Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-uv for openSUSE:Factory checked in at 2026-09-02 17:04:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-uv (Old) and /work/SRC/openSUSE:Factory/.python-uv.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-uv" Wed Sep 2 17:04:03 2026 rev:118 rq:1375341 version:0.12.9 Changes: -------- --- /work/SRC/openSUSE:Factory/python-uv/python-uv.changes 2026-09-01 15:51:30.141341205 +0200 +++ /work/SRC/openSUSE:Factory/.python-uv.new.1265/python-uv.changes 2026-09-02 17:04:30.098979826 +0200 @@ -1,0 +2,22 @@ +Wed Sep 2 06:39:43 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.12.9: + * Update astral_async_http_range_reader to 0.11.1, fixing a + potential memory-safety issue when reading metadata ranges from + untrusted wheels + * Drop sensitive headers when a redirect crosses an authentication + realm, including same-host redirects that change the URL scheme + * Redact secrets in signed URLs from retry diagnostics, including + nested request errors + * Add --no-locked and --no-frozen to disable lock modes enabled by + UV_LOCKED and UV_FROZEN for a single invocation, and give + --locked, --frozen, --check and --check-exists precedence over + conflicting environment values + * Name the exact command-line lock-mode flag in warnings and errors + * Add CPython 3.15.0rc2 + * Speed up cold wheel installs by extracting each streaming ZIP in + one blocking task and reusing buffers across files + * Stop concurrent uv processes redundantly extracting the same + local or source-built wheel + +------------------------------------------------------------------- Old: ---- python-uv-0.12.8.tar.gz New: ---- python-uv-0.12.9.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-uv.spec ++++++ --- /var/tmp/diff_new_pack.MniR98/_old 2026-09-02 17:04:33.011080893 +0200 +++ /var/tmp/diff_new_pack.MniR98/_new 2026-09-02 17:04:33.013080963 +0200 @@ -36,7 +36,7 @@ %global build_rustflags -C linker=clang -C link-arg=-fuse-ld=%{_bindir}/mold -C link-arg=-Wl,-z,relro,-z,now -C debuginfo=2 -C incremental=false -C strip=none %endif Name: %{origname}%{psuffix} -Version: 0.12.8 +Version: 0.12.9 Release: 0 Summary: A Python package installer and resolver, written in Rust # Legal-Review-Notice: uv itself is "Apache-2.0 OR MIT", but the binary ++++++ python-uv-0.12.8.tar.gz -> python-uv-0.12.9.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-uv/python-uv-0.12.8.tar.gz /work/SRC/openSUSE:Factory/.python-uv.new.1265/python-uv-0.12.9.tar.gz differ: char 27, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/python-uv/vendor.tar.zst /work/SRC/openSUSE:Factory/.python-uv.new.1265/vendor.tar.zst differ: char 7, line 1
