Update dependency wheel to v0.48.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
wheel (changelog)	==0.46.2 → ==0.48.0

---

Release Notes

pypa/wheel (wheel)

v0.48.0

Compare Source

• Added a --local-version option to wheel pack to add, replace, or remove a PEP 440 local version identifier from a wheel (#​570)
• Fixed wheel convert unnecessarily upgrading compatible core metadata versions (#​643)
• Fixed wheel tags producing invalid archives when retagging wheels whose entries use ZIP64, by dropping the central-directory ZIP64 extra field that is not valid in a local file header (#​692)
• Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file write / path traversal) (GHSA-vgq5-9859-3mmw)

v0.47.0

Compare Source

• Added the wheel info subcommand to display metadata about wheel files without unpacking them (#​639)
• Fixed WheelFile raising Missing RECORD file when the wheel filename contains uppercase characters (e.g. Django-3.2.5.whl) but the .dist-info directory inside uses normalized lowercase naming (#​411)

v0.46.3

Compare Source

• Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#​676)

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "after 9am and before 5pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.