astral-sh/uv 0.9.23

on GitHub

Release Notes

Released on 2026-01-09.

Enhancements

• Only write portable paths in RECORD files (#17339)
• Support relative paths in UV_PYTHON_BIN_DIR and UV_TOOL_BIN_DIR (#17367)

Preview features

• Enable uploads to S3 via pre-signed URLs (#17349)

Configuration

• Allow setting proxy variables via global / user configuration (#16918)
• Manually parse and reconcile Boolean environment variables (#17321)

Bug fixes

• Avoid broken build artifacts on build failure (#17276)
• Fix missing dependencies on synthetic root in SBOM export (#17363)
• Recognize armv8l as an alias for armv7l in platform tag parsing (#17384)
• Fix redaction of a URL in a middleware trace log (#17346)

Documentation

• Add index.md suggestion to llms.txt (#17362)
• Clarify that uv run uses inexact syncing by default (#17366)

Install uv 0.9.23

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.9.23/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.23/uv-installer.ps1 | iex"

Download uv 0.9.23

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>