fix(deps): bump setuptools from 77.0.1 to 77.0.3 #12

Merged
dependabot[bot] merged 1 commits from dependabot/pip/setuptools-77.0.3 into main 2025-03-21 06:01:32 +00:00
dependabot[bot] commented 2025-03-20 22:35:40 +00:00 (Migrated from github.com)

Bumps setuptools from 77.0.1 to 77.0.3.

Changelog

Sourced from setuptools's changelog.

v77.0.3

Bugfixes

  • Temporarily convert error for license glob patterns containing ../ into a deprecation warning to allow an accomodation period. (#4896)
  • Better error messages for packaging.licenses import errors in environments with packaging<24.2. The import statement was also deferred to spare users that are not using license expressions. (#4898)
  • Avoided eagerly raising an exception when license-files is defined simultaneously inside and outside of pyproject.toml. Instead we rely on the existing deprecation error. (#4899)

v77.0.2

Bugfixes

  • Restore distutils.ccompiler._default_compilers -- by :user:ManiacDC (#4876)
  • Fixed copy pasta in msvc.shared_lib_format. (#4885)
Commits
  • 7c859e0 Bump version: 77.0.2 → 77.0.3
  • f9b0e50 Convert error for ../ in license paths into deprecation warning (#4896)
  • 5fe9c32 Defer import error for packaging.licenses in environments with packaging<24.2...
  • 44303b6 Avoid raising exception when license-files is defined outside of `pyproject.t...
  • 676362d Refactor fallback for packaging.licenses
  • 53fc322 Silence typechecking in complicated statement
  • 64612bf Remove duplicated dependency
  • 627a869 Attempt to avoid typing error
  • 4622b5a Add news fragment
  • f123312 Defer import error for packaging.licenses in environments with packagin<24.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [setuptools](https://github.com/pypa/setuptools) from 77.0.1 to 77.0.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's changelog</a>.</em></p> <blockquote> <h1>v77.0.3</h1> <h2>Bugfixes</h2> <ul> <li>Temporarily convert error for license glob patterns containing <code>../</code> into a deprecation warning to allow an accomodation period. (<a href="https://redirect.github.com/pypa/setuptools/issues/4896">#4896</a>)</li> <li>Better error messages for <code>packaging.licenses</code> import errors in environments with <code>packaging&lt;24.2</code>. The import statement was also deferred to spare users that are not using license expressions. (<a href="https://redirect.github.com/pypa/setuptools/issues/4898">#4898</a>)</li> <li>Avoided eagerly raising an exception when <code>license-files</code> is defined simultaneously inside and outside of <code>pyproject.toml</code>. Instead we rely on the existing deprecation error. (<a href="https://redirect.github.com/pypa/setuptools/issues/4899">#4899</a>)</li> </ul> <h1>v77.0.2</h1> <h2>Bugfixes</h2> <ul> <li>Restore <code>distutils.ccompiler._default_compilers</code> -- by :user:<code>ManiacDC</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4876">#4876</a>)</li> <li>Fixed copy pasta in <code>msvc.shared_lib_format</code>. (<a href="https://redirect.github.com/pypa/setuptools/issues/4885">#4885</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/setuptools/commit/7c859e017368360ba66c8cc591279d8964c031bc"><code>7c859e0</code></a> Bump version: 77.0.2 → 77.0.3</li> <li><a href="https://github.com/pypa/setuptools/commit/f9b0e50eaeb46eebdd936f0f2f982c4c62ba5866"><code>f9b0e50</code></a> Convert error for ../ in license paths into deprecation warning (<a href="https://redirect.github.com/pypa/setuptools/issues/4896">#4896</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/5fe9c32c51839ba22c3d0ad5e4e03922aad35766"><code>5fe9c32</code></a> Defer import error for packaging.licenses in environments with packaging&lt;24.2...</li> <li><a href="https://github.com/pypa/setuptools/commit/44303b6cf469fdec5d268efe712f543e874f9677"><code>44303b6</code></a> Avoid raising exception when license-files is defined outside of `pyproject.t...</li> <li><a href="https://github.com/pypa/setuptools/commit/676362d62a9e7b2bb57e0332ec9b4b0f8539a727"><code>676362d</code></a> Refactor fallback for packaging.licenses</li> <li><a href="https://github.com/pypa/setuptools/commit/53fc322820862c83687d5fee9a56c6a14c8e8d84"><code>53fc322</code></a> Silence typechecking in complicated statement</li> <li><a href="https://github.com/pypa/setuptools/commit/64612bf280b97e51b9014a7c55a393b686227518"><code>64612bf</code></a> Remove duplicated dependency</li> <li><a href="https://github.com/pypa/setuptools/commit/627a869d19828c17390e7c6c0a7bdd43922723a5"><code>627a869</code></a> Attempt to avoid typing error</li> <li><a href="https://github.com/pypa/setuptools/commit/4622b5aaf7f607c61de40cdfdca769e48b32f731"><code>4622b5a</code></a> Add news fragment</li> <li><a href="https://github.com/pypa/setuptools/commit/f123312f6cb27f9813491349323ed276b0bc167c"><code>f123312</code></a> Defer import error for packaging.licenses in environments with packagin&lt;24.2</li> <li>Additional commits viewable in <a href="https://github.com/pypa/setuptools/compare/v77.0.1...v77.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools&package-manager=pip&previous-version=77.0.1&new-version=77.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
S4NKALP (Migrated from github.com) reviewed 2025-03-20 22:35:40 +00:00
Sign in to join this conversation.