From d8be06bba45c62eb6e6201d9920c2b721ed0bd3b Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Wed, 12 Mar 2025 11:57:30 -0400
Subject: [PATCH 01/15] Update to 0.6.6 (close RHBZ#2351456)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 0468bf1..b56ea36 100644
--- a/.gitignore
+++ b/.gitignore
@@ -93,3 +93,4 @@
 /uv-0.6.3.tar.gz
 /uv-0.6.4.tar.gz
 /uv-0.6.5.tar.gz
+/uv-0.6.6.tar.gz
diff --git a/sources b/sources
index 9d7a456..3ebc5c8 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.5.tar.gz) = cb1564905d56ac5873db91476b9a0a09e450c2cfaf386d9d04b1861d1e798ec43d7f28e03099d732e03cc58f79820a7f825d7d8869b40f71fab4308412e401b5
+SHA512 (uv-0.6.6.tar.gz) = 49ad9fdb411e719b5a2aae6d48750932c8ad65bace2b0a747a54b475bcd0a40da368712d074b4b3afdf28cc8003532aca712b3714d54323f184ee1358521d7c5
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index ed82550..9210d96 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.5
+Version:        0.6.6
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 

From 90e3070e1b5d1ce7712798b0a2d650440940f944 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Tue, 18 Mar 2025 07:18:49 -0400
Subject: [PATCH 02/15] Update to 0.6.7 (close RHBZ#2353121)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 4 +++-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index b56ea36..299a63e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -94,3 +94,4 @@
 /uv-0.6.4.tar.gz
 /uv-0.6.5.tar.gz
 /uv-0.6.6.tar.gz
+/uv-0.6.7.tar.gz
diff --git a/sources b/sources
index 3ebc5c8..70848ed 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.6.tar.gz) = 49ad9fdb411e719b5a2aae6d48750932c8ad65bace2b0a747a54b475bcd0a40da368712d074b4b3afdf28cc8003532aca712b3714d54323f184ee1358521d7c5
+SHA512 (uv-0.6.7.tar.gz) = 992f8a64f3d0c8f57be6959f91242ce7420c6ee94839f067dc142f895fb2c0b9ab4161b6a51112241e30c8836eefb7e5bc747f867c28bf09b95e0aaa52de8350
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 9210d96..9e21a0d 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.6
+Version:        0.6.7
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -95,6 +95,7 @@ Summary:        An extremely fast Python package installer and resolver, written
 # Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
 # BSD-2-Clause OR Apache-2.0 OR MIT
 # BSD-3-Clause
+# BSL-1.0
 # ISC
 # ISC AND MIT AND OpenSSL
 # LGPL-3.0-or-later OR MPL-2.0
@@ -122,6 +123,7 @@ License:        %{shrink:
                 (Apache-2.0 WITH LLVM-exception) AND
                 (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND
                 BSD-3-Clause AND
+                BSL-1.0 AND
                 ISC AND
                 (LGPL-3.0-or-later OR MIT) AND
                 (LGPL-3.0-or-later OR MPL-2.0) AND

From 8080763925be2ae7d5fa962f56aa7fe6f5a5ef2c Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Sat, 12 Apr 2025 09:04:17 -0400
Subject: [PATCH 03/15] Patch for zip 0.6 compatibility

---
 ...Revert-Upgrade-zip-crate-to-v2-12196.patch | 84 +++++++++++++++++++
 uv.spec                                       |  8 ++
 2 files changed, 92 insertions(+)
 create mode 100644 0001-Revert-Upgrade-zip-crate-to-v2-12196.patch

diff --git a/0001-Revert-Upgrade-zip-crate-to-v2-12196.patch b/0001-Revert-Upgrade-zip-crate-to-v2-12196.patch
new file mode 100644
index 0000000..6b41c90
--- /dev/null
+++ b/0001-Revert-Upgrade-zip-crate-to-v2-12196.patch
@@ -0,0 +1,84 @@
+From 557958723e492064a73abaf373294a5f919702ac Mon Sep 17 00:00:00 2001
+From: "Benjamin A. Beasley" <code@musicinmybrain.net>
+Date: Sat, 12 Apr 2025 09:02:33 -0400
+Subject: [PATCH] Revert "Upgrade zip crate to v2 (#12196)"
+
+This reverts commit 277c15bd66c4cda8ca29140e22fbe3fdb676c289.
+
+(Omits changes to Cargo.lock.)
+---
+ Cargo.toml                              | 2 +-
+ crates/uv-build-backend/src/wheel.rs    | 6 +++---
+ crates/uv-trampoline-builder/src/lib.rs | 5 ++---
+ 3 files changed, 6 insertions(+), 7 deletions(-)
+
+diff --git a/Cargo.toml b/Cargo.toml
+index cd5cf2044..747dd7eba 100644
+--- a/Cargo.toml
++++ b/Cargo.toml
+@@ -186,7 +186,7 @@ windows-sys = { version = "0.59.0", features = ["Win32_Foundation", "Win32_Secur
+ winsafe = { version = "0.0.23", features = ["kernel"] }
+ wiremock = { version = "0.6.2" }
+ xz2 = { version = "0.1.7" }
+-zip = { version = "2.2.3", default-features = false, features = ["deflate"] }
++zip = { version = "0.6.6", default-features = false, features = ["deflate"] }
+ 
+ [workspace.metadata.cargo-shear]
+ ignored = ["flate2", "xz2"]
+diff --git a/crates/uv-build-backend/src/wheel.rs b/crates/uv-build-backend/src/wheel.rs
+index 4c606f2dc..778160032 100644
+--- a/crates/uv-build-backend/src/wheel.rs
++++ b/crates/uv-build-backend/src/wheel.rs
+@@ -632,7 +632,7 @@ impl ZipDirectoryWriter {
+     ) -> Result<Box<dyn Write + 'slf>, Error> {
+         // 644 is the default of the zip crate.
+         let permissions = if executable_bit { 775 } else { 664 };
+-        let options = zip::write::SimpleFileOptions::default()
++        let options = zip::write::FileOptions::default()
+             .unix_permissions(permissions)
+             .compression_method(self.compression);
+         self.writer.start_file(path, options)?;
+@@ -643,7 +643,7 @@ impl ZipDirectoryWriter {
+ impl DirectoryWriter for ZipDirectoryWriter {
+     fn write_bytes(&mut self, path: &str, bytes: &[u8]) -> Result<(), Error> {
+         trace!("Adding {}", path);
+-        let options = zip::write::SimpleFileOptions::default().compression_method(self.compression);
++        let options = zip::write::FileOptions::default().compression_method(self.compression);
+         self.writer.start_file(path, options)?;
+         self.writer.write_all(bytes)?;
+ 
+@@ -678,7 +678,7 @@ impl DirectoryWriter for ZipDirectoryWriter {
+ 
+     fn write_directory(&mut self, directory: &str) -> Result<(), Error> {
+         trace!("Adding directory {}", directory);
+-        let options = zip::write::SimpleFileOptions::default().compression_method(self.compression);
++        let options = zip::write::FileOptions::default().compression_method(self.compression);
+         Ok(self.writer.add_directory(directory, options)?)
+     }
+ 
+diff --git a/crates/uv-trampoline-builder/src/lib.rs b/crates/uv-trampoline-builder/src/lib.rs
+index 21fc69050..2fb461fc8 100644
+--- a/crates/uv-trampoline-builder/src/lib.rs
++++ b/crates/uv-trampoline-builder/src/lib.rs
+@@ -5,7 +5,7 @@ use std::str::Utf8Error;
+ use fs_err::File;
+ use thiserror::Error;
+ use uv_fs::Simplified;
+-use zip::write::SimpleFileOptions;
++use zip::write::FileOptions;
+ use zip::ZipWriter;
+ 
+ #[cfg(all(windows, target_arch = "x86"))]
+@@ -250,8 +250,7 @@ pub fn windows_script_launcher(
+         // We're using the zip writer, but with stored compression
+         // https://github.com/njsmith/posy/blob/04927e657ca97a5e35bb2252d168125de9a3a025/src/trampolines/mod.rs#L75-L82
+         // https://github.com/pypa/distlib/blob/8ed03aab48add854f377ce392efffb79bb4d6091/PC/launcher.c#L259-L271
+-        let stored =
+-            SimpleFileOptions::default().compression_method(zip::CompressionMethod::Stored);
++        let stored = FileOptions::default().compression_method(zip::CompressionMethod::Stored);
+         let mut archive = ZipWriter::new(Cursor::new(&mut payload));
+         let error_msg = "Writing to Vec<u8> should never fail";
+         archive.start_file("__main__.py", stored).expect(error_msg);
+-- 
+2.49.0
+
diff --git a/uv.spec b/uv.spec
index 9e21a0d..44a4ec9 100644
--- a/uv.spec
+++ b/uv.spec
@@ -200,6 +200,14 @@ Patch:          0001-Downstream-only-do-not-override-the-default-allocato.patch
 #   https://github.com/astral-sh/uv/issues/4451
 Patch:          0001-Downstream-patch-always-find-the-system-wide-uv-exec.patch
 
+# Downstream-only: Revert "Upgrade zip crate to v2 (#12196)"
+# This reverts commit 277c15bd66c4cda8ca29140e22fbe3fdb676c289.
+# (Omits changes to Cargo.lock.)
+#
+# This is required for EPEL10.0 only, since upgrading rust-zip across a SemVer
+# boundary is blocked by policy.
+Patch:          0001-Revert-Upgrade-zip-crate-to-v2-12196.patch
+
 # These patches are for the forked, bundled async_zip crate.
 #
 # Revert "Update zip requirement from 0.6.3 to 2.1.5"

From 9da9716653e7573765fa2ef3d97e3f7e842bdb04 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Tue, 18 Mar 2025 22:02:14 -0400
Subject: [PATCH 04/15] Update to 0.6.8 (close RHBZ#2353281)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 299a63e..b69d059 100644
--- a/.gitignore
+++ b/.gitignore
@@ -95,3 +95,4 @@
 /uv-0.6.5.tar.gz
 /uv-0.6.6.tar.gz
 /uv-0.6.7.tar.gz
+/uv-0.6.8.tar.gz
diff --git a/sources b/sources
index 70848ed..37a0970 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.7.tar.gz) = 992f8a64f3d0c8f57be6959f91242ce7420c6ee94839f067dc142f895fb2c0b9ab4161b6a51112241e30c8836eefb7e5bc747f867c28bf09b95e0aaa52de8350
+SHA512 (uv-0.6.8.tar.gz) = edf3e45e773bc4db3e1ee7a76419ef62beadc882f2dbe6342ec334520e170f941b55d376469677a2b8107a6ab8e38d9c704bfae6700e4f2f4932db9fda57478c
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 44a4ec9..45fc037 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.7
+Version:        0.6.8
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 

From 5671722da2293ae6821df0aeb73d8735f4667379 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Fri, 21 Mar 2025 16:28:46 -0400
Subject: [PATCH 05/15] Update to 0.6.9 (close RHBZ#2353965)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 3 ++-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index b69d059..e5afa6d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -96,3 +96,4 @@
 /uv-0.6.6.tar.gz
 /uv-0.6.7.tar.gz
 /uv-0.6.8.tar.gz
+/uv-0.6.9.tar.gz
diff --git a/sources b/sources
index 37a0970..fb72f3b 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.8.tar.gz) = edf3e45e773bc4db3e1ee7a76419ef62beadc882f2dbe6342ec334520e170f941b55d376469677a2b8107a6ab8e38d9c704bfae6700e4f2f4932db9fda57478c
+SHA512 (uv-0.6.9.tar.gz) = 0b6791b25aaa354a1c662132af97b9b5d45785867be4ee112660b823c69d532460651a333db61c96c997448761c77fde1fd4ecb47ccd5ebc73239d81a60b984d
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 45fc037..4a97d09 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.8
+Version:        0.6.9
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -701,6 +701,7 @@ install -t '%{buildroot}%{_sysconfdir}/uv' -p -m 0644 -D '%{SOURCE1}'
 #
 # cargo test -p uv-auth --lib:
 skip="${skip-} --skip keyring::tests::fetch_url_no_host"
+skip="${skip-} --skip keyring::tests::fetch_url_with_empty_username"
 skip="${skip-} --skip keyring::tests::fetch_url_with_no_username"
 skip="${skip-} --skip keyring::tests::fetch_url_with_password"
 

From 1b5e42f0d409ad0aa0ba79ec27ddd46ab11a6caa Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Thu, 3 Apr 2025 17:36:59 -0400
Subject: [PATCH 06/15] Update to 0.6.10

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 4 ++--
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e5afa6d..170fd86 100644
--- a/.gitignore
+++ b/.gitignore
@@ -97,3 +97,4 @@
 /uv-0.6.7.tar.gz
 /uv-0.6.8.tar.gz
 /uv-0.6.9.tar.gz
+/uv-0.6.10.tar.gz
diff --git a/sources b/sources
index fb72f3b..b1f99e3 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.9.tar.gz) = 0b6791b25aaa354a1c662132af97b9b5d45785867be4ee112660b823c69d532460651a333db61c96c997448761c77fde1fd4ecb47ccd5ebc73239d81a60b984d
+SHA512 (uv-0.6.10.tar.gz) = d1a034ae8781b5401a9ad77e00f7d4ae1e401359232e44a7395583e22c88f80e3741a21b52a3a4f659edbd2e643ffe3ad10b58964dc7c3c12bee60f8c0414930
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 4a97d09..4cebe3d 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.9
+Version:        0.6.10
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -564,7 +564,7 @@ tomcli set crates/uv-auth/Cargo.toml del dev-dependencies.wiremock
 mods="${mods-}${mods+|}branching_urls"
 mods="${mods-}${mods+|}build_backend"
 mods="${mods-}${mods+|}pip_(check|list|show|tree|uninstall)"
-mods="${mods-}${mods+|}python_(dir|find|install|pin)"
+mods="${mods-}${mods+|}python_(dir|find|install|list|pin)"
 mods="${mods-}${mods+|}venv"
 mods="${mods-}${mods+|}workspace"
 comment='Downstream-only: skip, needs specific Python interpreter versions'

From 9ad38437f3ccc7c5a559af2a47faed28cac5928f Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Thu, 3 Apr 2025 22:09:24 -0400
Subject: [PATCH 07/15] Update to 0.6.11

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 170fd86..cfb2570 100644
--- a/.gitignore
+++ b/.gitignore
@@ -98,3 +98,4 @@
 /uv-0.6.8.tar.gz
 /uv-0.6.9.tar.gz
 /uv-0.6.10.tar.gz
+/uv-0.6.11.tar.gz
diff --git a/sources b/sources
index b1f99e3..b3cfb85 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.10.tar.gz) = d1a034ae8781b5401a9ad77e00f7d4ae1e401359232e44a7395583e22c88f80e3741a21b52a3a4f659edbd2e643ffe3ad10b58964dc7c3c12bee60f8c0414930
+SHA512 (uv-0.6.11.tar.gz) = 4cad1246de2e8767394b89448e009a0c51a2e2d95c3eaac2c2ed76a03951fd539cefb38d2e61dc9ed0cc709c1a21a9221bb0437d1862d0d2a389977e19072835
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 4cebe3d..183fb48 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.10
+Version:        0.6.11
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 

From 76fb8fa201cfdcaaca20b0a247365ae92755990f Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Thu, 3 Apr 2025 22:31:26 -0400
Subject: [PATCH 08/15] Update to 0.6.12 (close RHBZ#2354987)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 6 +++---
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index cfb2570..d043de5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -99,3 +99,4 @@
 /uv-0.6.9.tar.gz
 /uv-0.6.10.tar.gz
 /uv-0.6.11.tar.gz
+/uv-0.6.12.tar.gz
diff --git a/sources b/sources
index b3cfb85..44be917 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.11.tar.gz) = 4cad1246de2e8767394b89448e009a0c51a2e2d95c3eaac2c2ed76a03951fd539cefb38d2e61dc9ed0cc709c1a21a9221bb0437d1862d0d2a389977e19072835
+SHA512 (uv-0.6.12.tar.gz) = c61476e1229d7ac9d9cd00308afde31f7acad469e2f69b3131b7723495c8a5bbac5cf545c0d657048433411ad706f96aa2296bcb3c1b6ff3cb5d0f18e786a4d5
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 183fb48..e164463 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.11
+Version:        0.6.12
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -592,11 +592,11 @@ tomcli set crates/uv/Cargo.toml del dependencies.tracing-durations-export
 # tomcli set crates/uv/Cargo.toml str dev-dependencies.foocrate.version 0.1.2
 
 # etcetera
-#   wanted: 0.9.0
+#   wanted: 0.10.0
 #   currently packaged: 0.8.0
 #   https://bugzilla.redhat.com/show_bug.cgi?id=2348721
 tomcli set Cargo.toml str workspace.dependencies.etcetera.version \
-    '>=0.8.0, <0.10.0'
+    '>=0.8.0, <0.11.0'
 
 # mailparse
 #   wanted: 0.16.0

From d6725f15e8517858ba319d14c38bb5319042a6dc Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Tue, 8 Apr 2025 07:17:26 -0400
Subject: [PATCH 09/15] Update to 0.6.13 (close RHBZ#2358064)

---
 .gitignore | 1 +
 sources    | 2 +-
 uv.spec    | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index d043de5..99af673 100644
--- a/.gitignore
+++ b/.gitignore
@@ -100,3 +100,4 @@
 /uv-0.6.10.tar.gz
 /uv-0.6.11.tar.gz
 /uv-0.6.12.tar.gz
+/uv-0.6.13.tar.gz
diff --git a/sources b/sources
index 44be917..a366caa 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.12.tar.gz) = c61476e1229d7ac9d9cd00308afde31f7acad469e2f69b3131b7723495c8a5bbac5cf545c0d657048433411ad706f96aa2296bcb3c1b6ff3cb5d0f18e786a4d5
+SHA512 (uv-0.6.13.tar.gz) = 49e629a291f4aaf6ac96e994f22fe4370dee6e21d6317a4b1d28eaddb5f34b838ce19707eb22da7b9b16445d19f32a74631301a1feb53b336a8a275ee3f1e1bf
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index e164463..9ed68ec 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.12
+Version:        0.6.13
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 

From da9f9d702cebb4e0f574042730a4286a050d2eb5 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Wed, 9 Apr 2025 20:51:09 -0400
Subject: [PATCH 10/15] Update to 0.6.14 (close RHBZ#2358763)

---
 .gitignore |  1 +
 sources    |  2 +-
 uv.spec    | 15 +--------------
 3 files changed, 3 insertions(+), 15 deletions(-)

diff --git a/.gitignore b/.gitignore
index 99af673..623ffd4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -101,3 +101,4 @@
 /uv-0.6.11.tar.gz
 /uv-0.6.12.tar.gz
 /uv-0.6.13.tar.gz
+/uv-0.6.14.tar.gz
diff --git a/sources b/sources
index a366caa..4c1f8d3 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.13.tar.gz) = 49e629a291f4aaf6ac96e994f22fe4370dee6e21d6317a4b1d28eaddb5f34b838ce19707eb22da7b9b16445d19f32a74631301a1feb53b336a8a275ee3f1e1bf
+SHA512 (uv-0.6.14.tar.gz) = fd83f66d7be2c8bb0a30457433db00a7a0aa04d7f546a5a8833299e1e92dcf502c058a5dd8deb6b890aa21c10e3b9695e5444272efed9402e9722b01a71ff1b1
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 9ed68ec..c1ec061 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.13
+Version:        0.6.14
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -605,19 +605,6 @@ tomcli set Cargo.toml str workspace.dependencies.etcetera.version \
 tomcli set Cargo.toml str workspace.dependencies.mailparse.version \
     '>=0.15.0, <0.17.0'
 
-# unicode-width
-#   wanted: 0.1.13
-#   currently packaged: 0.1.12 (or 0.1.13+really0.1.12)
-# This is a whole mess: https://github.com/unicode-rs/unicode-width/issues/55,
-# https://github.com/unicode-rs/unicode-width/issues/66
-#
-# Once upstream switches to 0.2.0, https://github.com/astral-sh/uv/pull/7632,
-# we will no longer need to patch this; however, for now the upstream change is
-# waiting for textwrap to make a release that includes
-# https://github.com/mgeisler/textwrap/commit/ef91a27bcf5f4cf50ee12993032b227982ecf52e.
-tomcli set Cargo.toml str \
-    workspace.dependencies.unicode-width.version '0.1.12'
-
 %cargo_prep
 
 

From 90709a1725c5e736a7eb72f24c3f68fc22032964 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Tue, 22 Apr 2025 07:07:39 -0400
Subject: [PATCH 11/15] Stop tracking an obsolete patch file

[skip changelog]
---
 11.patch | 55 -------------------------------------------------------
 1 file changed, 55 deletions(-)
 delete mode 100644 11.patch

diff --git a/11.patch b/11.patch
deleted file mode 100644
index 1cc1ea6..0000000
--- a/11.patch
+++ /dev/null
@@ -1,55 +0,0 @@
-From 32769daca67af91c1f8bdb5972e500fa9e66c9ea Mon Sep 17 00:00:00 2001
-From: konstin <konstin@mailbox.org>
-Date: Tue, 4 Feb 2025 18:45:16 +0100
-Subject: [PATCH] Adapt directory permission test
-
-Adapt the directory permissions test to the changes made in https://github.com/astral-sh/tokio-tar/pull/8.
----
- tests/entry.rs | 20 +++++++++++++++-----
- 1 file changed, 15 insertions(+), 5 deletions(-)
-
-diff --git a/tests/entry.rs b/tests/entry.rs
-index 5b45669..4c31956 100644
---- a/tests/entry.rs
-+++ b/tests/entry.rs
-@@ -2,7 +2,7 @@ extern crate tokio_tar as async_tar;
- 
- extern crate tempfile;
- 
--use tokio::{fs::File, io::AsyncReadExt};
-+use tokio::{fs, fs::File, io::AsyncReadExt};
- use tokio_stream::*;
- 
- use tempfile::Builder;
-@@ -157,7 +157,7 @@ async fn relative_link_deref_error() {
- 
- #[tokio::test]
- #[cfg(unix)]
--async fn directory_maintains_permissions() {
-+async fn directory_permissions_are_cleared() {
-     use ::std::os::unix::fs::PermissionsExt;
- 
-     let mut ar = async_tar::Builder::new(Vec::new());
-@@ -176,9 +176,19 @@ async fn directory_maintains_permissions() {
-     let td = t!(Builder::new().prefix("tar").tempdir());
-     t!(ar.unpack(td.path()).await);
-     let f = t!(File::open(td.path().join("foo")).await);
--    let md = t!(f.metadata().await);
--    assert!(md.is_dir());
--    assert_eq!(md.permissions().mode(), 0o40777);
-+    let from_archive_md = t!(f.metadata().await);
-+    assert!(from_archive_md.is_dir());
-+
-+    // To determine the default umask, create a fresh directory that gets it assigned by the OS.
-+    let manually_created = td.path().join("bar");
-+    t!(fs::create_dir(&manually_created).await);
-+    let f = t!(File::open(&manually_created).await);
-+    let loca_md = t!(f.metadata().await);
-+
-+    assert_eq!(
-+        from_archive_md.permissions().mode(),
-+        loca_md.permissions().mode()
-+    );
- }
- 
- #[tokio::test]

From 3b4bd46fae85be46042990f86ef2fdeef7717603 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Tue, 22 Apr 2025 07:08:19 -0400
Subject: [PATCH 12/15] Update to 0.6.16 (close RHBZ#2361555)

---
 .gitignore |  1 +
 sources    |  2 +-
 uv.spec    | 20 ++++++++++++++++----
 3 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index 623ffd4..47d6cd6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,3 +102,4 @@
 /uv-0.6.12.tar.gz
 /uv-0.6.13.tar.gz
 /uv-0.6.14.tar.gz
+/uv-0.6.16.tar.gz
diff --git a/sources b/sources
index 4c1f8d3..30c0683 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.14.tar.gz) = fd83f66d7be2c8bb0a30457433db00a7a0aa04d7f546a5a8833299e1e92dcf502c058a5dd8deb6b890aa21c10e3b9695e5444272efed9402e9722b01a71ff1b1
+SHA512 (uv-0.6.16.tar.gz) = 656114553bf26bde74276fdf9e60cfa83ec6b8d9ada99fb1b210b157c1e847feace0741965c10c8d5d0e3721129d5d7d3860612c944402d4b531af2188ede21e
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
 SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index c1ec061..1797f01 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.14
+Version:        0.6.16
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -95,7 +95,6 @@ Summary:        An extremely fast Python package installer and resolver, written
 # Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
 # BSD-2-Clause OR Apache-2.0 OR MIT
 # BSD-3-Clause
-# BSL-1.0
 # ISC
 # ISC AND MIT AND OpenSSL
 # LGPL-3.0-or-later OR MPL-2.0
@@ -123,7 +122,6 @@ License:        %{shrink:
                 (Apache-2.0 WITH LLVM-exception) AND
                 (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND
                 BSD-3-Clause AND
-                BSL-1.0 AND
                 ISC AND
                 (LGPL-3.0-or-later OR MIT) AND
                 (LGPL-3.0-or-later OR MPL-2.0) AND
@@ -550,9 +548,12 @@ tomcli set crates/uv/Cargo.toml lists delitem features.default 'crates-io'
 # Omit tests requiring wiremock; its dependency tree is too large and complex
 # to consider packaging it right now. The conditional #[cfg(any())] is always
 # false.
+tomcli set crates/uv-auth/Cargo.toml del dev-dependencies.wiremock
 sed -r -i 's/^#\[cfg\(test\)\]/#[cfg(any())]\r&/' \
     crates/uv-auth/src/middleware.rs
-tomcli set crates/uv-auth/Cargo.toml del dev-dependencies.wiremock
+tomcli set crates/uv/Cargo.toml del dev-dependencies.wiremock
+sed -r -i 's/^mod pip_install;$/#[cfg(any())]\r&/' \
+    crates/uv/tests/it/main.rs
 
 %if %{without it}
 # Integration tests (it crate) nearly all require specific Python interpreter
@@ -731,6 +732,17 @@ skip="${skip-} --skip lock::tests::missing_dependency_source_version_unambiguous
 skip="${skip-} --skip lock::tests::missing_dependency_version_unambiguous"
 %endif
 
+# Trivial differences in --help output formatting (whitespace)
+skip="${skip-} --skip help::help"
+skip="${skip-} --skip help::help_flag"
+skip="${skip-} --skip help::help_flag_subcommand"
+skip="${skip-} --skip help::help_flag_subsubcommand"
+skip="${skip-} --skip help::help_short_flag"
+skip="${skip-} --skip help::help_subcommand"
+skip="${skip-} --skip help::help_subsubcommand"
+skip="${skip-} --skip help::help_with_global_option"
+skip="${skip-} --skip help::help_with_no_pager"
+
 %cargo_test -- -- --exact ${skip-}
 %endif
 

From 26bf181ad1ae5bad28111f4a5e044c1caa7779dc Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Sat, 26 Apr 2025 09:28:06 -0400
Subject: [PATCH 13/15] Update to 0.6.17

---
 .gitignore                                    |  2 +
 ...Revert-feat-ensure-successful-round-.patch | 65 ++++++-------------
 sources                                       |  4 +-
 uv.spec                                       | 15 +++--
 4 files changed, 34 insertions(+), 52 deletions(-)

diff --git a/.gitignore b/.gitignore
index 47d6cd6..d9f56aa 100644
--- a/.gitignore
+++ b/.gitignore
@@ -103,3 +103,5 @@
 /uv-0.6.13.tar.gz
 /uv-0.6.14.tar.gz
 /uv-0.6.16.tar.gz
+/uv-0.6.17.tar.gz
+/pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e.tar.gz
diff --git a/0001-Downstream-only-Revert-feat-ensure-successful-round-.patch b/0001-Downstream-only-Revert-feat-ensure-successful-round-.patch
index dfd8c23..e61dc66 100644
--- a/0001-Downstream-only-Revert-feat-ensure-successful-round-.patch
+++ b/0001-Downstream-only-Revert-feat-ensure-successful-round-.patch
@@ -1,31 +1,14 @@
-From 2dafc904c3578d6f822cf4106b0e09d3086eac27 Mon Sep 17 00:00:00 2001
-From: "Benjamin A. Beasley" <code@musicinmybrain.net>
-Date: Thu, 23 May 2024 14:45:49 -0400
-Subject: [PATCH] Downstream-only: Revert "feat: ensure successful round-trip
- of RON (#193)"
-
-This reverts commit 21c6a215432fea9a75b7d15d9a9936af9ccc17cb.
-
-We will not be packaging an alpha version of rust-ron.
----
- Cargo.lock                |  5 ++---
- Cargo.toml                |  2 +-
- version-ranges/Cargo.toml |  2 +-
- version-ranges/src/lib.rs | 10 ----------
- 4 files changed, 4 insertions(+), 15 deletions(-)
-
-diff --git a/Cargo.lock b/Cargo.lock
-index b3d912a..a6c2eae 100644
---- a/Cargo.lock
-+++ b/Cargo.lock
-@@ -730,15 +730,14 @@ checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
+diff -Naur pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/Cargo.lock pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/Cargo.lock
+--- pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/Cargo.lock	2025-04-23 07:43:48.000000000 -0400
++++ pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/Cargo.lock	2025-05-09 07:39:53.053134339 -0400
+@@ -730,15 +730,14 @@
  
  [[package]]
  name = "ron"
--version = "0.9.0-alpha.1"
+-version = "0.10.1"
 +version = "0.8.1"
  source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "7644a2a539ff7fa991c8f4652373cd722d387e39229415103243914249730836"
+-checksum = "beceb6f7bf81c73e73aeef6dd1356d9a1b2b4909e1f0fc3e59b034f9572d7b7f"
 +checksum = "b91f7eff05f748767f183df4320a63d6936e9c6107d97c9e6bdd9784f4289c94"
  dependencies = [
   "base64",
@@ -36,34 +19,31 @@ index b3d912a..a6c2eae 100644
  ]
  
  [[package]]
-diff --git a/Cargo.toml b/Cargo.toml
-index 2424d96..3705919 100644
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -36,7 +36,7 @@ version-ranges = { version = "0.1.0", path = "version-ranges" }
+diff -Naur pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/Cargo.toml pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/Cargo.toml
+--- pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/Cargo.toml	2025-04-23 07:43:48.000000000 -0400
++++ pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/Cargo.toml	2025-05-09 07:39:01.329212112 -0400
+@@ -36,7 +36,7 @@
  criterion = { version = "2.7.2", package = "codspeed-criterion-compat" }
  env_logger = "0.11.6"
  proptest = "1.6.0"
--ron = "=0.9.0-alpha.1"
-+ron = "=0.8.1"
+-ron = "0.10.1"
++ron = "0.8.1"
  varisat = "0.2.2"
  version-ranges = { version = "0.1.0", path = "version-ranges", features = ["proptest"] }
  
-diff --git a/version-ranges/Cargo.toml b/version-ranges/Cargo.toml
-index ffe68d1..7cf5e26 100644
---- a/version-ranges/Cargo.toml
-+++ b/version-ranges/Cargo.toml
-@@ -18,4 +18,4 @@ serde = ["dep:serde", "smallvec/serde"]
+diff -Naur pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/version-ranges/Cargo.toml pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/version-ranges/Cargo.toml
+--- pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/version-ranges/Cargo.toml	2025-04-23 07:43:48.000000000 -0400
++++ pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/version-ranges/Cargo.toml	2025-05-09 07:39:08.042586935 -0400
+@@ -18,4 +18,4 @@
  
  [dev-dependencies]
  proptest = "1.6.0"
--ron = "=0.9.0-alpha.1"
+-ron = "0.10.1"
 +ron = "0.8.1"
-diff --git a/version-ranges/src/lib.rs b/version-ranges/src/lib.rs
-index aac7c94..d28984a 100644
---- a/version-ranges/src/lib.rs
-+++ b/version-ranges/src/lib.rs
-@@ -1210,16 +1210,6 @@ pub mod tests {
+diff -Naur pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/version-ranges/src/lib.rs pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/version-ranges/src/lib.rs
+--- pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e-original/version-ranges/src/lib.rs	2025-04-23 07:43:48.000000000 -0400
++++ pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e/version-ranges/src/lib.rs	2025-05-09 07:38:19.087818274 -0400
+@@ -1210,16 +1210,6 @@
  
      proptest! {
  
@@ -80,6 +60,3 @@ index aac7c94..d28984a 100644
          // Testing negate ----------------------------------
  
          #[test]
--- 
-2.48.1
-
diff --git a/sources b/sources
index 30c0683..46de166 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (uv-0.6.16.tar.gz) = 656114553bf26bde74276fdf9e60cfa83ec6b8d9ada99fb1b210b157c1e847feace0741965c10c8d5d0e3721129d5d7d3860612c944402d4b531af2188ede21e
+SHA512 (uv-0.6.17.tar.gz) = aae465ef02a29a856f4de69230f77d31149c95ed5a88e489b46c34aa61020f29dcf406168abea77626e7d5297b2e004a89445f343e3ee763c297981b0d50233a
 SHA512 (rs-async-zip-c909fda63fcafe4af496a07bfda28a5aae97e58d.tar.gz) = 3a309566f4925b02496fcf19bc2865968edf6fb65082ca4079d2cee79e6b0353a1910c079f2afe656da0d0f6ddde5102052a221ea35a7dabc6d690a11218b20a
-SHA512 (pubgrub-b70cf707aa43f21b32f3a61b8a0889b15032d5c4.tar.gz) = 401ea5ca16e978d5407a1400e4e27cec9fcac11332067ee1ed8a3bc511901e08fc421ce875ebbb0990593ed549a4a5f4620914a71ae3490c7b8ae0f7b26b5937
+SHA512 (pubgrub-a3b4db3abb1829ce889fb89fa6d157fef529ef7e.tar.gz) = 3e434326040445b836bbbb5e3af186a480198cae3d9b3bc78fa1e8c7f78b558ef15de88c6c941d25ada6be80ca7bb5cf1e1c10647b3e991aeb44cb58acccff35
 SHA512 (tl-6e25b2ee2513d75385101a8ff9f591ef51f314ec.tar.gz) = 4abbc4240ed129c92da8d616e27a6df0f24cdc85a0803acfdae588ca91f9e5b8d482e3ac88b2e657ff68917b1b43cef1e7ef3c887f624659b231fa5a13fcae68
diff --git a/uv.spec b/uv.spec
index 1797f01..725221b 100644
--- a/uv.spec
+++ b/uv.spec
@@ -14,7 +14,7 @@
 %bcond it 0
 
 Name:           uv
-Version:        0.6.16
+Version:        0.6.17
 Release:        %autorelease
 Summary:        An extremely fast Python package installer and resolver, written in Rust
 
@@ -161,9 +161,9 @@ Source100:      %{async_zip_git}/archive/%{async_zip_rev}/rs-async-zip-%{async_z
 # We therefore bundle the fork as prescribed in
 #   https://docs.fedoraproject.org/en-US/packaging-guidelines/Rust/#_replacing_git_dependencies
 %global pubgrub_git https://github.com/astral-sh/pubgrub
-%global pubgrub_rev b70cf707aa43f21b32f3a61b8a0889b15032d5c4
-%global pubgrub_baseversion 0.3.0~alpha.1
-%global pubgrub_snapdate 20250202
+%global pubgrub_rev a3b4db3abb1829ce889fb89fa6d157fef529ef7e
+%global pubgrub_baseversion 0.3.0
+%global pubgrub_snapdate 20250423
 %global version_ranges_baseversion 0.1.1
 Source200:      %{pubgrub_git}/archive/%{pubgrub_rev}/pubgrub-%{pubgrub_rev}.tar.gz
 
@@ -221,8 +221,11 @@ Patch102:       https://github.com/Majored/rs-async-zip/pull/153.patch
 #
 # Downstream-only: Revert "feat: ensure successful round-trip of RON (#193)"
 #   This reverts commit 21c6a215432fea9a75b7d15d9a9936af9ccc17cb.
-# We will not be packaging an alpha version of rust-ron. We can adjust this
-# after ron 0.9.x is released.
+#
+# The pubgrub in current uv releases now requests ron 0.10.0, which we have in
+# Fedora and in the EPEL10 leading branch, but which we are prevented from
+# updating without a compat package in EPEL10.0. Therefore, we keep patching uv
+# to use ron 0.8.1 in order to ship uv 0.6.17, the final 0.6.x release.
 Patch200:       0001-Downstream-only-Revert-feat-ensure-successful-round-.patch
 
 # https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval

From 1aa8c07e4a245b9aed8499fa9541b5bc7d51f1ec Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Wed, 24 Sep 2025 07:28:05 +0100
Subject: [PATCH 14/15] Rebuilt with astral-tokio-tar version 0.5.5

- Security fix for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv

From 630b49d2af267dd0c67166df707542d3d1be6854 Mon Sep 17 00:00:00 2001
From: "Benjamin A. Beasley" <code@musicinmybrain.net>
Date: Wed, 22 Oct 2025 11:23:10 +0100
Subject: [PATCH 15/15] Rebuilt with rust-astral-tokio-tar 0.5.6

- Security update for CVE-2025-62518; fixes RHBZ#2405469