Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-uv for openSUSE:Factory checked in at 2026-11-06 19:55:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-uv (Old) and /work/SRC/openSUSE:Factory/.python-uv.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-uv" Fri Nov 6 19:55:13 2026 rev:139 rq:1395639 version:0.13.7 Changes: -------- --- /work/SRC/openSUSE:Factory/python-uv/python-uv.changes 2026-10-29 16:12:47.799307181 +0100 +++ /work/SRC/openSUSE:Factory/.python-uv.new.3759290/python-uv.changes 2026-11-06 20:00:24.182275482 +0100 @@ -1,0 +2,37 @@ +Thu Nov 5 17:50:55 UTC 2026 - Martin Pluskal <[email protected]> + +- Use the unmodified upstream tarball and cargo_vendor output: + prebuilt files for other platforms (Windows launchers, import + libraries and nasm objects, a wasm32 object) are declared + instead of stripped +- Refresh the vendored crates (mime 0.3.18, svgtypes 0.16.2, + winnow 1.0.5); the linked licence set is unchanged + +------------------------------------------------------------------- +Tue Nov 3 18:34:56 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.13.7 (upstream release 2026-11-03): + * Preview: --output-version for `uv workspace metadata`; + `uv audit` merges aliased OSV records into a single finding + * Fixes: workspace member paths treated as literals; + allow uvx with versioned local CPython builds; valid + module names for digit-led project names; keep comments + around inline dependency groups on `uv add`; `uv remove` + with an empty inline tool.uv.sources table + * Re-vendor: dependency refresh, no new copyleft in the + linked graph (licence tag unchanged) + * Spec cleanup: modern macro forms (%{ix86} in ExcludeArch, + %python_files in %files), no functional change + * Unbundle prebuilt binaries from the sources: repacked + sdist drops the six prebuilt Windows trampoline launchers + (Windows-only; the Linux build never reads them); stripped + the vendor tree of Windows-only objects (windows_*/lib import + libraries, ring pregenerated objects, aws-lc-sys prebuilt-nasm + objects, psm wasm32 object); test-corpus fixtures under tests/ + dirs covered by Source-Binary-Exception lines + * Cap build parallelism by available memory (%limit_build): + one rustc can peak ~7 GB while -j follows cores, not RAM; + fixes worker-dependent OOM kills (seen on ppc64le); ppc64le + workers raised to 9 GB like aarch64/riscv64/s390x + +------------------------------------------------------------------- Old: ---- python-uv-0.13.6.tar.gz New: ---- python-uv-0.13.7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-uv.spec ++++++ --- /var/tmp/diff_new_pack.bnHeEf/_old 2026-11-06 20:00:27.651420702 +0100 +++ /var/tmp/diff_new_pack.bnHeEf/_new 2026-11-06 20:00:27.653420786 +0100 @@ -36,13 +36,13 @@ %global build_rustflags -C linker=clang -C link-arg=-fuse-ld=%{_bindir}/mold -C link-arg=-Wl,-z,relro,-z,now -C debuginfo=1 -C incremental=false -C strip=none %endif Name: %{origname}%{psuffix} -Version: 0.13.6 +Version: 0.13.7 Release: 0 Summary: A Python package installer and resolver, written in Rust # Legal-Review-Notice: uv itself is "Apache-2.0 OR MIT", but the binary -# statically links the vendored Rust dependencies. Re-derived on the 0.13.6 +# statically links the vendored Rust dependencies. Re-derived on the 0.13.7 # re-vendor with "cargo tree --offline -p uv -e normal" over the vendored -# tree (502 unique name-version nodes); the copyleft licences in the linked graph are: +# - 503 unique name-version nodes; the copyleft licences in the linked graph are: # - MPL-2.0 from astral-pubgrub, astral-version-ranges and option-ext # (the last via shellexpand -> dirs -> dirs-sys), # - priority-queue, which is "LGPL-3.0-or-later OR MPL-2.0" - we elect @@ -53,21 +53,31 @@ # not in this binary's graph at all. quinn is absent from the linked # graph entirely (dropped upstream) and roxmltree enters only through # the dev-only uv-dev crate, so neither is linked into uv. -# Everything else is permissive, BSD-3-Clause included: subtle, -# encoding_rs, aws-lc-sys and the zstd bindings. The second zstd chain -# through uv-python's direct dependency is now zstd 0.13.3 (MIT) and -# zstd-safe 7.3.0 (BSD-3-Clause), alongside zstd 0.14.3 / -# zstd-safe 8.2.0 / zstd-sys 2.1.2. MPL-2.0 section 3.2 is satisfied -# because