Loading
Update dependency uv_build to >=0.11.15,<0.12.0
This MR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| uv_build (source, changelog) | >=0.11.14,<0.12.0 -> >=0.11.15,<0.12.0 |
Release Notes
astral-sh/uv (uv_build)
v0.11.15
Released on 2026-05-18.
Security
- Fix a TAR parser differential, see GHSA-3cv2-h65g-fgmm (#19463)
- Enforce that entry points cannot escape in the scripts directory, see GHSA-4gg8-gxpx-9rph (#19464)
Enhancements
- Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)
- Add support for Azure request signing (#19421)
- Apply stricter validation to all wheel filename segments (#19364)
- Reject empty strings as an invalid package name (#19435)
- Use structured errors for signing authentication failures (#19422)
Preview
- uv audit: Add JSON output (#19305)
Configuration
- Respect
required-environmentsinuv pip compile(#19378)
Performance
- Avoid parsing JSON manifest when local Python is available (#19398)
- Avoid walking nested directories in linker conflict registration (#19382)
- Optimize async wheel ZIP writing (#19383)
- Fix dead "already trimmed" fast-path in
Version::only_release_trimmed(#19425)
Bug fixes
- Apply workspace-member
[tool.uv.sources]credentials underuv sync --frozen(#19423) - Skip empty directories in uv build outputs (#19437)
- Fix Git submodule handling when using relative paths (#12156)
- Fix line number reporting in netrc parsing (#19452)
Documentation
- Move Bazel auth helper setup into integration guide (#19392)
Configuration
- If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.