VAULT2077
Vault 资讯瀑布官方2026.07.16 02:44 UTC+8

astral-sh/uv 发布 0.11.29

uv 0.11.29 发布：PyPy 下载改用 gzip 压缩产物，uv tree 新增 JSON 输出，支持 CUDA 13.2，并优化解析器与工作区复用等性能。

中文处理结果

发布说明

发布于 2026-07-15。

Python

  • PyPy 下载改用 gzip 压缩产物（#20265）

增强

  • 为 uv tree 添加 JSON 输出（#19978）
  • 将 CUDA 13.2 添加为受支持的 PyTorch 后端（#20267）
  • 从 pylock.toml 安装时优先使用本地产物而非 URL（#20393）
  • 明确无法满足的直接依赖范围诊断信息（#20227）
  • 在缺少 extra 的错误中包含所选项目名称（#20358）

预览功能

  • 选择锁定的项目工具时保留 extras 和依赖组冲突上下文（#20078）
  • 拆分超过服务 1,000 个包限制的 OSV 审计查询（#20398）
  • 仅将 OSV 固定版本信息应用于匹配的包和生态系统（#20399）
  • 在 Python 3.10 及更高版本中跳过 virtualenv distutils monkeypatch（#20222）
  • 报告无效的 uv audit --service-url 值而非 panic（#20374）
  • 将预览设置包含在已发布的 SchemaStore schema 中（#20304）

性能

  • 通过在没有其他已知候选的范围内加宽选中版本来减少解析器工作（#20115）
  • 对无操作 uv sync 延迟客户端和构建设置（#20364）
  • 在冻结同步期间复用工作区发现（#20363）
  • 解析设置后复用工作区发现（#20356）
  • 在 uv tree、uv export、uv format 和 uv audit 中复用工作区发现（#20359）
  • 读取项目版本时避免缓存和解释器设置（#20360）

错误修复

原始正文

astral-sh/uv released 0.11.29

Release Notes

Released on 2026-07-15.

Python

  • Use gzip-compressed artifacts for PyPy downloads (#20265)

Enhancements

  • Add JSON output to uv tree (#19978)
  • Add CUDA 13.2 as a supported PyTorch backend (#20267)
  • Prefer local artifacts over URLs when installing from pylock.toml (#20393)
  • Clarify diagnostics for unsatisfiable direct requirement ranges (#20227)
  • Include the selected project name in missing-extra errors (#20358)

Preview features

  • Preserve extras and dependency-group conflict context when selecting locked project tools (#20078)
  • Split OSV audit queries that exceed the service's 1,000-package limit (#20398)
  • Apply OSV fixed-version information only to the matching package and ecosystem (#20399)
  • Skip the virtualenv distutils monkeypatch on Python 3.10 and later (#20222)
  • Report invalid uv audit --service-url values instead of panicking (#20374)
  • Include preview settings in the published SchemaStore schema (#20304)

Performance

  • Reduce resolver work by widening selected versions across ranges without other known candidates (#20115)
  • Defer client and build setup for no-op uv sync operations (#20364)
  • Reuse workspace discovery during frozen syncs (#20363)
  • Reuse workspace discovery after resolving settings (#20356)
  • Reuse workspace discovery in uv tree, uv export, uv format, and uv audit (#20359)
  • Avoid cache and interpreter setup when reading a project version (#20360)

Bug fixes

  • Reject duplicate active package entries in pylock.toml (#20391)
  • Preserve direct-archive hashes in uv pip freeze output (#20395)
  • Explain conflicting root requirements instead of displaying an empty version range (#20228)
  • Prevent build-backend data paths from escaping the project or bypassing wheel exclusions (#20397)
  • Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks (#20387)
  • Redact credentials from failed Git fetch commands (#20401)
  • Fix exclusive post-release range ordering to match PEP 440 (#20268)
  • Canonicalize equivalent PEP 440 ranges during dependency resolution (#20182)
  • Honor Python version pins when initializing scripts (#20404)
  • Respect package-scoped source filtering for scripts (#20389)
  • Report existing environment incompatibilities when uv pip install --strict has nothing to install (#20388)
  • Continue scanning platlib when purelib is missing (#20405)
  • Handle versionless .egg-info files as legacy package metadata (#20403)
  • Make repeated locking idempotent for impossible cross-variable platform markers (#20369)
  • Report invalid cloud credential endpoint URLs instead of panicking (#20372)
  • Report invalid pylock.toml artifact URLs instead of panicking (#20373)
  • Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts (#20375)
  • Return an unsupported-operation error from unimplemented build-backend requirement hooks (#20376)

Documentation

  • Clarify --no-build behavior for editable requirements (#20234)
  • Document uv's threat model (#20236)
  • Reduce the number of badges in the README (#11257)

Install uv 0.11.29

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.29/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.29/uv-installer.ps1 | iex"

Download uv 0.11.29

FilePlatformChecksum
uv-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
uv-x86_64-apple-darwin.tar.gzIntel macOSchecksum
uv-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
uv-i686-pc-windows-msvc.zipx86 Windowschecksum
uv-x86_64-pc-windows-msvc.zipx64 Windowschecksum
uv-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
uv-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
uv-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
uv-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
uv-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
uv-x86_64-unknown-linux-gnu.tar.gzx64 Linuxchecksum
uv-armv7-unknown-linux-gnueabihf.tar.gzARMv7 Linuxchecksum
uv-aarch64-unknown-linux-musl.tar.gzARM64 MUSL Linuxchecksum
uv-i686-unknown-linux-musl.tar.gzx86 MUSL Linuxchecksum
uv-riscv64gc-unknown-linux-musl.tar.gzRISCV MUSL Linuxchecksum
uv-x86_64-unknown-linux-musl.tar.gzx64 MUSL Linuxchecksum
uv-arm-unknown-linux-musleabihf.tar.gzARMv6 MUSL Linux (Hardfloat)checksum
uv-armv7-unknown-linux-musleabihf.tar.gzARMv7 MUSL Linuxchecksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
查看原始发布