pax_global_header00006660000000000000000000000064152504611350014514gustar00rootroot0000000000000052 comment=89cccef40df9011f03bec18cf52c53d1096ed6ee pypa-build-4396e57/000077500000000000000000000000001525046113500140525ustar00rootroot00000000000000pypa-build-4396e57/.dockerignore000066400000000000000000000000571525046113500165300ustar00rootroot00000000000000.tox .*_cache *.egg-info Dockerfile build dist pypa-build-4396e57/.github/000077500000000000000000000000001525046113500154125ustar00rootroot00000000000000pypa-build-4396e57/.github/CODEOWNERS000066400000000000000000000000471525046113500170060ustar00rootroot00000000000000* @gaborbernat @layday @henryiii pypa-build-4396e57/.github/dependabot.yml000066400000000000000000000003631525046113500202440ustar00rootroot00000000000000version: 2 updates: - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" day: "tuesday" groups: github-actions: patterns: - "*" cooldown: default-days: 7 pypa-build-4396e57/.github/pull_request_template.md000066400000000000000000000010551525046113500223540ustar00rootroot00000000000000## Description ## Changelog - [ ] Added changelog fragment: `docs/changelog/..rst` - Types: `feature`, `bugfix`, `doc`, `removal`, `misc` - Example: `123.feature.rst` containing `` Add custom backend support - by :user:`yourname` `` ## Checklist - [ ] Tests pass locally (`tox`) - [ ] Code follows project style (`tox -e fix`) - [ ] Type checks pass (`tox -e type`) - [ ] Documentation builds (`tox -e docs`) pypa-build-4396e57/.github/release.yml000066400000000000000000000001261525046113500175540ustar00rootroot00000000000000changelog: exclude: authors: - dependabot[bot] - pre-commit-ci[bot] pypa-build-4396e57/.github/workflows/000077500000000000000000000000001525046113500174475ustar00rootroot00000000000000pypa-build-4396e57/.github/workflows/cd.yml000066400000000000000000000040431525046113500205610ustar00rootroot00000000000000name: CD on: workflow_dispatch: pull_request: branches: - main - v* push: tags: - "[0-9]+.[0-9]+.[0-9]+" - "[0-9]+.[0-9]+.[0-9]+.post[0-9]+" release: types: - published concurrency: group: cd-${{ github.ref }} cancel-in-progress: true permissions: {} jobs: dist: name: Build distribution runs-on: ubuntu-latest permissions: contents: read # to checkout steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1 create-release: name: Create GitHub Release needs: [dist] runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/') permissions: contents: write # to create release steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: Create GitHub Release run: gh release create "$RELEASE_TAG" --generate-notes env: GH_TOKEN: ${{ github.token }} RELEASE_TAG: ${{ github.ref_name }} publish: name: Publish to PyPI needs: [dist] runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/') || (github.event_name == 'release' && github.event.action == 'published') environment: name: pypi url: https://pypi.org/p/build permissions: id-token: write # to sign attestation attestations: write # to create attestation steps: - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: Packages path: dist - name: Generate artifact attestation for sdist and wheel uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 with: subject-path: "dist/build-*" - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 pypa-build-4396e57/.github/workflows/pre-release.yml000066400000000000000000000047451525046113500224100ustar00rootroot00000000000000name: Pre-release run-name: Pre-release (${{ inputs.bump }}) on: workflow_dispatch: inputs: bump: description: "Version bump type" required: true type: choice options: - auto - major - minor - patch default: auto concurrency: group: pre-release-${{ github.ref }} cancel-in-progress: true permissions: {} jobs: pre-release: name: Pre-release runs-on: ubuntu-latest if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/v') environment: release permissions: contents: read # to checkout steps: - name: Checkout code uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false ref: ${{ github.ref }} - name: Install the latest version of uv uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: enable-cache: true cache-dependency-glob: "pyproject.toml" github-token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python run: uv python install 3.14 - name: Create release token id: release-token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: client-id: ${{ vars.RELEASE_APP_CLIENT_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} permission-contents: write - name: Configure git identity env: APP_SLUG: ${{ steps.release-token.outputs.app-slug }} GH_TOKEN: ${{ steps.release-token.outputs.token }} run: | user_id=$(gh api "/users/${APP_SLUG}[bot]" --jq .id) git config user.name "${APP_SLUG}[bot]" git config user.email "${user_id}+${APP_SLUG}[bot]@users.noreply.github.com" - name: Generate release commit and tag run: uv tool run --with tox-uv tox r -e release -- --version "$BUMP" --no-push env: BUMP: ${{ inputs.bump }} - name: Verify docs build against the release commit run: uv tool run --with tox-uv tox r -e docs - name: Push release commit and tag run: | gh auth setup-git tag=$(git describe --tags --exact-match HEAD) git push --atomic origin "HEAD:${BRANCH}" "refs/tags/${tag}" env: GH_TOKEN: ${{ steps.release-token.outputs.token }} BRANCH: ${{ github.ref_name }} pypa-build-4396e57/.github/workflows/reusable-change-detection.yml000066400000000000000000000042411525046113500251740ustar00rootroot00000000000000name: change detection on: workflow_call: outputs: run-docs: description: Whether or not build the docs value: ${{ jobs.change-detection.outputs.run-docs || false }} run-tests: description: Whether or not run the tests value: ${{ jobs.change-detection.outputs.run-tests || false }} permissions: {} jobs: change-detection: name: Identify source changes runs-on: ubuntu-latest timeout-minutes: 1 outputs: run-docs: ${{ steps.docs-changes.outputs.run-docs || false }} run-tests: ${{ steps.tests-changes.outputs.run-tests || false }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Get a list of the changed runtime-related files if: github.event_name == 'pull_request' id: changed-testable-files uses: Ana06/get-changed-files@25f79e676e7ea1868813e21465014798211fad8c # v2.3.0 with: filter: | src/** tests/** tox.toml pyproject.toml .github/workflows/test.yml .github/workflows/reusable-type.yml .github/workflows/reusable-pytest.yml - name: Set a flag for running the tests if: >- github.event_name != 'pull_request' || steps.changed-testable-files.outputs.added_modified_renamed != '' id: tests-changes run: >- echo "run-tests=true" >> "${GITHUB_OUTPUT}" - name: Get a list of the changed documentation-related files if: github.event_name == 'pull_request' id: changed-docs-files uses: Ana06/get-changed-files@25f79e676e7ea1868813e21465014798211fad8c # v2.3.0 with: filter: | docs/** CHANGELOG.rst README.md .github/workflows/test.yml .github/workflows/reusable-docs.yml - name: Set a flag for building the docs if: >- github.event_name != 'pull_request' || steps.changed-docs-files.outputs.added_modified_renamed != '' id: docs-changes run: >- echo "run-docs=true" >> "${GITHUB_OUTPUT}" pypa-build-4396e57/.github/workflows/reusable-docs.yml000066400000000000000000000012671525046113500227300ustar00rootroot00000000000000name: check on: workflow_call: permissions: {} jobs: docs: name: Build docs runs-on: ubuntu-latest env: PY_COLORS: 1 TOX_PARALLEL_NO_SPINNER: 1 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Setup Python 3.12 uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" - name: Install tox run: python -m pip install tox - name: Setup run environment run: tox -vv --notest -e docs - name: Run check for docs run: tox -e docs --skip-pkg-install pypa-build-4396e57/.github/workflows/reusable-pytest.yml000066400000000000000000000073661525046113500233360ustar00rootroot00000000000000name: pytest on: workflow_call: permissions: {} jobs: integration-sources: name: Download integration sources runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download the sources run: python tests/integration_sources.py - name: Share the sources with the test matrix uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: integration-sources path: .integration-sources retention-days: 1 compression-level: 0 # the archives are compressed already include-hidden-files: true # .integration-sources is a hidden directory if-no-files-found: error # an empty artifact silently returns every job to its own download pytest: name: Run tests needs: integration-sources if: ${{ !cancelled() }} runs-on: ${{ matrix.os }}-latest env: PYTEST_ADDOPTS: "--run-integration --showlocals -vv --durations=10 --reruns 5 --only-rerun CalledProcessError --only-rerun RemoteDisconnected --only-rerun HTTPError" strategy: fail-fast: false matrix: os: - ubuntu - macos - windows py: - "pypy3.10-v7.3.19" - "pypy3.11-v7.3.19" - "3.15" - "3.14" - "3.13" - "3.12" - "3.11" - "3.10" tox-target: - "tox" - "min" # jobs not required in branch protection continue-on-error: ${{ (startsWith(matrix.py, 'pypy') && matrix.os == 'windows') && true || false }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: Get the integration sources # a failure here is not fatal, because the test fixture downloads the sources itself continue-on-error: true uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: integration-sources path: .integration-sources - name: Setup uv uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 - name: Install tox (uv) run: uv tool install tox --with tox-uv - name: Setup python for test ${{ matrix.py }} uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ matrix.py }} allow-prereleases: true - name: Run test suite via tox if: matrix.tox-target == 'tox' shell: bash run: | PYTHON_VERSION=$PYTHON_VERSION_RAW BASE=${PYTHON_VERSION%-*} tox -vv --notest -e $BASE tox -e $BASE --skip-pkg-install env: PYTHON_VERSION_RAW: ${{ matrix.py }} - name: Run minimum version test if: matrix.tox-target == 'min' shell: bash run: | PYTHON_VERSION=$PYTHON_VERSION_RAW BASE=${PYTHON_VERSION%-*} tox -e $TOX_TARGET-$BASE env: PYTHON_VERSION_RAW: ${{ matrix.py }} TOX_TARGET: ${{ matrix.tox-target }} - name: Run path test if: matrix.tox-target == 'tox' && matrix.py == '3.10' run: tox -e path - name: Combine coverage files if: always() run: tox -e coverage - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 if: always() env: PYTHON: ${{ matrix.python }} with: files: .tox/coverage.xml flags: tests env_vars: PYTHON name: ${{ matrix.py }} - ${{ matrix.os }} - ${{ matrix.tox-target }} pypa-build-4396e57/.github/workflows/reusable-type.yml000066400000000000000000000012661525046113500227600ustar00rootroot00000000000000name: type on: workflow_call: permissions: {} jobs: type: name: Type check runs-on: ubuntu-latest env: PY_COLORS: 1 TOX_PARALLEL_NO_SPINNER: 1 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Setup Python 3.10 uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.10" - name: Install tox run: python -m pip install tox - name: Setup run environment run: tox -vv --notest -e type - name: Run check for type run: tox -e type --skip-pkg-install pypa-build-4396e57/.github/workflows/test.yml000066400000000000000000000027601525046113500211560ustar00rootroot00000000000000name: test on: push: branches: - main - v* pull_request: branches: - main - v* schedule: - cron: "0 8 * * 1" workflow_dispatch: concurrency: group: test-${{ github.ref }} cancel-in-progress: true permissions: {} jobs: change-detection: uses: $/.github/workflows/reusable-change-detection.yml check-docs: needs: change-detection if: fromJSON(needs.change-detection.outputs.run-docs) uses: $/.github/workflows/reusable-docs.yml pytest: needs: change-detection if: fromJSON(needs.change-detection.outputs.run-tests) uses: $/.github/workflows/reusable-pytest.yml type: needs: change-detection if: fromJSON(needs.change-detection.outputs.run-tests) uses: $/.github/workflows/reusable-type.yml # https://github.com/marketplace/actions/alls-green#why required-checks-pass: # This job does nothing and is only used for the branch protection name: Required checks pass if: always() needs: - change-detection # transitive - check-docs - pytest - type runs-on: ubuntu-latest steps: - name: Decide whether the needed jobs succeeded or failed uses: re-actors/alls-green@b5b5b37504aa4183270bd3d855c52a67f212be35 # v1.3.0 with: allowed-skips: >- ${{ !fromJSON(needs.change-detection.outputs.run-docs) && 'check-docs,' || '' }} ${{ !fromJSON(needs.change-detection.outputs.run-tests) && 'pytest,type,' || '' }} jobs: ${{ toJSON(needs) }} pypa-build-4396e57/.gitignore000066400000000000000000000005611525046113500160440ustar00rootroot00000000000000# Byte-compiled / optimized / DLL files __pycache__/ *.py[cod] # Distribution / packaging build/lib/ dist/ *.egg-info/ .eggs # Testing and coverage .cache .nox/ .mypy_cache/ .pytest_cache htmlcov/ .coverage coverage.xml tests/integration/ .integration-sources .tox Dockerfile # Restore src/build in case user ignores 'build' !src/build # Lockfiles uv.lock *pylock* pypa-build-4396e57/.pre-commit-config.yaml000066400000000000000000000062031525046113500203340ustar00rootroot00000000000000ci: autofix_prs: false autoupdate_commit_msg: "pre-commit: bump repositories" repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # frozen: v6.0.0 hooks: - id: check-ast - id: check-builtin-literals - id: check-docstring-first - id: check-merge-conflict - id: check-yaml - id: check-toml exclude: tests/packages/test-(bad-syntax|no-permission)/pyproject.toml - id: debug-statements - id: end-of-file-fixer - id: trailing-whitespace - repo: https://github.com/abravalheri/validate-pyproject rev: 17e12779811926f000bdfa1795f9e3735dd71ac3 # frozen: 0.26 hooks: - id: validate-pyproject - repo: https://github.com/adamchainz/blacken-docs rev: dda8db18cfc68df532abf33b185ecd12d5b7b326 # frozen: 1.20.0 hooks: - id: blacken-docs additional_dependencies: [black==25.*] - repo: https://github.com/google/yamlfmt rev: "v0.21.0" hooks: - id: yamlfmt - repo: local hooks: - id: mdformat name: mdformat entry: mdformat --wrap 120 language: python types: [markdown] additional_dependencies: - mdformat-gfm>=1 - mdformat-ruff>=0.1.3 - repo: https://github.com/LilSpazJoekp/docstrfmt rev: c1813841673cdcd6cf602dde1edb78a5d5e45235 # frozen: v2.2.1 hooks: - id: docstrfmt args: ["-l", "120"] additional_dependencies: ["sphinx>=9.1"] # title must outrank the included CHANGELOG.rst headings exclude: ^docs/changelog\.rst$ - repo: https://github.com/astral-sh/ruff-pre-commit rev: 1f1e8bf348ff38fc88619a38d3ca4d9c56abea49 # frozen: v0.16.5 hooks: - id: ruff-check args: [--fix] - id: ruff-format - repo: https://github.com/henryiii/flake8-lazy rev: 3b5e52593dfaec56e6e4a48f237bafcf3d0b83ea # frozen: v0.9.0 hooks: - id: flake8-lazy files: ^src/ args: [--apply=set] - repo: https://github.com/codespell-project/codespell rev: "57b21406f092110c18776e39b0bda50d37c945c8" # frozen: v2.4.3 hooks: - id: codespell args: ["-L", "sur"] - repo: https://github.com/pre-commit/pygrep-hooks rev: "3a6eb0fadf60b3cccfd80bad9dbb6fae7e47b316" # frozen: v1.10.0 hooks: - id: rst-backticks - id: rst-directive-colons - id: rst-inline-touching-normal - repo: https://github.com/zizmorcore/zizmor-pre-commit rev: cef8b8350da46d8114c7e6b7272aebdccdf193ce # frozen: v1.30.0 hooks: - id: zizmor files: "^\\.github" args: [--persona=pedantic] - repo: local hooks: - id: changelog-filenames name: Enforce towncrier fragment filenames files: ^docs/changelog/(?!([0-9]+\.(feature|bugfix|doc|removal|deprecation|misc)\.rst|template\.jinja2|README\.rst)$).* entry: files in changelog must be valid (N.type.rst) language: fail - repo: https://github.com/henryiii/check-sdist rev: 5230295f53448dcfc8cc4a9eb00cc776ca92f964 # frozen: v1.6.0 hooks: - id: check-sdist args: [--inject-junk] additional_dependencies: [flit-core] pypa-build-4396e57/.readthedocs.yml000066400000000000000000000003541525046113500171420ustar00rootroot00000000000000version: 2 build: os: ubuntu-lts-latest tools: {} commands: - curl -LsSf https://astral.sh/uv/install.sh | sh - ~/.local/bin/uv tool install tox --with tox-uv -p 3.14 --managed-python - ~/.local/bin/tox run -e docs -- pypa-build-4396e57/CHANGELOG.rst000066400000000000000000000554041525046113500161030ustar00rootroot00000000000000#################### 1.6.1 (2026-09-10) #################### ********** Bugfixes ********** - Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:`henryiii` (:issue:`1175`) (:issue:`1175`) *************** Documentation *************** - Fix doubled backslashes in the Windows pip config path (``%APPDATA%\pip\pip.ini``) in the docs - by :user:`aroh3006` (:issue:`1149`) *************** Miscellaneous *************** - :issue:`1168`, :issue:`1170`, :issue:`1178` #################### 1.6.0 (2026-08-27) #################### ********** Features ********** - Add ``--report=PATH`` to write a machine-readable JSON report of built artifacts; ``--metadata`` now also accepts ``.whl`` files - by :user:`gaborbernat` (:issue:`198`) - The ``srcdir`` argument now accepts ``.tar.gz`` source distributions, extracting and building from them - by :user:`gaborbernat` (:issue:`311`) - The "Unmet dependencies" error from ``--no-isolation`` builds now shows the wanted version, found version, and interpreter - by :user:`gaborbernat` (:issue:`504`) - Add ``--sdist-extract-dir`` to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:`gaborbernat` (:issue:`614`) - Add ``--env-dir`` to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds - by :user:`gaborbernat` (:issue:`655`) - Print a summary of resolved dependency versions (``name==version``) after installing them in isolated builds - by :user:`gaborbernat` (:issue:`959`) - On build failure, print a tip pointing to ``--env-dir`` and ``--sdist-extract-dir`` for debugging and link to the "Debug a failed build" how-to - reported by :user:`dimpase`, implemented by :user:`gaborbernat` (:issue:`966`) ********** Bugfixes ********** - Drain verbose subprocess output inline instead of using a ``ThreadPoolExecutor``, which silently swallowed logging errors - by :user:`henryiii` (:issue:`1098`) - Reject a file passed as ``--env-dir`` with a clear error instead of a raw ``FileExistsError`` - by :user:`henryiii` (:issue:`1100`) - Emit CLI warnings to stderr instead of stdout, so they no longer corrupt ``--metadata`` JSON output on stdout - by :user:`ymyzk` (:issue:`1111`) - Fix the Windows symlink support probe always returning ``False`` due to a stale object interpolated into the destination path - by :user:`henryiii` (:issue:`1118`) - Fix ``metadata_path``'s build-backend fallback returning a nonexistent dist-info path for wheels with a build tag - by :user:`henryiii` (:issue:`1119`) - Write pip/uv requirements and constraints files with ``\n`` instead of ``os.linesep``, avoiding doubled ``\r\r\n`` line endings on Windows - by :user:`henryiii` (:issue:`1120`) - Batch of small robustness fixes: correct macOS release parsing for the minimum pip version, avoid sharing the mutable default build-system table between builders, keep the original error when isolated-environment setup fails early, and raise ``BuildException`` for an invalid wheel - by :user:`henryiii` (:issue:`1121`) - Decide color support independently for stdout and stderr instead of only checking ``stdout.isatty()``, so redirecting one stream no longer disables or leaks ANSI colors on the other - by :user:`henryiii` (:issue:`1123`) - Pass ``--dependency-constraints-txt`` files through to the installer unmodified instead of re-parsing them into a deduplicated set of lines, fixing a case where a hashed requirement (e.g. from ``pip-compile --generate-hashes``) could have its ``--hash`` continuation line separated from its requirement line and silently dropped, depending on the interpreter's hash seed - by :user:`manfred-kaiser` (:issue:`1140`) ********** Removals ********** - Remove ``exc_info`` parameter and attribute from ``BuildBackendException``. - by :user:`layday` (:issue:`1161`) ************** Deprecations ************** - Deprecate :func:`build.util.project_wheel_metadata`; use ``python -m build --metadata`` instead - by :user:`gaborbernat` (:issue:`557`) - Warn on config settings without a value (e.g. ``-C--my-flag``); use ``-C--my-flag=`` instead for compatibility with pip - by :user:`gaborbernat` (:issue:`640`) *************** Miscellaneous *************** - :issue:`1058`, :issue:`1060`, :issue:`1062`, :issue:`1093`, :issue:`1099`, :issue:`1107`, :issue:`1113`, :issue:`1117`, :issue:`1122`, :issue:`1124`, :issue:`1128`, :issue:`1132` #################### 1.5.0 (2026-04-30) #################### ********** Features ********** - Drop Python 3.9 support - by :user:`henryiii` (:issue:`1036`) ********** Bugfixes ********** - Make ``--ignore-installed`` opt-in from the API via ``fresh=True`` - by :user:`henryiii` (:issue:`1056`) *************** Miscellaneous *************** - :issue:`1033` #################### 1.4.4 (2026-04-22) #################### ********** Bugfixes ********** - Fix release pipeline generating ``CHANGELOG.rst`` entries with inconsistent heading levels, which broke ``sphinx -W`` and pinned Read the Docs ``stable`` at 1.4.0 - by :user:`gaborbernat`. (:issue:`1031`) - Revert :pr:`1039` from build 1.4.3, no longer check direct_url (for now) - by :user:`henryiii` (:issue:`1039`) - Add ``--ignore-installed`` to pip install command to prevent issues with packages already present in the isolated build environment - by :user:`henryiii` (:issue:`1037`) (:issue:`1040`) - Partial revert of :pr:`973`, keeping log messages in one entry, multiple lines. (:issue:`1044`) *************** Miscellaneous *************** - :issue:`1048`, :issue:`1049` #################### 1.4.3 (2026-04-10) #################### ********** Features ********** - Add ``kind`` parameter to log messages to separate semantic and representation - by :user:`abitrolly` (:issue:`973`) ********** Bugfixes ********** - Strip ``PYTHONPATH`` from the environment during isolated builds to prevent host packages from leaking into the build - by :user:`gaborbernat` (:issue:`405`) - Pass ``--no-input`` to pip to prevent hidden credential prompts that cause hangs, and automatically set ``PIP_KEYRING_PROVIDER=subprocess`` (or ``UV_KEYRING_PROVIDER=subprocess`` for the uv installer) when the ``keyring`` CLI is on ``PATH`` -- by :user:`gaborbernat` (:issue:`409`) - ``check_dependency`` now reports URL requirements as unmet instead of silently accepting them when a package with the same name is installed - by :user:`gaborbernat` (:issue:`860`) - Fix misleading missing dependency error display where transitive dependency chains showed the top-level package on a separate line, making it appear as if the top-level package itself was missing - by :user:`gaborbernat` (:issue:`875`) - Fix towncrier template to generate changelog categories in definition order - by :user:`gaborbernat` (:issue:`1007`) - Resolve thread-safety races in the build API - by :user:`gaborbernat` (:issue:`1015`) - Validate ``backend-path`` entries exist on disk with a clear error - by :user:`gaborbernat` (:issue:`1016`) *************** Miscellaneous *************** - :issue:`1020`, :issue:`1021` #################### 1.4.2 (2026-03-25) #################### ********** Bugfixes ********** - Ensure the ``uv`` installer uses the current version of Python, avoiding an issue if ``UV_PYTHON`` is set, for example. (:issue:`977`) - Fix ``_has_valid_outer_pip`` returning ``True`` when pip is missing, causing build to try using a non-existent pip instead of falling back to virtualenv. (:issue:`1003`) #################### 1.4.1 (2026-03-24) #################### ********** Features ********** - Allow setting build constraints - by :user:`gaborbernat` (:issue:`963`) - Automate releases with pre-release workflow and trusted publishing - by :user:`gaborbernat` (:issue:`991`) ********** Bugfixes ********** - Fix pip hack workaround - by :user:`gaborbernat` (:issue:`980`) *************** Documentation *************** - Fix documentation grammar and typos (:issue:`979`) - Reorganize documentation using Diataxis framework - by :user:`gaborbernat` (:issue:`988`) - Document release process and workflow security practices in contributing guide (:issue:`991`) *************** Miscellaneous *************** - :issue:`991` #################### 1.4.0 (2026-01-08) #################### - Add ``--quiet`` flag (:pr:`947`) - Add option to dump PEP 517 metadata with ``--metadata`` (:pr:`940`, :pr:`943`) - Support ``UV`` environment variable (:pr:`971`) - Remove a workaround for 3.14b1 (:pr:`960`) - In 3.14 final release, ``color`` defaults to ``True`` already (:pr:`962`) - Pass sp-repo-review (:pr:`942`) - In pytest configuration, ``log_level`` is better than ``log_cli_level`` (:pr:`950`) - Split up typing and mypy (:pr:`944`) - Use ``types-colorama`` (:pr:`945`) - In docs, first argument for ``_has_dependency`` is a name (PR :pr:`970`) - Fix test failure when ``flit-core`` is installed (PR :pr:`921`) #################### 1.3.0 (2025-08-01) #################### - Add ``--config-json`` (PR :pr:`916`, fixes issue :issue:`900`) - Drop Python 3.8 (PR :pr:`891`) - Test on Python 3.14, colorful help on 3.14+ (PR :pr:`895`) - Fix ``ModuleNotFoundError`` when ``pip`` is not installed (PR :pr:`898`) - Disable use of ``pip install --python`` for debundled pip (PR :pr:`861`) - Don't pass no-wheel to virtualenv if it would warn (PR :pr:`892`) - Optimize our tests to run faster (PR :pr:`871`, :pr:`872`, :pr:`738`) - Allow running our tests without virtualenv (PR :pr:`911`) - Fix issues in our tests (PR :pr:`824`, :pr:`918`, :pr:`870`, :pr:`915`, :pr:`862`, :pr:`863`, :pr:`899`, :pr:`896`, :pr:`854`) - Use SPDX identifiers for our license metadata (PR :pr:`914`) - Use dependency-groups for our development (PR :pr:`880`) - Mention conda and update uv mention in README/docs (PR :pr:`842`, :pr:`816`, :pr:`917`) #################### 1.2.2 (2024-09-06) #################### - Add editable to ``builder.get_requires_for_build``'s static types (PR :pr:`764`, fixes issue :issue:`763`) - Include artifact attestations in our release (PR :pr:`782`) - Fix typing compatibility with typed ``pyproject-hooks`` (PR :pr:`788`) - Mark more tests with ``network`` (PR :pr:`808`) - Add more intersphinx links to docs (PR :pr:`804`) - Make ``uv`` optional for tests (PR :pr:`807` and :pr:`813`) #################### 1.2.1 (2024-03-28) #################### - Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:`761`) #################### 1.2.0 (2024-03-27) #################### - Add ``--installer`` option, supporting ``pip`` and ``uv``. Added ``uv`` extra. (PR :pr:`751`) - Improve console output and provide ``-v`` for dependency installation (PR :pr:`749`) - Avoid compiling unused bytecode when using ``pip`` (PR :pr:`752`) - Dropped support for Python 3.7 (PR :pr:`743`) #################### 1.1.1 (2024-02-29) #################### - Fixed invoking outer pip from user site packages (PR :pr:`746`, fixes issue :issue:`745`) - Corrected the minimum pip version required to use an outer pip (PR :pr:`746`, fixes issue :issue:`745`) #################### 1.1.0 (2024-02-29) #################### - Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR :pr:`736`) - Stopped injecting ``wheel`` as a build dependency automatically, in the case of missing ``pyproject.toml`` -- by :user:`webknjaz`. (PR :pr:`716`) - Use ``importlib_metadata`` on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by :user:`GianlucaFicarelli`. (PR :pr:`693`, fixes issue :issue:`692`) #################### 1.0.3 (2023-09-06) #################### - Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink bug triggered by adding ``data_filter`` in 1.0.0. (PR :pr:`675`, fixes issue :issue:`674`) #################### 1.0.0 (2023-09-01) #################### - Removed the ``toml`` library fallback; ``toml`` can no longer be used as a substitute for ``tomli`` (PR :pr:`567`) - Added ``runner`` parameter to ``util.project_wheel_metadata`` (PR :pr:`566`, fixes issue :issue:`553`) - Modified ``ProjectBuilder`` constructor signature, added alternative ``ProjectBuilder.from_env`` constructor, redefined ``env.IsolatedEnv`` interface, and exposed ``env.DefaultIsolatedEnv``, replacing ``env.IsolatedEnvBuilder``. The aim has been to shift responsibility for modifying the environment from the project builder to the ``IsolatedEnv`` entirely and to ensure that the builder will be initialised from an ``IsolatedEnv`` in a consistent manner. Mutating the project builder is no longer supported. (PR :pr:`537`) - ``virtualenv`` is no longer imported when using ``-n``, for faster builds (PR :pr:`636`, fixes issue :issue:`510`) - The SDist now contains the repository contents, including tests. Flit-core 3.8+ required. (PR :pr:`657`, :pr:`661`, fixes issue :issue:`656`) - The minimum version of ``importlib-metadata`` has been increased to 4.6 and Python 3.10 due to a bug in the standard library version with URL requirements in extras. This is still not required for 3.8 when bootstrapping (as long as you don't have URL requirements in extras). (PR :pr:`631`, fixes issue :issue:`630`) - Docs now built with Sphinx 7 (PR :pr:`660`) - Tests now contain a ``network`` marker (PR :pr:`649`, fixes issue :issue:`648`) - Config-settings are now passed to ``get_requires*`` hooks, fixing a long standing bug. If this affects your setuptools build, you can use ``-C--build-option= -C--build-option=