astral-sh/uv - CodSpeed

uv

Blog Docs Changelog

Performance History

Latest Results

Remove redundant release authorization check

zb/rewrite-release-changelog

1 minute ago

Classify uv upgrade declaration outcomes Introduce internal declaration outcomes for changed, unchanged, blocked, and skipped upgrade targets. Render blocked/skipped warnings from the model, keep active unsupported URL/source declarations fatal, and avoid writing manifest updates when a post-resolution blocked declaration invalidates the relaxed solve.

zsol/upgrade-02-selection

53 minutes ago

Update Rust crate reqsign to v0.20.1

renovate/reqsign-0.x-lockfile

2 hours ago

Update astral-sh/setup-uv action to v8.3.2 (#20311) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | patch | `v8.3.0` → `v8.3.2` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v8.3.2`](https://redirect.github.com/astral-sh/setup-uv/compare/v8.3.1...v8.3.2) [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v8.3.1...v8.3.2) ### [`v8.3.1`](https://redirect.github.com/astral-sh/setup-uv/compare/v8.3.0...v8.3.1) [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v8.3.0...v8.3.1) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

main

2 hours ago

Update documentation references to actions/cache to v6 (#20332) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | major | `v5` → `v6` | --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v6`](https://redirect.github.com/actions/cache/compare/v5.0.5...v6.0.0) [Compare Source](https://redirect.github.com/actions/cache/compare/v5...v6) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

main

2 hours ago

Update Rust crate arrayvec to v0.7.8 (#20315) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [arrayvec](https://redirect.github.com/bluss/arrayvec) | workspace.dependencies | patch | `0.7.7` → `0.7.8` | --- ### Release Notes <details> <summary>bluss/arrayvec (arrayvec)</summary> ### [`v0.7.8`](https://redirect.github.com/bluss/arrayvec/blob/HEAD/CHANGELOG.md#078) [Compare Source](https://redirect.github.com/bluss/arrayvec/compare/0.7.7...0.7.8) - Fix tests on 32-bit architectures by skipping them by [@decathorpe](https://redirect.github.com/decathorpe) [#312](https://redirect.github.com/bluss/arrayvec/pull/312). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

main

2 hours ago

Update taiki-e/install-action action to v2.82.9 (#20326) This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.82.2` → `v2.82.9` | `v2.83.2` (+4) | --- ### Release Notes <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9): 2.82.9 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9) - Update `vacuum@latest` to 0.29.9. - Update `prek@latest` to 0.4.8. - Update `cargo-tarpaulin@latest` to 0.37.0. - Update `cargo-leptos@latest` to 0.3.7. ### [`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8): 2.82.8 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8) - Update `vacuum@latest` to 0.29.8. - Update `uv@latest` to 0.11.26. - Update `typos@latest` to 1.48.0. - Update `trivy@latest` to 0.72.0. - Update `tombi@latest` to 1.1.7. - Update `prek@latest` to 0.4.6. - Update `mise@latest` to 2026.7.0. - Update `just@latest` to 1.55.1. - Update `biome@latest` to 2.5.2. ### [`v2.82.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.7): 2.82.7 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.6...v2.82.7) - Update `tombi@latest` to 1.1.6. - Update `kingfisher@latest` to 1.105.0. - Update `gungraun-runner@latest` to 0.19.3. - Update `editorconfig-checker@latest` to 3.8.0. - Update `dprint@latest` to 0.55.1. - Update `cargo-tarpaulin@latest` to 0.36.0. ### [`v2.82.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.6): 2.82.6 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.5...v2.82.6) - Update `vacuum@latest` to 0.29.7. - Update `uv@latest` to 0.11.25. - Update `syft@latest` to 1.46.0. - Update `dprint@latest` to 0.55.0. - Update `cargo-auditable@latest` to 0.7.5. ### [`v2.82.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.5): 2.82.5 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.4...v2.82.5) - Update `wasmtime@latest` to 46.0.1. - Update `wasm-bindgen@latest` to 0.2.126. - Update `vacuum@latest` to 0.29.6. - Update `mise@latest` to 2026.6.14. - Update `cargo-rdme@latest` to 2.1.0. ### [`v2.82.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.4): 2.82.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.3...v2.82.4) - Update `uv@latest` to 0.11.24. - Update `mise@latest` to 2026.6.13. - Update `just@latest` to 1.54.0. - Update `biome@latest` to 2.5.1. ### [`v2.82.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.3): 2.82.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.2...v2.82.3) - Update `zizmor@latest` to 1.26.1. - Update `wasmtime@latest` to 46.0.0. - Update `tombi@latest` to 1.1.5. - Update `mise@latest` to 2026.6.12. - Update `kingfisher@latest` to 1.104.0. - Update `cargo-tarpaulin@latest` to 0.35.5. - Update `cargo-nextest@latest` to 0.9.138. - Update `cargo-crap@latest` to 0.3.0. - Update `cargo-binstall@latest` to 1.20.1. - Update `cargo-rdme@latest` to 2.0.1. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

main

2 hours ago

Update dependency astral-sh/uv to v0.11.28 (#20312) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with | patch | `0.11.26` → `0.11.28` | --- ### Release Notes <details> <summary>astral-sh/uv (astral-sh/uv)</summary> ### [`v0.11.28`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01128) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.11.27...0.11.28) Released on 2026-07-07. ##### Security This release updates our ZIP library, [astral-async-zip](https://redirect.github.com/astral-sh/rs-async-zip), to v0.0.20, which includes 15 changes that harden our ZIP handling against [parser differentials](https://www.brainonfire.net/blog/2022/04/11/what-is-parser-mismatch/). uv may reject ZIP archives with malformed or ambiguous content that were previously accepted. See the [upstream commits](https://redirect.github.com/astral-sh/rs-async-zip/compare/v0.0.18...v0.0.20) for a full list of changes. ##### Python - Upgrade GraalPy to 25.1.3 ([#20069](https://redirect.github.com/astral-sh/uv/pull/20069)) ##### Enhancements - Improve trace logs for unexpected error chains ([#20220](https://redirect.github.com/astral-sh/uv/pull/20220)) - Move lockfile update guidance to a hint ([#20219](https://redirect.github.com/astral-sh/uv/pull/20219)) - Preserve indentation for multiline error causes ([#20156](https://redirect.github.com/astral-sh/uv/pull/20156)) - Render user errors with their cause chains ([#20217](https://redirect.github.com/astral-sh/uv/pull/20217)) - Route final command errors through the printer to respect `-q` and `-qq` ([#20163](https://redirect.github.com/astral-sh/uv/pull/20163)) - Use standard rendering for `uv build` errors ([#20159](https://redirect.github.com/astral-sh/uv/pull/20159)) - Use standard rendering for tool requirement errors ([#20160](https://redirect.github.com/astral-sh/uv/pull/20160)) ##### Performance - Only compile bytecode for installed distributions in `uv pip install` ([#19914](https://redirect.github.com/astral-sh/uv/pull/19914)) - Avoid allocating URL-safe Git revisions ([#20194](https://redirect.github.com/astral-sh/uv/pull/20194)) - Avoid allocating canonical Python request strings ([#20193](https://redirect.github.com/astral-sh/uv/pull/20193)) - Avoid allocating custom Astral mirror URLs ([#20204](https://redirect.github.com/astral-sh/uv/pull/20204)) - Avoid allocating expanded compatibility tags ([#20190](https://redirect.github.com/astral-sh/uv/pull/20190)) - Avoid allocating shell strings that need no escaping ([#20196](https://redirect.github.com/astral-sh/uv/pull/20196)) - Avoid allocating static ABI descriptions ([#20201](https://redirect.github.com/astral-sh/uv/pull/20201)) - Avoid allocating static Windows executable names ([#20200](https://redirect.github.com/astral-sh/uv/pull/20200)) - Avoid allocating static dependency table names ([#20199](https://redirect.github.com/astral-sh/uv/pull/20199)) - Avoid allocating static platform triple components ([#20195](https://redirect.github.com/astral-sh/uv/pull/20195)) - Avoid allocating static resolver report labels ([#20198](https://redirect.github.com/astral-sh/uv/pull/20198)) - Avoid allocating static unavailable-version messages ([#20197](https://redirect.github.com/astral-sh/uv/pull/20197)) - Avoid allocating unchanged Python download architectures ([#20202](https://redirect.github.com/astral-sh/uv/pull/20202)) - Avoid allocating unchanged paths during case normalization ([#20203](https://redirect.github.com/astral-sh/uv/pull/20203)) - Avoid allocations when expanding group conflicts ([#20211](https://redirect.github.com/astral-sh/uv/pull/20211)) - Avoid allocations when formatting requirements ([#20206](https://redirect.github.com/astral-sh/uv/pull/20206)) - Avoid cloning credential lookup services ([#20210](https://redirect.github.com/astral-sh/uv/pull/20210)) - Avoid cloning dry-run distributions ([#20209](https://redirect.github.com/astral-sh/uv/pull/20209)) - Avoid cloning owned dependency metadata ([#20212](https://redirect.github.com/astral-sh/uv/pull/20212)) - Avoid redundant direct URL clones ([#20207](https://redirect.github.com/astral-sh/uv/pull/20207)) - Create