PR #27 opened: chore(deps)(deps-dev): update uv-build requirement from <0.10.0,>=0.9.22 to >=0.9.22,<0.12.0
Updates the requirements on uv-build to permit the latest version.
▶Release notes
Sourced from uv-build's releases.
0.11.2
Release Notes
Released on 2026-03-26.
Enhancements
- Add a dedicated Windows PE editing error (#18710)
- Make
uv self updatefetch the manifest from the mirror first (#18679)- Use uv reqwest client for self update (#17982)
- Show
uv self updatesuccess and failure messages with--quiet(#18645)Preview features
- Evaluate extras and groups when determining auditable packages (#18511)
Bug fixes
- Skip redundant project configuration parsing for
uv run(#17890)Install uv 0.11.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.2/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.2/uv-installer.ps1 | iex"Download uv 0.11.2
File Platform Checksum uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum uv-x86_64-apple-darwin.tar.gz Intel macOS checksum uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum uv-i686-pc-windows-msvc.zip x86 Windows checksum uv-x86_64-pc-windows-msvc.zip x64 Windows checksum uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
... (truncated)
▶Changelog
Sourced from uv-build's changelog.
0.11.2
Released on 2026-03-26.
Enhancements
- Add a dedicated Windows PE editing error (#18710)
- Make
uv self updatefetch the manifest from the mirror first (#18679)- Use uv reqwest client for self update (#17982)
- Show
uv self updatesuccess and failure messages with--quiet(#18645)Preview features
- Evaluate extras and groups when determining auditable packages (#18511)
Bug fixes
- Skip redundant project configuration parsing for
uv run(#17890)0.11.1
Released on 2026-03-24.
Bug fixes
- Add missing hash verification for
riscv64gc-unknown-linux-musl(#18686)- Fallback to direct download when direct URL streaming is unsupported (#18688)
- Revert treating 'Dynamic' values as case-insensitive (#18692)
- Remove torchdata from list of packages to source from the PyTorch index (#18703)
- Special-case
==Python version request ranges (#9697)Documentation
- Cover
--python <dir>in "Using arbitrary Python environments" (#6457)- Fix version annotations for
PS_MODULE_PATHandUV_WORKING_DIR(#18691)0.11.0
Released on 2026-03-23.
Breaking changes
This release includes changes to the networking stack used by uv. While we think that breakage will be rare, it is possible that these changes will result in the rejection of certificates previously trusted by uv so we have marked the change as breaking out of an abundance of caution.
The changes are largely driven by the upgrade of reqwest, which powers uv's HTTP clients, to v0.13 which included some breaking changes to TLS certificate verification.
The following changes are included:
rustls-platform-verifieris used instead ofrustls-native-certsandwebpkifor certificate verification
... (truncated)
▶Commits
02036a8Bump version to 0.11.2 (#18732)d247329Sync latest Python releases (#18720)66c6591Fetch the cargo-dist binary directly instead of using the installer (#18731)4faa20eUse thereleaseenvironment inpublish-versionsbfefb87Use thereleaseenvironment inpublish-docs(#18727)944f009Mutestderr_importantdead code warning (#18724)11c89d9Use uv reqwest client for self update (#17982)25d5549Evaluate extras and groups when determining auditable packages (#18511)7447dd9Remove unnecessary preview from uv init test (#18722)d9d0359Makeuv self updatefetch the manifest from the mirror first (#18679)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
▶Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)