Skip to content

Update vendoring and refresh vendored packages - #5166

Merged
jaraco merged 3 commits into
mainfrom
bugfix/5159-vendor-bin-free
Jan 25, 2026
Merged

jaraco merged 3 commits into
mainfrom
bugfix/5159-vendor-bin-free

Conversation

@jaraco

@jaraco jaraco commented Jan 25, 2026 •

Copy link
Copy Markdown
Member
  • Delete all binaries generated by vendored package install.
  • Update vendored dependencies.

Summary of changes

Closes #5159
Closes #5162

Pull Request Checklist

@jaraco

jaraco commented Jan 25, 2026

Copy link
Copy Markdown
Member Author

Dang. We can't update wheel without introducing a deprecation warning on wheel.metadata. I guess that's fine; just file and issue and suppress the warning.

@jaraco

jaraco commented Jan 25, 2026

Copy link
Copy Markdown
Member Author

There's a failure in test_find_directive for PyPy only. Is it a regression? Previously, this environment passed all tests in the last release, so it looks like a regression or a flaky test.

@jaraco

jaraco commented Jan 25, 2026

Copy link
Copy Markdown
Member Author

I ran the failing test locally and it passes, so I'm fairly confident that nothing in this PR has broken the change. I'm re-running to see if maybe it's flaky.

@jaraco

jaraco commented Jan 25, 2026

Copy link
Copy Markdown
Member Author

Test was flaky. Merging.

@jaraco
jaraco merged commit 852cd5e into main Jan 25, 2026
79 of 84 checks passed
@jaraco
jaraco deleted the bugfix/5159-vendor-bin-free branch January 25, 2026 22:20
@Avasam

Avasam commented Jan 26, 2026 •

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vendored wheel 0.45.1 has CVE-2026-24049 - please update to 0.46.2 Vendored wheel executable contains hardcoded shebang from build environment

2 participants