Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Bump pip-tools from 7.5.1 to 7.5.2 (aio-libs#11782)
Bumps [pip-tools](https://github.com/jazzband/pip-tools) from 7.5.1 to
7.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jazzband/pip-tools/releases">pip-tools's
releases</a>.</em></p>
<blockquote>
<h2>v7.5.2</h2>
<p><em>2025-11-11</em></p>
<h3>Bug fixes</h3>
<ul>
<li>
<p>Fixed <code>pip-compile</code> to handle relative path includes which
are not subpaths of the current working directory -- by <a
href="https://github.com/sirosen"><code>@​sirosen</code></a>.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2231">#2231</a>,
<a
href="https://github.com/jazzband/pip-tools/issues/2260">#2260</a></p>
</li>
<li>
<p>Using <code>--upgrade-package</code> and dynamically building project
metadata no longer causes an <code>AttributeError</code> when pip
encounters an error during the build -- by <a
href="https://github.com/Epic"><code>@​Epic</code></a>_Wink and <a
href="https://github.com/tusharsadhwani"><code>@​tusharsadhwani</code></a>.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2258">#2258</a></p>
</li>
</ul>
<h3>Features</h3>
<ul>
<li>
<p>Test and declare Python 3.13 support -- by <a
href="https://github.com/jayaddison"><code>@​jayaddison</code></a> (for
OpenCulinary).</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2251">#2251</a></p>
</li>
<li>
<p>pip-tools is now compatible with pip 25.3 -- by <a
href="https://github.com/shifqu"><code>@​shifqu</code></a>.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2252">#2252</a>,
<a
href="https://github.com/jazzband/pip-tools/issues/2253">#2253</a></p>
</li>
</ul>
<h3>Packaging updates and notes for downstreams</h3>
<ul>
<li>
<p><code>pip-tools</code> now supports installation from git archives by
providing <code>setuptools-scm</code> with
<code>.git_archival.txt</code> data.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2225">#2225</a></p>
</li>
</ul>
<h3>Contributor-facing changes</h3>
<ul>
<li>
<p>The <a
href="https://github.com/sanitizers/chronographer-github-app">change log
entry bot</a> has been explicitly configured to stop requiring news
fragments in pull requests having the <a
href="https://github.com/jazzband/pip-tools/labels/bot:chronographer:skip"><code>bot:chronographer:skip</code>
label</a> set -- by <a
href="https://github.com/sirosen"><code>@​sirosen</code></a> and <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a>.</p>
<p>It was also set up to reference our change log authoring document
from the GitHub Checks pages. And the reported check name is now set to
<code>Change log entry</code>.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2201">#2201</a></p>
</li>
<li>
<p>The CI is now set up to invoke failed tests again with maximum level
of detail -- by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a>.</p>
<p>The change is aimed at helping troubleshoot failures that might be
difficult to reproduce locally.</p>
<p><em>PRs and issues:</em> <a
href="https://github.com/jazzband/pip-tools/issues/2254">#2254</a></p>
</li>
<li>
<p>The integration with Codecov has been updated to ensure that reports
are uploaded to the service even on failures -- by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a>.</p>
<p>GitHub Actions is now configured to also send an explicit
notification to Codecov about the completion of previously initiated
uploads.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md">pip-tools's
changelog</a>.</em></p>
<blockquote>
<h2>v7.5.2</h2>
<p><em>2025-11-11</em></p>
<h3>Bug fixes</h3>
<ul>
<li>
<p>Fixed <code>pip-compile</code> to handle relative path includes which
are not subpaths of
the current working directory -- by {user}<code>sirosen</code>.</p>
<p><em>PRs and issues:</em> {issue}<code>2231</code>,
{issue}<code>2260</code></p>
</li>
<li>
<p>Using <code>--upgrade-package</code> and dynamically building project
metadata no
longer causes an {exc}<code>AttributeError</code> when pip encounters an
error during the
build -- by {user}<code>Epic_Wink</code> and
{user}<code>tusharsadhwani</code>.</p>
<p><em>PRs and issues:</em> {issue}<code>2258</code></p>
</li>
</ul>
<h3>Features</h3>
<ul>
<li>
<p>Test and declare Python 3.13 support -- by
{user}<code>jayaddison</code> (for OpenCulinary).</p>
<p><em>PRs and issues:</em> {issue}<code>2251</code></p>
</li>
<li>
<p>pip-tools is now compatible with pip 25.3 -- by
{user}<code>shifqu</code>.</p>
<p><em>PRs and issues:</em> {issue}<code>2252</code>,
{issue}<code>2253</code></p>
</li>
</ul>
<h3>Packaging updates and notes for downstreams</h3>
<ul>
<li>
<p><code>pip-tools</code> now supports installation from git archives by
providing
<code>setuptools-scm</code> with <code>.git_archival.txt</code>
data.</p>
<p><em>PRs and issues:</em> {issue}<code>2225</code></p>
</li>
</ul>
<h3>Contributor-facing changes</h3>
<ul>
<li>
<p>The <a
href="https://github.com/sanitizers/chronographer-github-app">change log
entry bot</a> has been explicitly configured to stop requiring
news fragments in pull requests having the <a
href="https://github.com/jazzband/pip-tools/labels/bot:chronographer:skip"><code>bot:chronographer:skip</code>
label</a> set
-- by {user}<code>sirosen</code> and {user}<code>webknjaz</code>.</p>
<p>It was also set up to reference our change log authoring document
from the
GitHub Checks pages. And the reported check name is now set to
<code>Change log entry</code>.</p>
<p><em>PRs and issues:</em> {issue}<code>2201</code></p>
</li>
<li>
<p>The CI is now set up to invoke failed tests again with
maximum level of detail -- by {user}<code>webknjaz</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jazzband/pip-tools/commit/eb9606f414a3d5feac521face32822ab69775d44"><code>eb9606f</code></a>
Merge pull request <a
href="https://github.com/jazzband/pip-tools/issues/2270">#2270</a>
from sirosen/release-7.5.2</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/2cbb9333ef7d0dd0d1ee00ff72cc355073587590"><code>2cbb933</code></a>
Update changelog for version 7.5.2</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/d33539cbf81cb0c754360674191dd4e20a8e0812"><code>d33539c</code></a>
Merge pull request <a
href="https://github.com/jazzband/pip-tools/issues/2253">#2253</a>
from shifqu/fix/remove-opt-pep517</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/43e115907480b10fdcd2096758d86507a231c9ba"><code>43e1159</code></a>
Apply suggestions from code review</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/b7e8f9b072c9e1673ac7595c2e3f08c8ea555059"><code>b7e8f9b</code></a>
changelog: add news fragment for towncrier</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/88f2761472bfe88c0e13d00a203f277db8ed1af1"><code>88f2761</code></a>
tests: lower required coverage for py38 to 98%</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/608c47b87cb30ac95ece10156cef1c342163632c"><code>608c47b</code></a>
feat: add deprecation warnings in cli and sync</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/43952fc7cb9e0a5d55b5d2016aa4753ffac58773"><code>43952fc</code></a>
tests: ensure tox pipsupported uses pip 25.3</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/bfa96b5a1bac9d24e359c76cd706dcf0a325fd89"><code>bfa96b5</code></a>
tests: provide minimal_wheels_path as a fixture</li>
<li><a
href="https://github.com/jazzband/pip-tools/commit/10a4b443a1f1863e851d42f1ae97dd219b4e1818"><code>10a4b44</code></a>
fix: remove deprecated options from resolver and
install_requirement</li>
<li>Additional commits viewable in <a
href="https://github.com/jazzband/pip-tools/compare/v7.5.1...v7.5.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip-tools&package-manager=pip&previous-version=7.5.1&new-version=7.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Dec 2, 2025
commit 9c3bd5176890bb09c363615c9ef6f9f51a6d79e4
2 changes: 1 addition & 1 deletion requirements/constraints.txt
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,7 @@ packaging==25.0
# wheel
pathspec==0.12.1
# via mypy
pip-tools==7.5.1
pip-tools==7.5.2
# via -r requirements/dev.in
pkgconfig==1.5.5
# via -r requirements/test-common.in
Expand Down
2 changes: 1 addition & 1 deletion requirements/dev.txt
Original file line number Diff line number Diff line change
Expand Up @@ -129,7 +129,7 @@ packaging==25.0
# wheel
pathspec==0.12.1
# via mypy
pip-tools==7.5.1
pip-tools==7.5.2
# via -r requirements/dev.in
pkgconfig==1.5.5
# via -r requirements/test-common.in
Expand Down