Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-uv for openSUSE:Factory checked in at 2026-09-09 16:21:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-uv (Old) and /work/SRC/openSUSE:Factory/.python-uv.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-uv" Wed Sep 9 16:21:27 2026 rev:120 rq:1376567 version:0.12.11 Changes: -------- --- /work/SRC/openSUSE:Factory/python-uv/python-uv.changes 2026-09-08 16:56:33.021062878 +0200 +++ /work/SRC/openSUSE:Factory/.python-uv.new.1265/python-uv.changes 2026-09-09 16:23:19.106450961 +0200 @@ -1,0 +2,23 @@ +Wed Sep 9 06:26:54 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.12.11: + * Verify source archives against hashes recorded in uv.lock + before reading metadata or running build backends + * Verify supplied hashes for registry requirements pinned with + === under --verify-hashes and --require-hashes + * Apply hashes from public-version pins to matching local + versions when no exact local-version hash is provided + * Speed up installs that overwrite or merge files, and local + wheel installs via positioned ZIP reads and reused buffers + * Skip resolution for uv pip install --no-deps when the + requested packages are already installed + * Trim whitespace in .python-version files; suppress VIRTUAL_ENV + mismatch warnings for --no-sync and --frozen edits + * Warn and continue when uv python list cannot query an + interpreter + * Preview: generate missing pylock.toml artifact hashes (PEP + 751) and warn on empty hash tables + * Refresh the vendored crates; the linked graph grows to 720 + (multiversion_no_op is new) but the licence set is unchanged + +------------------------------------------------------------------- Old: ---- python-uv-0.12.10.tar.gz New: ---- python-uv-0.12.11.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-uv.spec ++++++ --- /var/tmp/diff_new_pack.DGeqPI/_old 2026-09-09 16:23:22.859607817 +0200 +++ /var/tmp/diff_new_pack.DGeqPI/_new 2026-09-09 16:23:22.861607901 +0200 @@ -36,13 +36,13 @@ %global build_rustflags -C linker=clang -C link-arg=-fuse-ld=%{_bindir}/mold -C link-arg=-Wl,-z,relro,-z,now -C debuginfo=2 -C incremental=false -C strip=none %endif Name: %{origname}%{psuffix} -Version: 0.12.10 +Version: 0.12.11 Release: 0 Summary: A Python package installer and resolver, written in Rust # Legal-Review-Notice: uv itself is "Apache-2.0 OR MIT", but the binary # statically links the vendored Rust dependencies. Re-derived on this # re-vendor with "cargo tree --offline -p uv -e normal" over the vendored -# tree (516 crates); the copyleft licences in the linked graph are: +# tree (720 unique name-version nodes); the copyleft licences in the linked graph are: # - MPL-2.0 from astral-pubgrub, astral-version-ranges and option-ext # (the last via shellexpand -> dirs -> dirs-sys), # - priority-queue, which is "LGPL-3.0-or-later OR MPL-2.0" - we elect @@ -51,7 +51,7 @@ # offers an LGPL-2.1-or-later option but is UEFI-target-only and absent # from the Linux graph; colored is not in this binary's graph at all. # Everything else is permissive, BSD-3-Clause included: subtle, -# encoding_rs, aws-lc-sys and, since zstd-safe 7.3.0 / zstd-sys 2.1.0, +# encoding_rs, aws-lc-sys and, since zstd-safe 8.0.0 / zstd-sys 2.1.0, # the zstd bindings. MPL-2.0 section 3.2 is satisfied because the # complete vendor.tar.zst ships in the src.rpm. License: (Apache-2.0 OR MIT) AND MPL-2.0 ++++++ python-uv-0.12.10.tar.gz -> python-uv-0.12.11.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-uv/python-uv-0.12.10.tar.gz /work/SRC/openSUSE:Factory/.python-uv.new.1265/python-uv-0.12.11.tar.gz differ: char 57, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/python-uv/vendor.tar.zst /work/SRC/openSUSE:Factory/.python-uv.new.1265/vendor.tar.zst differ: char 7, line 1
