Skip to content
This repository was archived by the owner on Jul 20, 2023. It is now read-only.

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 20, 2022

Bumps wheel from 0.24.0 to 0.38.0.

Changelog

Sourced from wheel's changelog.

Release Notes

0.38.0 (2022-10-21)

  • Dropped support for Python < 3.7
  • Updated vendored packaging to 21.3
  • Replaced all uses of distutils with setuptools
  • The handling of license_files (including glob patterns and default values) is now delegated to setuptools>=57.0.0 (#466). The package dependencies were updated to reflect this change.
  • Fixed potential DoS attack via the WHEEL_INFO_RE regular expression
  • Fixed ValueError: ZIP does not support timestamps before 1980 when using SOURCE_DATE_EPOCH=0 or when on-disk timestamps are earlier than 1980-01-01. Such timestamps are now changed to the minimum value before packaging.

0.37.1 (2021-12-22)

  • Fixed wheel pack duplicating the WHEEL contents when the build number has changed (#415)
  • Fixed parsing of file names containing commas in RECORD (PR by Hood Chatham)

0.37.0 (2021-08-09)

  • Added official Python 3.10 support
  • Updated vendored packaging library to v20.9

0.36.2 (2020-12-13)

  • Updated vendored packaging library to v20.8
  • Fixed wheel sdist missing LICENSE.txt
  • Don't use default macos/arm64 deployment target in calculating the platform tag for fat binaries (PR by Ronald Oussoren)

0.36.1 (2020-12-04)

  • Fixed AssertionError when MACOSX_DEPLOYMENT_TARGET was set to 11 (PR by Grzegorz Bokota and François-Xavier Coudert)
  • Fixed regression introduced in 0.36.0 on Python 2.7 when a custom generator name was passed as unicode (Scikit-build) (TypeError: 'unicode' does not have the buffer interface)

0.36.0 (2020-12-01)

  • Added official Python 3.9 support
  • Updated vendored packaging library to v20.7
  • Switched to always using LF as line separator when generating WHEEL files (on Windows, CRLF was being used instead)
  • The ABI tag is taken from the sysconfig SOABI value. On PyPy the SOABI value is pypy37-pp73 which is not compliant with PEP 3149, as it should have both the API tag and the platform tag. This change future-proofs any change

... (truncated)

Commits
  • fcb94cd Updated version to match the release
  • 0d374f8 Updated tasks to their latest versions
  • 5cca7ee Created a new release
  • ef6b402 Fixed pre-1980 file timestamps raising ValueError
  • 88f02bc Fixed potential DoS attack via WHEEL_INFO_RE
  • e9f7a60 Updated tox configuration and classifiers to support Python 3.11
  • be5b5f6 [pre-commit.ci] pre-commit autoupdate (#468)
  • eaa09fc Add support for license_files specified in setup.py (#466)
  • 048b2ce [pre-commit.ci] pre-commit autoupdate (#467)
  • 30deeae [pre-commit.ci] pre-commit autoupdate (#464)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [wheel](https://github.com/pypa/wheel) from 0.24.0 to 0.38.0.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.24.0...0.38.0)

---
updated-dependencies:
- dependency-name: wheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 20, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 7, 2022

Superseded by #229.

@dependabot dependabot bot closed this Nov 7, 2022
@dependabot dependabot bot deleted the dependabot/pip/wheel-0.38.0 branch November 7, 2022 21:24
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant