Skip to content

Update distlib requirement from >=0.3.1 to >=0.4.1 in /salvo#450

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/salvo/distlib-gte-0.4.1
Open

Update distlib requirement from >=0.3.1 to >=0.4.1 in /salvo#450
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/salvo/distlib-gte-0.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on distlib to permit the latest version.

Changelog

Sourced from distlib's changelog.

0.4.1


Released: 2026-06-02
  • scripts

    • Fix path traversal bug in handling entry points which allowed escaping the scripts directory. Thanks to tonghuaroot for the comprehensive report.
  • tests

    • Fix #251: Change test function following a reorganization which happened in the Python stdlib.

0.4.0

Released: 2025-07-17

  • markers

    • Add the interpret_parsed function.
  • wheel

    • Fix #238: Add build tag to wheel metadata if specified.

    • Fix #243: Update to support free-threading version of Python (3.13t).

    • Fix #246: Support subdirectories in the dist-info directory. Thanks to Pieter P for the patch.

    • Fix #248: Fix path normalisation issue caused by the fix for #246.

    • Move import in script wrapper to "if name == 'main'" clause.

  • tests

    • Fix #245: Skip test_package_data if a SKIP_EXT_PACKAGE_DATA environment variable is present.

0.3.9


Released: 2024-10-09
  • scripts

    • Merge #215: preload script wrappers on Windows to assist with a pip issue (thanks, Paul Moore).

    • Fix #220: Remove duplicated newline in shebang of windows launcher (thanks. A2uria). </tr></table>

... (truncated)

Commits
  • d562ad5 Changes for 0.4.1.
  • 6286442 Fix #251: Use more appropriate function in test.
  • e3b1cd6 Bump version.
  • da3e90a Added tag 0.4.0 for changeset d31f0b340fde
  • aff2cbb Finalise version.
  • 3716c4b Update change log, widen exception catching in test.
  • 660bd33 Changes for 0.4.0.
  • 56b4ad9 Guard script wrapper entrypoint import with if main (#242)
  • fe57366 docs: update coverage results link (#250)
  • c3286e5 Temporarily exclude 3.13t on windows-latest.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [distlib](https://github.com/pypa/distlib) to permit the latest version.
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](pypa/distlib@0.3.1...0.4.1)

---
updated-dependencies:
- dependency-name: distlib
  dependency-version: 0.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 8, 2026
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

@github-actions github-actions Bot added the stale label Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants