[1.36.0]
Update uv to 0.11.0
Full Changelog
rustls-platform-verifier is used instead of rustls-native-certs and webpki for certificate verification
This change should have no effect unless you are using the native-tls option to enable reading system certificates.
rustls-platform-verifier delegates to the system for certificate validation (e.g., Security.framework on macOS) instead of eagerly loading certificates from the system and verifying them via webpki. The effects of this change will vary based on the operating system. In general, uv's certificate validation should now be more consistent with browsers and other native applications. However, this is the most likely cause of breaking changes in this release. Some previously failing certificate chains may succeed, and some previously accepted certificate chains may fail. In either case, we expect the validation to be more correct and welcome reports of regressions.
In particular, because more responsibility for validating the certificate is transferred to your system's security library, some features like CA constraints or revocation of certificates via OCSP and CRLs may now be used.
This change should improve performance when using system certificate on macOS, as uv no longer needs to load all certificates from the keychain at startup.
Treat 'Dynamic' values as case-insensitive (#18669)
Use a dedicated error for invalid cache control headers (#18657)
Enable checksum verification in the generated installer script (#18625)
Add --service-format and --service-url to uv audit (#18571)
Find the dynamic linker on the file system when sniffing binaries fails (#18457)
Fix export of conflicting workspace members with dependencies (#18666)
Respect installed settings in uv tool list --outdated (#18586)
