Update dependency uv_build to >=0.11.31,<0.12.0

Sylva Renovate botrequested to merge
renovate/patch-python-build-system into main

This MR contains the following updates:

Package Change Age Confidence
uv_build (source, changelog) >=0.11.30,<0.12.0 -> >=0.11.31,<0.12.0 age confidence

Release Notes

astral-sh/uv (uv_build)

v0.11.31

Compare Source

Release Notes

Released on 2026-07-21.

Enhancements
  • Allow workspace sources to reference members in another workspace by path (#​18401)
  • Support .venv files containing paths to centralized project environments (#​20022)
  • Update bundled Windows timezone data to IANA 2026c (#​20554)
Preview features
  • Add an index-specific hash-algorithm setting for lockfile generation (#​20605)
Configuration
  • Add audit.malware-check and audit.malware-check-url settings (#​20587)
Performance
  • Avoid quadratic work when deduplicating transitive conflicts (#​20578)
Bug fixes
  • Suggest --emit-build-options for unsupported uv pip compile --emit-options (#​20582)
  • Reject source distributions and wheels with mismatched package names (#​20432)
  • Avoid retrying TLS certificate verification failures (#​16245)
  • Avoid warnings about uv_build settings for in-tree build backends (#​20153)

Install uv 0.11.31

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex"

Download uv 0.11.31

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports