Skip to content

Bump build from 1.5.0 to 1.6.0 - #118

Merged
docktermj merged 1 commit into
mainfrom
dependabot/pip/build-1.6.0
Sep 18, 2026
Merged

Bump build from 1.5.0 to 1.6.0#118
docktermj merged 1 commit into
mainfrom
dependabot/pip/build-1.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps build from 1.5.0 to 1.6.0.

Release notes

Sourced from build's releases.

1.6.0

What's Changed

New Contributors

Full Changelog: pypa/build@1.5.1...1.6.0

1.5.1

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.6.1 (2026-09-10) ####################

Bugfixes

  • Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:henryiii (:issue:1175) (:issue:1175)

Documentation

  • Fix doubled backslashes in the Windows pip config path (%APPDATA%\pip\pip.ini) in the docs - by :user:aroh3006 (:issue:1149)

Miscellaneous

  • :issue:1168, :issue:1170, :issue:1178

#################### 1.6.0 (2026-08-27) ####################

Features

  • Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
  • The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
  • The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
  • Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
  • Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
    • by :user:gaborbernat (:issue:655)
  • Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
  • On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

Bugfixes

... (truncated)

Commits
  • 7ac9efe chore: prepare for 1.6.0
  • e57e2bf 👷 ci: use app token for releases (#1169)
  • 66438ab pre-commit: bump repositories (#1167)
  • 4ed9658 build(deps): bump the github-actions group with 3 updates (#1166)
  • c76707f 🔧 chore: batch dependency updates weekly on Tuesday (#1165)
  • b317437 Drop a few PyPy-specific test skips (#1164)
  • 561f331 pre-commit: bump repositories (#1163)
  • 9456281 refactor: drop redundant exc_info parameter from backend exception wrapper ...
  • 3e7a445 Use stdlib importlib.metadata for typing (#1162)
  • 9a2e1e9 tests: download integration sources once per run (#1157)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 18, 2026 00:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 18, 2026
@github-actions

github-actions Bot commented Sep 18, 2026

Copy link
Copy Markdown

🤖 Claude Code Review

PR Code Review — Dependency Bump (build 1.5.0 → 1.6.0)

Code Quality

  • ✅ Style/formatting: Single-line version pin change in pyproject.toml:36, consistent with existing formatting.
  • ✅ No commented-out code
  • ✅ Meaningful names: N/A (dependency version only)
  • ✅ DRY: N/A
  • ✅ Defects: No logic changes. This is a routine dependency version bump (likely an automated Dependabot/Renovate PR based on the commit history showing similar bumps: isort, virtualenv, cryptography). No functional risk from the diff itself.
  • ✅ CLAUDE.md review: .claude/CLAUDE.md is unaffected by this change and remains general-purpose (no local-machine-specific paths, credentials, or environment assumptions).

Testing

  • ✅ N/A — no new functions/endpoints introduced by a version bump.
  • ⚠️ Recommend confirming CI passes across all supported Python versions (3.10–3.13) with build 1.6.0, since this is a build-tooling dependency used in packaging/CI, not application code.

Documentation

  • ✅ README/API docs: not applicable.
  • ❌ CHANGELOG.md not updated — if this repo tracks dependency bumps in CHANGELOG.md, this entry is missing. If dependency bumps are intentionally excluded from CHANGELOG (common for bot-driven bumps), disregard.
  • ✅ Markdown formatting: no .md files touched.

Security

  • ✅ No hardcoded credentials
  • ✅ No input validation concerns (build-tool dependency only)
  • ✅ No error handling concerns
  • ✅ No sensitive data in logs
  • ✅ No .lic files or AQAAAD-prefixed license strings found in this diff.

Summary

Low-risk, mechanical dependency version bump with no code or behavioral changes. Nothing blocking. Only note is the optional CHANGELOG.md entry, which may not apply if this repo excludes bot dependency bumps from it.

Automated code review analyzing defects and coding standards

@dependabot
Bump build from 1.5.0 to 1.6.0
aaff307 
Bumps [build](https://github.com/pypa/build) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.0...1.6.0)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/build-1.6.0 branch from a38bd1b to aaff307 Compare September 18, 2026 00:55
@docktermj docktermj self-assigned this Sep 18, 2026
@github-actions

github-actions Bot commented Sep 18, 2026

Copy link
Copy Markdown

🤖 Claude Code Review

PR Code Review

This PR is a routine automated dependency bump: build 1.5.0 → 1.6.0 in pyproject.toml (a dev-only build-tool dependency, pinned with ==). It's consistent with the repo's existing pattern of frequent single-dependency Dependabot bumps (e.g. isort, virtualenv, cryptography, mypy, wheel — see recent commit history).

Code Quality

  • ✅ Style/formatting: single-line version pin change, consistent with existing pyproject.toml conventions (pyproject.toml:36).
  • ✅ No commented-out code.
  • ✅ N/A — no new variables/identifiers introduced.
  • ✅ N/A — no logic duplicated.
  • ⚠️ Defects: Cannot verify the build 1.5.0→1.6.0 changelog for breaking changes without network access (WebFetch/WebSearch disabled for this run). build is a dev-only PEP 517 build-frontend dependency, not part of the runtime src/spire_mapper.py code path, so risk is limited to CI/packaging, not production mapper logic. Recommend CI passing is sufficient signoff here.
  • ✅ .claude/CLAUDE.md unchanged by this PR — no concern.

Testing

  • ✅ N/A — no new functions/endpoints; this is a version bump in pyproject.toml only. No test changes needed.

Documentation

  • ✅ README/API docs — N/A, no user-facing change.
  • ✅ CHANGELOG.md — not updated, but consistent with prior dependency-bump commits in this repo's history (e.g. #117, #116, #114), none of which touched CHANGELOG.md either. Not a regression introduced by this PR.
  • ✅ No inline comments needed for a version string change.

Security

  • ✅ No hardcoded credentials.
  • ✅ No input validation concerns (build-tool version pin only).
  • ✅ No error handling changes.
  • ✅ No sensitive data/logging changes.
  • ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Verdict: ✅ Approve. Low-risk, dev-dependency-only version bump consistent with repository conventions. No blocking issues.

Automated code review analyzing defects and coding standards

@docktermj
docktermj enabled auto-merge (squash) September 18, 2026 00:56
@docktermj
docktermj merged commit bba6744 into main Sep 18, 2026
11 checks passed
@docktermj
docktermj deleted the dependabot/pip/build-1.6.0 branch September 18, 2026 01:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@docktermj docktermj docktermj approved these changes

Assignees

@docktermj docktermj

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@docktermj