Bump version to 0.5.27 (#11201)

CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 0.5.27
+
+### Enhancements
+
+- Avoid setting permissions during tar extraction ([#11191](https://github.com/astral-sh/uv/pull/11191))
+- Remove warnings for missing lower bounds ([#11195](https://github.com/astral-sh/uv/pull/11195))
+- Update PubGrub to set-based outdated priority tracking ([#11169](https://github.com/astral-sh/uv/pull/11169))
+- Improve error messages for `uv pip install` with `--extra` or `--all-extras` and invalid sources ([#11193](https://github.com/astral-sh/uv/pull/11193))
+- Sign Docker images using GitHub attestations ([#8685](https://github.com/astral-sh/uv/pull/8685))
+
+### Preview features
+
+- Don't expand self-referential extras in the build backend ([#11142](https://github.com/astral-sh/uv/pull/11142))
+
+### Performance
+
+- Filter discovered Python executables by source before querying ([#11143](https://github.com/astral-sh/uv/pull/11143))
+- Optimize exclusion computation for markers ([#11158](https://github.com/astral-sh/uv/pull/11158))
+- Use Astral-maintained `tokio-tar` fork ([#11174](https://github.com/astral-sh/uv/pull/11174))
+- Remove unneeded `.clone()` ([#11127](https://github.com/astral-sh/uv/pull/11127))
+
+### Bug fixes
+
+- Fix relative paths in bytecode compilation ([#11177](https://github.com/astral-sh/uv/pull/11177))
+- Percent-decode URLs in canonical comparisons ([#11088](https://github.com/astral-sh/uv/pull/11088))
+- Respect concurrency limits in parallel index fetch ([#11182](https://github.com/astral-sh/uv/pull/11182))
+- Use wire JSON schema for conflict items ([#11196](https://github.com/astral-sh/uv/pull/11196))
+- Use explicit `_GLibCVersion` tuple in uv-python crate ([#11122](https://github.com/astral-sh/uv/pull/11122))
+
+### Documentation
+
+- Add Git SHA locking behavior to docs ([#11125](https://github.com/astral-sh/uv/pull/11125))
+- Add best-practice flags to `pip install` example in troubleshooting guide ([#11194](https://github.com/astral-sh/uv/pull/11194))
+- Set `VIRTUAL_ENV` in Jupyter kernels ([#11155](https://github.com/astral-sh/uv/pull/11155))
+- Add instructions for deactivating an environment ([#11200](https://github.com/astral-sh/uv/pull/11200))
+
 ## 0.5.26
 
 ### Enhancements

crates/uv-version/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "uv-version"
-version = "0.5.26"
+version = "0.5.27"
 edition = { workspace = true }
 rust-version = { workspace = true }
 homepage = { workspace = true }

crates/uv/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "uv"
-version = "0.5.26"
+version = "0.5.27"
 edition = { workspace = true }
 rust-version = { workspace = true }
 homepage = { workspace = true }

docs/getting-started/installation.md

@@ -25,7 +25,7 @@ uv provides a standalone installer to download and install uv:
     Request a specific version by including it in the URL:
 
     ```console
-    $ curl -LsSf https://astral.sh/uv/0.5.26/install.sh | sh
+    $ curl -LsSf https://astral.sh/uv/0.5.27/install.sh | sh
     ```
 
 === "Windows"
@@ -41,7 +41,7 @@ uv provides a standalone installer to download and install uv:
     Request a specific version by including it in the URL:
 
     ```console
-    $ powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/0.5.26/install.ps1 | iex"
+    $ powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/0.5.27/install.ps1 | iex"
     ```
 
 !!! tip

docs/guides/integration/aws-lambda.md

@@ -92,7 +92,7 @@ the second stage, we'll copy this directory over to the final image, omitting th
 other unnecessary files.
 
 ```dockerfile title="Dockerfile"
-FROM ghcr.io/astral-sh/uv:0.5.26 AS uv
+FROM ghcr.io/astral-sh/uv:0.5.27 AS uv
 
 # First, bundle the dependencies into the task root.
 FROM public.ecr.aws/lambda/python:3.13 AS builder
@@ -334,7 +334,7 @@ And confirm that opening http://127.0.0.1:8000/ in a web browser displays, "Hell
 Finally, we'll update the Dockerfile to include the local library in the deployment package:
 
 ```dockerfile title="Dockerfile"
-FROM ghcr.io/astral-sh/uv:0.5.26 AS uv
+FROM ghcr.io/astral-sh/uv:0.5.27 AS uv
 
 # First, bundle the dependencies into the task root.
 FROM public.ecr.aws/lambda/python:3.13 AS builder

docs/guides/integration/docker.md

@@ -31,7 +31,7 @@ $ docker run --rm -it ghcr.io/astral-sh/uv:debian uv --help
 The following distroless images are available:
 
 - `ghcr.io/astral-sh/uv:latest`
-- `ghcr.io/astral-sh/uv:{major}.{minor}.{patch}`, e.g., `ghcr.io/astral-sh/uv:0.5.26`
+- `ghcr.io/astral-sh/uv:{major}.{minor}.{patch}`, e.g., `ghcr.io/astral-sh/uv:0.5.27`
 - `ghcr.io/astral-sh/uv:{major}.{minor}`, e.g., `ghcr.io/astral-sh/uv:0.5` (the latest patch
   version)
 
@@ -72,7 +72,7 @@ And the following derived images are available:
 
 As with the distroless image, each derived image is published with uv version tags as
 `ghcr.io/astral-sh/uv:{major}.{minor}.{patch}-{base}` and
-`ghcr.io/astral-sh/uv:{major}.{minor}-{base}`, e.g., `ghcr.io/astral-sh/uv:0.5.26-alpine`.
+`ghcr.io/astral-sh/uv:{major}.{minor}-{base}`, e.g., `ghcr.io/astral-sh/uv:0.5.27-alpine`.
 
 For more details, see the [GitHub Container](https://github.com/astral-sh/uv/pkgs/container/uv)
 page.
@@ -110,7 +110,7 @@ Note this requires `curl` to be available.
 In either case, it is best practice to pin to a specific uv version, e.g., with:
 
 ```dockerfile
-COPY --from=ghcr.io/astral-sh/uv:0.5.26 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.5.27 /uv /uvx /bin/
 ```
 
 !!! tip
@@ -128,7 +128,7 @@ COPY --from=ghcr.io/astral-sh/uv:0.5.26 /uv /uvx /bin/
 Or, with the installer:
 
 ```dockerfile
-ADD https://astral.sh/uv/0.5.26/install.sh /uv-installer.sh
+ADD https://astral.sh/uv/0.5.27/install.sh /uv-installer.sh
 ```
 
 ### Installing a project

docs/guides/integration/github.md

@@ -47,7 +47,7 @@ jobs:
         uses: astral-sh/setup-uv@v5
         with:
           # Install a specific version of uv.
-          version: "0.5.26"
+          version: "0.5.27"
 ```
 
 ## Setting up Python

docs/guides/integration/pre-commit.md

@@ -17,7 +17,7 @@ pre-commit, add the following to the `.pre-commit-config.yaml`:
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
     # uv version.
-    rev: 0.5.26
+    rev: 0.5.27
     hooks:
       - id: uv-lock
 ```
@@ -28,7 +28,7 @@ To keep your `requirements.txt` file updated using pre-commit:
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
     # uv version.
-    rev: 0.5.26
+    rev: 0.5.27
     hooks:
       - id: uv-export
 ```
@@ -39,7 +39,7 @@ To compile requirements via pre-commit, add the following to the `.pre-commit-co
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
     # uv version.
-    rev: 0.5.26
+    rev: 0.5.27
     hooks:
       # Compile requirements
       - id: pip-compile
@@ -52,7 +52,7 @@ To compile alternative files, modify `args` and `files`:
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
     # uv version.
-    rev: 0.5.26
+    rev: 0.5.27
     hooks:
       # Compile requirements
       - id: pip-compile
@@ -66,7 +66,7 @@ To run the hook over multiple files at the same time:
 repos:
   - repo: https://github.com/astral-sh/uv-pre-commit
     # uv version.
-    rev: 0.5.26
+    rev: 0.5.27
     hooks:
       # Compile requirements
       - id: pip-compile

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "uv"
-version = "0.5.26"
+version = "0.5.27"
 description = "An extremely fast Python package and project manager, written in Rust."
 authors = [{ name = "Astral Software Inc.", email = "hey@astral.sh" }]
 requires-python = ">=3.8"