uv 0.12.12 Adds Code Signing for macOS/Windows Binaries and Fixes Exclude-Newer Bug
sdksecurityazuregaengineermedia
security patch
uv 0.12.12 enhances security by implementing code signing for its macOS and Windows executables and wheels. This change verifies the release publisher and binary integrity, aiding in allowlisting and reducing security warnings for affected users. macOS executables are notarized by Apple, while Windows executables leverage timestamped Authenticode signatures from Azure Artifact Signing. Additionally, this update includes a bug fix addressing an issue where `exclude-newer` cutoffs were not correctly applied to lockfiles and generated requirement hashes.
Fixes (1) ›
- Exclude distributions uploaded after the exclude-newer cutoff from lockfiles and generated requirement hashes
Read the original announcement →
https://github.com/astral-sh/uv/releases/tag/0.12.12
Related releases
- OpenAI Python Agents SDK v0.22.2 Released OpenAI Agents SDK (Python) Releases ·
- Pydantic-AI v2.42.0 Enhances GitHub Copilot Integration and Fixes Bugs Pydantic AI Releases ·
- uv 0.12.11 introduces PEP 751 pylock.toml support, significant install speedups uv Releases ·
- Django Software Foundation Seeks Volunteers for Fundraising Working Group Django Weblog ·
- OpenAI Agents Python SDK v0.22.1 enhances tools, guardrails, and voice features OpenAI Agents SDK (Python) Releases ·
- Pydantic-AI v2.41.0 Adds Image Generation API, Deprecates `fallback_model` Pydantic AI Releases ·