Skip to content

uv tool upgrade says "Nothing to upgrade" when index auth is invalid #18120

@shenanigansd

Description

@shenanigansd

Summary

Invalid auth for private indexes cause uv tool upgrade to fail with a misleading "Nothing to upgrade" message, even when a new version is available.

Steps to reproduce:

Authenticate to the private index:

PS C:\Users\BradleyReynolds> $env:CLOUDSMITH_TOKEN="plz-dont-tell-anyone-about-me"

Install the package:

PS C:\Users\BradleyReynolds> uv tool install idi-xio==0.9.0 --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Resolved 25 packages in 1.46s
Prepared 1 package in 59ms
Installed 25 packages in 1.99s
 + annotated-doc==0.0.4
 + annotated-types==0.7.0
 + click==8.3.1
 + colorama==0.4.6
 + idi-xio==0.9.0
 + linkify-it-py==2.0.3
 + markdown-it-py==4.0.0
 + mdit-py-plugins==0.5.0
 + mdurl==0.1.2
 + platformdirs==4.9.2
 + pydantic==2.12.5
 + pydantic-core==2.41.5
 + pydantic-settings==2.13.1
 + pygments==2.19.2
 + python-dotenv==1.2.1
 + rich==14.3.3
 + shellingham==1.5.4
 + textual==8.0.0
 + typer==0.24.0
 + typing-extensions==4.15.0
 + typing-inspection==0.4.2
 + uc-micro-py==1.0.3
 + xio-cli==0.10.0
 + xio-core==0.10.0
 + xio-tui==0.10.0
Installed 1 executable: xio

Artifically break authentication:

PS C:\Users\BradleyReynolds> Remove-Item Env:CLOUDSMITH_TOKEN

Release the constraint from installing an older version to make this MRE:

PS C:\Users\BradleyReynolds> uv tool install idi-xio@latest --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"

Resolved 25 packages in 303ms
Audited 25 packages in 8ms
Installed 1 executable: xio
PS C:\Users\BradleyReynolds> uv tool list
idi-xio v0.9.0
- xio

Now attempting to update gives a misleading "Nothing to upgrade" message, even though v0.10.0 is available:

PS C:\Users\BradleyReynolds> uv tool upgrade idi-xio --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Nothing to upgrade

See, if I put the auth back, suddenly, there are things to upgrade:

PS C:\Users\BradleyReynolds> $env:CLOUDSMITH_TOKEN="plz-dont-tell-anyone-about-me"
PS C:\Users\BradleyReynolds> uv tool upgrade idi-xio --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Updated idi-xio v0.9.0 -> v0.10.0
 - idi-xio==0.9.0
 + idi-xio==0.10.0
Installed 1 executable: xio

Platform

Windows 11 Enterprise 10.0.28000.4

Version

uv 0.10.3

Python version

Python 3.14.3

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions