Releases: astral-sh/uv
0.11.13
Release Notes
Released on 2026-05-10.
Bug fixes
- Include data files in editable builds (#19312)
- Respect
--require-hasheswhen installing frompylock.tomlfiles (#19334)
Python
- Add CPython 3.14.5
Install uv 0.11.13
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.13/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.13/uv-installer.ps1 | iex"Download uv 0.11.13
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.12
Release Notes
Released on 2026-05-08.
Python
- Add CPython 3.15.0b1
Enhancements
- Add
--no-editablesupport touv pip install(#19306) - Require git refs in URLs to be percent-encoded (#19320)
Bug fixes
-
Respect
--no-devoverUV_DEV=1(#19313) -
Don't suggest non-existent
--no-frozenflag (#19290) (#19294)
Documentation
- Fix bug from inconsistent workflow name in GHA-PyPI guide example (#19309)
Install uv 0.11.12
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.12/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.12/uv-installer.ps1 | iex"Download uv 0.11.12
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.11
Release Notes
Released on 2026-05-06.
Bug fixes
- Accept legacy ID format from pre-0.11.9 cache entries (#19301)
Install uv 0.11.11
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.11/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.11/uv-installer.ps1 | iex"Download uv 0.11.11
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.10
Release Notes
Released on 2026-05-05.
Bug fixes
- Allow pre-release Python requests with non-zero patch versions (#19286)
Install uv 0.11.10
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.10/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.10/uv-installer.ps1 | iex"Download uv 0.11.10
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.9
Release Notes
Released on 2026-05-04.
Note due to a timeout publishing to crates.io, the GitHub portion of this release was published manually by a maintainer using the artifacts built in CI. Consequently, GitHub attestations will not be available. Additionally, this release will not be fully published to crates.io. There should be no other effects.
Python 3.14.5 release candidate
This release includes a special release candidate for the next Python 3.14 patch release. Python 3.14 included a new garbage collection implementation, which reduced pause times but caused significant unexpected memory pressure in production environments. In 3.14.5 and 3.15, the previous garbage collection implementation will be restored.
We would greatly appreciate if you tested the 3.14.5rc1 version included in this release. The stable version is expected to be released soon and any feedback on potential issues would be helpful to the Python development team.
For more context, see the announcement, issue, and pull request.
Issues with the new release can be reported in the uv or CPython issue trackers.
Python
- Upgrade PyPy to v7.3.22
- Add CPython 3.14.5rc1
- On macOS, CPython statically links
libpythonto match Linux
Enhancements
- Omit compatible release desugaring for pre-release hints (#19267)
- Fix file locks on Android (#18323)
Preview
uv auditadd reporting for adverse project statuses (#19128)
Bug fixes
- Discover versioned Python executables when
requires-pythonpins a version (#18700) - Fix URL prefix matching to require path boundaries (#19154)
- Fix transitive Git path dependencies in lockfiles (#19269)
- Handle incorrect unlock error in
LockedFile::dropon Wine (#19229) - Prevent uninstalling site-packages for empty
top_level.txtin.egg-info(#19114) - Use symlinks instead of junctions on Wine (#19213)
- Fix floating-point environment handling on ARMv7 (#19157)
- Redact credentials from remote requirements URL in offline errors (#19216)
- Windows tramplolines no longer set
PYTHONHOMEand only set__PYVENV_LAUNCHER__for virtual environments (#19199)
Documentation
- Mark
--native-tlsandUV_NATIVE_TLSas deprecated (#18705) - Re-add
pytorch-triton-rocmto PyTorch ROCm docs (#19241) - Tweak changelog entries for 0.11.8 (#19188)
- Add 'Exporting lockfiles' to the Concepts->Projects index (#19209)
- Clarify that
uv initcreates git files / folders in the projects guide (#19183)
Install uv 0.11.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.9/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.9/uv-installer.ps1 | iex"Download uv 0.11.9
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.8
Release Notes
Released on 2026-04-27.
Enhancements
- Add
--python-downloads-json-urltopython pin(#19092) - Fetch uv from Astral mirror during self-update (#18682)
- Support
pip uninstall -y(#19082) - Allow
exclude-newerto be missing from the lockfile whenexclude-newer-spanis present (#19024) - Only show the version number in
uv self version --short(#19019) - Silence warnings on empty
SSL_CERT_DIRdirectory (#19018) - Use a sentinel timestamp for relative
exclude-newerandexclude-newer-packagevalues in lockfiles (#19022, #19101)
Configuration
- Add
UV_PYTHON_NO_REGISTRY(#19035) - Add an environment variable for
UV_NO_PROJECT(#19052) - Expose
UV_PYTHON_SEARCH_PATHfor Python discoveryPATHoverrides (#19034)
Bug fixes
- Add
rust-toolchain.tomlto uv-build sdist (#19131) - Ensure uv invocations of git do not inherit repository location environment variables (#19088)
- Redact pre-signed upload URLs in verbose output (#19146)
- Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
- Support
uv lockon apyproject.tomlthat only contains dependency-groups (#19087) - Disable transparent Python upgrades in projects when a patch version is requested via
.python-version(#19102) - Fix Python variant tagging in the Windows registry (#19012)
- Ban external symlinks in
.tar.zstwheels (#19144)
Distributions
- Remove deprecated license classifiers from uv-build and add Python 3.14 classifier (#19130)
Documentation
- Bump astral-sh/setup-uv version in docs (#19030)
- Update PyTorch documentation for PyTorch 2.11 (#19095)
Install uv 0.11.8
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.8/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.8/uv-installer.ps1 | iex"Download uv 0.11.8
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.7
Release Notes
Released on 2026-04-15.
Python
- Upgrade CPython build to 20260414 including an OpenSSL security upgrade (#19004)
Enhancements
- Elevate configuration errors to
required-versionmismatches (#18977) - Further improve TLS certificate validation messages (#18933)
- Improve
--exclude-newerhints (#18952)
Preview features
Bug fixes
- De-quote
workspace metadatain linehaul data (#18966) - Avoid installing tool workspace member dependencies as editable (#18891)
- Emit JSON report for
uv sync --checkfailures (#18976) - Filter and warn on invalid TLS certificates (#18951)
- Fix equality comparisons for version specifiers with
~=operators (#18960) - Fix stale Python upgrade preview feature check in project environment construction (#18961)
- Improve Windows path normalization (#18945)
Install uv 0.11.7
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.7/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.7/uv-installer.ps1 | iex"Download uv 0.11.7
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.6
Release Notes
Released on 2026-04-09.
This release resolves a low severity security advisory in which wheels with malformed RECORD entries could delete arbitrary files on uninstall. See GHSA-pjjw-68hj-v9mw for details.
Bug fixes
- Do not remove files outside the venv on uninstall (#18942)
- Validate and heal wheel
RECORDduring installation (#18943) - Avoid
uv cache cleanerrors due to Win32 path normalization (#18856)
Install uv 0.11.6
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.6/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.6/uv-installer.ps1 | iex"Download uv 0.11.6
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.5
Release Notes
Released on 2026-04-08.
Python
- Add CPython 3.13.13, 3.14.4, and 3.15.0a8 (#18908)
Enhancements
- Fix
build_system.requireserror message (#18911) - Remove trailing path separators in path normalization (#18915)
- Improve error messages for unsupported or invalid TLS certificates (#18924)
Preview features
- Add
exclude-newerto[[tool.uv.index]](#18839) uv audit: add context/warnings for ignored vulnerabilities (#18905)
Bug fixes
- Normalize persisted fork markers before lock equality checks (#18612)
- Clear junction properly when uninstalling Python versions on Windows (#18815)
- Report error cleanly instead of panicking on TLS certificate error (#18904)
Documentation
- Remove the legacy
PIP_COMPATIBILITY.mdredirect file (#18928) - Fix
uv init example-bare --bareexamples (#18822, #18925)
Install uv 0.11.5
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.5/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.5/uv-installer.ps1 | iex"Download uv 0.11.5
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.11.4
Release Notes
Released on 2026-04-07.
Enhancements
- Add support for
--upgrade-group(#18266) - Merge repeated archive URL hashes by version ID (#18841)
- Require all direct URL hash algorithms to match (#18842)
Bug fixes
- Avoid panics in environment finding via cycle detection (#18828)
- Enforce direct URL hashes for
pyproject.tomldependencies (#18786) - Error on
--lockedand--frozenwhen script lockfile is missing (#18832) - Fix
uv exportextra resolution for workspace member and conflicting extras (#18888) - Include conflicts defined in virtual workspace root (#18886)
- Recompute relative
exclude-newervalues duringuv tree --outdated(#18899) - Respect
--exclude-newerinuv tool list --outdated(#18861) - Sort by comparator to break specifier ties (#18850)
- Store relative timestamps in tool receipts (#18901)
- Track newly-activated extras when determining conflicts (#18852)
- Patch
Cargo.lockinuv-buildsource distributions (#18831)
Documentation
- Clarify that
--exclude-newercompares artifact upload times (#18830)
Install uv 0.11.4
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.4/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.4/uv-installer.ps1 | iex"Download uv 0.11.4
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uvYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>