Try our Chrome extension
Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!
Chrome Webstore
Changedetection.io needs your support!
You can help us by supporting changedetection.io on these platforms;
- Rate us at AlternativeTo.net
- Star us on GitHub
- Follow us at Twitter/X
- G2 Software reviews
- Check us out on LinkedIn
- And tell your friends and colleagues :)
The more popular changedetection.io is, the more time we can dedicate to adding amazing features!
Many thanks :)
changedetection.io team
尚未 秒前。
False
尚未 秒前
7小时前查看单个快照
Skip to content
Navigation Menu
Sign in Appearance settings
* Platform
+ AI CODE CREATION
o GitHub Copilot Write better code with AI
o GitHub Copilot app Direct agents from issue to merge
o MCP Registry Integrate external tools
+ DEVELOPER WORKFLOWS
o Actions Automate any workflow
o Codespaces Instant dev environments
o Issues Plan and track work
o Code Review Manage code changes
o Code Quality Enforce quality at merge
+ APPLICATION SECURITY
o GitHub Advanced Security Find and fix vulnerabilities
o Code security Secure your code as you build
o Secret protection Stop leaks before they start
+ EXPLORE
o Why GitHub
o Documentation
o Blog
o Changelog
o Marketplace
View all features
* Solutions
+ BY COMPANY SIZE
o Enterprises
o Small and medium teams
o Startups
o Nonprofits
+ BY USE CASE
o App Modernization
o DevSecOps
o DevOps
o CI/CD
o View all use cases
+ BY INDUSTRY
o Healthcare
o Financial services
o Manufacturing
o Government
o View all industries
View all solutions
* Resources
+ EXPLORE BY TOPIC
o AI
o Software Development
o DevOps
o Security
o View all topics
+ EXPLORE BY TYPE
o Customer stories
o Events & webinars
o Ebooks & reports
o Business insights
o GitHub Skills
+ SUPPORT & SERVICES
o Documentation
o Customer support
o Community forum
o Trust center
o Partners
View all resources
* Open Source
+ COMMUNITY
o GitHub Sponsors Fund open source developers
+ PROGRAMS
o Security Lab
o Maintainer Community
o Accelerator
o GitHub Stars
o Archive Program
+ REPOSITORIES
o Topics
o Trending
o Collections
* Enterprise
+ ENTERPRISE SOLUTIONS
o Enterprise platform AI-powered developer platform
+ AVAILABLE ADD-ONS
o GitHub Advanced Security Enterprise-grade security features
o Copilot for Business Enterprise-grade AI features
o Premium Support Enterprise-grade 24/7 support
* Pricing
Type / to search
Sign in
Sign up Appearance settings
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Uh oh!
There was an error while loading. Please reload this page.
astral-sh / uv Public
* Notifications You must be signed in to change notification settings
* Fork 3.5k
* Star 88.5k
* Star 88.6k
* Code
* Issues 2.3k
* Pull requests 468
* Actions
* Projects
* Security and quality 6
* Insights
Additional navigation options
* Code
* Issues
* Pull requests
* Actions
* Projects
* Security and quality
* Insights
Releases: astral-sh/uv
Releases Tags
Releases · astral-sh/uv
Release list
* 0.12.3
* 0.12.2
* 0.12.1
* 0.12.0
* 0.11.33
* 0.11.32
* 0.11.31
* 0.11.30
* 0.11.29
* 0.11.28
Previous Next
Jump to release
* 0.12.3
* 0.12.2
* 0.12.1
* 0.12.0
* 0.11.33
* 0.11.32
* 0.11.31
* 0.11.30
* 0.11.29
* 0.11.28
Previous Next
0.12.3
0.12.3 Latest
Latest
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 07 Aug 16:34
Immutable release. Only release title and notes can be modified.
0.12.3
5072309
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-08-07.
Python
* Add CPython 3.13.15 (#20997)
Preview features
* Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#20992)
* Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#20991)
* Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#20990)
Performance
* Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#20989)
* Reuse compiled workspace exclusion patterns during workspace discovery (#20988)
* Speed up conflict-heavy resolutions by avoiding materialized range complements (#20982)
* Avoid slow procfs reads during Python interpreter discovery on Linux (#20987)
Documentation
* Add PEP 740 attestations to the GitHub Actions publishing example (#20986)
* Restrict the GitHub Actions publishing example to Python version tags (#20973)
* Correct --python-pin to --pin-python in the uv init --bare example (#20876)
Install uv 0.12.3
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.3/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.12.3/uv-installer.ps1 | iex "
Download uv 0.12.3
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
* dist-manifest.json
sha256:886c34b46a62de619efecf355b75a054d3cec064e55a0205ff85f2eedc30319e
45.8 KB 2026-08-07T16:34:34Z
* sha256.sum
sha256:30e7e20858d0b028d5377bd967b6f841309456420f27bfc6f8b08e524daf4b4b
1.86 KB 2026-08-07T16:34:34Z
* source.tar.gz
sha256:4c452cb8714107c376adc29f481c626f078d1435da21bd83ac8395c058d5beb5
6.92 MB 2026-08-07T16:34:34Z
* source.tar.gz.sha256
sha256:2fd687a5c6eabf4a5f06094f80eed9bd645da9d72603623b3a8b1a3716e324c9
81 Bytes 2026-08-07T16:34:34Z
* uv-aarch64-apple-darwin.tar.gz
sha256:546f7f8a6c70ff13a3a9d2bc958db3427298cebf3e0cb756f9177133b7068843
16.9 MB 2026-08-07T16:34:34Z
* uv-aarch64-apple-darwin.tar.gz.sha256
sha256:c6405505bd3b2d475f0307162727bff08bf8085b156409434ea786b3d6496615
97 Bytes 2026-08-07T16:34:35Z
* uv-aarch64-pc-windows-msvc.zip
sha256:4343217d668727b8a8eb5cad92389a1d2eeead93c89940d1b955ba1bb15462eb
17.1 MB 2026-08-07T16:34:35Z
* uv-aarch64-pc-windows-msvc.zip.sha256
sha256:c099e9d99c08ef28e30015a02abf6786b7616b9c364c3a752b68933acdbf9ce2
97 Bytes 2026-08-07T16:34:35Z
* uv-aarch64-unknown-linux-gnu.tar.gz
sha256:bb66cb52e7b1823aed1183630d8d8e5c958840d584a4c55ec10a4cfc168dcca2
19.5 MB 2026-08-07T16:34:35Z
* uv-aarch64-unknown-linux-gnu.tar.gz.sha256
sha256:d66d7cdadc3b5e681b82d591ff95f83b64b1600d637cd5283e9a8627bbc10718
102 Bytes 2026-08-07T16:34:35Z
* Source code (zip)
2026-08-07T14:49:30Z
* Source code (tar.gz)
2026-08-07T14:49:30Z
* Release attestation (json)
2026-08-07T14:49:30Z
* Show all 45 assets Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 16 henderson-01, kr0leg, 4p3rtur3, bidu2352, MrCatNerd, vasiliadi, xplosionmind, alexSkiba15, gminos, ravenexp, and 6 more reacted with thumbs up emoji 🎉 5 4p3rtur3, usernamenenad, thinh9e, congmnguyen, and Denisskas reacted with hooray emoji ❤️ 3 4p3rtur3, sweetburble, and Denisskas reacted with heart emoji 🚀 6 SymphonySimper, 4p3rtur3, dikesh, aitmrza, aaravind100, and Denisskas reacted with rocket emoji 👀 3 xplosionmind, Molkree, and Denisskas reacted with eyes emoji
All reactions
* 👍 16 reactions
* 🎉 5 reactions
* ❤️ 3 reactions
* 🚀 6 reactions
* 👀 3 reactions
25 people reacted
0.12.2
0.12.2
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 05 Aug 19:22
Immutable release. Only release title and notes can be modified.
0.12.2
46ead60
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-08-05.
Python
* Add CPython 3.15.0rc1 (#20948)
* Add CPython 3.14.7 (#20971)
Enhancements
* Ensure diagnostic hints end with a newline to prevent malformed terminal output (#20959)
Preview features
* Audit one or all installed tools with uv tool audit (#20921)
* Report physically reclaimed disk space during cache cleanup with the cache-physical-space preview feature (#20925)
Configuration
* Add UV_RUN_RLIMIT_NOFILE to set the open-file limit for commands launched by uv run (#20926)
Performance
* Speed up uv.lock parsing for wheel entries (#20881)
* Speed up uv.lock parsing for source distribution entries (#20882)
* Speed up filename extraction from distribution URLs (#20879)
* Reduce filesystem metadata lookups during bytecode compilation (#20928)
* Reuse file metadata when building source distributions (#20927)
Bug fixes
* Preserve compatibility with older uv versions when recording artifact sizes in cached wheels and source distributions (#20963)
* Avoid including workspace-root default dependency groups when syncing or exporting a selected workspace member unless explicitly requested (#20930)
Documentation
* Separate build and publish jobs in the GitHub Actions publishing guide (#20946)
* Ensure the GitHub Actions publishing example waits for the build job to finish (#20957)
* Correct typos in the Docker integration guide (#20970)
Install uv 0.12.2
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.2/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.12.2/uv-installer.ps1 | iex "
Download uv 0.12.2
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 20 4p3rtur3, Perer876, xplosionmind, MrCatNerd, thehouseisonfire, iAGorynT, bidu2352, hongphong214365, YuvalElbar6, mujiu555, and 10 more reacted with thumbs up emoji 😄 2 sweetburble and Denisskas reacted with laugh emoji 🎉 5 4p3rtur3, thinh9e, Denisskas, quarthex, and vedaka1 reacted with hooray emoji ❤️ 7 4p3rtur3, xplosionmind, kr0leg, henderson-01, iliqiliev, Orion-Grieco, and Denisskas reacted with heart emoji 🚀 13 aitmrza, jsdev-robin, 4p3rtur3, TaylorMichaelHall, hongphong214365, dikesh, hugovk, SymphonySimper, iliqiliev, FHU-yezi, and 3 more reacted with rocket emoji 👀 2 xplosionmind and Molkree reacted with eyes emoji
All reactions
* 👍 20 reactions
* 😄 2 reactions
* 🎉 5 reactions
* ❤️ 7 reactions
* 🚀 13 reactions
* 👀 2 reactions
35 people reacted
0.12.1
0.12.1
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 31 Jul 19:43
Immutable release. Only release title and notes can be modified.
0.12.1
329541a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-31.
Enhancements
* Add package-specific pre-release policies with --prerelease-package (#20837)
* Support local HTML files as flat indexes (#20802)
* Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
* Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)
Preview features
* Add automatic fixes to uv check with --fix (#20793)
* Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
* Honor direct URL constraints when validating metadata-free lockfiles (#20796)
* Ignore malformed PEP 723 scripts discovered during project checks (#20784)
* Use ty's native script exclusion in uv check (#20742)
Performance
* Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
* Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)
Bug fixes
* Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
* Make workspace-root dependency groups available to commands run from workspace members (#20840)
* Resolve --find-links paths in requirements files relative to the containing file (#20832)
* Respect configured indexes in uv tool list --outdated (#20770)
Documentation
* Document Astral GPU indexes in the PyTorch guide (#20785)
* Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)
Install uv 0.12.1
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.ps1 | iex "
Download uv 0.12.1
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 17 xplosionmind, aitmrza, bidu2352, gminos, metalinspired, Perer876, branchus, filipeborato, Denisskas, iAGorynT, and 7 more reacted with thumbs up emoji 🎉 5 thinh9e, EDM115, branchus, Denisskas, and uwu-420 reacted with hooray emoji ❤️ 8 kr0leg, Perer876, jdmsharpe, dikesh, bkkkk, branchus, Denisskas, and iliqiliev reacted with heart emoji 🚀 5 SymphonySimper, aaravind100, branchus, Denisskas, and uwu-420 reacted with rocket emoji 👀 4 xplosionmind, sweetburble, branchus, and Denisskas reacted with eyes emoji
All reactions
* 👍 17 reactions
* 🎉 5 reactions
* ❤️ 8 reactions
* 🚀 5 reactions
* 👀 4 reactions
26 people reacted
0.12.0
0.12.0
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 28 Jul 18:58
Immutable release. Only release title and notes can be modified.
0.12.0
b88d7c5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-28.
Since we released uv 0.11.0 in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution.
We expect most users to be able to upgrade without making changes.
There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.12, e.g., uv_build>=0.11.32,<0.13.
Breaking changes
* Define build systems by default with uv init (#19197)
Projects created with uv init now declare a build system and are packaged by default. This was the default project layout all the way back in v0.3, but we found that the use of the hatchling build system was confusing to newcomers and consequently dropped use of a build system by default in v0.4. Since then, we've created our own build system (uv_build) with tight integration with uv and are excited to restore the default to a best-practice project layout.
Previously, uv init example created an unpackaged layout containing main.py and a pyproject.toml without a build system. The project could declare dependencies but was not itself installed into its virtual environment.
Now, uv init example defines a [build-system] using uv_build, places application source code in src/example, and includes a [project.scripts] entry named example. Defining a build system allows the project to be imported from tests or other code, installed as a dependency, and run as a command:
$ uv init example
$ cd example
$ uv run example
Hello from example!
Existing projects are unaffected. Use uv init --no-package example to create the previous unpackaged layout without a build system.
See the project creation documentation for more details.
This stabilizes the packaged-init preview feature.
* Reject unsupported source distribution and wheel archive formats (#18927)
PEP 625 requires source distributions to use .tar.gz archives. Previously, uv also accepted legacy formats such as .tar.bz2 and .tar.xz. Those formats are now rejected, including when referenced by an existing lockfile. Legacy .zip source distributions remain supported for backwards compatibility.
Wheels and other ZIP archives can no longer contain entries compressed with bzip2, LZMA, or XZ. Entries must use the stored, DEFLATE, or zstd compression methods.
Removing support for uncommon compression methods reduces uv's compression dependencies and the attack surface exposed when processing untrusted packages.
You cannot opt out of this behavior. If you depend on a legacy source distribution that uses an unsupported format, we recommend rebuilding it as a .tar.gz archive and regenerating any lockfile containing references to the legacy archive.
* Reject wheel files that could replace the Python interpreter (#20748, #20749)
uv already rejected wheel entry points named python, but case variants such as Python were still accepted. On case-insensitive filesystems, including common macOS and Windows setups, these entry points could overwrite the virtual environment's interpreter.
Wheels could also place interpreter files in their .data/scripts directory or in paths such as .data/data/bin/python, bypassing the entry-point check and replacing the interpreter during installation.
uv now rejects case-insensitive variants of reserved interpreter names and wheel data files that would be installed over an interpreter. This includes names such as Python, python.py, and Python.exe, along with other reserved interpreter names and their versioned variants.
You cannot opt out of these checks. Rename conflicting entry points or wheel data files and rebuild the affected wheel.
* Prefer stable releases before falling back to pre-releases (#19993)
A dependency can introduce a pre-release requirement after resolution starts. uv previously required each package's pre-release eligibility to be known before resolution began: the default if-necessary-or-explicit mode allowed them for direct requirements that explicitly requested a pre-release, or for packages that only published pre-releases.
This meant that a pre-release requirement discovered in a dependency's metadata, e.g., example>=2.0.0b1, would fail to resolve even when a compatible pre-release existed. To resolve it, you had to add that dependency as a direct requirement or allow pre-releases across your entire dependency graph.
The default mode is now if-necessary. uv tries stable candidates first and falls back to pre-releases when no stable candidate satisfies the active constraints. Like pip, uv now supports pre-release requirements discovered transitively, but can select different versions than previous uv releases when both stable and pre-release candidates are available.
You can opt out of automatic pre-release selection with --prerelease disallow. Alternatively, --prerelease allow considers pre-releases without first preferring stable releases, and --prerelease explicit only allows them for direct requirements that mention a pre-release.
The old if-necessary-or-explicit mode distinguished between explicitly requested pre-releases and packages with no stable releases. That distinction is unnecessary now that if-necessary handles both cases, including transitive requirements. The old name remains available as an alias but is deprecated and will be removed in a future release.
* Respect --require-hashes directives in requirements.txt (#19336)
Previously, uv pip install and uv pip sync warned about --require-hashes inside a requirements.txt file but still installed dependencies without checking their hashes. Now, the directive enables hash-checking mode, just as if --require-hashes had been passed on the command line.
For example, this requirements file is no longer accepted because the requirement is neither pinned nor hashed:
--require-hashes anyio
You cannot opt out while the directive is present. Pin every requirement with == and provide its hash, or remove --require-hashes if hash checking is not intended.
* Reject MD5-only hashes in hash-checking mode (#20758)
Previously, uv pip install --require-hashes and uv pip sync --require-hashes accepted requirements whose only available digest used MD5. MD5 is not collision-resistant, so relying on it undermined installations that require hash verification and differed from pip's behavior.
Hash-checking mode now requires at least one secure digest for every requirement. For example, the following requirement is rejected unless a secure hash, such as SHA-256, is also supplied:
anyio==4.0.0 --hash=md5:420d85e19168705cdf0223621b18831a
A secure hash can be supplied directly on the requirement or in a matching constraints file. Ordinary hash verification without --require-hashes continues to support MD5.
You cannot opt out while hash checking is required. Regenerate affected hashes with SHA-256 or another supported secure hash.
* Reject invalid pylock.toml files and artifacts (#20402, #20440, #20443)
uv now validates additional requirements from the pylock.toml specification:
+ The packages array must be present. Previously, uv interpreted a missing array as an empty lockfile, so uv pip sync could uninstall an environment instead of rejecting malformed input. An explicitly empty packages = [] array remains valid.
+ Lockfile filenames must be pylock.toml or a single-name variant such as pylock.dev.toml. Names such as pylock..toml and pylock.foo.bar.toml are rejected.
+ If a wheel, source distribution, or other artifact declares a size, the downloaded or cached artifact must match. Previously, an incorrect size was accepted when the hash was correct. Sizes reported by package indexes remain advisory.
You cannot opt out of these checks. Regenerate malformed lockfiles, rename invalid filenames, and either correct or remove an incorrect optional size value.
* Honor explicit certificate overrides even when no certificates can be loaded (#20741, #20767)
Previously, uv ignored SSL_CERT_FILE or SSL_CERT_DIR values that pointed to missing or inaccessible paths, empty files or directories, or sources without valid certificates. Instead, it fell back to its default trust roots, potentially allowing HTTPS connect...
Read more
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 40 bidu2352, servusdei2018, nereu-ls, ashleyconnor, subdavis, henderson-01, mjtf3, clemstoquart, iAGorynT, acarapetis, and 30 more reacted with thumbs up emoji 😄 4 Chroma01, Denisskas, binbjz, and wuyu1222602 reacted with laugh emoji 🎉 37 astrojuanlu, my1e5, leodevian, r1quant, hallvardnmbu, servusdei2018, ashleyconnor, subdavis, kaangiray26, sassdavid, and 27 more reacted with hooray emoji ❤️ 20 orishamir, ashleyconnor, kr0leg, dfgshdsfh, joshsleeper, NikTerentev, mochlast, Perer876, woile, ArisTem, and 10 more reacted with heart emoji 🚀 37 leodevian, sebadevo, r1quant, hallvardnmbu, orpheezt, servusdei2018, orishamir, caiopiccirillo, ashleyconnor, subdavis, and 27 more reacted with rocket emoji 👀 3 xplosionmind, Denisskas, and binbjz reacted with eyes emoji
All reactions
* 👍 40 reactions
* 😄 4 reactions
* 🎉 37 reactions
* ❤️ 20 reactions
* 🚀 37 reactions
* 👀 3 reactions
87 people reacted
0.11.33
0.11.33
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 28 Jul 10:37
Immutable release. Only release title and notes can be modified.
0.11.33
fece32f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-28.
Enhancements
* Abort panics in release builds for smaller uv binaries (#20271)
* Use .tar.gz archives for Pyodide installs (#20667)
Preview features
* Avoid checking any scripts in uv check unless --script is passed (#20676)
* Check locked tools for malware before cache reuse (#20301)
* Write and read package.metadata-free lockfiles (#20688, #20691, #20685, #20695)
Bug fixes
* Correctly split dependencies into production and optional markers (#20671)
* Fix discrepancies in argument parsing of exclude-newer (#20679)
* Cleanup managed Python temporary directory on error (#20752)
Install uv 0.11.33
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.ps1 | iex "
Download uv 0.11.33
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 21 4p3rtur3, matous-volf, danielgafni, stevleibelt, felixtensor, bidu2352, Perer876, Denisskas, aitmrza, aileks, and 11 more reacted with thumbs up emoji 😄 5 aileks, wanderingeek, sweetburble, Denisskas, and binbjz reacted with laugh emoji 🎉 9 4p3rtur3, thinh9e, Perer876, Denisskas, aileks, iliqiliev, EDM115, wanderingeek, and binbjz reacted with hooray emoji ❤️ 9 4p3rtur3, bkis, kr0leg, Perer876, Denisskas, aileks, iliqiliev, wanderingeek, and binbjz reacted with heart emoji 🚀 10 4p3rtur3, bkis, dikesh, Perer876, aaravind100, Denisskas, aileks, SymphonySimper, FHU-yezi, and binbjz reacted with rocket emoji 👀 2 xplosionmind and binbjz reacted with eyes emoji
All reactions
* 👍 21 reactions
* 😄 5 reactions
* 🎉 9 reactions
* ❤️ 9 reactions
* 🚀 10 reactions
* 👀 2 reactions
29 people reacted
0.11.32
0.11.32
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 23 Jul 23:17
Immutable release. Only release title and notes can be modified.
0.11.32
3010295
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-23.
Preview features
* Add --package and --all-packages selection to uv check (#20628)
* Allow uv upgrade to update multiple marker-specific declarations of the same package (#20335)
* Reject non-canonically formatted lockfiles in uv lock --check and commands using --locked (#20646)
* Regenerate non-canonically formatted lockfiles with uv lock --refresh (#20634)
* Include best-effort information about the active environment in uv workspace metadata by default (#20643)
Performance
* Skip dependency-group conflict expansion when no additional conflicts can be inferred (#20611)
Bug fixes
* Fork universal resolutions when Requires-Python is discovered only from distribution metadata (#20586)
Install uv 0.11.32
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex "
Download uv 0.11.32
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 21 4p3rtur3, gminos, OttoAndrey, MrCatNerd, iliqiliev, hallvardnmbu, sweetburble, bidu2352, jonigl, henderson-01, and 11 more reacted with thumbs up emoji 🎉 13 4p3rtur3, Morethanevil, ocerqueira, thinh9e, bkis, quarthex, jcpunk, jonigl, ravenexp, nprasad2077, and 3 more reacted with hooray emoji ❤️ 9 4p3rtur3, kr0leg, iliqiliev, bkis, shreyanth-sureshkrishnaa, jonigl, arnobaer, binbjz, and skieop reacted with heart emoji 🚀 10 4p3rtur3, ekorchison, dikesh, sebadevo, aaravind100, jonigl, SymphonySimper, binbjz, e-psi-lon, and skieop reacted with rocket emoji 👀 2 xplosionmind and binbjz reacted with eyes emoji
All reactions
* 👍 21 reactions
* 🎉 13 reactions
* ❤️ 9 reactions
* 🚀 10 reactions
* 👀 2 reactions
39 people reacted
0.11.31
0.11.31
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
astral-automations-bot released this 22 Jul 01:49
Immutable release. Only release title and notes can be modified.
0.11.31
b7fdec6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-21.
Enhancements
* Allow workspace sources to reference members in another workspace by path (#18401)
* Support .venv files containing paths to centralized project environments (#20022)
* Update bundled Windows timezone data to IANA 2026c (#20554)
Preview features
* Add an index-specific hash-algorithm setting for lockfile generation (#20605)
Configuration
* Add audit.malware-check and audit.malware-check-url settings (#20587)
Performance
* Avoid quadratic work when deduplicating transitive conflicts (#20578)
Bug fixes
* Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
* Reject source distributions and wheels with mismatched package names (#20432)
* Avoid retrying TLS certificate verification failures (#16245)
* Avoid warnings about uv_build settings for in-tree build backends (#20153)
Install uv 0.11.31
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex "
Download uv 0.11.31
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 7 xplosionmind, metalinspired, iAGorynT, FHU-yezi, smarlhens, binbjz, and Molkree reacted with thumbs up emoji 🎉 16 thinh9e, GrayStolid, RP1992N, neoniobium, bkis, OttoAndrey, dikesh, aitmrza, bidu2352, ravenexp, and 6 more reacted with hooray emoji ❤️ 9 kr0leg, gminos, RP1992N, bkis, richlamdev, arnobaer, javi-code, iliqiliev, and binbjz reacted with heart emoji 🚀 7 aaravind100, javi-code, pheus, iliqiliev, SymphonySimper, vsrboth, and binbjz reacted with rocket emoji 👀 3 sweetburble, xplosionmind, and binbjz reacted with eyes emoji
All reactions
* 👍 7 reactions
* 🎉 16 reactions
* ❤️ 9 reactions
* 🚀 7 reactions
* 👀 3 reactions
32 people reacted
0.11.30
0.11.30
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 20 Jul 20:48
Immutable release. Only release title and notes can be modified.
0.11.30
4cb3d03
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-20.
Python
* Add CPython 3.15.0b4 (#20519)
Preview features
* Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
* Reuse centralized project environments when workspaces are accessed through symlinks (#20436)
Performance
* Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
* Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
* Accelerate lockfile serialization with toml_writer (#20450)
* Compact cached Simple API distribution metadata and hashes (#20463, #20483)
* Decode stale cache entries in a single blocking task (#20486)
* Decode cached payloads outside resolver workers (#20464)
* Cache resolver Python requirement markers (#20461)
* Reuse resolver fork markers while recording preferences (#20462)
Bug fixes
* Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall (#20429)
* Preserve literal extends-environment paths in pyvenv.cfg on Unix (#20466)
Documentation
* Add a contribution guide (#20511, #20552)
Install uv 0.11.30
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.ps1 | iex "
Download uv 0.11.30
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 17 4p3rtur3, henderson-01, OttoAndrey, aitmrza, iAGorynT, stevleibelt, Perer876, metalinspired, xplosionmind, bidu2352, and 7 more reacted with thumbs up emoji 🎉 6 4p3rtur3, thinh9e, Perer876, binbjz, iliqiliev, and EDM115 reacted with hooray emoji ❤️ 8 4p3rtur3, kr0leg, bkis, arnobaer, Perer876, binbjz, iliqiliev, and xxxketaminegirlxxx reacted with heart emoji 🚀 13 SymphonySimper, hasanfaesal, pheus, GrayStolid, 4p3rtur3, bkis, dikesh, sweetburble, aaravind100, Perer876, and 3 more reacted with rocket emoji 👀 2 xplosionmind and binbjz reacted with eyes emoji
All reactions
* 👍 17 reactions
* 🎉 6 reactions
* ❤️ 8 reactions
* 🚀 13 reactions
* 👀 2 reactions
30 people reacted
0.11.29
0.11.29
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 15 Jul 18:44
Immutable release. Only release title and notes can be modified.
0.11.29
901092e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-15.
Python
* Use gzip-compressed artifacts for PyPy downloads (#20265)
Enhancements
* Add JSON output to uv tree (#19978)
* Add CUDA 13.2 as a supported PyTorch backend (#20267)
* Prefer local artifacts over URLs when installing from pylock.toml (#20393)
* Clarify diagnostics for unsatisfiable direct requirement ranges (#20227)
* Include the selected project name in missing-extra errors (#20358)
Preview features
* Preserve extras and dependency-group conflict context when selecting locked project tools (#20078)
* Split OSV audit queries that exceed the service's 1,000-package limit (#20398)
* Apply OSV fixed-version information only to the matching package and ecosystem (#20399)
* Skip the virtualenv distutils monkeypatch on Python 3.10 and later (#20222)
* Report invalid uv audit --service-url values instead of panicking (#20374)
* Include preview settings in the published SchemaStore schema (#20304)
Performance
* Reduce resolver work by widening selected versions across ranges without other known candidates (#20115)
* Defer client and build setup for no-op uv sync operations (#20364)
* Reuse workspace discovery during frozen syncs (#20363)
* Reuse workspace discovery after resolving settings (#20356)
* Reuse workspace discovery in uv tree, uv export, uv format, and uv audit (#20359)
* Avoid cache and interpreter setup when reading a project version (#20360)
Bug fixes
* Reject duplicate active package entries in pylock.toml (#20391)
* Preserve direct-archive hashes in uv pip freeze output (#20395)
* Explain conflicting root requirements instead of displaying an empty version range (#20228)
* Prevent build-backend data paths from escaping the project or bypassing wheel exclusions (#20397)
* Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks (#20387)
* Redact credentials from failed Git fetch commands (#20401)
* Fix exclusive post-release range ordering to match PEP 440 (#20268)
* Canonicalize equivalent PEP 440 ranges during dependency resolution (#20182)
* Honor Python version pins when initializing scripts (#20404)
* Respect package-scoped source filtering for scripts (#20389)
* Report existing environment incompatibilities when uv pip install --strict has nothing to install (#20388)
* Continue scanning platlib when purelib is missing (#20405)
* Handle versionless .egg-info files as legacy package metadata (#20403)
* Make repeated locking idempotent for impossible cross-variable platform markers (#20369)
* Report invalid cloud credential endpoint URLs instead of panicking (#20372)
* Report invalid pylock.toml artifact URLs instead of panicking (#20373)
* Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts (#20375)
* Return an unsupported-operation error from unimplemented build-backend requirement hooks (#20376)
Documentation
* Clarify --no-build behavior for editable requirements (#20234)
* Document uv's threat model (#20236)
* Reduce the number of badges in the README (#11257)
Install uv 0.11.29
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.29/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.29/uv-installer.ps1 | iex "
Download uv 0.11.29
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) [checksum](https://releases.ast...
Read more
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 23 4p3rtur3, bidu2352, hasanfaesal, iAGorynT, stevleibelt, metalinspired, iliqiliev, Perer876, gminos, astrawan, and 13 more reacted with thumbs up emoji 🎉 11 Morethanevil, quarthex, 4p3rtur3, thinh9e, sweetburble, iliqiliev, astrawan, Denisskas, wanderingeek, binbjz, and EDM115 reacted with hooray emoji ❤️ 10 henderson-01, kr0leg, 4p3rtur3, bbennett80, iliqiliev, arnobaer, Denisskas, bkis, wanderingeek, and binbjz reacted with heart emoji 🚀 9 4p3rtur3, SymphonySimper, aaravind100, dikesh, iliqiliev, Denisskas, bkis, wanderingeek, and binbjz reacted with rocket emoji 👀 2 binbjz and xplosionmind reacted with eyes emoji
All reactions
* 👍 23 reactions
* 🎉 11 reactions
* ❤️ 10 reactions
* 🚀 9 reactions
* 👀 2 reactions
35 people reacted
0.11.28
0.11.28
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 07 Jul 23:14
Immutable release. Only release title and notes can be modified.
0.11.28
ebf0f43
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Release Notes
Released on 2026-07-07.
Security
This release updates our ZIP library, astral-async-zip, to v0.0.20, which includes 15 changes that harden our ZIP handling against parser differentials. uv may reject ZIP archives with malformed or ambiguous content that were previously accepted.
See the upstream commits for a full list of changes.
Python
* Upgrade GraalPy to 25.1.3 (#20069)
Enhancements
* Improve trace logs for unexpected error chains (#20220)
* Move lockfile update guidance to a hint (#20219)
* Preserve indentation for multiline error causes (#20156)
* Render user errors with their cause chains (#20217)
* Route final command errors through the printer to respect -q and -qq (#20163)
* Use standard rendering for uv build errors (#20159)
* Use standard rendering for tool requirement errors (#20160)
Performance
* Only compile bytecode for installed distributions in uv pip install (#19914)
* Avoid allocating URL-safe Git revisions (#20194)
* Avoid allocating canonical Python request strings (#20193)
* Avoid allocating custom Astral mirror URLs (#20204)
* Avoid allocating expanded compatibility tags (#20190)
* Avoid allocating shell strings that need no escaping (#20196)
* Avoid allocating static ABI descriptions (#20201)
* Avoid allocating static Windows executable names (#20200)
* Avoid allocating static dependency table names (#20199)
* Avoid allocating static platform triple components (#20195)
* Avoid allocating static resolver report labels (#20198)
* Avoid allocating static unavailable-version messages (#20197)
* Avoid allocating unchanged Python download architectures (#20202)
* Avoid allocating unchanged paths during case normalization (#20203)
* Avoid allocations when expanding group conflicts (#20211)
* Avoid allocations when formatting requirements (#20206)
* Avoid cloning credential lookup services (#20210)
* Avoid cloning dry-run distributions (#20209)
* Avoid cloning owned dependency metadata (#20212)
* Avoid redundant direct URL clones (#20207)
* Create metadata version errors lazily (#20205)
* Optimize expanded tag compatibility checks (#20171)
* Optimize parsing of single-digit three-part versions (#20118)
Bug fixes
* Avoid overflow when computing HTTP cache age (#20178)
* Respect --upgrade when upgrade-package is configured (#19955)
* Support uv tree in dependency-group-only projects (#20167)
* Treat cache entries as stale at exact expiration (#20183)
Install uv 0.11.28
Install prebuilt binaries via shell script
curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.28/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/uv/releases/download/0.11.28/uv-installer.ps1 | iex "
Download uv 0.11.28
File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-...
Read more
Assets 45
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 12 hushuguo, aitmrza, iAGorynT, FHU-yezi, Perer876, metalinspired, iliqiliev, xplosionmind, binbjz, stevleibelt, and 2 more reacted with thumbs up emoji 😄 3 sweetburble, Perer876, and binbjz reacted with laugh emoji 🎉 8 thinh9e, dikesh, bkis, EDM115, ravenexp, iliqiliev, illvart, and binbjz reacted with hooray emoji ❤️ 4 gminos, bkis, arnobaer, and binbjz reacted with heart emoji 🚀 5 mvf, SymphonySimper, aitmrza, aaravind100, and binbjz reacted with rocket emoji 👀 3 xplosionmind, jkluth-cyber, and binbjz reacted with eyes emoji
All reactions
* 👍 12 reactions
* 😄 3 reactions
* 🎉 8 reactions
* ❤️ 4 reactions
* 🚀 5 reactions
* 👀 3 reactions
25 people reacted
Previous 1 2 3 4 5 … 30 31 Next
Previous Next
Footer
© 2026 GitHub, Inc.
Footer navigation
* Terms
* Privacy
* Security
* Status
* Community
* Docs
* Contact
* Manage cookies
* Do not share my personal information
You can’t perform that action at this time.
提示： 选中文本以分享或加入忽略列表。
— Download difference patch
目前差异仅按文本比较，非图形对比，只提供最新截图。
截图需要启用 Playwright/WebDriver