Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump astral-sh/uv from 0.5.15 to 0.5.18 in /server #4494

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps astral-sh/uv from 0.5.15 to 0.5.18.

Release notes

Sourced from astral-sh/uv's releases.

0.5.18

Release Notes

Bug fixes

  • Avoid forking for identical markers (#10490)
  • Avoid panic in uv remove when only comments exist (#10484)
  • Revert "improve shell compatibility of venv activate scripts (#10397)" (#10497)

Install uv 0.5.18

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.5.18/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/uv/releases/download/0.5.18/uv-installer.ps1 | iex"

Download uv 0.5.18

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

0.5.17

Release Notes

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.5.18

Bug fixes

  • Avoid forking for identical markers (#10490)
  • Avoid panic in uv remove when only comments exist (#10484)
  • Revert "improve shell compatibility of venv activate scripts (#10397)" (#10497)

0.5.17

This release includes support for generating lockfiles from scripts based on inline metadata, as defined in PEP 723.

By default, scripts remain unlocked, and must be locked explicitly with uv lock --script /path/to/script.py, which will generate a lockfile adjacent to the script (e.g., script.py.lock). Once generated, the lockfile will be respected (and updated, if necessary) across uv run --script, uv add --script, and uv remove --script invocations.

This release also includes support for uv export --script and uv tree --script. Both commands support PEP 723 scripts with and without accompanying lockfiles.

Enhancements

  • Add support for locking PEP 723 scripts (#10135)
  • Respect PEP 723 script lockfiles in uv run (#10136)
  • Update PEP 723 lockfile in uv add --script (#10145)
  • Update PEP 723 lockfile in uv remove --script (#10162)
  • Add --script support to uv export for PEP 723 scripts (#10160)
  • Add --script support to uv tree for PEP 723 scripts (#10159)
  • Add ls alias to uv {tool, python, pip} list (#10240)
  • Allow reading --with-requirements from stdin in uv add and uv run (#10447)
  • Warn-and-ignore for unsupported requirements.txt options (#10420)

Preview features

  • Add remaining Python type annotations to build backend (#10434)

Performance

  • Avoid allocating for names in the PEP 508 parser (#10476)
  • Fetch concurrently for non-first-match index strategies (#10432)
  • Remove unnecessary .to_string() call (#10419)
  • Respect sentinels in package prioritization (#10443)
  • Use ArcStr for marker values (#10453)
  • Use ArcStr for package, extra, and group names (#10475)
  • Use matches! rather than contains in requirements.txt parsing (#10423)
  • Use faster disjointness check for markers (#10439)
  • Pre-compute PEP 508 markers from universal markers (#10472)

Bug fixes

  • Fix UV_FIND_LINKS delimiter to split on commas (#10477)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.5.15 to 0.5.18.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.5.15...0.5.18)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested review from nvuillam and echoix as code owners January 13, 2025 15:46
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Jan 13, 2025
Copy link
Contributor

github-actions bot commented Jan 13, 2025

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ API spectral 1 0 1.68s
⚠️ BASH bash-exec 6 1 0.02s
✅ BASH shellcheck 6 0 0.16s
✅ BASH shfmt 6 0 0 0.68s
✅ COPYPASTE jscpd yes no 3.89s
✅ DOCKERFILE hadolint 129 0 24.9s
✅ JSON jsonlint 20 0 0.27s
✅ JSON v8r 22 0 16.03s
⚠️ MARKDOWN markdownlint 267 0 302 25.56s
✅ MARKDOWN markdown-table-formatter 267 0 0 162.32s
⚠️ PYTHON bandit 214 66 3.34s
✅ PYTHON black 214 0 0 4.57s
✅ PYTHON flake8 214 0 2.03s
✅ PYTHON isort 214 0 0 1.31s
✅ PYTHON mypy 214 0 14.6s
✅ PYTHON pylint 214 0 30.09s
✅ PYTHON ruff 214 0 0 0.64s
✅ REPOSITORY checkov yes no 33.9s
✅ REPOSITORY git_diff yes no 0.64s
⚠️ REPOSITORY grype yes 26 14.16s
❌ REPOSITORY secretlint yes 1 9.13s
✅ REPOSITORY trivy yes no 18.59s
✅ REPOSITORY trivy-sbom yes no 0.3s
⚠️ REPOSITORY trufflehog yes 1 53.66s
✅ SPELL cspell 717 0 13.8s
⚠️ SPELL lychee 349 15 24.77s
✅ XML xmllint 3 0 0 0.92s
✅ YAML prettier 160 0 0 4.32s
✅ YAML v8r 102 0 30.31s
✅ YAML yamllint 161 0 2.21s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 16, 2025

Superseded by #4512.

@dependabot dependabot bot closed this Jan 16, 2025
@dependabot dependabot bot deleted the dependabot/docker/server/astral-sh/uv-0.5.18 branch January 16, 2025 23:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file docker Pull requests that update Docker code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants