0.11.16
📦 uvView on GitHub →
✨ 5 features🐛 5 fixes🔧 2 symbols
Summary
This release introduces support for direct archive dependencies in Git and allows disabling system configuration via an environment variable. Numerous bug fixes address issues related to environment variable parsing, secret leakage, and entry point validation.
Migration Steps
- If you need to disable reading the system configuration, set the environment variable `UV_NO_SYSTEM_CONFIG`.
✨ New Features
- Add support for direct archive dependencies in Git
- Adjust hint rendering
- uv audit: specialize malformed OSV error (Preview feature)
- Reject locked malware installations (Preview feature)
- Allow disabling reading the system config with UV_NO_SYSTEM_CONFIG
🐛 Bug Fixes
- Allow environment variables that take a list to be empty
- Ensure that incompatible wheel hints do not leak secrets
- Reject unsafe entry points in `uv-build`
- Restrict delimiters in entry point parsing
- uv-netrc: fix multi-word no-space comment lines causing parse errors