Skip to content

build(deps-dev): update setuptools requirement from >=84.0.0 to >=84.2.1 - #81

Merged
mcocdaa merged 1 commit into
mainfrom
dependabot/pip/setuptools-gte-84.2.1
Nov 3, 2026
Merged

mcocdaa merged 1 commit into
mainfrom
dependabot/pip/setuptools-gte-84.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on setuptools to permit the latest version.

Changelog

Sourced from setuptools's changelog.

v84.2.1

Bugfixes

  • Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
  • Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when Extension.py_limited_api is enabled. These builds now use their version-specific extension suffix instead of using the unsupported .abi3t suffix. (#5363)

Improved Documentation

  • Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0

Features

  • Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
  • Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

  • Use target sysconfig data for stable-ABI extension filenames. (#5351)

v84.1.0

Features

  • setuptools.archive_util now raises the new UnsafeMember exception when an archive member would be extracted outside of the extraction directory, where previously such a member was silently skipped. Aborting makes a malicious or malformed archive visible to the caller instead of yielding a quietly incomplete extraction, and matches the behavior of the standard

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 1, 2026
@coderabbitai

coderabbitai Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: e0af23c6-9ca9-4ebb-87c3-508704163563

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.

@dependabot
dependabot Bot force-pushed the dependabot/pip/setuptools-gte-84.2.1 branch from a46187c to 35d7e17 Compare November 3, 2026 09:47
@mcocdaa
mcocdaa force-pushed the dependabot/pip/setuptools-gte-84.2.1 branch from 35d7e17 to 711d1f1 Compare November 3, 2026 09:48
@mcocdaa
mcocdaa merged commit fb5a7a3 into main Nov 3, 2026
2 checks passed
@mcocdaa
mcocdaa deleted the dependabot/pip/setuptools-gte-84.2.1 branch November 3, 2026 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant