Merge branch 'main' into feature/no-download-for-dry-run

Author: notatallshaw

.github/workflows/ci.yml

@@ -28,8 +28,8 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
       - run: pip install nox
@@ -70,8 +70,8 @@ jobs:
         os: [ubuntu-22.04, windows-latest]
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
       - name: Set up git credentials
@@ -82,7 +82,7 @@ jobs:
       - run: pip install nox
       - run: nox -s prepare-release -- 99.9
       - run: nox -s build-release -- 99.9
-      - run: pipx run check-manifest
+      - run: pipx run check-sdist
 
   vendoring:
     name: vendoring
@@ -94,8 +94,8 @@ jobs:
       github.event_name != 'pull_request'
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
 
@@ -115,17 +115,18 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        os: [ubuntu-22.04, macos-13, macos-latest]
+        os: [ubuntu-22.04, macos-latest]
         python:
           - "3.9"
           - "3.10"
           - "3.11"
           - "3.12"
           - "3.13"
+          - "3.14"
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
           allow-prereleases: true
@@ -181,6 +182,7 @@ jobs:
           # - "3.11"
           # - "3.12"
           - "3.13"
+          - "3.14"
         group:
           - { number: 1, pytest-filter: "not test_install" }
           - { number: 2, pytest-filter: "test_install" }
@@ -193,8 +195,8 @@ jobs:
           mkdir "D:\\Temp"
           echo "TEMP=D:\\Temp" >> $env:GITHUB_ENV
 
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
           allow-prereleases: true
@@ -228,8 +230,8 @@ jobs:
       github.event_name != 'pull_request'
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.10"
 

.github/workflows/release.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           persist-credentials: false
       - name: Build a binary wheel and a source tarball
@@ -36,9 +36,9 @@ jobs:
 
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: python-package-distributions
           path: dist/
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1

.github/workflows/update-rtd-redirects.yml

@@ -21,8 +21,8 @@ jobs:
     runs-on: ubuntu-latest
     environment: RTD Deploys
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
       - run: pipx run tools/update-rtd-redirects.py

.pre-commit-config.yaml

@@ -2,7 +2,7 @@ exclude: 'src/pip/_vendor/'
 
 repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v5.0.0
+  rev: v6.0.0
   hooks:
   - id: check-builtin-literals
   - id: check-added-large-files
@@ -22,13 +22,13 @@ repos:
   - id: black
 
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.12.2
+  rev: v0.12.11
   hooks:
     - id: ruff-check
       args: [--fix]
 
 - repo: https://github.com/pre-commit/mirrors-mypy
-  rev: v1.16.1
+  rev: v1.17.1
   hooks:
   - id: mypy
     exclude: tests/data
@@ -41,6 +41,7 @@ repos:
         'types-setuptools==68.2.0.0',
         'types-freezegun==1.1.10',
         'types-pyyaml==6.0.12.12',
+        'typing-extensions',
     ]
 
 - repo: https://github.com/pre-commit/pygrep-hooks

.readthedocs.yml

@@ -4,11 +4,11 @@ build:
   os: ubuntu-22.04
   tools:
     python: "3.11"
+  jobs:
+    install:
+      - pip install .
+      - pip install --group docs
 
 sphinx:
   builder: dirhtml
   configuration: docs/html/conf.py
-
-python:
-  install:
-    - requirements: docs/requirements.txt

AUTHORS.txt

@@ -220,11 +220,13 @@ Davidovich
 ddelange
 Deepak Sharma
 Deepyaman Datta
+Denis Roussel (ACSONE)
 Denise Yu
 dependabot[bot]
 derwolfe
 Desetude
 developer
+Devesh Kumar
 Devesh Kumar Singh
 devsagul
 Diego Caraballo
@@ -295,6 +297,7 @@ Gabriel de Perthuis
 Garry Polley
 gavin
 gdanielson
+Gene Wood
 Geoffrey Sneddon
 George Margaritis
 George Song
@@ -333,6 +336,7 @@ Hugo Lopes Tavares
 Hugo van Kemenade
 Hugues Bruant
 Hynek Schlawack
+iamsrp-deshaw
 Ian Bicking
 Ian Cordasco
 Ian Lee
@@ -640,6 +644,7 @@ Pulkit Goyal
 q0w
 Qiangning Hong
 Qiming Xu
+qraqras
 Quentin Lee
 Quentin Pradet
 R. David Murray
@@ -665,6 +670,7 @@ Robert McGibbon
 Robert Pollak
 Robert T. McGibbon
 robin elisha robinson
+Rodney, Tiara
 Roey Berman
 Rohan Jain
 Roman Bogorodskiy
@@ -680,6 +686,7 @@ Russell Keith-Magee
 Ryan Shepherd
 Ryan Wooden
 ryneeverett
+Ryuma Asai
 S. Guliaev
 Sachi King
 Salvatore Rinchiera
@@ -694,6 +701,8 @@ Sebastian Jordan
 Sebastian Schaetz
 Segev Finer
 SeongSoo Cho
+Sepehr Rasouli
+sepehrrasooli
 Sergey Vasilyev
 Seth Michael Larson
 Seth Woodworth
@@ -719,6 +728,7 @@ Stavros Korokithakis
 Stefan Scherfke
 Stefano Rivera
 Stephan Erb
+Stephen Payne
 Stephen Rosen
 stepshal
 Steve (Gadget) Barnes
@@ -811,7 +821,9 @@ Yeray Diaz Diaz
 Yoval P
 Yu Jian
 Yuan Jing Vincent Yan
+Yuki Kobayashi
 Yusuke Hayashi
+zackzack38
 Zearin
 Zhiping Deng
 ziebam

MANIFEST.in

@@ -9,6 +9,66 @@
 
 .. towncrier release notes start
 
+25.2 (2025-07-30)
+=================
+
+Features
+--------
+
+- Declare support for Python 3.14 (`#13506 <https://github.com/pypa/pip/issues/13506>`_)
+- Automatic download resumption and retrying is enabled by default. (`#13464 <https://github.com/pypa/pip/issues/13464>`_)
+- Requires-Python error message displays version clauses in numerical order. (`#13367 <https://github.com/pypa/pip/issues/13367>`_)
+- Minor performance improvement getting the order to install a very large number of interdependent packages. (`#13424 <https://github.com/pypa/pip/issues/13424>`_)
+- Show time taken instead of ``eta 0:00:00`` at download completion. (`#13483 <https://github.com/pypa/pip/issues/13483>`_)
+- Speed up small CLI tools by removing ``import re`` from the console
+  script executable template. (`#13165 <https://github.com/pypa/pip/issues/13165>`_)
+- Remove warning when cloning from a Git reference that does not look like a commit hash. (`#12283 <https://github.com/pypa/pip/issues/12283>`_)
+
+Bug Fixes
+---------
+
+- ``pip config debug`` now correctly separates options as set by the different files
+  at the same level. (`#12099 <https://github.com/pypa/pip/issues/12099>`_)
+- Ensure truststore feature remains active even when a proxy is also in use. (`#13343 <https://github.com/pypa/pip/issues/13343>`_)
+- Include sub-commands in tab completion. (`#13140 <https://github.com/pypa/pip/issues/13140>`_)
+- ``pip list`` with the ``json`` or ``freeze`` format enabled will no longer
+  crash when encountering a package with an invalid version. (`#13345 <https://github.com/pypa/pip/issues/13345>`_)
+- Provide a hint if a system error is raised involving long filenames or path segments on Windows. (`#13346 <https://github.com/pypa/pip/issues/13346>`_)
+- Resumed downloads are saved to the HTTP cache like any other normal download. (`#13441 <https://github.com/pypa/pip/issues/13441>`_)
+- Configured verbosity is consistently forwarded while calling Git during
+  VCS operations. (`#13329 <https://github.com/pypa/pip/issues/13329>`_)
+- Suppress the progress bar, when running with ``--log`` and ``--quiet``.
+
+  Consequently, a new ``auto`` mode for ``--progress-bar`` has been added.
+  ``auto`` will enable progress bars unless suppressed by ``--quiet``,
+  while ``on`` will always enable progress bars. (`#10915 <https://github.com/pypa/pip/issues/10915>`_)
+- Fix normalization of local URLs with non-``file`` schemes. (`#13509 <https://github.com/pypa/pip/issues/13509>`_)
+- Fix normalization of local file URLs on Windows in newer Python versions. (`#13510 <https://github.com/pypa/pip/issues/13510>`_)
+- Fix remaining test failures in Python 3.14 by adjusting ``path_to_url`` and similar functions. (`#13423 <https://github.com/pypa/pip/issues/13423>`_)
+- Fix missing ``network`` test markings, making the suite pass in offline
+  environments again. (`#13378 <https://github.com/pypa/pip/issues/13378>`_)
+
+Vendored Libraries
+------------------
+
+- Upgrade CacheControl to 0.14.3
+- Upgrade certifi to 2025.7.14
+- Upgrade distlib to 0.4.0
+- Upgrade msgpack to 1.1.1
+- Upgrade platformdirs to 4.3.8
+- Upgrade pygments to 2.19.2
+- Upgrade requests to 2.32.4
+- Upgrade resolvelib to 1.2.0
+- Upgrade rich to 14.1.0
+- Remove vendored typing-extensions.
+
+Process
+-------
+
+- pip's own licensing metadata now follows :pep:`639`.
+  In addition, the licenses of pip's vendored dependencies are now included
+  in the ``License-File`` metadata field and in the wheel.
+
 25.1.1 (2025-05-02)
 ===================
 

NEWS.rst

@@ -1,2 +1,2 @@
 build
-setuptools
+flit-core

build-project/build-requirements.in

@@ -4,21 +4,19 @@
 #
 #    pip-compile --allow-unsafe --generate-hashes build-requirements.in
 #
-build==1.2.2.post1 \
-    --hash=sha256:1d61c0887fa860c01971625baae8bdd338e517b836a2f70dd1f7aa3a6b2fc5b5 \
-    --hash=sha256:b36993e92ca9375a219c99e606a122ff365a760a2d4bba0caa09bd5278b608b7
+build==1.3.0 \
+    --hash=sha256:698edd0ea270bde950f53aed21f3a0135672206f3911e0176261a31e0e07b397 \
+    --hash=sha256:7145f0b5061ba90a1500d60bd1b13ca0a8a4cebdd0cc16ed8adf1c0e739f43b4
     # via -r build-requirements.in
-packaging==24.2 \
-    --hash=sha256:09abb1bccd265c01f4a3aa3f7a7db064b36514d2cba19a2f694fe6150451a759 \
-    --hash=sha256:c228a6dc5e932d346bc5739379109d49e8853dd8223571c7c5b55260edc0b97f
+flit-core==3.12.0 \
+    --hash=sha256:18f63100d6f94385c6ed57a72073443e1a71a4acb4339491615d0f16d6ff01b2 \
+    --hash=sha256:e7a0304069ea895172e3c7bb703292e992c5d1555dd1233ab7b5621b5b69e62c
+    # via -r build-requirements.in
+packaging==25.0 \
+    --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \
+    --hash=sha256:d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f
     # via build
 pyproject-hooks==1.2.0 \
     --hash=sha256:1e859bd5c40fae9448642dd871adf459e5e2084186e8d2c2a79a824c970da1f8 \
     --hash=sha256:9e5c6bfa8dcc30091c74b0cf803c81fdd29d94f01992a7707bc97babb1141913
     # via build
-
-# The following packages are considered to be unsafe in a requirements file:
-setuptools==80.9.0 \
-    --hash=sha256:062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922 \
-    --hash=sha256:f36b47402ecde768dbfafc46e8e4207b4360c654f1f3bb84475f0a28628fb19c
-    # via -r build-requirements.in