fix(executable): stricter regex for uv/uvx/uv tool run

Author: Jkhall81

crates/ruff_linter/resources/test/fixtures/flake8_executable/EXE003_uv.py

@@ -1,5 +1,17 @@
 #!/usr/bin/env -S uv run
 print("hello world")
 
-#!/usr/bin/env uv --quiet run
 #!/usr/bin/env uv --offline run
+print("offline")
+
+#!/usr/bin/env uvx
+print("uvx")
+
+#!/usr/bin/env uv tool run
+print("uv tool")
+
+#!/usr/bin/env uvx --quiet
+print("uvx quiet")
+
+#!/usr/bin/env uv_not_really_run
+print("this should fail")

crates/ruff_linter/src/rules/flake8_executable/rules/shebang_missing_python.rs

@@ -1,11 +1,30 @@
-use ruff_text_size::TextRange;
+use std::sync::LazyLock;
 
+use regex::Regex;
 use ruff_macros::{ViolationMetadata, derive_message_formats};
+use ruff_text_size::TextRange;
 
 use crate::Violation;
 use crate::checkers::ast::LintContext;
 use crate::comments::shebang::ShebangDirective;
 
+static UV_RUN_REGEX: LazyLock<Regex> = LazyLock::new(|| {
+    Regex::new(
+        r"(?x)
+        \b
+        (?:
+            # Part A: uv or uv tool (these MUST be followed by run)
+            (?:uv|uv\s+tool) \s+ (?:--?[a-zA-Z][\w-]*(?:[=\s]\S+)?\s+)* run
+            |
+            # Part B: uvx (stands alone, run is optional/redundant)
+            uvx (?: \s+ .* )?
+        )
+        \b
+    ",
+    )
+    .unwrap()
+});
+
 /// ## What it does
 /// Checks for a shebang directive in `.py` files that does not contain `python`,
 /// `pytest`, or `uv run`.
@@ -48,12 +67,7 @@ pub(crate) fn shebang_missing_python(
     shebang: &ShebangDirective,
     context: &LintContext,
 ) {
-    if shebang.contains("python")
-        || shebang.contains("pytest")
-        || (shebang.contains("uv") && shebang.contains("run"))
-        || shebang.contains("uvx")
-        || shebang.contains("uv tool run")
-    {
+    if shebang.contains("python") || shebang.contains("pytest") || UV_RUN_REGEX.is_match(shebang) {
         return;
     }
 

crates/ruff_linter/src/rules/flake8_executable/snapshots/ruff_linter__rules__flake8_executable__tests__EXE003_uv.py.snap

@@ -1,4 +1,12 @@
 ---
 source: crates/ruff_linter/src/rules/flake8_executable/mod.rs
 ---
-
+EXE003 Shebang should contain `python`, `pytest`, or `uv run`
+  --> EXE003_uv.py:16:1
+   |
+14 | print("uvx quiet")
+15 |
+16 | #!/usr/bin/env uv_not_really_run
+   | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+17 | print("this should fail")
+   |