
uv 0.13.7 stops treating workspace paths as globs and merges aliased OSV records
The Python package manager's 3 November release fixes six bugs, including Windows trampolines closing handles they did not inherit, and adds two preview features.

The Python package manager's 3 November release fixes six bugs, including Windows trampolines closing handles they did not inherit, and adds two preview features.
Build 16 is tagged. The targeted list now includes a Simple JSON API in incubator, generational Shenandoah by default, and the deprecation of the macOS/x64 port.
The Rust project warns of an ongoing campaign against maintainers of popular crates. The target is the publish token, not the laptop.
pgAdmin 4 v9.18 closes an authentication bypass and two connection-string injections that redirect the connection, and the exported password, to a host of the caller's choosing.
A process for tracking, investigating and disclosing model behaviour, plus six cases observed over the last six months.