This release includes preliminary support for the pylock.toml file format, as standardized in PEP 751. pylock.toml is an alternative resolution output format intended to replace requirements.txt (e.g., in the context of uv pip compile, whereby a "locked" requirements.txt file is generated from a set of input requirements). pylock.toml is standardized and tool-agnostic, such that in the future, pylock.toml files generated by uv could be installed by other tools, and vice versa.
As of this release, pylock.toml is supported in the following commands:
To export a uv.lock to the pylock.toml format, run: uv export -o pylock.toml
To generate a pylock.toml file from a set of requirements, run: uv pip compile -o pylock.toml -r requirements.in
To install from a pylock.toml file, run: uv pip sync pylock.toml or uv pip install -r pylock.toml
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [ghcr.io/astral-sh/uv](https://github.com/astral-sh/uv) | final | patch | `0.6.14` -> `0.6.17` |
---
### Release Notes
<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>
### [`v0.6.17`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0617)
[Compare Source](https://github.com/astral-sh/uv/compare/0.6.16...0.6.17)
##### Preview features
- Add PyTorch v2.7.0 to GPU backend ([#​13072](https://github.com/astral-sh/uv/pull/13072))
##### Bug fixes
- Avoid panic for invalid Python versions ([#​13077](https://github.com/astral-sh/uv/pull/13077))
- Block scripts from overwriting `python` ([#​13051](https://github.com/astral-sh/uv/pull/13051))
- Check distribution names to handle invalid redirects ([#​12917](https://github.com/astral-sh/uv/pull/12917))
- Check for mismatched package and distribution names on resolver thread ([#​13088](https://github.com/astral-sh/uv/pull/13088))
- Fix panic with invalid last character in PEP 508 name ([#​13105](https://github.com/astral-sh/uv/pull/13105))
- Reject `requires-python` even if not listed on the index page ([#​13086](https://github.com/astral-sh/uv/pull/13086))
### [`v0.6.16`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0616)
[Compare Source](https://github.com/astral-sh/uv/compare/0.6.15...0.6.16)
##### Bug fixes
- Revert "Properly handle authentication for 302 redirect URLs" ([#​13041](https://github.com/astral-sh/uv/pull/13041))
### [`v0.6.15`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0615)
[Compare Source](https://github.com/astral-sh/uv/compare/0.6.14...0.6.15)
This release includes preliminary support for the `pylock.toml` file format, as standardized in [PEP 751](https://peps.python.org/pep-0751/). `pylock.toml` is an alternative resolution output format intended to replace `requirements.txt` (e.g., in the context of `uv pip compile`, whereby a "locked" `requirements.txt` file is generated from a set of input requirements). `pylock.toml` is standardized and tool-agnostic, such that in the future, `pylock.toml` files generated by uv could be installed by other tools, and vice versa.
As of this release, `pylock.toml` is supported in the following commands:
- To export a `uv.lock` to the `pylock.toml` format, run: `uv export -o pylock.toml`
- To generate a `pylock.toml` file from a set of requirements, run: `uv pip compile -o pylock.toml -r requirements.in`
- To install from a `pylock.toml` file, run: `uv pip sync pylock.toml` or `uv pip install -r pylock.toml`
##### Enhancements
- Add PEP 751 support to `uv pip compile` ([#​13019](https://github.com/astral-sh/uv/pull/13019))
- Add `uv export` support for PEP 751 ([#​12955](https://github.com/astral-sh/uv/pull/12955))
- Accept `requirements.txt` (verbatim) as a format on the CLI ([#​12957](https://github.com/astral-sh/uv/pull/12957))
- Add `UV_NO_EDITABLE` environment variable to set `--no-editable` on all invocations ([#​12773](https://github.com/astral-sh/uv/pull/12773))
- Add `pylock.toml` to `uv pip install` and `uv pip sync` ([#​12992](https://github.com/astral-sh/uv/pull/12992))
- Add a brief sleep before sending `SIGINT` to child processes ([#​13018](https://github.com/astral-sh/uv/pull/13018))
- Add upload time to `uv.lock` ([#​12968](https://github.com/astral-sh/uv/pull/12968))
- Allow updating Git sources by name ([#​12897](https://github.com/astral-sh/uv/pull/12897))
- Cache `which git` in `uv init` ([#​12893](https://github.com/astral-sh/uv/pull/12893))
- Enable `--dry-run` with `--locked` / `--frozen` for `uv sync` ([#​12778](https://github.com/astral-sh/uv/pull/12778))
- Infer output type in `uv export` ([#​12958](https://github.com/astral-sh/uv/pull/12958))
- Make `uv init` resilient against broken git ([#​12895](https://github.com/astral-sh/uv/pull/12895))
- Respect build constraints for `uv run --with` dependencies ([#​12882](https://github.com/astral-sh/uv/pull/12882))
- Split UV_INDEX on all whitespace ([#​12820](https://github.com/astral-sh/uv/pull/12820))
- Support build constraints in `uv tool` and PEP723 scripts. ([#​12842](https://github.com/astral-sh/uv/pull/12842))
- Use suffix from `uvx` binary when searching for uv binary ([#​12923](https://github.com/astral-sh/uv/pull/12923))
- Update version formatting to use cyan color ([#​12943](https://github.com/astral-sh/uv/pull/12943))
- Add debug logs for version file search ([#​12951](https://github.com/astral-sh/uv/pull/12951))
- Fix `SourceNotAllowed` error message during Python discovery ([#​13012](https://github.com/astral-sh/uv/pull/13012))
- Obfuscate password in credentials debug messages ([#​12944](https://github.com/astral-sh/uv/pull/12944))
- Obfuscate possible tokens in URL logs ([#​12969](https://github.com/astral-sh/uv/pull/12969))
- Validate that PEP 751 entries don't include multiple sources ([#​12993](https://github.com/astral-sh/uv/pull/12993))
##### Preview features
- Build backend: Add reference docs and schema ([#​12803](https://github.com/astral-sh/uv/pull/12803))
##### Bug fixes
- Align supported `config-settings` with example in docs ([#​12947](https://github.com/astral-sh/uv/pull/12947))
- Ensure virtual environment is compatible with interpreter on sync ([#​12884](https://github.com/astral-sh/uv/pull/12884))
- Fix `PythonDownloadRequest` parsing for partial keys ([#​12925](https://github.com/astral-sh/uv/pull/12925))
- Fix pre-release exclusive comparison operator in `uv-pep440` ([#​12836](https://github.com/astral-sh/uv/pull/12836))
- Forward additional signals to the child process in `uv run` ([#​13017](https://github.com/astral-sh/uv/pull/13017))
- Omit PEP 751 version for source trees ([#​13030](https://github.com/astral-sh/uv/pull/13030))
- Patch `CC` and `CCX` entries in sysconfig for cross-compiled `aarch64` Python distributions ([#​12239](https://github.com/astral-sh/uv/pull/12239))
- Properly handle authentication for HTTP 302 redirect URLs ([#​12920](https://github.com/astral-sh/uv/pull/12920))
- Set 4MB stack size for all threads, introduce `UV_STACK_SIZE` ([#​12839](https://github.com/astral-sh/uv/pull/12839))
- Show PyPy downloads during `uv python list` ([#​12915](https://github.com/astral-sh/uv/pull/12915))
- Add `subdirectory` to Direct URL for local directories ([#​12971](https://github.com/astral-sh/uv/pull/12971))
- Prefer stable releases over pre-releases in `uv python install` ([#​12194](https://github.com/astral-sh/uv/pull/12194))
- Write requested Python variant to pin file in `uv init` ([#​12870](https://github.com/astral-sh/uv/pull/12870))
##### Documentation
- Fix CLI reference with code block ([#​12807](https://github.com/astral-sh/uv/pull/12807))
- Fix lockfile note ([#​12793](https://github.com/astral-sh/uv/pull/12793))
- Fix typo in a reference ([#​12858](https://github.com/astral-sh/uv/pull/12858))
- Improve docs for `uv python list --only-downloads` and `--only-installed` ([#​12916](https://github.com/astral-sh/uv/pull/12916))
- Update note on lack of musl distributions to ARM-only ([#​12825](https://github.com/astral-sh/uv/pull/12825))
- Add section on shebangs for scripts ([#​11553](https://github.com/astral-sh/uv/pull/11553))
- Display aliases for long and short args in the CLI reference ([#​12824](https://github.com/astral-sh/uv/pull/12824))
- Fix highlight line in explicit index documentation ([#​12887](https://github.com/astral-sh/uv/pull/12887))
- Add explicit source (matching PyTorch guide) ([#​12844](https://github.com/astral-sh/uv/pull/12844))
- Fix link to issue ([#​12823](https://github.com/astral-sh/uv/pull/12823))
- Fix grammatical error in FastAPI guide ([#​12908](https://github.com/astral-sh/uv/pull/12908))
- Add `--locked` to `uv sync` in GitHub Actions guide ([#​12819](https://github.com/astral-sh/uv/pull/12819))
- Improve formatting for `"all"` `default-groups` setting documentation ([#​12963](https://github.com/astral-sh/uv/pull/12963))
- Replace `--frozen` with `--locked` in Docker integration guide ([#​12818](https://github.com/astral-sh/uv/pull/12818))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzMuNiIsInVwZGF0ZWRJblZlciI6IjM5LjIzMy42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
0.6.14->0.6.17Release Notes
astral-sh/uv (ghcr.io/astral-sh/uv)
v0.6.17Compare Source
Preview features
Bug fixes
python(#13051)requires-pythoneven if not listed on the index page (#13086)v0.6.16Compare Source
Bug fixes
v0.6.15Compare Source
This release includes preliminary support for the
pylock.tomlfile format, as standardized in PEP 751.pylock.tomlis an alternative resolution output format intended to replacerequirements.txt(e.g., in the context ofuv pip compile, whereby a "locked"requirements.txtfile is generated from a set of input requirements).pylock.tomlis standardized and tool-agnostic, such that in the future,pylock.tomlfiles generated by uv could be installed by other tools, and vice versa.As of this release,
pylock.tomlis supported in the following commands:uv.lockto thepylock.tomlformat, run:uv export -o pylock.tomlpylock.tomlfile from a set of requirements, run:uv pip compile -o pylock.toml -r requirements.inpylock.tomlfile, run:uv pip sync pylock.tomloruv pip install -r pylock.tomlEnhancements
uv pip compile(#13019)uv exportsupport for PEP 751 (#12955)requirements.txt(verbatim) as a format on the CLI (#12957)UV_NO_EDITABLEenvironment variable to set--no-editableon all invocations (#12773)pylock.tomltouv pip installanduv pip sync(#12992)SIGINTto child processes (#13018)uv.lock(#12968)which gitinuv init(#12893)--dry-runwith--locked/--frozenforuv sync(#12778)uv export(#12958)uv initresilient against broken git (#12895)uv run --withdependencies (#12882)uv tooland PEP723 scripts. (#12842)uvxbinary when searching for uv binary (#12923)SourceNotAllowederror message during Python discovery (#13012)Preview features
Bug fixes
config-settingswith example in docs (#12947)PythonDownloadRequestparsing for partial keys (#12925)uv-pep440(#12836)uv run(#13017)CCandCCXentries in sysconfig for cross-compiledaarch64Python distributions (#12239)UV_STACK_SIZE(#12839)uv python list(#12915)subdirectoryto Direct URL for local directories (#12971)uv python install(#12194)uv init(#12870)Documentation
uv python list --only-downloadsand--only-installed(#12916)--lockedtouv syncin GitHub Actions guide (#12819)"all"default-groupssetting documentation (#12963)--frozenwith--lockedin Docker integration guide (#12818)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
Branch automerge failure
This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.