astral-sh/uv 0.11.7

on GitHub

Release Notes

Released on 2026-04-15.

Python

• Upgrade CPython build to 20260414 including an OpenSSL security upgrade (#19004)

Enhancements

• Elevate configuration errors to required-version mismatches (#18977)
• Further improve TLS certificate validation messages (#18933)
• Improve --exclude-newer hints (#18952)

Preview features

• Fix --script handling in uv audit (#18970)
• Fix traversal of extras in uv audit (#18970)

Bug fixes

• De-quote workspace metadata in linehaul data (#18966)
• Avoid installing tool workspace member dependencies as editable (#18891)
• Emit JSON report for uv sync --check failures (#18976)
• Filter and warn on invalid TLS certificates (#18951)
• Fix equality comparisons for version specifiers with ~= operators (#18960)
• Fix stale Python upgrade preview feature check in project environment construction (#18961)
• Improve Windows path normalization (#18945)

Install uv 0.11.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.7/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.7/uv-installer.ps1 | iex"

Download uv 0.11.7

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>