An extremely fast Python package and project manager, written in Rust.
Highlights:
\u2022 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twine,
virtualenv, and more.
\u2022 10-100x faster than pip.
\u2022 Provides comprehensive project management, with a universal lockfile.
\u2022 Runs scripts, with support for inline dependency metadata.
\u2022 Installs and manages Python versions.
\u2022 Runs and installs tools published as Python packages.
\u2022 Includes a pip-compatible interface for a performance boost with a familiar
CLI.
\u2022 Supports Cargo-style workspaces for scalable projects.
\u2022 Disk-space efficient, with a global cache for dependency deduplication.
Update Information:
Update uv and python-uv-build to 0.11.2. Version 0.11 includes changes to the networking stack used by uv. While its developers think that breakage will be rare, it is possible that these changes will result in the rejection of certificates previously trusted by uv so, they have marked the change as breaking out of an abundance of caution. The changes are largely driven by the upgrade of reqwest, which powers uv's HTTP clients, to v0.13, which included some breaking changes to TLS certificate verification. This update also includes updates for several of uv\u2019s Rust library dependencies. Update rust-openssl-probe to 0.2.1, including breaking changes introduced in 0.2.0, and introduce a new rust-openssl-probe0.1 compat package. Update rust-rustls-native-certs to 0.8.3, now using openssl-probe 0.2. Update rust-native-tls to 0.2.18. Version 0.2.16 added TLS 1.3 as an option, added stack_from_pem, and upgraded openssl-probe to 0.2. Version 0.2.17 added support for ALPN on the server ...
* Fri Mar 27 2026 Benjamin A. Beasley - 0.11.2-1
- Update to 0.11.2 (close RHBZ#2450582)
[ 1 ] Bug #2425802 - rust-openssl-probe-0.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2425802
[ 2 ] Bug #2425819 - rust-rustls-native-certs-0.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2425819
[ 3 ] Bug #2432768 - rust-reqsign-aliyun-oss-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432768
[ 4 ] Bug #2432769 - rust-reqsign-core-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432769
[ 5 ] Bug #2432770 - rust-reqsign-0.20.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432770
[ 6 ] Bug #2432771 - rust-reqsign-azure-storage-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432771
[ 7 ] Bug #2432772 - rust-reqsign-http-send-reqwest-4.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432772
[ 8 ] Bug #2432773 - rust-reqsign-google-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2432773
[...
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b8b59dcf44' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
Get the latest Linux and open source security news straight to your inbox.