Skip to content

Bump uv from 0.10.1 to 0.10.7#518

Merged
edmorley merged 2 commits intomainfrom
dependabot/pip/uv-0.10.7
Mar 3, 2026
Merged

Bump uv from 0.10.1 to 0.10.7#518
edmorley merged 2 commits intomainfrom
dependabot/pip/uv-0.10.7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps uv from 0.10.1 to 0.10.7.

Release notes

Sourced from uv's releases.

0.10.7

Release Notes

Released on 2026-02-27.

Bug fixes

  • Fix handling of junctions in Windows Containers on Windows (#18192)

Enhancements

  • Activate logging for middleware retries (#18200)
  • Upload uv releases to a mirror (#18159)

Install uv 0.10.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.10.7/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.10.7/uv-installer.ps1 | iex"

Download uv 0.10.7

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.10.7

Released on 2026-02-27.

Bug fixes

  • Fix handling of junctions in Windows Containers on Windows (#18192)

Enhancements

  • Activate logging for middleware retries (#18200)
  • Upload uv releases to a mirror (#18159)

0.10.6

Released on 2026-02-24.

Bug fixes

  • Apply lockfile marker normalization for fork markers (#18116)
  • Fix Python version selection for scripts with a requires-python conflicting with .python-version (#18097)
  • Preserve file permissions when using reflinks on Linux (#18187)

Documentation

  • Remove verbose documentation from optional dependencies help text (#18180)

0.10.5

Released on 2026-02-23.

Enhancements

  • Add hint when named index is found in a parent config file (#18087)
  • Add warning for uv lock --frozen (#17859)
  • Attempt to use reflinks by default on Linux (#18117)
  • Fallback to hardlinks after reflink failure before copying (#18104)
  • Filter pylock.toml wheels by tags and requires-python (#18081)
  • Validate wheel filenames are normalized during uv publish (#17783)
  • Fix message when exclude-newer invalidates the lock file (#18100)
  • Change the missing files log level to debug (#18075)

Performance

  • Improve performance of repeated conflicts with an extra (#18094)

Bug fixes

  • Fix --no-emit-workspace with --all-packages on single-member workspaces (#18098)
  • Fix UV_NO_DEFAULT_GROUPS rejecting truthy values like 1 (#18057)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Dependabot PRs that update Python dependencies labels Mar 2, 2026
@dependabot dependabot bot requested a review from edmorley as a code owner March 2, 2026 21:22
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Dependabot PRs that update Python dependencies labels Mar 2, 2026
@edmorley
Copy link
Member

edmorley commented Mar 2, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/pip/uv-0.10.7 branch from a3c774a to 0d1a021 Compare March 2, 2026 23:22
@edmorley
Copy link
Member

edmorley commented Mar 3, 2026

@dependabot rebase

Bumps [uv](https://github.com/astral-sh/uv) from 0.10.1 to 0.10.7.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.10.1...0.10.7)

---
updated-dependencies:
- dependency-name: uv
  dependency-version: 0.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/uv-0.10.7 branch from 0d1a021 to f8802c5 Compare March 3, 2026 17:05
@edmorley edmorley enabled auto-merge (squash) March 3, 2026 17:15
@edmorley edmorley merged commit 030e08c into main Mar 3, 2026
6 checks passed
@edmorley edmorley deleted the dependabot/pip/uv-0.10.7 branch March 3, 2026 17:16
heroku-linguist bot added a commit that referenced this pull request Mar 3, 2026
## heroku/python

### Changed

- Updated pip from 25.3 to 26.0.1. ([#508](#508))
- Updated uv from 0.10.1 to 0.10.7. ([#518](#518))
- Explicitly configured uv to use hard links to maintain the behaviour of previous versions. ([#519](#519))
@heroku-linguist heroku-linguist bot mentioned this pull request Mar 3, 2026
heroku-linguist bot added a commit to heroku/cnb-builder-images that referenced this pull request Mar 3, 2026
## heroku/python

### Changed

- Updated pip from 25.3 to 26.0.1. ([#508](heroku/buildpacks-python#508))
- Updated uv from 0.10.1 to 0.10.7. ([#518](heroku/buildpacks-python#518))
- Explicitly configured uv to use hard links to maintain the behaviour of previous versions. ([#519](heroku/buildpacks-python#519))
@edmorley
Copy link
Member

edmorley commented Mar 3, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Dependabot PRs that update Python dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant