Bump wheel from 0.46.2 to 0.46.3

[dependabot]

Bumps wheel from 0.46.2 to 0.46.3.

Release notes

Sourced from wheel's releases.

0.46.3

• Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#676)

Changelog

Sourced from wheel's changelog.

Release Notes

0.46.3 (2026-01-22)

• Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

• Restored the bdist_wheel command for compatibility with setuptools older than v70.1
• Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
• Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

• Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

• Dropped support for Python 3.8
• Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
• Removed vendored packaging in favor of a run-time dependency on it
• Made the wheel.metadata module private (with a deprecation warning if it's imported
• Made the wheel.cli package private (no deprecation warning)
• Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

• Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

• Refactored the convert command to not need setuptools to be installed

• Don't configure setuptools logging unless running bdist_wheel

• Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

  Projects are still advised to migrate away from the deprecated module and import

... (truncated)

Commits

• 8b6fa74 Created a new release
• 7445fb5 Fixed an import of a removed module
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Analyzing the pull request diff against the checklist:

Code Quality

✅ Code follows style guide - This is a dependency version bump in pyproject.toml, which is configuration, not code. No style issues.

✅ No commented-out code - No code changes present.

✅ Meaningful variable names - N/A - no variable names changed.

✅ DRY principle followed - N/A - no code duplication introduced.

✅ Identify Defects - No bugs, logic errors, or vulnerabilities introduced. This is a minor version bump of the wheel package (0.46.2 → 0.46.3), which is a Python packaging utility used only in the development environment. The change is isolated to the development dependency group and poses minimal risk.

✅ Project memory consideration - The .claude/CLAUDE.md file contains project-level guidance and does not conflict with this dependency update. The change is appropriate for all development environments.

Testing

✅ Unit tests for new functions - N/A - no new functions added.

✅ Integration tests for new endpoints - N/A - no new endpoints added.

✅ Edge cases covered - N/A - this is a dependency update.

✅ Test coverage > 80% - N/A - no code changes that would affect coverage. The dependency update should not impact existing test coverage.

Documentation

✅ Readme updated if needed - Not required. Minor dependency bumps don't need README updates.

✅ API docs updated - N/A - no API changes.

✅ Inline comments for complex logic - N/A - no code changes.

✅ CHANGELOG.md updated - ⚠️ Recommendation: While not strictly required for automated dependency bumps, consider documenting this in CHANGELOG.md if the project maintains detailed dependency tracking. However, for minor patch version bumps of development dependencies, this is typically optional.

✅ Markdown formatting - N/A - no markdown files modified.

Security

✅ No hardcoded credentials - No credentials in diff.

✅ Input validation implemented - N/A - no new input handling.

✅ Proper error handling - N/A - no error handling changes.

✅ No sensitive data in logs - N/A - no logging changes.

✅ No license files checked in - No .lic files or AQAAAD strings present.

---

Summary

✅ APPROVED - This is a clean, safe dependency update.

Change: Bumps wheel from version 0.46.2 to 0.46.3 in the development dependency group.

Risk Level: Very Low

• wheel is only used during package building/development
• Patch version bump (0.46.2 → 0.46.3) suggests bug fixes or minor improvements
• No impact on runtime behavior or production dependencies

Recommendations:

• None required - this is a standard automated dependency maintenance PR
• The change follows best practices for keeping dependencies up-to-date

No blocking issues identified. The PR is ready to merge.

Automated code review analyzing defects and coding standards