Skip to content

deps(deps-dev): bump setuptools from 79.0.1 to 84.0.0 - #778

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/setuptools-84.0.0
Closed

deps(deps-dev): bump setuptools from 79.0.1 to 84.0.0#778
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/setuptools-84.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps setuptools from 79.0.1 to 84.0.0.

Changelog

Sourced from setuptools's changelog.

v84.0.0

Features

  • Newline-separated keywords and platformspypa/setuptools#4887old specification <https://peps.python.org/pep-0345/>_ separated items with spaces and the current one uses commas. (#4887)
  • Extensionpypa/distutils#373#5022)
  • The C compiler modules now emit log messages through their own compilers.C.* loggers instead of the distutils root logger, part of decoupling the compilers package from distutils. The logger names are normalized to a stable compilers.C.* prefix so they remain constant as the package migrates toward a standalone compilers.C distribution. (#5266)
  • The C compilers gained a Compiler.call method -- a thin wrapper over subprocess.check_call (with macOS deployment-target env injection) that is the modern replacement for Compiler.spawn. The compilers no longer depend on distutils.spawn, distutils.dir_util, distutils.file_util, distutils._modified, or distutils.util.execute/split_quoted: the generic newer/newer_group and split_quoted helpers are vendored into the compilers package, and Compiler.mkpath/move_file/execute are implemented directly on the standard library (os.makedirs/shutil.move). The methods are retained for backward compatibility. (#5267)
  • The compilers no longer depend on distutils.util, distutils.version, distutils.compat, or distutils._macos_compat. The platform-identification helpers (get_platform/get_host_platform/is_mingw) now live in distutils.compilers.platform.detect and the macOS deployment-target logic and compiler_fixup in distutils.compilers.platform.macos; CygwinCCompiler.gcc_version returns a packaging.version.Version. distutils.util re-exports the platform/macOS helpers from their new homes for backward compatibility rather than keeping duplicate copies. (sysconfig lookups still route through distutils pending its own decoupling.) (#5268)
  • The compilers now read their build configuration from the standard library's sysconfig instead of distutils.sysconfig. Per-compiler customization -- previously distutils.sysconfig.customize_compiler -- has moved into Compiler.configure_system(): a no-op on the base class, with UnixCCompiler applying the compiler/flag/archiver settings CPython recorded in sysconfig (and the usual CC/CFLAGS/LDSHARED/… environment overrides). distutils.sysconfig.customize_compiler is retained as a thin wrapper that calls compiler.configure_system(). (#5269)

Bugfixes

  • The MSVC linker now passes its arguments through a response file when the command line would exceed the Windows maximum length, fixing failures when linking a large number of objects. (#4177)
  • The Cygwin and MinGW compilers now pass -O1 instead of a bare -O. The two are equivalent to GCC, but cc1 rejected the bare form when building 32-bit extensions with -m32. -- by :user:dchaudhari7177 (#4873)
  • copy_filepypa/distutils#379#5079)
  • Setuptools wheels no longer bundled the project's own test modules. -- by :user:itscloud0 (#5212)
  • build_ext no longer fails when cross-compiling with a compiler other than MSVC (such as MinGW). Compiler now provides a no-op initialize()pypa/distutils#399

Improved Documentation

  • Clarified what "correspond exactly to the directory structure" means in the packages section of the Package Discovery user guide. (#4109)
  • Documented how bdist_wheel's py_limited_api option controls abi3 wheel tagging for extension modules -- by :user:Himanshuagrawal4 (#4741)

Deprecations and Removals

  • Compiler.spawn is deprecated in favor of the new Compiler.call. call raises native subprocess exceptions; spawn remains as a shim that emits a DeprecationWarning and translates them to DistutilsExecError. The MSVC spawn compatibility shim for third-party monkeypatches predating the env argument (numpy.distutils before 1.19, per pypa/distutils#15) has been removed. distutils.spawn.spawn is likewise reduced to a thin wrapper around subprocess.check_call: it no longer resolves cmd[0] via shutil.which (subprocess searches PATH itself) nor injects MACOSX_DEPLOYMENT_TARGET (that now lives with the compilers, the only callers to which it applied). (#5267)
  • Building an extension with a MACOSX_DEPLOYMENT_TARGET lower than the interpreter's configured value now raises compilers.errors.PlatformError instead of distutils.errors.DistutilsPlatformError (the macOS deployment-target check moved into the compilers package). CygwinCCompiler.gcc_version returns a packaging.version.Version rather than the removed distutils.version.LooseVersion. Completing the transition begun in pypa/distutils#246, UnixCCompiler.runtime_library_dir_option now returns the ["-Wl,--enable-new-dtags", "-Wl,-rpath,<dir>"] list directly for GNU ld rather than collapsing it into a single string, and the temporary distutils.compat.consolidate_linker_args shim has been removed. (#5268)
  • The compilers now define their own exception vocabulary instead of borrowing distutils' framework errors. Language-agnostic exceptions (Error, UnknownFileType, and a new PlatformError) live at distutils.compilers.errors, leaving room for future compilers.<language> siblings; the C/C++-specific CompileError/LinkError/LibError/PreprocessError remain in distutils.compilers.C.errors. The compilers now raise compilers.errors.PlatformError where they previously raised distutils.errors.DistutilsPlatformError/DistutilsModuleError, and compilers._modified.newer raises the stdlib FileNotFoundError. distutils.errors keeps its own framework exceptions and re-exports the compiler ones (CCompilerError, CompileError, etc.) for backward compatibility; because CCompilerError is compilers.errors.Error, code catching it (as distutils' top-level handlers do) still catches the new PlatformError. (#5270)
  • customize_compiler now asserts that the compiler-related config variables (CC, CXX, CFLAGS, etc.) resolve to strings, raising AssertionError if any are unexpectedly Nonepypa/distutils#363

v83.0.0

Features

  • Require Python 3.10 or later.

... (truncated)

Commits
  • 72e919a Merge pull request #5293 from pypa/bugfix/integration-pip-flit-backend
  • 1b29701 Select the top-level pyproject.toml when reading build requirements
  • bb1b381 Bump version: 83.0.0 → 84.0.0
  • ee6fdd7 Sync with distutils @ e8eb87855 (#5292)
  • 2a4a9e4 Merge remote-tracking branch 'origin/main' into distutils-e8eb87855
  • cbd1195 Merge https://github.com/jaraco/skeleton
  • bd3594e Merge pull request #5287 from Avasam/Configuring-lint.flake8-comprehensions.a...
  • f02e90a Configure C408 to allow dict(a=1) rather than disabling it
  • c55f52b Configuring lint.flake8-comprehensions.allow-dict-calls-with-keyword-argument...
  • e9904b0 Match the distutils sdist base type for the user_options override
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [setuptools](https://github.com/pypa/setuptools) from 79.0.1 to 84.0.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v79.0.1...v84.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 84.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 17, 2026
mpasternak added a commit that referenced this pull request Aug 20, 2026
… pinu ruffa (#784)

* ci(deps): bump anthropics/claude-code-action from 1.0.187 to 1.0.193

Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.187 to 1.0.193.
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@1623c36...9d7150b)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.193
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 9.0.0 to 10.0.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c771a70...20cfd1b)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* deps(deps): update uvicorn[standard] requirement

Updates the requirements on [uvicorn[standard]](https://github.com/Kludex/uvicorn) to permit the latest version.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.1...0.52.3)

---
updated-dependencies:
- dependency-name: uvicorn[standard]
  dependency-version: 0.52.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* deps(deps-dev): bump setuptools from 79.0.1 to 84.0.0

Bumps [setuptools](https://github.com/pypa/setuptools) from 79.0.1 to 84.0.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v79.0.1...v84.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 84.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* deps(deps): update django-liveops[celery] requirement

Updates the requirements on [django-liveops[celery]](https://github.com/iplweb/django-liveops) to permit the latest version.
- [Changelog](https://github.com/iplweb/django-liveops/blob/main/CHANGELOG.md)
- [Commits](iplweb/django-liveops@v0.4.1...v0.4.1)

---
updated-dependencies:
- dependency-name: django-liveops[celery]
  dependency-version: 0.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* deps(deps): bump the python-minor-and-patch group across 1 directory with 6 updates

Bumps the python-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chardet](https://github.com/chardet/chardet) | `7.5.1` | `7.6.0` |
| [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures) | `16.4` | `16.5` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `7.0.0` | `7.1.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [pytest-playwright](https://github.com/microsoft/playwright-pytest) | `0.8.0` | `0.9.0` |



Updates `chardet` from 7.5.1 to 7.6.0
- [Release notes](https://github.com/chardet/chardet/releases)
- [Changelog](https://github.com/chardet/chardet/blob/main/docs/changelog.rst)
- [Commits](chardet/chardet@7.5.1...7.6.0)

Updates `pytest-rerunfailures` from 16.4 to 16.5
- [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst)
- [Commits](pytest-dev/pytest-rerunfailures@16.4...16.5)

Updates `django-debug-toolbar` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@7.0.0...7.1.1)

Updates `ruff` from 0.16.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.3)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `pytest-playwright` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/microsoft/playwright-pytest/releases)
- [Commits](microsoft/playwright-pytest@v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: chardet
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pytest-rerunfailures
  dependency-version: '16.5'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: django-debug-toolbar
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pytest-playwright
  dependency-version: 0.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): synchronizuj ruff-pre-commit z pinem w pyproject + aktualizuj komentarz setuptools

Dwie poprawki do partii bumpow dependabota:

1. `.pre-commit-config.yaml`: rev v0.16.1 -> v0.16.3. Komentarz nad hookiem
   wprost wymaga trzymania rev w parze z `ruff==` z extry [dev] — dependabot
   tego sprzezenia nie widzi (`.github/dependabot.yml` sledzi tylko
   github-actions / uv / docker, nie pre-commit), wiec kazdy bump ruffa
   rozjezdza te dwa piny. Drift istnial juz na dev (0.16.2 vs v0.16.1);
   bump do 0.16.3 poszerzyl go do dwoch patchy. Weryfikacja: ruff 0.16.2
   i 0.16.3 daja na tym drzewie identyczny wynik (123 errors, 124 plikow
   do reformatu) — bump nie wnosi zadnych nowych naruszen, caly drift jest
   historyczny i zgodnie z konwencja repo (lint changed-files-only)
   zostawiony w spokoju.

2. `pyproject.toml`: komentarz w bloku "CELOWO NIEPODNIESIONE" mowil
   "gdzie mamy juz setuptools>=83.0.0" — po bumpie #778 jest tam >=84.0.0.
   Sam bump jest bezpieczny: dotyka wylacznie `[build-system].requires`,
   czyli izolowanego srodowiska PEP 517, ktore nigdy nie importuje pyoai.
   setuptools *runtime* pozostaje na 79.0.1 zgodnie z polityka.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011HZzT9NjVPWUPcrZrRMQvZ

* ci: bramka pilnujaca zgodnosci obu pinow ruffa

Ruff jest przypiety w DWOCH miejscach, ktore musza byc rowne:

  pyproject.toml            "ruff==0.16.3"   <- ruff z `uv run ruff`
  .pre-commit-config.yaml   rev: v0.16.3     <- ruff z pre-commita i CI

pre-commit NIE uzywa ruffa z pyproject — buduje wlasne izolowane
srodowisko z wheela dla tagu spod `rev:`. To dwa rozne binaria, wiec
rozjazd daje "przechodzi lokalnie, pada w CI". Juz sie zdarzylo: nizszy
`rev` przepuscil uklad importow I001, ktory ruff w CI odrzucil.

Dependabot tego sprzezenia nie widzi — `.github/dependabot.yml` sledzi
ekosystemy uv / github-actions / docker, wiec podbija wylacznie pin
w pyproject. Bez bramki KAZDY bump ruffa rozjezdza piny, a zasada byla
pilnowana jedynie komentarzem w pliku.

Zmiany:

* `bin/check-ruff-pin-sync.py` — stdlib-only, porownuje oba piny.
* hook `ruff-piny-zsynchronizowane` (always_run) — lapie to przy commicie.
* krok w jobie `lint` — autorytatywny gate. Osobny krok, bo job odpala
  hooki PO NAZWIE (`pre-commit run ruff`), wiec sam lokalny hook nigdy
  by sie w CI nie uruchomil.

Bramka przetestowana w obu kierunkach: piny zgodne → exit 0, rozjazd →
exit 1 z komunikatem wskazujacym plik i wersje do poprawy.

`.github/actionlint.yaml` — hook actionlint failowal na KAZDYM commicie
dotykajacym workflowa, na findings pre-existing (7 sztuk SC2086,
identycznie na dev), wiec blokowal tez ten. To falszywy alarm:
`COMPOSE_FILES` trzyma cztery osobne argumenty i MUSI sie rozdzielic na
slowa — zacytowanie go wg podpowiedzi shellchecka zepsuloby
`docker compose`. Wyciszenie zawezone do tests.yml.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011HZzT9NjVPWUPcrZrRMQvZ

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@mpasternak

Copy link
Copy Markdown
Member

Zmergowane zbiorczo w #784 (squash → dec01573f na dev), razem z pozostałymi pięcioma otwartymi PR-ami dependabota.

Squash przepisał SHA, więc GitHub nie zamknął tego PR-a automatycznie — zamykam ręcznie. Zmiana jest na dev, zweryfikowane po treści pliku, nie po statusie PR-a.

Testowane przed mergem lokalnie (9433 + 157 Playwright + 112 JS) i w CI: 24/24 checki zielone, w tym wszystkie 12 shardów Tests (sharded).

@mpasternak mpasternak closed this Aug 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/uv/setuptools-84.0.0 branch August 20, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant