From d2c5a4f38e3e3d5db3e22f79ca2f839a104dd007 Mon Sep 17 00:00:00 2001 From: Manish Dait Date: Wed, 22 Jul 2026 21:46:22 +0530 Subject: [PATCH] chore: bump setuptools to >=83 for CVE-2026-59890 Signed-off-by: Manish Dait --- pyproject.toml | 2 +- uv.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 911d48c5c..70d4f8abc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -65,7 +65,7 @@ default-groups = ["dev", "lint"] [build-system] requires = [ "pdm-backend>=2.4.8,<3", - "setuptools>=82,<84", + "setuptools>=83,<85", "setuptools_scm>=7,<11", "grpcio-tools>=1.76.0,<2" ] diff --git a/uv.lock b/uv.lock index 3030fe9fc..f942feb11 100644 --- a/uv.lock +++ b/uv.lock @@ -1846,11 +1846,11 @@ wheels = [ [[package]] name = "setuptools" -version = "82.0.1" +version = "83.0.0" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/4f/db/cfac1baf10650ab4d1c111714410d2fbb77ac5a616db26775db562c8fab2/setuptools-82.0.1.tar.gz", hash = "sha256:7d872682c5d01cfde07da7bccc7b65469d3dca203318515ada1de5eda35efbf9", size = 1152316, upload-time = "2026-03-09T12:47:17.221Z" } +sdist = { url = "https://files.pythonhosted.org/packages/34/26/f5d29e25ffdb535afef2d35cdb55b325298f96debd670da4c325e08d70f4/setuptools-83.0.0.tar.gz", hash = "sha256:025bccbbf0fa05b6192bc64ae1e7b16e001fd6d6d4d5de03c97b1c1ade523bef", size = 1154254, upload-time = "2026-07-04T15:31:22.699Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/9d/76/f789f7a86709c6b087c5a2f52f911838cad707cc613162401badc665acfe/setuptools-82.0.1-py3-none-any.whl", hash = "sha256:a59e362652f08dcd477c78bb6e7bd9d80a7995bc73ce773050228a348ce2e5bb", size = 1006223, upload-time = "2026-03-09T12:47:15.026Z" }, + { url = "https://files.pythonhosted.org/packages/5d/40/e1e72872c6354b306daef1703549e8e83b4d43cfea356311bf722a043752/setuptools-83.0.0-py3-none-any.whl", hash = "sha256:29b23c360f22f414dc7336bb39178cc7bcbf6021ed2733cde173f09dba19abb3", size = 1008090, upload-time = "2026-07-04T15:31:20.885Z" }, ] [[package]]