v0.59.0

prefix-dev/pixiv0.59.0Oct 29, 2025by github-actions[bot]

AI Summary

This release introduces a configurable `solve-strategy` option for dependency resolution. It also addresses a critical security vulnerability by updating the `astral-tokio-tar` dependency.

Key Highlights

  • Introduces the ability to set the strategy used in the solve via `solve-strategy`.
  • Fixes a high-severity security issue (CVE-2025-62518) in the `astral-tokio-tar` dependency.

New Features

  • Add `solve-strategy` to the manifest and solve
  • Configurable export name

Full Release Notes

## Release Notes

#### ✨ Highlights

This release introduces the ability to set the strategy used in the solve.
You can learn more about this feature in the [documentation](https://pixi.sh/dev/reference/pixi_manifest/#solve-strategy-optional).

However, the main reason we are making this release is because one of our dependencies `astral-tokio-tar` below 0.5.6 has a high severity security issue titled `TARmageddon`.
Updating that dependency fixes that.


#### Added

- Add `solve-strategy` to the manifest and solve by @bobozaur in [#4789](https://github.com/prefix-dev/pixi/pull/4789)


#### Changed

- Upgrade rust toolchain by @tdejager in [#4815](https://github.com/prefix-dev/pixi/pull/4815)
- Update patch script to patch versions by @tdejager in [#4823](https://github.com/prefix-dev/pixi/pull/4823)
- Configurable export name by @charles-turner-1 in [#4838](https://github.com/prefix-dev/pixi/pull/4838)


#### Documentation

- Use custom search separator by @Hofer-Julian in [#4835](https://github.com/prefix-dev/pixi/pull/4835)


#### Fixed

- CLI logging again by @tdejager in [#4812](https://github.com/prefix-dev/pixi/pull/4812)
- Slim down trampoline dependency tree by removing `pixi_utils` by @wolfv in [#4817](https://github.com/prefix-dev/pixi/pull/4817)
- Lefthook parallel by @Hofer-Julian in [#4836](https://github.com/prefix-dev/pixi/pull/4836)
- CVE-2025-62518 by updating astral-tokio-tar by @niklaskorz in [#4833](https://github.com/prefix-dev/pixi/pull/4833)


#### New Contributors
* @charles-turner-1 made their first contribution in [#4838](https://github.com/prefix-dev/pixi/pull/4838)
* @niklaskorz made their first contribution in [#4833](https://github.com/prefix-dev/pixi/pull/4833)
* @bobozaur made their first contribution in [#4789](https://github.com/prefix-dev/pixi/pull/4789)

## Download pixi 0.59.0

|  File  | Platform | Checksum |
|--------|----------|----------|
| [pixi-aarch64-apple-darwin.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-apple-darwin.tar.gz.sha256) |
| [pixi-x86_64-apple-darwin.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-apple-darwin.tar.gz.sha256) |
| [pixi-aarch64-pc-windows-msvc.zip](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.zip.sha256) |
| [pixi-aarch64-pc-windows-msvc.msi](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.msi) | ARM64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.msi.sha256) |
| [pixi-x86_64-pc-windows-msvc.zip](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.zip.sha256) |
| [pixi-x86_64-pc-windows-msvc.msi](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.msi.sha256) |
| [pixi-aarch64-unknown-linux-musl.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [pixi-x86_64-unknown-linux-musl.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-unknown-linux-musl.tar.gz.sha256) |