The sdist of flit_core now includes the corresponding tests (:ghpull:704).
These were missing in 3.10.
Version 3.10
flit publish can now use PyPI tokens stored in keyring (:ghpull:649),
either project tokens with a 'username' like
:samp:pypi_token:project:{project_name} (use the normalised form of the name <https://packaging.python.org/en/latest/specifications/name-normalization/>_)
or user tokens (:samp:pypi_token:user:{username}).
The --python option can now take the path of a virtualenv folder, as an
alternative to a Python executable (:ghpull:667).
Flit will work with current development versions of Pythona again (:ghpull:684).
The flit command line package now requires Python 3.8 or above (:ghpulL:660).
flit_core still works with Python 3.6 or above.
The metadata in packages now has the names of optional dependency groups
("extras") normalised, complying with version 2.3 of the metadata standard
(:ghpull:676, :ghpull:697).
The flit command line package now depends on pip (:ghpull:647).
Fix potential substitution of environment variables into passwords read from
.pypirc files (:ghpull:652).
A warning is now shown when building packages which specify the old
flit.buildapi backend, which should be replaced by flit_core.buildapi
(:ghpull:674). It's a good idea to always set a maximum version for the
build requirement, to protect against changes in future major versions of Flit.
Avoid using the deprecated datetime.utcfromtimestamp() (:ghpull:682).
Flit now has a SECURITY.md file in the Github repository (:ghpull:665).
The tests for flit_core are no longer part of the installed package,
reducing the size of the wheels (:ghpull:691).
Version 3.9
New options :option:flit build --use-vcs and :option:flit build --no-use-vcs
to enable & disable including all committed files in the sdist. For now
--use-vcs is the default, but this is likely to change in a future
version, to bring flit build in line with standard build frontends like
python -m build (:ghpull:625).
Sdist file names, and the name of the top-level folder in an sdist, are now
normalised, in accordance with :pep:625 (:ghpull:628).
A statically defined version number can now be parsed from files called
version.py, _version.py or __version__.py inside a package, as well
as from __init__.py, so executing code is required in fewer cases
(:ghpull:630).
Fix setting the flag for regular files in zip metadata (:ghpull:639).
The timestamp embedded in the gzip wrapper for sdists now defaults to a fixed
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @Zeitsperre.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
coverage: 89.398%. remained the same
when pulling 2b03d09619536e50b765dc55f1f0b808b09b16ba on dependabot/pip/python-4d1cd863d2
into e4aca673ffb3e3e5e29d8247e6231b84ae2b8a1c on main.
Bumps the python group with 2 updates: bump-my-version and flit.
Updates
bump-my-version
from 0.28.0 to 0.28.1Release notes
Sourced from bump-my-version's releases.
Changelog
Sourced from bump-my-version's changelog.
Commits
1984ca3
Version updated from 0.28.0 to 0.28.1b719663
Merge pull request #246 from callowayproject/pre-commit-ci-update-config4c896a2
Merge pull request #251 from tvoirand/fix-cli-helpcf65ec2
Fix format arg help text for show command9fb0347
[pre-commit.ci] pre-commit autoupdateefab98d
Merge pull request #248 from ziima/skip-scm-testsf9baa28
Merge branch 'master' into skip-scm-tests09c5605
Merge pull request #247 from ziima/bumpversion-hooks-output2e68517
Skip scm tests if the command is not installed0a042aa
Output hooks scripts by defaultUpdates
flit
from 3.9.0 to 3.10.1Changelog
Sourced from flit's changelog.
... (truncated)
Commits
7cc7d33
Bump version: 3.10.0 → 3.10.185d0003
Add release note for 3.10.1ab4048a
Merge pull request #704 from pypa/flit-core-sdist-testsf6a0989
Include tests in flit_core sdist2ab70a3
Merge pull request #701 from pypa/codecov-token7d09966
Provide token to upload coverage data to codecov8066677
Merge pull request #700 from pypa/win-py3.13-tests34445e9
Better test for absolute Python exe path on Windowsd340f1c
Fix checks for absolute paths in config on Python 3.13 & Windowsc57b101
Ensure CI also runs on tag pushesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @Zeitsperre.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show