●Change8

Migrating to uv 0.8.6

Version 0.8.6 introduces 1 breaking change. This guide details how to update your code.

Released: 8/7/2025

1
Breaking Changes
2
Migration Steps
6
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

uv.zipuv.publishuv.runuv.installcargo_disth2

Breaking Changes

●Issue #1

uv now validates ZIP files more strictly, rejecting repeated entries and other malformed ZIP archives; ZIPs that previously extracted successfully may now be rejected. Set the environment variable UV_INSECURE_NO_ZIP_VALIDATION to disable this validation if needed.

Migration Steps

  1. 1
    If a ZIP archive is rejected after upgrading to uv 0.8.6, set UV_INSECURE_NO_ZIP_VALIDATION=1 to retain the previous behavior.
  2. 2
    Review any custom build scripts that rely on environment variables; they can now be defined per‑project using the new build‑time env‑var support.

Release Summary

uv 0.8.6 introduces strict ZIP validation to mitigate parser‑confusion attacks, adds CPython 3.13.6 support, per‑project build‑time env vars, and several bug fixes and enhancements.

Need More Details?

View the full release notes and all changes for uv 0.8.6.

View Full Changelog