Files

T

William Woodruff 25d5549836 Evaluate extras and groups when determining auditable packages (#18511 )

## Summary

I've made `uv audit`'s approach to handling extras and groups
(explicitly) subtractive: we don't support flags like `--dev` (since `uv
audit` audits everything by default); instead, we only support flags
like `--no-dev`, `--no-group`, etc., that remove items from the
to-be-audited set.

To accomplish that, I've abstracted the filtering into a new
`Lock::packages_for_audit` API (maybe there's a better location for
it?). Implementation wise, it does a BFS similar to the one used in `uv
tree`. I _think_ there's some room/opportunity for DRYing there but I
wanted to keep the PR small/local 🙂

See https://github.com/astral-sh/uv/issues/18506.

## Test Plan

None yet.

---------

Signed-off-by: William Woodruff <william@astral.sh>
Co-authored-by: konsti <konstin@mailbox.org>

2026-03-26 10:28:00 -04:00

src

Evaluate extras and groups when determining auditable packages (#18511 )

2026-03-26 10:28:00 -04:00

build.rs

Avoid version commit info build churn when using jj (#18685 )

2026-03-24 07:19:32 -05:00

Cargo.toml

Bump version to 0.11.1 (#18704 )

2026-03-24 22:18:22 +00:00

README.md

Bump version to 0.11.1 (#18704 )

2026-03-24 22:18:22 +00:00

README.md

uv-cli

This crate is an internal component of uv. The Rust API exposed here is unstable and will have frequent breaking changes.

This version (0.0.34) is a component of uv 0.11.1. The source can be found here.

See uv's crate versioning policy for details on versioning.