astral-sh/uv - CodSpeed

uv

Blog Docs Changelog

Performance History

Latest Results

Update cargo publish nightly to 2026-06-12 (#19789) Fixes the crates.io publishing error from [https://github.com/rust-lang/cargo/issues/17093](https://github.com/rust-lang/cargo/issues/17093)

main

2 hours ago

Update cargo publish nightly to 2026-06-12

konsti/cargo-publish-2026-06-09

3 hours ago

Quote prompts in Python activation scripts

zsol/venv-prompt-injection

3 hours ago

Don't fail if credential.toml is empty (#19815) ## Summary This is a one-line fix, the rest of the change is tests. TL;DR is we have `Default` on this type, but we also need a serde default marker to ensure that an empty or comment-only input deserializes as expected. Fixes #19811. ## Test Plan Two new tests. Signed-off-by: William Woodruff <william@yossarian.net>

main

12 hours ago

Don't fail if credentials.toml is empty Signed-off-by: William Woodruff <william@yossarian.net>

ww/fix-19811

12 hours ago

Be less strict about the ID Signed-off-by: William Woodruff <william@yossarian.net>

ww/cov

12 hours ago

Reject invalid UTF-8 URL credentials (#19814) ## Summary - make URL credential extraction fallible - reject percent-decoded usernames and passwords that are not valid UTF-8 - propagate credential decoding errors through index, Git, project, publish, and HTTP client paths - identify failing indexes with their display-safe URL - add unit and end-to-end regression coverage ## Why Lossy decoding replaced malformed bytes with U+FFFD, silently changing the credential sent on the wire and collapsing distinct inputs. URL parsing remains permissive; the error is raised only when converting URL userinfo into uv's string credential model. Follow-up to https://github.com/astral-sh/uv/pull/19800#discussion_r3398777727. --------- Co-authored-by: Zanie Blue <contact@zanie.dev>

main

12 hours ago

Include index URL in credential errors

zaniebot:zb/strict-url-credentials

13 hours ago

Latest Branches

0%

Update cargo publish nightly to 2026-06-12#19789

3 hours ago

5c4ac41

konsti/cargo-publish-2026-06-09

0%

Avoid evaluating virtual environment prompts#19812

17 hours ago

6cb1402

zsol/venv-prompt-injection

0%

Don't fail if credential.toml is empty#19815

12 hours ago

8fa1aa2

ww/fix-19811

© 2026 CodSpeed Technology

Home Terms Privacy Docs