Skip to content

[pull] master from aio-libs:master#544

Merged
pull[bot] merged 3 commits intotj-python:masterfrom
aio-libs:master
Apr 23, 2026
Merged

[pull] master from aio-libs:master#544
pull[bot] merged 3 commits intotj-python:masterfrom
aio-libs:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Apr 23, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot Bot added 3 commits April 23, 2026 11:12
Bumps [build](https://github.com/pypa/build) from 1.4.3 to 1.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/releases">build's
releases</a>.</em></p>
<blockquote>
<h2>1.4.4</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(release): generate consistent CHANGELOG heading levels by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/build/pull/1032">pypa/build#1032</a></li>
<li>docs: move source links by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1034">pypa/build#1034</a></li>
<li>revert: drop PEP 660 change by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1039">pypa/build#1039</a></li>
<li>fix: ignore installed when running pip by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1040">pypa/build#1040</a></li>
<li>fix: revert part of <a
href="https://redirect.github.com/pypa/build/issues/973">#973</a> by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1044">pypa/build#1044</a></li>
<li>chore: report coverage failure lines by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1046">pypa/build#1046</a></li>
<li>tests: fix issue with uv run by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1048">pypa/build#1048</a></li>
<li>docs: reorganize testing docs for copy/paste by <a
href="https://github.com/abitrolly"><code>@​abitrolly</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1043">pypa/build#1043</a></li>
<li>tests: keep environment from leaking in Python 3.15 by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1049">pypa/build#1049</a></li>
<li>docs: fix issue with changelog generation by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/1050">pypa/build#1050</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/build/compare/1.4.3...1.4.4">https://github.com/pypa/build/compare/1.4.3...1.4.4</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's
changelog</a>.</em></p>
<blockquote>
<p>####################
1.4.4 (2026-04-22)
####################</p>
<hr />
<p>Bugfixes</p>
<hr />
<ul>
<li>Fix release pipeline generating <code>CHANGELOG.rst</code> entries
with inconsistent heading levels, which broke <code>sphinx -W</code>
and pinned Read the Docs <code>stable</code> at 1.4.0 - by
:user:<code>gaborbernat</code>. (:issue:<code>1031</code>)</li>
<li>Revert :pr:<code>1039</code> from build 1.4.3, no longer check
direct_url (for now) - by :user:<code>henryiii</code>
(:issue:<code>1039</code>)</li>
<li>Add <code>--ignore-installed</code> to pip install command to
prevent issues with packages already present in the isolated
build environment - by :user:<code>henryiii</code>
(:issue:<code>1037</code>) (:issue:<code>1040</code>)</li>
<li>Partial revert of :pr:<code>973</code>, keeping log messages in one
entry, multiple lines. (:issue:<code>1044</code>)</li>
</ul>
<hr />
<p>Miscellaneous</p>
<hr />
<ul>
<li>:issue:<code>1048</code>, :issue:<code>1049</code></li>
</ul>
<p>####################
1.4.3 (2026-04-10)
####################</p>
<hr />
<p>Features</p>
<hr />
<ul>
<li>Add <code>kind</code> parameter to log messages to separate semantic
and representation - by :user:<code>abitrolly</code>
(:issue:<code>973</code>)</li>
</ul>
<hr />
<p>Bugfixes</p>
<hr />
<ul>
<li>Strip <code>PYTHONPATH</code> from the environment during isolated
builds to prevent host packages from leaking into the build
<ul>
<li>by :user:<code>gaborbernat</code> (:issue:<code>405</code>)</li>
</ul>
</li>
<li>Pass <code>--no-input</code> to pip to prevent hidden credential
prompts that cause hangs, and automatically set
<code>PIP_KEYRING_PROVIDER=subprocess</code> (or
<code>UV_KEYRING_PROVIDER=subprocess</code> for the uv installer) when
the <code>keyring</code>
CLI is on <code>PATH</code> -- by :user:<code>gaborbernat</code>
(:issue:<code>409</code>)</li>
<li><code>check_dependency</code> now reports URL requirements as unmet
instead of silently accepting them when a package with the
same name is installed - by :user:<code>gaborbernat</code>
(:issue:<code>860</code>)</li>
<li>Fix misleading missing dependency error display where transitive
