uv/docs/guides/package.md
2025-07-05 09:22:55 +08:00

200 lines
6.7 KiB
Markdown

---
title: Building and publishing a package
description: A guide to using uv to build and publish Python packages to a package index, like PyPI.
---
# Building and publishing a package
uv supports building Python packages into source and binary distributions via `uv build` and
uploading them to a registry with `uv publish`.
## Preparing your project for packaging
Before attempting to publish your project, you'll want to make sure it's ready to be packaged for
distribution.
If your project does not include a `[build-system]` definition in the `pyproject.toml`, uv will not
build it by default. This means that your project may not be ready for distribution. Read more about
the effect of declaring a build system in the
[project concept](../concepts/projects/config.md#build-systems) documentation.
!!! note
If you have internal packages that you do not want to be published, you can mark them as
private:
```toml
[project]
classifiers = ["Private :: Do Not Upload"]
```
This setting makes PyPI reject your uploaded package from publishing. It does not affect
security or privacy settings on alternative registries.
We also recommend only generating [per-project PyPI API tokens](https://pypi.org/help/#apitoken):
Without a PyPI token matching the project, it can't be accidentally published.
## Building your package
Build your package with `uv build`:
```console
$ uv build
```
By default, `uv build` will build the project in the current directory, and place the built
artifacts in a `dist/` subdirectory.
Alternatively, `uv build <SRC>` will build the package in the specified directory, while
`uv build --package <PACKAGE>` will build the specified package within the current workspace.
!!! info
By default, `uv build` respects `tool.uv.sources` when resolving build dependencies from the
`build-system.requires` section of the `pyproject.toml`. When publishing a package, we recommend
running `uv build --no-sources` to ensure that the package builds correctly when `tool.uv.sources`
is disabled, as is the case when using other build tools, like [`pypa/build`](https://github.com/pypa/build).
## Updating your version
The `uv version` command provides conveniences for updating the version of your package before you
publish it.
[See the project docs for reading your package's version](./projects.md#managing-version).
To set the the exact version of your package, just pass that version:
```console
$ uv version 1.0.0
hello-world 0.7.0 => 1.0.0
```
If you want to preview the change without actually applying it, use the `--dry-run` flag:
```console
$ uv version 2.0.0 --dry-run
hello-world 1.0.0 => 2.0.0
$ uv version
hello-world 1.0.0
```
If you want to change the version of a particular package, use the `--package` flag:
```console
$ uv version --package hello-world 1.2.3
hello-world 1.0.0 => 1.2.3
```
To increase the version of your package, use the `--bump` flag:
```console
$ uv version --bump minor
hello-world 1.2.3 => 1.3.0
```
The `--bump` flag can be passed multiple times, and uv will run them in the following order that
prevents bumps from clobbering eachother:
```text
major > minor > patch > stable > alpha > beta > rc > post > dev
```
When you're on a stable version and want to start shipping prereleases, you'll want to bump the
release and the prerelease:
```console
$ uv version --bump patch --bump beta
hello-world 1.3.0 => 1.3.1b1
```
!!! Note
If you only bump the prerelease here it will actually decrease the current version.
`uv version` will error if that ever happens. If you intended to do that, you can pass
`--allow-decreases` to disable the check.
When you're on a prerelease and want to ship another, you can just bump the prerelease:
```console
uv version --bump beta
hello-world 1.3.0b1 => 1.3.1b2
```
When you're on a prerelease and want to ship a stable version, you can bump to stable:
```console
uv version --bump stable
hello-world 1.3.1b2 => 1.3.1
```
!!! info
By default, when `uv version` modifies your package it will lock and sync your project to
ensure everything sees the change. To prevent locking and syncing, pass `--frozen`. To just
prevent syncing, pass `--no-sync`.
## Publishing your package
Publish your package with `uv publish`:
```console
$ uv publish
```
Set a PyPI token with `--token` or `UV_PUBLISH_TOKEN`, or set a username with `--username` or
`UV_PUBLISH_USERNAME` and password with `--password` or `UV_PUBLISH_PASSWORD`. For publishing to
PyPI from GitHub Actions, you don't need to set any credentials. Instead,
[add a trusted publisher to the PyPI project](https://docs.pypi.org/trusted-publishers/adding-a-publisher/).
!!! note
PyPI does not support publishing with username and password anymore, instead you need to
generate a token. Using a token is equivalent to setting `--username __token__` and using the
token as password.
If you're using a custom index through `[[tool.uv.index]]`, add `publish-url` and use
`uv publish --index <name>`. For example:
```toml
[[tool.uv.index]]
name = "testpypi"
url = "https://test.pypi.org/simple/"
publish-url = "https://test.pypi.org/legacy/"
explicit = true
```
!!! note
When using `uv publish --index <name>`, the `pyproject.toml` must be present, i.e., you need to
have a checkout step in a publish CI job.
Even though `uv publish` retries failed uploads, it can happen that publishing fails in the middle,
with some files uploaded and some files still missing. With PyPI, you can retry the exact same
command, existing identical files will be ignored. With other registries, use
`--check-url <index url>` with the index URL (not the publishing URL) the packages belong to. When
using `--index`, the index URL is used as check URL. uv will skip uploading files that are identical
to files in the registry, and it will also handle raced parallel uploads. Note that existing files
need to match exactly with those previously uploaded to the registry, this avoids accidentally
publishing source distribution and wheels with different contents for the same version.
## Installing your package
Test that the package can be installed and imported with `uv run`:
```console
$ uv run --with <PACKAGE> --no-project -- python -c "import <PACKAGE>"
```
The `--no-project` flag is used to avoid installing the package from your local project directory.
!!! tip
If you have recently installed the package, you may need to include the
`--refresh-package <PACKAGE>` option to avoid using a cached version of the package.
## Next steps
To learn more about publishing packages, check out the
[PyPA guides](https://packaging.python.org/en/latest/guides/section-build-and-publish/) on building
and publishing.
Or, read on for [guides](./integration/index.md) on integrating uv with other software.