v0.59.0
prefix-dev/pixiv0.59.0Oct 29, 2025by github-actions[bot]
AI Summary
This release introduces a configurable `solve-strategy` option for dependency resolution. It also addresses a critical security vulnerability by updating the `astral-tokio-tar` dependency.
Key Highlights
- Introduces the ability to set the strategy used in the solve via `solve-strategy`.
- Fixes a high-severity security issue (CVE-2025-62518) in the `astral-tokio-tar` dependency.
New Features
- Add `solve-strategy` to the manifest and solve
- Configurable export name
Full Release Notes
## Release Notes #### ✨ Highlights This release introduces the ability to set the strategy used in the solve. You can learn more about this feature in the [documentation](https://pixi.sh/dev/reference/pixi_manifest/#solve-strategy-optional). However, the main reason we are making this release is because one of our dependencies `astral-tokio-tar` below 0.5.6 has a high severity security issue titled `TARmageddon`. Updating that dependency fixes that. #### Added - Add `solve-strategy` to the manifest and solve by @bobozaur in [#4789](https://github.com/prefix-dev/pixi/pull/4789) #### Changed - Upgrade rust toolchain by @tdejager in [#4815](https://github.com/prefix-dev/pixi/pull/4815) - Update patch script to patch versions by @tdejager in [#4823](https://github.com/prefix-dev/pixi/pull/4823) - Configurable export name by @charles-turner-1 in [#4838](https://github.com/prefix-dev/pixi/pull/4838) #### Documentation - Use custom search separator by @Hofer-Julian in [#4835](https://github.com/prefix-dev/pixi/pull/4835) #### Fixed - CLI logging again by @tdejager in [#4812](https://github.com/prefix-dev/pixi/pull/4812) - Slim down trampoline dependency tree by removing `pixi_utils` by @wolfv in [#4817](https://github.com/prefix-dev/pixi/pull/4817) - Lefthook parallel by @Hofer-Julian in [#4836](https://github.com/prefix-dev/pixi/pull/4836) - CVE-2025-62518 by updating astral-tokio-tar by @niklaskorz in [#4833](https://github.com/prefix-dev/pixi/pull/4833) #### New Contributors * @charles-turner-1 made their first contribution in [#4838](https://github.com/prefix-dev/pixi/pull/4838) * @niklaskorz made their first contribution in [#4833](https://github.com/prefix-dev/pixi/pull/4833) * @bobozaur made their first contribution in [#4789](https://github.com/prefix-dev/pixi/pull/4789) ## Download pixi 0.59.0 | File | Platform | Checksum | |--------|----------|----------| | [pixi-aarch64-apple-darwin.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-apple-darwin.tar.gz.sha256) | | [pixi-x86_64-apple-darwin.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-apple-darwin.tar.gz.sha256) | | [pixi-aarch64-pc-windows-msvc.zip](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.zip.sha256) | | [pixi-aarch64-pc-windows-msvc.msi](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.msi) | ARM64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-pc-windows-msvc.msi.sha256) | | [pixi-x86_64-pc-windows-msvc.zip](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.zip) | x64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.zip.sha256) | | [pixi-x86_64-pc-windows-msvc.msi](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.msi) | x64 Windows | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-pc-windows-msvc.msi.sha256) | | [pixi-aarch64-unknown-linux-musl.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-aarch64-unknown-linux-musl.tar.gz.sha256) | | [pixi-x86_64-unknown-linux-musl.tar.gz](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://github.com/prefix-dev/pixi/releases/download/v0.59.0/pixi-x86_64-unknown-linux-musl.tar.gz.sha256) |