Use email.message instead of cgi as cgi has been deprecated ([#969](https://github.com/pypa/twine/issues/969) <https://github.com/pypa/twine/issues/969>_)
Retry on HTTP status code 502 ([#11843](https://github.com/pypa/pip/issues/11843) <https://github.com/pypa/pip/issues/11843>_)
Automatically use the setuptools PEP 517 build backend when --config-settings is
used for projects without pyproject.toml. ([#11915](https://github.com/pypa/pip/issues/11915) <https://github.com/pypa/pip/issues/11915>_)
Make pip freeze and pip uninstall of legacy editable installs of packages whose name
contains _ compatible with setuptools>=69.0.3. ([#12477](https://github.com/pypa/pip/issues/12477) <https://github.com/pypa/pip/issues/12477>_)
Support per requirement --config-settings for editable installs. ([#12480](https://github.com/pypa/pip/issues/12480) <https://github.com/pypa/pip/issues/12480>_)
Bug Fixes
Optimized usage of --find-links=<path-to-dir>, by only scanning the relevant directory once, only considering file names that are valid wheel or sdist names, and only considering files in the directory that are related to the install. ([#12327](https://github.com/pypa/pip/issues/12327) <https://github.com/pypa/pip/issues/12327>_)
Removed wheel from the [build-system].requires list fallback
that is used when pyproject.toml is absent. ([#12449](https://github.com/pypa/pip/issues/12449) <https://github.com/pypa/pip/issues/12449>_)
Vendored Libraries
Upgrade distlib to 0.3.8
Improved Documentation
Fix explanation of how PIP_CONFIG_FILE works ([#11815](https://github.com/pypa/pip/issues/11815) <https://github.com/pypa/pip/issues/11815>_)
Fix outdated pip install argument description in documentation. ([#12417](https://github.com/pypa/pip/issues/12417) <https://github.com/pypa/pip/issues/12417>_)
Replace some links to PEPs with links to the canonical specifications on the :doc:pypug:index ([#12434](https://github.com/pypa/pip/issues/12434) <https://github.com/pypa/pip/issues/12434>_)
Updated the pyproject.toml document to stop suggesting
to depend on wheel as a build dependency directly. ([#12449](https://github.com/pypa/pip/issues/12449) <https://github.com/pypa/pip/issues/12449>_)
Update supported interpreters in development docs ([#12475](https://github.com/pypa/pip/issues/12475) <https://github.com/pypa/pip/issues/12475>_)
Process
Most project metadata is now defined statically via pip's pyproject.toml file.
Updated and removed obsolete Python < 3.8 code and comments. -- by :user:Avasam (#4096)
Updated pkg_resources to use stdlib importlib.machinery instead of importlib_machinery -- by :user:Avasam (#4097)
Bugfixes
In tests, rely on pytest-home for reusable fixture. (#4072)
Explicitely marked as Protocol and fixed missing self argument in interfaces pkg_resources.IMetadataProvider and pkg_resources.IResourceProvider -- by :user:Avasam (#4144)
Restored expectation that egg-link files would be named with dash separators for compatibility with pip prior to version 24. (#4167)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the build-time-deps group in /.github/workflows/requirements with 3 updates: twine, pip and setuptools.
Updates
twine
from 4.0.2 to 5.0.0Changelog
Sourced from twine's changelog.
Commits
94f810c
Merge pull request #1047 from pypa/new-release09d993a
Update linkcheck_ignore setting for docsab0ed19
Apply 2024 black format407e6cc
Build changelog for 5.0.06644b86
Add missing changelog entriesfe1885f
Merge pull request #1034 from DimitriPapadopoulos/codespell694bdcf
Fix typos found by codespell89ec78c
Merge pull request #1040 from woodruffw-forks/ww/pypi-mandatory-api-tokensb3b363a
tests: lintage6e94d20
tests: more non-PyPI testsUpdates
pip
from 23.3.2 to 24.0Changelog
Sourced from pip's changelog.
Commits
ef78c12
Tweak NEWS.rst6681c02
Bump for releaseef56d47
Update AUTHORS.txt53e5f19
Tweak news before release456db06
Merge pull request #12507 from jeanas/mailmap0b93dfc
Add mailmap entry for@jeanas
c0801ef
Merge pull request #12500 from bdraco/add_502aa930c4
Update src/pip/_internal/network/session.py99a82b7
Merge pull request #12494 from sbidoul/pass-config-settings-to-editable-in-re...ff30ba8
Merge pull request #12501 from VladimirFokow/fix-small-typoUpdates
setuptools
from 69.0.3 to 69.1.1Changelog
Sourced from setuptools's changelog.
Commits
8c45d6e
Bump version: 69.1.0 → 69.1.1367559f
Cleanup withespace in Github issue template5a54d5b
Append arbitrary args instead of prepending (#4217)1719601
Append arbitrary args instead of prepending.a9e7b72
Bump test dependency onpackaging
to 23.2 (#4231)86a2899
Use setup.cfg to specify test dependency on packagingadc8999
PR number to newsfragment73466de
Bump packaging in tests to 23.2569fd7b
Add comments about Python version to bug-report.ymle4cca0e
Remove arbitrary equality operator from bug report template.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show