Skip to content

deps: update dependency pip-tools to v7.5.3#311

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pip-tools-7.x
Open

deps: update dependency pip-tools to v7.5.3#311
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pip-tools-7.x

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented May 5, 2026

This PR contains the following updates:

Package Change Age Confidence
pip-tools (changelog) ==7.5.0==7.5.3 age confidence

Release Notes

jazzband/pip-tools (pip-tools)

v7.5.3

Compare Source

2026-02-09

Bug fixes
  • The option --unsafe-package is now normalized -- by {user}shifqu.

    PRs and issues: {issue}2150

  • Fixed a bug in which pip-compile lost any index URL options when
    looking up hashes -- by {user}sirosen.

    This caused errors when a package was only available from an extra
    index, and caused pip-compile to incorrectly drop index URL options
    from output, even when they were present in the input requirements.

    PRs and issues: {issue}2220, {issue}2294, {issue}2305

  • Fixed removal of temporary files used when reading requirements from stdin
    -- by {user}sirosen.

Features
  • pip-tools is now tested against Python 3.14 and 3.14t in CI, and
    marks them as supported in the core packaging metadata
    -- by {user}webknjaz.

    PRs and issues: {issue}2255

  • pip-tools is now compatible with pip 26.0 -- by {user}sirosen.

    PRs and issues: {issue}2319, {issue}2320

Removals and backward incompatible breaking changes
  • Removed support for Python 3.8 -- by {user}sirosen.
Improved documentation
  • The change log management infra now allows the maintainers to add notes
    before and after the regular categories -- by {user}webknjaz.

    PRs and issues: {issue}2287, {issue}2322

  • Added documentation clarifying that pip-compile reads the existing
    output file as a constraint source, and how to use --upgrade to
    refresh dependencies -- by {user}maliktafheem.

    PRs and issues: {issue}2307

Packaging updates and notes for downstreams
  • pip-tools is now tested against Python 3.14 and 3.14t in CI, and
    marks them as supported in the core packaging metadata
    -- by {user}webknjaz.

    PRs and issues: {issue}2255

Contributor-facing changes
  • Consistency of the Markdown files is now being enforced by linting
    with {pypi}pymarkdownlnt -- by {user}webknjaz.

    PRs and issues: {issue}2256

  • The linting is now set up to perform structured GitHub Actions
    workflows and actions checks against json schemas
    -- by {user}webknjaz.

    PRs and issues: {issue}2273

  • The CI/CD is now set up so that the distribution build job
    is a part of the test pipeline. That pipeline is included in
    the release workflow which sources the artifact in produces.
    The tests must now pass for the release to be published to PyPI.

    -- by {user}webknjaz

    PRs and issues: {issue}2274

  • Fix actionlint hook usage to always include shellcheck integration -- by {user}sirosen.

    PRs and issues: {issue}2281

  • Utilities for interacting with pip have started to move into the
    :py:mod:piptools._internal._pip_api subpackage -- by {user}sirosen.

    PRs and issues: {issue}2285

  • The change log management infra now allows the maintainers to add notes
    before and after the regular categories -- by {user}webknjaz.

    PRs and issues: {issue}2287, {issue}2322

  • The linting is now set up to demand that {py:mod}typing is always
    imported as a module under the name of _t -- by {user}webknjaz.

    This is enforced by {user}sirosen's {pypi}flake8-typing-as-t
    plugin for {pypi}flake8.

    PRs and issues: {issue}2289

  • The {file}tox.ini and {file}.github/ parts of the repository now
    have project leads assigned as GitHub code owners -- by {user}webknjaz.

    PRs and issues: {issue}2291

  • Remove a redundant 'v' prefix from the CI release workflow job name -- by {user}anandvenugopal-tech.

    PRs and issues: {issue}2300

  • The check-jsonschema ReadTheDocs hook has been enabled, and
    the config has been tweaked to pass -- by {user}sirosen.

v7.5.2

Compare Source

2025-11-11

Bug fixes
  • Fixed pip-compile to handle relative path includes which are not subpaths of
    the current working directory -- by {user}sirosen.

    PRs and issues: {issue}2231, {issue}2260

  • Using --upgrade-package and dynamically building project metadata no
    longer causes an {exc}AttributeError when pip encounters an error during the
    build -- by {user}Epic_Wink and {user}tusharsadhwani.

    PRs and issues: {issue}2258

Features
  • Test and declare Python 3.13 support -- by {user}jayaddison (for OpenCulinary).

    PRs and issues: {issue}2251

  • pip-tools is now compatible with pip 25.3 -- by {user}shifqu.

    PRs and issues: {issue}2252, {issue}2253

Packaging updates and notes for downstreams
  • pip-tools now supports installation from git archives by providing
    setuptools-scm with .git_archival.txt data.

    PRs and issues: {issue}2225

Contributor-facing changes
  • The change log entry bot has been explicitly configured to stop requiring
    news fragments in pull requests having the bot:chronographer:skip label set
    -- by {user}sirosen and {user}webknjaz.

    It was also set up to reference our change log authoring document from the
    GitHub Checks pages. And the reported check name is now set to Change log entry.

    PRs and issues: {issue}2201

  • The CI is now set up to invoke failed tests again with
    maximum level of detail -- by {user}webknjaz.

    The change is aimed at helping troubleshoot failures
    that might be difficult to reproduce locally.

    PRs and issues: {issue}2254

  • The integration with Codecov has been updated to ensure that reports
    are uploaded to the service even on failures -- by {user}webknjaz.

    GitHub Actions is now configured to also send an explicit notification
    to Codecov about the completion of previously initiated uploads.

    Additionally, the configuration file is now {file}.codecov.yml.

    PRs and issues: {issue}2265

  • The linting suite now runs actionlint -- by {user}webknjaz.

    This tool checks typical problems with GitHub Actions workflow
    definitions and has a registry of widely-used GitHub Action
    arguments that it validates.

    PRs and issues: {issue}2266

v7.5.1

Compare Source

2025-09-26

Bug fixes
  • Fixed static parsing of {file}pyproject.toml data when the
    {file}pyproject.toml is supplied as a relative path -- by {user}sirosen.

    PRs and issues: {issue}2215, {issue}2221, {issue}2233

  • The "via" paths in pip-compile output for requirements discovered from
    pyproject.toml data are now written in POSIX format -- by {user}sirosen.

    PRs and issues: {issue}2221

  • Fixed a bug which removed slashes from URLs in -r and -c in the output
    of pip-compile -- by {user}sirosen.

    PRs and issues: {issue}2223

  • Fixed an incompatibility with click >= 8.3 which made pip-compile display incorrect
    options in the compile command in output headers -- by {user}sirosen.

    PRs and issues: {issue}2235

Features
  • pip-tools now officially supports pip version 25.2 -- by {user}sirosen.

    PRs and issues: {issue}2214

Improved documentation
  • ReadTheDocs builds for pip-tools no longer include htmlzip and pdf outputs -- by {user}sirosen.

    PRs and issues: {issue}2218

Contributor-facing changes
  • pip-tools now tests on pip version 25.2 -- by {user}sirosen.

    PRs and issues: {issue}2214

  • The changelog documentation for contributors now provides hyperlinks to the source of each example change note -- by {user}jayaddison (for OpenCulinary).

    PRs and issues: {issue}2217

  • The CPython versions tested in nightly CI runs are now separate from
    branch and PR CI, and don't include very old versions -- by {user}sirosen.

    PRs and issues: {issue}2226


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner May 5, 2026 15:34
@renovate renovate Bot requested review from Zaimwa9 and removed request for a team May 5, 2026 15:34
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 5, 2026

File Coverage Missing
All files 100%

Minimum allowed coverage is 100%

Generated by 🐒 cobertura-action against efd0a7c

@codspeed-hq
Copy link
Copy Markdown

codspeed-hq Bot commented May 5, 2026

Merging this PR will not alter performance

✅ 1 untouched benchmark


Comparing renovate/pip-tools-7.x (efd0a7c) with main (fae5c73)

Open in CodSpeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants