Skip to content

build(deps-dev): bump the uv-dependencies group with 2 updates#97

Merged
amannocci merged 1 commit intomainfrom
dependabot/uv/uv-dependencies-063038eeba
May 5, 2026
Merged

build(deps-dev): bump the uv-dependencies group with 2 updates#97
amannocci merged 1 commit intomainfrom
dependabot/uv/uv-dependencies-063038eeba

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Updates the requirements on poethepoet and uv-build to permit the latest version.
Updates poethepoet from 0.44.0 to 0.45.0

Release notes

Sourced from poethepoet's releases.

0.45.0

Enhancements

Fixes

New Contributors

Full Changelog: nat-n/poethepoet@v0.44.0...v0.45.0

Commits
  • 244cf0b Bump version to 0.45.0
  • 3a6c09a feat: support forwarding free arguments via $POE_EXTRA_ARGS (#380)
  • a1edcda fix: preserve quotes in :+/:- operator arguments (#333) (#377)
  • 3e60a85 fix: handle cancelled asyncio tasks correctly (#378)
  • bbdd435 fix: handle ctrl+c attempt on windows if running bat/cmd scripts (#382)
  • See full diff in compare view

Updates uv-build to 0.11.8

Release notes

Sourced from uv-build's releases.

0.11.8

Release Notes

Released on 2026-04-27.

Enhancements

  • Add --python-downloads-json-url to python pin (#19092)
  • Fetch uv from Astral mirror during self-update (#18682)
  • Support pip uninstall -y (#19082)
  • Allow exclude-newer to be missing from the lockfile when exclude-newer-span is present (#19024)
  • Only show the version number in uv self version --short (#19019)
  • Silence warnings on empty SSL_CERT_DIR directory (#19018)
  • Use a sentinel timestamp for relative exclude-newer and exclude-newer-package values in lockfiles (#19022, #19101)

Configuration

  • Add UV_PYTHON_NO_REGISTRY (#19035)
  • Add an environment variable for UV_NO_PROJECT (#19052)
  • Expose UV_PYTHON_SEARCH_PATH for Python discovery PATH overrides (#19034)

Bug fixes

  • Add rust-toolchain.toml to uv-build sdist (#19131)
  • Ensure uv invocations of git do not inherit repository location environment variables (#19088)
  • Redact pre-signed upload URLs in verbose output (#19146)
  • Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
  • Support uv lock on a pyproject.toml that only contains dependency-groups (#19087)
  • Disable transparent Python upgrades in projects when a patch version is requested via .python-version (#19102)
  • Fix Python variant tagging in the Windows registry (#19012)
  • Ban external symlinks in .tar.zst wheels (#19144)

Distributions

  • Remove deprecated license classifiers from uv-build and add Python 3.14 classifier (#19130)

Documentation

  • Bump astral-sh/setup-uv version in docs (#19030)
  • Update PyTorch documentation for PyTorch 2.11 (#19095)

Install uv 0.11.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.8/uv-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.11.8

Released on 2026-04-27.

Enhancements

  • Add --python-downloads-json-url to python pin (#19092)
  • Fetch uv from Astral mirror during self-update (#18682)
  • Support pip uninstall -y (#19082)
  • Allow exclude-newer to be missing from the lockfile when exclude-newer-span is present (#19024)
  • Only show the version number in uv self version --short (#19019)
  • Silence warnings on empty SSL_CERT_DIR directory (#19018)
  • Use a sentinel timestamp for relative exclude-newer and exclude-newer-package values in lockfiles (#19022, #19101)

Configuration

  • Add UV_PYTHON_NO_REGISTRY (#19035)
  • Add an environment variable for UV_NO_PROJECT (#19052)
  • Expose UV_PYTHON_SEARCH_PATH for Python discovery PATH overrides (#19034)

Bug fixes

  • Add rust-toolchain.toml to uv-build sdist (#19131)
  • Ensure uv invocations of git do not inherit repository location environment variables (#19088)
  • Redact pre-signed upload URLs in verbose output (#19146)
  • Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
  • Support uv lock on a pyproject.toml that only contains dependency-groups (#19087)
  • Disable transparent Python upgrades in projects when a patch version is requested via .python-version (#19102)
  • Fix Python variant tagging in the Windows registry (#19012)
  • Ban external symlinks in .tar.zst wheels (#19144)

Distributions

  • Remove deprecated license classifiers from uv-build and add Python 3.14 classifier (#19130)

Documentation

  • Bump astral-sh/setup-uv version in docs (#19030)
  • Update PyTorch documentation for PyTorch 2.11 (#19095)

0.11.7

Released on 2026-04-15.

Python

  • Upgrade CPython build to 20260414 including an OpenSSL security upgrade (#19004)

Enhancements

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [poethepoet](https://github.com/nat-n/poethepoet) and [uv-build](https://github.com/astral-sh/uv) to permit the latest version.

Updates `poethepoet` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.44.0...v0.45.0)

Updates `uv-build` to 0.11.8
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.7...0.11.8)

---
updated-dependencies:
- dependency-name: poethepoet
  dependency-version: 0.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: uv-build
  dependency-version: 0.11.8
  dependency-type: direct:development
  dependency-group: uv-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 3, 2026
@amannocci amannocci self-assigned this May 5, 2026
@amannocci amannocci merged commit 916d00d into main May 5, 2026
16 checks passed
@amannocci amannocci deleted the dependabot/uv/uv-dependencies-063038eeba branch May 5, 2026 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant