Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pip does not work with development versions of CPython due to parse error on version string #12691

Closed
1 task done
tacaswell opened this issue May 10, 2024 · 6 comments · Fixed by #12759
Closed
1 task done
Labels
type: bug A confirmed bug or unintended behavior
Milestone

Comments

@tacaswell
Copy link

tacaswell commented May 10, 2024

Description

The version string of development versions of CPython end with +, e.g. 3.12.3+ which causes errors in pip.

caused by #12300

Expected behavior

pip accepts the version string on the development versions of CPython.

pip version

approximately current main branch

Python version

3.12.3+ (the 3.12 branch)

OS

arch

How to Reproduce

  1. install development version of CPython from 3.12 branch (but I suspect any of the 3.X branches will show this)
  2. install a from a branch of pip that contains 47a8480
  3. try to install anything that specifies python versions (in my case it was build)

Output

(bleeding) ~/s/p/p/build main|✓
✘ 13:41:38 [belanna] @ pip install . --no-build-isolation
Processing /home/tcaswell/source/p/pypa/build
  Preparing metadata (pyproject.toml) ... done
ERROR: Exception:
Traceback (most recent call last):
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/cli/base_command.py", line 180, in exc_logging_wrapper
    status = run_func(*args)
             ^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/cli/req_command.py", line 247, in wrapper
    return func(self, options, args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/commands/install.py", line 377, in run
    requirement_set = resolver.resolve(
                      ^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/resolution/resolvelib/resolver.py", line 95, in resolve
    result = self._result = resolver.resolve(
                            ^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/resolvelib/resolvers.py", line 546, in resolve
    state = resolution.resolve(requirements, max_rounds=max_rounds)
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/resolvelib/resolvers.py", line 427, in resolve
    failure_causes = self._attempt_to_pin_criterion(name)
                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/resolvelib/resolvers.py", line 239, in _attempt_to_pin_criterion
    criteria = self._get_updated_criteria(candidate)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/resolvelib/resolvers.py", line 229, in _get_updated_criteria
    for requirement in self._p.get_dependencies(candidate=candidate):
                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/resolution/resolvelib/provider.py", line 247, in get_dependencies
    return [r for r in candidate.iter_dependencies(with_requires) if r is not None]
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/resolution/resolvelib/candidates.py", line 243, in iter_dependencies
    for r in requires:
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_internal/metadata/importlib/_dists.py", line 222, in iter_dependencies
    elif not extras and req.marker.evaluate({"extra": ""}):
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/markers.py", line 252, in evaluate
    return _evaluate_markers(self._markers, current_environment)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/markers.py", line 158, in _evaluate_markers
    groups[-1].append(_eval_op(lhs_value, op, rhs_value))
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/markers.py", line 116, in _eval_op
    return spec.contains(lhs, prereleases=True)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/specifiers.py", line 568, in contains
    normalized_item = _coerce_version(item)
                      ^^^^^^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/specifiers.py", line 36, in _coerce_version
    version = Version(version)
              ^^^^^^^^^^^^^^^^
  File "/home/tcaswell/.virtualenvs/bleeding/lib/python3.12/site-packages/pip/_vendor/packaging/version.py", line 200, in __init__
    raise InvalidVersion(f"Invalid version: '{version}'")
pip._vendor.packaging.version.InvalidVersion: Invalid version: '3.12.3+'

Code of Conduct

@tacaswell tacaswell added S: needs triage Issues/PRs that need to be triaged type: bug A confirmed bug or unintended behavior labels May 10, 2024
@pradyunsg pradyunsg removed the S: needs triage Issues/PRs that need to be triaged label May 10, 2024
@sbidoul sbidoul added this to the 24.1 milestone May 11, 2024
@sbidoul
Copy link
Member

sbidoul commented May 11, 2024

@tacaswell do you have a dependency with a python_full_version environment marker ?

@pradyunsg
Copy link
Member

@notatallshaw
Copy link
Member

notatallshaw commented May 18, 2024

Is this considered a blocker for pip 24.1?

uv has taken the approach of fixing up versions that are not PEP 440 compliant, in particular this is how they handle python_full_version: https://github.com/astral-sh/uv/pull/1771/files

Might it be worth applying the same on pip side for python_full_version specifically?

@sbidoul
Copy link
Member

sbidoul commented May 19, 2024

I have proposed pypa/packaging#802 to fix this.

@stonebig
Copy link
Contributor

stonebig commented May 20, 2024

hello, I'm apparently maybe by this also in a constraint file:

ERROR: Invalid requirement: 'python-hdf4>=0.10.0+dummy' (from line 436 of ...\constraints.txt)

is this the same bug ? and solution ?

@sbidoul
Copy link
Member

sbidoul commented May 20, 2024

@stonebig this is another issue:

InvalidRequirement: Local version label can only be used with `==` or `!=` operators
    python-hdf4>=0.10.0+dummy
               ~~~~~~~~^

Pip should show the detailed error, though.

This was referenced Jun 6, 2024
mergify bot pushed a commit to aws/jsii that referenced this issue Jun 21, 2024
…test/generated-code (#4548)

Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
edgarrmondragon pushed a commit to reservoir-data/tap-canny that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
inmantaci pushed a commit to inmanta/inmanta-core that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
edgarrmondragon pushed a commit to MeltanoLabs/tap-gohighlevel that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
inmantaci pushed a commit to inmanta/inmanta-core that referenced this issue Jun 21, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
mergify bot pushed a commit to aws/jsii that referenced this issue Jun 24, 2024
…s/@jsii/python-runtime (#4550)

Updates the requirements on [pip](https://github.com/pypa/pip) to permit the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements. (<code>[#12713](pypa/pip#12713) &lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (<code>[#12675](pypa/pip#12675) &lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for extra names, for packages generated by <code>setuptools</code>. (<code>[#12688](pypa/pip#12688) &lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in <code>+</code> in the version string. (<code>[#12691](pypa/pip#12691) &lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7. (<code>[#11934](pypa/pip#11934) &lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or dependency specifiers
must be uninstalled before upgrading them. (<code>[#12063](pypa/pip#12063) &lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12774">#12774</a> from uranusjr/disable-313-uri-test</li>
<li><a href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a> Upgrade truststore to 0.9.1 (<a href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a> Skip until 3.13.0b3 instead</li>
<li><a href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a> Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12764">#12764</a> from pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a> Merge pull request <a href="https://github.com/pypa/pip/issues/12763">#12763</a> from pradyunsg/release/24.1.beta2</li>
<li><a href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a> Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a> Bump for development</li>
<li><a href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a> Bump for release</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/24.0...24.1">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
edgarrmondragon pushed a commit to MeltanoLabs/tap-messagebird that referenced this issue Jun 24, 2024
Bumps [pip](https://github.com/pypa/pip) from 24.0 to 24.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=24.0&new-version=24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this issue Jun 26, 2024
24.1 (2024-06-20)
=================

Vendored Libraries
------------------

- Upgrade truststore to 0.9.1.


24.1b2 (2024-06-12)
===================

Features
--------

- Report informative messages about invalid requirements. (`#12713 <https://github.com/pypa/pip/issues/12713>`_)

Bug Fixes
---------

- Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. (`#12675 <https://github.com/pypa/pip/issues/12675>`_)
- Accommodate for mismatches between different sources of truth for extra names, for packages generated by ``setuptools``. (`#12688 <https://github.com/pypa/pip/issues/12688>`_)
- Accommodate for development versions of CPython ending in ``+`` in the version string. (`#12691 <https://github.com/pypa/pip/issues/12691>`_)

Vendored Libraries
------------------

- Upgrade packaging to 24.1
- Upgrade requests to 2.32.0
- Remove vendored colorama
- Remove vendored six
- Remove vendored webencodings
- Remove vendored charset_normalizer

  ``requests`` provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.

24.1b1 (2024-05-06)
===================

Deprecations and Removals
-------------------------

- Drop support for EOL Python 3.7. (`#11934 <https://github.com/pypa/pip/issues/11934>`_)
- Remove support for legacy versions and dependency specifiers.

  Packages with non standard-compliant versions or dependency specifiers are now ignored by the resolver.
  Already installed packages with non standard-compliant versions or dependency specifiers
  must be uninstalled before upgrading them. (`#12063 <https://github.com/pypa/pip/issues/12063>`_)

Features
--------

- Improve performance of resolution of large dependency trees, with more caching. (`#12453 <https://github.com/pypa/pip/issues/12453>`_)
- Further improve resolution performance of large dependency trees, by caching hash calculations. (`#12657 <https://github.com/pypa/pip/issues/12657>`_)
- Reduce startup time of commands (e.g. show, freeze) that do not access the network by 15-30%. (`#4768 <https://github.com/pypa/pip/issues/4768>`_)
- Reword and improve presentation of uninstallation errors. (`#10421 <https://github.com/pypa/pip/issues/10421>`_)
- Add a 'raw' progress_bar type for simple and parsable download progress reports (`#11508 <https://github.com/pypa/pip/issues/11508>`_)
- ``pip list`` no longer performs the pip version check unless ``--outdated`` or ``--uptodate`` is given. (`#11677 <https://github.com/pypa/pip/issues/11677>`_)
- Use the ``data_filter`` when extracting tarballs, if it's available. (`#12111 <https://github.com/pypa/pip/issues/12111>`_)
- Display the Project-URL value under key "Home-page" in ``pip show`` when the Home-Page metadata field is not set.

  The Project-URL key detection is case-insensitive, and ignores any dashes and underscores. (`#11221 <https://github.com/pypa/pip/issues/11221>`_)

Bug Fixes
---------

- Ensure ``-vv`` gets passed to any ``pip install`` build environment subprocesses. (`#12577 <https://github.com/pypa/pip/issues/12577>`_)
- Deduplicate entries in the ``Requires`` field of ``pip show``. (`#12165 <https://github.com/pypa/pip/issues/12165>`_)
- Fix error on checkout for subversion and bazaar with verbose mode on. (`#11050 <https://github.com/pypa/pip/issues/11050>`_)
- Fix exception with completions when COMP_CWORD is not set (`#12401 <https://github.com/pypa/pip/issues/12401>`_)
- Fix intermittent "cannot locate t64.exe" errors when upgrading pip. (`#12666 <https://github.com/pypa/pip/issues/12666>`_)
- Remove duplication in invalid wheel error message (`#12579 <https://github.com/pypa/pip/issues/12579>`_)
- Remove the incorrect pip3.x console entrypoint from the pip wheel. This console
  script continues to be generated by pip when it installs itself. (`#12536 <https://github.com/pypa/pip/issues/12536>`_)
- Gracefully skip VCS detection in pip freeze when PATH points to a non-directory path. (`#12567 <https://github.com/pypa/pip/issues/12567>`_)
- Make the ``--proxy`` parameter take precedence over environment variables. (`#10685 <https://github.com/pypa/pip/issues/10685>`_)

Vendored Libraries
------------------

- Add charset-normalizer 3.3.2
- Remove chardet
- Remove pyparsing
- Upgrade CacheControl to 0.14.0
- Upgrade certifi to 2024.2.2
- Upgrade distro to 1.9.0
- Upgrade idna to 3.7
- Upgrade msgpack to 1.0.8
- Upgrade packaging to 24.0
- Upgrade platformdirs to 4.2.1
- Upgrade pygments to 2.17.2
- Upgrade rich to 13.7.1
- Upgrade setuptools to 69.5.1
- Upgrade tenacity to 8.2.3
- Upgrade typing_extensions to 4.11.0
- Upgrade urllib3 to 1.26.18

Improved Documentation
----------------------

- Document UX research done on pip. (`#10745 <https://github.com/pypa/pip/issues/10745>`_)
- Fix the direct usage of zipapp showing up as ``python -m pip.pyz`` rather than ``./pip.pyz`` / ``.\pip.pyz`` (`#12043 <https://github.com/pypa/pip/issues/12043>`_)
- Add a warning explaining that the snippet in "Fallback behavior" is not a valid
  ``pyproject.toml`` snippet for projects, and link to setuptools documentation
  instead. (`#12122 <https://github.com/pypa/pip/issues/12122>`_)
- The Python Support Policy has been updated. (`#12529 <https://github.com/pypa/pip/issues/12529>`_)
- Document the environment variables that correspond with CLI options. (`#12576 <https://github.com/pypa/pip/issues/12576>`_)
- Update architecture documentation for command line interface. (`#6831 <https://github.com/pypa/pip/issues/6831>`_)

Process
-------

- Remove ``setup.py`` since all the pip project metadata is now declared in
  ``pyproject.toml``.
- Move remaining pip development tools configurations to ``pyproject.toml``.
JosephAbbey pushed a commit to JosephAbbey/ha_custom_sentences that referenced this issue Jun 27, 2024
Updates the requirements on [pip](https://github.com/pypa/pip) to permit
the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<h1>24.1b1 (2024-05-06)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>
<p>Drop support for EOL Python 3.7.
(<code>[#11934](pypa/pip#11934)
&lt;https://github.com/pypa/pip/issues/11934&gt;</code>_)</p>
</li>
<li>
<p>Remove support for legacy versions and dependency specifiers.</p>
<p>Packages with non standard-compliant versions or dependency
specifiers are now ignored by the resolver.
Already installed packages with non standard-compliant versions or
dependency specifiers
must be uninstalled before upgrading them.
(<code>[#12063](pypa/pip#12063)
&lt;https://github.com/pypa/pip/issues/12063&gt;</code>_)</p>
</li>
</ul>
<p>Features</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/bc877e602b5a41c19c0cfb38ee19218fa98eab1a"><code>bc877e6</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/075a3dddf1566feb77f51027df4e94110d8ec9ff"><code>075a3dd</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12774">#12774</a> from
uranusjr/disable-313-uri-test</li>
<li><a
href="https://github.com/pypa/pip/commit/205af8ed88b171fd8fc8a9ba2c75b827a7affe40"><code>205af8e</code></a>
Upgrade truststore to 0.9.1 (<a
href="https://github.com/pypa/pip/issues/12707">#12707</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/87f874fca97b507d89538f35f4653032a553e063"><code>87f874f</code></a>
Skip until 3.13.0b3 instead</li>
<li><a
href="https://github.com/pypa/pip/commit/596be042ea934b65d99b95e984e6cd574fa6b7dd"><code>596be04</code></a>
Mark failing tests on Windows + Py3.13 as xfail</li>
<li><a
href="https://github.com/pypa/pip/commit/d94806f9592f03cc092079f4517039ea6c1b2e0e"><code>d94806f</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12764">#12764</a> from
pradyunsg/pause-prepare-release-for-news-edits</li>
<li><a
href="https://github.com/pypa/pip/commit/71b168879e75796b61f524bfcedc99b1de72f58b"><code>71b1688</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12763">#12763</a> from
pradyunsg/release/24.1.beta2</li>
<li><a
href="https://github.com/pypa/pip/commit/b2fdf3b18518decbff855f3de23e3eb14a8e0a12"><code>b2fdf3b</code></a>
Pause in <code>prepare-release</code> for updating the NEWS file</li>
<li><a
href="https://github.com/pypa/pip/commit/17c938adec74cdacf4339b7475625e195f36ca62"><code>17c938a</code></a>
Bump for development</li>
<li><a
href="https://github.com/pypa/pip/commit/ece225529b648918743d5c3f59da91822e32ea3a"><code>ece2255</code></a>
Bump for release</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/21.0...24.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
edgarrmondragon pushed a commit to reservoir-data/tap-pomelo that referenced this issue Jul 1, 2024
…104)

Bumps the all group in /.github/workflows with 2 updates:
[pip](https://github.com/pypa/pip) and
[tox](https://github.com/tox-dev/tox).

Updates `pip` from 24.0 to 24.1.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1.1 (2024-06-26)</h1>
<h2>Bug Fixes</h2>
<ul>
<li>Actually use system trust stores when the truststore feature is
enabled.</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade requests to 2.32.3</li>
</ul>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/a432c7f4170b9ef798a15f035f5dfdb4cc939f35"><code>a432c7f</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/a1ae982bff01c3e625c56081b0a54e0688264cf4"><code>a1ae982</code></a>
Update AUTHORS.txt</li>
<li><a
href="https://github.com/pypa/pip/commit/300ed75aa50e438c5bf84692964bd9ade81c4916"><code>300ed75</code></a>
Upgrade requests to 2.32.3 (<a
href="https://github.com/pypa/pip/issues/12784">#12784</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/5c389ec91fa178ec3897f5b9522441f4d3922662"><code>5c389ec</code></a>
Split up Windows tests relying on urlunparse behaviour (<a
href="https://github.com/pypa/pip/issues/12788">#12788</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/00c75c45b36c4b03ff052eb98a1d945910bce29f"><code>00c75c4</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12773">#12773</a> from
matthewhughes934/fix-tests-unable-to-cleanup</li>
<li><a
href="https://github.com/pypa/pip/commit/67e2a5698706751161d8af3dad1dbb8e62bc8cbb"><code>67e2a56</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12783">#12783</a> from
pfmoore/rel_doc2</li>
<li><a
href="https://github.com/pypa/pip/commit/a58c20a39dca0fe587545c899c852dcf3d218bfa"><code>a58c20a</code></a>
Minor release is the quarter number</li>
<li><a
href="https://github.com/pypa/pip/commit/2753c77e2b3999683dac5201deb69fbd6c31f667"><code>2753c77</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12780">#12780</a> from
pfmoore/rel_doc</li>
<li><a
href="https://github.com/pypa/pip/commit/4dd55ebd5635c89279a46fcad6a8c33529f7a875"><code>4dd55eb</code></a>
Document the structure of our release number</li>
<li><a
href="https://github.com/pypa/pip/commit/8cdf79798ab9490c24cd8a7e965153eb789f04e6"><code>8cdf797</code></a>
Fix directories not cleaned up after test</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/24.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `tox` from 4.15.0 to 4.15.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/releases">tox's
releases</a>.</em></p>
<blockquote>
<h2>4.15.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>fix skip with package = wheel by <a
href="https://github.com/MarcinKonowalczyk"><code>@​MarcinKonowalczyk</code></a>
in <a
href="https://github.com/tox-dev/tox/pull/3269">tox-dev/tox#3269</a></li>
<li>Fixed typo in user guide. by <a
href="https://github.com/carltongibson"><code>@​carltongibson</code></a>
in <a
href="https://github.com/tox-dev/tox/pull/3277">tox-dev/tox#3277</a></li>
<li>Fix broad build privileges @ GHA release workflow by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a> in <a
href="https://github.com/tox-dev/tox/pull/3281">tox-dev/tox#3281</a></li>
<li>Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>. by <a
href="https://github.com/ssbarnea"><code>@​ssbarnea</code></a> in <a
href="https://github.com/tox-dev/tox/pull/3288">tox-dev/tox#3288</a></li>
<li>Fix section substitution with setenv by <a
href="https://github.com/JJLLWW"><code>@​JJLLWW</code></a> in <a
href="https://github.com/tox-dev/tox/pull/3289">tox-dev/tox#3289</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/MarcinKonowalczyk"><code>@​MarcinKonowalczyk</code></a>
made their first contribution in <a
href="https://github.com/tox-dev/tox/pull/3269">tox-dev/tox#3269</a></li>
<li><a
href="https://github.com/carltongibson"><code>@​carltongibson</code></a>
made their first contribution in <a
href="https://github.com/tox-dev/tox/pull/3277">tox-dev/tox#3277</a></li>
<li><a href="https://github.com/JJLLWW"><code>@​JJLLWW</code></a> made
their first contribution in <a
href="https://github.com/tox-dev/tox/pull/3289">tox-dev/tox#3289</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/tox/compare/4.15.0...4.15.1">https://github.com/tox-dev/tox/compare/4.15.0...4.15.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's
changelog</a>.</em></p>
<blockquote>
<h2>v4.15.1 (2024-06-05)</h2>
<p>Features - 4.15.1</p>
<pre><code>- Fix ``skip_missing_interpreters`` option for ``package =
wheel`` (:issue:`3269`)
<p>Bugfixes - 4.15.1
</code></pre></p>
<ul>
<li>Fix section substitution with setenv.
(:issue:<code>3262</code>)</li>
<li>Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>. (:issue:<code>3288</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/tox/commit/079000fe80bb9baa3eb0e7f8f53f932810942d14"><code>079000f</code></a>
release 4.15.1</li>
<li><a
href="https://github.com/tox-dev/tox/commit/489ad821e5b9c6d5aff500e1b3abc4292f52a2dc"><code>489ad82</code></a>
Fix section substitution with setenv (<a
href="https://github.com/tox-dev/tox/issues/3289">#3289</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/7317225d179a7bd70cbe409f5273d6aa3ffac488"><code>7317225</code></a>
Allow <code>ConfigSet.add_config</code> to receive parameterized
generics for <code>of_type</code>....</li>
<li><a
href="https://github.com/tox-dev/tox/commit/406f80887f757ba430c79280ad767492cf046296"><code>406f808</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://github.com/tox-dev/tox/issues/3283">#3283</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/5c28d9c180679ee712a2974f4bb7d4765295bd48"><code>5c28d9c</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://github.com/tox-dev/tox/issues/3279">#3279</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/f4e257c3a4ea000e07d5b670836d439f5e11fce6"><code>f4e257c</code></a>
Fix broad build privileges @ GHA release workflow (<a
href="https://github.com/tox-dev/tox/issues/3281">#3281</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/77564a1aa04300a8b2cecf8f871864d60019d645"><code>77564a1</code></a>
Fixed typo in user guide.</li>
<li><a
href="https://github.com/tox-dev/tox/commit/e2f66b1b890f57a468c639c8c5ce7993d98ce447"><code>e2f66b1</code></a>
[pre-commit.ci] auto fixes from pre-commit.com hooks</li>
<li><a
href="https://github.com/tox-dev/tox/commit/9afc9cba99ed0f1b163a1a96727a3bf231a4f951"><code>9afc9cb</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/tox-dev/tox/commit/3db98229ac0730e204b832c911861249d389070c"><code>3db9822</code></a>
fix skip with package = wheel (<a
href="https://github.com/tox-dev/tox/issues/3269">#3269</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/tox/compare/4.15.0...4.15.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@edgarrmondragon.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
torbennehmer added a commit to torbennehmer/hacs-e3dc that referenced this issue Jul 2, 2024
Updates the requirements on [pip](https://github.com/pypa/pip) to permit
the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>24.1.1 (2024-06-26)</h1>
<h2>Bug Fixes</h2>
<ul>
<li>Actually use system trust stores when the truststore feature is
enabled.</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade requests to 2.32.3</li>
</ul>
<h1>24.1 (2024-06-20)</h1>
<h2>Vendored Libraries</h2>
<ul>
<li>Upgrade truststore to 0.9.1.</li>
</ul>
<h1>24.1b2 (2024-06-12)</h1>
<h2>Features</h2>
<ul>
<li>Report informative messages about invalid requirements.
(<code>[#12713](pypa/pip#12713)
&lt;https://github.com/pypa/pip/issues/12713&gt;</code>_)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Eagerly import the self version check logic to avoid crashes while
upgrading or downgrading pip at the same time.
(<code>[#12675](pypa/pip#12675)
&lt;https://github.com/pypa/pip/issues/12675&gt;</code>_)</li>
<li>Accommodate for mismatches between different sources of truth for
extra names, for packages generated by <code>setuptools</code>.
(<code>[#12688](pypa/pip#12688)
&lt;https://github.com/pypa/pip/issues/12688&gt;</code>_)</li>
<li>Accommodate for development versions of CPython ending in
<code>+</code> in the version string.
(<code>[#12691](pypa/pip#12691)
&lt;https://github.com/pypa/pip/issues/12691&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<ul>
<li>
<p>Upgrade packaging to 24.1</p>
</li>
<li>
<p>Upgrade requests to 2.32.0</p>
</li>
<li>
<p>Remove vendored colorama</p>
</li>
<li>
<p>Remove vendored six</p>
</li>
<li>
<p>Remove vendored webencodings</p>
</li>
<li>
<p>Remove vendored charset_normalizer</p>
<p><code>requests</code> provides optional character detection support
on some APIs when processing ambiguous bytes. This isn't relevant for
pip to function and we're able to remove it due to recent upstream
changes.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/a432c7f4170b9ef798a15f035f5dfdb4cc939f35"><code>a432c7f</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/a1ae982bff01c3e625c56081b0a54e0688264cf4"><code>a1ae982</code></a>
Update AUTHORS.txt</li>
<li><a
href="https://github.com/pypa/pip/commit/300ed75aa50e438c5bf84692964bd9ade81c4916"><code>300ed75</code></a>
Upgrade requests to 2.32.3 (<a
href="https://github.com/pypa/pip/issues/12784">#12784</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/5c389ec91fa178ec3897f5b9522441f4d3922662"><code>5c389ec</code></a>
Split up Windows tests relying on urlunparse behaviour (<a
href="https://github.com/pypa/pip/issues/12788">#12788</a>)</li>
<li><a
href="https://github.com/pypa/pip/commit/00c75c45b36c4b03ff052eb98a1d945910bce29f"><code>00c75c4</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12773">#12773</a> from
matthewhughes934/fix-tests-unable-to-cleanup</li>
<li><a
href="https://github.com/pypa/pip/commit/67e2a5698706751161d8af3dad1dbb8e62bc8cbb"><code>67e2a56</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12783">#12783</a> from
pfmoore/rel_doc2</li>
<li><a
href="https://github.com/pypa/pip/commit/a58c20a39dca0fe587545c899c852dcf3d218bfa"><code>a58c20a</code></a>
Minor release is the quarter number</li>
<li><a
href="https://github.com/pypa/pip/commit/2753c77e2b3999683dac5201deb69fbd6c31f667"><code>2753c77</code></a>
Merge pull request <a
href="https://github.com/pypa/pip/issues/12780">#12780</a> from
pfmoore/rel_doc</li>
<li><a
href="https://github.com/pypa/pip/commit/4dd55ebd5635c89279a46fcad6a8c33529f7a875"><code>4dd55eb</code></a>
Document the structure of our release number</li>
<li><a
href="https://github.com/pypa/pip/commit/8cdf79798ab9490c24cd8a7e965153eb789f04e6"><code>8cdf797</code></a>
Fix directories not cleaned up after test</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/21.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 10, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
type: bug A confirmed bug or unintended behavior
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants