Skip to content

Bump setuptools from 81.0.0 to 83.0.0 in the uv group across 1 directory - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-fec1d00dd4
Open

Bump setuptools from 81.0.0 to 83.0.0 in the uv group across 1 directory#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-fec1d00dd4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown

Bumps the uv group with 1 update in the / directory: setuptools.

Updates setuptools from 81.0.0 to 83.0.0

Changelog

Sourced from setuptools's changelog.

v83.0.0

Features

  • Require Python 3.10 or later.

Bugfixes

  • MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. A pattern authored in one form (e.g. NFC, as typically saved by editors) now matches a file whose name is stored on disk in another (e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude, global-exclude, recursive-exclude, or prune rule could silently fail to drop a non-ASCII-named file from the source distribution, publishing it despite the exclusion -- see GHSA-h35f-9h28-mq5c.

Deprecations and Removals

  • pypa/distutils#334

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

... (truncated)

Commits
  • 6519f72 Bump version: 82.0.1 → 83.0.0
  • d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
  • a2df31e Capture removal of dry_run parameter in changelog.
  • 00144dc Moved newsfragment to the release where it occurred.
  • a4a5a2b Add news fragment.
  • 77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
  • 3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
  • bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
  • a2bc3ac Fix broken intersphinx reference to build's installation docs
  • 2d6a739 Use stacked parametrize decorators instead of itertools.product
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 15, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit e20e93f. Configure here.

Comment thread pyproject.toml Outdated
# setuptools<82 because featuretools -> woodwork imports pkg_resources at import
# time, and setuptools 82 removed it (81 still ships it).
rdblearn = ["tabpfn>=8", "fastdfs>=0.2.1", "setuptools<82"]
rdblearn = ["tabpfn>=8", "fastdfs>=0.2.1", "setuptools<84"]

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Broken setuptools pin for pkg_resources

High Severity

Raising the setuptools upper bound from &lt;82 to &lt;84 (and locking 83.0.0) undoes the intentional pin that keeps pkg_resources available. fastdfsfeaturetoolswoodwork still imports pkg_resources at import time, and setuptools removed that module in 82 (still gone in 83). Installing the rdblearn, tabpfn-rel-api, or dev extras will fail when the DFS stack is imported.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit e20e93f. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-fec1d00dd4 branch 3 times, most recently from fcbd318 to 8e669e3 Compare August 20, 2026 16:14
Bumps the uv group with 1 update in the / directory: [setuptools](https://github.com/pypa/setuptools).


Updates `setuptools` from 81.0.0 to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v81.0.0...v83.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-fec1d00dd4 branch from 8e669e3 to d1f82cb Compare August 21, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants