[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps astral-sh/uv from 0.13.1 to 0.13.6.

Release notes

Sourced from astral-sh/uv's releases.

0.13.6

Release Notes

Released on 2026-10-26.

Enhancements

• Accept an empty UV_RUN_RECURSION_DEPTH as zero and report invalid values consistently (#22814)
• Explain how to add project metadata when uv init finds a pyproject.toml without a [project] table (#22916)

Python

• Add CPython 3.11.18, 3.12.16, 3.13.18, 3.14.10, and 3.15.2 (#22938)

Preview features

• Detect NVIDIA GPU capabilities when selecting compatible wheel variants with wheel-variants (#22690)
• Nest each module's owners in an object in uv workspace metadata output (#22638)
• Report the unsupported properties required by an incompatible wheel variant (#22719)

Performance

• Reduce peak memory use when resolving large workspaces (#22860, #22863, #22864, #22866, #22870)
• Reduce peak memory use when locking or upgrading large projects (#22833, #22834)
• Speed up redirected output from uv export and uv pip compile (#22840)
• Reuse cached or active environments when running PEP 723 scripts without dependencies (#21458)
• Reduce parsing overhead for build dependency and build backend settings (#22848, #22871, #22879, #22884)
• Reduce parsing overhead for project sources and workspace references (#22880, #22883)
• Reduce parsing overhead for cache, exclusion, cutoff, and preview settings (#22876, #22877, #22878, #22887)
• Reduce PyPI metadata parsing overhead (#22874, #22875)
• Speed up parsing tool receipt requirements (#22885)

Bug fixes

• Prevent uv run --active --script and uv sync --active --script from deleting non-virtual-environment directories (#21464)
• Use AMD64 for platform_machine when resolving for x86-64 Windows (#22935)
• Preserve free-threaded and other non-default variants in uv python upgrade (#22836)
• Allow uv init --no-package and uv init --script when UV_INIT_BUILD_BACKEND is set (#22907)
• Prevent panics when rendering containment markers with local versions (#22815)

Documentation

• Update the Docker guide and reproduction examples to use uv 0.13.5 (#22867)

Install uv 0.13.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.6/uv-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.13.6

Released on 2026-10-26.

Enhancements

• Accept an empty UV_RUN_RECURSION_DEPTH as zero and report invalid values consistently (#22814)
• Explain how to add project metadata when uv init finds a pyproject.toml without a [project] table (#22916)

Python

• Add CPython 3.11.18, 3.12.16, 3.13.18, 3.14.10, and 3.15.2 (#22938)

Preview features

• Detect NVIDIA GPU capabilities when selecting compatible wheel variants with wheel-variants (#22690)
• Nest each module's owners in an object in uv workspace metadata output (#22638)
• Report the unsupported properties required by an incompatible wheel variant (#22719)

Performance

• Reduce peak memory use when resolving large workspaces (#22860, #22863, #22864, #22866, #22870)
• Reduce peak memory use when locking or upgrading large projects (#22833, #22834)
• Speed up redirected output from uv export and uv pip compile (#22840)
• Reuse cached or active environments when running PEP 723 scripts without dependencies (#21458)
• Reduce parsing overhead for build dependency and build backend settings (#22848, #22871, #22879, #22884)
• Reduce parsing overhead for project sources and workspace references (#22880, #22883)
• Reduce parsing overhead for cache, exclusion, cutoff, and preview settings (#22876, #22877, #22878, #22887)
• Reduce PyPI metadata parsing overhead (#22874, #22875)
• Speed up parsing tool receipt requirements (#22885)

Bug fixes

• Prevent uv run --active --script and uv sync --active --script from deleting non-virtual-environment directories (#21464)
• Use AMD64 for platform_machine when resolving for x86-64 Windows (#22935)
• Preserve free-threaded and other non-default variants in uv python upgrade (#22836)
• Allow uv init --no-package and uv init --script when UV_INIT_BUILD_BACKEND is set (#22907)
• Prevent panics when rendering containment markers with local versions (#22815)

Documentation

• Update the Docker guide and reproduction examples to use uv 0.13.5 (#22867)

0.13.5

Released on 2026-10-21.

Following uv 0.13.4, which removed the affected eMudhra/emSign root from uv's own certificate store, this release updates the latest managed CPython builds for 3.11 and newer to python-build-standalone 20261021, including the CPython 3.15.1, 3.14.9, and 3.13.17 security patch releases. These builds include pip 26.2.2 both preinstalled in the managed interpreter and bundled with ensurepip, which installs pip by default when you run python -m venv. Both copies use certifi 2026.10.19, which removes the same affected root. After upgrading uv, run uv python upgrade to install the updated builds. Virtual environments pinned to an older Python patch version do not switch to the updated interpreter automatically. Upgrade pip separately in existing virtual environments.

Please note upstream CPython 3.9 and 3.10 still bundle pip releases whose certificate bundles trust the affected eMudhra/emSign root. We recommend migrating off of those versions and will no longer be releasing Docker images with uv installed for EOL Python versions.

... (truncated)

Commits

• 329bf94 Bump version to 0.13.6 (#22947)
• 5b5a53e Use checked-in Python download metadata for release preparation (#22945)
• b8b339f Update Rust crate h2 to v0.4.19 (#21873)
• 1eb5989 Update Rust crate hyper to v1.11.1 (#20903)
• 68677f5 Update Rust crate reqwest to v0.13.5 (#22475)
• 69e574e Cargo vet integration (#21610)
• acee8d9 Sync latest Python releases, Python 3.11.18, 3.12.16, 3.13.18, 3.14.10, 3.15....
• 4b46af0 Fix io-bound Windows CI nextest grouping (#22939)
• d397ecb Add hints when uv init finds pyproject.toml without a project table (#22916)
• 7b5d227 Let --no-package and --script take precedence over `UV_INIT_BUILD_BACKEND...
• Additional commits viewable in compare view