uv

In preview, uv will omit package metadata from the lockfile, reducing lockfile size by up to 50% on average and decreasing conflicts.

uv's ZIP extraction has been optimized by moving it to a single blocking task with synchronous filesystem operations, inspired by code from Bun, leading to faster installation of packages like Jupyter from PyPI.

uv now ships code-signed binaries for macOS and Windows, available in standalone installers and PyPI wheels, enhancing security and distribution.

Python 3.15 introduces lazy imports to enhance performance in CLI applications and code with unused imports, and the author has developed the flake8-lazy tool to simplify adoption. The article also explores the use of AI in developing this tool.

Ruff, uv, and ty installs grew over 40% from May to July, reaching 785M monthly installs, with uv alone exceeding half a billion installs in July.

uv will get faster in the next release after enabling hardware-accelerated SHA-256 for ARM, improving Trio install wall-time by up to 10%.

Charlie Marsh shares a chart showing how the binary size of uv, a Python package manager, has changed over time.

uv 0.12.0 introduces breaking changes to `uv init`, defaulting to a `src/`-based package layout, configuring the uv_build backend, and setting up a script alias. The update encourages modern Python project structure.

Charlie Marsh built a tool called 'hawk' using Codex to identify and remove dead code across Cargo workspaces, already used to delete thousands of lines from uv and Codex.

uv's lockfile size reduced by 40-50% through compression of environment markers.

An optimization in uv's resolver improves performance for Jupyter by 13% and Boto3 by 2.4x, detailed in a write-up.

Adding transitive pre-release support to uv's resolver, closing many long-standing issues.

In preview, uv tool install now writes a uv.lock lockfile for every tool during installation.

Charlie Marsh discusses the threshold for trusting AI-generated code in tools like uv and Ruff, suggesting that improvements in models, harnesses, and verification are needed before he stops manually reviewing the code.

Charlie Marsh admits that earlier performance claims about Codex improving uv's complex resolution speed did not hold up under reliable network conditions, but notes it still provides >40% faster uncached resolutions.

Charlie Marsh reports that Codex improved request scheduling, making uncached complex resolutions (e.g., Transformers) in uv over 40% faster.

Charlie Marsh announces uv audit, a native vulnerability scanning feature for project dependencies in the uv package manager.

ty-pre-commit is a new tool that simplifies pre-commit hooks for type checkers by automatically installing dependencies using uv.

Ohbin is a Python tool that acts as a uv wrapper for installing GitHub release binaries directly into a project, eliminating the need for hand-rolled wrapper packages. It automates download, SHA256 verification, caching, and execution via a simple declarative configuration in pyproject.toml.

This article critiques the user experience of uv's package management CLI, highlighting missing features like `uv outdated`, unsafe default version constraints without upper bounds, and clunky upgrade commands compared to pnpm and Poetry.