentials().serialize(serializer),
+        }
     }
 }
 
@@ -258,20 +235,13 @@ impl<'de> serde::de::Deserialize<'de> for IndexUrl {
 }
 
 impl From<VerbatimUrl> for IndexUrl {
-    fn from(mut url: VerbatimUrl) -> Self {
+    fn from(url: VerbatimUrl) -> Self {
         if url.scheme() == "file" {
             Self::Path(Arc::new(url))
+        } else if *url.raw() == *PYPI_URL {
+            Self::Pypi(Arc::new(url))
         } else {
-            // Remove trailing slashes for consistency. They'll be re-added if necessary when
+            Self::Url(Arc::new(url))
-            // querying the Simple API.
-            if let Ok(mut path_segments) = url.raw_mut().path_segments_mut() {
-                path_segments.pop_if_empty();
-            }
-            if *url.raw() == *PYPI_URL {
-                Self::Pypi(Arc::new(url))
-            } else {
-                Self::Url(Arc::new(url))
-            }
         }
     }
 }
@@ -430,8 +400,8 @@ impl<'a> IndexLocations {
     ///
     /// This includes explicit indexes, implicit indexes, flat indexes, and the default index.
     ///
-    /// The indexes will be returned in the order in which they were defined, such that the
+    /// The indexes will be returned in the reverse of the order in which they were defined, such
-    /// last-defined index is the last item in the vector.
+    /// that the last-defined index is the first item in the vector.
     pub fn allowed_indexes(&'a self) -> Vec<&'a Index> {
         if self.no_index {
             self.flat_index.iter().rev().collect()
@@ -463,9 +433,29 @@ impl<'a> IndexLocations {
         }
     }
 
+    /// Return a vector containing all known [`Index`] entries.
+    ///
+    /// This includes explicit indexes, implicit indexes, flat indexes, and default indexes;
+    /// in short, it includes all defined indexes, even if they're overridden by some other index
+    /// definition.
+    ///
+    /// The indexes will be returned in the reverse of the order in which they were defined, such
+    /// that the last-defined index is the first item in the vector.
+    pub fn known_indexes(&'a self) -> impl Iterator<Item = &'a Index> {
+        if self.no_index {
+            Either::Left(self.flat_index.iter().rev())
+        } else {
+            Either::Right(
+                std::iter::once(&*DEFAULT_INDEX)
+                    .chain(self.flat_index.iter().rev())
+                    .chain(self.indexes.iter().rev()),
+            )
+        }
+    }
+
     /// Add all authenticated sources to the cache.
     pub fn cache_index_credentials(&self) {
-        for index in self.allowed_indexes() {
+        for index in self.known_indexes() {
             if let Some(credentials) = index.credentials() {
                 let credentials = Arc::new(credentials);
                 uv_auth::store_credentials(index.raw_url(), credentials.clone());
@@ -475,6 +465,26 @@ impl<'a> IndexLocations {
             }
         }
     }
+
+    /// Return the Simple API cache control header for an [`IndexUrl`], if configured.
+    pub fn simple_api_cache_control_for(&self, url: &IndexUrl) -> Option<&str> {
+        for index in &self.indexes {
+            if index.url() == url {
+                return index.cache_control.as_ref()?.api.as_deref();
+            }
+        }
+        None
+    }
+
+    /// Return the artifact cache control header for an [`IndexUrl`], if configured.
+    pub fn artifact_cache_control_for(&self, url: &IndexUrl) -> Option<&str> {
+        for index in &self.indexes {
+            if index.url() == url {
+                return index.cache_control.as_ref()?.files.as_deref();
+            }
+        }
+        None
+    }
 }
 
 impl From<&IndexLocations> for uv_auth::Indexes {
@@ -608,6 +618,26 @@ impl<'a> IndexUrls {
         }
         IndexStatusCodeStrategy::Default
     }
+
+    /// Return the Simple API cache control header for an [`IndexUrl`], if configured.
+    pub fn simple_api_cache_control_for(&self, url: &IndexUrl) -> Option<&str> {
+        for index in &self.indexes {
+            if index.url() == url {
+                return index.cache_control.as_ref()?.api.as_deref();
+            }
+        }
+        None
+    }
+
+    /// Return the artifact cache control header for an [`IndexUrl`], if configured.
+    pub fn artifact_cache_control_for(&self, url: &IndexUrl) -> Option<&str> {
+        for index in &self.indexes {
+            if index.url() == url {
+                return index.cache_control.as_ref()?.files.as_deref();
+            }
+        }
+        None
+    }
 }
 
 bitflags::bitflags! {
@@ -726,4 +756,64 @@ mod tests {
             "git+https://github.com/example/repo.git"
         ));
     }
+
+    #[test]
+    fn test_cache_control_lookup() {
+        use std::str::FromStr;
+
+        use uv_small_str::SmallString;
+
+        use crate::IndexFormat;
+        use crate::index_name::IndexName;
+
+        let indexes = vec![
+            Index {
+                name: Some(IndexName::from_str("index1").unwrap()),
+                url: IndexUrl::from_str("https://index1.example.com/simple").unwrap(),
+                cache_control: Some(crate::IndexCacheControl {
+                    api: Some(SmallString::from("max-age=300")),
+                    files: Some(SmallString::from("max-age=1800")),
+                }),
+                explicit: false,
+                default: false,
+                origin: None,
+                format: IndexFormat::Simple,
+                publish_url: None,
+                authenticate: uv_auth::AuthPolicy::default(),
+                ignore_error_codes: None,
+            },
+            Index {
+                name: Some(IndexName::from_str("index2").unwrap()),
+                url: IndexUrl::from_str("https://index2.example.com/simple").unwrap(),
+                cache_control: None,
+                explicit: false,
+                default: false,
+                origin: None,
+                format: IndexFormat::Simple,
+                publish_url: None,
+                authenticate: uv_auth::AuthPolicy::default(),
+                ignore_error_codes: None,
+            },
+        ];
+
+        let index_urls = IndexUrls::from_indexes(indexes);
+
+        let url1 = IndexUrl::from_str("https://index1.example.com/simple").unwrap();
+        assert_eq!(
+            index_urls.simple_api_cache_control_for(&url1),
+            Some("max-age=300")
+        );
+        assert_eq!(
+            index_urls.artifact_cache_control_for(&url1),
+            Some("max-age=1800")
+        );
+
+        let url2 = IndexUrl::from_str("https://index2.example.com/simple").unwrap();
+        assert_eq!(index_urls.simple_api_cache_control_for(&url2), None);
+        assert_eq!(index_urls.artifact_cache_control_for(&url2), None);
+
+        let url3 = IndexUrl::from_str("https://index3.example.com/simple").unwrap();
+        assert_eq!(index_urls.simple_api_cache_control_for(&url3), None);
+        assert_eq!(index_urls.artifact_cache_control_for(&url3), None);
+    }
 }

crates/uv-distribution-types/src/installed.rs

@@ -365,7 +365,7 @@ impl InstalledDist {
     pub fn installer(&self) -> Result<Option<String>, InstalledDistError> {
         let path = self.install_path().join("INSTALLER");
         match fs::read_to_string(path) {
-            Ok(installer) => Ok(Some(installer)),
+            Ok(installer) => Ok(Some(installer.trim().to_owned())),
             Err(err) if err.kind() == std::io::ErrorKind::NotFound => Ok(None),
             Err(err) => Err(err.into()),
         }

crates/uv-distribution-types/src/lib.rs

@@ -343,9 +343,9 @@ pub struct DirectorySourceDist {
     /// The absolute path to the distribution which we use for installing.
     pub install_path: Box<Path>,
     /// Whether the package should be installed in editable mode.
-    pub editable: bool,
+    pub editable: Option<bool>,
     /// Whether the package should be built and installed.
-    pub r#virtual: bool,
+    pub r#virtual: Option<bool>,
     /// The URL as it was provided by the user.
     pub url: VerbatimUrl,
 }
@@ -452,8 +452,8 @@ impl Dist {
         name: PackageName,
         url: VerbatimUrl,
         install_path: &Path,
-        editable: bool,
+        editable: Option<bool>,
-        r#virtual: bool,
+        r#virtual: Option<bool>,
     ) -> Result<Dist, Error> {
         // Convert to an absolute path.
         let install_path = path::absolute(install_path)?;
@@ -655,7 +655,7 @@ impl SourceDist {
     /// Returns `true` if the distribution is editable.
     pub fn is_editable(&self) -> bool {
         match self {
-            Self::Directory(DirectorySourceDist { editable, .. }) => *editable,
+            Self::Directory(DirectorySourceDist { editable, .. }) => editable.unwrap_or(false),
             _ => false,
         }
     }
@@ -663,7 +663,7 @@ impl SourceDist {
     /// Returns `true` if the distribution is virtual.
     pub fn is_virtual(&self) -> bool {
         match self {
-            Self::Directory(DirectorySourceDist { r#virtual, .. }) => *r#virtual,
+            Self::Directory(DirectorySourceDist { r#virtual, .. }) => r#virtual.unwrap_or(false),
             _ => false,
         }
     }

crates/uv-distribution-types/src/pip_index.rs

@@ -3,7 +3,9 @@
 //! flags set.
 
 use serde::{Deserialize, Deserializer, Serialize};
-use std::{borrow::Cow, path::Path};
+#[cfg(feature = "schemars")]
+use std::borrow::Cow;
+use std::path::Path;
 
 use crate::{Index, IndexUrl};
 

crates/uv-distribution-types/src/prioritized_distribution.rs

@@ -91,13 +91,21 @@ impl CompatibleDist<'_> {
         }
     }
 
+    // For installable distributions, return the prioritized distribution it was derived from.
+    pub fn prioritized(&self) -> Option<&PrioritizedDist> {
+        match self {
+            CompatibleDist::InstalledDist(_) => None,
+            CompatibleDist::SourceDist { prioritized, .. }
+            | CompatibleDist::CompatibleWheel { prioritized, .. }
+            | CompatibleDist::IncompatibleWheel { prioritized, .. } => Some(prioritized),
+        }
+    }
+
     /// Return the set of supported platform the distribution, in terms of their markers.
     pub fn implied_markers(&self) -> MarkerTree {
-        match self {
+        match self.prioritized() {
-            CompatibleDist::InstalledDist(_) => MarkerTree::TRUE,
+            Some(prioritized) => prioritized.0.markers,
-            CompatibleDist::SourceDist { prioritized, .. } => prioritized.0.markers,
+            None => MarkerTree::TRUE,
-            CompatibleDist::CompatibleWheel { prioritized, .. } => prioritized.0.markers,
-            CompatibleDist::IncompatibleWheel { prioritized, .. } => prioritized.0.markers,
         }
     }
 }

crates/uv-distribution-types/src/requirement.rs

@@ -429,9 +429,9 @@ pub enum RequirementSource {
         /// The absolute path to the distribution which we use for installing.
         install_path: Box<Path>,
         /// For a source tree (a directory), whether to install as an editable.
-        editable: bool,
+        editable: Option<bool>,
         /// For a source tree (a directory), whether the project should be built and installed.
-        r#virtual: bool,
+        r#virtual: Option<bool>,
         /// The PEP 508 style URL in the format
         /// `file:///<path>#subdirectory=<subdirectory>`.
         url: VerbatimUrl,
@@ -545,7 +545,13 @@ impl RequirementSource {
 
     /// Returns `true` if the source is editable.
     pub fn is_editable(&self) -> bool {
-        matches!(self, Self::Directory { editable: true, .. })
+        matches!(
+            self,
+            Self::Directory {
+                editable: Some(true),
+                ..
+            }
+        )
     }
 
     /// Returns `true` if the source is empty.
@@ -792,11 +798,11 @@ impl From<RequirementSource> for RequirementSourceWire {
                 r#virtual,
                 url: _,
             } => {
-                if editable {
+                if editable.unwrap_or(false) {
                     Self::Editable {
                         editable: PortablePathBuf::from(install_path),
                     }
-                } else if r#virtual {
+                } else if r#virtual.unwrap_or(false) {
                     Self::Virtual {
                         r#virtual: PortablePathBuf::from(install_path),
                     }
@@ -908,8 +914,8 @@ impl TryFrom<RequirementSourceWire> for RequirementSource {
                 ))?;
                 Ok(Self::Directory {
                     install_path: directory,
-                    editable: false,
+                    editable: Some(false),
-                    r#virtual: false,
+                    r#virtual: Some(false),
                     url,
                 })
             }
@@ -920,8 +926,8 @@ impl TryFrom<RequirementSourceWire> for RequirementSource {
                 ))?;
                 Ok(Self::Directory {
                     install_path: editable,
-                    editable: true,
+                    editable: Some(true),
-                    r#virtual: false,
+                    r#virtual: Some(false),
                     url,
                 })
             }
@@ -932,8 +938,8 @@ impl TryFrom<RequirementSourceWire> for RequirementSource {
                 ))?;
                 Ok(Self::Directory {
                     install_path: r#virtual,
-                    editable: false,
+                    editable: Some(false),
-                    r#virtual: true,
+                    r#virtual: Some(true),
                     url,
                 })
             }
@@ -980,8 +986,8 @@ mod tests {
             marker: MarkerTree::TRUE,
             source: RequirementSource::Directory {
                 install_path: PathBuf::from(path).into_boxed_path(),
-                editable: false,
+                editable: Some(false),
-                r#virtual: false,
+                r#virtual: Some(false),
                 url: VerbatimUrl::from_absolute_path(path).unwrap(),
             },
             origin: None,

crates/uv-distribution-types/src/resolution.rs

@@ -1,6 +1,5 @@
 use uv_distribution_filename::DistExtension;
 use uv_normalize::{ExtraName, GroupName, PackageName};
-use uv_pep508::MarkerTree;
 use uv_pypi_types::{HashDigest, HashDigests};
 
 use crate::{
@@ -202,12 +201,12 @@ impl Node {
     }
 }
 
-/// An edge in the resolution graph, along with the marker that must be satisfied to traverse it.
+/// An edge in the resolution graph.
 #[derive(Debug, Clone)]
 pub enum Edge {
-    Prod(MarkerTree),
+    Prod,
-    Optional(ExtraName, MarkerTree),
+    Optional(ExtraName),
-    Dev(GroupName, MarkerTree),
+    Dev(GroupName),
 }
 
 impl From<&ResolvedDist> for RequirementSource {

crates/uv-distribution-types/src/status_code_strategy.rs

@@ -1,4 +1,6 @@
-use std::{borrow::Cow, ops::Deref};
+#[cfg(feature = "schemars")]
+use std::borrow::Cow;
+use std::ops::Deref;
 
 use http::StatusCode;
 use rustc_hash::FxHashSet;

crates/uv-distribution/Cargo.toml

@@ -60,7 +60,7 @@ zip = { workspace = true }
 
 [dev-dependencies]
 indoc = { workspace = true }
-insta = { version = "1.40.0", features = ["filters", "json", "redactions"] }
+insta = { workspace = true }
 
 [features]
 default = []

crates/uv-distribution/src/distribution_database.rs

@@ -20,8 +20,7 @@ use uv_client::{
 };
 use uv_distribution_filename::WheelFilename;
 use uv_distribution_types::{
-    BuildableSource, BuiltDist, Dist, FileLocation, HashPolicy, Hashed, InstalledDist, Name,
+    BuildableSource, BuiltDist, Dist, HashPolicy, Hashed, IndexUrl, InstalledDist, Name, SourceDist,
-    SourceDist,
 };
 use uv_extract::hash::Hasher;
 use uv_fs::write_atomic;
@@ -179,12 +178,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
         match dist {
             BuiltDist::Registry(wheels) => {
                 let wheel = wheels.best_wheel();
-                let url = match &wheel.file.url {
+                let url = wheel.file.url.to_url()?;
-                    FileLocation::RelativeUrl(base, url) => {
-                        uv_pypi_types::base_url_join_relative(base, url)?
-                    }
-                    FileLocation::AbsoluteUrl(url) => url.to_url()?,
-                };
 
                 // Create a cache entry for the wheel.
                 let wheel_entry = self.build_context.cache().entry(
@@ -207,6 +201,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                 match self
                     .stream_wheel(
                         url.clone(),
+                        dist.index(),
                         &wheel.filename,
                         wheel.file.size,
                         &wheel_entry,
@@ -242,6 +237,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                         let archive = self
                             .download_wheel(
                                 url,
+                                dist.index(),
                                 &wheel.filename,
                                 wheel.file.size,
                                 &wheel_entry,
@@ -278,6 +274,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                 match self
                     .stream_wheel(
                         wheel.url.raw().clone(),
+                        None,
                         &wheel.filename,
                         None,
                         &wheel_entry,
@@ -307,6 +304,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                         let archive = self
                             .download_wheel(
                                 wheel.url.raw().clone(),
+                                None,
                                 &wheel.filename,
                                 None,
                                 &wheel_entry,
@@ -540,6 +538,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
     async fn stream_wheel(
         &self,
         url: DisplaySafeUrl,
+        index: Option<&IndexUrl>,
         filename: &WheelFilename,
         size: Option<u64>,
         wheel_entry: &CacheEntry,
@@ -622,13 +621,24 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
         // Fetch the archive from the cache, or download it if necessary.
         let req = self.request(url.clone())?;
 
+        // Determine the cache control policy for the URL.
         let cache_control = match self.client.unmanaged.connectivity() {
-            Connectivity::Online => CacheControl::from(
+            Connectivity::Online => {
-                self.build_context
+                if let Some(header) = index.and_then(|index| {
-                    .cache()
+                    self.build_context
-                    .freshness(&http_entry, Some(&filename.name), None)
+                        .locations()
-                    .map_err(Error::CacheRead)?,
+                        .artifact_cache_control_for(index)
-            ),
+                }) {
+                    CacheControl::Override(header)
+                } else {
+                    CacheControl::from(
+                        self.build_context
+                            .cache()
+                            .freshness(&http_entry, Some(&filename.name), None)
+                            .map_err(Error::CacheRead)?,
+                    )
+                }
+            }
             Connectivity::Offline => CacheControl::AllowStale,
         };
 
@@ -660,7 +670,12 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                 .managed(async |client| {
                     client
                         .cached_client()
-                        .skip_cache_with_retry(self.request(url)?, &http_entry, download)
+                        .skip_cache_with_retry(
+                            self.request(url)?,
+                            &http_entry,
+                            cache_control,
+                            download,
+                        )
                         .await
                         .map_err(|err| match err {
                             CachedClientError::Callback { err, .. } => err,
@@ -677,6 +692,7 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
     async fn download_wheel(
         &self,
         url: DisplaySafeUrl,
+        index: Option<&IndexUrl>,
         filename: &WheelFilename,
         size: Option<u64>,
         wheel_entry: &CacheEntry,
@@ -789,13 +805,24 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
         // Fetch the archive from the cache, or download it if necessary.
         let req = self.request(url.clone())?;
 
+        // Determine the cache control policy for the URL.
         let cache_control = match self.client.unmanaged.connectivity() {
-            Connectivity::Online => CacheControl::from(
+            Connectivity::Online => {
-                self.build_context
+                if let Some(header) = index.and_then(|index| {
-                    .cache()
+                    self.build_context
-                    .freshness(&http_entry, Some(&filename.name), None)
+                        .locations()
-                    .map_err(Error::CacheRead)?,
+                        .artifact_cache_control_for(index)
-            ),
+                }) {
+                    CacheControl::Override(header)
+                } else {
+                    CacheControl::from(
+                        self.build_context
+                            .cache()
+                            .freshness(&http_entry, Some(&filename.name), None)
+                            .map_err(Error::CacheRead)?,
+                    )
+                }
+            }
             Connectivity::Offline => CacheControl::AllowStale,
         };
 
@@ -827,7 +854,12 @@ impl<'a, Context: BuildContext> DistributionDatabase<'a, Context> {
                 .managed(async |client| {
                     client
                         .cached_client()
-                        .skip_cache_with_retry(self.request(url)?, &http_entry, download)
+                        .skip_cache_with_retry(
+                            self.request(url)?,
+                            &http_entry,
+                            cache_control,
+                            download,
+                        )
                         .await
                         .map_err(|err| match err {
                             CachedClientError::Callback { err, .. } => err,

crates/uv-distribution/src/error.rs

@@ -25,8 +25,6 @@ pub enum Error {
     RelativePath(PathBuf),
     #[error(transparent)]
     InvalidUrl(#[from] uv_distribution_types::ToUrlError),
-    #[error(transparent)]
-    JoinRelativeUrl(#[from] uv_pypi_types::JoinRelativeError),
     #[error("Expected a file URL, but received: {0}")]
     NonFileUrl(DisplaySafeUrl),
     #[error(transparent)]

crates/uv-distribution/src/index/built_wheel_index.rs

@@ -1,12 +1,16 @@
+use std::borrow::Cow;
+
 use uv_cache::{Cache, CacheBucket, CacheShard, WheelCache};
 use uv_cache_info::CacheInfo;
 use uv_cache_key::cache_digest;
-use uv_configuration::ConfigSettings;
+use uv_configuration::{ConfigSettings, PackageConfigSettings};
 use uv_distribution_types::{
     DirectUrlSourceDist, DirectorySourceDist, GitSourceDist, Hashed, PathSourceDist,
 };
+use uv_normalize::PackageName;
 use uv_platform_tags::Tags;
 use uv_types::HashStrategy;
+use uv_workspace::pyproject::ExtraBuildDependencies;
 
 use crate::Error;
 use crate::index::cached_wheel::CachedWheel;
@@ -18,7 +22,9 @@ pub struct BuiltWheelIndex<'a> {
     cache: &'a Cache,
     tags: &'a Tags,
     hasher: &'a HashStrategy,
-    build_configuration: &'a ConfigSettings,
+    config_settings: &'a ConfigSettings,
+    config_settings_package: &'a PackageConfigSettings,
+    extra_build_dependencies: &'a ExtraBuildDependencies,
 }
 
 impl<'a> BuiltWheelIndex<'a> {
@@ -27,13 +33,17 @@ impl<'a> BuiltWheelIndex<'a> {
         cache: &'a Cache,
         tags: &'a Tags,
         hasher: &'a HashStrategy,
-        build_configuration: &'a ConfigSettings,
+        config_settings: &'a ConfigSettings,
+        config_settings_package: &'a PackageConfigSettings,
+        extra_build_dependencies: &'a ExtraBuildDependencies,
     ) -> Self {
         Self {
             cache,
             tags,
             hasher,
-            build_configuration,
+            config_settings,
+            config_settings_package,
+            extra_build_dependencies,
         }
     }
 
@@ -63,10 +73,12 @@ impl<'a> BuiltWheelIndex<'a> {
         let cache_shard = cache_shard.shard(revision.id());
 
         // If there are build settings, we need to scope to a cache shard.
-        let cache_shard = if self.build_configuration.is_empty() {
+        let config_settings = self.config_settings_for(&source_dist.name);
+        let extra_build_deps = self.extra_build_dependencies_for(&source_dist.name);
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(self.build_configuration))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         Ok(self.find(&cache_shard))
@@ -100,10 +112,12 @@ impl<'a> BuiltWheelIndex<'a> {
         let cache_shard = cache_shard.shard(revision.id());
 
         // If there are build settings, we need to scope to a cache shard.
-        let cache_shard = if self.build_configuration.is_empty() {
+        let config_settings = self.config_settings_for(&source_dist.name);
+        let extra_build_deps = self.extra_build_dependencies_for(&source_dist.name);
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(self.build_configuration))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         Ok(self
@@ -119,7 +133,7 @@ impl<'a> BuiltWheelIndex<'a> {
     ) -> Result<Option<CachedWheel>, Error> {
         let cache_shard = self.cache.shard(
             CacheBucket::SourceDistributions,
-            if source_dist.editable {
+            if source_dist.editable.unwrap_or(false) {
                 WheelCache::Editable(&source_dist.url).root()
             } else {
                 WheelCache::Path(&source_dist.url).root()
@@ -148,10 +162,12 @@ impl<'a> BuiltWheelIndex<'a> {
         let cache_shard = cache_shard.shard(revision.id());
 
         // If there are build settings, we need to scope to a cache shard.
-        let cache_shard = if self.build_configuration.is_empty() {
+        let config_settings = self.config_settings_for(&source_dist.name);
+        let extra_build_deps = self.extra_build_dependencies_for(&source_dist.name);
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(self.build_configuration))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         Ok(self
@@ -174,10 +190,12 @@ impl<'a> BuiltWheelIndex<'a> {
         );
 
         // If there are build settings, we need to scope to a cache shard.
-        let cache_shard = if self.build_configuration.is_empty() {
+        let config_settings = self.config_settings_for(&source_dist.name);
+        let extra_build_deps = self.extra_build_dependencies_for(&source_dist.name);
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(self.build_configuration))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         self.find(&cache_shard)
@@ -239,4 +257,24 @@ impl<'a> BuiltWheelIndex<'a> {
 
         candidate
     }
+
+    /// Determine the [`ConfigSettings`] for the given package name.
+    fn config_settings_for(&self, name: &PackageName) -> Cow<'_, ConfigSettings> {
+        if let Some(package_settings) = self.config_settings_package.get(name) {
+            Cow::Owned(package_settings.clone().merge(self.config_settings.clone()))
+        } else {
+            Cow::Borrowed(self.config_settings)
+        }
+    }
+
+    /// Determine the extra build dependencies for the given package name.
+    fn extra_build_dependencies_for(
+        &self,
+        name: &PackageName,
+    ) -> &[uv_pep508::Requirement<uv_pypi_types::VerbatimParsedUrl>] {
+        self.extra_build_dependencies
+            .get(name)
+            .map(Vec::as_slice)
+            .unwrap_or(&[])
+    }
 }

crates/uv-distribution/src/lib.rs

@@ -3,8 +3,8 @@ pub use download::LocalWheel;
 pub use error::Error;
 pub use index::{BuiltWheelIndex, RegistryWheelIndex};
 pub use metadata::{
-    ArchiveMetadata, BuildRequires, FlatRequiresDist, LoweredRequirement, LoweringError, Metadata,
+    ArchiveMetadata, BuildRequires, ExtraBuildRequires, FlatRequiresDist, LoweredRequirement,
-    MetadataError, RequiresDist, SourcedDependencyGroups,
+    LoweringError, Metadata, MetadataError, RequiresDist, SourcedDependencyGroups,
 };
 pub use reporter::Reporter;
 pub use source::prune;

crates/uv-distribution/src/metadata/build_requires.rs

@@ -4,7 +4,8 @@ use std::path::Path;
 use uv_configuration::SourceStrategy;
 use uv_distribution_types::{IndexLocations, Requirement};
 use uv_normalize::PackageName;
-use uv_workspace::pyproject::ToolUvSources;
+use uv_pypi_types::VerbatimParsedUrl;
+use uv_workspace::pyproject::{ExtraBuildDependencies, ToolUvSources};
 use uv_workspace::{
     DiscoveryOptions, MemberDiscovery, ProjectWorkspace, Workspace, WorkspaceCache,
 };
@@ -203,3 +204,93 @@ impl BuildRequires {
         })
     }
 }
+
+/// Lowered extra build dependencies with source resolution applied.
+#[derive(Debug, Clone, Default)]
+pub struct ExtraBuildRequires {
+    pub extra_build_dependencies: ExtraBuildDependencies,
+}
+
+impl ExtraBuildRequires {
+    /// Lower extra build dependencies from a workspace, applying source resolution.
+    pub fn from_workspace(
+        extra_build_dependencies: ExtraBuildDependencies,
+        workspace: &Workspace,
+        index_locations: &IndexLocations,
+        source_strategy: SourceStrategy,
+    ) -> Result<Self, MetadataError> {
+        match source_strategy {
+            SourceStrategy::Enabled => {
+                // Collect project sources and indexes
+                let project_indexes = workspace
+                    .pyproject_toml()
+                    .tool
+                    .as_ref()
+                    .and_then(|tool| tool.uv.as_ref())
+                    .and_then(|uv| uv.index.as_deref())
+                    .unwrap_or(&[]);
+
+                let empty_sources = BTreeMap::default();
+                let project_sources = workspace
+                    .pyproject_toml()
+                    .tool
+                    .as_ref()
+                    .and_then(|tool| tool.uv.as_ref())
+                    .and_then(|uv| uv.sources.as_ref())
+                    .map(ToolUvSources::inner)
+                    .unwrap_or(&empty_sources);
+
+                // Lower each package's extra build dependencies
+                let mut result = ExtraBuildDependencies::default();
+                for (package_name, requirements) in extra_build_dependencies {
+                    let lowered: Vec<uv_pep508::Requirement<VerbatimParsedUrl>> = requirements
+                        .into_iter()
+                        .flat_map(|requirement| {
+                            let requirement_name = requirement.name.clone();
+                            let extra = requirement.marker.top_level_extra_name();
+                            let group = None;
+                            LoweredRequirement::from_requirement(
+                                requirement,
+                                None,
+                                workspace.install_path(),
+                                project_sources,
+                                project_indexes,
+                                extra.as_deref(),
+                                group,
+                                index_locations,
+                                workspace,
+                                None,
+                            )
+                            .map(
+                                move |requirement| match requirement {
+                                    Ok(requirement) => Ok(requirement.into_inner().into()),
+                                    Err(err) => Err(MetadataError::LoweringError(
+                                        requirement_name.clone(),
+                                        Box::new(err),
+                                    )),
+                                },
+                            )
+                        })
+                        .collect::<Result<Vec<_>, _>>()?;
+                    result.insert(package_name, lowered);
+                }
+                Ok(Self {
+                    extra_build_dependencies: result,
+                })
+            }
+            SourceStrategy::Disabled => {
+                // Without source resolution, just return the dependencies as-is
+                Ok(Self {
+                    extra_build_dependencies,
+                })
+            }
+        }
+    }
+
+    /// Create from pre-lowered dependencies (for non-workspace contexts).
+    pub fn from_lowered(extra_build_dependencies: ExtraBuildDependencies) -> Self {
+        Self {
+            extra_build_dependencies,
+        }
+    }
+}

crates/uv-distribution/src/metadata/lowering.rs

@@ -306,19 +306,22 @@ impl LoweredRequirement {
                                     },
                                     url,
                                 }
-                            } else if member.pyproject_toml().is_package() {
+                            } else if member
+                                .pyproject_toml()
+                                .is_package(!workspace.is_required_member(&requirement.name))
+                            {
                                 RequirementSource::Directory {
                                     install_path: install_path.into_boxed_path(),
                                     url,
-                                    editable: true,
+                                    editable: Some(true),
-                                    r#virtual: false,
+                                    r#virtual: Some(false),
                                 }
                             } else {
                                 RequirementSource::Directory {
                                     install_path: install_path.into_boxed_path(),
                                     url,
-                                    editable: false,
+                                    editable: Some(false),
-                                    r#virtual: true,
+                                    r#virtual: Some(true),
                                 }
                             };
                             (source, marker)
@@ -724,26 +727,31 @@ fn path_source(
             Ok(RequirementSource::Directory {
                 install_path: install_path.into_boxed_path(),
                 url,
-                editable: true,
+                editable,
-                r#virtual: false,
+                r#virtual: Some(false),
             })
         } else {
             // Determine whether the project is a package or virtual.
+            // If the `package` option is unset, check if `tool.uv.package` is set
+            // on the path source (otherwise, default to `true`).
             let is_package = package.unwrap_or_else(|| {
                 let pyproject_path = install_path.join("pyproject.toml");
                 fs_err::read_to_string(&pyproject_path)
                     .ok()
                     .and_then(|contents| PyProjectToml::from_string(contents).ok())
-                    .map(|pyproject_toml| pyproject_toml.is_package())
+                    // We don't require a build system for path dependencies
+                    .map(|pyproject_toml| pyproject_toml.is_package(false))
                     .unwrap_or(true)
             });
 
+            // If the project is not a package, treat it as a virtual dependency.
+            let r#virtual = !is_package;
+
             Ok(RequirementSource::Directory {
                 install_path: install_path.into_boxed_path(),
                 url,
-                editable: false,
+                editable: Some(false),
-                // If a project is not a package, treat it as a virtual dependency.
+                r#virtual: Some(r#virtual),
-                r#virtual: !is_package,
             })
         }
     } else {

crates/uv-distribution/src/metadata/mod.rs

@@ -11,7 +11,7 @@ use uv_pypi_types::{HashDigests, ResolutionMetadata};
 use uv_workspace::dependency_groups::DependencyGroupError;
 use uv_workspace::{WorkspaceCache, WorkspaceError};
 
-pub use crate::metadata::build_requires::BuildRequires;
+pub use crate::metadata::build_requires::{BuildRequires, ExtraBuildRequires};
 pub use crate::metadata::dependency_groups::SourcedDependencyGroups;
 pub use crate::metadata::lowering::LoweredRequirement;
 pub use crate::metadata::lowering::LoweringError;

crates/uv-distribution/src/metadata/requires_dist.rs

@@ -618,14 +618,13 @@ mod test {
             tqdm = { url = invalid url to tqdm-4.66.0-py3-none-any.whl" }
         "#};
 
-        assert_snapshot!(format_err(input).await, @r###"
+        assert_snapshot!(format_err(input).await, @r#"
-        error: TOML parse error at line 8, column 16
+        error: TOML parse error at line 8, column 28
           |
         8 | tqdm = { url = invalid url to tqdm-4.66.0-py3-none-any.whl" }
-          |                ^
+          |                            ^
-        invalid string
+        missing comma between key-value pairs, expected `,`
-        expected `"`, `'`
+        "#);
-        "###);
     }
 
     #[tokio::test]

crates/uv-distribution/src/source/mod.rs

@@ -29,11 +29,11 @@ use uv_cache_key::cache_digest;
 use uv_client::{
     CacheControl, CachedClientError, Connectivity, DataWithCachePolicy, RegistryClient,
 };
-use uv_configuration::{BuildKind, BuildOutput, SourceStrategy};
+use uv_configuration::{BuildKind, BuildOutput, ConfigSettings, SourceStrategy};
 use uv_distribution_filename::{SourceDistExtension, WheelFilename};
 use uv_distribution_types::{
-    BuildableSource, DirectorySourceUrl, FileLocation, GitSourceUrl, HashPolicy, Hashed,
+    BuildableSource, DirectorySourceUrl, GitSourceUrl, HashPolicy, Hashed, IndexUrl, PathSourceUrl,
-    PathSourceUrl, SourceDist, SourceUrl,
+    SourceDist, SourceUrl,
 };
 use uv_extract::hash::Hasher;
 use uv_fs::{rename_with_retry, write_atomic};
@@ -122,12 +122,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                         .join(dist.version.to_string()),
                 );
 
-                let url = match &dist.file.url {
+                let url = dist.file.url.to_url()?;
-                    FileLocation::RelativeUrl(base, url) => {
-                        uv_pypi_types::base_url_join_relative(base, url)?
-                    }
-                    FileLocation::AbsoluteUrl(url) => url.to_url()?,
-                };
 
                 // If the URL is a file URL, use the local path directly.
                 if url.scheme() == "file" {
@@ -153,6 +148,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 self.url(
                     source,
                     &url,
+                    Some(&dist.index),
                     &cache_shard,
                     None,
                     dist.ext,
@@ -173,6 +169,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 self.url(
                     source,
                     &dist.url,
+                    None,
                     &cache_shard,
                     dist.subdirectory.as_deref(),
                     dist.ext,
@@ -218,6 +215,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 self.url(
                     source,
                     resource.url,
+                    None,
                     &cache_shard,
                     resource.subdirectory,
                     resource.ext,
@@ -271,12 +269,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                         .join(dist.version.to_string()),
                 );
 
-                let url = match &dist.file.url {
+                let url = dist.file.url.to_url()?;
-                    FileLocation::RelativeUrl(base, url) => {
-                        uv_pypi_types::base_url_join_relative(base, url)?
-                    }
-                    FileLocation::AbsoluteUrl(url) => url.to_url()?,
-                };
 
                 // If the URL is a file URL, use the local path directly.
                 if url.scheme() == "file" {
@@ -298,9 +291,18 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                         .await;
                 }
 
-                self.url_metadata(source, &url, &cache_shard, None, dist.ext, hashes, client)
+                self.url_metadata(
-                    .boxed_local()
+                    source,
-                    .await?
+                    &url,
+                    Some(&dist.index),
+                    &cache_shard,
+                    None,
+                    dist.ext,
+                    hashes,
+                    client,
+                )
+                .boxed_local()
+                .await?
             }
             BuildableSource::Dist(SourceDist::DirectUrl(dist)) => {
                 // For direct URLs, cache directly under the hash of the URL itself.
@@ -312,6 +314,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 self.url_metadata(
                     source,
                     &dist.url,
+                    None,
                     &cache_shard,
                     dist.subdirectory.as_deref(),
                     dist.ext,
@@ -350,6 +353,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 self.url_metadata(
                     source,
                     resource.url,
+                    None,
                     &cache_shard,
                     resource.subdirectory,
                     resource.ext,
@@ -383,11 +387,43 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         Ok(metadata)
     }
 
+    /// Determine the [`ConfigSettings`] for the given package name.
+    fn config_settings_for(&self, name: Option<&PackageName>) -> Cow<'_, ConfigSettings> {
+        if let Some(name) = name {
+            if let Some(package_settings) = self.build_context.config_settings_package().get(name) {
+                Cow::Owned(
+                    package_settings
+                        .clone()
+                        .merge(self.build_context.config_settings().clone()),
+                )
+            } else {
+                Cow::Borrowed(self.build_context.config_settings())
+            }
+        } else {
+            Cow::Borrowed(self.build_context.config_settings())
+        }
+    }
+
+    /// Determine the extra build dependencies for the given package name.
+    fn extra_build_dependencies_for(
+        &self,
+        name: Option<&PackageName>,
+    ) -> &[uv_pep508::Requirement<uv_pypi_types::VerbatimParsedUrl>] {
+        name.and_then(|name| {
+            self.build_context
+                .extra_build_dependencies()
+                .get(name)
+                .map(Vec::as_slice)
+        })
+        .unwrap_or(&[])
+    }
+
     /// Build a source distribution from a remote URL.
     async fn url<'data>(
         &self,
         source: &BuildableSource<'data>,
         url: &'data DisplaySafeUrl,
+        index: Option<&'data IndexUrl>,
         cache_shard: &CacheShard,
         subdirectory: Option<&'data Path>,
         ext: SourceDistExtension,
@@ -399,7 +435,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
 
         // Fetch the revision for the source distribution.
         let revision = self
-            .url_revision(source, ext, url, cache_shard, hashes, client)
+            .url_revision(source, ext, url, index, cache_shard, hashes, client)
             .await?;
 
         // Before running the build, check that the hashes match.
@@ -416,12 +452,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         let cache_shard = cache_shard.shard(revision.id());
         let source_dist_entry = cache_shard.entry(SOURCE);
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // If the cache contains a compatible wheel, return it.
@@ -441,6 +478,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 source,
                 ext,
                 url,
+                index,
                 &source_dist_entry,
                 revision,
                 hashes,
@@ -504,6 +542,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         &self,
         source: &BuildableSource<'data>,
         url: &'data Url,
+        index: Option<&'data IndexUrl>,
         cache_shard: &CacheShard,
         subdirectory: Option<&'data Path>,
         ext: SourceDistExtension,
@@ -514,7 +553,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
 
         // Fetch the revision for the source distribution.
         let revision = self
-            .url_revision(source, ext, url, cache_shard, hashes, client)
+            .url_revision(source, ext, url, index, cache_shard, hashes, client)
             .await?;
 
         // Before running the build, check that the hashes match.
@@ -571,6 +610,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                 source,
                 ext,
                 url,
+                index,
                 &source_dist_entry,
                 revision,
                 hashes,
@@ -589,14 +629,6 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             }
         }
 
-        // If there are build settings, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
-        let cache_shard = if config_settings.is_empty() {
-            cache_shard
-        } else {
-            cache_shard.shard(cache_digest(config_settings))
-        };
-
         // Otherwise, we either need to build the metadata.
         // If the backend supports `prepare_metadata_for_build_wheel`, use it.
         if let Some(metadata) = self
@@ -633,6 +665,15 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             });
         }
 
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
+        let config_settings = self.config_settings_for(source.name());
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
+            cache_shard
+        } else {
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
+        };
+
         let task = self
             .reporter
             .as_ref()
@@ -682,18 +723,31 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         source: &BuildableSource<'_>,
         ext: SourceDistExtension,
         url: &Url,
+        index: Option<&IndexUrl>,
         cache_shard: &CacheShard,
         hashes: HashPolicy<'_>,
         client: &ManagedClient<'_>,
     ) -> Result<Revision, Error> {
         let cache_entry = cache_shard.entry(HTTP_REVISION);
+
+        // Determine the cache control policy for the request.
         let cache_control = match client.unmanaged.connectivity() {
-            Connectivity::Online => CacheControl::from(
+            Connectivity::Online => {
-                self.build_context
+                if let Some(header) = index.and_then(|index| {
-                    .cache()
+                    self.build_context
-                    .freshness(&cache_entry, source.name(), source.source_tree())
+                        .locations()
-                    .map_err(Error::CacheRead)?,
+                        .artifact_cache_control_for(index)
-            ),
+                }) {
+                    CacheControl::Override(header)
+                } else {
+                    CacheControl::from(
+                        self.build_context
+                            .cache()
+                            .freshness(&cache_entry, source.name(), source.source_tree())
+                            .map_err(Error::CacheRead)?,
+                    )
+                }
+            }
             Connectivity::Offline => CacheControl::AllowStale,
         };
 
@@ -743,6 +797,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                         .skip_cache_with_retry(
                             Self::request(DisplaySafeUrl::from(url.clone()), client)?,
                             &cache_entry,
+                            cache_control,
                             download,
                         )
                         .await
@@ -788,12 +843,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         let cache_shard = cache_shard.shard(revision.id());
         let source_entry = cache_shard.entry(SOURCE);
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // If the cache contains a compatible wheel, return it.
@@ -950,12 +1006,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             });
         }
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // Otherwise, we need to build a wheel.
@@ -1070,7 +1127,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
 
         let cache_shard = self.build_context.cache().shard(
             CacheBucket::SourceDistributions,
-            if resource.editable {
+            if resource.editable.unwrap_or(false) {
                 WheelCache::Editable(resource.url).root()
             } else {
                 WheelCache::Path(resource.url).root()
@@ -1092,12 +1149,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         // freshness, since entries have to be fresher than the revision itself.
         let cache_shard = cache_shard.shard(revision.id());
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // If the cache contains a compatible wheel, return it.
@@ -1183,7 +1241,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
 
         let cache_shard = self.build_context.cache().shard(
             CacheBucket::SourceDistributions,
-            if resource.editable {
+            if resource.editable.unwrap_or(false) {
                 WheelCache::Editable(resource.url).root()
             } else {
                 WheelCache::Path(resource.url).root()
@@ -1280,12 +1338,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             ));
         }
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // Otherwise, we need to build a wheel.
@@ -1485,12 +1544,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         // Acquire the advisory lock.
         let _lock = cache_shard.lock().await.map_err(Error::CacheWrite)?;
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // If the cache contains a compatible wheel, return it.
@@ -1788,12 +1848,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             ));
         }
 
-        // If there are build settings, we need to scope to a cache shard.
+        // If there are build settings or extra build dependencies, we need to scope to a cache shard.
-        let config_settings = self.build_context.config_settings();
+        let config_settings = self.config_settings_for(source.name());
-        let cache_shard = if config_settings.is_empty() {
+        let extra_build_deps = self.extra_build_dependencies_for(source.name());
+        let cache_shard = if config_settings.is_empty() && extra_build_deps.is_empty() {
             cache_shard
         } else {
-            cache_shard.shard(cache_digest(config_settings))
+            cache_shard.shard(cache_digest(&(&config_settings, extra_build_deps)))
         };
 
         // Otherwise, we need to build a wheel.
@@ -2049,6 +2110,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         source: &BuildableSource<'_>,
         ext: SourceDistExtension,
         url: &Url,
+        index: Option<&IndexUrl>,
         entry: &CacheEntry,
         revision: Revision,
         hashes: HashPolicy<'_>,
@@ -2056,6 +2118,28 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
     ) -> Result<Revision, Error> {
         warn!("Re-downloading missing source distribution: {source}");
         let cache_entry = entry.shard().entry(HTTP_REVISION);
+
+        // Determine the cache control policy for the request.
+        let cache_control = match client.unmanaged.connectivity() {
+            Connectivity::Online => {
+                if let Some(header) = index.and_then(|index| {
+                    self.build_context
+                        .locations()
+                        .artifact_cache_control_for(index)
+                }) {
+                    CacheControl::Override(header)
+                } else {
+                    CacheControl::from(
+                        self.build_context
+                            .cache()
+                            .freshness(&cache_entry, source.name(), source.source_tree())
+                            .map_err(Error::CacheRead)?,
+                    )
+                }
+            }
+            Connectivity::Offline => CacheControl::AllowStale,
+        };
+
         let download = |response| {
             async {
                 // Take the union of the requested and existing hash algorithms.
@@ -2089,6 +2173,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
                     .skip_cache_with_retry(
                         Self::request(DisplaySafeUrl::from(url.clone()), client)?,
                         &cache_entry,
+                        cache_control,
                         download,
                     )
                     .await
@@ -2301,11 +2386,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
             let base_python = if cfg!(unix) {
                 self.build_context
                     .interpreter()
+                    .await
                     .find_base_python()
                     .map_err(Error::BaseInterpreter)?
             } else {
                 self.build_context
                     .interpreter()
+                    .await
                     .to_base_python()
                     .map_err(Error::BaseInterpreter)?
             };
@@ -2400,7 +2487,7 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         // Ensure that the _installed_ Python version is compatible with the `requires-python`
         // specifier.
         if let Some(requires_python) = source.requires_python() {
-            let installed = self.build_context.interpreter().python_version();
+            let installed = self.build_context.interpreter().await.python_version();
             let target = release_specifiers_to_ranges(requires_python.clone())
                 .bounding_range()
                 .map(|bounding_range| bounding_range.0.cloned())
@@ -2422,11 +2509,13 @@ impl<'a, T: BuildContext> SourceDistributionBuilder<'a, T> {
         let base_python = if cfg!(unix) {
             self.build_context
                 .interpreter()
+                .await
                 .find_base_python()
                 .map_err(Error::BaseInterpreter)?
         } else {
             self.build_context
                 .interpreter()
+                .await
                 .to_base_python()
                 .map_err(Error::BaseInterpreter)?
         };

crates/uv-extract/src/error.rs

@@ -2,11 +2,11 @@ use std::{ffi::OsString, path::PathBuf};
 
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
-    #[error(transparent)]
+    #[error("Failed to read from zip file")]
     Zip(#[from] zip::result::ZipError),
-    #[error(transparent)]
+    #[error("Failed to read from zip file")]
     AsyncZip(#[from] async_zip::error::ZipError),
-    #[error(transparent)]
+    #[error("I/O operation failed during extraction")]
     Io(#[from] std::io::Error),
     #[error(
         "The top-level of the archive must only contain a list directory, but it contains: {0:?}"

crates/uv-extract/src/stream.rs

@@ -236,6 +236,7 @@ pub async fn untar_gz<R: tokio::io::AsyncRead + Unpin>(
     )
     .set_preserve_mtime(false)
     .set_preserve_permissions(false)
+    .set_allow_external_symlinks(false)
     .build();
     Ok(untar_in(archive, target.as_ref()).await?)
 }
@@ -255,6 +256,7 @@ pub async fn untar_bz2<R: tokio::io::AsyncRead + Unpin>(
     )
     .set_preserve_mtime(false)
     .set_preserve_permissions(false)
+    .set_allow_external_symlinks(false)
     .build();
     Ok(untar_in(archive, target.as_ref()).await?)
 }
@@ -274,6 +276,7 @@ pub async fn untar_zst<R: tokio::io::AsyncRead + Unpin>(
     )
     .set_preserve_mtime(false)
     .set_preserve_permissions(false)
+    .set_allow_external_symlinks(false)
     .build();
     Ok(untar_in(archive, target.as_ref()).await?)
 }
@@ -293,6 +296,7 @@ pub async fn untar_xz<R: tokio::io::AsyncRead + Unpin>(
     )
     .set_preserve_mtime(false)
     .set_preserve_permissions(false)
+    .set_allow_external_symlinks(false)
     .build();
     untar_in(archive, target.as_ref()).await?;
     Ok(())
@@ -311,6 +315,7 @@ pub async fn untar<R: tokio::io::AsyncRead + Unpin>(
         tokio_tar::ArchiveBuilder::new(&mut reader as &mut (dyn tokio::io::AsyncRead + Unpin))
             .set_preserve_mtime(false)
             .set_preserve_permissions(false)
+            .set_allow_external_symlinks(false)
             .build();
     untar_in(archive, target.as_ref()).await?;
     Ok(())

crates/uv-fs/src/lib.rs

@@ -84,6 +84,8 @@ pub async fn read_to_string_transcode(path: impl AsRef<Path>) -> std::io::Result
 /// junction at the same path.
 ///
 /// Note that because junctions are used, the source must be a directory.
+///
+/// Changes to this function should be reflected in [`create_symlink`].
 #[cfg(windows)]
 pub fn replace_symlink(src: impl AsRef<Path>, dst: impl AsRef<Path>) -> std::io::Result<()> {
     // If the source is a file, we can't create a junction
@@ -138,6 +140,38 @@ pub fn replace_symlink(src: impl AsRef<Path>, dst: impl AsRef<Path>) -> std::io:
     }
 }
 
+/// Create a symlink at `dst` pointing to `src`.
+///
+/// On Windows, this uses the `junction` crate to create a junction point.
+///
+/// Note that because junctions are used, the source must be a directory.
+///
+/// Changes to this function should be reflected in [`replace_symlink`].
+#[cfg(windows)]
+pub fn create_symlink(src: impl AsRef<Path>, dst: impl AsRef<Path>) -> std::io::Result<()> {
+    // If the source is a file, we can't create a junction
+    if src.as_ref().is_file() {
+        return Err(std::io::Error::new(
+            std::io::ErrorKind::InvalidInput,
+            format!(
+                "Cannot create a junction for {}: is not a directory",
+                src.as_ref().display()
+            ),
+        ));
+    }
+
+    junction::create(
+        dunce::simplified(src.as_ref()),
+        dunce::simplified(dst.as_ref()),
+    )
+}
+
+/// Create a symlink at `dst` pointing to `src`.
+#[cfg(unix)]
+pub fn create_symlink(src: impl AsRef<Path>, dst: impl AsRef<Path>) -> std::io::Result<()> {
+    fs_err::os::unix::fs::symlink(src.as_ref(), dst.as_ref())
+}
+
 #[cfg(unix)]
 pub fn remove_symlink(path: impl AsRef<Path>) -> std::io::Result<()> {
     fs_err::remove_file(path.as_ref())

crates/uv-fs/src/path.rs

@@ -398,6 +398,12 @@ impl From<Box<Path>> for PortablePathBuf {
     }
 }
 
+impl<'a> From<&'a Path> for PortablePathBuf {
+    fn from(path: &'a Path) -> Self {
+        Box::<Path>::from(path).into()
+    }
+}
+
 #[cfg(feature = "serde")]
 impl serde::Serialize for PortablePathBuf {
     fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

crates/uv-globfilter/Cargo.toml

@@ -2,13 +2,13 @@
 name = "uv-globfilter"
 version = "0.1.0"
 readme = "README.md"
-edition.workspace = true
+edition = { workspace = true }
-rust-version.workspace = true
+rust-version = { workspace = true }
-homepage.workspace = true
+homepage = { workspace = true }
-documentation.workspace = true
+documentation = { workspace = true }
-repository.workspace = true
+repository = { workspace = true }
-authors.workspace = true
+authors = { workspace = true }
-license.workspace = true
+license = { workspace = true }
 
 [dependencies]
 globset = { workspace = true }
@@ -22,7 +22,7 @@ walkdir = { workspace = true }
 [dev-dependencies]
 anstream = { workspace = true }
 fs-err = { workspace = true }
-insta = "1.41.1"
+insta = { workspace = true }
 tempfile = { workspace = true }
 
 [lints]

crates/uv-install-wheel/Cargo.toml

@@ -56,5 +56,5 @@ self-replace = { workspace = true }
 
 [dev-dependencies]
 anyhow = { workspace = true }
-assert_fs = { version = "1.1.2" }
+assert_fs = { workspace = true }
 indoc = { workspace = true }

crates/uv-install-wheel/src/wheel.rs

@@ -1,6 +1,6 @@
 use std::collections::HashMap;
 use std::io;
-use std::io::{BufReader, Read, Seek, Write};
+use std::io::{BufReader, Read, Write};
 use std::path::{Path, PathBuf};
 
 use data_encoding::BASE64URL_NOPAD;
@@ -144,7 +144,7 @@ fn format_shebang(executable: impl AsRef<Path>, os_name: &str, relocatable: bool
 ///
 /// <https://github.com/pypa/pip/blob/76e82a43f8fb04695e834810df64f2d9a2ff6020/src/pip/_vendor/distlib/scripts.py#L121-L126>
 fn get_script_executable(python_executable: &Path, is_gui: bool) -> PathBuf {
-    // Only check for pythonw.exe on Windows
+    // Only check for `pythonw.exe` on Windows.
     if cfg!(windows) && is_gui {
         python_executable
             .file_name()
@@ -431,22 +431,41 @@ fn install_script(
         Err(err) => return Err(Error::Io(err)),
     }
     let size_and_encoded_hash = if start == placeholder_python {
-        let is_gui = {
+        // Read the rest of the first line, one byte at a time, until we hit a newline.
-            let mut buf = vec![0; 1];
+        let mut is_gui = false;
-            script.read_exact(&mut buf)?;
+        let mut first = true;
-            if buf == b"w" {
+        let mut byte = [0u8; 1];
-                true
+        loop {
-            } else {
+            match script.read_exact(&mut byte) {
-                script.seek_relative(-1)?;
+                Ok(()) => {
-                false
+                    if byte[0] == b'\n' || byte[0] == b'\r' {
+                        break;
+                    }
+
+                    // Check if this is a GUI script (starts with 'w').
+                    if first {
+                        is_gui = byte[0] == b'w';
+                        first = false;
+                    }
+                }
+                Err(err) if err.kind() == io::ErrorKind::UnexpectedEof => break,
+                Err(err) => return Err(Error::Io(err)),
             }
-        };
+        }
+
         let executable = get_script_executable(&layout.sys_executable, is_gui);
         let executable = get_relocatable_executable(executable, layout, relocatable)?;
-        let start = format_shebang(&executable, &layout.os_name, relocatable)
+        let mut start = format_shebang(&executable, &layout.os_name, relocatable)
             .as_bytes()
             .to_vec();
 
+        // Use appropriate line ending for the platform.
+        if layout.os_name == "nt" {
+            start.extend_from_slice(b"\r\n");
+        } else {
+            start.push(b'\n');
+        }
+
         let mut target = uv_fs::tempfile_in(&layout.scheme.scripts)?;
         let size_and_encoded_hash = copy_and_hash(&mut start.chain(script), &mut target)?;
 

crates/uv-installer/Cargo.toml

@@ -35,6 +35,7 @@ uv-redacted = { workspace = true }
 uv-static = { workspace = true }
 uv-types = { workspace = true }
 uv-warnings = { workspace = true }
+uv-workspace = { workspace = true }
 
 anyhow = { workspace = true }
 async-channel = { workspace = true }

crates/uv-installer/src/compile.rs

@@ -2,7 +2,7 @@ use std::panic::AssertUnwindSafe;
 use std::path::{Path, PathBuf};
 use std::process::Stdio;
 use std::time::Duration;
-use std::{io, panic};
+use std::{env, io, panic};
 
 use async_channel::{Receiver, SendError};
 use tempfile::tempdir_in;
@@ -20,7 +20,7 @@ use uv_warnings::warn_user;
 
 const COMPILEALL_SCRIPT: &str = include_str!("pip_compileall.py");
 /// This is longer than any compilation should ever take.
-const COMPILE_TIMEOUT: Duration = Duration::from_secs(60);
+const DEFAULT_COMPILE_TIMEOUT: Duration = Duration::from_secs(60);
 
 #[derive(Debug, Error)]
 pub enum CompileError {
@@ -55,6 +55,8 @@ pub enum CompileError {
     },
     #[error("Python startup timed out ({}s)", _0.as_secs_f32())]
     StartupTimeout(Duration),
+    #[error("Got invalid value from environment for {var}: {message}.")]
+    EnvironmentError { var: &'static str, message: String },
 }
 
 /// Bytecode compile all file in `dir` using a pool of Python interpreters running a Python script
@@ -88,6 +90,30 @@ pub async fn compile_tree(
     let tempdir = tempdir_in(cache).map_err(CompileError::TempFile)?;
     let pip_compileall_py = tempdir.path().join("pip_compileall.py");
 
+    let timeout: Option<Duration> = match env::var(EnvVars::UV_COMPILE_BYTECODE_TIMEOUT) {
+        Ok(value) => match value.as_str() {
+            "0" => None,
+            _ => match value.parse::<u64>().map(Duration::from_secs) {
+                Ok(duration) => Some(duration),
+                Err(_) => {
+                    return Err(CompileError::EnvironmentError {
+                        var: "UV_COMPILE_BYTECODE_TIMEOUT",
+                        message: format!("Expected an integer number of seconds, got \"{value}\""),
+                    });
+                }
+            },
+        },
+        Err(_) => Some(DEFAULT_COMPILE_TIMEOUT),
+    };
+    if let Some(duration) = timeout {
+        debug!(
+            "Using bytecode compilation timeout of {}s",
+            duration.as_secs()
+        );
+    } else {
+        debug!("Disabling bytecode compilation timeout");
+    }
+
     debug!("Starting {} bytecode compilation workers", worker_count);
     let mut worker_handles = Vec::new();
     for _ in 0..worker_count {
@@ -98,6 +124,7 @@ pub async fn compile_tree(
             python_executable.to_path_buf(),
             pip_compileall_py.clone(),
             receiver.clone(),
+            timeout,
         );
 
         // Spawn each worker on a dedicated thread.
@@ -189,6 +216,7 @@ async fn worker(
     interpreter: PathBuf,
     pip_compileall_py: PathBuf,
     receiver: Receiver<PathBuf>,
+    timeout: Option<Duration>,
 ) -> Result<(), CompileError> {
     fs_err::tokio::write(&pip_compileall_py, COMPILEALL_SCRIPT)
         .await
@@ -208,12 +236,17 @@ async fn worker(
             }
         }
     };
+
     // Handle a broken `python` by using a timeout, one that's higher than any compilation
     // should ever take.
     let (mut bytecode_compiler, child_stdin, mut child_stdout, mut child_stderr) =
-        tokio::time::timeout(COMPILE_TIMEOUT, wait_until_ready)
+        if let Some(duration) = timeout {
-            .await
+            tokio::time::timeout(duration, wait_until_ready)
-            .map_err(|_| CompileError::StartupTimeout(COMPILE_TIMEOUT))??;
+                .await
+                .map_err(|_| CompileError::StartupTimeout(timeout.unwrap()))??
+        } else {
+            wait_until_ready.await?
+        };
 
     let stderr_reader = tokio::task::spawn(async move {
         let mut child_stderr_collected: Vec<u8> = Vec::new();
@@ -223,7 +256,7 @@ async fn worker(
         Ok(child_stderr_collected)
     });
 
-    let result = worker_main_loop(receiver, child_stdin, &mut child_stdout).await;
+    let result = worker_main_loop(receiver, child_stdin, &mut child_stdout, timeout).await;
     // Reap the process to avoid zombies.
     let _ = bytecode_compiler.kill().await;
 
@@ -340,6 +373,7 @@ async fn worker_main_loop(
     receiver: Receiver<PathBuf>,
     mut child_stdin: ChildStdin,
     child_stdout: &mut BufReader<ChildStdout>,
+    timeout: Option<Duration>,
 ) -> Result<(), CompileError> {
     let mut out_line = String::new();
     while let Ok(source_file) = receiver.recv().await {
@@ -372,12 +406,16 @@ async fn worker_main_loop(
 
         // Handle a broken `python` by using a timeout, one that's higher than any compilation
         // should ever take.
-        tokio::time::timeout(COMPILE_TIMEOUT, python_handle)
+        if let Some(duration) = timeout {
-            .await
+            tokio::time::timeout(duration, python_handle)
-            .map_err(|_| CompileError::CompileTimeout {
+                .await
-                elapsed: COMPILE_TIMEOUT,
+                .map_err(|_| CompileError::CompileTimeout {
-                source_file: source_file.clone(),
+                    elapsed: duration,
-            })??;
+                    source_file: source_file.clone(),
+                })??;
+        } else {
+            python_handle.await?;
+        }
 
         // This is a sanity check, if we don't get the path back something has gone wrong, e.g.
         // we're not actually running a python interpreter.

crates/uv-installer/src/installer.rs

@@ -107,10 +107,10 @@ impl<'a> Installer<'a> {
         rayon::spawn(move || {
             let result = install(
                 wheels,
-                layout,
+                &layout,
-                installer_name,
+                installer_name.as_ref(),
                 link_mode,
-                reporter,
+                reporter.as_ref(),
                 relocatable,
                 installer_metadata,
             );
@@ -137,10 +137,10 @@ impl<'a> Installer<'a> {
 
         install(
             wheels,
-            self.venv.interpreter().layout(),
+            &self.venv.interpreter().layout(),
-            self.name,
+            self.name.as_ref(),
             self.link_mode,
-            self.reporter,
+            self.reporter.as_ref(),
             self.venv.relocatable(),
             self.metadata,
         )
@@ -151,10 +151,10 @@ impl<'a> Installer<'a> {
 #[instrument(skip_all, fields(num_wheels = %wheels.len()))]
 fn install(
     wheels: Vec<CachedDist>,
-    layout: Layout,
+    layout: &Layout,
-    installer_name: Option<String>,
+    installer_name: Option<&String>,
     link_mode: LinkMode,
-    reporter: Option<Arc<dyn Reporter>>,
+    reporter: Option<&Arc<dyn Reporter>>,
     relocatable: bool,
     installer_metadata: bool,
 ) -> Result<Vec<CachedDist>> {
@@ -163,7 +163,7 @@ fn install(
     let locks = uv_install_wheel::Locks::default();
     wheels.par_iter().try_for_each(|wheel| {
         uv_install_wheel::install_wheel(
-            &layout,
+            layout,
             relocatable,
             wheel.path(),
             wheel.filename(),
@@ -176,7 +176,7 @@ fn install(
             } else {
                 Some(wheel.cache_info())
             },
-            installer_name.as_deref(),
+            installer_name.map(String::as_str),
             installer_metadata,
             link_mode,
             &locks,

crates/uv-installer/src/plan.rs

@@ -1,10 +1,11 @@
-use anyhow::{Result, bail};
 use std::sync::Arc;
+
+use anyhow::{Result, bail};
 use tracing::{debug, warn};
 
 use uv_cache::{Cache, CacheBucket, WheelCache};
 use uv_cache_info::Timestamp;
-use uv_configuration::{BuildOptions, ConfigSettings, Reinstall};
+use uv_configuration::{BuildOptions, ConfigSettings, PackageConfigSettings, Reinstall};
 use uv_distribution::{
     BuiltWheelIndex, HttpArchivePointer, LocalArchivePointer, RegistryWheelIndex,
 };
@@ -17,6 +18,7 @@ use uv_platform_tags::Tags;
 use uv_pypi_types::VerbatimParsedUrl;
 use uv_python::PythonEnvironment;
 use uv_types::HashStrategy;
+use uv_workspace::pyproject::ExtraBuildDependencies;
 
 use crate::SitePackages;
 use crate::satisfies::RequirementSatisfaction;
@@ -52,6 +54,8 @@ impl<'a> Planner<'a> {
         hasher: &HashStrategy,
         index_locations: &IndexLocations,
         config_settings: &ConfigSettings,
+        config_settings_package: &PackageConfigSettings,
+        extra_build_dependencies: &ExtraBuildDependencies,
         cache: &Cache,
         venv: &PythonEnvironment,
         tags: &Tags,
@@ -59,7 +63,14 @@ impl<'a> Planner<'a> {
         // Index all the already-downloaded wheels in the cache.
         let mut registry_index =
             RegistryWheelIndex::new(cache, tags, index_locations, hasher, config_settings);
-        let built_index = BuiltWheelIndex::new(cache, tags, hasher, config_settings);
+        let built_index = BuiltWheelIndex::new(
+            cache,
+            tags,
+            hasher,
+            config_settings,
+            config_settings_package,
+            extra_build_dependencies,
+        );
 
         let mut cached = vec![];
         let mut remote = vec![];

crates/uv-installer/src/satisfies.rs

@@ -241,7 +241,7 @@ impl RequirementSatisfaction {
                     return Self::Mismatch;
                 };
 
-                if *requested_editable != installed_editable.unwrap_or_default() {
+                if requested_editable != installed_editable {
                     trace!(
                         "Editable mismatch: {:?} vs. {:?}",
                         *requested_editable,