Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Aug 4, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.3)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot added 5 commits August 4, 2025 15:20
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.32.0 to
20.33.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/releases">virtualenv's
releases</a>.</em></p>
<blockquote>
<h2>20.33.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>release 20.32.0 by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/2908">pypa/virtualenv#2908</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2909">pypa/virtualenv#2909</a></li>
<li>Fix nushell deprecation warnings by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/2910">pypa/virtualenv#2910</a></li>
<li>test: Use <code>@pytest.mark.flaky</code> instead of
<code>@flaky.flaky</code> by <a
href="https://github.com/mgorny"><code>@​mgorny</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2911">pypa/virtualenv#2911</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2912">pypa/virtualenv#2912</a></li>
<li>fix: handle StopIteration in discovery by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2913">pypa/virtualenv#2913</a></li>
<li>fix: Improve symlink check and sysconfig path handling by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2914">pypa/virtualenv#2914</a></li>
<li>docs: Recommend specific python version for virtualenv by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2916">pypa/virtualenv#2916</a></li>
<li>fix: Force UTF-8 encoding for pip subprocess by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2918">pypa/virtualenv#2918</a></li>
<li>fix: Prevent crash on file in PATH during discovery by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2917">pypa/virtualenv#2917</a></li>
<li>fix: <code>--try-first-with</code> was overriding an absolute
<code>--python</code> path by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2921">pypa/virtualenv#2921</a></li>
<li>fix 'Too many open files' error and improve error message by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2922">pypa/virtualenv#2922</a></li>
<li>fix(testing): Prevent logging setup when --help is passed by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2923">pypa/virtualenv#2923</a></li>
<li>fix cache invalidation for PythonInfo by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2925">pypa/virtualenv#2925</a></li>
<li>fix: Update venv redirector detection for Python 3.13 on Windows by
<a href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2920">pypa/virtualenv#2920</a></li>
<li>feat: Add Tcl/Tkinter support by <a
href="https://github.com/esafak"><code>@​esafak</code></a> in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2928">pypa/virtualenv#2928</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/20.32.0...20.33.0">https://github.com/pypa/virtualenv/compare/20.32.0...20.33.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's
changelog</a>.</em></p>
<blockquote>
<h2>v20.33.0 (2025-08-03)</h2>
<p>Features - 20.33.0</p>
<pre><code>- Added support for Tcl and Tkinter. You're welcome.
  Contributed by :user:`esafak`. (:issue:`425`)
<p>Bugfixes - 20.33.0
</code></pre></p>
<ul>
<li>Prevent logging setup when --help is passed, fixing a flaky test.
Contributed by :user:<code>esafak</code>. (:issue:<code>u</code>)</li>
<li>Fix cache invalidation for PythonInfo by hashing
<code>py_info.py</code>.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2467</code>)</li>
<li>When no discovery plugins are found, the application would crash
with a StopIteration.
This change catches the StopIteration and raises a RuntimeError with a
more informative message.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2493</code>)</li>
<li>Stop <code>--try-first-with</code> overriding absolute
<code>--python</code> paths.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2659</code>)</li>
<li>Force UTF-8 encoding for pip download
Contributed by :user:<code>esafak</code>.
(:issue:<code>2780</code>)</li>
<li>Creating a virtual environment on a filesystem without
symlink-support would fail even with <code>--copies</code>
Make <code>fs_supports_symlink</code> perform a real symlink creation
check on all platforms.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2786</code>)</li>
<li>Add a note to the user guide recommending the use of a specific
Python version when creating virtual environments.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2808</code>)</li>
<li>Fix 'Too many open files' error due to a file descriptor leak in
virtualenv's locking mechanism.
Contributed by :user:<code>esafak</code>.
(:issue:<code>2834</code>)</li>
<li>Support renamed Windows venv redirector
(<code>venvlauncher.exe</code> and <code>venvwlauncher.exe</code>) on
Python 3.13
Contributed by :user:<code>esafak</code>.
(:issue:<code>2851</code>)</li>
<li>Resolve Nushell activation script deprecation warnings by
dynamically selecting the <code>--optional</code> flag for Nushell
<code>get</code> command on version 0.106.0 and newer, while retaining
the deprecated <code>-i</code> flag for older versions to maintain
compatibility. Contributed by :user:<code>gaborbernat</code>.
(:issue:<code>2910</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/virtualenv/commit/829e3d21c0c4b200383fdd10bfee3e80db6b0882"><code>829e3d2</code></a>
release 20.33.0</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/3d35fbb6486494d46bd050d225685d53a92b02c0"><code>3d35fbb</code></a>
feat: Add Tcl/Tkinter support (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2928">#2928</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/9872144e6954eaaf1602789b5a1eacb9b0a135b1"><code>9872144</code></a>
fix: Update venv redirector detection for Python 3.13 on Windows (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2920">#2920</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/31eb8b961105b8a54a4bb2b066ba96e9baed7dfc"><code>31eb8b9</code></a>
fix cache invalidation for PythonInfo (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2925">#2925</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/ec1c83e2b3031b3c9fd1e372a3b7f43d0907bb07"><code>ec1c83e</code></a>
fix(testing): Prevent logging setup when --help is passed (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2923">#2923</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/0c847288171bed06ed2c0c2f6d241e7de704ccde"><code>0c84728</code></a>
fix 'Too many open files' error and improve error message (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2922">#2922</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/f264539ffc14cbb313d1c3af041c3af88f7ac867"><code>f264539</code></a>
fix: <code>--try-first-with</code> was overriding an absolute
<code>--python</code> path (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2921">#2921</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/19796cfd76b91f5932c700f3f87362395f1377a0"><code>19796cf</code></a>
fix: Prevent crash on file in PATH during discovery (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2917">#2917</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/01074bc16bd86c85c78138923980b64818149737"><code>01074bc</code></a>
fix: Force UTF-8 encoding for pip subprocess (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2918">#2918</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/fb2ba1ce1853318d06b49bc5add251e3c00f438b"><code>fb2ba1c</code></a>
docs: Recommend specific python version for virtualenv (<a
href="https://redirect.github.com/pypa/virtualenv/issues/2916">#2916</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/virtualenv/compare/20.32.0...20.33.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.32.0&new-version=20.33.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.10.1 to
7.10.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage's
changelog</a>.</em></p>
<blockquote>
<h2>Version 7.10.2 — 2025-08-03</h2>
<ul>
<li>Fix: some code with NOP bytecodes could report missing branches that
are
actually executed. This is now fixed, closing <code>issue 1999</code>_.
Python 3.9
still shows the problem.</li>
</ul>
<p>.. _issue 1999: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/1999">nedbat/coveragepy#1999</a></p>
<p>.. _changes_7-10-1:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nedbat/coveragepy/commit/a8678528d235acb494ba7a2cace5db445a75a85f"><code>a867852</code></a>
docs: sample HTML for 7.10.2</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/e7bfabe1c4d70a3c5d7a5326f43addaa7d3782c3"><code>e7bfabe</code></a>
docs: prep for 7.10.2</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/5dbd736002e1cfe3c69d10435998d0621d629ffb"><code>5dbd736</code></a>
test: this test often borks metacov, retry it</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/b7430fa56d8960646a6fa0269f15df1400b7dd22"><code>b7430fa</code></a>
debug: more convenient run_trace.py</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/e2039d0df6992e14f28079849b206d65a21d43e6"><code>e2039d0</code></a>
refactor: less redundancy in branch_trails</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/c177731d969fec03b0e125aa1e91d9bb2b7f950b"><code>c177731</code></a>
fix: see through nop bytecodes to get the right arcs. <a
href="https://redirect.github.com/nedbat/coveragepy/issues/1999">#1999</a></li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/7a83ab0b9bba903aab56f01f209620ecd190d160"><code>7a83ab0</code></a>
test: don't try to make pth files when invoked from pth <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2011">#2011</a></li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/6d8b091ee7900dc0050f77fa792de0651e0cc6df"><code>6d8b091</code></a>
refactor: remove a commented-out line</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/fc507ad92ea7d779e7213d4103f15152dbe4e4d8"><code>fc507ad</code></a>
test: add a case for an extension-less Python file parse error</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/05a6e8d0d5d5ea616519be432d4be9c4301a6a76"><code>05a6e8d</code></a>
test: no need for skip, we already skip windows</li>
<li>Additional commits viewable in <a
href="https://github.com/nedbat/coveragepy/compare/7.10.1...7.10.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coverage&package-manager=pip&previous-version=7.10.1&new-version=7.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [certifi](https://github.com/certifi/python-certifi) from
2025.7.14 to 2025.8.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/certifi/python-certifi/commit/a97d9ad8f87c382378dddc0b0b33b9770932404e"><code>a97d9ad</code></a>
2025.08.03 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/362">#362</a>)</li>
<li>See full diff in <a
href="https://github.com/certifi/python-certifi/compare/2025.07.14...2025.08.03">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=certifi&package-manager=pip&previous-version=2025.7.14&new-version=2025.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [build](https://github.com/pypa/build) from 1.2.2.post1 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/releases">build's
releases</a>.</em></p>
<blockquote>
<h2>1.3.0</h2>
<ul>
<li>Add <code>--config-json</code> (PR <a
href="https://redirect.github.com/pypa/build/issues/916">#916</a>, fixes
issue <a
href="https://redirect.github.com/pypa/build/issues/900">#900</a>)</li>
<li>Drop Python 3.8 (PR <a
href="https://redirect.github.com/pypa/build/issues/891">#891</a>)</li>
<li>Test on Python 3.14, colorful help on 3.14+ (PR <a
href="https://redirect.github.com/pypa/build/issues/895">#895</a>)</li>
<li>Fix <code>ModuleNotFoundError</code> when <code>pip</code> is not
installed (PR <a
href="https://redirect.github.com/pypa/build/issues/898">#898</a>)</li>
<li>Disable use of <code>pip install --python</code> for debundled pip
(PR <a
href="https://redirect.github.com/pypa/build/issues/861">#861</a>)</li>
<li>Don't pass no-wheel to virtualenv if it would warn (PR <a
href="https://redirect.github.com/pypa/build/issues/892">#892</a>)</li>
<li>Optimize our tests to run faster (PR <a
href="https://redirect.github.com/pypa/build/issues/871">#871</a>, <a
href="https://redirect.github.com/pypa/build/issues/872">#872</a>, <a
href="https://redirect.github.com/pypa/build/issues/738">#738</a>)</li>
<li>Allow running our tests without virtualenv (PR <a
href="https://redirect.github.com/pypa/build/issues/911">#911</a>)</li>
<li>Fix issues in our tests (PR <a
href="https://redirect.github.com/pypa/build/issues/824">#824</a>, <a
href="https://redirect.github.com/pypa/build/issues/918">#918</a>, <a
href="https://redirect.github.com/pypa/build/issues/870">#870</a>, <a
href="https://redirect.github.com/pypa/build/issues/915">#915</a>, <a
href="https://redirect.github.com/pypa/build/issues/862">#862</a>, <a
href="https://redirect.github.com/pypa/build/issues/863">#863</a>, <a
href="https://redirect.github.com/pypa/build/issues/899">#899</a>, <a
href="https://redirect.github.com/pypa/build/issues/896">#896</a>, <a
href="https://redirect.github.com/pypa/build/issues/854">#854</a>)</li>
<li>Use SPDX identifiers for our license metadata (PR <a
href="https://redirect.github.com/pypa/build/issues/914">#914</a>)</li>
<li>Use dependency-groups for our development (PR <a
href="https://redirect.github.com/pypa/build/issues/880">#880</a>)</li>
<li>Mention conda and update uv mention in README/docs (PR <a
href="https://redirect.github.com/pypa/build/issues/842">#842</a>, <a
href="https://redirect.github.com/pypa/build/issues/816">#816</a>, <a
href="https://redirect.github.com/pypa/build/issues/917">#917</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's
changelog</a>.</em></p>
<blockquote>
<h1>1.3.0 (2025-08-01)</h1>
<ul>
<li>Add <code>--config-json</code>
(PR :pr:<code>916</code>, fixes issue :issue:<code>900</code>)</li>
<li>Drop Python 3.8
(PR :pr:<code>891</code>)</li>
<li>Test on Python 3.14, colorful help on 3.14+
(PR :pr:<code>895</code>)</li>
<li>Fix <code>ModuleNotFoundError</code> when <code>pip</code> is not
installed
(PR :pr:<code>898</code>)</li>
<li>Disable use of <code>pip install --python</code> for debundled pip
(PR :pr:<code>861</code>)</li>
<li>Don't pass no-wheel to virtualenv if it would warn
(PR :pr:<code>892</code>)</li>
<li>Optimize our tests to run faster
(PR :pr:<code>871</code>, :pr:<code>872</code>,
:pr:<code>738</code>)</li>
<li>Allow running our tests without virtualenv
(PR :pr:<code>911</code>)</li>
<li>Fix issues in our tests
(PR :pr:<code>824</code>, :pr:<code>918</code>, :pr:<code>870</code>,
:pr:<code>915</code>, :pr:<code>862</code>, :pr:<code>863</code>,
:pr:<code>899</code>, :pr:<code>896</code>, :pr:<code>854</code>)</li>
<li>Use SPDX identifiers for our license metadata
(PR :pr:<code>914</code>)</li>
<li>Use dependency-groups for our development
(PR :pr:<code>880</code>)</li>
<li>Mention conda and update uv mention in README/docs
(PR :pr:<code>842</code>, :pr:<code>816</code>,
:pr:<code>917</code>)</li>
</ul>
<h1>1.2.2 (2024-09-06)</h1>
<ul>
<li>Add editable to <code>builder.get_requries_for_build</code>'s static
types
(PR :pr:<code>764</code>, fixes issue :issue:<code>763</code>)</li>
<li>Include artifact attestations in our release
(PR :pr:<code>782</code>)</li>
<li>Fix typing compatibility with typed <code>pyproject-hooks</code>
(PR :pr:<code>788</code>)</li>
<li>Mark more tests with <code>network</code>
(PR :pr:<code>808</code>)</li>
<li>Add more intersphinx links to docs
(PR :pr:<code>804</code>)</li>
<li>Make <code>uv</code> optional for tests
(PR :pr:<code>807</code> and :pr:<code>813</code>)</li>
</ul>
<h1>1.2.1 (2024-03-28)</h1>
<ul>
<li>Avoid error when terminal width is undetectable on Python &lt; 3.11
(PR :pr:<code>761</code>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/build/commit/60e8752f69178d2b2c3563e9c8fa17aa6e11b12c"><code>60e8752</code></a>
chore: bump to 1.3.0 (<a
href="https://redirect.github.com/pypa/build/issues/919">#919</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/807cfba618bc4f7b13e938ffa395fffd82494383"><code>807cfba</code></a>
feat: add --config-json (<a
href="https://redirect.github.com/pypa/build/issues/916">#916</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/bf54ad04ffe30e7f7847ea0bcbc081b550830950"><code>bf54ad0</code></a>
tests: fix issues with ignore</li>
<li><a
href="https://github.com/pypa/build/commit/53852df8d84d1d17afaa851d4e1cc3754676bb29"><code>53852df</code></a>
docs: uv example</li>
<li><a
href="https://github.com/pypa/build/commit/b983371befe0547b312aba36083b859d923d9bfc"><code>b983371</code></a>
tests: optional virtualenv</li>
<li><a
href="https://github.com/pypa/build/commit/6cd157ad0b614a76a13374032a4f56b65048c0be"><code>6cd157a</code></a>
Adopt PEP 639 &quot;license&quot; field (<a
href="https://redirect.github.com/pypa/build/issues/914">#914</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/bdaea367438b8e5ed3c26a7497eafc007084fbec"><code>bdaea36</code></a>
tests: fixes for errors in CI</li>
<li><a
href="https://github.com/pypa/build/commit/14d6508679e2ddb4a511b4b41e972cb374e9dadb"><code>14d6508</code></a>
pre-commit: bump repositories</li>
<li><a
href="https://github.com/pypa/build/commit/59ac60e78e0dc5164355bd29eb99fb1cb2d7a59c"><code>59ac60e</code></a>
pre-commit: bump repositories</li>
<li><a
href="https://github.com/pypa/build/commit/48ebd63cd7049dff737093c462970262ae1ceed0"><code>48ebd63</code></a>
pre-commit: bump repositories</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/build/compare/1.2.2.post1...1.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=build&package-manager=pip&previous-version=1.2.2.post1&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from
3.1.2 to 3.1.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/cibuildwheel/releases">pypa/cibuildwheel's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.3</h2>
<ul>
<li>🐛 Fix bug where &quot;latest&quot; dependencies couldn't update to
pip 25.2 on Windows (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2537">#2537</a>)</li>
<li>🛠 Use pytest-rerunfailures to improve some of our iOS/Android tests
(<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2527">#2527</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2539">#2539</a>)</li>
<li>🛠 Remove some GraalPy Windows workarounds in our tests (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2501">#2501</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md">pypa/cibuildwheel's
changelog</a>.</em></p>
<blockquote>
<h3>v3.1.3</h3>
<p><em>1 August 2025</em></p>
<ul>
<li>🐛 Fix bug where &quot;latest&quot; dependencies couldn't update to
pip 25.2 on Windows (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2537">#2537</a>)</li>
<li>🛠 Use pytest-rerunfailures to improve some of our iOS/Android tests
(<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2527">#2527</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2539">#2539</a>)</li>
<li>🛠 Remove some GraalPy Windows workarounds in our tests (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2501">#2501</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/352e01339f0a173aa2a3eb57f01492e341e83865"><code>352e013</code></a>
Bump version: v3.1.3</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/c463e56ba22f7f7e6c8871b006a06384c08cff34"><code>c463e56</code></a>
tests: another iOS flaky spot (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2539">#2539</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/8c5c738023fee8aad6412105b42ea798066b1438"><code>8c5c738</code></a>
docs(project): add Falcon to working examples (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2538">#2538</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/feeb3992a7ea36ffbc9d4446debea40f9aa24861"><code>feeb399</code></a>
tests: add flaky test handling (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2527">#2527</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/60b9cc95db51f9f5e48562fcb1b3f7ac3f9cb4a1"><code>60b9cc9</code></a>
fix: never call pip directly (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2537">#2537</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/e2c7102ed7981cd79d28a5eb0a196f8242b1adab"><code>e2c7102</code></a>
chore: remove some GraalPy Windows workarounds. (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2501">#2501</a>)</li>
<li>See full diff in <a
href="https://github.com/pypa/cibuildwheel/compare/v3.1.2...v3.1.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/cibuildwheel&package-manager=github_actions&previous-version=3.1.2&new-version=3.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Aug 4, 2025
@pull pull bot added the ⤵️ pull label Aug 4, 2025
@pull pull bot merged commit 15d2078 into tj-python:master Aug 4, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants