Skip to content

Update setuptools requirement from >=42 to >=82.0.1#183

Merged
docktermj merged 1 commit intomainfrom
dependabot/pip/setuptools-gte-82.0.1
Apr 13, 2026
Merged

Update setuptools requirement from >=42 to >=82.0.1#183
docktermj merged 1 commit intomainfrom
dependabot/pip/setuptools-gte-82.0.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Updates the requirements on setuptools to permit the latest version.

Changelog

Sourced from setuptools's changelog.

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

... (truncated)

Commits
  • 5a13876 Bump version: 82.0.0 → 82.0.1
  • 51ab8f1 Avoid using (deprecated) 'json.version' in tests (#5194)
  • f9c37b2 Docs/CI: Fix intersphinx references (#5195)
  • 8173db2 Docs: Fix intersphinx references
  • 09bafbc Fix past tense on newsfragment
  • 461ea56 Add news fragment
  • c4ffe53 Avoid using (deprecated) 'json.version' in tests
  • 749258b Cleanup pkg_resources dependencies and configuration (#5175)
  • 2019c16 Parse ext-module.define-macros from pyproject.toml as list of tuples (#5169)
  • b809c86 Sync setuptools schema with validate-pyproject (#5157)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #5047
Resolves #5186
Resolves #5168
Resolves #4941
Resolves #5157
Resolves #5169
Resolves #5175
Resolves #3085
Resolves #4872
Resolves #5159
Resolves #5194
Resolves #5195

Updates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v42.0.0...v82.0.1)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner April 13, 2026 08:48
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 13, 2026
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

Now I have enough context to perform the review. The diff is a single-line change bumping setuptools from >=42 to >=82.0.1 in pyproject.toml.


PR Code Review

Change: pyproject.toml — bump setuptools minimum version from >=42 to >=82.0.1


Code Quality

  • Style guidepyproject.toml is a configuration file; no style guide violations apply.
  • No commented-out code — None present.
  • Meaningful variable names — N/A for config files.
  • DRY principle — N/A.
  • Defects / bugs / security — No issues. This is a straightforward minimum version bump to address a dependency update. Pinning to >=82.0.1 is more precise than >=42 and reduces the risk of accidentally building with an outdated setuptools that may have known vulnerabilities.
  • CLAUDE.md — No .claude/CLAUDE.md exists in this project; nothing to evaluate.

Testing

  • Unit/integration tests — No new functions or endpoints introduced; no tests required for a build dependency version bump.
  • Edge cases / coverage — N/A.

Documentation

  • README — No change needed; this is an internal build dependency.
  • API docs — N/A.
  • Inline comments — N/A.
  • CHANGELOG.mdCHANGELOG.md exists (CHANGELOG.md:1) but has not been updated to reflect this dependency bump. Per project convention, dependency updates are documented (e.g., see entries for requests and packaging in past versions). Consider adding an entry such as:
    ## [Unreleased]
    ### Changed
    - In `pyproject.toml`, updated `setuptools` requirement from `>=42` to `>=82.0.1`
    
  • Markdown formatting — No markdown files changed.

Security

  • No hardcoded credentials — None.
  • Input validation — N/A.
  • Error handling — N/A.
  • No sensitive data in logs — N/A.
  • No .lic files or AQAAAD-prefixed content — None present.

Summary

The change is correct and low-risk. The only actionable item is updating CHANGELOG.md to document the dependency version bump, consistent with this project's conventions.

Automated code review analyzing defects and coding standards

@github-actions
Copy link
Copy Markdown

Super-linter summary

Language Validation result
CHECKOV Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@docktermj docktermj merged commit 1168b4c into main Apr 13, 2026
21 checks passed
@docktermj docktermj deleted the dependabot/pip/setuptools-gte-82.0.1 branch April 13, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants