Skip to content

uv tool upgrade says "Nothing to upgrade" when index auth is invalid #18120

@shenanigansd

Description

@shenanigansd

Summary

Invalid auth for private indexes cause uv tool upgrade to fail with a misleading "Nothing to upgrade" message, even when a new version is available.

Steps to reproduce:

Authenticate to the private index:

PS C:\Users\BradleyReynolds> $env:CLOUDSMITH_TOKEN="plz-dont-tell-anyone-about-me"

Install the package:

PS C:\Users\BradleyReynolds> uv tool install idi-xio==0.9.0 --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Resolved 25 packages in 1.46s
Prepared 1 package in 59ms
Installed 25 packages in 1.99s
 + annotated-doc==0.0.4
 + annotated-types==0.7.0
 + click==8.3.1
 + colorama==0.4.6
 + idi-xio==0.9.0
 + linkify-it-py==2.0.3
 + markdown-it-py==4.0.0
 + mdit-py-plugins==0.5.0
 + mdurl==0.1.2
 + platformdirs==4.9.2
 + pydantic==2.12.5
 + pydantic-core==2.41.5
 + pydantic-settings==2.13.1
 + pygments==2.19.2
 + python-dotenv==1.2.1
 + rich==14.3.3
 + shellingham==1.5.4
 + textual==8.0.0
 + typer==0.24.0
 + typing-extensions==4.15.0
 + typing-inspection==0.4.2
 + uc-micro-py==1.0.3
 + xio-cli==0.10.0
 + xio-core==0.10.0
 + xio-tui==0.10.0
Installed 1 executable: xio

Artifically break authentication:

PS C:\Users\BradleyReynolds> Remove-Item Env:CLOUDSMITH_TOKEN

Release the constraint from installing an older version to make this MRE:

PS C:\Users\BradleyReynolds> uv tool install idi-xio@latest --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"

Resolved 25 packages in 303ms
Audited 25 packages in 8ms
Installed 1 executable: xio
PS C:\Users\BradleyReynolds> uv tool list
idi-xio v0.9.0
- xio

Now attempting to update gives a misleading "Nothing to upgrade" message, even though v0.10.0 is available:

PS C:\Users\BradleyReynolds> uv tool upgrade idi-xio --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Nothing to upgrade

See, if I put the auth back, suddenly, there are things to upgrade:

PS C:\Users\BradleyReynolds> $env:CLOUDSMITH_TOKEN="plz-dont-tell-anyone-about-me"
PS C:\Users\BradleyReynolds> uv tool upgrade idi-xio --index-url "https://dl.cloudsmith.io/$env:CLOUDSMITH_TOKEN/impressdesigns/impressdesigns/python/simple/" --extra-index-url "https://pypi.org/simple"
Updated idi-xio v0.9.0 -> v0.10.0
 - idi-xio==0.9.0
 + idi-xio==0.10.0
Installed 1 executable: xio

Platform

Windows 11 Enterprise 10.0.28000.4

Version

uv 0.10.3

Python version

Python 3.14.3

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions