0.13.2

## Release Notes

Released on 2026-10-19.

### Enhancements

- Report all installed packages in `uv workspace metadata`, including packages outside the selected resolution ([#22395](https://github.com/astral-sh/uv/pull/22395))
- Include supported environment restrictions when exporting `pylock.toml` ([#22596](https://github.com/astral-sh/uv/pull/22596))
- Retry dropped GET and HEAD requests when fetching package and index data ([#22672](https://github.com/astral-sh/uv/pull/22672))
- Preserve encoding declarations in wheel data scripts that require shell launchers ([#22526](https://github.com/astral-sh/uv/pull/22526))
- Show causes and hints when `uv python find --script` cannot discover an interpreter, including with `-q` ([#22549](https://github.com/astral-sh/uv/pull/22549))
- Print valid ksh activation instructions and support non-relocatable environments under OpenBSD-derived ksh ([#22538](https://github.com/astral-sh/uv/pull/22538), [#22572](https://github.com/astral-sh/uv/pull/22572))
- Allow PEP 508 direct URLs, including Mercurial and extensionless archive URLs, in uv-build's `[build-system].requires` validation ([#22577](https://github.com/astral-sh/uv/pull/22577))

### Python

- Add PyPy 3.11.17 and 3.12.15 ([#22578](https://github.com/astral-sh/uv/pull/22578))

### Preview features

- Fetch and parse PEP 825 index-level variant metadata with `wheel-variants` ([#22509](https://github.com/astral-sh/uv/pull/22509), [#22511](https://github.com/astral-sh/uv/pull/22511))

### Performance

- Avoid exponential work when simplifying, traversing, and exporting complex dependency markers ([#22608](https://github.com/astral-sh/uv/pull/22608), [#22615](https://github.com/astral-sh/uv/pull/22615), [#22651](https://github.com/astral-sh/uv/pull/22651), [#22674](https://github.com/astral-sh/uv/pull/22674))
- Reduce the time and memory used to parse and store complex dependency markers ([#22675](https://github.com/astral-sh/uv/pull/22675), [#22676](https://github.com/astral-sh/uv/pull/22676), [#22681](https://github.com/astral-sh/uv/pull/22681))
- Reduce resolver memory use for large dependency graphs, forks, extras, and dependency groups ([#22565](https://github.com/astral-sh/uv/pull/22565), [#22625](https://github.com/astral-sh/uv/pull/22625))
- Speed up project discovery in large workspaces by caching member names ([#22635](https://github.com/astral-sh/uv/pull/22635))
- Reduce uv's binary size and speed up CycloneDX exports ([#22431](https://github.com/astral-sh/uv/pull/22431))
- Reduce `uv-build` binary size, including Linux x86_64 wheels ([#22539](https://github.com/astral-sh/uv/pull/22539), [#22573](https://github.com/astral-sh/uv/pull/22573))
- Reduce allocations when parsing TOML ([#22679](https://github.com/astral-sh/uv/pull/22679))

### Bug fixes

- Respect `--exclude-newer` when a newer wheel for the selected source distribution is already cached ([#22685](https://github.com/astral-sh/uv/pull/22685))
- Prevent URL credentials from leaking through diagnostics or persisted metadata ([#22600](https://github.com/astral-sh/uv/pull/22600), [#22601](https://github.com/astral-sh/uv/pull/22601), [#22617](https://github.com/astral-sh/uv/pull/22617), [#22622](https://github.com/astral-sh/uv/pull/22622), [#22646](https://github.com/astral-sh/uv/pull/22646))
- Keep separate cache entries for signed `--find-links` URLs that differ only in sensitive query values ([#22630](https://github.com/astral-sh/uv/pull/22630))
- Honor PEP 751 environment restrictions when installing or syncing from `pylock.toml` ([#22594](https://github.com/astral-sh/uv/pull/22594))
- Use configured credentials before prompting during `uv publish`, and avoid prompting when no upload occurs ([#22593](https://github.com/astral-sh/uv/pull/22593))
- Match recursive build globs against complete file paths and ignore invalid license symlinks ([#22581](https://github.com/astral-sh/uv/pull/22581), [#22583](https://github.com/astral-sh/uv/pull/22583))
- Return an error for invalid `uv pip compile --python-version` values instead of panicking ([#22727](https://github.com/astral-sh/uv/pull/22727))
- Reject invalid `pylock.toml` output filenames before resolution instead of panicking ([#22725](https://github.com/astral-sh/uv/pull/22725))
- Avoid panicking during repeated resolution conflicts involving fixed-priority packages ([#22589](https://github.com/astral-sh/uv/pull/22589))
- Create version aliases correctly when installing managed Python into a relative directory ([#22547](https://github.com/astral-sh/uv/pull/22547))
- Show incompatibilities from failing `uv pip check` invocations with `-q` ([#22544](https://github.com/astral-sh/uv/pull/22544))
- Treat logically equivalent dependency markers as equal regardless of construction order ([#22680](https://github.com/astral-sh/uv/pull/22680))

### Rust API

- Require the opt-in `unsafe-url` feature to use raw `url::Url` APIs in `uv-pep508` ([#22623](https://github.com/astral-sh/uv/pull/22623))

### Documentation

- Clarify credential lookup, environment synchronization, managed Python, and integration guidance ([#22542](https://github.com/astral-sh/uv/pull/22542))

### Other changes

- Use stable `sh.astral.*` signing identifiers for macOS binaries ([#22648](https://github.com/astral-sh/uv/pull/22648))

## Install uv 0.13.2

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-installer.ps1 | iex"
```

## Download uv 0.13.2

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-apple-darwin.tar.gz.sha256) |
| [uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-apple-darwin.tar.gz.sha256) |
| [uv-aarch64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-pc-windows-msvc.zip.sha256) |
| [uv-i686-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-pc-windows-msvc.zip) | x86 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-pc-windows-msvc.zip.sha256) |
| [uv-x86_64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-pc-windows-msvc.zip.sha256) |
| [uv-aarch64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-unknown-linux-gnu.tar.gz) | ARM64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [uv-i686-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-unknown-linux-gnu.tar.gz) | x86 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-unknown-linux-gnu.tar.gz.sha256) |
| [uv-powerpc64le-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-powerpc64le-unknown-linux-gnu.tar.gz) | PPC64LE Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-powerpc64le-unknown-linux-gnu.tar.gz.sha256) |
| [uv-riscv64gc-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-riscv64gc-unknown-linux-gnu.tar.gz) | RISCV Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-riscv64gc-unknown-linux-gnu.tar.gz.sha256) |
| [uv-s390x-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-s390x-unknown-linux-gnu.tar.gz) | S390x Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-s390x-unknown-linux-gnu.tar.gz.sha256) |
| [uv-x86_64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-unknown-linux-gnu.tar.gz) | x64 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [uv-armv7-unknown-linux-gnueabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-armv7-unknown-linux-gnueabihf.tar.gz) | ARMv7 Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-armv7-unknown-linux-gnueabihf.tar.gz.sha256) |
| [uv-aarch64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [uv-i686-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-unknown-linux-musl.tar.gz) | x86 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-i686-unknown-linux-musl.tar.gz.sha256) |
| [uv-riscv64gc-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-riscv64gc-unknown-linux-musl.tar.gz) | RISCV MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-riscv64gc-unknown-linux-musl.tar.gz.sha256) |
| [uv-x86_64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [uv-arm-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-arm-unknown-linux-musleabihf.tar.gz) | ARMv6 MUSL Linux (Hardfloat) | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-arm-unknown-linux-musleabihf.tar.gz.sha256) |
| [uv-armv7-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-armv7-unknown-linux-musleabihf.tar.gz) | ARMv7 MUSL Linux | [checksum](https://releases.astral.sh/github/uv/releases/download/0.13.2/uv-armv7-unknown-linux-musleabihf.tar.gz.sha256) |

## Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the [GitHub CLI](https://cli.github.com/manual/gh_attestation_verify):
```sh
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
```

You can also download the attestation from [GitHub](https://github.com/astral-sh/uv/attestations) and verify against that directly:
```sh
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
```