uv 0.13.8 on Python PyPI

Release Notes

Released on 2026-11-12.

Add CPython 3.16.0a2 (#23211)
Update managed CPython 3.11, 3.12, 3.13, 3.14, and 3.15 builds to include pip 26.3, zlib 1.4, and Expat 2.10.0 (#23211)
Update GraalPy 3.13.0 to build 25.5.5 (#23088)

Install wheel variants from local paths, direct URLs, and Git repositories in platform-specific resolutions (#22720, #22722, #22724)
Detect x86-64 microarchitecture levels and AArch64 architecture versions when selecting wheel variants (#22832, #22949)
Detect Google TPUs up when selecting wheel variants (#23066, #23121)
Fix CPU detection for wheel variants on macOS with GraalPy (#23089)
Report quarantined packages in uv audit when index URLs differ only in redacted query values (#23129)

Avoid duplicate environment builds when concurrent uvx or uv run --with invocations need the same environment (#23123)

Restrict Unix plaintext credential files to owner-only permissions (#23209)
Honor per-index exclude-newer-package cutoffs during resolution (#23122)
Respect negative extra markers on constraints (#23144)
Resolve dependencies of recursive extras from a scoped override (#23210)
Fix activate.bat for Windows virtual environments whose paths contain apostrophes (#23152)

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.8/uv-installer.sh | sh

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.13.8/uv-installer.ps1 | iex"

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
uv-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum
uv-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz	ARMv7 Linux	checksum
uv-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
uv-i686-unknown-linux-musl.tar.gz	x86 MUSL Linux	checksum
uv-riscv64gc-unknown-linux-musl.tar.gz	RISCV MUSL Linux	checksum
uv-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum
uv-arm-unknown-linux-musleabihf.tar.gz	ARMv6 MUSL Linux (Hardfloat)	checksum
uv-armv7-unknown-linux-musleabihf.tar.gz	ARMv7 MUSL Linux	checksum

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>