Skip to content

fix(deps): update dependency wheel to v0.46.3#264

Merged
harryswift01 merged 1 commit intomasterfrom
renovate/wheel-0.x
Jan 22, 2026
Merged

fix(deps): update dependency wheel to v0.46.3#264
harryswift01 merged 1 commit intomasterfrom
renovate/wheel-0.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jan 22, 2026

This PR contains the following updates:

Package Change Age Confidence
wheel (changelog) ==0.43.0==0.46.3 age confidence

Release Notes

pypa/wheel (wheel)

v0.46.3

Compare Source

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#​676)

v0.46.2

Compare Source

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

v0.46.1

Compare Source

  • Temporarily restored the wheel.macosx_libfile module (#​659)

v0.46.0

Compare Source

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

v0.45.1

Compare Source

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

v0.45.0

Compare Source

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

v0.44.0

Compare Source

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

Configuration

📅 Schedule: Branch creation - Between 08:00 AM and 08:59 AM, Monday through Friday ( * 8 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jan 22, 2026
@coveralls
Copy link
Copy Markdown
Collaborator

Pull Request Test Coverage Report for Build 21256282340

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 84.064%

Totals Coverage Status
Change from base Build 21247645435: 0.0%
Covered Lines: 1688
Relevant Lines: 2008

💛 - Coveralls

@harryswift01 harryswift01 self-requested a review January 22, 2026 17:11
@harryswift01 harryswift01 merged commit cdb44ca into master Jan 22, 2026
6 checks passed
@renovate renovate Bot deleted the renovate/wheel-0.x branch January 22, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants