Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the build-time-deps group across 1 directory with 4 updates #1036

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 10, 2024

Bumps the build-time-deps group with 4 updates in the /.github/workflows/requirements directory: twine, pip, setuptools and cibuildwheel.

Updates twine from 5.1.0 to 5.1.1

Changelog

Sourced from twine's changelog.

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

  • Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

  • Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

Commits
  • e29791d Prepare for v5.1.1 (#1114)
  • f213ede fix: Retrieve metadata correctly from importlib_metadata (#1115)
  • 6fbf880 Merge pull request #1112 from pypa/bug/1111
  • 3eb9121 Remove extra line from changelog entry
  • 0191f0c Preserve ports when munging repository URLs
  • c588793 Merge pull request #1110 from DimitriPapadopoulos/principle
  • 1fdc197 Fix a couple typos
  • 13b07b6 Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...
  • a3e8373 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • See full diff in compare view

Updates pip from 24.0 to 24.1.2

Changelog

Sourced from pip's changelog.

24.1.2 (2024-07-07)

Bug Fixes

  • Fix finding hardlink targets in tar files with an ignored top-level directory. ([#12781](https://github.com/pypa/pip/issues/12781) <https://github.com/pypa/pip/issues/12781>_)

24.1.1 (2024-06-26)

Bug Fixes

  • Actually use system trust stores when the truststore feature is enabled.

Vendored Libraries

  • Upgrade requests to 2.32.3

24.1 (2024-06-20)

Vendored Libraries

  • Upgrade truststore to 0.9.1.

24.1b2 (2024-06-12)

Features

  • Report informative messages about invalid requirements. ([#12713](https://github.com/pypa/pip/issues/12713) <https://github.com/pypa/pip/issues/12713>_)

Bug Fixes

  • Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. ([#12675](https://github.com/pypa/pip/issues/12675) <https://github.com/pypa/pip/issues/12675>_)
  • Accommodate for mismatches between different sources of truth for extra names, for packages generated by setuptools. ([#12688](https://github.com/pypa/pip/issues/12688) <https://github.com/pypa/pip/issues/12688>_)
  • Accommodate for development versions of CPython ending in + in the version string. ([#12691](https://github.com/pypa/pip/issues/12691) <https://github.com/pypa/pip/issues/12691>_)

Vendored Libraries

  • Upgrade packaging to 24.1

... (truncated)

Commits

Updates setuptools from 70.0.0 to 70.3.0

Changelog

Sourced from setuptools's changelog.

v70.3.0

Features

  • Support for loading distutils from the standard library is now deprecated, including use of SETUPTOOLS_USE_DISTUTILS=stdlib and importing distutils before importing setuptools. (#4137)

Bugfixes

  • pypa/distutils#268

v70.2.0

Features

  • Updated distutils including significant changes to support Cygwin and mingw compilers. (#4444)

Bugfixes

  • Fix distribution name normalisation (:pep:625) for valid versions that are not canonical (e.g. 1.0-2). (#4434)

v70.1.1

Misc

v70.1.0

Features

  • Adopted the bdist_wheel command from the wheel project -- by :user:agronholm (#1386)

  • Improve error message when pkg_resources.ZipProvider tries to extract resources with a missing Egg -- by :user:Avasam

    Added variables and parameter type annotations to pkg_resources to be nearly on par with typeshed.* -- by :user:Avasam

... (truncated)

Commits

Updates cibuildwheel from 2.18.1 to 2.19.2

Release notes

Sourced from cibuildwheel's releases.

Version 2.19.2

  • 🐛 Update manylinux2014 pins to versions that support past-EoL CentOS 7 mirrors. (#1917)
  • 🐛 Support --no-isolation with build[uv] build-frontend. (#1889)
  • 🛠 Provide attestations for releases at https://github.com/pypa/cibuildwheel/attestations. (#1916)
  • 🛠 Provide CPython 3.13.0b3. (#1913)
  • 🛠 Remove some workarounds now that pip 24.1 is available. (#1891, #1892)
  • 📚 Remove nosetest from our docs. (#1821)
  • 📚 Document the macOS ARM workaround for 3.8 on GHA. (#1871)
  • 📚 GitLab CI + macOS is now a supported platform with an example. (#1911)

Version 2.19.1

  • 🐛 Don't require setup-python on GHA for Pyodide (#1868)
  • 🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)
  • 🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)
  • 🛠 Fix a warning in our schema generation script. (#1866)
  • 🛠 Cleaner output on pytest 8-8.2. (#1865)

Version 2.19.0

Release post: https://iscinumpy.dev/post/cibuildwheel-2-19-0/

  • 🌟 Add a Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
  • 🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
  • ✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
  • 🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
  • 🐛 Better determinism for the test environment seeding. (#1835)
  • 🛠 VIRTUAL_ENV variable now set. (#1842)
  • 🛠 Remove a pip<21.3 workaround. (#1842)
  • 🛠 Error handling was refactored to use exceptions. (#1719)
  • 🛠 Hardcoded paths in tests avoided. (#1834)
  • 🛠 Single Python tests made more generic. (#1835)
  • 🛠 Sped up our ci by splitting up emulation tests. (#1839)
Changelog

Sourced from cibuildwheel's changelog.

v2.19.2

  • 🐛 Update manylinux2014 pins to versions that support past-EoL CentOS 7 mirrors. (#1917)
  • 🐛 Support --no-isolation with build[uv] build-frontend. (#1889)
  • 🛠 Provide attestations for releases at https://github.com/pypa/cibuildwheel/attestations. (#1916)
  • 🛠 Provide CPython 3.13.0b3. (#1913)
  • 🛠 Remove some workarounds now that pip 21.1 is available. (#1891, #1892)
  • 📚 Remove nosetest from our docs. (#1821)
  • 📚 Document the macOS ARM workaround for 3.8 on GHA. (#1871)
  • 📚 GitLab CI + macOS is now a supported platform with an example. (#1911)

v2.19.1

  • 🐛 Don't require setup-python on GHA for Pyodide (#1868)
  • 🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)
  • 🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)
  • 🛠 Fix a warning in our schema generation script. (#1866)
  • 🛠 Cleaner output on pytest 8-8.2. (#1865)

v2.19.0

See the release post for more info on new features!

  • 🌟 Add Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
  • 🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
  • ✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
  • 🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
  • 🐛 Better determinism for the test environment seeding. (#1835)
  • 🛠 VIRTUAL_ENV variable now set. (#1842)
  • 🛠 Remove a pip<21.3 workaround. (#1842)
  • 🛠 Error handling was refactored to use exceptions. (#1719)
  • 🛠 Hardcoded paths in tests avoided. (#1834)
  • 🛠 Single Python tests made more generic. (#1835)
  • 🛠 Sped up our ci by splitting up emulation tests. (#1839)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the build-time-deps group with 4 updates in the /.github/workflows/requirements directory: [twine](https://github.com/pypa/twine), [pip](https://github.com/pypa/pip), [setuptools](https://github.com/pypa/setuptools) and [cibuildwheel](https://github.com/pypa/cibuildwheel).


Updates `twine` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@5.1.0...v5.1.1)

Updates `pip` from 24.0 to 24.1.2
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@24.0...24.1.2)

Updates `setuptools` from 70.0.0 to 70.3.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.0.0...v70.3.0)

Updates `cibuildwheel` from 2.18.1 to 2.19.2
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v2.18.1...v2.19.2)

---
updated-dependencies:
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-time-deps
- dependency-name: pip
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-time-deps
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-time-deps
- dependency-name: cibuildwheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-time-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 10, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 1, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/dot-github/workflows/requirements/build-time-deps-f903d5253d branch August 1, 2024 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants