dependabot[bot] opened a new pull request, #5205:
URL: https://github.com/apache/streampipes/pull/5205

   Bumps [setuptools](https://github.com/pypa/setuptools) from 80.9.0 to 84.2.1.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/pypa/setuptools/blob/main/NEWS.rst";>setuptools's 
changelog</a>.</em></p>
   <blockquote>
   <h1>v84.2.1</h1>
   <h2>Bugfixes</h2>
   <ul>
   <li>Changed wheel tags and stable-ABI validation to use sysconfig data. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/5360";>#5360</a>)</li>
   <li>Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when
   <code>Extension.py_limited_api</code> is enabled. These builds now use their
   version-specific extension suffix instead of using the unsupported 
<code>.abi3t</code>
   suffix. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/5363";>#5363</a>)</li>
   </ul>
   <h2>Improved Documentation</h2>
   <ul>
   <li>Replaced broken link to Python Eggs documentation with an archived 
version from the Wayback Machine. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/1929";>#1929</a>)</li>
   </ul>
   <h1>v84.2.0</h1>
   <h2>Features</h2>
   <ul>
   <li>Added support for building abi3t extensions and abi3.abi3t wheels on 
Python
   3.15 and newer. See :pep:<code>803</code> and the <code>Python 3.15 
&quot;What's New&quot; entry 
&lt;https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds&gt;</code>_
   for more details. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/5193";>#5193</a>)</li>
   <li>Updated vendored packaging version to 26.3, which adds support for the
   <code>abi3t</code> tag from :pep:<code>803</code>. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/5361";>#5361</a>)</li>
   </ul>
   <h2>Bugfixes</h2>
   <ul>
   <li>Use target sysconfig data for stable-ABI extension filenames. (<a 
href="https://redirect.github.com/pypa/setuptools/issues/5351";>#5351</a>)</li>
   </ul>
   <h1>v84.1.0</h1>
   <h2>Features</h2>
   <ul>
   <li><code>setuptools.archive_util</code> now raises the new 
<code>UnsafeMember</code> exception when
   an archive member would be extracted outside of the extraction directory,
   where previously such a member was silently skipped. Aborting makes a
   malicious or malformed archive visible to the caller instead of yielding a
   quietly incomplete extraction, and matches the behavior of the standard</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/pypa/setuptools/commit/3895f9829fc0e51882981773a823a658eb1d1636";><code>3895f98</code></a>
 Bump version: 84.2.0 → 84.2.1</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/7c5cb7a14aaa61d5fec6144a4a08a3911257f0d2";><code>7c5cb7a</code></a>
 Merge pull request <a 
href="https://redirect.github.com/pypa/setuptools/issues/5362";>#5362</a> from 
jameshilliard/fix/abi3t-target-config</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/00595bf726c0b813c0f5e0945bf9e5e8a0033744";><code>00595bf</code></a>
 Use sysconfig data for wheel tags and stable-ABI validation</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/873b29c064a6981cb9764c064f6c5fe0c56b0954";><code>873b29c</code></a>
 Merge pull request <a 
href="https://redirect.github.com/pypa/setuptools/issues/5363";>#5363</a> from 
ngoldbaum/fix-3.14t</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/d8bc01b24240f8d6418f6b2855e87a2c523f6ef4";><code>d8bc01b</code></a>
 Merge pull request <a 
href="https://redirect.github.com/pypa/setuptools/issues/5330";>#5330</a> from 
Topgearfanboy/main</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/e27271e1b2dc4342b057c3a0ea489380ab6d5231";><code>e27271e</code></a>
 Apply review comments from <a 
href="https://github.com/jameshillard";><code>@​jameshillard</code></a></li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/aa98f8596d2bb45323d4838ff48daed0578668e3";><code>aa98f85</code></a>
 add newsfragment</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/3301fa6500c3ea286581df83c038d80d8c5f9589";><code>3301fa6</code></a>
 Avoid .abi3t extension suffixes on Python 3.13t and 3.14t</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/301e27a484f17e175acf6b692fccc634f9a20c49";><code>301e27a</code></a>
 Bump version: 84.1.0 → 84.2.0</li>
   <li><a 
href="https://github.com/pypa/setuptools/commit/39a7c2ecd80bb1c393b3867d9673027d490322cb";><code>39a7c2e</code></a>
 Merge pull request <a 
href="https://redirect.github.com/pypa/setuptools/issues/5193";>#5193</a> from 
ngoldbaum/abi3.abi3t</li>
   <li>Additional commits viewable in <a 
href="https://github.com/pypa/setuptools/compare/v80.9.0...v84.2.1";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools&package-manager=pip&previous-version=80.9.0&new-version=84.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to