Skip to content

Respect wheel data boundaries and excludes - #20397

Merged
zanieb merged 1 commit into
astral-sh:mainfrom
zaniebot:zb/bughunt100/096-wheel-data-containment-excludes
Jul 14, 2026
Merged

Respect wheel data boundaries and excludes#20397
zanieb merged 1 commit into
astral-sh:mainfrom
zaniebot:zb/bughunt100/096-wheel-data-containment-excludes

Conversation

@zanieb

@zanieb zanieb commented Jul 14, 2026

Copy link
Copy Markdown
Member

tool.uv.build-backend.data paths can traverse outside the project and bypass source-exclude or wheel-exclude, packaging sibling secrets or excluded files in direct wheels while sdist behavior differs. Normalize and contain data roots, including symlinked roots, and consistently apply both exclusion sets.

@astral-sh-bot

astral-sh-bot Bot commented Jul 14, 2026

Copy link
Copy Markdown

uv test inventory changes

This PR changes the tests when compared with the latest main baseline.

  • Added tests: 2
  • Removed tests: 0
  • Changed suites: 1
uv::build: +2 / -0

Added:

  • uv::build::build_backend::wheel_data_respects_excludes
  • uv::build::build_backend::wheel_data_symlink_containment

Removed: none

@zanieb
zanieb merged commit dadcccc into astral-sh:main Jul 14, 2026
57 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants