mCaptcha/mcaptcha-api-py

Watch

Fork 0

chore(deps): update dependency packaging to v26.3 #44

Open

renovate-bot wants to merge 1 commit from renovate/packaging-26.x into master

renovate-bot commented

2026-08-10 05:17:00 +05:30

Member

This PR contains the following updates:

Package	Change	Age	Confidence
packaging	`==26.2` -> `==26.3`

Release Notes

pypa/packaging (packaging)

`v26.3`

Compare Source

What's Changed

Features

Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
PEP 808: accept Metadata-Version: 2.6. (#1194)
Add a limit argument to parse_tag() for compressed tag sets. (#1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
Fix an AttributeError when hashing internally trimmed versions. (#1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
Normalize requested extra names before comparing or hashing requirements. (#644)
Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
Keep the parentheses of a nested group when serializing markers. (#1316)
Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
Reject malformed Description-Content-Type values. (#1329)
Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
Route multipart email payloads to unparsed instead of asserting. (#1247)
Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)
Raise InvalidLicenseExpression for misplaced WITH clauses and empty LicenseRef- names. (#1266)
Raise InvalidLicenseExpression instead of KeyError for a LicenseRef- with a + suffix. (#1219)

Fixes for tags and filenames

Raise InvalidTag from parse_tag() for tags with the wrong number of components. (#1238)
Reject empty tag components in parse_wheel_filename() and parse_tag(). (#1234)
Reject an empty project name in the wheel and sdist filename parsers. (#1305)
Reject wheel filenames with a trailing newline. (#1341)
Reject wheel tags whose interpreter component is not an identifier. (#577)
is_normalized_name now rejects names with collapsed double hyphens like a--b. (#1230)
Fix duplicate explicit abi3t tags. (#1245)
Forward the warn argument to generic_tags() in sys_tags(). (#1264)
Raise SystemError for an empty or malformed CPython EXT_SUFFIX. (#1271, #1301)
Fix a typo in the macOS fat3 architecture name (was fat32). (#1199)

Fixes for pylock, direct URLs, and dependency groups

Percent-decode pylock artifact file names derived from a url so that local versions (e.g. a wheel with 2.12.1+cu130 encoded as 2.12.1%2Bcu130) yield a valid file name. (#1314)
Use an explicitly empty tags sequence in Pylock.select() instead of falling back to sys_tags(). (#1349)
Fix Pylock.select() on Python builds that report a non-PEP 440 python_full_version (e.g. 3.15.0+). (#1179)
Reject TOML booleans where integers are expected in pylock files. (#1244)
Add PylockSelectError to packaging.pylock.__all__. (#1202)
Fix DirectUrl credential stripping for passwords containing @. (#1218)
Parse the URL scheme case-insensitively when checking for file URLs in direct_url. (#1240)
Require absolute file URLs for local directories in direct_url. (#1297)
Collect InvalidRequirement errors while resolving dependency groups instead of leaking them. (#1302)
Don't cache malformed dependency group parses. (#1248)

Performance

Implement Specifier and SpecifierSet filtering with the new range engine. (#1120, #1259)
Cache the default marker environment. (#1250)
Cache the _manylinux module lookup process-wide. (#1254)
Add __slots__ to Requirement and the token classes. (#1320, #1258)
Keep range caches across canonicalization, precompile the wheel project-name pattern, simplify parse_tag(), and skip platform.mac_ver() when the version and arch are given. (#1253, #1256, #1236, #1255)

Documentation

Describe the validation scope of packaging.pylock. (#1339)
Explain which packaging.metadata fields are validated. (#1342)
Document RFC822Policy in the low-level packaging.metadata interface. (#1222)
Enable nitpicky mode and render missing classes and fields in the API reference. (#1196, #1225, #1277)
Add missing versionadded / versionchanged directives and many small docstring fixes across the API reference. (#1205, #1207, #1208, #1209, #1211, #1216, #1217, #1223, #1272, #1273, #1274, #1291, #1300, #1303, #1317, #1344)

Internal

Add Python 3.15 to the test matrix. (#1190)
Add a musl/Alpine test job and make the test suite pass on musl. (#1226, #1227)
Expand the downstream test matrix by ten projects. (#1261)
Update to mypy 2. (#1191)
Use nox's uv integration. (#1057)

New Contributors

@Sean-Kenneth-Doherty made their first contribution in #1187
@jsirois made their first contribution in #1199
@Alan-K-Biju-7 made their first contribution in #1217
@facutuesca made their first contribution in #1218
@NovaLux12 made their first contribution in #1317
@atsuoishimoto made their first contribution in #1314
@gaoflow made their first contribution in #1291
@jacobdr made their first contribution in #608
@deepakganesh78 made their first contribution in #1351
@rajath201 made their first contribution in #1356

Full Changelog: https://github.com/pypa/packaging/compare/26.2...26.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [packaging](https://github.com/pypa/packaging) | `==26.2` -> `==26.3` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/packaging/26.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/packaging/26.2/26.3?slim=true) | --- ### Release Notes <details> <summary>pypa/packaging (packaging)</summary> ### [`v26.3`](https://github.com/pypa/packaging/releases/tag/26.3) [Compare Source](https://github.com/pypa/packaging/compare/26.2...26.3)  #### What's Changed ##### Features - Add a public `VersionRange` API and `SpecifierSet.to_range()`, representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. `VersionRange.to_specifier_set()` converts a range back to a `SpecifierSet` where a PEP 440 form exists. ([#1267](https://github.com/pypa/packaging/pull/1267), [#1270](https://github.com/pypa/packaging/pull/1270), [#1298](https://github.com/pypa/packaging/pull/1298)) - PEP 808: accept `Metadata-Version: 2.6`. ([#1194](https://github.com/pypa/packaging/pull/1194)) - Add a `limit` argument to `parse_tag()` for compressed tag sets. ([#1220](https://github.com/pypa/packaging/issues/1220)) - Add a `prefer_sdist_predicate` argument to `Pylock.select()` to prefer source distributions over wheels for selected packages. ([#1334](https://github.com/pypa/packaging/pull/1334)) - Add `pure_python_tags()` to generate the pure-Python tags for a Python version without touching the running platform. ([#1346](https://github.com/pypa/packaging/pull/1346)) - Add `SpecifierSet.is_subset()`, `SpecifierSet.is_superset()`, and `SpecifierSet.is_disjoint()`, which compare the versions two specifier sets accept. ([#1313](https://github.com/pypa/packaging/pull/1313)) ##### Behavior adaptations - Drop support for Python 3.8; packaging now requires Python 3.9 or later. ([#1157](https://github.com/pypa/packaging/pull/1157)) - Prefer native `linux_*` platform tags over `manylinux` and `musllinux` tags on Linux. ([#160](https://github.com/pypa/packaging/issues/160)) ##### Fixes for versions and specifiers - Raise `InvalidVersion` instead of `TypeError` when `Version` is given a non-string. ([#1319](https://github.com/pypa/packaging/pull/1319)) - Raise `InvalidVersion` for non-string pre-release letters passed to `Version.from_parts`. ([#1241](https://github.com/pypa/packaging/pull/1241)) - Fix an `AttributeError` when hashing internally trimmed versions. ([#1242](https://github.com/pypa/packaging/pull/1242)) - Fix `SpecifierSet.is_unsatisfiable` for post-release boundary intersections. ([#1257](https://github.com/pypa/packaging/pull/1257)) ##### Fixes for requirements and markers - Make `Requirement.__hash__` consistent with `__eq__` for trailing-zero-equivalent specifiers (e.g. `foo==1.0.0` and `foo==1.0.0.0`), so equal requirements hash equal and deduplicate in sets and dicts. ([#1232](https://github.com/pypa/packaging/pull/1232)) - Normalize requested extra names before comparing or hashing requirements. ([#644](https://github.com/pypa/packaging/issues/644)) - Preserve a `Requirement`'s specifier `prereleases` override across a pickle round trip. ([#1204](https://github.com/pypa/packaging/issues/1204)) - Raise `InvalidRequirement` instead of `InvalidSpecifier` when a requirement contains an invalid specifier. ([#1332](https://github.com/pypa/packaging/pull/1332)) - Clarify the error for post-release prefix wildcards like `==1.0.post1.*`. ([#1299](https://github.com/pypa/packaging/pull/1299)) - Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. ([#1213](https://github.com/pypa/packaging/pull/1213)) - Keep the parentheses of a nested group when serializing markers. ([#1316](https://github.com/pypa/packaging/pull/1316)) - Normalize `extra` and `dependency_groups` values in nested markers at parse time. ([#1246](https://github.com/pypa/packaging/pull/1246), [#1310](https://github.com/pypa/packaging/pull/1310)) - Raise `UndefinedComparison` when a set-valued variable like `extras` is used outside the membership form. ([#1265](https://github.com/pypa/packaging/pull/1265)) - Raise `UndefinedEnvironmentName` (a `KeyError` subclass) for missing environment keys during marker evaluation. ([#1276](https://github.com/pypa/packaging/pull/1276)) - Wrap malformed string literal errors in `InvalidMarker` / `InvalidRequirement` instead of leaking a low-level error. ([#1249](https://github.com/pypa/packaging/pull/1249)) - Reject requirements and markers with a trailing line break. ([#1345](https://github.com/pypa/packaging/pull/1345)) ##### Fixes for metadata and licenses - Collect all `from_email` validation errors into one `ExceptionGroup` instead of raising the first. ([#1268](https://github.com/pypa/packaging/pull/1268)) - Accept the UTF-8 charset case-insensitively in email payloads. ([#1330](https://github.com/pypa/packaging/pull/1330)) - Reject malformed `Description-Content-Type` values. ([#1329](https://github.com/pypa/packaging/pull/1329)) - Don't rewrite user values that contain `{field}` placeholders in error messages. ([#1327](https://github.com/pypa/packaging/pull/1327)) - Route multipart email payloads to `unparsed` instead of asserting. ([#1247](https://github.com/pypa/packaging/pull/1247)) - Make `InvalidMetadata` and `CyclicDependencyGroup` picklable. ([#1328](https://github.com/pypa/packaging/pull/1328)) - Fold every line boundary `str.splitlines` recognizes when writing a header with `RFC822Message`. ([#1356](https://github.com/pypa/packaging/pull/1356)) - Raise `InvalidLicenseExpression` for misplaced `WITH` clauses and empty `LicenseRef-` names. ([#1266](https://github.com/pypa/packaging/pull/1266)) - Raise `InvalidLicenseExpression` instead of `KeyError` for a `LicenseRef-` with a `+` suffix. ([#1219](https://github.com/pypa/packaging/pull/1219)) ##### Fixes for tags and filenames - Raise `InvalidTag` from `parse_tag()` for tags with the wrong number of components. ([#1238](https://github.com/pypa/packaging/pull/1238)) - Reject empty tag components in `parse_wheel_filename()` and `parse_tag()`. ([#1234](https://github.com/pypa/packaging/pull/1234)) - Reject an empty project name in the wheel and sdist filename parsers. ([#1305](https://github.com/pypa/packaging/pull/1305)) - Reject wheel filenames with a trailing newline. ([#1341](https://github.com/pypa/packaging/pull/1341)) - Reject wheel tags whose interpreter component is not an identifier. ([#577](https://github.com/pypa/packaging/issues/577)) - `is_normalized_name` now rejects names with collapsed double hyphens like `a--b`. ([#1230](https://github.com/pypa/packaging/pull/1230)) - Fix duplicate explicit `abi3t` tags. ([#1245](https://github.com/pypa/packaging/pull/1245)) - Forward the `warn` argument to `generic_tags()` in `sys_tags()`. ([#1264](https://github.com/pypa/packaging/pull/1264)) - Raise `SystemError` for an empty or malformed CPython `EXT_SUFFIX`. ([#1271](https://github.com/pypa/packaging/pull/1271), [#1301](https://github.com/pypa/packaging/pull/1301)) - Fix a typo in the macOS `fat3` architecture name (was `fat32`). ([#1199](https://github.com/pypa/packaging/pull/1199)) ##### Fixes for pylock, direct URLs, and dependency groups - Percent-decode `pylock` artifact file names derived from a `url` so that local versions (e.g. a wheel with `2.12.1+cu130` encoded as `2.12.1%2Bcu130`) yield a valid file name. ([#1314](https://github.com/pypa/packaging/pull/1314)) - Use an explicitly empty `tags` sequence in `Pylock.select()` instead of falling back to `sys_tags()`. ([#1349](https://github.com/pypa/packaging/pull/1349)) - Fix `Pylock.select()` on Python builds that report a non-PEP 440 `python_full_version` (e.g. `3.15.0+`). ([#1179](https://github.com/pypa/packaging/pull/1179)) - Reject TOML booleans where integers are expected in `pylock` files. ([#1244](https://github.com/pypa/packaging/pull/1244)) - Add `PylockSelectError` to `packaging.pylock.__all__`. ([#1202](https://github.com/pypa/packaging/pull/1202)) - Fix `DirectUrl` credential stripping for passwords containing `@`. ([#1218](https://github.com/pypa/packaging/pull/1218)) - Parse the URL scheme case-insensitively when checking for file URLs in `direct_url`. ([#1240](https://github.com/pypa/packaging/pull/1240)) - Require absolute file URLs for local directories in `direct_url`. ([#1297](https://github.com/pypa/packaging/pull/1297)) - Collect `InvalidRequirement` errors while resolving dependency groups instead of leaking them. ([#1302](https://github.com/pypa/packaging/pull/1302)) - Don't cache malformed dependency group parses. ([#1248](https://github.com/pypa/packaging/pull/1248)) ##### Performance - Implement `Specifier` and `SpecifierSet` filtering with the new range engine. ([#1120](https://github.com/pypa/packaging/pull/1120), [#1259](https://github.com/pypa/packaging/pull/1259)) - Cache the default marker environment. ([#1250](https://github.com/pypa/packaging/pull/1250)) - Cache the `_manylinux` module lookup process-wide. ([#1254](https://github.com/pypa/packaging/pull/1254)) - Add `__slots__` to `Requirement` and the token classes. ([#1320](https://github.com/pypa/packaging/pull/1320), [#1258](https://github.com/pypa/packaging/pull/1258)) - Keep range caches across canonicalization, precompile the wheel project-name pattern, simplify `parse_tag()`, and skip `platform.mac_ver()` when the version and arch are given. ([#1253](https://github.com/pypa/packaging/pull/1253), [#1256](https://github.com/pypa/packaging/pull/1256), [#1236](https://github.com/pypa/packaging/pull/1236), [#1255](https://github.com/pypa/packaging/pull/1255)) ##### Documentation - Describe the validation scope of `packaging.pylock`. ([#1339](https://github.com/pypa/packaging/pull/1339)) - Explain which `packaging.metadata` fields are validated. ([#1342](https://github.com/pypa/packaging/pull/1342)) - Document `RFC822Policy` in the low-level `packaging.metadata` interface. ([#1222](https://github.com/pypa/packaging/pull/1222)) - Enable nitpicky mode and render missing classes and fields in the API reference. ([#1196](https://github.com/pypa/packaging/pull/1196), [#1225](https://github.com/pypa/packaging/pull/1225), [#1277](https://github.com/pypa/packaging/pull/1277)) - Add missing `versionadded` / `versionchanged` directives and many small docstring fixes across the API reference. ([#1205](https://github.com/pypa/packaging/pull/1205), [#1207](https://github.com/pypa/packaging/pull/1207), [#1208](https://github.com/pypa/packaging/pull/1208), [#1209](https://github.com/pypa/packaging/pull/1209), [#1211](https://github.com/pypa/packaging/pull/1211), [#1216](https://github.com/pypa/packaging/pull/1216), [#1217](https://github.com/pypa/packaging/pull/1217), [#1223](https://github.com/pypa/packaging/pull/1223), [#1272](https://github.com/pypa/packaging/pull/1272), [#1273](https://github.com/pypa/packaging/pull/1273), [#1274](https://github.com/pypa/packaging/pull/1274), [#1291](https://github.com/pypa/packaging/pull/1291), [#1300](https://github.com/pypa/packaging/pull/1300), [#1303](https://github.com/pypa/packaging/pull/1303), [#1317](https://github.com/pypa/packaging/pull/1317), [#1344](https://github.com/pypa/packaging/pull/1344)) ##### Internal - Add Python 3.15 to the test matrix. ([#1190](https://github.com/pypa/packaging/pull/1190)) - Add a musl/Alpine test job and make the test suite pass on musl. ([#1226](https://github.com/pypa/packaging/pull/1226), [#1227](https://github.com/pypa/packaging/pull/1227)) - Expand the downstream test matrix by ten projects. ([#1261](https://github.com/pypa/packaging/pull/1261)) - Update to mypy 2. ([#1191](https://github.com/pypa/packaging/pull/1191)) - Use nox's uv integration. ([#1057](https://github.com/pypa/packaging/pull/1057)) #### New Contributors - [@Sean-Kenneth-Doherty](https://github.com/Sean-Kenneth-Doherty) made their first contribution in [#1187](https://github.com/pypa/packaging/pull/1187) - [@jsirois](https://github.com/jsirois) made their first contribution in [#1199](https://github.com/pypa/packaging/pull/1199) - [@Alan-K-Biju-7](https://github.com/Alan-K-Biju-7) made their first contribution in [#1217](https://github.com/pypa/packaging/pull/1217) - [@facutuesca](https://github.com/facutuesca) made their first contribution in [#1218](https://github.com/pypa/packaging/pull/1218) - [@NovaLux12](https://github.com/NovaLux12) made their first contribution in [#1317](https://github.com/pypa/packaging/pull/1317) - [@atsuoishimoto](https://github.com/atsuoishimoto) made their first contribution in [#1314](https://github.com/pypa/packaging/pull/1314) - [@gaoflow](https://github.com/gaoflow) made their first contribution in [#1291](https://github.com/pypa/packaging/pull/1291) - [@jacobdr](https://github.com/jacobdr) made their first contribution in [#608](https://github.com/pypa/packaging/pull/608) - [@deepakganesh78](https://github.com/deepakganesh78) made their first contribution in [#1351](https://github.com/pypa/packaging/pull/1351) - [@rajath201](https://github.com/rajath201) made their first contribution in [#1356](https://github.com/pypa/packaging/pull/1356) **Full Changelog**: <https://github.com/pypa/packaging/compare/26.2...26.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate-bot

label

2026-08-10 05:17:00 +05:30

renovate-bot added 1 commit

2026-08-10 05:17:00 +05:30

chore(deps): update dependency packaging to v26.3

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

ci/woodpecker/pull_request_metadata/woodpecker Pipeline was successful

Details

ci/woodpecker/push/woodpecker Pipeline was successful

Details

1972173bad

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

ci/woodpecker/pull_request_metadata/woodpecker Pipeline was successful

Details

ci/woodpecker/push/woodpecker Pipeline was successful

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/packaging-26.x:renovate/packaging-26.x

git switch renovate/packaging-26.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/packaging-26.x

git switch renovate/packaging-26.x

git rebase master

git switch master

git merge --ff-only renovate/packaging-26.x

git switch renovate/packaging-26.x

git rebase master

git switch master

git merge --no-ff renovate/packaging-26.x

git switch master

git merge --squash renovate/packaging-26.x