Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *python3-pip* to *26.2.1* 
has Succeeded.

Next steps:
    - apply the patch: git am 0001-python3-pip-upgrade-26.1.2-26.2.1.patch
    - check the changes to upstream patches and summarize them in the commit 
message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update 
failures.
Any problem please file a bug at 
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
>From 7313e7a584da2d115a396b25d83b5087e736fae3 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Wed, 5 Aug 2026 05:41:16 +0000
Subject: [PATCH] python3-pip: upgrade 26.1.2 -> 26.2.1

Source: NEWS.rst

26.2.1 (2026-08-04)
===================

Bug Fixes
---------

- Reallow keyring installed in a (non-activated) virtual environment to be be 
used
  via the ``import`` provider method while installing build dependencies. 
(`#14227 <https://github.com/pypa/pip/issues/14227>`_)

26.2 (2026-07-29)
=================

Deprecations and Removals
-------------------------

- Newly published packages will no longer be immediately visible to pip
  if the index uses caching. To install a newly published package, use
  ``--refresh-package``. (`#13680 <https://github.com/pypa/pip/issues/13680>`_)
- Drop support for detecting legacy, non-:pep:`405`, ``virtualenv`` (< 20)
  environments. (`#14062 <https://github.com/pypa/pip/issues/14062>`_)
- Constraints files, including ``PIP_CONSTRAINT``, no longer affect isolated
  build environments. Use ``--build-constraint`` or the ``PIP_BUILD_CONSTRAINT``
  environment variable to constrain build dependencies instead.

  The ``--use-feature=build-constraint`` flag is now always enabled and has no
  effect. (`#14094 <https://github.com/pypa/pip/issues/14094>`_)

Features
--------

- Declare support for Python 3.15 (`#14208 
<https://github.com/pypa/pip/issues/14208>`_)
- Support self-referential extras officially. pip has supported this by 
accident since version 21.2. (`#11296 
<https://github.com/pypa/pip/issues/11296>`_)
- Add ``--only-deps`` flag to instruct pip to select only the dependencies
  of supplied packages. It cannot be used with ``--no-deps``, ``-r``, 
``--group``,
  or ``--requirements-from-script``. (`#11440 
<https://github.com/pypa/pip/issues/11440>`_)
- Cache simple responses in accordance to their ``Cache-Control`` header
  instead of always revalidating on every request. To refresh cached package 
index responses
  and ensure newly published packages are found, use ``--refresh-package 
<package>``. (`#13680 <https://github.com/pypa/pip/issues/13680>`_)
- Add ``--no-require-hashes`` to disable automatic enablement of
  ``--require-hashes`` when encountering a requirement with hashes. (`#14169 
<https://github.com/pypa/pip/issues/14169>`_)
- Honor ``--only-final`` when sourcing requirements with ``-r pylock.toml``. 
(`#13950 <https://github.com/pypa/pip/issues/13950>`_)
- Add support for ``pylock.toml`` ``upload-time`` field, so 
``--uploaded-prior-to`` works with ``-r pylock.toml``. (`#14168 
<https://github.com/pypa/pip/issues/14168>`_)
- Better error messages in case of conflicts with requirements from ``-r 
pylock.toml``. (`#13963 <https://github.com/pypa/pip/issues/13963>`_)
- Add experimental support for isolating build subprocesses by creating standard
  virtual environments. This will fix most (if not all) subtle isolation issues
  that can lead to broken builds exclusive to pip. The feature can be enabled
  via ``--use-feature=venv-isolation`` and will be enabled by default in a 
future
  release.

  Note that the feature has limited compatibility with 
``--use-feature=inprocess-build-deps``

[Changelog truncated as it exceeds 3000 characters;
the full changelog can be found in an attachment to the AUH email]
---
 .../python3-pip/no_shebang_mangling.patch     |  8 +++---
 ...n3-pip_26.1.2.bb => python3-pip_26.2.1.bb} | 25 +++++++++++++++++--
 2 files changed, 27 insertions(+), 6 deletions(-)
 rename meta/recipes-devtools/python/{python3-pip_26.1.2.bb => 
python3-pip_26.2.1.bb} (76%)

diff --git a/meta/recipes-devtools/python/python3-pip/no_shebang_mangling.patch 
b/meta/recipes-devtools/python/python3-pip/no_shebang_mangling.patch
index e8b2982b2a..4b61e94835 100644
--- a/meta/recipes-devtools/python/python3-pip/no_shebang_mangling.patch
+++ b/meta/recipes-devtools/python/python3-pip/no_shebang_mangling.patch
@@ -1,4 +1,4 @@
-From e4e1fed9f8e3ff3e04467699f36599f76caa9487 Mon Sep 17 00:00:00 2001
+From 545460879e2fbcb30b48b893a3efadb6f652e238 Mon Sep 17 00:00:00 2001
 From: Richard Purdie <[email protected]>
 Date: Wed, 23 Feb 2022 12:27:06 +0000
 Subject: [PATCH] python3-pip: Don't change shebang
@@ -13,10 +13,10 @@ Upstream-Status: Inappropriate [OE specific config]
  1 file changed, 3 insertions(+), 1 deletion(-)
 
 diff --git a/src/pip/_vendor/distlib/scripts.py 
b/src/pip/_vendor/distlib/scripts.py
-index 195dc3f..a0e0d61 100644
+index ac9e909..1faa5b6 100644
 --- a/src/pip/_vendor/distlib/scripts.py
 +++ b/src/pip/_vendor/distlib/scripts.py
-@@ -155,6 +155,8 @@ class ScriptMaker(object):
+@@ -157,6 +157,8 @@ class ScriptMaker(object):
          See also: http://www.in-ulm.de/~mascheck/various/shebang/#length
                    https://hg.mozilla.org/mozilla-central/file/tip/mach
          """
@@ -25,7 +25,7 @@ index 195dc3f..a0e0d61 100644
          if os.name != 'posix':
              simple_shebang = True
          elif getattr(sys, "cross_compiling", False):
-@@ -363,7 +365,7 @@ class ScriptMaker(object):
+@@ -367,7 +369,7 @@ class ScriptMaker(object):
                  return
  
              match = FIRST_LINE_RE.match(first_line.replace(b'\r\n', b'\n'))
diff --git a/meta/recipes-devtools/python/python3-pip_26.1.2.bb 
b/meta/recipes-devtools/python/python3-pip_26.2.1.bb
similarity index 76%
rename from meta/recipes-devtools/python/python3-pip_26.1.2.bb
rename to meta/recipes-devtools/python/python3-pip_26.2.1.bb
index 945aad1834..d2658c941e 100644
--- a/meta/recipes-devtools/python/python3-pip_26.1.2.bb
+++ b/meta/recipes-devtools/python/python3-pip_26.2.1.bb
@@ -1,3 +1,24 @@
+# FIXME: the LIC_FILES_CHKSUM values have been updated by 'devtool upgrade'.
+# The following is the difference between the old and the new license text.
+# Please update the LICENSE value if needed, and summarize the changes in
+# the commit message via 'License-Update:' tag.
+# (example: 'License-Update: copyright years updated.')
+#
+# The changes:
+#
+# --- src/pip/_vendor/idna/LICENSE.md
+# +++ src/pip/_vendor/idna/LICENSE.md
+# @@ -1,6 +1,6 @@
+#  BSD 3-Clause License
+#  
+# -Copyright (c) 2013-2025, Kim Davies and contributors.
+# +Copyright (c) 2013-2026, Kim Davies and contributors.
+#  All rights reserved.
+#  
+#  Redistribution and use in source and binary forms, with or without
+# 
+#
+
 SUMMARY = "The PyPA recommended tool for installing Python packages"
 HOMEPAGE = "https://pypi.org/project/pip";
 SECTION = "devel/python"
@@ -7,7 +28,7 @@ LIC_FILES_CHKSUM = 
"file://LICENSE.txt;md5=63ec52baf95163b597008bb46db68030 \
                     
file://src/pip/_vendor/certifi/LICENSE;md5=11618cb6a975948679286b1211bd573c \
                     
file://src/pip/_vendor/distlib/LICENSE.txt;md5=f6a11430d5cd6e2cd3832ee94f22ddfc 
\
                     
file://src/pip/_vendor/distro/LICENSE;md5=d2794c0df5b907fdace235a619d80314 \
-                    
file://src/pip/_vendor/idna/LICENSE.md;md5=18a4795c19833413a7e2f1cb3cd3b143 \
+                    
file://src/pip/_vendor/idna/LICENSE.md;md5=9a6c29079fc90c29d80332f44d2625f2 \
                     
file://src/pip/_vendor/msgpack/COPYING;md5=cd9523181d9d4fbf7ffca52eaa2a5751 \
                     
file://src/pip/_vendor/packaging/LICENSE;md5=faadaedca9251a90b205c9167578ce91 \
                     
file://src/pip/_vendor/pkg_resources/LICENSE;md5=141643e11c48898150daa83802dbc65f
 \
@@ -26,7 +47,7 @@ inherit pypi python_setuptools_build_meta
 
 SRC_URI += "file://no_shebang_mangling.patch"
 
-SRC_URI[sha256sum] = 
"f49cd134c61cf2fd75e0ce2676db03e4054504a5a4986d00f8299ae632dc4605"
+SRC_URI[sha256sum] = 
"f6ad667e89a1fe78046c8f13232b247200f5258d7828f3f7883d660878e0813f"
 
 CVE_PRODUCT = "pypa:pip"
 
-- 
2.47.1

packages/x86-64-v3-poky-linux/python3-pip/python3-pip: FILELIST: directory 
renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/msgpack
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/msgpack,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/distlib
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/distlib,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/tomli
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/tomli,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/resolvelib
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/resolvelib,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pyproject_hooks
 -> /usr/lib/python3.14/si
 te-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pyproject_hooks, 
directory renamed /usr/lib/python3.14/site-packages/pip-26.1.2.dist-info -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info, directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/truststore
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/truststore,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/distro
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/distro,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/cachecontrol
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/cachecontrol,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/certifi
 -> /usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_
 vendor/certifi, directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/requests
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/platformdirs,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/platformdirs
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/requests,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/urllib3
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/urllib3,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/idna
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/idna,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses, directory 
renamed /usr/lib/python
 3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/rich -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/rich,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/tomli_w
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/tomli_w,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/packaging
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/packaging,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pkg_resources
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pkg_resources,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pygments
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pygments,
 removed "/usr/lib/python3.14
 /site-packages/pip/_internal/__pycache__/build_env.cpython-314.pyc 
/usr/lib/python3.14/site-packages/pip/_internal/build_env.py", added 
"/usr/lib/python3.14/site-packages/pip/_internal/build_env/installer.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/base.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/noop.py 
/usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/__pycache__/_xdg.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/venv.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_vendor/idna/cli.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__init__.py 
/usr/lib/python3.14/site-packages/pip/_vendor/requests/__pycache__/_types.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/base.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/noop.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/virt
 ual.cpython-314.pyc /usr/lib/python3.14/site-packages/pip/_vendor/bom.cdx.json 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/__init__.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_internal/build_env/virtual.py 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/cli.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_vendor/requests/_types.py 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__main__.py 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/__main__.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/installer.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_vendor/requests/py.typed 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/venv.py 
/usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/_xdg.py"
Changes to packages/x86-64-v3-poky-linux/python3-pip (sysroot):
  /usr/lib/python3.14/site-packages/pip-26.1.2.dist-info moved to 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info
  /usr/lib/python3.14/site-packages/pip/_internal/build_env was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/base.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/__init__.py was 
added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/installer.py was 
added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/noop.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__ was 
added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/base.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/__init__.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/installer.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/noop.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/venv.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/virtual.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/venv.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/virtual.py was added
  /usr/lib/python3.14/site-packages/pip/_vendor/bom.cdx.json was added
  /usr/lib/python3.14/site-packages/pip/_vendor/idna/cli.py was added
  /usr/lib/python3.14/site-packages/pip/_vendor/idna/__main__.py was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/cli.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/__main__.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/__pycache__/_xdg.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/_xdg.py was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/requests/__pycache__/_types.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_vendor/requests/py.typed was added
  /usr/lib/python3.14/site-packages/pip/_vendor/requests/_types.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env.py was removed
  
/usr/lib/python3.14/site-packages/pip/_internal/__pycache__/build_env.cpython-314.pyc
 was removed
Changes to packages/x86_64-linux/python3-packaging-native (sysroot):
  /usr/lib/python3.14/site-packages/packaging-26.3.dist-info moved to 
/usr/lib/python3.14/site-packages/packaging-26.2.dist-info
  
/usr/lib/python3.14/site-packages/packaging/__pycache__/_ranges.cpython-314.pyc 
was removed
  
/usr/lib/python3.14/site-packages/packaging/__pycache__/ranges.cpython-314.pyc 
was removed
  /usr/lib/python3.14/site-packages/packaging/_ranges.py was removed
  /usr/lib/python3.14/site-packages/packaging/ranges.py was removed
packages/x86-64-v3-poky-linux/python3-pip: PV changed from "26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip: PKGV changed from 26.1.2 [default] 
to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip: SRC_URI changed from 
"https://files.pythonhosted.org/packages/source/p/pip/pip-26.1.2.tar.gz;downloadfilename=pip-26.1.2.tar.gz
 file://no_shebang_mangling.patch" to 
"https://files.pythonhosted.org/packages/source/p/pip/pip-26.2.1.tar.gz;downloadfilename=pip-26.2.1.tar.gz
 file://no_shebang_mangling.patch"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-dbg: PV changed from 
"26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-dbg: PKGV changed from 
26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-dev: PV changed from 
"26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-dev: PKGV changed from 
26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-doc: PV changed from 
"26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-doc: PKGV changed from 
26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-locale: PV changed from 
"26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-locale: PKGV changed from 
26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-src: PV changed from 
"26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-src: PKGV changed from 
26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-staticdev: PV changed 
from "26.1.2" to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip-staticdev: PKGV changed 
from 26.1.2 [default] to 26.2.1 [default]
packages/x86-64-v3-poky-linux/python3-pip/python3-pip: FILELIST: directory 
renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/packaging
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/packaging,
 directory renamed /usr/lib/python3.14/site-packages/pip-26.1.2.dist-info -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info, directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/urllib3
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/urllib3,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/msgpack
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/msgpack,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pyproject_hooks
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pyproj
 ect_hooks, directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/tomli_w
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/tomli_w,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/idna
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/idna,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/resolvelib
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pygments,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pygments
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/resolvelib,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/truststore
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/
 truststore, directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/rich
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/rich,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/cachecontrol
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/cachecontrol,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses, directory 
renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/tomli
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/tomli,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/pkg_resources
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/pkg_resources,
 directory renamed /usr/lib/pyth
 
on3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/platformdirs 
-> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/platformdirs,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/distro
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/distro,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/distlib
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/distlib,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/certifi
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/certifi,
 directory renamed 
/usr/lib/python3.14/site-packages/pip-26.1.2.dist-info/licenses/src/pip/_vendor/requests
 -> 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info/licenses/src/pip/_vendor/requests,
 removed "/usr/lib/python3.14
 /site-packages/pip/_internal/build_env.py 
/usr/lib/python3.14/site-packages/pip/_internal/__pycache__/build_env.cpython-314.pyc",
 added 
"/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/virtual.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_internal/build_env/__init__.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/noop.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/__init__.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_internal/build_env/virtual.py 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/__main__.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/cli.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_vendor/requests/__pycache__/_types.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/_xdg.py 
/usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/__pycache__/_xdg.cpython-314.pyc
 /usr/lib/python3.14/s
 ite-packages/pip/_internal/build_env/__pycache__/base.cpython-314.pyc 
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__main__.py 
/usr/lib/python3.14/site-packages/pip/_vendor/requests/py.typed 
/usr/lib/python3.14/site-packages/pip/_vendor/bom.cdx.json 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/base.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/noop.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/venv.py 
/usr/lib/python3.14/site-packages/pip/_vendor/requests/_types.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/installer.cpython-314.pyc
 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/venv.cpython-314.pyc
 /usr/lib/python3.14/site-packages/pip/_vendor/idna/cli.py 
/usr/lib/python3.14/site-packages/pip/_internal/build_env/installer.py"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip: PV changed from "26.1.2" 
to "26.2.1"
packages/x86-64-v3-poky-linux/python3-pip/python3-pip: PKGSIZE changed from 
10676842 to 10653168 (-0%)
packages/x86-64-v3-poky-linux/python3-pip/python3-pip: PKGV changed from 26.1.2 
[default] to 26.2.1 [default]
Changes to packages/x86-64-v3-poky-linux/python3-pip (sysroot):
  /usr/lib/python3.14/site-packages/pip-26.1.2.dist-info moved to 
/usr/lib/python3.14/site-packages/pip-26.2.1.dist-info
  /usr/lib/python3.14/site-packages/pip/_internal/build_env was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/base.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/__init__.py was 
added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/installer.py was 
added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/noop.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__ was 
added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/base.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/__init__.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/installer.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/noop.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/venv.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_internal/build_env/__pycache__/virtual.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/venv.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env/virtual.py was added
  /usr/lib/python3.14/site-packages/pip/_vendor/bom.cdx.json was added
  /usr/lib/python3.14/site-packages/pip/_vendor/idna/cli.py was added
  /usr/lib/python3.14/site-packages/pip/_vendor/idna/__main__.py was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/cli.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/idna/__pycache__/__main__.cpython-314.pyc
 was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/__pycache__/_xdg.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_vendor/platformdirs/_xdg.py was added
  
/usr/lib/python3.14/site-packages/pip/_vendor/requests/__pycache__/_types.cpython-314.pyc
 was added
  /usr/lib/python3.14/site-packages/pip/_vendor/requests/py.typed was added
  /usr/lib/python3.14/site-packages/pip/_vendor/requests/_types.py was added
  /usr/lib/python3.14/site-packages/pip/_internal/build_env.py was removed
  
/usr/lib/python3.14/site-packages/pip/_internal/__pycache__/build_env.cpython-314.pyc
 was removed
Changes to packages/x86_64-linux/python3-packaging-native (sysroot):
  /usr/lib/python3.14/site-packages/packaging-26.3.dist-info moved to 
/usr/lib/python3.14/site-packages/packaging-26.2.dist-info
  
/usr/lib/python3.14/site-packages/packaging/__pycache__/_ranges.cpython-314.pyc 
was removed
  
/usr/lib/python3.14/site-packages/packaging/__pycache__/ranges.cpython-314.pyc 
was removed
  /usr/lib/python3.14/site-packages/packaging/_ranges.py was removed
  /usr/lib/python3.14/site-packages/packaging/ranges.py was removed
Changelog for python3-pip: 26.1.2 -> 26.2.1
Source: NEWS.rst

26.2.1 (2026-08-04)
===================

Bug Fixes
---------

- Reallow keyring installed in a (non-activated) virtual environment to be be 
used
  via the ``import`` provider method while installing build dependencies. 
(`#14227 <https://github.com/pypa/pip/issues/14227>`_)

26.2 (2026-07-29)
=================

Deprecations and Removals
-------------------------

- Newly published packages will no longer be immediately visible to pip
  if the index uses caching. To install a newly published package, use
  ``--refresh-package``. (`#13680 <https://github.com/pypa/pip/issues/13680>`_)
- Drop support for detecting legacy, non-:pep:`405`, ``virtualenv`` (< 20)
  environments. (`#14062 <https://github.com/pypa/pip/issues/14062>`_)
- Constraints files, including ``PIP_CONSTRAINT``, no longer affect isolated
  build environments. Use ``--build-constraint`` or the ``PIP_BUILD_CONSTRAINT``
  environment variable to constrain build dependencies instead.

  The ``--use-feature=build-constraint`` flag is now always enabled and has no
  effect. (`#14094 <https://github.com/pypa/pip/issues/14094>`_)

Features
--------

- Declare support for Python 3.15 (`#14208 
<https://github.com/pypa/pip/issues/14208>`_)
- Support self-referential extras officially. pip has supported this by 
accident since version 21.2. (`#11296 
<https://github.com/pypa/pip/issues/11296>`_)
- Add ``--only-deps`` flag to instruct pip to select only the dependencies
  of supplied packages. It cannot be used with ``--no-deps``, ``-r``, 
``--group``,
  or ``--requirements-from-script``. (`#11440 
<https://github.com/pypa/pip/issues/11440>`_)
- Cache simple responses in accordance to their ``Cache-Control`` header
  instead of always revalidating on every request. To refresh cached package 
index responses
  and ensure newly published packages are found, use ``--refresh-package 
<package>``. (`#13680 <https://github.com/pypa/pip/issues/13680>`_)
- Add ``--no-require-hashes`` to disable automatic enablement of
  ``--require-hashes`` when encountering a requirement with hashes. (`#14169 
<https://github.com/pypa/pip/issues/14169>`_)
- Honor ``--only-final`` when sourcing requirements with ``-r pylock.toml``. 
(`#13950 <https://github.com/pypa/pip/issues/13950>`_)
- Add support for ``pylock.toml`` ``upload-time`` field, so 
``--uploaded-prior-to`` works with ``-r pylock.toml``. (`#14168 
<https://github.com/pypa/pip/issues/14168>`_)
- Better error messages in case of conflicts with requirements from ``-r 
pylock.toml``. (`#13963 <https://github.com/pypa/pip/issues/13963>`_)
- Add experimental support for isolating build subprocesses by creating standard
  virtual environments. This will fix most (if not all) subtle isolation issues
  that can lead to broken builds exclusive to pip. The feature can be enabled
  via ``--use-feature=venv-isolation`` and will be enabled by default in a 
future
  release.

  Note that the feature has limited compatibility with 
``--use-feature=inprocess-build-deps``.
  While most builds should work with both features enabled, there are known 
edge cases.
  ``inprocess-build-deps`` will not be enabled by default until they are fixed. 
(`#14070 <https://github.com/pypa/pip/issues/14070>`_)
- Present more informative diagnostic errors on uncaught network errors. 
(`#14115 <https://github.com/pypa/pip/issues/14115>`_)
- Allow opting out of Git partial clones with 
``PIP_NO_PARTIAL_CLONE_FOR_BROKEN_GIT_SERVER``. (`#11043 
<https://github.com/pypa/pip/issues/11043>`_)
- Add a ``--no-proxy-env`` (or ``--proxy ""``) option to ignore proxies
  configured via non-pip environment variables or configuration files.
  A proxy set with ``--proxy`` is still used. (`#5378 
<https://github.com/pypa/pip/issues/5378>`_)
- Add support for pulling username from keyring subprocess provider (`#12543 
<https://github.com/pypa/pip/issues/12543>`_)
- Speedup tab autocompletion by lazy-importing certain modules. (`#4768 
<https://github.com/pypa/pip/issues/4768>`_)
- Improve cached wheel lookup performance when many cached wheels are checked
  for compatibility. (`#14122 <https://github.com/pypa/pip/issues/14122>`_)
- Speed up path compaction when displaying uninstall changes. (`#14107 
<https://github.com/pypa/pip/issues/14107>`_)

Bug Fixes
---------

- Only emit the invalid-metadata warning once per location per run, instead of 
repeating it during the same command. (`#11436 
<https://github.com/pypa/pip/issues/11436>`_)
- Handle ``BrokenPipeError`` when pip output is piped to a command that closes 
early. (`#11608 <https://github.com/pypa/pip/issues/11608>`_)
- Follow symlinks while checking if installed scripts are on PATH. (`#11953 
<https://github.com/pypa/pip/issues/11953>`_)
- Stop dropping extras from messages about candidates with inconsistent 
metadata. (`#12023 <https://github.com/pypa/pip/issues/12023>`_)
- Stop animating progress bars and status spinners when running on CI, even
  if ``FORCE_COLOR`` is set. (`#13354 
<https://github.com/pypa/pip/issues/13354>`_)
- Ensure truststore feature remains active while initially connecting to
  a HTTPS proxy. (`#13465 <https://github.com/pypa/pip/issues/13465>`_)
- Address encoding warnings emitted when Python's UTF-8 Mode is enabled by
  continuing to use the configured locale. (`#13922 
<https://github.com/pypa/pip/issues/13922>`_)
- Raise an error when the :pep:`658` ``.metadata`` file used during dependency
  resolution disagrees with the downloaded wheel's ``METADATA`` on ``Name``,
  ``Version``, ``Requires-Dist``, ``Requires-Python`` or ``Provides-Extra``. 
(`#13983 <https://github.com/pypa/pip/issues/13983>`_)
- Prevent system packages from leaking into isolated build environments on 
Python 3.15 (`#14033 <https://github.com/pypa/pip/issues/14033>`_)
- Never use persistent wheel cache for local directory requirements even if 
there
  is a matching entry. (`#14044 <https://github.com/pypa/pip/issues/14044>`_)
- Avoid re-fetching a pinned Git commit that is already present locally. 
(`#14055 <https://github.com/pypa/pip/issues/14055>`_)
- Report the correct configuration level for ``cert`` in ``pip debug`` output. 
(`#14056 <https://github.com/pypa/pip/issues/14056>`_)
- Fix ``pip show`` crash when a distribution has no ``Metadata-Version``. 
(`#14057 <https://github.com/pypa/pip/issues/14057>`_)
- Remove empty ``http-v2`` cache directories when running ``pip cache purge``. 
(`#14058 <https://github.com/pypa/pip/issues/14058>`_)
- Report a copy failure in ``pip wheel`` instead of a misleading build failure. 
(`#14059 <https://github.com/pypa/pip/issues/14059>`_)
- Make ``pip install`` conflict checks independent of installed distribution 
iteration order. (`#14074 <https://github.com/pypa/pip/issues/14074>`_)
- Fix ``ProtocolError`` exceptions raised after an incomplete download from 
bypassing
  download resume logic and leading to a crash. (`#14079 
<https://github.com/pypa/pip/issues/14079>`_)
- Fix caching bug where local directory requirements would be cached if the
  directory name contains a dash. (`#14080 
<https://github.com/pypa/pip/issues/14080>`_)
- Avoid reparsing distribution metadata when formatting the default ``pip list``
  columns output with the importlib backend. (`#14089 
<https://github.com/pypa/pip/issues/14089>`_)
- Fix decoding the URL path twice while determining a link filename 
(CVE-2026-13346). (`#14110 <https://github.com/pypa/pip/issues/14110>`_)
- Avoid reading installed file lists in ``pip show`` unless ``--files`` is 
used. (`#14117 <https://github.com/pypa/pip/issues/14117>`_)
- Additional rejection of tar archives that write outside the target
  directory through symlink traversal when extracting on Python
  versions pre-PEP 706. (`#14127 <https://github.com/pypa/pip/issues/14127>`_)
- Fix ``pip list --not-required`` listing dependencies of packages excluded 
with ``--exclude``. (`#14129 <https://github.com/pypa/pip/issues/14129>`_)
- Fail an interrupted download instead of corrupting the saved file when the
  server resumes a range request from a different offset than was requested. 
(`#14131 <https://github.com/pypa/pip/issues/14131>`_)
- Fix option errors printing the usage message with raw Rich markup. (`#14136 
<https://github.com/pypa/pip/issues/14136>`_)
- platformdirs 4.6.0+ adds support for ``XDG_*`` environment variables on 
macOS, so
  some directory locations may change if any of these are set:

  - ``XDG_CACHE_HOME``: The `pip cache directory 
<https://pip.pypa.io/en/stable/cli/pip_cache/>`_
    will be at ``$XDG_CACHE_HOME/pip``.
  - ``XDG_DATA_DIRS``: The `global configuration file 
<https://pip.pypa.io/en/stable/topics/configuration/#config-file>`_
    will be inside ``$XDG_DATA_DIRS/pip``
  - ``XDG_DATA_HOME``: The `user configuration file 
<https://pip.pypa.io/en/stable/topics/configuration/#config-file>`_
    will be inside ``$XDG_DATA_HOME/pip``, if the directory exists (`#14142 
<https://github.com/pypa/pip/issues/14142>`_)
- Recover credentials embedded in a redirect ``Location`` URL when handling a
  ``401`` response, even under ``--no-input``. Previously this extraction was
  gated behind keyring being enabled, so ``--no-input`` (with the default 
keyring
  provider) caused downloads that rely on a cross-origin redirect with embedded
  credentials to fail with ``401``. (`#14182 
<https://github.com/pypa/pip/issues/14182>`_)
- Reject a package ``path`` in a ``pylock.toml`` fetched from a URL when it
  resolves outside the lock file's own location, so a remote lock file can no
  longer point at the local filesystem or another host. (`#14159 
<https://github.com/pypa/pip/issues/14159>`_)
- Respect ``--uploaded-prior-to``, ``--no-binary``, ``--only-binary``,
  and ``--prefer-binary`` in ``pip list --outdated`` and
  ``pip list --uptodate`` when determining the latest available version. 
(`#14190 <https://github.com/pypa/pip/issues/14190>`_)
- Show a clear error instead of a traceback for an invalid requirement marker. 
(`#6385 <https://github.com/pypa/pip/issues/6385>`_)

Vendored Libraries
------------------

- Upgrade certifi to 2026.6.17
- Upgrade distlib to 0.4.2
- Upgrade idna to 3.18
- Upgrade platformdirs to 4.10.0
- Upgrade pygments to 2.20.0
- Upgrade requests to 2.34.2
- Upgrade tomli to 2.4.1
- Upgrade urllib3 to 2.7.0

Process
-------

- Include a CycloneDX SBOM (Software Bill of Materials) file alongside vendored 
libraries.

Attachment: 0001-python3-pip-upgrade-26.1.2-26.2.1.patch
Description: Binary data

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#242819): 
https://lists.openembedded.org/g/openembedded-core/message/242819
Mute This Topic: https://lists.openembedded.org/mt/120606458/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to