Log message:
py-pip: updated to 25.0.1

25.0.1 (2025-02-09)

Bug Fixes

- Fix an unsupported type annotation on Python 3.10 and earlier.
- Fix a regression where truststore would never be used while installing build \ 
dependencies.

Log message:
py-pip: update to 25.0.

25.0 (2025-01-26)
=================

Deprecations and Removals
-------------------------

- Deprecate the ``no-python-version-warning`` flag as it has long done nothing
  since Python 2 support was removed in pip 21.0. (`#13154 \ 
<https://github.com/pypa/pip/issues/13154>`_)

Features
--------

- Prefer to display :pep:`639` ``License-Expression`` in ``pip show`` if \ 
metadata version is at least 2.4. (`#13112 \ 
<https://github.com/pypa/pip/issues/13112>`_)
- Support :pep:`639` ``License-Expression`` and ``License-File`` metadata fields \ 
in JSON
  output. ``pip inspect`` and ``pip install --report`` now emit
  ``license_expression`` and ``license_file`` fields in the ``metadata`` object,
  if the corresponding fields are present in the installed ``METADATA`` file. \ 
(`#13134 <https://github.com/pypa/pip/issues/13134>`_)
- Files in the network cache will inherit the read/write permissions of pip's cache
  directory (in addition to the current user retaining read/write access). This
  enables a single cache to be shared among multiple users. (`#11012 \ 
<https://github.com/pypa/pip/issues/11012>`_)
- Return the size, along with the number, of files cleared on ``pip cache \ 
purge`` and ``pip cache remove`` (`#12176 \ 
<https://github.com/pypa/pip/issues/12176>`_)
- Cache ``python-requires`` checks while filtering potential installation \ 
candidates. (`#13128 <https://github.com/pypa/pip/issues/13128>`_)
- Optimize package collection by avoiding unnecessary URL parsing and other \ 
processing. (`#13132 <https://github.com/pypa/pip/issues/13132>`_)

Bug Fixes
---------

- Reorder the encoding detection when decoding a requirements file, relying on
  UTF-8 over the locale encoding by default, matching the documented behaviour.
  (`#12771 <https://github.com/pypa/pip/issues/12771>`_)
- The pip version self check is disabled on ``EXTERNALLY-MANAGED`` environments. \ 
(`#11820 <https://github.com/pypa/pip/issues/11820>`_)
- Fix a security bug allowing a specially crafted wheel to execute code during
  installation. (`#13079 <https://github.com/pypa/pip/issues/13079>`_)
- The inclusion of ``packaging`` 24.2 changes how pre-release specifiers with \ 
``<`` and ``>``
  behave. Including a pre-release version with these specifiers now implies
  accepting pre-releases (e.g., ``<2.0dev`` can include ``1.0rc1``). To avoid
  implying pre-releases, avoid specifying them (e.g., use ``<2.0``).
  The exception is ``!=``, which never implies pre-releases. (`#13163 \ 
<https://github.com/pypa/pip/issues/13163>`_)
- The ``--cert`` and ``--client-cert`` command-line options are now respected while
  installing build dependencies. Consequently, the private ``_PIP_STANDALONE_CERT``
  environment variable is no longer used. (`#5502 \ 
<https://github.com/pypa/pip/issues/5502>`_)
- The ``--proxy`` command-line option is now respected while installing build \ 
dependencies. (`#6018 <https://github.com/pypa/pip/issues/6018>`_)

Vendored Libraries
------------------

- Upgrade CacheControl to 0.14.1
- Upgrade idna to 3.10
- Upgrade msgpack to 1.1.0
- Upgrade packaging to 24.2
- Upgrade platformdirs to 4.3.6
- Upgrade pyproject-hooks to 1.2.0
- Upgrade rich to 13.9.4
- Upgrade tomli to 2.2.1

Improved Documentation
----------------------

- Removed section about non-existing ``--force-keyring`` flag. (`#12455 \ 
<https://github.com/pypa/pip/issues/12455>`_)

Process
-------

- Started releasing to PyPI from a GitHub Actions CI/CD workflow that implements \ 
trusted publishing and bundles :pep:`740` digital attestations.

Log message:
py-*: remove unused tool dependency

py-setuptools includes the py-wheel functionality nowadays

Log message:
py-pip: updated to 24.3.1

24.3.1 (2024-10-27)

Bug Fixes

- Allow multiple nested inclusions of the same requirements file again.

24.3 (2024-10-27)

Deprecations and Removals

- Deprecate wheel filenames that are not compliant with :pep:`440`.

Features

- Detect recursively referencing requirements files and help users identify
  the source.
- Support for :pep:`730` iOS wheels.

Bug Fixes

- Display a better error message when an already installed package has an \ 
invalid requirement.
- Ignore ``PIP_TARGET`` and ``pip.conf`` ``global.target`` when preparing a \ 
build environment.
- Restore support for macOS 10.12 and older (via truststore).
- Allow installing pip in editable mode in a virtual environment on Windows.

Vendored Libraries

- Upgrade certifi to 2024.8.30
- Upgrade distlib to 0.3.9
- Upgrade truststore to 0.10.0
- Upgrade urllib3 to 1.26.20

Log message:
py-pip: update to 24.1.2.

24.1.2 (2024-07-07)
===================

Bug Fixes
---------

- Fix finding hardlink targets in tar files with an ignored top-level directory. \ 
(`#12781 <https://github.com/pypa/pip/issues/12781>`_)

Log message:
py-pip: updated to 24.1.1

24.1.1 (2024-06-26)

Bug Fixes

- Actually use system trust stores when the truststore feature is enabled.

Vendored Libraries

- Upgrade requests to 2.32.3

Log message:
py-pip: update to 24.1.

24.1 (2024-06-20)
=================

Vendored Libraries
------------------

- Upgrade truststore to 0.9.1.

24.1b2 (2024-06-12)
===================

Features
--------

- Report informative messages about invalid requirements. (`#12713 \ 
<https://github.com/pypa/pip/issues/12713>`_)

Bug Fixes
---------

- Eagerly import the self version check logic to avoid crashes while upgrading \ 
or downgrading pip at the same time. (`#12675 \ 
<https://github.com/pypa/pip/issues/12675>`_)
- Accommodate for mismatches between different sources of truth for extra names, \ 
for packages generated by ``setuptools``. (`#12688 \ 
<https://github.com/pypa/pip/issues/12688>`_)
- Accommodate for development versions of CPython ending in ``+`` in the version \ 
string. (`#12691 <https://github.com/pypa/pip/issues/12691>`_)

Vendored Libraries
------------------

- Upgrade packaging to 24.1
- Upgrade requests to 2.32.0
- Remove vendored colorama
- Remove vendored six
- Remove vendored webencodings
- Remove vendored charset_normalizer

  ``requests`` provides optional character detection support on some APIs when \ 
processing ambiguous bytes. This isn't relevant for pip to function and we're \ 
able to remove it due to recent upstream changes.

24.1b1 (2024-05-06)
===================

Deprecations and Removals
-------------------------

- Drop support for EOL Python 3.7. (`#11934 \ 
<https://github.com/pypa/pip/issues/11934>`_)
- Remove support for legacy versions and dependency specifiers.

  Packages with non standard-compliant versions or dependency specifiers are now \ 
ignored by the resolver.
  Already installed packages with non standard-compliant versions or dependency \ 
specifiers
  must be uninstalled before upgrading them. (`#12063 \ 
<https://github.com/pypa/pip/issues/12063>`_)

Features
--------

- Improve performance of resolution of large dependency trees, with more \ 
caching. (`#12453 <https://github.com/pypa/pip/issues/12453>`_)
- Further improve resolution performance of large dependency trees, by caching \ 
hash calculations. (`#12657 <https://github.com/pypa/pip/issues/12657>`_)
- Reduce startup time of commands (e.g. show, freeze) that do not access the \ 
network by 15-30%. (`#4768 <https://github.com/pypa/pip/issues/4768>`_)
- Reword and improve presentation of uninstallation errors. (`#10421 \ 
<https://github.com/pypa/pip/issues/10421>`_)
- Add a 'raw' progress_bar type for simple and parsable download progress \ 
reports (`#11508 <https://github.com/pypa/pip/issues/11508>`_)
- ``pip list`` no longer performs the pip version check unless ``--outdated`` or \ 
``--uptodate`` is given. (`#11677 \ 
<https://github.com/pypa/pip/issues/11677>`_)
- Use the ``data_filter`` when extracting tarballs, if it's available. (`#12111 \ 
<https://github.com/pypa/pip/issues/12111>`_)
- Display the Project-URL value under key "Home-page" in ``pip show`` \ 
when the Home-Page metadata field is not set.

  The Project-URL key detection is case-insensitive, and ignores any dashes and \ 
underscores. (`#11221 <https://github.com/pypa/pip/issues/11221>`_)

Bug Fixes
---------

- Ensure ``-vv`` gets passed to any ``pip install`` build environment \ 
subprocesses. (`#12577 <https://github.com/pypa/pip/issues/12577>`_)
- Deduplicate entries in the ``Requires`` field of ``pip show``. (`#12165 \ 
<https://github.com/pypa/pip/issues/12165>`_)
- Fix error on checkout for subversion and bazaar with verbose mode on. (`#11050 \ 
<https://github.com/pypa/pip/issues/11050>`_)
- Fix exception with completions when COMP_CWORD is not set (`#12401 \ 
<https://github.com/pypa/pip/issues/12401>`_)
- Fix intermittent "cannot locate t64.exe" errors when upgrading pip. \ 
(`#12666 <https://github.com/pypa/pip/issues/12666>`_)
- Remove duplication in invalid wheel error message (`#12579 \ 
<https://github.com/pypa/pip/issues/12579>`_)
- Remove the incorrect pip3.x console entrypoint from the pip wheel. This console
  script continues to be generated by pip when it installs itself. (`#12536 \ 
<https://github.com/pypa/pip/issues/12536>`_)
- Gracefully skip VCS detection in pip freeze when PATH points to a \ 
non-directory path. (`#12567 <https://github.com/pypa/pip/issues/12567>`_)
- Make the ``--proxy`` parameter take precedence over environment variables. \ 
(`#10685 <https://github.com/pypa/pip/issues/10685>`_)

Vendored Libraries
------------------

- Add charset-normalizer 3.3.2
- Remove chardet
- Remove pyparsing
- Upgrade CacheControl to 0.14.0
- Upgrade certifi to 2024.2.2
- Upgrade distro to 1.9.0
- Upgrade idna to 3.7
- Upgrade msgpack to 1.0.8
- Upgrade packaging to 24.0
- Upgrade platformdirs to 4.2.1
- Upgrade pygments to 2.17.2
- Upgrade rich to 13.7.1
- Upgrade setuptools to 69.5.1
- Upgrade tenacity to 8.2.3
- Upgrade typing_extensions to 4.11.0
- Upgrade urllib3 to 1.26.18

Improved Documentation
----------------------

- Document UX research done on pip. (`#10745 \ 
<https://github.com/pypa/pip/issues/10745>`_)
- Fix the direct usage of zipapp showing up as ``python -m pip.pyz`` rather than \ 
``./pip.pyz`` / ``.\pip.pyz`` (`#12043 \ 
<https://github.com/pypa/pip/issues/12043>`_)
- Add a warning explaining that the snippet in "Fallback behavior" is \ 
not a valid
  ``pyproject.toml`` snippet for projects, and link to setuptools documentation
  instead. (`#12122 <https://github.com/pypa/pip/issues/12122>`_)
- The Python Support Policy has been updated. (`#12529 \ 
<https://github.com/pypa/pip/issues/12529>`_)
- Document the environment variables that correspond with CLI options. (`#12576 \ 
<https://github.com/pypa/pip/issues/12576>`_)
- Update architecture documentation for command line interface. (`#6831 \ 
<https://github.com/pypa/pip/issues/6831>`_)

Process
-------

- Remove ``setup.py`` since all the pip project metadata is now declared in
  ``pyproject.toml``.
- Move remaining pip development tools configurations to ``pyproject.toml``.

Log message:
py-pip: requires py-setuptools >= 69 to match generated PLIST