Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Show the detailed error when facing invalid requirements #12713

Closed
1 task done
sbidoul opened this issue May 20, 2024 · 6 comments · Fixed by #12715
Closed
1 task done

Show the detailed error when facing invalid requirements #12713

sbidoul opened this issue May 20, 2024 · 6 comments · Fixed by #12715
Labels
type: enhancement Improvements to functionality
Milestone

Comments

@sbidoul
Copy link
Member

sbidoul commented May 20, 2024

Description

From #12691 (comment)

pip install --dry-run "python-hdf4>=0.10.0+dummy" prints ERROR: Invalid requirement: 'python-hdf4>=0.10.0+dummy'.

Expected behavior

The detailed, more informative error should be printed:

InvalidRequirement: Local version label can only be used with `==` or `!=` operators
    python-hdf4>=0.10.0+dummy
               ~~~~~~~~^

pip version

24.1b1

Python version

any

OS

any

How to Reproduce

pip install --dry-run "python-hdf4>=0.10.0+dummy"

Output

No response

Code of Conduct

@sbidoul sbidoul added type: bug A confirmed bug or unintended behavior S: needs triage Issues/PRs that need to be triaged labels May 20, 2024
@sbidoul
Copy link
Member Author

sbidoul commented May 20, 2024

@stonebig as for a solution, you'll need to update the requirement to not include the +dummy part.

@sbidoul sbidoul added this to the 24.1 milestone May 20, 2024
@stonebig
Copy link
Contributor

stonebig commented May 20, 2024

I did it. I had the precise error message with the position.
Just reported the "+" no more tolerated in case it was to consider a bug

@sbidoul sbidoul added type: enhancement Improvements to functionality and removed type: bug A confirmed bug or unintended behavior S: needs triage Issues/PRs that need to be triaged labels May 20, 2024
@stonebig
Copy link
Contributor

so me puting only the first line of the error miss-leaded you. you may close this one

@sbidoul
Copy link
Member Author

sbidoul commented May 20, 2024

@stonebig what command did you use precisely? Because when I tried, the pip install command above did not report the error details.

@stonebig
Copy link
Contributor

stonebig commented May 20, 2024

... time to figure out I had temporarly fell back to pip-24.0. so with Pip-24.1b1, the method is

...WPy64-31300b1b\scripts>python -m pip install --pre  --no-index --trusted-host=None  --find-links=...\packages.srcreq -c ...\constraints.txt six

generating:

ERROR: Invalid requirement: 'python-hdf4>=0.10.0+dummy' (from line 437 of ...\constraints.txt)`

and no line below.
you are right: I allucinated the "detailed" error message, I don't see it either

@sbidoul
Copy link
Member Author

sbidoul commented May 20, 2024

Ok, thanks. I created #12715 to improve the error message.

mergify bot pushed a commit to aws/jsii that referenced this issue Jun 21, 2024
…test/generated-code (#4548)

Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
edgarrmondragon pushed a commit to reservoir-data/tap-canny that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
inmantaci pushed a commit to inmanta/inmanta-core that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
edgarrmondragon pushed a commit to MeltanoLabs/tap-gohighlevel that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
inmantaci pushed a commit to inmanta/inmanta-core that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
mergify bot pushed a commit to aws/jsii that referenced this issue Jun 24, 2024
…s/@jsii/python-runtime (#4550)

Updates the requirements on [pip](https://github.com/pypa/pip) to permit the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
edgarrmondragon pushed a commit to MeltanoLabs/tap-messagebird that referenced this issue Jun 24, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this issue Jun 26, 2024
24.1 (2024-06-20)
=================

Vendored Libraries
------------------

- Upgrade truststore to 0.9.1.


24.1b2 (2024-06-12)
===================

Features
--------

- Report informative messages about invalid requirements. (`#12713 <https://github.com/pypa/pip/issues/12713>`_)

Bug Fixes
---------

- Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (`#12675 <https://github.com/pypa/pip/issues/12675>`_)
- Accommodate for mismatches between different sources of truth for extra names, for packages generated by ``setuptools``. (`#12688 <https://github.com/pypa/pip/issues/12688>`_)
- Accommodate for development versions of CPython ending in ``+`` in the version string. (`#12691 <https://github.com/pypa/pip/issues/12691>`_)

Vendored Libraries
------------------

- Upgrade packaging to 24.1
- Upgrade requests to 2.32.0
- Remove vendored colorama
- Remove vendored six
- Remove vendored webencodings
- Remove vendored charset_normalizer

  ``requests`` provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.

24.1b1 (2024-05-06)
===================

Deprecations and Removals
-------------------------

- Drop support for EOL Python 3.7. (`#11934 <https://github.com/pypa/pip/issues/11934>`_)
- Remove support for legacy versions and dependency specifiers.

  Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
  Already installed packages with non standard-compliant versions or dependency specifiers
  must be uninstalled before upgrading them. (`#12063 <https://github.com/pypa/pip/issues/12063>`_)

Features
--------

- Improve performance of resolution of large dependency trees, with more caching. (`#12453 <https://github.com/pypa/pip/issues/12453>`_)
- Further improve resolution performance of large dependency trees, by caching hash calculations. (`#12657 <https://github.com/pypa/pip/issues/12657>`_)
- Reduce startup time of commands (e.g. show, freeze) that do not access the network by 15-30%. (`#4768 <https://github.com/pypa/pip/issues/4768>`_)
- Reword and improve presentation of uninstallation errors. (`#10421 <https://github.com/pypa/pip/issues/10421>`_)
- Add a 'raw' progress_bar type for simple and parsable download progress reports (`#11508 <https://github.com/pypa/pip/issues/11508>`_)
- ``pip list`` no longer performs the pip version check unless ``--outdated`` or ``--uptodate`` is given. (`#11677 <https://github.com/pypa/pip/issues/11677>`_)
- Use the ``data_filter`` when extracting tarballs, if it's available. (`#12111 <https://github.com/pypa/pip/issues/12111>`_)
- Display the Project-URL value under key "Home-page" in ``pip show`` when the Home-Page metadata field is not set.

  The Project-URL key detection is case-insensitive, and ignores any dashes and underscores. (`#11221 <https://github.com/pypa/pip/issues/11221>`_)

Bug Fixes
---------

- Ensure ``-vv`` gets passed to any ``pip install`` build environment subprocesses. (`#12577 <https://github.com/pypa/pip/issues/12577>`_)
- Deduplicate entries in the ``Requires`` field of ``pip show``. (`#12165 <https://github.com/pypa/pip/issues/12165>`_)
- Fix error on checkout for subversion and bazaar with verbose mode on. (`#11050 <https://github.com/pypa/pip/issues/11050>`_)
- Fix exception with completions when COMP_CWORD is not set (`#12401 <https://github.com/pypa/pip/issues/12401>`_)
- Fix intermittent "cannot locate t64.exe" errors when upgrading pip. (`#12666 <https://github.com/pypa/pip/issues/12666>`_)
- Remove duplication in invalid wheel error message (`#12579 <https://github.com/pypa/pip/issues/12579>`_)
- Remove the incorrect pip3.x console entrypoint from the pip wheel. This console
  script continues to be generated by pip when it installs itself. (`#12536 <https://github.com/pypa/pip/issues/12536>`_)
- Gracefully skip VCS detection in pip freeze when PATH points to a non-directory path. (`#12567 <https://github.com/pypa/pip/issues/12567>`_)
- Make the ``--proxy`` parameter take precedence over environment variables. (`#10685 <https://github.com/pypa/pip/issues/10685>`_)

Vendored Libraries
------------------

- Add charset-normalizer 3.3.2
- Remove chardet
- Remove pyparsing
- Upgrade CacheControl to 0.14.0
- Upgrade certifi to 2024.2.2
- Upgrade distro to 1.9.0
- Upgrade idna to 3.7
- Upgrade msgpack to 1.0.8
- Upgrade packaging to 24.0
- Upgrade platformdirs to 4.2.1
- Upgrade pygments to 2.17.2
- Upgrade rich to 13.7.1
- Upgrade setuptools to 69.5.1
- Upgrade tenacity to 8.2.3
- Upgrade typing_extensions to 4.11.0
- Upgrade urllib3 to 1.26.18

Improved Documentation
----------------------

- Document UX research done on pip. (`#10745 <https://github.com/pypa/pip/issues/10745>`_)
- Fix the direct usage of zipapp showing up as ``python -m pip.pyz`` rather than ``./pip.pyz`` / ``.\pip.pyz`` (`#12043 <https://github.com/pypa/pip/issues/12043>`_)
- Add a warning explaining that the snippet in "Fallback behavior" is not a valid
  ``pyproject.toml`` snippet for projects, and link to setuptools documentation
  instead. (`#12122 <https://github.com/pypa/pip/issues/12122>`_)
- The Python Support Policy has been updated. (`#12529 <https://github.com/pypa/pip/issues/12529>`_)
- Document the environment variables that correspond with CLI options. (`#12576 <https://github.com/pypa/pip/issues/12576>`_)
- Update architecture documentation for command line interface. (`#6831 <https://github.com/pypa/pip/issues/6831>`_)

Process
-------

- Remove ``setup.py`` since all the pip project metadata is now declared in
  ``pyproject.toml``.
- Move remaining pip development tools configurations to ``pyproject.toml``.
JosephAbbey pushed a commit to JosephAbbey/ha_custom_sentences that referenced this issue Jun 27, 2024
Updates the requirements on [pip](https://github.com/pypa/pip) to permit
the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://redirect.github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/21.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
edgarrmondragon pushed a commit to reservoir-data/tap-pomelo that referenced this issue Jul 1, 2024
…104)

Bumps the all group in /.github/workflows with 2 updates:
[pip](https://github.com/pypa/pip) and
[tox](https://github.com/tox-dev/tox).

Updates `pip` from 24.0 to 24.1.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1.1 (2024-06-26)</h1>
<h2>Bug Fixes</h2>
<ul>
<li>Actually use system trust stores when the truststore feature is
enabled.</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade requests to 2.32.3</li>
</ul>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/a432c7f4170b9ef798a15f035f5dfdb4cc939f35"><code>a432c7f</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/a1ae982bff01c3e625c56081b0a54e0688264cf4"><code>a1ae982</code></a>
Update AUTHORS.txt</li>
<li><a
href="https://github.com/pypa/pip/commit/300ed75aa50e438c5bf84692964bd9ade81c4916"><code>300ed75</code></a>
Upgrade requests to 2.32.3 (<a
href="https://redirect.github.com/pypa/pip/issues/12784">#12784</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/5c389ec91fa178ec3897f5b9522441f4d3922662"><code>5c389ec</code></a>
Split up Windows tests relying on urlunparse behaviour (<a
href="https://redirect.github.com/pypa/pip/issues/12788">#12788</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/00c75c45b36c4b03ff052eb98a1d945910bce29f"><code>00c75c4</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12773">#12773</a> from
matthewhughes934/fix-tests-unable-to-cleanup</li>
<li><a
href="https://github.com/pypa/pip/commit/67e2a5698706751161d8af3dad1dbb8e62bc8cbb"><code>67e2a56</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12783">#12783</a> from
pfmoore/rel_doc2</li>
<li><a
href="https://github.com/pypa/pip/commit/a58c20a39dca0fe587545c899c852dcf3d218bfa"><code>a58c20a</code></a>
Minor release is the quarter number</li>
<li><a
href="https://github.com/pypa/pip/commit/2753c77e2b3999683dac5201deb69fbd6c31f667"><code>2753c77</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12780">#12780</a> from
pfmoore/rel_doc</li>
<li><a
href="https://github.com/pypa/pip/commit/4dd55ebd5635c89279a46fcad6a8c33529f7a875"><code>4dd55eb</code></a>
Document the structure of our release number</li>
<li><a
href="https://github.com/pypa/pip/commit/8cdf79798ab9490c24cd8a7e965153eb789f04e6"><code>8cdf797</code></a>
Fix directories not cleaned up after test</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `tox` from 4.15.0 to 4.15.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/releases">tox's
releases</a>.</em></p>
<blockquote>
<h2>4.15.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>fix skip with package = wheel by <a
href="https://github.com/MarcinKonowalczyk"><code>@​MarcinKonowalczyk</code></a>
in <a
href="https://redirect.github.com/tox-dev/tox/pull/3269">tox-dev/tox#3269</a></li>
<li>Fixed typo in user guide. by <a
href="https://github.com/carltongibson"><code>@​carltongibson</code></a>
in <a
href="https://redirect.github.com/tox-dev/tox/pull/3277">tox-dev/tox#3277</a></li>
<li>Fix broad build privileges @ GHA release workflow by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a> in <a
href="https://redirect.github.com/tox-dev/tox/pull/3281">tox-dev/tox#3281</a></li>
<li>Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>. by <a
href="https://github.com/ssbarnea"><code>@​ssbarnea</code></a> in <a
href="https://redirect.github.com/tox-dev/tox/pull/3288">tox-dev/tox#3288</a></li>
<li>Fix section substitution with setenv by <a
href="https://github.com/JJLLWW"><code>@​JJLLWW</code></a> in <a
href="https://redirect.github.com/tox-dev/tox/pull/3289">tox-dev/tox#3289</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/MarcinKonowalczyk"><code>@​MarcinKonowalczyk</code></a>
made their first contribution in <a
href="https://redirect.github.com/tox-dev/tox/pull/3269">tox-dev/tox#3269</a></li>
<li><a
href="https://github.com/carltongibson"><code>@​carltongibson</code></a>
made their first contribution in <a
href="https://redirect.github.com/tox-dev/tox/pull/3277">tox-dev/tox#3277</a></li>
<li><a href="https://github.com/JJLLWW"><code>@​JJLLWW</code></a> made
their first contribution in <a
href="https://redirect.github.com/tox-dev/tox/pull/3289">tox-dev/tox#3289</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/tox/compare/4.15.0...4.15.1">https://github.com/tox-dev/tox/compare/4.15.0...4.15.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's
changelog</a>.</em></p>
<blockquote>
<h2>v4.15.1 (2024-06-05)</h2>
<p>Features - 4.15.1</p>
<pre><code>- Fix ``skip_missing_interpreters`` option for ``package =
wheel`` (:issue:`3269`)
<p>Bugfixes - 4.15.1
</code></pre></p>
<ul>
<li>Fix section substitution with setenv.
(:issue:<code>3262</code>)</li>
<li>Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>. (:issue:<code>3288</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/tox/commit/079000fe80bb9baa3eb0e7f8f53f932810942d14"><code>079000f</code></a>
release 4.15.1</li>
<li><a
href="https://github.com/tox-dev/tox/commit/489ad821e5b9c6d5aff500e1b3abc4292f52a2dc"><code>489ad82</code></a>
Fix section substitution with setenv (<a
href="https://redirect.github.com/tox-dev/tox/issues/3289">#3289</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/7317225d179a7bd70cbe409f5273d6aa3ffac488"><code>7317225</code></a>
Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>....</li>
<li><a
href="https://github.com/tox-dev/tox/commit/406f80887f757ba430c79280ad767492cf046296"><code>406f808</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/tox/issues/3283">#3283</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/5c28d9c180679ee712a2974f4bb7d4765295bd48"><code>5c28d9c</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/tox/issues/3279">#3279</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/f4e257c3a4ea000e07d5b670836d439f5e11fce6"><code>f4e257c</code></a>
Fix broad build privileges @ GHA release workflow (<a
href="https://redirect.github.com/tox-dev/tox/issues/3281">#3281</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/77564a1aa04300a8b2cecf8f871864d60019d645"><code>77564a1</code></a>
Fixed typo in user guide.</li>
<li><a
href="https://github.com/tox-dev/tox/commit/e2f66b1b890f57a468c639c8c5ce7993d98ce447"><code>e2f66b1</code></a>
[pre-commit.ci] auto fixes from pre-commit.com hooks</li>
<li><a
href="https://github.com/tox-dev/tox/commit/9afc9cba99ed0f1b163a1a96727a3bf231a4f951"><code>9afc9cb</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/tox-dev/tox/commit/3db98229ac0730e204b832c911861249d389070c"><code>3db9822</code></a>
fix skip with package = wheel (<a
href="https://redirect.github.com/tox-dev/tox/issues/3269">#3269</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/tox/compare/4.15.0...4.15.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@edgarrmondragon.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
torbennehmer added a commit to torbennehmer/hacs-e3dc that referenced this issue Jul 2, 2024
Updates the requirements on [pip](https://github.com/pypa/pip) to permit
the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1.1 (2024-06-26)</h1>
<h2>Bug Fixes</h2>
<ul>
<li>Actually use system trust stores when the truststore feature is
enabled.</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade requests to 2.32.3</li>
</ul>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/a432c7f4170b9ef798a15f035f5dfdb4cc939f35"><code>a432c7f</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/a1ae982bff01c3e625c56081b0a54e0688264cf4"><code>a1ae982</code></a>
Update AUTHORS.txt</li>
<li><a
href="https://github.com/pypa/pip/commit/300ed75aa50e438c5bf84692964bd9ade81c4916"><code>300ed75</code></a>
Upgrade requests to 2.32.3 (<a
href="https://redirect.github.com/pypa/pip/issues/12784">#12784</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/5c389ec91fa178ec3897f5b9522441f4d3922662"><code>5c389ec</code></a>
Split up Windows tests relying on urlunparse behaviour (<a
href="https://redirect.github.com/pypa/pip/issues/12788">#12788</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/00c75c45b36c4b03ff052eb98a1d945910bce29f"><code>00c75c4</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12773">#12773</a> from
matthewhughes934/fix-tests-unable-to-cleanup</li>
<li><a
href="https://github.com/pypa/pip/commit/67e2a5698706751161d8af3dad1dbb8e62bc8cbb"><code>67e2a56</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12783">#12783</a> from
pfmoore/rel_doc2</li>
<li><a
href="https://github.com/pypa/pip/commit/a58c20a39dca0fe587545c899c852dcf3d218bfa"><code>a58c20a</code></a>
Minor release is the quarter number</li>
<li><a
href="https://github.com/pypa/pip/commit/2753c77e2b3999683dac5201deb69fbd6c31f667"><code>2753c77</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/12780">#12780</a> from
pfmoore/rel_doc</li>
<li><a
href="https://github.com/pypa/pip/commit/4dd55ebd5635c89279a46fcad6a8c33529f7a875"><code>4dd55eb</code></a>
Document the structure of our release number</li>
<li><a
href="https://github.com/pypa/pip/commit/8cdf79798ab9490c24cd8a7e965153eb789f04e6"><code>8cdf797</code></a>
Fix directories not cleaned up after test</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/21.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 11, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
type: enhancement Improvements to functionality
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants