Remove xz entirely

Signed-off-by: William Woodruff <william@astral.sh>

Update docs to reflect removal of xz

Signed-off-by: William Woodruff <william@astral.sh>

Undo boxcar change

Signed-off-by: William Woodruff <william@astral.sh>

Author: woodruffw

Cargo.lock

@@ -100,7 +100,6 @@ async-channel = { version = "2.3.1" }
 async-compression = { version = "0.4.12", features = [
   "bzip2",
   "gzip",
-  "xz",
   "zstd",
 ] }
 async-trait = { version = "0.1.82" }
@@ -301,7 +300,6 @@ windows-registry = { version = "0.5.0" }
 windows-version = { version = "0.1.6" }
 wiremock = { version = "0.6.4" }
 wmi = { version = "0.18.3", default-features = false }
-xz2 = { version = "0.1.7", features = ["static"] }
 zeroize = { version = "1.8.1" }
 zip = { version = "8.1.0", default-features = false, features = [
   "deflate",

Cargo.toml

@@ -49,6 +49,3 @@ tokio = { workspace = true }
 
 [package.metadata.cargo-shear]
 ignored = ["uv-extract"]
-
-[features]
-static = ["uv-extract/static"]

crates/uv-bench/Cargo.toml

@@ -72,7 +72,7 @@ name = "uv-dev"
 required-features = ["dev"]
 
 [features]
-default = ["performance", "uv-extract/static"]
+default = ["performance"]
 # Actually build the dev CLI.
 dev = []
 performance = ["performance-memory-allocator"]

crates/uv-dev/Cargo.toml

@@ -68,4 +68,3 @@ insta = { workspace = true }
 
 [features]
 default = []
-static = ["uv-extract/static"]

crates/uv-distribution/Cargo.toml

@@ -22,7 +22,7 @@ uv-pypi-types = { workspace = true }
 uv-static = { workspace = true }
 
 astral-tokio-tar = { workspace = true }
-async-compression = { workspace = true, features = ["bzip2", "gzip", "zstd", "xz"] }
+async-compression = { workspace = true, features = ["bzip2", "gzip", "zstd"] }
 async_zip = { workspace = true }
 blake2 = { workspace = true }
 fs-err = { workspace = true, features = ["tokio"] }
@@ -38,14 +38,8 @@ thiserror = { workspace = true }
 tokio = { workspace = true }
 tokio-util = { workspace = true, features = ["compat"] }
 tracing = { workspace = true }
-xz2 = { workspace = true }
 zip = { workspace = true }
 zstd = { workspace = true }
 
 [features]
 default = []
-# Avoid a liblzma.so dependency
-static = ["xz2/static"]
-
-[package.metadata.cargo-shear]
-ignored = ["xz2"]

crates/uv-extract/Cargo.toml

@@ -769,30 +769,6 @@ pub fn untar_zst_file<R: std::io::Read>(
     Ok(files)
 }
 
-/// Unpack a `.tar.xz` archive into the target directory, without requiring `Seek`.
-///
-/// This is useful for unpacking files as they're being downloaded.
-///
-/// Returns the list of unpacked files and their sizes.
-pub async fn untar_xz<R: tokio::io::AsyncRead + Unpin>(
-    reader: R,
-    target: impl AsRef<Path>,
-) -> Result<Vec<(PathBuf, u64)>, Error> {
-    let reader = tokio::io::BufReader::with_capacity(DEFAULT_BUF_SIZE, reader);
-    let mut decompressed_bytes = async_compression::tokio::bufread::XzDecoder::new(reader);
-
-    let archive = tokio_tar::ArchiveBuilder::new(
-        &mut decompressed_bytes as &mut (dyn tokio::io::AsyncRead + Unpin),
-    )
-    .set_preserve_mtime(false)
-    .set_preserve_permissions(false)
-    .set_allow_external_symlinks(false)
-    .build();
-    untar_in(archive, target.as_ref())
-        .await
-        .map_err(Error::io_or_compression)
-}
-
 /// Unpack a `.tar` archive into the target directory, without requiring `Seek`.
 ///
 /// This is useful for unpacking files as they're being downloaded.
@@ -815,7 +791,7 @@ pub async fn untar<R: tokio::io::AsyncRead + Unpin>(
         .map_err(Error::io_or_compression)
 }
 
-/// Unpack a `.zip`, `.tar.gz`, `.tar.bz2`, `.tar.zst`, or `.tar.xz` archive into the target directory,
+/// Unpack a `.zip`, `.tar.gz`, `.tar.bz2`, or `.tar.zst` archive into the target directory,
 /// without requiring `Seek`.
 ///
 /// Returns the list of unpacked files and their sizes.
@@ -829,11 +805,7 @@ pub async fn archive<R: tokio::io::AsyncRead + Unpin>(
         SourceDistExtension::Tar => untar(reader, target).await,
         SourceDistExtension::Tgz | SourceDistExtension::TarGz => untar_gz(reader, target).await,
         SourceDistExtension::Tbz | SourceDistExtension::TarBz2 => untar_bz2(reader, target).await,
-        SourceDistExtension::Txz
-        | SourceDistExtension::TarXz
-        | SourceDistExtension::Tlz
-        | SourceDistExtension::TarLz
-        | SourceDistExtension::TarLzma => untar_xz(reader, target).await,
         SourceDistExtension::TarZst => untar_zst(reader, target).await,
+        _ => Err(Error::UnsupportedCompression),
     }
 }

crates/uv-extract/src/stream.rs

@@ -160,7 +160,7 @@ nix = { workspace = true }
 uv-unix = { workspace = true }
 
 [features]
-default = ["performance", "uv-distribution/static", "test-defaults"]
+default = ["performance", "test-defaults"]
 native-auth = []
 # Use better memory allocators, etc.
 performance = ["performance-memory-allocator"]

crates/uv/Cargo.toml

@@ -806,27 +806,13 @@ exclude-newer-package = { setuptools = "30 days" }
 
 [PEP 625](https://peps.python.org/pep-0625/) specifies that packages must distribute source
 distributions as gzip tarball (`.tar.gz`) archives. Prior to this specification, other archive
-formats, which need to be supported for backward compatibility, were also allowed. uv supports
-reading and extracting archives in the following formats:
-
-- gzip tarball (`.tar.gz`, `.tgz`)
-- bzip2 tarball (`.tar.bz2`, `.tbz`)
-- xz tarball (`.tar.xz`, `.txz`)
-- zstd tarball (`.tar.zst`)
-- lzip tarball (`.tar.lz`)
-- lzma tarball (`.tar.lzma`)
-- zip (`.zip`)
+formats, which need to be supported for backward compatibility, were also allowed.
 
 !!! important
 
-    Using source distribution extensions other than `.tar.gz` is strongly
-    discouraged, as these extensions are not widely or consistently
-    supported across the Python packaging ecosystem.
-
-!!! warning "Deprecated"
-
-    Support for source distribution extensions other than `.tar.gz` is
-    deprecated and will be removed in a future release of uv.
+    As of 0.12, uv rejects source distributions that do not confirm to
+    [PEP 625]'s naming requirements with the exception of `.zip` archives,
+    which are still accepted for backward compatibility.
 
 ## Lockfile versioning