astral-sh/uv 0.11.22

on GitHub

Release Notes

Released on 2026-06-18.

Enhancements

• Publish wheels before sdists in uv publish (#19831)
• Add TY and RUFF env vars for providing paths for binaries used by uv format and uv check (#19821)

Preview features

• Allow configuring preview features in uv.toml and pyproject.toml (#18437)
• Update the lockfile during uv check --no-sync (#19909)
• Add --script to uv check and uv metadata (#19860)
• Report workspace-exclusive dependency groups in workspace metadata (#19862)
• Support SARIF as a uv audit output (#19872)

Performance

• Use a more deadlock-resistant concurrent hashmap in the resolver (#19532)

Bug fixes

• Update string marker ordering semantics to match upstream clarified rules (#19808)
• Reject extras that have the same normalized name (#19871)
• Reject dependency group include-group entries that have additional fields (#19866)
• Reject invalid UTF-8 URL credentials (#19814)
• Validate that PEP 517 backend-paths exist when building sdists (#19834)
• Validate that pylock.toml files do not have an unsupported a lock-version (#19869)
• Validate that the environment satisfies the packages.requires-python of a pylock.toml (#19868)
• Allow uv to be recursively invoked by PEP 517 build hooks (#19879)
• Allow empty credentials.toml files (#19815)
• Fix transparent Python upgrades in project environments (#19890)
• Handle non-file editable URLs in uv pip list (#19867)
• Fix incorrect output from uv tree --invert (#19910)
• Fix environment locking of uv venv in a project (#19837)
• Fix handling of workspace-exclusive dependency groups in uv tree (#19905)

Documentation

• Archive the 0.10.x changelog (#19813)

Other changes

• Mark more tests as requiring network for vendors that need to run tests offline (#19819)

Install uv 0.11.22

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.22/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.22/uv-installer.ps1 | iex"

Download uv 0.11.22

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>