From ecfd6e1e908b1b2e41151f00fa6cce1ebdea9f8c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 Jan 2026 13:29:41 +0000
Subject: [PATCH 1/2] Bump pip from 25.2 to 25.3

Bumps [pip](https://github.com/pypa/pip) from 25.2 to 25.3.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](https://github.com/pypa/pip/compare/25.2...25.3)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '25.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements/pip.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements/pip.txt b/requirements/pip.txt
index 7d4044f..0b3d671 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -1 +1 @@
-pip==25.2
+pip==25.3

From f780e9fcf0cda200a35c1c8cd198e9afbf16d19f Mon Sep 17 00:00:00 2001
From: Ed Morley <501702+edmorley@users.noreply.github.com>
Date: Wed, 7 Jan 2026 13:30:50 +0000
Subject: [PATCH 2/2] Add changelog entry

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7cbe4f5..6f011d4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Removed support for Python 3.9. ([#488](https://github.com/heroku/buildpacks-python/pull/488))
 
+### Changed
+
+- Updated pip from 25.2 to 25.3. ([#453](https://github.com/heroku/buildpacks-python/pull/453))
+
 ## [3.0.2] - 2026-01-05
 
 ### Changed