Skip conflict expansion when there is nothing to infer - #20611
Merged
Conversation
notatallshaw
force-pushed
the
conflict-expansion-guards
branch
from
July 22, 2026 04:45
53f8e68 to
d8d5109
Compare
notatallshaw
marked this pull request as ready for review
July 22, 2026 05:16
zanieb
approved these changes
Jul 22, 2026
This was referenced Jul 27, 2026
jylenhof
pushed a commit
to jylenhof/github-actions-resources
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `uv` Command: `mise upgrade --bump --local uv` <details> <summary>Version changelog (uv)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `uv` | `0.11.29` → `0.11.32` | `0.11.29` → `0.11.32` | </details> <details> <summary>Release notes (1 tools)</summary> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> </details> Modified files: - `.mise.toml`
jylenhof
pushed a commit
to jylenhof/github-actions-resources
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `uv` Command: `mise upgrade --bump --local uv` <details> <summary>Version changelog (uv)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `uv` | `0.11.29` → `0.11.32` | `0.11.29` → `0.11.32` | </details> <details> <summary>Release notes (1 tools)</summary> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> </details> Modified files: - `.mise.toml`
jylenhof
pushed a commit
to jylenhof/github-actions-resources
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `uv` Command: `mise upgrade --bump --local uv` <details> <summary>Version changelog (uv)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `uv` | `0.11.29` → `0.11.32` | `0.11.29` → `0.11.32` | </details> <details> <summary>Release notes (1 tools)</summary> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> </details> Modified files: - `.mise.toml` Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof
pushed a commit
to jylenhof/gh-action-pulse
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `uv` Command: `mise upgrade --bump --local uv` <details> <summary>Version changelog (uv)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `uv` | `0.11.29` → `0.11.32` | `0.11.29` → `0.11.32` | </details> <details> <summary>Release notes (1 tools)</summary> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> </details> Modified files: - `.mise.toml`
jylenhof
pushed a commit
to jylenhof/gh-action-pulse
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `uv` Command: `mise upgrade --bump --local uv` <details> <summary>Version changelog (uv)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `uv` | `0.11.29` → `0.11.32` | `0.11.29` → `0.11.32` | </details> <details> <summary>Release notes (1 tools)</summary> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> </details> Modified files: - `.mise.toml` Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
jylenhof
pushed a commit
to jylenhof/mise-en-place-resources
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `action-validator` - `actionlint` - `editorconfig-checker` - `ghalint` - `lychee` - `pinact` - `pipx:gh-action-pulse` - `prek` - `rumdl` - `shellcheck` - `shfmt` - `tombi` - `uv` - `yamlfmt` - `yamllint` - `zizmor` Command: `mise upgrade --bump --local action-validator actionlint editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor` <details> <summary>Version changelog (5 tools)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `prek` | `0.4.10` → `0.4.11` | `0.4.10` → `0.4.11` | | `rumdl` | `0.2.36` → `0.2.43` | `0.2.36` → `0.2.43` | | `tombi` | `1.2.3` → `1.2.4` | `1.2.3` → `1.2.4` | | `uv` | `latest` → `latest` | `0.11.29` → `0.11.32` | | `zizmor` | `latest` → `latest` | `1.27.0` → `1.28.0` | </details> <details> <summary>Release notes (5 tools)</summary> <details> <summary>prek: `0.4.10` → `0.4.11` (j178/prek)</summary> ### v0.4.11 ## Release Notes Released on 2026-07-25. ### Highlights - This release adds two new builtin hooks, `deny-pattern` and `require-pattern`, as native alternatives for `pygrep` use cases. `deny-pattern` fails when a configured pattern is found, while `require-pattern` ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than `pygrep` in benchmarks. Note that they use [Rust `regex` syntax](https://docs.rs/regex/latest/regex/#syntax), which does not support look-around features such as negative lookbehind. - `prek run` now supports `--glob <PATTERN>` to run hooks on tracked files matching a glob. It can be repeated or combined with `--files` and `--directory`. - Hook priorities now support reusable aliases: ```toml [priorities] checks = 10 [[repos]] repo = "builtin" hooks = [ { id = "check-json", priority = "checks" }, { id = "check-yaml", priority = "checks" }, ] ``` This makes parallel scheduling easier to read and maintain. ### Enhancements - Add `deny-pattern` and `require-pattern` builtin hooks ([#2359](j178/prek#2359)) - Support `--glob` patterns in `prek run` ([#2381](j178/prek#2381)) - Support reusable aliases for hook priorities ([#2331](j178/prek#2331)) - Implement `requirements-txt-fixer` as a builtin hook ([#2390](j178/prek#2390)) - Improve user-facing warnings and errors ([#2380](j178/prek#2380)) - Install Node hooks through git url ([#2394](j178/prek#2394)) ### Performance - Reduce blocking-pool overhead in file hooks ([#2384](j178/prek#2384)) - Speed up mixed-line-ending scans with memchr2 ([#2391](j178/prek#2391)) ### Bug fixes - Honor filenames in builti… (truncated) </details> <details> <summary>rumdl: `0.2.36` → `0.2.43` (rvben/rumdl)</summary> ### v0.2.37 ### Added - **reflow**: add atomic_spans configuration and refactor inline wrapping (#742) ([aeabec1](rvben/rumdl@aeabec1)) ### Changed - **BREAKING**: the MD013 `emphasis-spans` option is renamed to `atomic-spans` (default `true`), with inverted meaning (`emphasis-spans = true` is now `atomic-spans = false`). Configs setting the old key should migrate; it is no longer recognized ### Fixed - **reflow**: keep code spans atomic when wrapping would collapse whitespace ([d43618b](rvben/rumdl@d43618b)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.37-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/rel… (truncated) ### v0.2.38 ### Added - **md044**: add ignore-frontmatter-fields option ([b664e5a](rvben/rumdl@b664e5a)) - **config**: warn when an inline enable cannot re-enable a config-disabled rule ([a74a923](rvben/rumdl@a74a923)) ### Fixed - **md044**: stop flagging proper names inside frontmatter file paths ([35649d9](rvben/rumdl@35649d9)) - **md022**: stop panicking when one blank-line requirement is unlimited ([8a25eb2](rvben/rumdl@8a25eb2)) - **config**: report unknown option keys in inline configure-file comments ([8f4c0ea](rvben/rumdl@8f4c0ea)) - **config**: apply markdownlint-configure-file when the comment spans lines ([7a023a5](rvben/rumdl@7a023a5)) - **config**: honor booleans and alias keys in markdownlint-configure-file (#745) ([acefc19](rvben/rumdl@acefc19)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.38-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-aarch64-unkn… (truncated) ### v0.2.39 ### Added - **config**: expand ~ to the home directory in path settings ([70f91aa](rvben/rumdl@70f91aa)) ### Fixed - **md013**: wrap over-long emphasis spans that contain nested markup ([ddc73f4](rvben/rumdl@ddc73f4)) - **discovery**: strip Windows verbatim prefix from canonicalized paths ([a85ab87](rvben/rumdl@a85ab87)) - **discovery**: apply absolute exclude patterns during directory discovery ([0d20fc8](rvben/rumdl@0d20fc8)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.39-x86_64-apple-darw… (truncated) ### v0.2.40 ### Fixed - **md003**: consume the setext underline when converting a heading to ATX. Converting a setext heading left the underline behind, where a following blank line turned it into a thematic break, so `rumdl fmt` added a horizontal rule the document never had ([7363c34](rvben/rumdl@7363c34)) - **md077**: stop scoping list items inside blockquotes, which made a lazy continuation line gain indentation on every pass so the formatter never converged ([58fb25b](rvben/rumdl@58fb25b)) - **reflow**: keep wiki links, shortcodes and math whole inside a wrapped span ([db12c2c](rvben/rumdl@db12c2c)) - **config**: honor the documented MD033 `table_allowed` alias, which silently dropped the configured value ([db2c204](rvben/rumdl@db2c204)) - **config**: stop reporting MD013's documented `semantic-link-understanding` alias as an unknown option ([1539a64](rvben/rumdl@1539a64)) - **parity**: make the markdownlint comparison harness actually run ([182763c](rvben/rumdl@182763c)) ### Documentation - **md013**: document that `ignore-link-urls` affects reporting only. Reflow measures the markdown as written, matching prettier and mdformat ([c4f8bad](rvben/rumdl@c4f8bad)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.40/rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.40/rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.40-x86_64-u… (truncated) ### v0.2.41 ### Added - **flavor**: add Hugo flavor and skip block attribute lists in blanks-around rules ([e6bb033](rvben/rumdl@e6bb033)) ### Fixed - **md044**: recognize indented HTML comments so links and code escape the rule ([3d6191c](rvben/rumdl@3d6191c)) - **md013**: keep an attr list whole inside a wrapped span ([e06f03d](rvben/rumdl@e06f03d)) - **md013**: keep a reference-style link whole inside a wrapped span ([de42709](rvben/rumdl@de42709)) - **md013**: wrap an over-long span whose whole content is another span ([f6c7c9c](rvben/rumdl@f6c7c9c)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.41-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-musl.tar.gz) | Linux… (truncated) ### v0.2.42 ### Added - **mojibake**: new rule MD083 for mojibake detection (#753) ([552842b](rvben/rumdl@552842b)) ### Fixed - **lint_context**: prevent panic when HTML tag window splits a UTF-8 char ([d14b252](rvben/rumdl@d14b252)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.42-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-apple-darwin.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/relea… (truncated) ### v0.2.43 ### Added - **invisiblechars**: new rule MD084 for detecting invisible characters (#758) ([0a6354a](rvben/rumdl@0a6354a)) ### Fixed - **md084**: treat a zero width joiner between visible characters as presentation ([4fbb1cc](rvben/rumdl@4fbb1cc)) - **md084**: keep attached variation selectors in consecutive-character detection ([f4e9fd3](rvben/rumdl@f4e9fd3)) - **md084**: don't flag variation selectors attached to a base character ([14941bb](rvben/rumdl@14941bb)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz.sha256)… (truncated) </details> <details> <summary>tombi: `1.2.3` → `1.2.4` (tombi-toml/tombi)</summary> ### v1.2.4 <!-- Release notes generated using configuration in .github/release.yml at v1.2.4 --> ## What's Changed ### 🛠️ Other Changes * fix(date-time): accept leap second 60 in date-time values by @LordAizen1 in tombi-toml/tombi#2024 ## New Contributors * @LordAizen1 made their first contribution in tombi-toml/tombi#2024 **Full Changelog**: tombi-toml/tombi@v1.2.3...v1.2.4 </details> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> <details> <summary>zizmor: `1.27.0` → `1.28.0` (zizmorcore/zizmor)</summary> ### v1.28.0 ## Security 🔒[🔗](https://docs.zizmor.sh/release-notes/#security) - v1.27.0 contained a logging defect that would print any configured GitHub credentials as part of zizmor's cleartext logging. No versions other than v1.27.0 were affected. See [GHSA-f42p-wjw5-97qh](GHSA-f42p-wjw5-97qh) for full information. Many thanks to [@shaanmajid](https://github.com/shaanmajid) for finding and reporting this vulnerability. ## Enhancements 🌱[🔗](https://docs.zizmor.sh/release-notes/#enhancements) - The JSON (v1) output format now includes metadata for each finding's fixes, if the finding has fixes ([#2186](zizmorcore/zizmor#2186)) - The [dependabot-cooldown](https://docs.zizmor.sh/audits/#dependabot-cooldown) audit is now aware of GitHub's new three-day default cooldown ([#2193](zizmorcore/zizmor#2193)) - sbt is now recognized as a package-ecosystem in dependabot.yml ([#2211](zizmorcore/zizmor#2211)) ## Bug Fixes 🐛[🔗](https://docs.zizmor.sh/release-notes/#bug-fixes) - Fixed a bug where the [template-injection](https://docs.zizmor.sh/audits/#template-injection) audit would incorrectly flag `steps.*.outcome` and `steps.*.conclusion` as injection risks in the default persona ([#2199](zizmorcore/zizmor#2199)) - Fixed a bug where the [github-env](https://docs.zizmor.sh/audits/#github-env) audit would incorrectly flag some printf calls as exploitable ([#2201](zizmorcore/zizmor#2201)) - Fixed a bug where zizmor would produce a misleading and confusing error message when asked to audit an ambiguous remote input ([#2205](zizmorcore/zizmor#2205)) </details> </details> Modified files: - `.mise.toml`
jylenhof
pushed a commit
to jylenhof/mise-en-place-resources
that referenced
this pull request
Jul 27, 2026
Automated mise tool upgrades from local config. Updated tools: - `action-validator` - `actionlint` - `editorconfig-checker` - `ghalint` - `lychee` - `pinact` - `pipx:gh-action-pulse` - `prek` - `rumdl` - `shellcheck` - `shfmt` - `tombi` - `uv` - `yamlfmt` - `yamllint` - `zizmor` Command: `mise upgrade --bump --local action-validator actionlint editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor` <details> <summary>Version changelog (5 tools)</summary> | Tool | Requested | Installed | |------|-----------|-----------| | `prek` | `0.4.10` → `0.4.11` | `0.4.10` → `0.4.11` | | `rumdl` | `0.2.36` → `0.2.43` | `0.2.36` → `0.2.43` | | `tombi` | `1.2.3` → `1.2.4` | `1.2.3` → `1.2.4` | | `uv` | `latest` → `latest` | `0.11.29` → `0.11.32` | | `zizmor` | `latest` → `latest` | `1.27.0` → `1.28.0` | </details> <details> <summary>Release notes (5 tools)</summary> <details> <summary>prek: `0.4.10` → `0.4.11` (j178/prek)</summary> ### v0.4.11 ## Release Notes Released on 2026-07-25. ### Highlights - This release adds two new builtin hooks, `deny-pattern` and `require-pattern`, as native alternatives for `pygrep` use cases. `deny-pattern` fails when a configured pattern is found, while `require-pattern` ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than `pygrep` in benchmarks. Note that they use [Rust `regex` syntax](https://docs.rs/regex/latest/regex/#syntax), which does not support look-around features such as negative lookbehind. - `prek run` now supports `--glob <PATTERN>` to run hooks on tracked files matching a glob. It can be repeated or combined with `--files` and `--directory`. - Hook priorities now support reusable aliases: ```toml [priorities] checks = 10 [[repos]] repo = "builtin" hooks = [ { id = "check-json", priority = "checks" }, { id = "check-yaml", priority = "checks" }, ] ``` This makes parallel scheduling easier to read and maintain. ### Enhancements - Add `deny-pattern` and `require-pattern` builtin hooks ([#2359](j178/prek#2359)) - Support `--glob` patterns in `prek run` ([#2381](j178/prek#2381)) - Support reusable aliases for hook priorities ([#2331](j178/prek#2331)) - Implement `requirements-txt-fixer` as a builtin hook ([#2390](j178/prek#2390)) - Improve user-facing warnings and errors ([#2380](j178/prek#2380)) - Install Node hooks through git url ([#2394](j178/prek#2394)) ### Performance - Reduce blocking-pool overhead in file hooks ([#2384](j178/prek#2384)) - Speed up mixed-line-ending scans with memchr2 ([#2391](j178/prek#2391)) ### Bug fixes - Honor filenames in builti… (truncated) </details> <details> <summary>rumdl: `0.2.36` → `0.2.43` (rvben/rumdl)</summary> ### v0.2.37 ### Added - **reflow**: add atomic_spans configuration and refactor inline wrapping (#742) ([aeabec1](rvben/rumdl@aeabec1)) ### Changed - **BREAKING**: the MD013 `emphasis-spans` option is renamed to `atomic-spans` (default `true`), with inverted meaning (`emphasis-spans = true` is now `atomic-spans = false`). Configs setting the old key should migrate; it is no longer recognized ### Fixed - **reflow**: keep code spans atomic when wrapping would collapse whitespace ([d43618b](rvben/rumdl@d43618b)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.37/rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.37-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/rel… (truncated) ### v0.2.38 ### Added - **md044**: add ignore-frontmatter-fields option ([b664e5a](rvben/rumdl@b664e5a)) - **config**: warn when an inline enable cannot re-enable a config-disabled rule ([a74a923](rvben/rumdl@a74a923)) ### Fixed - **md044**: stop flagging proper names inside frontmatter file paths ([35649d9](rvben/rumdl@35649d9)) - **md022**: stop panicking when one blank-line requirement is unlimited ([8a25eb2](rvben/rumdl@8a25eb2)) - **config**: report unknown option keys in inline configure-file comments ([8f4c0ea](rvben/rumdl@8f4c0ea)) - **config**: apply markdownlint-configure-file when the comment spans lines ([7a023a5](rvben/rumdl@7a023a5)) - **config**: honor booleans and alias keys in markdownlint-configure-file (#745) ([acefc19](rvben/rumdl@acefc19)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.38-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.38/rumdl-v0.2.38-aarch64-unkn… (truncated) ### v0.2.39 ### Added - **config**: expand ~ to the home directory in path settings ([70f91aa](rvben/rumdl@70f91aa)) ### Fixed - **md013**: wrap over-long emphasis spans that contain nested markup ([ddc73f4](rvben/rumdl@ddc73f4)) - **discovery**: strip Windows verbatim prefix from canonicalized paths ([a85ab87](rvben/rumdl@a85ab87)) - **discovery**: apply absolute exclude patterns during directory discovery ([0d20fc8](rvben/rumdl@0d20fc8)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.39/rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.39-x86_64-apple-darw… (truncated) ### v0.2.40 ### Fixed - **md003**: consume the setext underline when converting a heading to ATX. Converting a setext heading left the underline behind, where a following blank line turned it into a thematic break, so `rumdl fmt` added a horizontal rule the document never had ([7363c34](rvben/rumdl@7363c34)) - **md077**: stop scoping list items inside blockquotes, which made a lazy continuation line gain indentation on every pass so the formatter never converged ([58fb25b](rvben/rumdl@58fb25b)) - **reflow**: keep wiki links, shortcodes and math whole inside a wrapped span ([db12c2c](rvben/rumdl@db12c2c)) - **config**: honor the documented MD033 `table_allowed` alias, which silently dropped the configured value ([db2c204](rvben/rumdl@db2c204)) - **config**: stop reporting MD013's documented `semantic-link-understanding` alias as an unknown option ([1539a64](rvben/rumdl@1539a64)) - **parity**: make the markdownlint comparison harness actually run ([182763c](rvben/rumdl@182763c)) ### Documentation - **md013**: document that `ignore-link-urls` affects reporting only. Reflow measures the markdown as written, matching prettier and mdformat ([c4f8bad](rvben/rumdl@c4f8bad)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.40/rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.40/rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.40-x86_64-u… (truncated) ### v0.2.41 ### Added - **flavor**: add Hugo flavor and skip block attribute lists in blanks-around rules ([e6bb033](rvben/rumdl@e6bb033)) ### Fixed - **md044**: recognize indented HTML comments so links and code escape the rule ([3d6191c](rvben/rumdl@3d6191c)) - **md013**: keep an attr list whole inside a wrapped span ([e06f03d](rvben/rumdl@e06f03d)) - **md013**: keep a reference-style link whole inside a wrapped span ([de42709](rvben/rumdl@de42709)) - **md013**: wrap an over-long span whose whole content is another span ([f6c7c9c](rvben/rumdl@f6c7c9c)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.41-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.41/rumdl-v0.2.41-aarch64-unknown-linux-musl.tar.gz) | Linux… (truncated) ### v0.2.42 ### Added - **mojibake**: new rule MD083 for mojibake detection (#753) ([552842b](rvben/rumdl@552842b)) ### Fixed - **lint_context**: prevent panic when HTML tag window splits a UTF-8 char ([d14b252](rvben/rumdl@d14b252)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-aarch64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.42-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.42/rumdl-v0.2.42-x86_64-apple-darwin.tar.gz.sha256) | | [rumdl-v0.2.42-aarch64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/relea… (truncated) ### v0.2.43 ### Added - **invisiblechars**: new rule MD084 for detecting invisible characters (#758) ([0a6354a](rvben/rumdl@0a6354a)) ### Fixed - **md084**: treat a zero width joiner between visible characters as presentation ([4fbb1cc](rvben/rumdl@4fbb1cc)) - **md084**: keep attached variation selectors in consecutive-character detection ([f4e9fd3](rvben/rumdl@f4e9fd3)) - **md084**: don't flag variation selectors attached to a base character ([14941bb](rvben/rumdl@14941bb)) ## Downloads | File | Platform | Checksum | |------|----------|----------| | [rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-x86_64-unknown-linux-musl.tar.gz.sha256) | | [rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.43/rumdl-v0.2.43-aarch64-unknown-linux-musl.tar.gz.sha256)… (truncated) </details> <details> <summary>tombi: `1.2.3` → `1.2.4` (tombi-toml/tombi)</summary> ### v1.2.4 <!-- Release notes generated using configuration in .github/release.yml at v1.2.4 --> ## What's Changed ### 🛠️ Other Changes * fix(date-time): accept leap second 60 in date-time values by @LordAizen1 in tombi-toml/tombi#2024 ## New Contributors * @LordAizen1 made their first contribution in tombi-toml/tombi#2024 **Full Changelog**: tombi-toml/tombi@v1.2.3...v1.2.4 </details> <details> <summary>uv: `0.11.29` → `0.11.32` (astral-sh/uv)</summary> ### 0.11.30 ## Release Notes Released on 2026-07-20. ### Python - Add CPython 3.15.0b4 ([#20519](astral-sh/uv#20519)) ### Preview features - Allow `uv workspace metadata --sync` to target the active virtual environment with `--active` ([#20500](astral-sh/uv#20500)) - Reuse centralized project environments when workspaces are accessed through symlinks ([#20436](astral-sh/uv#20436)) ### Performance - Skip resolver candidates whose files are all excluded by `exclude-newer` ([#20460](astral-sh/uv#20460)) - Limit parallel cache reads to reduce resolver scheduling and allocation overhead ([#20427](astral-sh/uv#20427)) - Accelerate lockfile serialization with `toml_writer` ([#20450](astral-sh/uv#20450)) - Compact cached Simple API distribution metadata and hashes ([#20463](astral-sh/uv#20463), [#20483](astral-sh/uv#20483)) - Decode stale cache entries in a single blocking task ([#20486](astral-sh/uv#20486)) - Decode cached payloads outside resolver workers ([#20464](astral-sh/uv#20464)) - Cache resolver Python requirement markers ([#20461](astral-sh/uv#20461)) - Reuse resolver fork markers while recording preferences ([#20462](astral-sh/uv#20462)) ### Bug fixes - Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall ([#20429](astral-sh/uv#20429)) - Preserve literal `extends-environment` paths in `pyvenv.cfg` on Unix ([#20466](astral-sh/uv#20466)) ### Documentation - Add a contribution guide ([#20511](astral-sh/uv#20511), [#20552](astral-sh/uv#20552)) ## Install uv 0.11.30 ### Install prebuilt binaries via shell script ```sh curl --proto '=htt… (truncated) ### 0.11.31 ## Release Notes Released on 2026-07-21. ### Enhancements - Allow workspace sources to reference members in another workspace by path ([#18401](astral-sh/uv#18401)) - Support `.venv` files containing paths to centralized project environments ([#20022](astral-sh/uv#20022)) - Update bundled Windows timezone data to IANA 2026c ([#20554](astral-sh/uv#20554)) ### Preview features - Add an index-specific `hash-algorithm` setting for lockfile generation ([#20605](astral-sh/uv#20605)) ### Configuration - Add `audit.malware-check` and `audit.malware-check-url` settings ([#20587](astral-sh/uv#20587)) ### Performance - Avoid quadratic work when deduplicating transitive conflicts ([#20578](astral-sh/uv#20578)) ### Bug fixes - Suggest `--emit-build-options` for unsupported `uv pip compile --emit-options` ([#20582](astral-sh/uv#20582)) - Reject source distributions and wheels with mismatched package names ([#20432](astral-sh/uv#20432)) - Avoid retrying TLS certificate verification failures ([#16245](astral-sh/uv#16245)) - Avoid warnings about `uv_build` settings for in-tree build backends ([#20153](astral-sh/uv#20153)) ## Install uv 0.11.31 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex" ``` ## Download uv 0.11.31 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-aarch64-apple-darwin.ta… (truncated) ### 0.11.32 ## Release Notes Released on 2026-07-23. ### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#20643](astral-sh/uv#20643)) ### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#20611](astral-sh/uv#20611)) ### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#20586](astral-sh/uv#20586)) ## Install uv 0.11.32 ### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` ## Download uv 0.11.32 | File | Platform | Checksum | |--------|----------|----------| | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel… (truncated) </details> <details> <summary>zizmor: `1.27.0` → `1.28.0` (zizmorcore/zizmor)</summary> ### v1.28.0 ## Security 🔒[🔗](https://docs.zizmor.sh/release-notes/#security) - v1.27.0 contained a logging defect that would print any configured GitHub credentials as part of zizmor's cleartext logging. No versions other than v1.27.0 were affected. See [GHSA-f42p-wjw5-97qh](GHSA-f42p-wjw5-97qh) for full information. Many thanks to [@shaanmajid](https://github.com/shaanmajid) for finding and reporting this vulnerability. ## Enhancements 🌱[🔗](https://docs.zizmor.sh/release-notes/#enhancements) - The JSON (v1) output format now includes metadata for each finding's fixes, if the finding has fixes ([#2186](zizmorcore/zizmor#2186)) - The [dependabot-cooldown](https://docs.zizmor.sh/audits/#dependabot-cooldown) audit is now aware of GitHub's new three-day default cooldown ([#2193](zizmorcore/zizmor#2193)) - sbt is now recognized as a package-ecosystem in dependabot.yml ([#2211](zizmorcore/zizmor#2211)) ## Bug Fixes 🐛[🔗](https://docs.zizmor.sh/release-notes/#bug-fixes) - Fixed a bug where the [template-injection](https://docs.zizmor.sh/audits/#template-injection) audit would incorrectly flag `steps.*.outcome` and `steps.*.conclusion` as injection risks in the default persona ([#2199](zizmorcore/zizmor#2199)) - Fixed a bug where the [github-env](https://docs.zizmor.sh/audits/#github-env) audit would incorrectly flag some printf calls as exploitable ([#2201](zizmorcore/zizmor#2201)) - Fixed a bug where zizmor would produce a misleading and confusing error message when asked to audit an ambiguous remote input ([#2205](zizmorcore/zizmor#2205)) </details> </details> Modified files: - `.mise.toml` Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
1 task
tmeijn
pushed a commit
to tmeijn/dotfiles
that referenced
this pull request
Aug 11, 2026
This MR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [uv](https://github.com/astral-sh/uv) | tools | minor | `0.11.31` → `0.12.3` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>astral-sh/uv (uv)</summary> ### [`v0.12.3`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0123) [Compare Source](astral-sh/uv@0.12.2...0.12.3) Released on 2026-08-07. ##### Python - Add CPython 3.13.15 ([#​20997](astral-sh/uv#20997)) ##### Preview features - Add `--output-format` to select automatic, human-readable, or raw-byte output for `uv cache size` ([#​20992](astral-sh/uv#20992)) - Preserve JSON output from `uv workspace metadata --quiet` while suppressing diagnostics ([#​20991](astral-sh/uv#20991)) - Reduce memory usage for large workspaces by streaming `uv workspace metadata` JSON output ([#​20990](astral-sh/uv#20990)) ##### Performance - Reduce Linux startup latency by initializing the workspace cache before spawning another thread ([#​20989](astral-sh/uv#20989)) - Reuse compiled workspace exclusion patterns during workspace discovery ([#​20988](astral-sh/uv#20988)) - Speed up conflict-heavy resolutions by avoiding materialized range complements ([#​20982](astral-sh/uv#20982)) - Avoid slow procfs reads during Python interpreter discovery on Linux ([#​20987](astral-sh/uv#20987)) ##### Documentation - Add PEP 740 attestations to the GitHub Actions publishing example ([#​20986](astral-sh/uv#20986)) - Restrict the GitHub Actions publishing example to Python version tags ([#​20973](astral-sh/uv#20973)) - Correct `--python-pin` to `--pin-python` in the `uv init --bare` example ([#​20876](astral-sh/uv#20876)) ### [`v0.12.2`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0122) [Compare Source](astral-sh/uv@0.12.1...0.12.2) Released on 2026-08-05. ##### Python - Add CPython 3.15.0rc1 ([#​20948](astral-sh/uv#20948)) - Add CPython 3.14.7 ([#​20971](astral-sh/uv#20971)) ##### Enhancements - Ensure diagnostic hints end with a newline to prevent malformed terminal output ([#​20959](astral-sh/uv#20959)) ##### Preview features - Audit one or all installed tools with `uv tool audit` ([#​20921](astral-sh/uv#20921)) - Report physically reclaimed disk space during cache cleanup with the `cache-physical-space` preview feature ([#​20925](astral-sh/uv#20925)) ##### Configuration - Add `UV_RUN_RLIMIT_NOFILE` to set the open-file limit for commands launched by `uv run` ([#​20926](astral-sh/uv#20926)) ##### Performance - Speed up `uv.lock` parsing for wheel entries ([#​20881](astral-sh/uv#20881)) - Speed up `uv.lock` parsing for source distribution entries ([#​20882](astral-sh/uv#20882)) - Speed up filename extraction from distribution URLs ([#​20879](astral-sh/uv#20879)) - Reduce filesystem metadata lookups during bytecode compilation ([#​20928](astral-sh/uv#20928)) - Reuse file metadata when building source distributions ([#​20927](astral-sh/uv#20927)) ##### Bug fixes - Preserve compatibility with older uv versions when recording artifact sizes in cached wheels and source distributions ([#​20963](astral-sh/uv#20963)) - Avoid including workspace-root default dependency groups when syncing or exporting a selected workspace member unless explicitly requested ([#​20930](astral-sh/uv#20930)) ##### Documentation - Separate build and publish jobs in the GitHub Actions publishing guide ([#​20946](astral-sh/uv#20946)) - Ensure the GitHub Actions publishing example waits for the build job to finish ([#​20957](astral-sh/uv#20957)) - Correct typos in the Docker integration guide ([#​20970](astral-sh/uv#20970)) ### [`v0.12.1`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0121) [Compare Source](astral-sh/uv@0.12.0...0.12.1) Released on 2026-07-31. ##### Enhancements - Add package-specific pre-release policies with `--prerelease-package` ([#​20837](astral-sh/uv#20837)) - Support local HTML files as flat indexes ([#​20802](astral-sh/uv#20802)) - Add Xonsh virtual environment activation scripts (`activate.xsh`) ([#​19740](astral-sh/uv#19740)) - Preserve filesystem paths passed to `uv add --index` when updating `pyproject.toml` ([#​20817](astral-sh/uv#20817)) ##### Preview features - Add automatic fixes to `uv check` with `--fix` ([#​20793](astral-sh/uv#20793)) - Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources ([#​20847](astral-sh/uv#20847)) - Honor direct URL constraints when validating metadata-free lockfiles ([#​20796](astral-sh/uv#20796)) - Ignore malformed PEP 723 scripts discovered during project checks ([#​20784](astral-sh/uv#20784)) - Use ty's native script exclusion in `uv check` ([#​20742](astral-sh/uv#20742)) ##### Performance - Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax ([#​20648](astral-sh/uv#20648)) - Accelerate SHA-256 hashing on non-Windows ARM64 platforms ([#​20805](astral-sh/uv#20805)) ##### Bug fixes - Flush shell startup file updates before `uv tool update-shell` and `uv python update-shell` exit ([#​20842](astral-sh/uv#20842)) - Make workspace-root dependency groups available to commands run from workspace members ([#​20840](astral-sh/uv#20840)) - Resolve `--find-links` paths in requirements files relative to the containing file ([#​20832](astral-sh/uv#20832)) - Respect configured indexes in `uv tool list --outdated` ([#​20770](astral-sh/uv#20770)) ##### Documentation - Document Astral GPU indexes in the PyTorch guide ([#​20785](astral-sh/uv#20785)) - Use consistent dependency-group argument descriptions throughout the CLI documentation ([#​20823](astral-sh/uv#20823)) ### [`v0.12.0`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0120) [Compare Source](astral-sh/uv@0.11.33...0.12.0) Released on 2026-07-28. Since we released uv [0.11.0](https://github.com/astral-sh/uv/releases/tag/0.11.0) in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution. **We expect most users to be able to upgrade without making changes.** There are no breaking changes to the configuration of the [uv build backend](https://docs.astral.sh/uv/concepts/build-backend/). If your `[build-system]` table includes an upper bound on `uv_build`, update it to allow `uv_build` 0.12, e.g., `uv_build>=0.11.32,<0.13`. ##### Breaking changes - **Define build systems by default with `uv init`** ([#​19197](astral-sh/uv#19197)) Projects created with `uv init` now declare a build system and are packaged by default. This was the default project layout all the way back in [v0.3](https://github.com/astral-sh/uv/releases/tag/0.3.0), but we found that the use of the `hatchling` build system was confusing to newcomers and consequently dropped use of a build system by default in [v0.4](https://github.com/astral-sh/uv/releases/tag/0.4.0). Since then, we've created our own build system (`uv_build`) with tight integration with uv and are excited to restore the default to a best-practice project layout. Previously, `uv init example` created an unpackaged layout containing `main.py` and a `pyproject.toml` without a build system. The project could declare dependencies but was not itself installed into its virtual environment. Now, `uv init example` defines a `[build-system]` using `uv_build`, places application source code in `src/example`, and includes a `[project.scripts]` entry named `example`. Defining a build system allows the project to be imported from tests or other code, installed as a dependency, and run as a command: ```console $ uv init example $ cd example $ uv run example Hello from example! ``` Existing projects are unaffected. Use [`uv init --no-package example`](https://docs.astral.sh/uv/concepts/projects/init/#creating-a-project-without-a-build-system) to create the previous unpackaged layout without a build system. See the [project creation documentation](https://docs.astral.sh/uv/concepts/projects/init/#applications) for more details. This stabilizes the `packaged-init` preview feature. - **Reject unsupported source distribution and wheel archive formats** ([#​18927](astral-sh/uv#18927)) [PEP 625](https://peps.python.org/pep-0625/) requires [source distributions](https://docs.astral.sh/uv/concepts/resolution/#source-distribution) to use `.tar.gz` archives. Previously, uv also accepted legacy formats such as `.tar.bz2` and `.tar.xz`. Those formats are now rejected, including when referenced by an existing lockfile. Legacy `.zip` source distributions remain supported for backwards compatibility. Wheels and other ZIP archives can no longer contain entries compressed with bzip2, LZMA, or XZ. Entries must use the stored, DEFLATE, or zstd compression methods. Removing support for uncommon compression methods reduces uv's compression dependencies and the attack surface exposed when processing untrusted packages. You cannot opt out of this behavior. If you depend on a legacy source distribution that uses an unsupported format, we recommend rebuilding it as a `.tar.gz` archive and regenerating any lockfile containing references to the legacy archive. - **Reject wheel files that could replace the Python interpreter** ([#​20748](astral-sh/uv#20748), [#​20749](astral-sh/uv#20749)) uv already rejected wheel entry points named `python`, but case variants such as `Python` were still accepted. On case-insensitive filesystems, including common macOS and Windows setups, these entry points could overwrite the virtual environment's interpreter. Wheels could also place interpreter files in their `.data/scripts` directory or in paths such as `.data/data/bin/python`, bypassing the entry-point check and replacing the interpreter during installation. uv now rejects case-insensitive variants of reserved interpreter names and wheel data files that would be installed over an interpreter. This includes names such as `Python`, `python.py`, and `Python.exe`, along with other reserved interpreter names and their versioned variants. You cannot opt out of these checks. Rename conflicting entry points or wheel data files and rebuild the affected wheel. - **Prefer stable releases before falling back to pre-releases** ([#​19993](astral-sh/uv#19993)) A dependency can introduce a [pre-release requirement](https://docs.astral.sh/uv/concepts/resolution/#pre-release-handling) after resolution starts. uv previously required each package's pre-release eligibility to be known before resolution began: the default `if-necessary-or-explicit` mode allowed them for direct requirements that explicitly requested a pre-release, or for packages that only published pre-releases. This meant that a pre-release requirement discovered in a dependency's metadata, e.g., `example>=2.0.0b1`, would fail to resolve even when a compatible pre-release existed. To resolve it, you had to add that dependency as a direct requirement or allow pre-releases across your entire dependency graph. The default mode is now `if-necessary`. uv tries stable candidates first and falls back to pre-releases when no stable candidate satisfies the active constraints. Like pip, uv now supports [pre-release requirements discovered transitively](https://docs.astral.sh/uv/pip/compatibility/#pre-release-compatibility), but can select different versions than previous uv releases when both stable and pre-release candidates are available. You can opt out of automatic pre-release selection with `--prerelease disallow`. Alternatively, `--prerelease allow` considers pre-releases without first preferring stable releases, and `--prerelease explicit` only allows them for direct requirements that mention a pre-release. The old `if-necessary-or-explicit` mode distinguished between explicitly requested pre-releases and packages with no stable releases. That distinction is unnecessary now that `if-necessary` handles both cases, including transitive requirements. The old name remains available as an alias but is deprecated and will be removed in a future release. - **Respect `--require-hashes` directives in `requirements.txt`** ([#​19336](astral-sh/uv#19336)) Previously, `uv pip install` and `uv pip sync` warned about `--require-hashes` inside a `requirements.txt` file but still installed dependencies without checking their hashes. Now, the directive enables hash-checking mode, just as if `--require-hashes` had been passed on the command line. For example, this requirements file is no longer accepted because the requirement is neither pinned nor hashed: ```text --require-hashes anyio ``` You cannot opt out while the directive is present. Pin every requirement with `==` and provide its hash, or remove `--require-hashes` if hash checking is not intended. - **Reject MD5-only hashes in hash-checking mode** ([#​20758](astral-sh/uv#20758)) Previously, `uv pip install --require-hashes` and `uv pip sync --require-hashes` accepted requirements whose only available digest used MD5. MD5 is not collision-resistant, so relying on it undermined installations that require hash verification and differed from pip's behavior. Hash-checking mode now requires at least one secure digest for every requirement. For example, the following requirement is rejected unless a secure hash, such as SHA-256, is also supplied: ```text anyio==4.0.0 --hash=md5:420d85e19168705cdf0223621b18831a ``` A secure hash can be supplied directly on the requirement or in a matching constraints file. Ordinary hash verification without `--require-hashes` continues to support MD5. You cannot opt out while hash checking is required. Regenerate affected hashes with SHA-256 or another supported secure hash. - **Reject invalid `pylock.toml` files and artifacts** ([#​20402](astral-sh/uv#20402), [#​20440](astral-sh/uv#20440), [#​20443](astral-sh/uv#20443)) uv now validates additional requirements from the [`pylock.toml` specification](https://packaging.python.org/en/latest/specifications/pylock-toml/): - The `packages` array must be present. Previously, uv interpreted a missing array as an empty lockfile, so `uv pip sync` could uninstall an environment instead of rejecting malformed input. An explicitly empty `packages = []` array remains valid. - Lockfile filenames must be `pylock.toml` or a single-name variant such as `pylock.dev.toml`. Names such as `pylock..toml` and `pylock.foo.bar.toml` are rejected. - If a wheel, source distribution, or other artifact declares a `size`, the downloaded or cached artifact must match. Previously, an incorrect size was accepted when the hash was correct. Sizes reported by package indexes remain advisory. You cannot opt out of these checks. Regenerate malformed lockfiles, rename invalid filenames, and either correct or remove an incorrect optional `size` value. - **Honor explicit certificate overrides even when no certificates can be loaded** ([#​20741](astral-sh/uv#20741), [#​20767](astral-sh/uv#20767)) Previously, uv ignored [`SSL_CERT_FILE` or `SSL_CERT_DIR`](https://docs.astral.sh/uv/concepts/authentication/certificates/#custom-certificates) values that pointed to missing or inaccessible paths, empty files or directories, or sources without valid certificates. Instead, it fell back to its default trust roots, potentially allowing HTTPS connections that the configured override was intended to reject. Now, any non-empty `SSL_CERT_FILE` or `SSL_CERT_DIR` value replaces uv's default certificate roots, even when no valid certificates can be loaded. In that case, HTTPS requests fail because no certificates are trusted. This applies to package downloads and remote scripts, including GitHub Gists. Fix or unset the certificate override. Unsetting it restores the default trust store; empty environment-variable values continue to be ignored. - **Support pip-compatible `--cert` handling in `uv pip`** ([#​20418](astral-sh/uv#20418)) The `uv pip` interface now accepts [`--cert <path>`](https://docs.astral.sh/uv/concepts/authentication/certificates/#custom-certificates), e.g.: ```console $ uv pip install --cert ./company-ca.pem example ``` As in pip, the provided PEM bundle replaces all other certificate sources for that invocation, including system certificates and `SSL_CERT_FILE` or `SSL_CERT_DIR`. This change has no effect unless you pass `--cert`. Include the necessary certificate authorities in the bundle. `--cert` is only supported by `uv pip` commands; other uv commands continue to use their existing certificate configuration. - **Discover projects relative to the script passed to `uv run`** ([#​20225](astral-sh/uv#20225)) Previously, `uv run project/script.py` discovered its project from the current directory, even when the script belonged to another project. uv now starts project and workspace discovery from the script's directory instead. For example, running `uv run other-project/script.py` now uses `other-project` and its dependencies. This fixes scripts that previously failed because their own dependencies were not installed, but can select a different environment than before. You can opt out of script-relative discovery by selecting a project explicitly, e.g., `uv run --project . other-project/script.py`. This stabilizes the `target-workspace-discovery` preview feature. - **Require `--force` before clearing a directory that is not a virtual environment** ([#​20225](astral-sh/uv#20225)) `uv venv --clear` previously removed any existing target directory, even if it was not a virtual environment. uv emitted a warning but still deleted the directory and its contents. Now, uv refuses to clear directories that do not contain a virtual environment. You can opt out of this safety check by explicitly passing `--force`, e.g., `uv venv --clear --force ./not-a-virtualenv`. This stabilizes the `venv-safe-clear` preview feature. - **Reject `--project` when initializing a project** ([#​20225](astral-sh/uv#20225)) `--project` selects an existing project, so it is not meaningful when initializing a new one. Previously, `uv init --project example` warned and initialized `example` anyway; if a positional path was also provided, `--project` was ignored. This usage is now an error. Use `uv init example` to initialize a project at the requested path, or `uv init --directory example` to change the working directory first. This stabilizes the `init-project-flag` preview feature. - **Reject missing or invalid `--project` paths** ([#​20225](astral-sh/uv#20225)) uv previously warned when `--project` referred to a missing directory or a file other than `pyproject.toml`, but then attempted to continue. This could produce confusing errors later or run against an unintended project. Now, `uv run --project missing python` fails immediately instead of continuing. You cannot opt out of this behavior. Create the directory first or select an existing project. Passing `--project path/to/pyproject.toml` remains supported and selects the file's parent directory. This stabilizes the `project-directory-must-exist` preview feature. - **Skip distributions with non-normalized filenames when publishing** ([#​20225](astral-sh/uv#20225)) Distribution filenames must use [normalized package names](https://packaging.python.org/en/latest/specifications/name-normalization/) and versions. For example, a wheel for version `1.01.0` should be named `example-1.1.0-py3-none-any.whl`, not `example-1.01.0-py3-none-any.whl`. Previously, `uv publish` warned about non-normalized filenames but still attempted to upload them. It now skips the affected wheels and source distributions instead. You cannot opt out of this behavior. Rebuild distributions with normalized filenames before publishing. This stabilizes the `publish-require-normalized` preview feature. - **Classify Conda environments named `base` and `root` by their paths** ([#​20225](astral-sh/uv#20225)) Conda environments named `base` or `root` were previously assumed to be the base Conda environment, even when they were ordinary child environments. uv now recognizes child Conda environments named `base` or `root` based on their paths, as it already does for other names. You can opt out of automatic interpreter selection by requesting an interpreter explicitly with `--python /path/to/python`. This stabilizes the `special-conda-env-names` preview feature. - **Reject broken `.venv` symlinks during environment discovery** ([#​20433](astral-sh/uv#20433)) Previously, uv could ignore a broken `.venv` symlink and continue searching parent directories for another virtual environment. As a result, commands such as `uv pip install` could unexpectedly modify an unrelated ancestor environment. uv now stops at a broken `.venv` symlink and reports its exact path. Errors encountered while reading virtual environment metadata, including permission failures, are also reported immediately instead of being ignored. You cannot opt out of this behavior. Repair or remove the broken `.venv` symlink and correct any permissions that prevent uv from inspecting the environment. - **Reinstall matching installed Python patch versions instead of upgrading implicitly** ([#​20659](astral-sh/uv#20659)) Before [Python upgrades](https://docs.astral.sh/uv/guides/install-python/#upgrading-python-versions) were supported, `uv python install 3.12 --reinstall` doubled as a way to install the latest Python 3.12 patch release. Now that `--upgrade` is available, `--reinstall` reinstalls the matching patch releases that are already present. For example, if Python 3.12.6 and 3.12.7 are installed, `uv python install 3.12 --reinstall` reinstalls both versions instead of installing the latest available 3.12 release. You can recover the previous upgrade behavior with `uv python install 3.12 --upgrade`. Combine `--upgrade --reinstall` to reinstall only the latest patch. - **Require `--upgrade-group` to name an existing dependency group** ([#​18957](astral-sh/uv#18957)) Previously, `uv lock --upgrade-group docs` silently succeeded even if no `docs` [dependency group](https://docs.astral.sh/uv/concepts/projects/dependencies/#dependency-groups) existed. uv now validates the requested group against the project, its workspace members, and workspace-level dependency groups. You cannot opt out of this behavior. Correct the group name or add it to `[dependency-groups]`. Legacy `tool.uv.dev-dependencies` still satisfies `--upgrade-group dev`. - **Resolve relative indexes and find-links against `--directory`** ([#​20740](astral-sh/uv#20740)) The `--directory` option changes the directory in which uv operates. Previously, relative index and find-links paths supplied on the command line were still resolved against the original working directory. uv now resolves `--index`, `--default-index`, `--index-url`, `--extra-index-url`, and `--find-links` relative to the directory selected by `--directory`. For example: ```console $ uv add --directory project --index ./packages example ``` This now uses `project/packages` instead of `./packages` in the original working directory. Absolute paths and indexes loaded from configuration files are unaffected. To preserve the previous target, pass an absolute path or adjust the relative path, e.g., `--index ../packages`. - **Preserve absolute paths provided to `uv add`** ([#​18402](astral-sh/uv#18402)) `uv add` previously converted every local dependency into a project-relative path, even when the original request used an absolute path or a literal `file://` URL. It now preserves the form of the request in `pyproject.toml` and `uv.lock`: ```console $ uv add ../library # remains relative $ uv add /projects/library # remains absolute ``` Absolute paths make a project less portable. Use a relative path to avoid recording an absolute path. URLs containing expanded variables retain their existing relative-path behavior. - **Remove older PyPy distributions that are only available as bzip2 archives** ([#​20423](astral-sh/uv#20423)) Older PyPy patch releases that are only distributed as `.tar.bz2` archives are no longer available through `uv python install`. These releases require unsupported bzip2 archives. The latest PyPy release for each supported Python minor version is available as a gzip-compressed archive and remains supported. For example, `uv python list 3.10 --all-versions` still includes the latest PyPy 3.10 release, but older bzip2-only patch releases are omitted. You cannot opt out of this behavior. Request a newer PyPy patch release instead. - **Omit excluded-package comments when annotations are disabled** ([#​20085](astral-sh/uv#20085)) `uv pip compile --no-annotate` suppresses comments describing the generated requirements file. Previously, a footer listing packages excluded with `--unsafe-package` was still included, even though annotations were disabled. That footer is now omitted. You can recover the footer by removing `--no-annotate`. ##### Stabilizations - **TOML 1.0-compatible source distributions** ([#​20225](astral-sh/uv#20225)) `uv_build` now writes a TOML 1.0-compatible `pyproject.toml` when building source distributions, allowing older Python build frontends to consume projects that use newer TOML syntax. The original project file remains available in the archive as `pyproject.toml.orig`. This stabilizes the `toml-backwards-compatibility` preview feature. - **Automatic open-file limit adjustment on Unix** ([#​20225](astral-sh/uv#20225)) On Linux and macOS, uv now attempts to raise the soft open-file limit at startup toward the hard limit, capped at 1,048,576 descriptors. The new limit also applies to subprocesses and reduces failures caused by running out of file descriptors. If the limit cannot be raised, uv continues running with the existing limit. This stabilizes the `adjust-ulimit` preview feature. ##### Preview features - Allow `uv upgrade` to target multiple packages, upgrade all production dependencies, and exclude selected dependencies ([#​20338](astral-sh/uv#20338)) ##### Bug fixes - Include extras activated by dependency groups when evaluating conflicts ([#​20237](astral-sh/uv#20237)) ### [`v0.11.33`](https://github.com/astral-sh/uv/releases/tag/0.11.33) [Compare Source](astral-sh/uv@0.11.32...0.11.33) #### Release Notes Released on 2026-07-28. ##### Enhancements - Abort panics in release builds for smaller uv binaries ([#​20271](astral-sh/uv#20271)) - Use `.tar.gz` archives for Pyodide installs ([#​20667](astral-sh/uv#20667)) ##### Preview features - Avoid checking any scripts in `uv check` unless `--script` is passed ([#​20676](astral-sh/uv#20676)) - Check locked tools for malware before cache reuse ([#​20301](astral-sh/uv#20301)) - Write and read `package.metadata`-free lockfiles ([#​20688](astral-sh/uv#20688), [#​20691](astral-sh/uv#20691), [#​20685](astral-sh/uv#20685), [#​20695](astral-sh/uv#20695)) ##### Bug fixes - Correctly split dependencies into production and optional markers ([#​20671](astral-sh/uv#20671)) - Fix discrepancies in argument parsing of exclude-newer ([#​20679](astral-sh/uv#20679)) - Cleanup managed Python temporary directory on error ([#​20752](astral-sh/uv#20752)) #### Install uv 0.11.33 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.sh | sh ``` ##### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-installer.ps1 | iex" ``` #### Download uv 0.11.33 | File | Platform | Checksum | | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- | -------------------------------------------------------------------------------------------------------------------------- | | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86\_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-apple-darwin.tar.gz.sha256) | | [uv-aarch64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-pc-windows-msvc.zip.sha256) | | [uv-i686-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-pc-windows-msvc.zip) | x86 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-pc-windows-msvc.zip.sha256) | | [uv-x86\_64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-pc-windows-msvc.zip.sha256) | | [uv-aarch64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-unknown-linux-gnu.tar.gz) | ARM64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [uv-i686-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-unknown-linux-gnu.tar.gz) | x86 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-unknown-linux-gnu.tar.gz.sha256) | | [uv-powerpc64le-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-powerpc64le-unknown-linux-gnu.tar.gz) | PPC64LE Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-powerpc64le-unknown-linux-gnu.tar.gz.sha256) | | [uv-riscv64gc-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-riscv64gc-unknown-linux-gnu.tar.gz) | RISCV Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-riscv64gc-unknown-linux-gnu.tar.gz.sha256) | | [uv-s390x-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-s390x-unknown-linux-gnu.tar.gz) | S390x Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-s390x-unknown-linux-gnu.tar.gz.sha256) | | [uv-x86\_64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-unknown-linux-gnu.tar.gz) | x64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [uv-armv7-unknown-linux-gnueabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-armv7-unknown-linux-gnueabihf.tar.gz) | ARMv7 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-armv7-unknown-linux-gnueabihf.tar.gz.sha256) | | [uv-aarch64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-aarch64-unknown-linux-musl.tar.gz.sha256) | | [uv-i686-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-unknown-linux-musl.tar.gz) | x86 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-i686-unknown-linux-musl.tar.gz.sha256) | | [uv-riscv64gc-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-riscv64gc-unknown-linux-musl.tar.gz) | RISCV MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-riscv64gc-unknown-linux-musl.tar.gz.sha256) | | [uv-x86\_64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-x86_64-unknown-linux-musl.tar.gz.sha256) | | [uv-arm-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-arm-unknown-linux-musleabihf.tar.gz) | ARMv6 MUSL Linux (Hardfloat) | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-arm-unknown-linux-musleabihf.tar.gz.sha256) | | [uv-armv7-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-armv7-unknown-linux-musleabihf.tar.gz) | ARMv7 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.33/uv-armv7-unknown-linux-musleabihf.tar.gz.sha256) | #### Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify): ```sh gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv ``` You can also download the attestation from [GitHub](https://github.com/astral-sh/uv/attestations) and verify against that directly: ```sh gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> ``` ### [`v0.11.32`](https://github.com/astral-sh/uv/releases/tag/0.11.32) [Compare Source](astral-sh/uv@0.11.31...0.11.32) #### Release Notes Released on 2026-07-23. ##### Preview features - Add `--package` and `--all-packages` selection to `uv check` ([#​20628](astral-sh/uv#20628)) - Allow `uv upgrade` to update multiple marker-specific declarations of the same package ([#​20335](astral-sh/uv#20335)) - Reject non-canonically formatted lockfiles in `uv lock --check` and commands using `--locked` ([#​20646](astral-sh/uv#20646)) - Regenerate non-canonically formatted lockfiles with `uv lock --refresh` ([#​20634](astral-sh/uv#20634)) - Include best-effort information about the active environment in `uv workspace metadata` by default ([#​20643](astral-sh/uv#20643)) ##### Performance - Skip dependency-group conflict expansion when no additional conflicts can be inferred ([#​20611](astral-sh/uv#20611)) ##### Bug fixes - Fork universal resolutions when `Requires-Python` is discovered only from distribution metadata ([#​20586](astral-sh/uv#20586)) #### Install uv 0.11.32 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh ``` ##### Install prebuilt binaries via powershell script ```sh powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex" ``` #### Download uv 0.11.32 | File | Platform | Checksum | | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- | -------------------------------------------------------------------------------------------------------------------------- | | [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-apple-darwin.tar.gz.sha256) | | [uv-x86\_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-apple-darwin.tar.gz.sha256) | | [uv-aarch64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-pc-windows-msvc.zip.sha256) | | [uv-i686-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-pc-windows-msvc.zip) | x86 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-pc-windows-msvc.zip.sha256) | | [uv-x86\_64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-pc-windows-msvc.zip.sha256) | | [uv-aarch64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-unknown-linux-gnu.tar.gz) | ARM64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-unknown-linux-gnu.tar.gz.sha256) | | [uv-i686-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-unknown-linux-gnu.tar.gz) | x86 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-unknown-linux-gnu.tar.gz.sha256) | | [uv-powerpc64le-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-powerpc64le-unknown-linux-gnu.tar.gz) | PPC64LE Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-powerpc64le-unknown-linux-gnu.tar.gz.sha256) | | [uv-riscv64gc-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-riscv64gc-unknown-linux-gnu.tar.gz) | RISCV Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-riscv64gc-unknown-linux-gnu.tar.gz.sha256) | | [uv-s390x-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-s390x-unknown-linux-gnu.tar.gz) | S390x Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-s390x-unknown-linux-gnu.tar.gz.sha256) | | [uv-x86\_64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-unknown-linux-gnu.tar.gz) | x64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-unknown-linux-gnu.tar.gz.sha256) | | [uv-armv7-unknown-linux-gnueabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-armv7-unknown-linux-gnueabihf.tar.gz) | ARMv7 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-armv7-unknown-linux-gnueabihf.tar.gz.sha256) | | [uv-aarch64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-aarch64-unknown-linux-musl.tar.gz.sha256) | | [uv-i686-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-unknown-linux-musl.tar.gz) | x86 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-i686-unknown-linux-musl.tar.gz.sha256) | | [uv-riscv64gc-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-riscv64gc-unknown-linux-musl.tar.gz) | RISCV MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-riscv64gc-unknown-linux-musl.tar.gz.sha256) | | [uv-x86\_64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-x86_64-unknown-linux-musl.tar.gz.sha256) | | [uv-arm-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-arm-unknown-linux-musleabihf.tar.gz) | ARMv6 MUSL Linux (Hardfloat) | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-arm-unknown-linux-musleabihf.tar.gz.sha256) | | [uv-armv7-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-armv7-unknown-linux-musleabihf.tar.gz) | ARMv7 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-armv7-unknown-linux-musleabihf.tar.gz.sha256) | #### Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify): ```sh gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv ``` You can also download the attestation from [GitHub](https://github.com/astral-sh/uv/attestations) and verify against that directly: ```sh gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> ``` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6bWlub3IiXX0=-->
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
I was taking a look at #20578 and noticed that for the common scenario of having no conflicts, the PR did not improve things, and when there are only a few declared conflicts with nothing to infer, the dedup is consistently slower (although not significant in absolute terms).
We can optimize these scenarios though: when no declared conflict names a group, or nothing uses
include-group, no sets can be inferred and the whole step can be skipped.Note: inferred sets are now appended in insertion order instead of hash order, and lock validation compares
conflictsorder-sensitively, so a project with inferred sets can relock once. I don't know if this is a backwards compatibility issue or not, but also a rustc-hash change re-rolls the inferred set order. An MRE of this issue:MRE
One declared set, 8 inferred; they come out in a different order, so the first lock after upgrading rewrites the array once.