dependency chains showed the top-level package on a
separate line, making it appear as if the top-level package itself was
missing - by :user:<code>gaborbernat</code>
(:issue:<code>875</code>)</li>
<li>Fix towncrier template to generate changelog categories in
definition order - by :user:<code>gaborbernat</code>
(:issue:<code>1007</code>)</li>
<li>Resolve thread-safety races in the build API - by
:user:<code>gaborbernat</code> (:issue:<code>1015</code>)</li>
<li>Validate <code>backend-path</code> entries exist on disk with a
clear error - by :user:<code>gaborbernat</code>
(:issue:<code>1016</code>)</li>
</ul>
<hr />
<p>Miscellaneous</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/build/commit/70666a296c2e5bb7451f5a04eef259f6f943d0de"><code>70666a2</code></a>
chore: prepare for 1.4.4</li>
<li><a
href="https://github.com/pypa/build/commit/653d86586dea8b4e020086a276a15a27ac7bd25d"><code>653d865</code></a>
docs: fix issue with changelog generation (<a
href="https://redirect.github.com/pypa/build/issues/1050">#1050</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/373b9ee171e2f16353365b1a9a02bc408b96ca73"><code>373b9ee</code></a>
tests: keep environment from leaking in Python 3.15 (<a
href="https://redirect.github.com/pypa/build/issues/1049">#1049</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/e37e2ae697f9dde82709affb9356281fc2a9b98b"><code>e37e2ae</code></a>
docs: reorganize testing docs for copy/paste (<a
href="https://redirect.github.com/pypa/build/issues/1043">#1043</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/e9c194ad54413f1923f727ad07c7faf7dff813c0"><code>e9c194a</code></a>
tests: fix issue with uv run (<a
href="https://redirect.github.com/pypa/build/issues/1048">#1048</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/03b7d7032ae636be992c917c67f8efbf99527c62"><code>03b7d70</code></a>
chore: report coverage failure lines (<a
href="https://redirect.github.com/pypa/build/issues/1046">#1046</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/2afa3b59977c7e08dc526f19ab670edf99ce6051"><code>2afa3b5</code></a>
fix: revert part of <a
href="https://redirect.github.com/pypa/build/issues/973">#973</a> (<a
href="https://redirect.github.com/pypa/build/issues/1044">#1044</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/b336f60e8008791b7c492078a0725fdadc5875e8"><code>b336f60</code></a>
pre-commit: bump repositories (<a
href="https://redirect.github.com/pypa/build/issues/1045">#1045</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/6d8039a4503caa2327657eb288c6ce01dabc3eb7"><code>6d8039a</code></a>
fix: ignore installed when running pip (<a
href="https://redirect.github.com/pypa/build/issues/1040">#1040</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/ebf6eba272c732ae7e3136edc78ac2597035edd9"><code>ebf6eba</code></a>
revert: drop PEP 660 change (<a
href="https://redirect.github.com/pypa/build/issues/1039">#1039</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/build/compare/1.4.3...1.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=build&package-manager=pip&previous-version=1.4.3&new-version=1.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.5.1
to 4.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pre-commit/pre-commit/releases">pre-commit's
releases</a>.</em></p>
<blockquote>
<h2>pre-commit v4.6.0</h2>
<h3>Features</h3>
<ul>
<li><code>pre-commit hook-impl</code>: allow <code>--hook-dir</code> to
be missing to enable easier usage with <code>git</code> 2.54+ git hooks.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3662">#3662</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
</ul>
</li>
</ul>
<h3>Fixes</h3>
<ul>
<li><code>pre-commit hook-impl</code>: <code>--hook-type</code> is
required.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3661">#3661</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md">pre-commit's
changelog</a>.</em></p>
<blockquote>
<h1>4.6.0 - 2026-04-21</h1>
<h3>Features</h3>
<ul>
<li><code>pre-commit hook-impl</code>: allow <code>--hook-dir</code> to
be missing to enable easier
usage with <code>git</code> 2.54+ git hooks.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3662">#3662</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
</ul>
</li>
</ul>
<h3>Fixes</h3>
<ul>
<li><code>pre-commit hook-impl</code>: <code>--hook-type</code> is
required.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3661">#3661</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/f35134b05028ec938ac605ae500fdf95462655d3"><code>f35134b</code></a>
v4.6.0</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/2a51ffcb81f6c8ed2e6467913c3343a8800f3ab9"><code>2a51ffc</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3662">#3662</a>
from pre-commit/hook-impl-optional-hook-dir</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/d7dee322abfc765b042f2e3b872aab3c3a867610"><code>d7dee32</code></a>
make --hook-dir optional for hook-impl</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/965aeb1c680e8b526342153547f0ec014484c63d"><code>965aeb1</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3661">#3661</a>
from pre-commit/hook-impl-required</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/2eacc064aa9b5bb33d3a0d84a234b475e34f3096"><code>2eacc06</code></a>
--hook-type is required for hook-impl</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/f5678bf4ac35cffc0ff7174ad85f7fdc2a5c977e"><code>f5678bf</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3657">#3657</a>
from pre-commit/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/054cc5bd6bb1b20faa1eefe09f0de3b68fceee94"><code>054cc5b</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/5c0f3024d2524f6e029a4c333392fd9be9fb27f6"><code>5c0f302</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3652">#3652</a>
from pre-commit/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/a5d91142676630f8130020b35e166e0c0e92b8f4"><code>a5d9114</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/129a1f5ca1eaee0c952a5e7a07faae305c5e15bc"><code>129a1f5</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3641">#3641</a>
from pre-commit/mxr-patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/pre-commit/pre-commit/compare/v4.5.1...v4.6.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [wheel](https://github.com/pypa/wheel) from 0.46.3 to 0.47.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/wheel/releases">wheel's
releases</a>.</em></p>
<blockquote>
<h2>0.47.0</h2>
<ul>
<li>Added the <code>wheel info</code> subcommand to display metadata
about wheel files without unpacking them (<a
href="https://redirect.github.com/pypa/wheel/issues/639">#639</a>)</li>
<li>Fixed <code>WheelFile</code> raising <code>Missing RECORD
file</code> when the wheel filename contains uppercase characters (e.g.
<code>Django-3.2.5.whl</code>) but the <code>.dist-info</code> directory
inside uses normalized lowercase naming (<a
href="https://redirect.github.com/pypa/wheel/issues/411">#411</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/wheel/blob/main/docs/news.rst">wheel's
changelog</a>.</em></p>
<blockquote>
<h1>Release Notes</h1>
<p><strong>0.47.0 (2026-04-22)</strong></p>
<ul>
<li>Added the <code>wheel info</code> subcommand to display metadata
about wheel files without
unpacking them (<code>[#639](pypa/wheel#639)
&lt;https://github.com/pypa/wheel/issues/639&gt;</code>_)</li>
<li>Fixed <code>WheelFile</code> raising <code>Missing RECORD
file</code> when the wheel filename contains
uppercase characters (e.g. <code>Django-3.2.5.whl</code>) but the
<code>.dist-info</code> directory
inside uses normalized lowercase naming
(<code>[#411](pypa/wheel#411)
&lt;https://github.com/pypa/wheel/issues/411&gt;</code>_)</li>
</ul>
<p><strong>0.46.3 (2026-01-22)</strong></p>
<ul>
<li>Fixed <code>ImportError: cannot import name '_setuptools_logging'
from 'wheel'</code> when
installed alongside an old version of setuptools and running the
<code>bdist_wheel</code>
command (<code>[#676](pypa/wheel#676)
&lt;https://github.com/pypa/wheel/issues/676&gt;</code>_)</li>
</ul>
<p><strong>0.46.2 (2026-01-22)</strong></p>
<ul>
<li>Restored the <code>bdist_wheel</code> command for compatibility with
<code>setuptools</code> older than
v70.1</li>
<li>Importing <code>wheel.bdist_wheel</code> now emits a
<code>FutureWarning</code> instead of a
<code>DeprecationWarning</code></li>
<li>Fixed <code>wheel unpack</code> potentially altering the permissions
of files outside of the
destination tree with maliciously crafted wheels (CVE-2026-24049)</li>
</ul>
<p><strong>0.46.1 (2025-04-08)</strong></p>
<ul>
<li>Temporarily restored the <code>wheel.macosx_libfile</code> module
(<code>[#659](pypa/wheel#659)
&lt;https://github.com/pypa/wheel/issues/659&gt;</code>_)</li>
</ul>
<p><strong>0.46.0 (2025-04-03)</strong></p>
<ul>
<li>Dropped support for Python 3.8</li>
<li>Removed the <code>bdist_wheel</code> setuptools command
implementation and entry point.
The <code>wheel.bdist_wheel</code> module is now just an alias to
<code>setuptools.command.bdist_wheel</code>, emitting a deprecation
warning on import.</li>
<li>Removed vendored <code>packaging</code> in favor of a run-time
dependency on it</li>
<li>Made the <code>wheel.metadata</code> module private (with a
deprecation warning if it's
imported</li>
<li>Made the <code>wheel.cli</code> package private (no deprecation
warning)</li>
<li>Fixed an exception when calling the <code>convert</code> command
with an empty description
field</li>
</ul>
<p><strong>0.45.1 (2024-11-23)</strong></p>
<ul>
<li>Fixed pure Python wheels converted from eggs and wininst files
having the ABI tag in
the file name</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/wheel/commit/efd83a750f07a33462ea2eed365fd8dac9e51442"><code>efd83a7</code></a>
Created a new release</li>
<li><a
href="https://github.com/pypa/wheel/commit/bb69216d35588c2a0febc2d9a130727fe6e46ee3"><code>bb69216</code></a>
Reordered the changelog entries</li>
<li><a
href="https://github.com/pypa/wheel/commit/d5a1763ce927618bfa7d82abe334d0d14a93cc37"><code>d5a1763</code></a>
fix(wheelfile): resolve .dist-info path case-insensitively when reading
wheel...</li>
<li><a
href="https://github.com/pypa/wheel/commit/5718957928ece25eb0d1c12023c71dea4fcb5cf9"><code>5718957</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/pypa/wheel/issues/685">#685</a>)</li>
<li><a
href="https://github.com/pypa/wheel/commit/625806845ae5756be3cc0f9d44832c29079c0954"><code>6258068</code></a>
chore: log_level is better than log_cli_level (<a
href="https://redirect.github.com/pypa/wheel/issues/684">#684</a>)</li>
<li><a
href="https://github.com/pypa/wheel/commit/2975debc789682b3a448b134611acc6962a93eb3"><code>2975deb</code></a>
Require tox &gt;= 4.22</li>
<li><a
href="https://github.com/pypa/wheel/commit/47674ba770e5ee72d679b7eb32b558e0c177640d"><code>47674ba</code></a>
chore: add check-sdist to checks (<a
href="https://redirect.github.com/pypa/wheel/issues/681">#681</a>)</li>
<li><a
href="https://github.com/pypa/wheel/commit/56223f6f8dfa8d3d40923f24dcf159204698d7b6"><code>56223f6</code></a>
<code>__package__</code> → <code>__spec__.parent</code> (<a
href="https://redirect.github.com/pypa/wheel/issues/679">#679</a>)</li>
<li><a
href="https://github.com/pypa/wheel/commit/0ce509e02dc3cd1b7b0bdf868482de062b3c21c3"><code>0ce509e</code></a>
Added the wheel info subcommand (<a
href="https://redirect.github.com/pypa/wheel/issues/669">#669</a>)</li>
<li><a
href="https://github.com/pypa/wheel/commit/39039c0f3446c1ed5ec52621e98bc2bad8178a06"><code>39039c0</code></a>
Improved the index page</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/wheel/compare/0.46.3...0.47.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Apr 23, 2026
@pull pull Bot added the ⤵️ pull label Apr 23, 2026
@pull pull Bot merged commit d66e4f6 into tj-python:master Apr 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants