Bump build from 1.4.4 to 1.5.0 (#12438)

dependabot[bot] · web-flow · commit 4cd1b36935b1 · 2026-05-03T23:58:22.000Z
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [build](https://github.com/pypa/build) from 1.4.4 to 1.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/releases">build's releases</a>.</em></p> <blockquote> <h2>1.5.0</h2>  <h2>What's Changed</h2> <ul> <li>ci: try to improve release docs by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/1051">pypa/build#1051</a></li> <li>feat: drop 3.9, require 3.10+ by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/1036">pypa/build#1036</a></li> <li>chore: tox toml by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/1033">pypa/build#1033</a></li> <li>fix: api should not ignore installed, only CLI by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/1056">pypa/build#1056</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/build/compare/1.4.4...1.5.0">https://github.com/pypa/build/compare/1.4.4...1.5.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's changelog</a>.</em></p> <blockquote> <p>#################### 1.5.0 (2026-04-30) ####################</p> <hr /> <p>Features</p> <hr /> <ul> <li>Drop Python 3.9 support - by :user:<code>henryiii</code> (:issue:<code>1036</code>)</li> </ul> <hr /> <p>Bugfixes</p> <hr /> <ul> <li>Make <code>--ignore-installed</code> opt-in from the API via <code>fresh=True</code> - by :user:<code>henryiii</code> (:issue:<code>1056</code>)</li> </ul> <hr /> <p>Miscellaneous</p> <hr /> <ul> <li>:issue:<code>1033</code></li> </ul> <p>#################### 1.4.4 (2026-04-22) ####################</p> <hr /> <p>Bugfixes</p> <hr /> <ul> <li>Fix release pipeline generating <code>CHANGELOG.rst</code> entries with inconsistent heading levels, which broke <code>sphinx -W</code> and pinned Read the Docs <code>stable</code> at 1.4.0 - by :user:<code>gaborbernat</code>. (:issue:<code>1031</code>)</li> <li>Revert :pr:<code>1039</code> from build 1.4.3, no longer check direct_url (for now) - by :user:<code>henryiii</code> (:issue:<code>1039</code>)</li> <li>Add <code>--ignore-installed</code> to pip install command to prevent issues with packages already present in the isolated build environment - by :user:<code>henryiii</code> (:issue:<code>1037</code>) (:issue:<code>1040</code>)</li> <li>Partial revert of :pr:<code>973</code>, keeping log messages in one entry, multiple lines. (:issue:<code>1044</code>)</li> </ul> <hr /> <p>Miscellaneous</p> <hr /> <ul> <li>:issue:<code>1048</code>, :issue:<code>1049</code></li> </ul> <p>#################### 1.4.3 (2026-04-10) ####################</p> <hr /> <p>Features</p> <hr />  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/build/commit/615d04cfc52ac3c1592a463f0afe484fee1cc368"><code>615d04c</code></a> chore: prepare for 1.5.0</li> <li><a href="https://github.com/pypa/build/commit/776f702f84787525df62a5473dd13d4e2f45b977"><code>776f702</code></a> fix: api should not ignore installed, only CLI (<a href="https://redirect.github.com/pypa/build/issues/1056">#1056</a>)</li> <li><a href="https://github.com/pypa/build/commit/42da4c4b483563819fabdb8ecf2f6df53ed82123"><code>42da4c4</code></a> pre-commit: bump repositories (<a href="https://redirect.github.com/pypa/build/issues/1055">#1055</a>)</li> <li><a href="https://github.com/pypa/build/commit/b445cd2e736db5f80cde7d952d620a73cc26bf9d"><code>b445cd2</code></a> chore: tox toml (<a href="https://redirect.github.com/pypa/build/issues/1033">#1033</a>)</li> <li><a href="https://github.com/pypa/build/commit/c44c143876042ac6e1212a31684a3adca19beda4"><code>c44c143</code></a> feat: drop 3.9, require 3.10+ (<a href="https://redirect.github.com/pypa/build/issues/1036">#1036</a>)</li> <li><a href="https://github.com/pypa/build/commit/a9bb4560d213069b11c8068159f1de060abec5b7"><code>a9bb456</code></a> build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions group...</li> <li><a href="https://github.com/pypa/build/commit/cb3351155ce99902580022acb81dc0adb8124d53"><code>cb33511</code></a> ci: try to improve release docs (<a href="https://redirect.github.com/pypa/build/issues/1051">#1051</a>)</li> <li>See full diff in <a href="https://github.com/pypa/build/compare/1.4.4...1.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=build&package-manager=pip&previous-version=1.4.4&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
@@ -34,7 +34,7 @@ blockbuster==1.5.26
     #   -r requirements/test-common.in
 brotli==1.2.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
-build==1.4.4
+build==1.5.0
     # via pip-tools
 certifi==2026.4.22
     # via requests
diff --git a/requirements/dev.txt b/requirements/dev.txt
@@ -34,7 +34,7 @@ blockbuster==1.5.26
     #   -r requirements/test-common.in
 brotli==1.2.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
-build==1.4.4
+build==1.5.0
     # via pip-tools
 certifi==2026.4.22
     # via requests
