π Add a Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
π Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
β¨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
π Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
π Better determinism for the test environment seeding. (#1835)
See the release post for more info on new features!
π Add Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
π Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
β¨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
π Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
π Better determinism for the test environment seeding. (#1835)
Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)
Fix bug for Repository URLs with auth where the port was lost. When attempting
to prevent printing authentication credentials in URLs provided with username
and password, we did not properly handle the case where the URL also contains
a port (when reconstructing the URL). This is now handled and tested to
ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)
Actually use system trust stores when the truststore feature is enabled.
Vendored Libraries
Upgrade requests to 2.32.3
24.1 (2024-06-20)
Vendored Libraries
Upgrade truststore to 0.9.1.
24.1b2 (2024-06-12)
Features
Report informative messages about invalid requirements. ([#12713](https://github.com/pypa/pip/issues/12713) <https://github.com/pypa/pip/issues/12713>_)
Bug Fixes
Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. ([#12675](https://github.com/pypa/pip/issues/12675) <https://github.com/pypa/pip/issues/12675>_)
Accommodate for mismatches between different sources of truth for extra names, for packages generated by setuptools. ([#12688](https://github.com/pypa/pip/issues/12688) <https://github.com/pypa/pip/issues/12688>_)
Accommodate for development versions of CPython ending in + in the version string. ([#12691](https://github.com/pypa/pip/issues/12691) <https://github.com/pypa/pip/issues/12691>_)
Vendored Libraries
Upgrade packaging to 24.1
Upgrade requests to 2.32.0
Remove vendored colorama
Remove vendored six
Remove vendored webencodings
Remove vendored charset_normalizer
requests provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.
Adopted the bdist_wheel command from the wheel project -- by :user:agronholm (#1386)
Improve error message when pkg_resources.ZipProvider tries to extract resources with a missing Egg -- by :user:Avasam
Added variables and parameter type annotations to pkg_resources to be nearly on par with typeshed.* -- by :user:Avasam
* Excluding TypeVar and overload. Return types are currently inferred. (#4246)
Migrated Setuptools' own config to pyproject.toml (#4310)
Bugfixes
Prevent a TypeError: 'NoneType' object is not callable when shutil_rmtree is called without an onexc parameter on Python<=3.11 -- by :user:Avasam (#4382)
Replace use of mktemp with can_symlink from the stdlib test suite. (#4403)
Improvement for attr: directives in configuration to handle
more edge cases related to complex package_dir. (#4405)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the build-time-deps group in /.github/workflows/requirements with 4 updates: cibuildwheel, twine, pip and setuptools.
Updates
cibuildwheel
from 2.18.1 to 2.19.1Release notes
Sourced from cibuildwheel's releases.
Changelog
Sourced from cibuildwheel's changelog.
Commits
932529c
Bump version: v2.19.170fb1c4
fix: specify full path to non-venv Python (#1881)405a475
[Bot] Update dependencies (#1879)78da7ba
docs: update README.md (#1874)8d86d31
tests: don't print xfails (#1865)89a5cfe
DOC: Fix bug with link (#1870)8d5d84e
fix: accept current Python version if acceptable for Pyodide (#1868)4ada77d
[pre-commit.ci] pre-commit autoupdate (#1869)829441f
fix: warning in generate schema script (#1866)a8d190a
Bump version: v2.19.0Updates
twine
from 5.1.0 to 5.1.1Changelog
Sourced from twine's changelog.
Commits
e29791d
Prepare for v5.1.1 (#1114)f213ede
fix: Retrieve metadata correctly from importlib_metadata (#1115)6fbf880
Merge pull request #1112 from pypa/bug/11113eb9121
Remove extra line from changelog entry0191f0c
Preserve ports when munging repository URLsc588793
Merge pull request #1110 from DimitriPapadopoulos/principle1fdc197
Fix a couple typos13b07b6
Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...a3e8373
build(deps): bump actions/checkout from 4.1.5 to 4.1.6Updates
pip
from 24.0 to 24.1.1Changelog
Sourced from pip's changelog.
... (truncated)
Commits
a432c7f
Bump for releasea1ae982
Update AUTHORS.txt300ed75
Upgrade requests to 2.32.3 (#12784)5c389ec
Split up Windows tests relying on urlunparse behaviour (#12788)00c75c4
Merge pull request #12773 from matthewhughes934/fix-tests-unable-to-cleanup67e2a56
Merge pull request #12783 from pfmoore/rel_doc2a58c20a
Minor release is the quarter number2753c77
Merge pull request #12780 from pfmoore/rel_doc4dd55eb
Document the structure of our release number8cdf797
Fix directories not cleaned up after testUpdates
setuptools
from 70.0.0 to 70.1.1Changelog
Sourced from setuptools's changelog.
Commits
222ebf9
Bump version: 70.1.0 β 70.1.1a66cedc
"Embed" test_bdist_wheel files and execution (#4429)48ce5ed
pkg_resources: Merge@overload
andTypeVar
annotations from typeshed (#4390)11bd24c
Use set instead of True-only dict for non-public names (#4381)82145bc
Merge branch 'main' of https://github.com/pypa/setuptools into typeshed-overl...807d7c1
Move check to _fn2adbd4f
Simplify setuptools owntool.setuptools.packages.find
by using include rule...b4f5a07
Add news fragmentffea3b0
Remove no longer used bdist_wheel_testdata directory61e18ff
Adopt latest change from wheel testDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show