pygame-web · pmp-p · Aug 4, 2024 · Aug 4, 2024 · Aug 4, 2024 · Aug 4, 2024
diff --git a/.cirrus.yml b/.cirrus.yml
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -14,43 +14,38 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest]
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "pypy-3.9", "pypy-3.10"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14", "pypy-3.11"]
         include:
         - os: macos-latest
-          python-version: "3.8"
+          python-version: "3.9"
         - os: windows-latest
-          python-version: "3.8"
+          python-version: "3.9"
         - os: macos-latest
-          python-version: "3.12"
+          python-version: "3.14"
         - os: windows-latest
-          python-version: "3.12"
+          python-version: "3.14"
         - os: macos-latest
-          python-version: "pypy-3.10"
+          python-version: "pypy-3.11"
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
         cache: pip
         cache-dependency-path: pyproject.toml
-    - name: Install the project
-      run: pip install --no-binary=wheel .
-    - name: Install test dependencies
-      run: pip install .[test] coverage[toml]
-    - name: Include SDist check dependencies
-      if: matrix.python-version == '3.12'
-      run: pip install build flit
+    - name: Install the project and its test dependencies
+      run: pip install --group test coverage[toml] .
     - name: Test with pytest
       run: coverage run -m pytest -v
       env:
         PYTHONWARNDEFAULTENCODING: 1
     - name: Generate coverage report
       run: coverage xml
     - name: Send coverage data to Codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       with:
         file: coverage.xml
       env:

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,8 +1,6 @@
-exclude: ^src/wheel/vendored
-
 repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v4.6.0
+  rev: v6.0.0
   hooks:
   - id: check-added-large-files
   - id: check-case-conflict
@@ -14,18 +12,18 @@ repos:
   - id: end-of-file-fixer
   - id: mixed-line-ending
     args: ["--fix=lf"]
-  - id: requirements-txt-fixer
   - id: trailing-whitespace
+    exclude: "tests/commands/test_convert.py"
 
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.4.3
+  rev: v0.15.20
   hooks:
-    - id: ruff
+    - id: ruff-check
       args: [--fix, --show-fixes]
     - id: ruff-format
 
 - repo: https://github.com/codespell-project/codespell
-  rev: v2.2.6
+  rev: v2.4.2
   hooks:
   - id: codespell
 
@@ -36,5 +34,13 @@ repos:
   - id: rst-directive-colons
   - id: rst-inline-touching-normal
 
+- repo: https://github.com/henryiii/check-sdist
+  rev: v1.5.0
+  hooks:
+  - id: check-sdist
+    args: [--inject-junk]
+    additional_dependencies:
+    - flit-core
+
 ci:
   autoupdate_schedule: quarterly
diff --git a/.readthedocs.yml b/.readthedocs.yml
@@ -10,7 +10,7 @@ sphinx:
 build:
   os: ubuntu-22.04
   tools:
-    python: "3.8"
+    python: "3.9"
 
 python:
    install:

diff --git a/README.rst b/README.rst
@@ -1,19 +1,24 @@
 wheel
 =====
 
-This library is the reference implementation of the Python wheel packaging
-standard, as defined in `PEP 427`_.
+This is a command line tool for manipulating Python wheel files, as defined in
+`PEP 427`_. It contains the following functionality:
 
-It has two different roles:
+* Convert ``.egg`` archives into ``.whl``
+* Unpack wheel archives
+* Repack wheel archives
+* Add or remove tags in existing wheel archives
 
-#. A setuptools_ extension for building wheels that provides the
-   ``bdist_wheel`` setuptools command
-#. A command line tool for working with wheel files
+.. _PEP 427: https://peps.python.org/pep-0427/
 
-It should be noted that wheel is **not** intended to be used as a library, and
-as such there is no stable, public API.
+Historical note
+---------------
+
+This project used to contain the implementation of the setuptools_ ``bdist_wheel``
+command, but as of setuptools v70.1, it no longer needs ``wheel`` installed for that to
+work. Thus, you should install this **only** if you intend to use the ``wheel`` command
+line tool!
 
-.. _PEP 427: https://www.python.org/dev/peps/pep-0427/
 .. _setuptools: https://pypi.org/project/setuptools/
 
 Documentation

diff --git a/docs/development.rst b/docs/development.rst
@@ -8,7 +8,7 @@ Pull Requests
 - Provide a good description of what you're doing and why.
 - Provide tests that cover your changes and try to run the tests locally first.
 
-**Example**. Assuming you set up GitHub account, forked wheel repository from
+**Example**. Assuming you set up a GitHub account, forked the wheel repository from
 https://github.com/pypa/wheel to your own page via web interface, and your
 fork is located at https://github.com/yourname/wheel
 
@@ -23,7 +23,7 @@ fork is located at https://github.com/yourname/wheel
   $ git commit
 
 You may reference relevant issues in commit messages (like #1259) to
-make GitHub link issues and commits together, and with phrase like
+make GitHub link issues and commits together, and with a phrase like
 "fixes #1259" you can even close relevant issues automatically. Now
 push the changes to your fork::
 
@@ -54,7 +54,7 @@ To run the tests via tox against all matching interpreters::
 
 To run the tests via tox against a specific environment::
 
-  $ tox -e py35
+  $ tox -e py39
 
 Alternatively, you can run the tests via pytest using your default interpreter::
 
@@ -92,5 +92,5 @@ To make a new release:
 #. Create a new git tag matching the version exactly
 #. Push the new tag to GitHub
 
-Pushing a new tag to GitHub will trigger the publish workflow which package the
+Pushing a new tag to GitHub will trigger the publish workflow which will package the
 project and publish the resulting artifacts to PyPI.
diff --git a/docs/index.rst b/docs/index.rst
@@ -3,20 +3,11 @@ wheel
 
 `GitHub <https://github.com/pypa/wheel>`_ |
 `PyPI <https://pypi.org/pypi/wheel/>`_ |
-User IRC: #pypa |
-Dev IRC: #pypa-dev
+`PyPA Discord <https://discord.gg/python>`_
 
-This library is the reference implementation of the Python wheel packaging
-standard, as defined in `PEP 427`_.
-
-It has two different roles:
-
-#. A setuptools_ extension for building wheels that provides the
-   ``bdist_wheel`` setuptools command
-#. A command line tool for working with wheel files
-
-.. _PEP 427: https://www.python.org/dev/peps/pep-0427/
-.. _setuptools: https://pypi.org/project/setuptools/
+.. include:: ../README.rst
+  :start-line: 3
+  :end-before: Documentation
 
 .. toctree::
    :maxdepth: 2

diff --git a/docs/installing.rst b/docs/installing.rst
@@ -15,10 +15,10 @@ can typically find the wheel package under one of the following package names:
 * python3-wheel
 
 .. _pip: https://pip.pypa.io/en/stable/
-.. _installation instructions: https://pip.pypa.io/en/stable/installing/
+.. _installation instructions: https://pip.pypa.io/en/stable/installation/
 
 Python and OS Compatibility
 ---------------------------
 
 wheel should work on any Python implementation and operating system and is
-compatible with Python version 3.7 and upwards.
+compatible with Python version 3.9 and upwards.
diff --git a/docs/manpages/wheel.rst b/docs/manpages/wheel.rst
@@ -26,6 +26,9 @@ Commands
   ``convert``
     Convert egg or wininst to wheel
 
+  ``info``
+    Show information about a wheel file
+
   ``tags``
     Change the tags on a wheel file
 
@@ -43,4 +46,4 @@ Options
   -h, --help            show this help message and exit
 
 
-.. _`PEP 427`: https://www.python.org/dev/peps/pep-0427/
+.. _`PEP 427`: https://peps.python.org/pep-0427/
diff --git a/docs/news.rst b/docs/news.rst
@@ -3,7 +3,75 @@ Release Notes
 
 **UNRELEASED**
 
-- Canonicalize requirements in METADATA file (PR by Wim Jeantine-Glenn)
+- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or remove a
+  PEP 440 local version identifier from a wheel
+  (`#570 <https://github.com/pypa/wheel/issues/570>`_)
+- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata versions
+  (`#643 <https://github.com/pypa/wheel/issues/643>`_)
+
+**0.47.0 (2026-04-22)**
+
+- Added the ``wheel info`` subcommand to display metadata about wheel files without
+  unpacking them (`#639 <https://github.com/pypa/wheel/issues/639>`_)
+- Fixed ``WheelFile`` raising ``Missing RECORD file`` when the wheel filename contains
+  uppercase characters (e.g. ``Django-3.2.5.whl``) but the ``.dist-info`` directory
+  inside uses normalized lowercase naming
+  (`#411 <https://github.com/pypa/wheel/issues/411>`_)
+
+**0.46.3 (2026-01-22)**
+
+- Fixed ``ImportError: cannot import name '_setuptools_logging' from 'wheel'`` when
+  installed alongside an old version of setuptools and running the ``bdist_wheel``
+  command (`#676 <https://github.com/pypa/wheel/issues/676>`_)
+
+**0.46.2 (2026-01-22)**
+
+- Restored the ``bdist_wheel`` command for compatibility with ``setuptools`` older than
+  v70.1
+- Importing ``wheel.bdist_wheel`` now emits a ``FutureWarning`` instead of a
+  ``DeprecationWarning``
+- Fixed ``wheel unpack`` potentially altering the permissions of files outside of the
+  destination tree with maliciously crafted wheels (CVE-2026-24049)
+
+**0.46.1 (2025-04-08)**
+
+- Temporarily restored the ``wheel.macosx_libfile`` module
+  (`#659 <https://github.com/pypa/wheel/issues/659>`_)
+
+**0.46.0 (2025-04-03)**
+
+- Dropped support for Python 3.8
+- Removed the ``bdist_wheel`` setuptools command implementation and entry point.
+  The ``wheel.bdist_wheel`` module is now just an alias to
+  ``setuptools.command.bdist_wheel``, emitting a deprecation warning on import.
+- Removed vendored ``packaging`` in favor of a run-time dependency on it
+- Made the ``wheel.metadata`` module private (with a deprecation warning if it's
+  imported
+- Made the ``wheel.cli`` package private (no deprecation warning)
+- Fixed an exception when calling the ``convert`` command with an empty description
+  field
+
+**0.45.1 (2024-11-23)**
+
+- Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in
+  the file name
+
+**0.45.0 (2024-11-08)**
+
+- Refactored the ``convert`` command to not need setuptools to be installed
+- Don't configure setuptools logging unless running ``bdist_wheel``
+- Added a redirection from ``wheel.bdist_wheel.bdist_wheel`` to
+  ``setuptools.command.bdist_wheel.bdist_wheel`` to improve compatibility with
+  ``setuptools``' latest fixes.
+
+  Projects are still advised to migrate away from the deprecated module and import
+  the ``setuptools``' implementation explicitly. (PR by @abravalheri)
+
+**0.44.0 (2024-08-04)**
+
+- Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
+- Deprecated the ``bdist_wheel`` module, as the code was migrated to ``setuptools``
+  itself
 
 **0.43.0 (2024-03-11)**
 
@@ -76,7 +144,7 @@ Release Notes
 **0.38.1 (2022-11-04)**
 
 - Removed install dependency on setuptools
-- The future-proof fix in 0.36.0 for converting PyPy's SOABI into a abi tag was
+- The future-proof fix in 0.36.0 for converting PyPy's SOABI into an ABI tag was
   faulty. Fixed so that future changes in the SOABI will not change the tag.
 
 **0.38.0 (2022-10-21)**
@@ -124,7 +192,7 @@ Release Notes
 - Updated vendored ``packaging`` library to v20.7
 - Switched to always using LF as line separator when generating ``WHEEL`` files
   (on Windows, CRLF was being used instead)
-- The ABI tag is taken from  the sysconfig SOABI value. On PyPy the SOABI value
+- The ABI tag is taken from the sysconfig SOABI value. On PyPy the SOABI value
   is ``pypy37-pp73`` which is not compliant with PEP 3149, as it should have
   both the API tag and the platform tag. This change future-proofs any change
   in PyPy's SOABI tag to make sure only the ABI tag is used by wheel.

diff --git a/docs/quickstart.rst b/docs/quickstart.rst
@@ -14,7 +14,7 @@ section to your ``setup.cfg``::
     [bdist_wheel]
     universal = 1
 
-To convert an ``.egg`` or file to a wheel::
+To convert an ``.egg`` file or directory to a wheel::
 
     wheel convert youreggfile.egg
 

diff --git a/docs/reference/index.rst b/docs/reference/index.rst
@@ -5,6 +5,7 @@ Reference Guide
    :maxdepth: 2
 
    wheel_convert
-   wheel_unpack
+   wheel_info
    wheel_pack
    wheel_tags
+   wheel_unpack
diff --git a/docs/reference/wheel_convert.rst b/docs/reference/wheel_convert.rst
@@ -17,8 +17,8 @@ installers (``.exe``; made with ``bdist_wininst``) into wheels.
 
 Egg names must match the standard format:
 
-* ``<project>-<version>-pyX.Y`` for pure Python wheels
-* ``<project>-<version>-pyX.Y-<arch>`` for binary wheels
+* ``<project>-<version>-pyX.Y`` for pure Python eggs
+* ``<project>-<version>-pyX.Y-<arch>`` for binary eggs
 
 
 Options