astral-sh/uv

Pull Requests Commits

Add code signing of release binaries via `cargo-code-sign`

zanieb committed 24 minutes ago

921eac14

Extract cargo dependency installation into reusable script

zanieb committed 28 minutes ago

6e33a045

Handle i686 containers where host linker cannot produce x86_64 musl binaries

zanieb committed 2 hours ago

4a3912dd

Always build cargo-auditable as static musl binary in Linux containers

zanieb committed 2 hours ago

e7592be6

zanieb committed 3 hours ago

77b4f85f

Temporarily use cargo-auditable fork with i686 Windows SAFESEH fix

zanieb committed 4 hours ago

5cacad5c

Detect musl containers and build cargo-auditable statically

zanieb committed 4 hours ago

e814516d

Build cargo-auditable as static musl binary for Linux containers

zanieb committed 4 hours ago

0f533d8d

Pass CARGO env var into Docker containers via docker-options

zanieb committed 4 hours ago

970ae2af

Enable cargo-auditable for all Linux release builds

zanieb committed 4 hours ago

6c72b48c

Use `cargo auditable` to include SBOM in uv builds

zanieb committed 4 hours ago

76bb3ac0

Bump version to 0.10.8 (#18277)

zanieb committed 6 hours ago

Verified c021be36

Use latest Python version filtering in more places (#18273)

zanieb committed 9 hours ago

Verified de60ad5b

Pin the rustup version in our Docker build (#18255)

zanieb committed 9 hours ago

Verified 1eb571b1

Add SBOM attestations to Docker images (#18252)

zanieb committed 9 hours ago

Verified b9abe155

Unify poetry check types (#18260)

konstin committed 9 hours ago

Verified 55cbe85d

Vendor mold installation and add more retries (#18271)

zanieb committed 9 hours ago

Verified 74fe4a04

fix: uv tree orphaned roots and premature deduplication (#17212)

zelosleone committed 9 hours ago

Verified 810072dd

Sync latest Python releases (#18268)

github-actions[bot] committed 9 hours ago

Verified 36955f75

Respect exclusions in scripts (#18269)

charliermarsh committed 10 hours ago

Verified 06933d2a

Prevent uv tool upgrade from installing excluded dependencies (#18022)

gizmoguy committed 10 hours ago

Verified 753ad06f

Use an Ubuntu snapshot to pin some Docker build dependency versions (#18251)

zanieb committed 10 hours ago

Verified d426a2d5

Fix Docker build tests when push is disabled (#18265)

zanieb committed 11 hours ago

Verified 18391e29

Scaffolding for `uv audit` (#18119)

woodruffw committed 11 hours ago

Verified 02e804e9

Add Docker images based on Docker Hardened Images (#18247)

zanieb committed 12 hours ago

Verified 33ae43d3

Allow pushing Docker images in pull requests for testing (#18253)

zanieb committed 13 hours ago

Verified e0f99d19

Fetch CPython from an Astral mirror by default (#18207)

zsol committed 15 hours ago

Verified ce4b9a41

Promote authentication policy when saving tool receipts (#18246)

charliermarsh committed 1 day ago

Verified 34b77343

Mention cooldown and tweak inline script metadata in dependency bots documentation (#18230)

mkniewallner committed 1 day ago

Verified fa116eff

docs(gitlab): move cache prune to `after_script` (#18206)

OrbisK committed 1 day ago

Verified 198813cc

Older