astral-sh/uv - CodSpeed

uv

Blog Docs Changelog

Performance History

Latest Results

Perform a malware check before syncing Signed-off-by: William Woodruff <william@astral.sh> Filter packages to just PyPI origins, add a network error warning Signed-off-by: William Woodruff <william@astral.sh> Add `uv add` and `uv run` tests Signed-off-by: William Woodruff <william@astral.sh> Better NOTE Signed-off-by: William Woodruff <william@astral.sh> Add a preview gate Signed-off-by: William Woodruff <william@astral.sh> Document malware-check preview feature Signed-off-by: William Woodruff <william@astral.sh> Bump snapshot Signed-off-by: William Woodruff <william@astral.sh> Fix another snapshot Signed-off-by: William Woodruff <william@astral.sh> Split OSV ID lookup and full record lookup This allows us to optimize the malware check by avoiding `N` (batched) HTTP requests whose payloads we don't use anyways, since the only thing we actually need is malware IDs. Signed-off-by: William Woodruff <william@astral.sh> Feedback Signed-off-by: William Woodruff <william@astral.sh> Feedback + `cargo fmt` Signed-off-by: William Woodruff <william@astral.sh> Plumb UV_NO_MALWARE_CHECK through EnvironmentOptions Signed-off-by: William Woodruff <william@astral.sh> Missed a spot Signed-off-by: William Woodruff <william@astral.sh> Push UV_MALWARE_CHECK_URL up Signed-off-by: William Woodruff <william@astral.sh> Integration test for malformed UV_MALWARE_CHECK_URL Signed-off-by: William Woodruff <william@astral.sh> fmt, hard fail for client builder error Signed-off-by: William Woodruff <william@astral.sh> Bump snapshots Signed-off-by: William Woodruff <william@astral.sh> Dedupe PYPI_URL Signed-off-by: William Woodruff <william@astral.sh> Add a NOTE Signed-off-by: William Woodruff <william@astral.sh> Unused import Signed-off-by: William Woodruff <william@astral.sh>

ww/sync-mal-guard

4 hours ago

simplify invalidation

konsti/simplified-workspace-caching

5 hours ago

Merge branch 'main' into zb/publish-dry-run-concurrent

zb/publish-dry-run-concurrent

6 hours ago

Use `Timestamp` instead of `ExcludeNewerValue` in resolver The resolver and filtering code only ever needs the timestamp, never the span. Change `ExcludeNewer::exclude_newer_package()` and related methods to return `Option<Timestamp>`, and thread plain `Timestamp` through the version map, resolver provider, and latest client. `ExcludeNewerValue` (with its span) remains at the lockfile/settings layer where the span is needed for comparison and serialization. https://claude.ai/code/session_01FgWSJawFSSjGg6XhEzXxAi

zaniebot:claude/fix-lockfile-timestamp-logic-ThVKd

6 hours ago

Add `--on-failure` to `uv publish` and continue on errors by default Closes #14010

publish-fail-fast

7 hours ago

Only use reproducible exclude newer errors in the test suite

zb/exclude-newer-test

7 hours ago

Add a test-windows-registry feature Signed-off-by: William Woodruff <william@astral.sh>

ww/triage-18795

8 hours ago

Revert on-demand timestamp computation Keep `Relative { timestamp, span }` with a stored timestamp to ensure a single consistent value is used throughout a resolution. The `from_span` constructor computes once at load time, and `recompute` refreshes it when needed (e.g., `--outdated`). https://claude.ai/code/session_01FgWSJawFSSjGg6XhEzXxAi

zaniebot:claude/fix-lockfile-timestamp-logic-ThVKd

9 hours ago

Latest Branches

-1%

Reject locked malware installations#18936

8 days ago

4db9bdb

ww/sync-mal-guard

0%

Simplified workspace caching#19007

5 hours ago

d7ad86a

konsti/simplified-workspace-caching

-1%

Allow concurrent uploads and wheel validations in `uv publish`#17789

6 hours ago

fbff759

zb/publish-dry-run-concurrent

© 2026 CodSpeed Technology

Home Terms Privacy Docs