Merged
Conversation
zanieb
added
the
tracking
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
added a commit
that referenced
this pull request
Aug 28, 2025
In preparation for more content for #15570
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
charliermarsh
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
charliermarsh
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
charliermarsh
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
charliermarsh
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
charliermarsh
force-pushed
the
feature/auth
branch
from
1d214fe to
2a7156c
Compare
charliermarsh
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
Adds an alternative third-party registry test mode that uses `uv auth login` instead of the environment variables to provide configuration.
This is a little closer to what we do elsewhere when we want to encapsulate differences in the serialization format.
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
Adds locking of the credentials store for concurrency safety. It's important to hold the lock from read -> write so credentials are not dropped during concurrent writes. I opted not to attach the lock to the store itself. Instead, I return the lock on read and require it on write to encourage safe use. Maybe attaching the source path to the store struct and adding a `lock(&self)` method would make sense? but then you can forget to take the lock at the right time. The main problem with the interface here is to write a _new_ store you have to take the lock yourself, and you could make a mistake by taking a lock for the wrong path or something. The fix for that would be to introduce a new `CredentialStoreHandle` type or something, but that seems overzealous rn. We also don't eagerly drop the lock on token read, although we could.
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
…store (#15620) We're not respecting the username when searching for a match, which is no good!
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
We're not sure what the best way to expose the native store to users is yet and it's a bit weird that you can use this in the `uv auth` commands but can't use any of the other keyring provider options. The simplest path forward is to just not expose it to users as a keyring provider, and instead frame it as a preview alternative to the plaintext uv credentials store. We can revisit the best way to expose configuration before stabilization. Note this pull request retains the _internal_ keyring provider implementation — we can refactor it out later but I wanted to avoid a bunch of churn here.
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
#15628) We weren't keying our hash map with the username, which meant that only one user could be used per service.
zanieb
temporarily deployed
to
uv-test-registries
GitHub Actions
Inactive
zanieb
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
zanieb
had a problem deploying
to
uv-test-registries
GitHub Actions
Failure
zanieb
temporarily deployed
to
uv-test-publish
GitHub Actions
Inactive
tmeijn
pushed a commit
to tmeijn/dotfiles
that referenced
this pull request
Sep 5, 2025
This MR contains the following updates: | Package | Update | Change | |---|---|---| | [astral-sh/uv](https://github.com/astral-sh/uv) | patch | `0.8.14` -> `0.8.15` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>astral-sh/uv (astral-sh/uv)</summary> ### [`v0.8.15`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0815) [Compare Source](astral-sh/uv@0.8.14...0.8.15) ##### Python - Upgrade SQLite 3.50.4 in CPython builds for [CVE-2025-6965](GHSA-2m69-gcr7-jv3q) (see also [python/cpython#137134](python/cpython#137134)) ##### Enhancements - Add `uv auth` commands for credential management ([#​15570](astral-sh/uv#15570)) - Add pyx support to `uv auth` commands ([#​15636](astral-sh/uv#15636)) - Add `uv tree --show-sizes` to show package sizes ([#​15531](astral-sh/uv#15531)) - Add `--python-platform riscv64-unknown-linux` ([#​15630](astral-sh/uv#15630)) - Add `--python-platform` to `uv run` and `uv tool` ([#​15515](astral-sh/uv#15515)) - Add `uv publish --dry-run` ([#​15638](astral-sh/uv#15638)) - Add zstandard support for wheels ([#​15645](astral-sh/uv#15645)) - Allow registries to pre-provide core metadata ([#​15644](astral-sh/uv#15644)) - Retry streaming Python and binary download errors ([#​15567](astral-sh/uv#15567)) ##### Bug fixes - Fix settings rendering for `extra-build-dependencies` ([#​15622](astral-sh/uv#15622)) - Skip non-existent directories in bytecode compilation ([#​15608](astral-sh/uv#15608)) ##### Error messages - Add error trace to invalid package format ([#​15626](astral-sh/uv#15626)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45My4zIiwidXBkYXRlZEluVmVyIjoiNDEuOTMuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Includes
uv authcommands (login,logout, andtoken) #15539native-keyringusage #15555uv auth#15573uv authpreview refactor #15589uv auth loginin publish integration tests #15592UV_CREDENTIALS_DIR#15598uv auth loginin registry integration tests #15593uv auth dir#15600uv-keyringtests serially #15629