feat: provide uv.package_quirks() for declaring workarounds for bad/odd packages

[jbedard]

---

Changes are visible to end-users: yes/no

• Searched for relevant documentation and updated as needed: yes/no
• Breaking change (forces users to change their own code or config): yes/no
• Suggested release notes appear below: yes/no

Test plan

• Covered by existing test cases
• New test cases added
• Manual testing; please provide instructions so we can reproduce:

[aspect-workflows]

✨ Aspect Workflows Tasks

📅 Wed Aug 19 05:34:24 UTC 2026

✅ 44 successful tasks

• ✅ buildifier · ⏱ 16.6s · 🐙 GitHub Actions · ☑️ Check
  💬 Format complete (clean)
• ✅ gazelle · ⏱ 21.8s · 🐙 GitHub Actions · ☑️ Check
  💬 Gazelle complete (clean)
• ✅ test-e2e-bazel-8 [test] · ⏱ 5m 41s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (302/302 passed)
• ✅ test-e2e-bazel-9 [test] · ⏱ 5m 14s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (292/292 passed)
• ✅ test-e2e-crossbuild-bazel-8 [test] · ⏱ 1m 15s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (10/10 passed)
• ✅ test-e2e-crossbuild-bazel-9 [test] · ⏱ 1m 43s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (10/10 passed)
• ✅ test-e2e-interpreter-build-config-bazel-8 [test] · ⏱ 19.4s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-interpreter-build-config-bazel-9 [test] · ⏱ 34s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-interpreter-input-validation-bazel-8 [test] · ⏱ 16.1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-interpreter-input-validation-bazel-9 [test] · ⏱ 1m · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-interpreter-runtime-metadata-bazel-8 [test] · ⏱ 23.7s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (2/2 passed)
• ✅ test-e2e-interpreter-runtime-metadata-bazel-9 [test] · ⏱ 39.1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (2/2 passed)
• ✅ test-e2e-interpreter-toolchain-settings-bazel-8 [test] · ⏱ 17.4s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-interpreter-toolchain-settings-bazel-9 [test] · ⏱ 30.1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-rules-proto-grpc-python-bazel-8 [test] · ⏱ 1m 59s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-rules-proto-grpc-python-bazel-9 [test] · ⏱ 1m 15s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-e2e-rules-python-interop-bazel-8 [test] · ⏱ 48.9s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (15/15 passed)
• ✅ test-e2e-rules-python-interop-bazel-9 [test] · ⏱ 1m 28s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (15/15 passed)
• ✅ test-e2e-rules-python-provider-compat-bazel-8 [test] · ⏱ 23.5s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (4/4 passed)
• ✅ test-e2e-rules-python-provider-compat-bazel-9 [test] · ⏱ 2m · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (4/4 passed)
• ✅ test-examples-debugger-bazel-8 [test] · ⏱ 27.6s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-debugger-bazel-9 [test] · ⏱ 47.8s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-dev_deps-bazel-8 [test] · ⏱ 32.5s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-dev_deps-bazel-9 [test] · ⏱ 1m 3s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-django-bazel-8 [test] · ⏱ 20.1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-django-bazel-9 [test] · ⏱ 45.7s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-multi_version-bazel-8 [test] · ⏱ 25s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (2/2 passed)
• ✅ test-examples-multi_version-bazel-9 [test] · ⏱ 1m 1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (2/2 passed)
• ✅ test-examples-protobuf-bazel-8 [test] · ⏱ 1m 41s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-protobuf-bazel-9 [test] · ⏱ 2m 6s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-py_binary-bazel-8 [test] · ⏱ 19.4s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-py_binary-bazel-9 [test] · ⏱ 53.7s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-py_pex_binary-bazel-8 [test] · ⏱ 28.3s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-py_pex_binary-bazel-9 [test] · ⏱ 1m 12s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed · 1 cached)
• ✅ test-examples-py_venv-bazel-8 [test] · ⏱ 26.6s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (3/3 passed)
• ✅ test-examples-py_venv-bazel-9 [test] · ⏱ 1m 19s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (3/3 passed)
• ✅ test-examples-pytest-bazel-8 [test] · ⏱ 44s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (11/11 passed)
• ✅ test-examples-pytest-bazel-9 [test] · ⏱ 1m 21s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (11/11 passed)
• ✅ test-examples-uv_pip_compile-bazel-8 [test] · ⏱ 28s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-uv_pip_compile-bazel-9 [test] · ⏱ 54.8s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-virtual_deps-bazel-8 [test] · ⏱ 26.6s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-examples-virtual_deps-bazel-9 [test] · ⏱ 43.2s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (1/1 passed)
• ✅ test-root-bazel-8 [test] · ⏱ 3m 1s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (301/301 passed)
• ✅ test-root-bazel-9 [test] · ⏱ 3m 3s · 🐙 GitHub Actions · ☑️ Check
  💬 Bazel test complete (300/300 passed)

---

_{⏱ Last updated Wed Aug 19 05:40:49 UTC 2026 · 📊 GitHub API quota 1,552/15,000 (10% used, resets in 49m)
🚀 Powered by Aspect CLI (v2026.28.2)  |  Aspect Build · X · LinkedIn · YouTube}

[github-actions]

py_binary startup benchmark

Version	Mean (ms)	Median (ms)	± stddev	vs BCR	vs main	Build (s)
BCR 1.11.7 (baseline)	112.207	109.644	±9.813	—	—	1.44
HEAD main	39.680	39.707	±0.745	-63.8%	—	1.83
This PR	39.442	39.435	±0.257	-64.0%	-0.7%	1.38

Measured with hyperfine --warmup 5 --runs 50 --shell=none on Linux
Gate: PR vs HEAD main median (threshold: 10%, and must exceed the 2×SE noise floor, here 0.6%). BCR is shown only as a historical baseline.
Build time: cold bazel build //:bench with isolated output base, no disk cache; external repos prefetched so network is excluded.

sys.path quality

Version	sys.path entries	distinct site-packages roots	duplicate realpaths
BCR 1.11.7 (baseline)	6	1	0
HEAD main	7	2	0
This PR	7	2	0

sys.path quality measured by bench_syspath inside the assembled venv. Duplicate realpaths indicate symlink redundancy; many distinct site-packages roots suggest an inefficient venv layout.

Bazel analysis benchmark

Version	Mean (ms)	Median (ms)	± stddev	vs BCR	vs main	Targets	Actions
BCR 2.0.0-alpha.6 (baseline)	1250.103	1210.231	±232.503	—	—	304	13746
HEAD main	1201.179	1097.235	±243.581	-9.3%	—	304	13546
This PR	1248.091	1178.734	±230.758	-2.6%	+7.4%	304	13546

Measured with hyperfine --warmup 1 --runs 10 on Linux
Gate: PR vs HEAD main median (threshold: 10%, and must exceed the 2×SE noise floor, here 19.3%). BCR is shown only as a historical baseline.
Command: warm-server bazel build --nobuild //workspace/..., analysis cache discarded each run via a fresh --action_env value; no disk cache.

py_image_layer benchmark

Scenario	Version	Mean (s)	Median (s)	± stddev	Actions	vs BCR	vs main
Analysis	BCR 2.0.0-alpha.6 (baseline)	0.78	0.71	±0.14	747	—	—
Analysis	HEAD main	0.77	0.73	±0.15	725	+2.8%	—
Analysis	This PR	0.76	0.73	±0.14	725	+2.9%	+0.2%
1p Source Change	BCR 2.0.0-alpha.6 (baseline)	0.76	0.74	±0.05	4	—	—
1p Source Change	HEAD main	0.74	0.73	±0.05	4	-1.5%	—
1p Source Change	This PR	0.75	0.74	±0.04	4	-0.1%	+1.3%
3p Source Change	BCR 2.0.0-alpha.6 (baseline)	0.89	0.88	±0.04	5	—	—
3p Source Change	HEAD main	0.90	0.89	±0.04	5	+1.2%	—
3p Source Change	This PR	0.90	0.90	±0.02	5	+2.1%	+0.9%

Measured with hyperfine on Linux, building //workspace:image_layers (10 binaries, ~30-wheel dep pool, grouped first-party/pip/interpreter tier) with isolated output base, no disk cache.
Scenarios: analysis = warm-server bazel build --nobuild, re-analyzed each run via a fresh --action_env value; incrementals run against a built state with warm analysis: source = append to the last package's lib.py, wheel = rewrite click post_install_patches content.
Actions: for Analysis, the total action count behind the image target from aquery deps(...); for incrementals, actions re-executed for the mutation, from a single instrumented run's BEP build metrics (deterministic; per-mnemonic breakdown in the *-actions.json artifacts). Informational only, not gated.
Gate: PR vs HEAD main median per scenario (threshold: 10%, and must exceed the 2×SE noise floor). BCR is shown only as a historical baseline.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: eb90e7a3-e038-4c06-a4f5-bfa56275af06

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}