dependabot[bot] opened a new pull request, #4043: URL: https://github.com/apache/iceberg-python/pull/4043
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 4.2.0 to 4.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/cibuildwheel/releases";>pypa/cibuildwheel's releases</a>.</em></p> <blockquote> <h2>v4.2.1</h2> <ul> <li>๐ Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2966";>#2966</a>)</li> <li>๐ Fixes a <code>NameError</code> on Pyodide when an already-compatible wheel was reused, which made the test step fail (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2968";>#2968</a>)</li> <li>๐ Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2962";>#2962</a>)</li> <li>๐ Updates dependencies including CPython 3.15.0rc2 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2965";>#2965</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2970";>#2970</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2976";>#2976</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2981";>#2981</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2985";>#2985</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md";>pypa/cibuildwheel's changelog</a>.</em></p> <blockquote> <hr /> <h2>title: Changelog ref: changelog</h2> <h1>Changelog</h1> <h3>v4.2.1</h3> <p><em>5 September 2026</em></p> <ul> <li>๐ Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2966";>#2966</a>)</li> <li>๐ Fixes a <code>NameError</code> on Pyodide when an already-compatible wheel was reused, which made the test step fail (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2968";>#2968</a>)</li> <li>๐ Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2962";>#2962</a>)</li> <li>๐ Updates dependencies including CPython 3.15.0rc2 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2965";>#2965</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2970";>#2970</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2976";>#2976</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2981";>#2981</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2985";>#2985</a>)</li> </ul> <h3>v4.2.0</h3> <p><em>4 August 2026</em></p> <ul> <li>๐ CPython 3.15 wheels are now built by default - without the <code>"cpython-prerelease"</code> <a href="https://cibuildwheel.pypa.io/en/stable/options/#enable";><code>enable</code></a> set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2944";>#2944</a>)</li> <li>โจ Adds Pyodide 3.15 support with the <code>cp315-pyodide_wasm32</code> build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2958";>#2958</a>)</li> <li>๐ Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A <code>4xx</code> response is still reported at once. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2953";>#2953</a>)</li> <li>๐ Accepts <code>default</code> as a <a href="https://cibuildwheel.pypa.io/en/stable/options/#build-frontend";><code>build-frontend</code></a> value on Pyodide, and accepts <code>pyodide-build</code> in the top-level table and in overrides (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2951";>#2951</a>)</li> <li>๐ Holds pip back on GraalPy, where newer pip breaks the build (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2955";>#2955</a>)</li> <li>๐ Updates Pyodide to 314.0.4 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2949";>#2949</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2952";>#2952</a>)</li> <li>๐ Updates dependencies and container pins (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2952";>#2952</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2960";>#2960</a>)</li> <li>๐ผ Updates CI action pins (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2948";>#2948</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2954";>#2954</a>)</li> <li>๐งช Uses pp311 for the abi3 test, and deletes <code>test_overridden_pip_constraint</code>, which is not necessary since <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2583";>#2583</a> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2956";>#2956</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2957";>#2957</a>)</li> </ul> <h3>v4.1.1</h3> <p><em>24 July 2026</em></p> <ul> <li>โจ Adds <code>pyodide-build</code> as a separate <a href="https://cibuildwheel.pypa.io/en/stable/options/#build-frontend";><code>build-frontend</code></a>, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2609";>#2609</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2945";>#2945</a>)</li> <li>๐ Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in <code>pinned_docker_images.cfg</code>. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2915";>#2915</a>)</li> <li>๐ Fixes platform-specific <a href="https://cibuildwheel.pypa.io/en/stable/options/#test-runtime";><code>test-runtime</code></a> environment variables (e.g. <code>CIBW_TEST_RUNTIME_ANDROID</code>) not being honored (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2941";>#2941</a>)</li> <li>๐ Fixes quoting of <a href="https://cibuildwheel.pypa.io/en/stable/options/#test-requires";><code>test-requires</code></a> and <a href="https://cibuildwheel.pypa.io/en/stable/options/#audit-requires";><code>audit-requires</code></a> so PEP 508 specifiers containing spaces work (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2913";>#2913</a>)</li> <li>๐ Makes <a href="https://cibuildwheel.pypa.io/en/stable/options/#archs";><code>archs</code></a> parsing case-insensitive and platform-aware, so e.g. <code>arm64</code> works on Windows (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2920";>#2920</a>)</li> <li>๐ Uses an absolute path for the <code>{project}</code> placeholder in <a href="https://cibuildwheel.pypa.io/en/stable/options/#config-settings";><code>config-settings</code></a> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2934";>#2934</a>)</li> <li>๐ Validates the <a href="https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version";><code>pyodide-version</code></a> option against the build identifier with a clear error (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2925";>#2925</a>)</li> <li>๐ Fixes PyPy installs on macOS after PyPy switched its downloads from <code>.tar.bz2</code> to <code>.tar.gz</code> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2939";>#2939</a>)</li> <li>๐ Makes a matching <code>python3-config</code> available in the build and test venvs on macOS (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2922";>#2922</a>)</li> <li>๐ Updates dependencies and container pins (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2917";>#2917</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2935";>#2935</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/2939";>#2939</a>)</li> <li>๐ Updates Android tests to current Python versions and the new test repository URL (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2933";>#2933</a>)</li> <li>๐ Drops the <code>orjson</code> dependency, no longer used by mypy 2+ (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2923";>#2923</a>)</li> <li>๐ Builds the docs with properdocs, a MkDocs fork (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2946";>#2946</a>)</li> <li>๐ Adds the missing <code>cp314-pyodide_wasm32</code> entry to the build identifier table (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2947";>#2947</a>)</li> <li>๐ Removes outdated notes about the <code>pip wheel</code> build frontend and ClearLinux (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2926";>#2926</a>)</li> <li>๐ผ Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2930";>#2930</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/cibuildwheel/commit/e090b81e30c4d855ea63bf4b6e59204c09a101ae";><code>e090b81</code></a> Bump version: v4.2.1</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/59501f4368864a1af236e7c3d231cf9a4286c93c";><code>59501f4</code></a> Respect configured NuGet package sources (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2966";>#2966</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/885ead0d983d735fa48619fabd5982416c5bcdd6";><code>885ead0</code></a> [Bot] Update dependencies (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2985";>#2985</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/3d9e8c5c98e15de8c65438601e4cae93887f5749";><code>3d9e8c5</code></a> docs: refresh CircleCI and CPython platform links (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2977";>#2977</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/7d5ec95797f99a7832d6a39eb354752a1e675b7d";><code>7d5ec95</code></a> [Bot] Update dependencies (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2981";>#2981</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/a007eeda0db5e20f6d5ddb132e737af04cff2b09";><code>a007eed</code></a> [Bot] Update dependencies (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2976";>#2976</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/fdda545750cee9fc8370deb648c162cfed777414";><code>fdda545</code></a> chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the actions grou...</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/8832cf6b75594121646ec4e32692cc0ea3899f83";><code>8832cf6</code></a> chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the ...</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/a35209b5ca0d0d2dc30a0f38b61a38153c559019";><code>a35209b</code></a> [Bot] Update dependencies (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2970";>#2970</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/148ea702ac52e3f09a336a02862e8686edae4863";><code>148ea70</code></a> chore: faster and stricter mypy (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2968";>#2968</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/cibuildwheel/compare/1828c10ab37f080699c7b81cea34097c684a7074...e090b81e30c4d855ea63bf4b6e59204c09a101ae";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