metadata version errors lazily ([#20205](https://redirect.github.com/astral-sh/uv/pull/20205)) - Optimize expanded tag compatibility checks ([#20171](https://redirect.github.com/astral-sh/uv/pull/20171)) - Optimize parsing of single-digit three-part versions ([#20118](https://redirect.github.com/astral-sh/uv/pull/20118)) ##### Bug fixes - Avoid overflow when computing HTTP cache age ([#20178](https://redirect.github.com/astral-sh/uv/pull/20178)) - Respect `--upgrade` when `upgrade-package` is configured ([#19955](https://redirect.github.com/astral-sh/uv/pull/19955)) - Support `uv tree` in dependency-group-only projects ([#20167](https://redirect.github.com/astral-sh/uv/pull/20167)) - Treat cache entries as stale at exact expiration ([#20183](https://redirect.github.com/astral-sh/uv/pull/20183)) ### [`v0.11.27`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01127) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.11.26...0.11.27) Released on 2026-07-06. ##### Enhancements - Continue on ignored errors when fetching wheel metadata ([#12255](https://redirect.github.com/astral-sh/uv/pull/12255)) - Use caching for `--python-downloads-json-url` ([#16749](https://redirect.github.com/astral-sh/uv/pull/16749)) ##### Preview features - Discover extensionless shebang scripts in `uv workspace list --scripts` ([#20099](https://redirect.github.com/astral-sh/uv/pull/20099)) ##### Performance - Avoid full site-packages scans for direct reinstalls ([#20119](https://redirect.github.com/astral-sh/uv/pull/20119)) - Avoid redundant pyproject parsing ([#20076](https://redirect.github.com/astral-sh/uv/pull/20076)) - Cache default dependency markers when reading locks ([#20125](https://redirect.github.com/astral-sh/uv/pull/20125)) - Enable SIMD-accelerated TOML parsing ([#20079](https://redirect.github.com/astral-sh/uv/pull/20079)) - Intern `requires-python` specifiers in Simple API parsing ([#20104](https://redirect.github.com/astral-sh/uv/pull/20104)) - Read cache entries into exact-sized buffers ([#20120](https://redirect.github.com/astral-sh/uv/pull/20120)) - Reduce VersionSpecifiers parsing allocations ([#20105](https://redirect.github.com/astral-sh/uv/pull/20105)) - Reduce site-packages scan allocation overhead ([#20087](https://redirect.github.com/astral-sh/uv/pull/20087)) - Reuse package names when parsing wheel filenames ([#20110](https://redirect.github.com/astral-sh/uv/pull/20110)) - Sort Simple API files after grouping ([#20112](https://redirect.github.com/astral-sh/uv/pull/20112)) ##### Bug fixes - Always emit `packages` table for pylock.toml ([#20145](https://redirect.github.com/astral-sh/uv/pull/20145)) - Avoid blank line for empty `uv pip tree` ([#20062](https://redirect.github.com/astral-sh/uv/pull/20062)) - Encode hashes in file paths ([#19807](https://redirect.github.com/astral-sh/uv/pull/19807)) - Error on a registry uv.lock package without a version instead of panicking ([#19855](https://redirect.github.com/astral-sh/uv/pull/19855)) - Preserve conditional extra markers in exports ([#20148](https://redirect.github.com/astral-sh/uv/pull/20148)) - Skip the ambiguous authority check for file transport VCS URLs ([#20086](https://redirect.github.com/astral-sh/uv/pull/20086)) - Sync index format when `uv add --index` updates an existing index URL ([#19818](https://redirect.github.com/astral-sh/uv/pull/19818)) ##### Other changes - Re-add `pub` APIs used in Pixi ([#20074](https://redirect.github.com/astral-sh/uv/pull/20074)) - Update Rust toolchain to 1.96.1 ([#20103](https://redirect.github.com/astral-sh/uv/pull/20103)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/astral-sh/uv).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

main

2 hours ago

Latest Branches

0%

Expand `uv upgrade` dependency selection and outcome reporting#20338

28 days ago

cb5e193

zsol/upgrade-02-selection

0%

Update Rust crate reqsign to v0.20.1#19845

2 hours ago

4635daf

renovate/reqsign-0.x-lockfile

0%

Update Rust crate console to v0.16.4#20317

2 hours ago

a5ad3d1

renovate/console-0.x-lockfile

© 2026 CodSpeed Technology

Home Terms Privacy Docs