This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with | minor | `0.9.28` → `0.10.1` | --- ### Release Notes <details> <summary>astral-sh/uv (astral-sh/uv)</summary> ### [`v0.10.1`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0101) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.10.0...0.10.1) Released on 2026-02-10. ##### Enhancements - Don't panic on metadata read errors ([#​17904](https://redirect.github.com/astral-sh/uv/pull/17904)) - Skip empty workspace members instead of failing ([#​17901](https://redirect.github.com/astral-sh/uv/pull/17901)) - Don't fail creating a read-only `sdist-vX/.git` if it already exists ([#​17825](https://redirect.github.com/astral-sh/uv/pull/17825)) ##### Documentation - Suggest `uv python update-shell` over `uv tool update-shell` in Python docs ([#​17941](https://redirect.github.com/astral-sh/uv/pull/17941)) ### [`v0.10.0`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0100) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.30...0.10.0) Since we released uv [0.9.0](https://redirect.github.com/astral-sh/uv/releases/tag/0.9.0) in October of 2025, we've accumulated various changes that improve correctness and user experience, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution. We expect most users to be able to upgrade without making changes. This release also includes the stabilization of preview features. Python upgrades are now stable, including the `uv python upgrade` command, `uv python install --upgrade`, and automatically upgrading Python patch versions in virtual environments when a new version is installed. The `add-bounds` and `extra-build-dependencies` settings are now stable. Finally, the `uv workspace dir` and `uv workspace list` utilities for writing scripts against workspace members are now stable. ##### Breaking changes - **Require `--clear` to remove existing virtual environments in `uv venv`** ([#​17757](https://redirect.github.com/astral-sh/uv/pull/17757)) Previously, `uv venv` would prompt for confirmation before removing an existing virtual environment in interactive contexts, and remove it without confirmation in non-interactive contexts. Now, `uv venv` requires the `--clear` flag to remove an existing virtual environment. A warning for this change was added in [uv 0.8](https://redirect.github.com/astral-sh/uv/blob/main/changelogs/0.8.x.md#breaking-changes). You can opt out of this behavior by passing the `--clear` flag or setting `UV_VENV_CLEAR=1`. - **Error if multiple indexes include `default = true`** ([#​17011](https://redirect.github.com/astral-sh/uv/pull/17011)) Previously, uv would silently accept multiple indexes with `default = true` and use the first one. Now, uv will error if multiple indexes are marked as the default. You cannot opt out of this behavior. Remove `default = true` from all but one index. - **Error when an `explicit` index is unnamed** ([#​17777](https://redirect.github.com/astral-sh/uv/pull/17777)) Explicit indexes can only be used via the `[tool.uv.sources]` table, which requires referencing the index by name. Previously, uv would silently accept unnamed explicit indexes, which could never be referenced. Now, uv will error if an explicit index does not have a name. You cannot opt out of this behavior. Add a `name` to the explicit index or remove the entry. - **Install alternative Python executables using their implementation name** ([#​17756](https://redirect.github.com/astral-sh/uv/pull/17756), [#​17760](https://redirect.github.com/astral-sh/uv/pull/17760)) Previously, `uv python install` would install PyPy, GraalPy, and Pyodide executables with names like `python3.10` into the bin directory. Now, these executables will be named using their implementation name, e.g., `pypy3.10`, `graalpy3.10`, and `pyodide3.12`, to avoid conflicting with CPython installations. You cannot opt out of this behavior. - **Respect global Python version pins in `uv tool run` and `uv tool install`** ([#​14112](https://redirect.github.com/astral-sh/uv/pull/14112)) Previously, `uv tool run` and `uv tool install` did not respect the global Python version pin (set via `uv python pin --global`). Now, these commands will use the global Python version when no explicit version is requested. For `uv tool install`, if the tool is already installed, the Python version will not change unless `--reinstall` or `--python` is provided. If the tool was previously installed with an explicit `--python` flag, the global pin will not override it. You can opt out of this behavior by providing an explicit `--python` flag. - **Remove Debian Bookworm, Alpine 3.21, and Python 3.8 Docker images** ([#​17755](https://redirect.github.com/astral-sh/uv/pull/17755)) The Debian Bookworm and Alpine 3.21 images were replaced by Debian Trixie and Alpine 3.22 as defaults in [uv 0.9](https://redirect.github.com/astral-sh/uv/pull/15352). These older images are now removed. Python 3.8 images are also removed, as Python 3.8 is no longer supported in the Trixie or Alpine base images. The following image tags are no longer published: - `uv:bookworm`, `uv:bookworm-slim` - `uv:alpine3.21` - `uv:python3.8-*` Use `uv:debian` or `uv:trixie` instead of `uv:bookworm`, `uv:alpine` or `uv:alpine3.22` instead of `uv:alpine3.21`, and a newer Python version instead of `uv:python3.8-*`. - **Drop PPC64 (big endian) builds** ([#​17626](https://redirect.github.com/astral-sh/uv/pull/17626)) uv no longer provides pre-built binaries for PPC64 (big endian). This platform appears to be largely unused and is only supported on a single manylinux version. PPC64LE (little endian) builds are unaffected. Building uv from source is still supported for this platform. - **Skip generating `activate.csh` for relocatable virtual environments** ([#​17759](https://redirect.github.com/astral-sh/uv/pull/17759)) Previously, `uv venv --relocatable` would generate an `activate.csh` script that contained hardcoded paths, making it incompatible with relocation. Now, the `activate.csh` script is not generated for relocatable virtual environments. You cannot opt out of this behavior. - **Require username when multiple credentials match a URL** ([#​16983](https://redirect.github.com/astral-sh/uv/pull/16983)) When using `uv auth login` to store credentials, you can register multiple username and password combinations for the same host. Previously, when uv needed to authenticate and multiple credentials matched the URL (e.g., when retrieving a token with `uv auth token`), uv would pick the first match. Now, uv will error instead. You cannot opt out of this behavior. Include the username in the request, e.g., `uv auth token --username foo example.com`. - **Avoid invalidating the lockfile versions after an `exclude-newer` change** ([#​17721](https://redirect.github.com/astral-sh/uv/pull/17721)) Previously, changing the `exclude-newer` setting would cause package versions to be upgraded, ignoring the lockfile entirely. Now, uv will only change package versions if they are no longer within the `exclude-newer` range. You can restore the previous behavior by using `--upgrade` or `--upgrade-package` to opt-in to package version changes. - **Upgrade `uv format` to Ruff 0.15.0** ([#​17838](https://redirect.github.com/astral-sh/uv/pull/17838)) `uv format` now uses [Ruff 0.15.0](https://redirect.github.com/astral-sh/ruff/releases/tag/0.15.0), which uses the [2026 style guide](https://astral.sh/blog/ruff-v0.15.0#the-ruff-2026-style-guide). See the blog post for details. The formatting of code is likely to change. You can opt out of this behavior by requesting an older Ruff version, e.g., `uv format --version 0.14.14`. - **Update uv crate test features to use `test-` as a prefix** ([#​17860](https://redirect.github.com/astral-sh/uv/pull/17860)) This change only affects redistributors of uv. The Cargo features used to gate test dependencies, e.g., `pypi`, have been renamed with a `test-` prefix for clarity, e.g., `test-pypi`. ##### Stabilizations - **`uv python upgrade` and `uv python install --upgrade`** ([#​17766](https://redirect.github.com/astral-sh/uv/pull/17766)) When installing Python versions, an [intermediary directory](https://docs.astral.sh/uv/concepts/python-versions/#minor-version-directories) without the patch version attached will be created, and virtual environments will be transparently upgraded to new patch versions. See the [Python version documentation](https://docs.astral.sh/uv/concepts/python-versions/#upgrading-python-versions) for more details. - **`uv add --bounds` and the `add-bounds` configuration option** ([#​17660](https://redirect.github.com/astral-sh/uv/pull/17660)) This does not come with any behavior changes. You will no longer see an experimental warning when using `uv add --bounds` or `add-bounds` in configuration. - **`uv workspace list` and `uv workspace dir`** ([#​17768](https://redirect.github.com/astral-sh/uv/pull/17768)) This does not come with any behavior changes. You will no longer see an experimental warning when using these commands. - **`extra-build-dependencies`** ([#​17767](https://redirect.github.com/astral-sh/uv/pull/17767)) This does not come with any behavior changes. You will no longer see an experimental warning when using `extra-build-dependencies` in configuration. ##### Enhancements - Improve ABI tag error message phrasing ([#​17878](https://redirect.github.com/astral-sh/uv/pull/17878)) - Introduce a 10s connect timeout ([#​17733](https://redirect.github.com/astral-sh/uv/pull/17733)) - Allow using `pyx.dev` as a target in `uv auth` commands despite `PYX_API_URL` differing ([#​17856](https://redirect.github.com/astral-sh/uv/pull/17856)) ##### Bug fixes - Support all CPython ABI tag suffixes properly ([#​17817](https://redirect.github.com/astral-sh/uv/pull/17817)) - Add support for detecting PowerShell on Linux and macOS ([#​17870](https://redirect.github.com/astral-sh/uv/pull/17870)) - Retry timeout errors for streams ([#​17875](https://redirect.github.com/astral-sh/uv/pull/17875)) ### [`v0.9.30`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0930) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.29...0.9.30) Released on 2026-02-04. ##### Python - Add CPython 3.14.3 and 3.13.12 ([#​17849](https://redirect.github.com/astral-sh/uv/pull/17849)) ##### Enhancements - Allow comma-separated values for `--extra` option ([#​17525](https://redirect.github.com/astral-sh/uv/pull/17525)) - Check all files during a dry-run publish instead of stopping at the first failure ([#​17785](https://redirect.github.com/astral-sh/uv/pull/17785)) - Clarify `UV_HTTP_TIMEOUT` error message ([#​17493](https://redirect.github.com/astral-sh/uv/pull/17493)) ##### Preview features - Use relocatable virtual environments by default ([#​17770](https://redirect.github.com/astral-sh/uv/pull/17770)) ##### Bug fixes - Fix deadlock on token refresh in `uv publish` when using pyx ([#​17832](https://redirect.github.com/astral-sh/uv/pull/17832)) - Ignore global Python pins when incompatible with project ([#​15473](https://redirect.github.com/astral-sh/uv/pull/15473)) ### [`v0.9.29`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0929) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.28...0.9.29) Released on 2026-02-03. ##### Python - Update to Pyodide 0.29.3 ([#​17730](https://redirect.github.com/astral-sh/uv/pull/17730)) ##### Enhancements - Add wheel-tag-style aliases for manylinux platform names ([#​17750](https://redirect.github.com/astral-sh/uv/pull/17750)) - Hint on `uv version --bump dev` similar to pre-release bumps ([#​17796](https://redirect.github.com/astral-sh/uv/pull/17796)) - Improve display of RFC 9457 Problem Detail responses in `uv publish` server errors ([#​17787](https://redirect.github.com/astral-sh/uv/pull/17787)) - Improve the wording of publish errors during dry-run ([#​17782](https://redirect.github.com/astral-sh/uv/pull/17782)) - Set backoff to 10 retries ([#​17816](https://redirect.github.com/astral-sh/uv/pull/17816)) - Add properties to synthentic and project roots in Cyclone DX exports ([#​17820](https://redirect.github.com/astral-sh/uv/pull/17820)) - Identify the invidividual clients in `uv publish` trace logs ([#​17784](https://redirect.github.com/astral-sh/uv/pull/17784)) ##### Preview features - Remove special casing for `base` and `default` conda environment names ([#​17758](https://redirect.github.com/astral-sh/uv/pull/17758)) ##### Bug fixes - Fix `PYTHONHOME` inheritance when spawning different Python versions ([#​17821](https://redirect.github.com/astral-sh/uv/pull/17821)) - Fix wheel rejections on freethreading+debug builds ([#​17812](https://redirect.github.com/astral-sh/uv/pull/17812)) - Pad with zeros during comparisons in `EqualStar` and `NotEqualStar` operators ([#​17751](https://redirect.github.com/astral-sh/uv/pull/17751)) - Reject unknown field names in conflict declarations ([#​17727](https://redirect.github.com/astral-sh/uv/pull/17727)) - Fix panics in `system-configuration` in sandboxes ([#​17829](https://redirect.github.com/astral-sh/uv/pull/17829)) ##### Documentation - Update pip pre-release compatibility information ([#​17788](https://redirect.github.com/astral-sh/uv/pull/17788)) ##### Security - Hide a subset of environment variable values in `--help` ([#​17745](https://redirect.github.com/astral-sh/uv/pull/17745)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1yZWxlYXNlIiwiaW50ZXJuYWwiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
uv
An extremely fast Python package and project manager, written in Rust.
Installing Trio's dependencies with a warm cache.
Highlights
- A single tool to replace
pip,pip-tools,pipx,poetry,pyenv,twine,virtualenv, and more. - 10-100x faster than
pip. - Provides comprehensive project management, with a universal lockfile.
- Runs scripts, with support for inline dependency metadata.
- Installs and manages Python versions.
- Runs and installs tools published as Python packages.
- Includes a pip-compatible interface for a performance boost with a familiar CLI.
- Supports Cargo-style workspaces for scalable projects.
- Disk-space efficient, with a global cache for dependency deduplication.
- Installable without Rust or Python via
curlorpip. - Supports macOS, Linux, and Windows.
uv is backed by Astral, the creators of Ruff and ty.
Installation
Install uv with our standalone installers:
# On macOS and Linux.
curl -LsSf https://astral.sh/uv/install.sh | sh
# On Windows.
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
Or, from PyPI:
# With pip.
pip install uv
# Or pipx.
pipx install uv
If installed via the standalone installer, uv can update itself to the latest version:
uv self update
See the installation documentation for details and alternative installation methods.
Documentation
uv's documentation is available at docs.astral.sh/uv.
Additionally, the command line reference documentation can be viewed with uv help.
Features
Projects
uv manages project dependencies and environments, with support for lockfiles, workspaces, and more,
similar to rye or poetry:
$ uv init example
Initialized project `example` at `/home/user/example`
$ cd example
$ uv add ruff
Creating virtual environment at: .venv
Resolved 2 packages in 170ms
Built example @ file:///home/user/example
Prepared 2 packages in 627ms
Installed 2 packages in 1ms
+ example==0.1.0 (from file:///home/user/example)
+ ruff==0.5.0
$ uv run ruff check
All checks passed!
$ uv lock
Resolved 2 packages in 0.33ms
$ uv sync
Resolved 2 packages in 0.70ms
Audited 1 package in 0.02ms
See the project documentation to get started.
uv also supports building and publishing projects, even if they're not managed with uv. See the publish guide to learn more.
Scripts
uv manages dependencies and environments for single-file scripts.
Create a new script and add inline metadata declaring its dependencies:
$ echo 'import requests; print(requests.get("https://astral.sh"))' > example.py
$ uv add --script example.py requests
Updated `example.py`
Then, run the script in an isolated virtual environment:
$ uv run example.py
Reading inline script metadata from: example.py
Installed 5 packages in 12ms
<Response [200]>
See the scripts documentation to get started.
Tools
uv executes and installs command-line tools provided by Python packages, similar to pipx.
Run a tool in an ephemeral environment using uvx (an alias for uv tool run):
$ uvx pycowsay 'hello world!'
Resolved 1 package in 167ms
Installed 1 package in 9ms
+ pycowsay==0.0.0.2
"""
------------
< hello world! >
------------
\ ^__^
\ (oo)\_______
(__)\ )\/\
||----w |
|| ||
Install a tool with uv tool install:
$ uv tool install ruff
Resolved 1 package in 6ms
Installed 1 package in 2ms
+ ruff==0.5.0
Installed 1 executable: ruff
$ ruff --version
ruff 0.5.0
See the tools documentation to get started.
Python versions
uv installs Python and allows quickly switching between versions.
Install multiple Python versions:
$ uv python install 3.12 3.13 3.14
Installed 3 versions in 972ms
+ cpython-3.12.12-macos-aarch64-none (python3.12)
+ cpython-3.13.9-macos-aarch64-none (python3.13)
+ cpython-3.14.0-macos-aarch64-none (python3.14)
Download Python versions as needed:
$ uv venv --python 3.12.0
Using Python 3.12.0
Creating virtual environment at: .venv
Activate with: source .venv/bin/activate
$ uv run --python pypy@3.8 -- python --version
Python 3.8.16 (a9dbdca6fc3286b0addd2240f11d97d8e8de187a, Dec 29 2022, 11:45:30)
[PyPy 7.3.11 with GCC Apple LLVM 13.1.6 (clang-1316.0.21.2.5)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>>>
Use a specific Python version in the current directory:
$ uv python pin 3.11
Pinned `.python-version` to `3.11`
See the Python installation documentation to get started.
The pip interface
uv provides a drop-in replacement for common pip, pip-tools, and virtualenv commands.
uv extends their interfaces with advanced features, such as dependency version overrides, platform-independent resolutions, reproducible resolutions, alternative resolution strategies, and more.
Migrate to uv without changing your existing workflows — and experience a 10-100x speedup — with the
uv pip interface.
Compile requirements into a platform-independent requirements file:
$ uv pip compile docs/requirements.in \
--universal \
--output-file docs/requirements.txt
Resolved 43 packages in 12ms
Create a virtual environment:
$ uv venv
Using Python 3.12.3
Creating virtual environment at: .venv
Activate with: source .venv/bin/activate
Install the locked requirements:
$ uv pip sync docs/requirements.txt
Resolved 43 packages in 11ms
Installed 43 packages in 208ms
+ babel==2.15.0
+ black==24.4.2
+ certifi==2024.7.4
...
See the pip interface documentation to get started.
Contributing
We are passionate about supporting contributors of all levels of experience and would love to see you get involved in the project. See the contributing guide to get started.
FAQ
How do you pronounce uv?
It's pronounced as "you - vee" (/juː viː/)
How should I stylize uv?
Just "uv", please. See the style guide for details.
What platforms does uv support?
See uv's platform support document.
Is uv ready for production?
Yes, uv is stable and widely used in production. See uv's versioning policy document for details.
Acknowledgements
uv's dependency resolver uses PubGrub under the hood. We're grateful to the PubGrub maintainers, especially Jacob Finkelman, for their support.
uv's Git implementation is based on Cargo.
Some of uv's optimizations are inspired by the great work we've seen in pnpm, Orogene, and Bun. We've also learned a lot from Nathaniel J. Smith's Posy and adapted its trampoline for Windows support.
License
uv is licensed under either of
- Apache License, Version 2.0, (LICENSE-APACHE or https://www.apache.org/licenses/LICENSE-2.0)
- MIT license (LICENSE-MIT or https://opensource.org/licenses/MIT)
at your option.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in uv by you, as defined in the Apache-2.0 license, shall be dually licensed as above, without any additional terms or conditions.