Log message:
py-pip: updated to 24.0

24.0 (2024-02-03)

Features

Retry on HTTP status code 502
Automatically use the setuptools PEP 517 build backend when --config-settings is \ 
used for projects without pyproject.toml.
Make pip freeze and pip uninstall of legacy editable installs of packages whose \ 
name contains _ compatible with setuptools>=69.0.3.
Support per requirement --config-settings for editable installs.

Bug Fixes

Optimized usage of --find-links=<path-to-dir>, by only scanning the \ 
relevant directory once, only considering file names that are valid wheel or \ 
sdist names, and only considering files in the directory that are related to the \ 
install.
Removed wheel from the [build-system].requires list fallback that is used when \ 
pyproject.toml is absent.

Vendored Libraries

Upgrade distlib to 0.3.8

Improved Documentation

Fix explanation of how PIP_CONFIG_FILE works
Fix outdated pip install argument description in documentation.
Replace some links to PEPs with links to the canonical specifications on the \ 
Python Packaging User Guide
Updated the pyproject.toml document to stop suggesting to depend on wheel as a \ 
build dependency directly.
Update supported interpreters in development docs

Process

Most project metadata is now defined statically via pip’s pyproject.toml file.

Log message:
py-pip: updated to 23.3.2

23.3.2 (2023-12-17)
Bug Fixes
Fix a bug in extras handling for link requirements
Fix mercurial revision “parse error”: use --rev={ref} instead of -r={ref}

Log message:
Fix PLIST, bump PKGREVISION

Log message:
py-pip: updated to 23.3.1

23.3.1 (2023-10-21)

Bug Fixes

- Handle a timezone indicator of Z when parsing dates in the self check.
- Fix bug where installing the same package at the same time with multiple pip \ 
processes could fail.

Log message:
py-pip: updated to 23.3

23.3 (2023-10-15)
=================

Process
-------

- Added reference to `vulnerability reporting guidelines \ 
<https://www.python.org/dev/security/>`_ to pip's security policy.

Deprecations and Removals
-------------------------

- Drop a fallback to using SecureTransport on macOS. It was useful when pip \ 
detected OpenSSL older than 1.0.1, but the current pip does not support any \ 
Python version supporting such old OpenSSL versions.

Features
--------

- Improve extras resolution for multiple constraints on same base package.
- Improve use of datastructures to make candidate selection 1.6x faster
- Allow ``pip install --dry-run`` to use platform and ABI overriding options \ 
similar to ``--target``.
- Add ``is_yanked`` boolean entry to the installation report (``--report``) to \ 
indicate whether the requirement was yanked from the index, but was still \ 
selected by pip conform to PEP 592.

Bug Fixes
---------

- Ignore errors in temporary directory cleanup (show a warning instead).
- Normalize extras according to :pep:`685` from package metadata in the resolver
  for comparison. This ensures extras are correctly compared and merged as long
  as the package providing the extra(s) is built with values normalized according
  to the standard. Note, however, that this *does not* solve cases where the
  package itself contains unnormalized extra values in the metadata.
- Prevent downloading sdists twice when PEP 658 metadata is present.
- Include all requested extras in the install report (``--report``).
- Removed uses of ``datetime.datetime.utcnow`` from non-vendored code.
- Consistently report whether a dependency comes from an extra.
- Fix completion script for zsh
- Fix improper handling of the new onexc argument of ``shutil.rmtree()`` in \ 
Python 3.12.
- Filter out yanked links from the available versions error message: "(from \ 
versions: 1.0, 2.0, 3.0)" will not contain yanked versions conform PEP 592. \ 
The yanked versions (if any) will be mentioned in a separate error message.
- Fix crash when the git version number contains something else than digits and dots.
- Use ``-r=...`` instead of ``-r ...`` to specify references with Mercurial.
- Redact password from URLs in some additional places.
- pip uses less memory when caching large packages. As a result, there is a new \ 
on-disk cache format stored in a new directory ($PIP_CACHE_DIR/http-v2).

Vendored Libraries
------------------

- Upgrade certifi to 2023.7.22
- Add truststore 0.8.0
- Upgrade urllib3 to 1.26.17

Improved Documentation
----------------------

- Document that ``pip search`` support has been removed from PyPI
- Clarify --prefer-binary in CLI and docs
- Document that using OS-provided Python can cause pip's test suite to report \ 
false failures.

Log message:
py-pip: updated to 23.2.1

23.2.1 (2023-07-22)

Bug Fixes
- Disable PEP 658 metadata fetching with the legacy resolver.

Log message:
py-pip: updated to 23.2

23.2 (2023-07-15)
=================

Process
-------

- Deprecate support for eggs for Python 3.11 or later, when the new \ 
``importlib.metadata`` backend is used to load distribution metadata. This only \ 
affects the egg *distribution format* (with the ``.egg`` extension); \ 
distributions using the ``.egg-info`` *metadata format* (but are not actually \ 
eggs) are not affected. For more information about eggs, see `relevant section \ 
in the setuptools documentation \ 
<https://setuptools.pypa.io/en/stable/deprecated/python_eggs.html>`__.

Deprecations and Removals
-------------------------

- Deprecate legacy version and version specifiers that don't conform to `PEP 440
  <https://peps.python.org/pep-0440/>`_
- ``freeze`` no longer excludes the ``setuptools``, ``distribute``, and ``wheel``
  from the output when running on Python 3.12 or later, where they are not
  included in a virtual environment by default. Use ``--exclude`` if you wish to
  exclude any of these packages.

Features
--------

- make rejection messages slightly different between 1 and 8, so the user can \ 
make the difference.

Bug Fixes
---------

- Fix ``pip completion --zsh``.
- Prevent downloading files twice when PEP 658 metadata is present
- Add permission check before configuration
- Fix deprecation warnings in Python 3.12 for usage of shutil.rmtree
- Ignore invalid or unreadable ``origin.json`` files in the cache of locally \ 
built wheels.
- Fix installation of packages with PEP658 metadata using non-canonicalized names
- Correctly parse ``dist-info-metadata`` values from JSON-format index data.
- Fail with an error if the ``--python`` option is specified after the \ 
subcommand name.
- Fix slowness when using ``importlib.metadata`` (the default way for pip to \ 
read metadata in Python 3.11+) and there is a large overlap between already \ 
installed and to-be-installed packages.
- Pass the ``-r`` flag to mercurial to be explicit that a revision is passed and \ 
protect
  against ``hg`` options injection as part of VCS URLs. Users that do not have \ 
control on
  VCS URLs passed to pip are advised to upgrade.

Vendored Libraries
------------------

- Upgrade certifi to 2023.5.7
- Upgrade platformdirs to 3.8.1
- Upgrade pygments to 2.15.1
- Upgrade pyparsing to 3.1.0
- Upgrade Requests to 2.31.0
- Upgrade rich to 13.4.2
- Upgrade setuptools to 68.0.0
- Updated typing_extensions to 4.6.0
- Upgrade typing_extensions to 4.7.1
- Upgrade urllib3 to 1.26.16

Log message:
py-pip: Allow `pip install --executable=/path' to set #! in scripts.