Skip to content

Bump wheel from 0.46.3 to 0.47.0#495

Merged
docktermj merged 1 commit into
mainfrom
dependabot/pip/wheel-0.47.0
May 14, 2026
Merged

Bump wheel from 0.46.3 to 0.47.0#495
docktermj merged 1 commit into
mainfrom
dependabot/pip/wheel-0.47.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps wheel from 0.46.3 to 0.47.0.

Release notes

Sourced from wheel's releases.

0.47.0

  • Added the wheel info subcommand to display metadata about wheel files without unpacking them (#639)
  • Fixed WheelFile raising Missing RECORD file when the wheel filename contains uppercase characters (e.g. Django-3.2.5.whl) but the .dist-info directory inside uses normalized lowercase naming (#411)
Changelog

Sourced from wheel's changelog.

Release Notes

0.47.0 (2026-04-22)

  • Added the wheel info subcommand to display metadata about wheel files without unpacking them ([#639](https://github.com/pypa/wheel/issues/639) <https://github.com/pypa/wheel/issues/639>_)
  • Fixed WheelFile raising Missing RECORD file when the wheel filename contains uppercase characters (e.g. Django-3.2.5.whl) but the .dist-info directory inside uses normalized lowercase naming ([#411](https://github.com/pypa/wheel/issues/411) <https://github.com/pypa/wheel/issues/411>_)

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

  • Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

... (truncated)

Commits
  • efd83a7 Created a new release
  • bb69216 Reordered the changelog entries
  • d5a1763 fix(wheelfile): resolve .dist-info path case-insensitively when reading wheel...
  • 5718957 [pre-commit.ci] pre-commit autoupdate (#685)
  • 6258068 chore: log_level is better than log_cli_level (#684)
  • 2975deb Require tox >= 4.22
  • 47674ba chore: add check-sdist to checks (#681)
  • 56223f6 __package____spec__.parent (#679)
  • 0ce509e Added the wheel info subcommand (#669)
  • 39039c0 Improved the index page
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Python programming language labels May 14, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 14, 2026 01:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Python programming language labels May 14, 2026
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

PR Code Review

Change: Bumps wheel from 0.46.3 to 0.47.0 in pyproject.toml (development dependency only).


Code Quality

  • Style guide — Single-line change in a config file; no style concerns.
  • No commented-out code — N/A.
  • Meaningful variable names — N/A.
  • DRY principle — N/A.
  • Defects — No logic, no runtime code. Dependency bump only; wheel is a dev-only build tool and does not affect the published package interface.
  • CLAUDE.md — No concerns; the project config is appropriately general.

Testing

  • Unit/integration tests — No new functionality; no tests required.
  • Coverage — N/A.

Documentation

  • README — No update needed.
  • API docs — N/A.
  • Inline comments — N/A.
  • CHANGELOG.md — Dependency-only bump; no functional change to document.
  • Markdown formatting — N/A.

Security

  • No hardcoded credentials — N/A.
  • Input validation — N/A.
  • Error handling — N/A.
  • Sensitive data in logs — N/A.
  • License files — None present.

Summary: Clean, minimal dependency bump with no issues. The change is safe to merge.

Automated code review analyzing defects and coding standards

@github-actions
Copy link
Copy Markdown

Coverage report

Click to see where and how coverage changed

FileStatementsMissingCoverageCoverage
(new stmts)
Lines missing
  src/senzing
  szengineflags.py
  szerror.py
Project Total  

This report was generated by python-coverage-comment-action

Bumps [wheel](https://github.com/pypa/wheel) from 0.46.3 to 0.47.0.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.46.3...0.47.0)

---
updated-dependencies:
- dependency-name: wheel
  dependency-version: 0.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/wheel-0.47.0 branch from 6d9f72e to b2e4bc2 Compare May 14, 2026 01:54
@github-actions
Copy link
Copy Markdown

🤖 Claude Code Review

PR Code Review

Change: Dependency version bump — wheel from 0.46.3 to 0.47.0 in pyproject.toml:49.


Code Quality

  • Style guide — Single-line change in a TOML file, no style concerns.
  • No commented-out code — N/A.
  • Meaningful variable names — N/A.
  • DRY principle — N/A.
  • Defects — No logic, no bugs possible in a version string update.
  • CLAUDE.md — No changes to project configuration.

Testing

  • Unit/integration tests — Not required for a dependency version bump.
  • Test coverage — N/A.

Documentation

  • README — No update needed for a dev-dependency bump.
  • API docs — N/A.
  • Inline comments — N/A.
  • CHANGELOG.md — No changelog entry is expected for automated dependency bumps (this appears to be a Dependabot/automated update based on the commit history pattern).
  • Markdown formatting — No markdown files changed.

Security

  • No hardcoded credentials — N/A.
  • Input validation — N/A.
  • Error handling — N/A.
  • No sensitive data in logs — N/A.
  • No license files — N/A.

Summary: Routine automated dependency bump. No issues found. Safe to merge.

Automated code review analyzing defects and coding standards

@docktermj docktermj merged commit 7479158 into main May 14, 2026
79 checks passed
@docktermj docktermj deleted the dependabot/pip/wheel-0.47.0 branch May 14, 2026 15:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Python programming language

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants