[agrasth]

• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• The pull request is targeting the master branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....

---

Adds jf uv — a transparent wrapper over the uv CLI with Artifactory credential injection, build-info collection, and full support for all uv subcommands (sync, lock, add, remove, build, publish, run, tree, etc.).

How it works

jf uv <args> behaves identically to uv <args> with two additions:

1. Credential injection — Artifactory index credentials are set as UV_INDEX_* env vars before calling uv, following UV's own auth priority chain (env vars → embedded URL → netrc → jf config)
2. Build-info collection — after the command completes, dependency and artifact information is recorded locally for later publishing via jf rt bp

Typical workflow

jf uv sync    --build-name myapp --build-number $BUILD_NUM   # collect deps
jf uv build   --build-name myapp --build-number $BUILD_NUM   # build wheel/sdist
jf uv publish --build-name myapp --build-number $BUILD_NUM   # upload + record artifacts
jf rt bp myapp $BUILD_NUM                                     # publish build-info

CI/Integration notes

• Fully compatible with UV_INDEX_URL, UV_DEFAULT_INDEX, and UV_INDEX_*_USERNAME/PASSWORD env vars — jf defers to any native auth already present
• [dependency-groups] (PEP 735) and [tool.uv.dev-dependencies] both supported; --no-dev, --only-dev, --group, --only-group, --no-group, --all-groups all respected via uv pip list ground truth
• jf uv run --script <file> collects build-info from the script's own inline dependencies (not the surrounding project)
• Command is marked Hidden: true pending migration of the definition to jfrog-cli-artifactory

Test coverage

Added uv_test.go with integration tests covering: sync/lock/add/remove/build/publish pipelines, all auth methods, virtual/local/remote repo combinations, build-info verification (deps, artifacts, requestedBy chains, sha1/md5), --module, --server-id, --project, dev/group dependency handling, and CI/VCS properties.

[github-actions]

---

🐸 JFrog Frogbot