Skip to content

Commit 9d68685

Browse files
Bump pip from 25.1.1 to 25.2 (#11369)
Bumps [pip](https://github.com/pypa/pip) from 25.1.1 to 25.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>25.2 (2025-07-30)</h1> <h2>Features</h2> <ul> <li>Declare support for Python 3.14 (<code>[#13506](pypa/pip#13506) &lt;https://github.com/pypa/pip/issues/13506&gt;</code>_)</li> <li>Automatic download resumption and retrying is enabled by default. (<code>[#13464](pypa/pip#13464) &lt;https://github.com/pypa/pip/issues/13464&gt;</code>_)</li> <li>Requires-Python error message displays version clauses in numerical order. (<code>[#13367](pypa/pip#13367) &lt;https://github.com/pypa/pip/issues/13367&gt;</code>_)</li> <li>Minor performance improvement getting the order to install a very large number of interdependent packages. (<code>[#13424](pypa/pip#13424) &lt;https://github.com/pypa/pip/issues/13424&gt;</code>_)</li> <li>Show time taken instead of <code>eta 0:00:00</code> at download completion. (<code>[#13483](pypa/pip#13483) &lt;https://github.com/pypa/pip/issues/13483&gt;</code>_)</li> <li>Speed up small CLI tools by removing <code>import re</code> from the console script executable template. (<code>[#13165](pypa/pip#13165) &lt;https://github.com/pypa/pip/issues/13165&gt;</code>_)</li> <li>Remove warning when cloning from a Git reference that does not look like a commit hash. (<code>[#12283](pypa/pip#12283) &lt;https://github.com/pypa/pip/issues/12283&gt;</code>_)</li> </ul> <h2>Bug Fixes</h2> <ul> <li> <p><code>pip config debug</code> now correctly separates options as set by the different files at the same level. (<code>[#12099](pypa/pip#12099) &lt;https://github.com/pypa/pip/issues/12099&gt;</code>_)</p> </li> <li> <p>Ensure truststore feature remains active even when a proxy is also in use. (<code>[#13343](pypa/pip#13343) &lt;https://github.com/pypa/pip/issues/13343&gt;</code>_)</p> </li> <li> <p>Include sub-commands in tab completion. (<code>[#13140](pypa/pip#13140) &lt;https://github.com/pypa/pip/issues/13140&gt;</code>_)</p> </li> <li> <p><code>pip list</code> with the <code>json</code> or <code>freeze</code> format enabled will no longer crash when encountering a package with an invalid version. (<code>[#13345](pypa/pip#13345) &lt;https://github.com/pypa/pip/issues/13345&gt;</code>_)</p> </li> <li> <p>Provide a hint if a system error is raised involving long filenames or path segments on Windows. (<code>[#13346](pypa/pip#13346) &lt;https://github.com/pypa/pip/issues/13346&gt;</code>_)</p> </li> <li> <p>Resumed downloads are saved to the HTTP cache like any other normal download. (<code>[#13441](pypa/pip#13441) &lt;https://github.com/pypa/pip/issues/13441&gt;</code>_)</p> </li> <li> <p>Configured verbosity is consistently forwarded while calling Git during VCS operations. (<code>[#13329](pypa/pip#13329) &lt;https://github.com/pypa/pip/issues/13329&gt;</code>_)</p> </li> <li> <p>Suppress the progress bar, when running with <code>--log</code> and <code>--quiet</code>.</p> <p>Consequently, a new <code>auto</code> mode for <code>--progress-bar</code> has been added. <code>auto</code> will enable progress bars unless suppressed by <code>--quiet</code>, while <code>on</code> will always enable progress bars. (<code>[#10915](pypa/pip#10915) &lt;https://github.com/pypa/pip/issues/10915&gt;</code>_)</p> </li> <li> <p>Fix normalization of local URLs with non-<code>file</code> schemes. (<code>[#13509](pypa/pip#13509) &lt;https://github.com/pypa/pip/issues/13509&gt;</code>_)</p> </li> <li> <p>Fix normalization of local file URLs on Windows in newer Python versions. (<code>[#13510](pypa/pip#13510) &lt;https://github.com/pypa/pip/issues/13510&gt;</code>_)</p> </li> <li> <p>Fix remaining test failures in Python 3.14 by adjusting <code>path_to_url</code> and similar functions. (<code>[#13423](pypa/pip#13423) &lt;https://github.com/pypa/pip/issues/13423&gt;</code>_)</p> </li> <li> <p>Fix missing <code>network</code> test markings, making the suite pass in offline environments again. (<code>[#13378](pypa/pip#13378) &lt;https://github.com/pypa/pip/issues/13378&gt;</code>_)</p> </li> </ul> <h2>Vendored Libraries</h2> <ul> <li>Upgrade CacheControl to 0.14.3</li> <li>Upgrade certifi to 2025.7.14</li> <li>Upgrade distlib to 0.4.0</li> <li>Upgrade msgpack to 1.1.1</li> <li>Upgrade platformdirs to 4.3.8</li> <li>Upgrade pygments to 2.19.2</li> <li>Upgrade requests to 2.32.4</li> <li>Upgrade resolvelib to 1.2.0</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/2e05cae3da2cfafa6dce58167a25b7dba4bc2a33"><code>2e05cae</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/f24906109c84ca51eef57a4f925298d38ff31df3"><code>f249061</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/78d15a5da09c6fbc5c2cd88fb5bd67bfd7fb0637"><code>78d15a5</code></a> Copyedit news entries before 25.2 (again)</li> <li><a href="https://github.com/pypa/pip/commit/4fe68d78ae8b117ad413ec61c518dd600af08bf0"><code>4fe68d7</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/13506">#13506</a> from ichard26/3.14</li> <li><a href="https://github.com/pypa/pip/commit/775a86f2bac8894771911ab068b18f09550cb6f0"><code>775a86f</code></a> Fix broken unit tests &amp; xfail weird failure</li> <li><a href="https://github.com/pypa/pip/commit/2773b13baa59ec68b03df9f0f73e4e3c21fcd958"><code>2773b13</code></a> Reformat and add --allow-unix-socket to pytest config</li> <li><a href="https://github.com/pypa/pip/commit/e384d1032c189312ac21f23844c9c6f1f4750eb1"><code>e384d10</code></a> Declare Python 3.14 support</li> <li><a href="https://github.com/pypa/pip/commit/4117dc7c6b606d825904ffbe35d51012923374f4"><code>4117dc7</code></a> Always remove authority section when cleaning local URL path (<a href="https://redirect.github.com/pypa/pip/issues/13510">#13510</a>)</li> <li><a href="https://github.com/pypa/pip/commit/2e21934b5c35a0e6b41fd586399cd36ed304c03c"><code>2e21934</code></a> Fix cleaning of local URLs with VCS schemes (<a href="https://redirect.github.com/pypa/pip/issues/13509">#13509</a>)</li> <li><a href="https://github.com/pypa/pip/commit/853a593191d7205b837d32a72e0eb7e7b81e1821"><code>853a593</code></a> Improve <code>path_to_url()</code> tests (<a href="https://redirect.github.com/pypa/pip/issues/13496">#13496</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/25.1.1...25.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=25.1.1&new-version=25.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent bde886d commit 9d68685

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

requirements/constraints.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -306,7 +306,7 @@ zstandard==0.23.0 ; implementation_name == "cpython"
306306
# -r requirements/runtime-deps.in
307307

308308
# The following packages are considered to be unsafe in a requirements file:
309-
pip==25.1.1
309+
pip==25.2
310310
# via pip-tools
311311
setuptools==80.9.0
312312
# via pip-tools

requirements/dev.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -297,7 +297,7 @@ zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_versi
297297
# -r requirements/runtime-deps.in
298298

299299
# The following packages are considered to be unsafe in a requirements file:
300-
pip==25.1.1
300+
pip==25.2
301301
# via pip-tools
302302
setuptools==80.9.0
303303
# via pip-tools

0 commit comments

Comments
 (0)