the complete vendor.tar.zst ships in the src.rpm. +# - everything else is permissive, BSD-3-Clause included: subtle, +# encoding_rs and aws-lc-sys. +# - uv-python's zstd chain is zstd 0.13.4 / zstd-safe 7.4.0 (both +# BSD-3-Clause), alongside zstd 0.14.3 / zstd-safe 8.2.0 / zstd-sys 2.1.2. +# - MPL-2.0 section 3.2 is satisfied: the complete vendor.tar.zst ships +# in the src.rpm. License: (Apache-2.0 OR MIT) AND MPL-2.0 URL: https://github.com/astral-sh/uv Source0: https://github.com/astral-sh/uv/archive/refs/tags/%{version}.tar.gz#/%{origname}-%{version}.tar.gz Source1: vendor.tar.zst +# Source-Binary-Exception: python-uv-*.tar.gz:uv-*/crates/uv-trampoline-builder/trampolines/*.exe -- other-platform: Windows launcher executables, embedded only when building for Windows +# Source-Binary-Exception: vendor.tar.zst:vendor/windows_*/lib/* -- other-platform: Windows import libraries; no windows_* crate is compiled for a Linux target +# Source-Binary-Exception: vendor.tar.zst:vendor/ring-*/pregenerated/*.o -- other-platform: Windows nasm objects ring links only for Windows x86 and x86_64 +# Source-Binary-Exception: vendor.tar.zst:vendor/aws-lc-sys-*/builder/prebuilt-nasm/*.obj -- other-platform: Windows x86_64 objects for builds without nasm +# Source-Binary-Exception: vendor.tar.zst:vendor/psm-*/src/arch/wasm32.o -- other-platform: wasm32 relocatable object psm uses only on wasm32 targets +# Source-Binary-Exception: vendor.tar.zst:vendor/astral-tokio-tar-*/tests/archives/* -- test-data: deliberately truncated tar fixtures the tar reader tests only parse +# Source-Binary-Exception: vendor.tar.zst:vendor/astral_async_zip-*/src/tests/* -- test-data: deliberately malformed zip vectors the zip reader unit tests only parse +# Source-Binary-Exception: vendor.tar.zst:vendor/astral_async_zip-*/tests/* -- test-data: sample zip inputs the zip integration tests only read +# Source-Binary-Exception: vendor.tar.zst:vendor/async-compression-*/tests/* -- test-data: zstd-compressed rust sources the codec tests only decode # Upstream raised its MSRV to 1.97 in 0.12.22 (crates/uv/rust-version, # inherited from the workspace Cargo.toml). Factory ships 1.98.1. BuildRequires: cargo >= 1.97 BuildRequires: cargo-packaging BuildRequires: cmake +BuildRequires: memory-constraints BuildRequires: zstd %if %{with test} # A stock build chroot has no /etc/ssl/certs at all, and reqwest's @@ -76,7 +86,7 @@ # constructor error, not a network one, so it took out 38 tests across # uv-auth, uv-client and uv-test that never touch the network. BuildRequires: ca-certificates-mozilla -ExcludeArch: %ix86 %{arm32} ppc s390 +ExcludeArch: %{ix86} %{arm32} ppc s390 %endif # The test flavour only builds and runs the Rust test suite. It needs no # Python at all, so it skips the singlespec machinery entirely - running @@ -160,6 +170,11 @@ %build %if %{without test} +# Big-workspace OOM guard: one rustc can peak ~7 GB while -j follows +# cores, not RAM, so cap the job count by available memory. Stays inside +# this branch on purpose: as the last command of the test flavour's empty +# %build it would fail the section under bash -e when no limiting kicks in. +%limit_build -m 2000 export CARGO_AUDITABLE="auditable" export CARGO_INCREMENTAL=0 export CARGO_FEATURE_VENDORED=1 @@ -268,7 +283,7 @@ %python_libalternatives_reset_alternative uv %python_libalternatives_reset_alternative uvx -%files %{python_files} +%files %python_files %license LICENSE-* %doc README.md %python_alternative %{_bindir}/uv ++++++ _constraints ++++++ --- /var/tmp/diff_new_pack.bnHeEf/_old 2026-11-06 20:00:27.742424512 +0100 +++ /var/tmp/diff_new_pack.bnHeEf/_new 2026-11-06 20:00:27.757425140 +0100 @@ -35,6 +35,16 @@ </memory> </hardware> </overwrite> + <overwrite> + <conditions> + <arch>ppc64le</arch> + </conditions> + <hardware> + <memory> + <size unit="G">9</size> + </memory> + </hardware> + </overwrite> </constraints> ++++++ python-uv-0.13.6.tar.gz -> python-uv-0.13.7.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-uv/python-uv-0.13.6.tar.gz /work/SRC/openSUSE:Factory/.python-uv.new.3759290/python-uv-0.13.7.tar.gz differ: char 13, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/python-uv/vendor.tar.zst /work/SRC/openSUSE:Factory/.python-uv.new.3759290/vendor.tar.zst differ: char 7, line 1
