Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 30, 2025

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv final patch 0.9.5 -> 0.9.7

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.9.7

Compare Source

Released on 2025-10-30.

Enhancements
  • Add Windows x86-32 emulation support to interpreter architecture checks (#​13475)
  • Improve readability of progress bars (#​16509)
  • Add GitHub attestations for uv release artifacts (#​11357)
Bug fixes
  • Drop terminal coloring from uv auth token output (#​16504)
  • Don't use UV_LOCKED to enable --check flag (#​16521)

v0.9.6

Compare Source

Released on 2025-10-29.

This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details.

Security
Python
Enhancements
  • Add --clear to uv build to remove old build artifacts (#​16371)
  • Add --no-create-gitignore to uv build (#​16369)
  • Do not error when a virtual environment directory cannot be removed due to a busy error (#​16394)
  • Improve hint on pip install --system when externally managed (#​16392)
  • Running uv lock --check with outdated lockfile will print that --check was passed, instead of --locked (#​16322)
  • Update uv init template for Maturin (#​16449)
  • Improve ordering of Python sources in logs (#​16463)
  • Restore DockerHub release images and annotations (#​16441)
Bug fixes
  • Check for matching Python implementation during uv python upgrade (#​16420)
  • Deterministically order --find-links distributions (#​16446)
  • Don't panic in uv export --frozen when the lockfile is outdated (#​16407)
  • Fix root of uv tree when --package is used with circular dependencies (#​15908)
  • Show package list with pip freeze --quiet (#​16491)
  • Limit uv auth login pyx.dev retries to 60s (#​16498)
  • Add an empty group with uv add --group ... -r ... (#​16490)
Documentation
  • Update docs for maturin build backend init template (#​16469)
  • Update docs to reflect previous changes to signal forwarding semantics (#​16430)
  • Add instructions for installing via MacPorts (#​16039)

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,every weekend,before 5am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Issues or PRs related to dependencies label Oct 30, 2025
@renovate renovate bot force-pushed the renovate/ghcr.io-astral-sh-uv-0.x branch 2 times, most recently from 7ba7ed7 to 1461cce Compare October 31, 2025 01:41
@renovate renovate bot changed the title chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.9.6 Oct 31, 2025
@renovate renovate bot force-pushed the renovate/ghcr.io-astral-sh-uv-0.x branch from 1461cce to 14affbf Compare October 31, 2025 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issues or PRs related to dependencies

1 participant