Deprecated support for empty usernames. Now all backends will reject an empty string as input for the 'username' field when setting a password. Later this deprecation will become a more visible user warning and even later an error. If this warning is triggered in your environment, please consider using a static value (even 'username') or comment in the issue and describe the use-case that demands support for empty usernames. (#668)
This is a fairly large update. Mostly an accumulation of small fixes and enhancements. Nothing qualifies as a *breaking change (for some definition), but there may be some subtly changes to output. Check below for anything that might affect you!
[13.8.0] - 2024-08-26
Fixed
Fixed Table rendering of box elements so "footer" elements truly appear at bottom of table, "mid" elements in main table body.
Remove abc.ABCMeta metaclass from abstract classes. pypa/setuptools#4503 <https://github.com/pypa/setuptools/pull/4503>_ had an unintended consequence of causing potential TypeError: metaclass conflict: the metaclass of a derived class must be a (non-strict) subclass of the metaclasses of all its bases -- by :user:Avasam (#4579)
v73.0.0
Features
Mark abstract base classes and methods with abc.ABC and abc.abstractmethod -- by :user:Avasam (#4503)
Changed the order of type checks in setuptools.command.easy_install.CommandSpec.from_param to support any collections.abc.Iterable of str param -- by :user:Avasam (#4505)
Bugfixes
Prevent an error in bdist_wheel if compression is set to a str (even if valid) after finalizing options but before running the command. -- by :user:Avasam (#4383)
Raises an exception when py_limited_api is used in a build with
Py_GIL_DISABLEDpython/cpython#111506#4420)
pypa/distutils#284
Deprecations and Removals
setuptools is replacing the usages of :pypi:ordered_set with simple
instances of dict[Hashable, None]. This is done to remove the extra
dependency and it is possible because since Python 3.7, dict maintain
insertion order. (#4574)
Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)
Fix bug for Repository URLs with auth where the port was lost. When attempting
to prevent printing authentication credentials in URLs provided with username
and password, we did not properly handle the case where the URL also contains
a port (when reconstructing the URL). This is now handled and tested to
ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the python-packages group with 13 updates in the / directory:
24.4.2
24.8.0
7.1.0
7.1.1
3.7
3.8
7.2.1
8.4.0
25.2.1
25.3.0
10.3.0
10.4.0
2.12.0
2.12.1
43.0
44.0
13.7.1
13.8.0
70.1.1
73.0.1
4.66.4
4.66.5
5.1.0
5.1.1
3.19.2
3.20.1
Updates
black
from 24.4.2 to 24.8.0Release notes
Sourced from black's releases.
Changelog
Sourced from black's changelog.
Commits
b965c2a
Prepare release 24.8.0 (#4426)9ccf279
Documentfind_project_root
ignoringpyproject.toml
without[tool.black]
...14b6e61
fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)b1c4dd9
fix: respect braces better in f-string parsing (#4422)4b4ae43
Fix incorrect linenos on fstring tokens with escaped newlines (#4423)7fa1faf
docs: fix the installation command of extra for blackd (#4413)8827acc
Bump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)b0da11d
Bump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)721dff5
fix: avoid formatting backslash strings inside f-strings (#4401)7e2afc9
Updateactions/checkout
to v4 to stop node deprecation warnings (#4379)Updates
flake8
from 7.1.0 to 7.1.1Commits
cf1542c
Release 7.1.1939ea3d
Merge pull request #1949 from stephenfin/issue-1948bdcd5c2
Handle escaped braces in f-strings2a811cc
Merge pull request #1946 from Viicos/patch-110314ad
Fix wording of plugins documentationUpdates
idna
from 3.7 to 3.8Release notes
Sourced from idna's releases.
Changelog
Sourced from idna's changelog.
Commits
784c6f4
Release v3.828c7c9e
Typo fixa2b41c3
Pin remainder of Github Actions flagged in code scanning1f613c5
More Github Action dependency pinninga87e2b6
Update OSSF scorecard to latest version12d4dd1
Merge pull request #182 from kjd/github-pypi-actionse1a1541
Pin Github Actions dependenciesc109d3a
Merge branch 'master' into github-pypi-actionsf8a8de4
Do not try to build/send packages to TestPyPI for now613bdde
Update regexp to move global flag to start of expressionUpdates
importlib-metadata
from 7.2.1 to 8.4.0Changelog
Sourced from importlib-metadata's changelog.
Commits
1616cb3
Finalize71b4678
Add news fragment.ebcdcfd
Remove workaround for python/typeshed#10328.2c43cfe
Merge pull request #499 from danielhollas/defer-inspecta7aaf72
Use third-person imperative voice and link to issue in comment.e99c105
Restore single-expression logic.debb516
Don't use global var3c8e1ec
Finalize5035755
Merge pull request #498 from python/feature/entry-points-disallow-dist-match6d9b766
Remove MetadataPathFinder regardless of its position.Updates
keyring
from 25.2.1 to 25.3.0Changelog
Sourced from keyring's changelog.
Commits
30eecb9
Finalize2d484ee
Merge pull request #687 from jaraco/668-empty-user8b3fb17
Add news fragment.53ca9cc
When constructing KeyringBackend subclasses, wrap set_password to enforce non...1877402
Extract method for registration.a13a477
Deprecate setting a password for an empty username.b1b6094
Merge https://github.com/jaraco/skeletonab34814
Re-enable preview, this time not for one specific feature, but for all featur...a50407d
Merge https://github.com/jaraco/skeleton30f940e
jaraco/skeleton#132
Updates
more-itertools
from 10.3.0 to 10.4.0Release notes
Sourced from more-itertools's releases.
Commits
935db91
Add missing creditdab9518
Bump version to 10.4.08256ce3
Merge pull request #893 from more-itertools/version-10.4.08c28b61
Update broken linkeb26512
Issue 894: ilen beautification537f0b5
Updates for version 10.4.02ff5c5a
Merge pull request #892 from Pandede/add-strict-to-sort-together1d35f28
fix lintingfec25b6
add more testcasesd942faa
usezip_equals
insteadUpdates
pycodestyle
from 2.12.0 to 2.12.1Changelog
Sourced from pycodestyle's changelog.
Commits
5cff01b
Release 2.12.1c464ef7
Merge pull request #1252 from PyCQA/fstring-tokens37c9f60
adjust logical line for FSTRING_MIDDLE brace escaping915d771
Merge pull request #1251 from PyCQA/pre-commit-ci-update-config28aeabb
[pre-commit.ci] pre-commit autoupdateee85b58
Merge pull request #1249 from PyCQA/pre-commit-ci-update-config1e654ee
[pre-commit.ci] pre-commit autoupdateUpdates
readme-renderer
from 43.0 to 44.0Release notes
Sourced from readme-renderer's releases.
Changelog
Sourced from readme-renderer's changelog.
Commits
1d0497c
Release 44 (#316)09620a6
Lazy open output files, and always close them (#314)6061b3e
Exclude .gitpod.yml by default with check-manifest (#307)749204b
Update .gitpod.yml to replace deprecated extension (#306)e84ded1
Build a wheel once, for all test environments (#308)b447d5d
Lint specific directories (#312)0817204
Resolve Node 16 deprecation warnings in CI (#309)fefd285
Support newer docutils versions (#315)Updates
rich
from 13.7.1 to 13.8.0Release notes
Sourced from rich's releases.
Changelog
Sourced from rich's changelog.
Commits
9ec4191
Merge pull request #3473 from Textualize/bump13809c74f03
bump to v13.8.0dc7a195
Merge pull request #3472 from Textualize/fix-bad-dataclassc938830
changelog6055e2d
fix for missing field in dataclassb6f2f7a
Merge pull request #3454 from subrat-lima/masterb1397be
Merge pull request #3455 from jjhelmus/dataclasses_3.13035f3ea
Merge pull request #3452 from sbraz/typos_examplesd6abebd
Merge branch 'master' into dataclasses_3.131b2dada
Merge pull request #3471 from Textualize/fix-append-tokensUpdates
setuptools
from 70.1.1 to 73.0.1Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
ebddeb3
Bump version: 73.0.0 → 73.0.118963fb
Merge pull request #4580 from Avasam/no-ABCMetab7ee00d
Remove ABCMeta metaclass, keep abstractmethods477f713
Override distribution attribute type in all distutils-based commands (#4577)429ac58
Override distribution attribute type in all distutils-based commands4147b09
Bump version: 72.2.0 → 73.0.02ad8c10
Merge pull request #4576 from pypa/bugfix/distutils-2848afe0c3
Merge pull request #4574 from abravalheri/ordered_setad611bc
Merge https://github.com/pypa/distutils into bugfix/distutils-28430b7331
Ensure a missing target is still indicated as 'sources are newer' even when t...Updates
tqdm
from 4.66.4 to 4.66.5Release notes
Sourced from tqdm's releases.
Commits
951a2ba
Merge pull request #1595 from hroncok/py3.13-await-aclose2fbad6a
Avoid Python 3.13+ RuntimeWarning: coroutine method 'aclose' of 'acount' was ...0254345
Merge pull request #1594 from mgorny/py313-docstring43230f6
slight lint5ba6595
cli: Fix docstring processing with Python 3.13+448946a
Merge pull request #1602 from tqdm/devel46cd395
add py3.12 supportd8ac656
ncols: support FreeBSD4f66276
bump deps & linters54796cc
docs: bump versionsUpdates
twine
from 5.1.0 to 5.1.1Changelog
Sourced from twine's changelog.
Commits
e29791d
Prepare for v5.1.1 (#1114)f213ede
fix: Retrieve metadata correctly from importlib_metadata (#1115)6fbf880
Merge pull request #1112 from pypa/bug/11113eb9121
Remove extra line from changelog entry0191f0c
Preserve ports when munging repository URLsc588793
Merge pull request #1110 from DimitriPapadopoulos/principle1fdc197
Fix a couple typos13b07b6
Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...a3e8373
build(deps): bump actions/checkout from 4.1.5 to 4.1.6Updates
zipp
from 3.19.2 to 3.20.1Changelog
Sourced from zipp's changelog.
Commits
c23e549
Finalizec2b9015
Merge pull request #124 from jaraco/bugfix/gh-123270-supported-names774a3ac
Add TODO to consolidate this behavior in CPython.cc61e61
Prefer simpler path.rstrip to consolidate checks for empty or only paths.bec712f
Mark unused code as uncovered.fde82dc
Add news fragment.a421f7e
Invent DirtyZipInfo to create an unsanitized zipfile with backslashes.0a3a7b4
Refine expectation that paths with leading slashes are simply not visible.f89b93f
Address infinite loop when zipfile begins with more than one leading slash.3cb5609
Removed SanitizedNames.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show