Setuptools 80.10.1

Author: goat-ssh

CHANGES.rst

@@ -5,6 +5,8 @@ Changelog
 Unreleased
 ----------
 
+* Bumped ``setuptools`` to 80.10.1 to fix CVE-2026-23949.
+
 * Add retry logic with exponential backoff for webhooks on transient failures.
 
 2.56.0 (2026-01-12)

Dockerfile

@@ -1,6 +1,10 @@
+ARG SETUPTOOLS_VERSION=80.10.1
+
 # Build container
 FROM python:3.12-slim AS build
 
+ARG SETUPTOOLS_VERSION
+
 RUN mkdir -pv /src
 
 WORKDIR /src
@@ -9,7 +13,7 @@ RUN apt-get update && \
     apt-get install git -y
 
 COPY . /src
-RUN python -m pip install -U setuptools==78.1.1 && \
+RUN python -m pip install -U setuptools==${SETUPTOOLS_VERSION} && \
     python setup.py clean bdist_wheel
 
 
@@ -21,6 +25,8 @@ LABEL license="Apache License 2.0" \
     name="CrateDB Kubernetes Operator" \
     repository="crate/crate-operator"
 
+ARG SETUPTOOLS_VERSION
+
 WORKDIR /etc/cloud
 RUN useradd -U -M crate-operator
 
@@ -31,7 +37,7 @@ RUN apt-get update && \
 
 COPY --from=build /src/dist /wheels
 
-RUN pip install --no-cache-dir -U pip wheel setuptools==78.1.1 && \
+RUN pip install --no-cache-dir -U pip wheel setuptools==${SETUPTOOLS_VERSION} && \
     pip install --no-cache-dir /wheels/*.whl && \
     rm -rf /wheels && \
     ln -s "$(python -c "import pkgutil; main = pkgutil.get_loader('crate.operator.main'); print(main.path)")"

pyproject.toml

@@ -3,7 +3,7 @@ target-version = ['py313']
 line-length = 88
 
 [build-system]
-requires = ["setuptools>=78.1.1", "wheel", "setuptools_scm>=6.2"]
+requires = ["setuptools>=80.10.1", "wheel", "setuptools_scm>=8.1.0"]
 
 [tool.setuptools_scm]
 

setup.py

@@ -47,7 +47,7 @@ def read(path: str) -> str:
     packages=find_namespace_packages(include=["crate.*"]),
     include_package_data=True,
     package_data={"crate.operator": ["data/*"]},
-    setup_requires=["setuptools>=78.1.1", "setuptools_scm>=8.1.0"],
+    setup_requires=["setuptools>=80.10.1", "setuptools_scm>=8.1.0"],
     install_requires=[
         "aiopg==1.4.0",
         "bitmath==1.3.3.1",