Skip to content

Bump wheel from 0.46.2 to 0.46.3#59

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/wheel-0.46.3
Feb 16, 2026
Merged

Bump wheel from 0.46.2 to 0.46.3#59
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/wheel-0.46.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps wheel from 0.46.2 to 0.46.3.

Release notes

Sourced from wheel's releases.

0.46.3

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#676)
Changelog

Sourced from wheel's changelog.

Release Notes

UNRELEASED

  • Added the wheel info subcommand to display metadata about wheel files without unpacking them ([#639](https://github.com/pypa/wheel/issues/639) <https://github.com/pypa/wheel/issues/639>_)

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

  • Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed
  • Don't configure setuptools logging unless running bdist_wheel

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [wheel](https://github.com/pypa/wheel) from 0.46.2 to 0.46.3.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.46.2...0.46.3)

---
updated-dependencies:
- dependency-name: wheel
  dependency-version: 0.46.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 16, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 16, 2026 14:16
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 16, 2026
Copy link

@senzingdevops senzingdevops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated: approving this pull request because it includes a patch update

@github-actions github-actions bot enabled auto-merge (squash) February 16, 2026 14:16
@github-actions github-actions bot merged commit 6ad4489 into main Feb 16, 2026
13 checks passed
@github-actions github-actions bot deleted the dependabot/pip/wheel-0.46.3 branch February 16, 2026 14:17
@github-actions
Copy link

🤖 Claude Code Review

I'll analyze this pull request diff against the review checklist.

Code Review Analysis

Code Quality ✅

  • Style guide compliance: ✅ The change follows proper requirements.txt formatting conventions from the Senzing style guide
  • No commented-out code: ✅ N/A - this is a dependency version update
  • Meaningful variable names: ✅ N/A - no variables in this change
  • DRY principle: ✅ N/A - no code duplication concerns
  • Defects/bugs: ✅ No logic errors, edge cases, or security vulnerabilities introduced. This is a minor patch version bump (0.46.2 → 0.46.3) of the wheel package, which is a standard Python packaging tool

Testing ❌ (Partial - See Notes)

  • Unit tests: ⚠️ No new tests needed for a dependency version bump
  • Integration tests: ⚠️ No new tests needed, but ideally dependency updates should be validated by CI/CD
  • Edge cases: ✅ N/A
  • Test coverage: ⚠️ Cannot determine from diff alone, but dependency updates don't directly affect coverage

Note: While no new tests are required for dependency updates, this change should be validated by running the existing test suite to ensure the wheel version bump doesn't introduce regressions.

Documentation ✅

  • Readme updated: ✅ N/A - dependency updates don't typically require README changes
  • API docs: ✅ N/A - no API changes
  • Inline comments: ✅ N/A - no code logic to comment
  • CHANGELOG.md: ⚠️ Ideally should be updated to note the dependency bump, but often these minor updates are grouped together. Check if your project convention requires individual entries for all dependency updates.
  • Markdown formatting: ✅ N/A - no markdown files changed

Security ✅

  • No hardcoded credentials: ✅ No credentials present
  • Input validation: ✅ N/A
  • Error handling: ✅ N/A
  • Sensitive data in logs: ✅ N/A
  • License files: ✅ No .lic files or AQAAAD strings detected

Summary

Overall Assessment: ✅ APPROVED

This is a straightforward dependency patch version update with minimal risk. The change updates wheel from version 0.46.2 to 0.46.3 in development-requirements.txt:18.

Recommendations:

  1. Ensure CI/CD pipeline runs successfully to validate the dependency update doesn't introduce regressions
  2. Consider adding a CHANGELOG.md entry if your project tracks all dependency updates (though minor patch bumps are often batched)

Risk Level: LOW

This is a patch version update to a development dependency used for building Python packages. Patch versions typically contain bug fixes and should be backwards compatible.

Automated code review analyzing defects and coding standards

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant