Skip to content

Bump setuptools from 59.6.0 to 83.0.0 - #347

Closed
dependabot[bot] wants to merge 1 commit into
release-v0.9.xfrom
dependabot/uv/setuptools-83.0.0
Closed

dependabot[bot] wants to merge 1 commit into
release-v0.9.xfrom
dependabot/uv/setuptools-83.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps setuptools from 59.6.0 to 83.0.0.

Changelog

Sourced from setuptools's changelog.

v83.0.0

Features

  • Require Python 3.10 or later.

Bugfixes

  • MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. A pattern authored in one form (e.g. NFC, as typically saved by editors) now matches a file whose name is stored on disk in another (e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude, global-exclude, recursive-exclude, or prune rule could silently fail to drop a non-ASCII-named file from the source distribution, publishing it despite the exclusion -- see GHSA-h35f-9h28-mq5c.

Deprecations and Removals

  • pypa/distutils#334

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

... (truncated)

Commits
  • 6519f72 Bump version: 82.0.1 → 83.0.0
  • d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
  • a2df31e Capture removal of dry_run parameter in changelog.
  • 00144dc Moved newsfragment to the release where it occurred.
  • a4a5a2b Add news fragment.
  • 77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
  • 3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
  • bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
  • a2bc3ac Fix broken intersphinx reference to build's installation docs
  • 2d6a739 Use stacked parametrize decorators instead of itertools.product
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/setuptools-83.0.0 branch from 2f26dfe to bcfa29c Compare July 29, 2026 14:43
@rtibbles
rtibbles requested a review from rtibblesbot October 22, 2026 18:09
@rtibblesbot

Copy link
Copy Markdown
Contributor

@dependabot rebase

@rtibblesbot

rtibblesbot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

🟢 Reviewing

Last updated: 2026-10-22 23:16 UTC

Bumps [setuptools](https://github.com/pypa/setuptools) from 59.6.0 to 83.0.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v59.6.0...v83.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/setuptools-83.0.0 branch from bcfa29c to 0f35410 Compare October 22, 2026 18:12
@dependabot
dependabot Bot requested review from a team and leq-bot October 22, 2026 18:12

@rtibblesbot rtibblesbot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR #347: setuptools 83 requires Python >=3.10, but morango supports >=3.6,<3.15. Recommend closing.

  • setuptools build-system floor >=64 → >=83.0.0; major bump; build-time dependency.
  • Breaking: setuptools >=83 requires Python >=3.10. Security fixes and peer-dependency changes: not reviewed, since the Python floor already decides this.
  • CI failing: wheel builds on Python 3.9 can't resolve setuptools>=83.0.0. This breaks "Python tests" and "Migrations for SQLite versions".
  • Raising the floor would also break sdist builds for downstream users on Python 3.6–3.9. Keep >=64 and ignore setuptools majors in the dependabot config until Python <3.10 support is dropped.

Written by rtibblesbot, an LLM-based coding agent.

Comment thread pyproject.toml
@@ -1,5 +1,5 @@
[build-system]
requires = ["setuptools>=64", "setuptools-scm>=9.2.2"]
requires = ["setuptools>=83.0.0", "setuptools-scm>=9.2.2"]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocking: This floor breaks builds on Python 3.6–3.9, which requires-python (line 13) still allows. setuptools >=83 requires Python >=3.10. CI on 3.9 can't resolve it. Keep >=64.

@rtibblesbot

Copy link
Copy Markdown
Contributor

Tracked in #399.

@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/uv/setuptools-83.0.0 branch October 22, 2026 23:17
@rtibblesbot

Copy link
Copy Markdown
Contributor

Quick check on rtibblesbot's review of this PR: react 👍 helpful · 😕 mixed · 👎 not helpful. Reply with anything specific.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant