Skip to content

Bump wheel from 0.46.2 to 0.46.3#41

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/wheel-0.46.3
Feb 13, 2026
Merged

Bump wheel from 0.46.2 to 0.46.3#41
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/wheel-0.46.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 13, 2026

Bumps wheel from 0.46.2 to 0.46.3.

Release notes

Sourced from wheel's releases.

0.46.3

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#676)
Changelog

Sourced from wheel's changelog.

Release Notes

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

  • Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [wheel](https://github.com/pypa/wheel) from 0.46.2 to 0.46.3.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.46.2...0.46.3)

---
updated-dependencies:
- dependency-name: wheel
  dependency-version: 0.46.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 13, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 13, 2026 00:43
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 13, 2026
Copy link

@senzingdevops senzingdevops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated: approving this pull request because it includes a patch update

@github-actions github-actions bot enabled auto-merge (squash) February 13, 2026 00:43
@github-actions github-actions bot merged commit 274aa2b into main Feb 13, 2026
14 checks passed
@github-actions github-actions bot deleted the dependabot/pip/wheel-0.46.3 branch February 13, 2026 00:43
@github-actions
Copy link

🤖 Claude Code Review

Code Review Analysis

Let me analyze this pull request against the comprehensive checklist.

Pull Request Summary

This PR updates the wheel package from version 0.46.2 to 0.46.3 in the development dependencies.


Review Results

Code Quality

Code follows style guide

  • This is a dependency version bump in pyproject.toml - no code style issues apply

No commented-out code

  • No commented code present

Meaningful variable names

  • N/A - dependency declaration only

DRY principle followed

  • N/A - single dependency update

Identify Defects

  • No defects identified. The change is a minor patch version bump (0.46.2 → 0.46.3) of the wheel package
  • Wheel is a build/packaging tool used only in development, so low risk
  • No logic errors, security vulnerabilities, or other issues introduced

Project memory consideration

  • The change is consistent with project practices (version pinning for reproducible builds)
  • No conflicts with .claude/CLAUDE.md instructions

Testing

Unit tests for new functions

  • N/A - no new functions added

Integration tests for new endpoints

  • N/A - no new endpoints

Edge cases covered

  • N/A - dependency update only

Test coverage > 80%

  • N/A - no code changes affecting coverage

Documentation

README updated if needed

  • No README update needed for minor dependency bump

API docs updated

  • N/A - no API changes

Inline comments for complex logic

  • N/A - no code logic changes

⚠️ CHANGELOG.md updated

  • Not visible in this diff. For minor development dependency updates, CHANGELOG may not require an entry, but this depends on project practices.

Markdown formatting

  • N/A - no markdown files changed

Security

No hardcoded credentials

  • No credentials present

Input validation implemented

  • N/A - no input handling code

Proper error handling

  • N/A - no error handling code

No sensitive data in logs

  • N/A - no logging code

No license files checked in

  • No .lic files or AQAAAD strings present

Summary

Recommendation: ✅ APPROVE

This is a straightforward, low-risk dependency update:

  • Updates wheel from 0.46.2 to 0.46.3 (patch version)
  • Only affects development dependencies
  • No code, logic, or security changes
  • Consistent with the recent commit history showing similar dependency maintenance

Minor Note: Consider whether CHANGELOG.md should be updated for development dependency bumps based on your project's versioning practices.

Automated code review analyzing defects and coding standards

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant