dependabot[bot] opened a new pull request, #4227: URL: https://github.com/apache/iceberg-python/pull/4227
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 4.2.1 to 4.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/cibuildwheel/releases";>pypa/cibuildwheel's releases</a>.</em></p> <blockquote> <h2>v4.3.4</h2> <ul> <li>🔐 Warns when a uv build frontend is selected and the host uv is older than 0.13.4, which still trusts the compromised eMudhra CA roots (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3021";>#3021</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle for pip on Python 3.9, where pip uses its bundled certifi, which still trusts the compromised eMudhra roots (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3017";>#3017</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle for pip on GraalPy, where truststore is not supported (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3019";>#3019</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle in Android, iOS, and Pyodide cross venvs, where pip uses the host's OpenSSL CA file (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3020";>#3020</a>)</li> <li>🐛 Seeds build's isolated environment with the pinned pip on macOS and Windows, fixing GraalPy 25.0 builds (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3018";>#3018</a>)</li> <li>💼 Stops Azure cache growth from <code>restoreKeys</code> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3022";>#3022</a>)</li> </ul> <h2>v4.3.3</h2> <ul> <li>🔐 Updates manylinux images and pip to fix vulnerability to <a href="https://emudhra.we-have-a-problem.com/";>eMudhra</a>.</li> </ul> <h2>v4.3.2</h2> <ul> <li>🔐 Updates our dependency pins to certifi==2026.10.19, following the <a href="https://emudhra.we-have-a-problem.com/";>eMudhra Intermediate CA Compromise</a>. Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.</li> </ul> <h2>v4.3.1</h2> <ul> <li>🛠 Updates CPython 3.15 to the final 3.15.0 release (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3009";>#3009</a>)</li> </ul> <h2>v4.3.0</h2> <ul> <li>✨ Extends <a href="https://cibuildwheel.pypa.io/en/stable/configuration/#inherit";>option inheritance</a> to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using <code>CIBW_INHERIT</code>. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2928";>#2928</a>)</li> <li>✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the <code>pypy</code> <a href="https://cibuildwheel.pypa.io/en/stable/options/#enable";><code>enable</code></a> flag (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2998";>#2998</a>)</li> <li>✨ Adds GraalPy 3.13 (v25.3) support on Linux, Windows, and macOS arm64, available with the <code>graalpy</code> <a href="https://cibuildwheel.pypa.io/en/stable/options/#enable";><code>enable</code></a> flag (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2982";>#2982</a>)</li> <li>✨ Adds <a href="https://cibuildwheel.pypa.io/en/stable/options/#log-fold-mode";><code>log-fold-mode</code></a> to override CI log folding, including <code>CIBW_LOG_FOLD_MODE=disabled</code> to keep build steps expanded (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2972";>#2972</a>)</li> <li>✨ Adds a <code>python-path</code> input to the GitHub Action to choose the Python interpreter used to run cibuildwheel, and falls back to system <code>python3</code> on runner architectures unsupported by <code>setup-python</code>, such as native riscv64 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2990";>#2990</a>)</li> <li>🐛 Fixes Windows command execution when paths or arguments contain shell metacharacters, including dependency specifiers containing <code><</code> or <code>></code> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2978";>#2978</a>)</li> <li>🛠 Improves readability of logged commands whose arguments contain quotes (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2993";>#2993</a>)</li> <li>🛠 Updates Pyodide to 0.27.8, 0.29.5, and 314.0.7, and updates its build tooling, including auditwheel-emscripten 0.3.0 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2996";>#2996</a>)</li> <li>🛠 Updates dependencies and container pins, including CPython 3.15.0rc3 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2986";>#2986</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/3003";>#3003</a>)</li> <li>📚 Corrects references to <code>--archs</code> in CLI help, error messages, and documentation (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2992";>#2992</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md";>pypa/cibuildwheel's changelog</a>.</em></p> <blockquote> <hr /> <h2>title: Changelog ref: changelog</h2> <h1>Changelog</h1> <h3>v4.3.5</h3> <p><em>27 October 2026</em></p> <ul> <li>🐛 Stops passing the target build environment to the host virtualenv call, regression in v4.3.4 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3023";>#3023</a>)</li> <li>🛠 Updates dependencies and constraints (pyodide-build 0.39.3, CPython 3.15.2, etc) (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3024";>#3024</a>, <a href="https://redirect.github.com/pypa/cibuildwheel/issues/3027";>#3027</a>)</li> <li>💼 Updates CI actions (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3025";>#3025</a>)</li> </ul> <h3>v4.3.4</h3> <p><em>22 October 2026</em></p> <ul> <li>🔐 Warns when a uv build frontend is selected and the host uv is older than 0.13.4, which still trusts the compromised eMudhra CA roots (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3021";>#3021</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle for pip on Python 3.9, where pip uses its bundled certifi, which still trusts the compromised eMudhra roots (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3017";>#3017</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle for pip on GraalPy, where truststore is not supported (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3019";>#3019</a>)</li> <li>🔐 Uses cibuildwheel's CA bundle in Android, iOS, and Pyodide cross venvs, where pip uses the host's OpenSSL CA file (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3020";>#3020</a>)</li> <li>🐛 Seeds build's isolated environment with the pinned pip on macOS and Windows, fixing GraalPy 25.0 builds (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3018";>#3018</a>)</li> <li>💼 Stops Azure cache growth from <code>restoreKeys</code> (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3022";>#3022</a>)</li> </ul> <h3>v4.3.3</h3> <p><em>21 October 2026</em></p> <ul> <li>🔐 Updates manylinux images and pip to fix vulnerability to <a href="https://emudhra.we-have-a-problem.com/";>eMudhra</a>.</li> </ul> <h3>v4.3.2</h3> <p><em>20 October 2026</em></p> <ul> <li>🔐 Updates our dependency pins to certifi==2026.10.19, following the <a href="https://emudhra.we-have-a-problem.com/";>eMudhra Intermediate CA Compromise</a>. Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.</li> </ul> <h3>v4.3.1</h3> <p><em>10 October 2026</em></p> <ul> <li>🛠 Updates CPython 3.15 to the final 3.15.0 release (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3009";>#3009</a>)</li> </ul> <h3>v4.3.0</h3> <p><em>5 October 2026</em></p> <ul> <li>✨ Extends <a href="https://cibuildwheel.pypa.io/en/stable/configuration/#inherit";>option inheritance</a> to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using <code>CIBW_INHERIT</code>. (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2928";>#2928</a>)</li> <li>✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the <code>pypy</code> <a href="https://cibuildwheel.pypa.io/en/stable/options/#enable";><code>enable</code></a> flag (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/2998";>#2998</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/cibuildwheel/commit/b9e566a2b284570af229f6c2a33673410d0389a3";><code>b9e566a</code></a> Bump version: v4.3.4</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/0d511ac4b39be40c67cc7c02a075e6296f1cf8d4";><code>0d511ac</code></a> fix: use cibuildwheel's CA bundle in cross venvs (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3020";>#3020</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/d6c9b11a75d75d57f569bce12237551fb15a7f5a";><code>d6c9b11</code></a> feat: warn when uv is too old to have the eMudhra CA fix (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3021";>#3021</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/44631207c5d0c25dad513048b972c5b112cc913e";><code>4463120</code></a> fix: seed build's isolated env with the pinned pip (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3018";>#3018</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/6d4911a99e066f09dfa0a2228853ae4cfeefbc72";><code>6d4911a</code></a> fix: use cibuildwheel's CA bundle for pip on GraalPy (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3019";>#3019</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/54d1a6f91a19d452909d450f78cb8d5909213ef2";><code>54d1a6f</code></a> ci: stop Azure cache growth from restoreKeys (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3022";>#3022</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/5891574f2a763988a8d41520576fae65a641ac8c";><code>5891574</code></a> fix: use cibuildwheel's CA bundle for pip on Python 3.9 (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3017";>#3017</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/8c2dcd2e96041a619f5ff03c9638d7941e2553a4";><code>8c2dcd2</code></a> Bump version: v4.3.3</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/56459e64a8cb22e00043efabcf53a4b0ecf38fc0";><code>56459e6</code></a> [Bot] Update dependencies (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3012";>#3012</a>)</li> <li><a href="https://github.com/pypa/cibuildwheel/commit/afd09e67071efbccba51f7690b2f5262bedcf535";><code>afd09e6</code></a> chore(deps): bump the actions group with 4 updates (<a href="https://redirect.github.com/pypa/cibuildwheel/issues/3013";>#3013</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/cibuildwheel/compare/e090b81e30c4d855ea63bf4b6e59204c09a101ae...b9e566a2b284570af229f6c2a33673410d0389a3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
