VAULT2077
Vault 资讯瀑布官方2026.07.28 18:37 UTC+8

astral-sh/uv 发布 0.11.33

uv 0.11.33 发布，增强减小二进制体积、Pyodide 安装优化；预览功能包括 uv check 脚本检查、恶意软件检查；修复依赖拆分、exclude-newer 解析等 Bug。

中文处理结果

发布说明

发布于 2026-07-28。

增强

  • 在发布构建中中止 panic 以减小 uv 二进制体积 (#20271)
  • 对 Pyodide 安装使用 .tar.gz 归档 (#20667)

预览功能

  • 除非传递 --script，否则 uv check 中不检查任何脚本 (#20676)
  • 在缓存复用前检查锁定的工具是否存在恶意软件 (#20301)
  • 写入和读取不含 package.metadata 的锁定文件 (#20688, #20691, #20685, #20695)

Bug 修复

  • 正确地将依赖拆分为生产环境和可选标记 (#20671)
  • 修复 exclude-newer 参数解析中的不一致 (#20679)
  • 出错时清理受管理的 Python 临时目录 (#20752)

安装 uv 0.11.33

通过 shell 脚本安装预构建二进制

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.sh | sh

通过 powershell 脚本安装预构建二进制

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.ps1 | iex"

下载 uv 0.11.33

原始正文

astral-sh/uv released 0.11.33

Release Notes

Released on 2026-07-28.

Enhancements

  • Abort panics in release builds for smaller uv binaries (#20271)
  • Use .tar.gz archives for Pyodide installs (#20667)

Preview features

  • Avoid checking any scripts in uv check unless --script is passed (#20676)
  • Check locked tools for malware before cache reuse (#20301)
  • Write and read package.metadata-free lockfiles (#20688, #20691, #20685, #20695)

Bug fixes

  • Correctly split dependencies into production and optional markers (#20671)
  • Fix discrepancies in argument parsing of exclude-newer (#20679)
  • Cleanup managed Python temporary directory on error (#20752)

Install uv 0.11.33

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.ps1 | iex"

Download uv 0.11.33

FilePlatformChecksum
uv-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
uv-x86_64-apple-darwin.tar.gzIntel macOSchecksum
uv-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
uv-i686-pc-windows-msvc.zipx86 Windowschecksum
uv-x86_64-pc-windows-msvc.zipx64 Windowschecksum
uv-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
uv-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
uv-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
uv-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
uv-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
uv-x86_64-unknown-linux-gnu.tar.gzx64 Linuxchecksum
uv-armv7-unknown-linux-gnueabihf.tar.gzARMv7 Linuxchecksum
uv-aarch64-unknown-linux-musl.tar.gzARM64 MUSL Linuxchecksum
uv-i686-unknown-linux-musl.tar.gzx86 MUSL Linuxchecksum
uv-riscv64gc-unknown-linux-musl.tar.gzRISCV MUSL Linuxchecksum
uv-x86_64-unknown-linux-musl.tar.gzx64 MUSL Linuxchecksum
uv-arm-unknown-linux-musleabihf.tar.gzARMv6 MUSL Linux (Hardfloat)checksum
uv-armv7-unknown-linux-musleabihf.tar.gzARMv7 MUSL Linuxchecksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
查看原始发布