Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-uv-build for openSUSE:Factory
checked in at 2026-04-13 23:18:04
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-uv-build (Old)
and /work/SRC/openSUSE:Factory/.python-uv-build.new.21863 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-uv-build"
Mon Apr 13 23:18:04 2026 rev:4 rq:1345975 version:0.11.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-uv-build/python-uv-build.changes
2026-03-24 18:48:21.257192179 +0100
+++
/work/SRC/openSUSE:Factory/.python-uv-build.new.21863/python-uv-build.changes
2026-04-13 23:18:13.814499570 +0200
@@ -1,0 +2,71 @@
+Fri Apr 10 23:51:21 UTC 2026 - Dirk Müller <[email protected]>
+
+- update to 0.11.6:
+ * This release resolves a low severity security advisory in
+ which wheels with malformed RECORD entries could delete
+ arbitrary files on uninstall. See GHSA-pjjw-68hj-v9mw for
+ details.
+ * Do not remove files outside the venv on uninstall
+ * Validate and heal wheel `RECORD` during installation
+ * Avoid `uv cache clean` errors due to Win32 path normalization
+- update to 0.11.5:
+ * Fix `build_system.requires` error message
+ * Remove trailing path separators in path normalization
+ * Improve error messages for unsupported or invalid TLS
+ certificates
+ * Normalize persisted fork markers before lock equality checks
+ * Clear junction properly when uninstalling Python versions on
+ Windows
+ * Report error cleanly instead of panicking on TLS certificate
+ error
+- update to 0.11.4:
+ * Add support for `--upgrade-group`
+ * Merge repeated archive URL hashes by version ID
+ * Require all direct URL hash algorithms to match
+ * Avoid panics in environment finding via cycle detection
+ * Enforce direct URL hashes for `pyproject.toml` dependencies
+ * Error on `--locked` and `--frozen` when script lockfile is
+ missing
+ * Fix `uv export` extra resolution for workspace member and
+ conflicting extras
+ * Include conflicts defined in virtual workspace root
+ * Recompute relative `exclude-newer` values during `uv tree
+ --outdated`
+ * Respect `--exclude-newer` in `uv tool list --outdated`
+ * Sort by comparator to break specifier ties
+ * Store relative timestamps in tool receipts
+ * Track newly-activated extras when determining conflicts
+ * Patch `Cargo.lock` in `uv-build` source distributions
+- update to 0.11.3:
+ * Add progress bar for hashing phase in uv publish
+ * Add support for ROCm 7.2
+ * Emit abi3t tags for every abi3 version
+ * Expand `uv workspace metadata` with dependency information
+ from the lock
+ * Implement support for PEP 803
+ * Pretty-print platform in built wheel errors
+ * Publish installers to `/installers/uv/latest` on the mirror
+ * Show free-threaded Python in built-wheel errors
+- update to 0.11.2:
+ * Add a dedicated Windows PE editing error
+ * Make `uv self update` fetch the manifest from the mirror
+ first
+ * Use uv reqwest client for self update
+ * Show `uv self update` success and failure messages with
+ `--quiet`
+ * Evaluate extras and groups when determining auditable
+ packages
+- update to 0.11.1:
+ * Add missing hash verification for `riscv64gc-unknown-linux-
+ musl`
+ * Fallback to direct download when direct URL streaming is
+ unsupported
+ * Revert treating 'Dynamic' values as case-insensitive
+ * Remove torchdata from list of packages to source from the
+ PyTorch index
+ * Special-case `==` Python version request ranges
+ * Cover `--python ` in "Using arbitrary Python environments"
+ * Fix version annotations for `PS_MODULE_PATH` and
+ `UV_WORKING_DIR`
+
+-------------------------------------------------------------------
Old:
----
uv_build-0.11.0.tar.gz
New:
----
uv_build-0.11.6.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-uv-build.spec ++++++
--- /var/tmp/diff_new_pack.Fb8Hcc/_old 2026-04-13 23:18:16.066592435 +0200
+++ /var/tmp/diff_new_pack.Fb8Hcc/_new 2026-04-13 23:18:16.070592600 +0200
@@ -23,7 +23,7 @@
%endif
%{?sle15_python_module_pythons}
Name: python-uv-build
-Version: 0.11.0
+Version: 0.11.6
Release: 0
Summary: The uv build backend
License: MIT
++++++ _service ++++++
--- /var/tmp/diff_new_pack.Fb8Hcc/_old 2026-04-13 23:18:16.122594744 +0200
+++ /var/tmp/diff_new_pack.Fb8Hcc/_new 2026-04-13 23:18:16.126594909 +0200
@@ -1,7 +1,7 @@
<services>
<service name="download_files" mode="manual"/>
<service name="cargo_vendor" mode="manual">
- <param name="srctar">uv_build-0.11.0.tar.gz</param>
+ <param name="srctar">uv_build-*.tar.gz</param>
<param name="compression">xz</param>
<param name="update">true</param>
</service>
++++++ uv_build-0.11.0.tar.gz -> uv_build-0.11.6.tar.gz ++++++
++++ 9361 lines of diff (skipped)
++++++ vendor.tar.xz ++++++
/work/SRC/openSUSE:Factory/python-uv-build/vendor.tar.xz
/work/SRC/openSUSE:Factory/.python-uv-build.new.21863/vendor.tar.xz differ:
char 15, line 1
