Skip to content

deps: bump hatchling from 1.31.0 to 1.32.0 - #433

Merged
cdeust merged 4 commits into
mainfrom
dependabot/pip/hatchling-1.32.0
Sep 2, 2026
Merged

deps: bump hatchling from 1.31.0 to 1.32.0#433
cdeust merged 4 commits into
mainfrom
dependabot/pip/hatchling-1.32.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps hatchling from 1.31.0 to 1.32.0.

Release notes

Sourced from hatchling's releases.

Hatchling v1.32.0

Changed:

  • Bump default core metadata version to 2.5

  • Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

  • The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

  • Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.

  • Reject project.readme paths that are absolute or resolve outside of the project directory.

Commits
  • 558061c Fix ci (#2377)
  • bc6d1bc release Hatch v1.18.0 (#2376)
  • 8429e5d release Hatchling v1.32.0 (#2375)
  • 413b3a8 Prepare for release (#2374)
  • 4ccc9ea Bug Fix - fix CTRL-C behavior to correctly handle signals (#2369)
  • a885803 Add sources to enable other types of local dependencies (#2313)
  • ab3e000 Add --all flag to hatch build for building all workspace members (#2352)
  • bb90277 fix: Allow the ; private annotation in import-names/import-namespaces p...
  • 3a9d853 fix: prevent backward relative paths in readme (#2354)
  • c4dc4f8 test: Fix test expectations for metadata generated by flit-core (#2365)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 15, 2026
@dependabot
deps: bump hatchling from 1.31.0 to 1.32.0
c95ac90 
Bumps [hatchling](https://github.com/pypa/hatch) from 1.31.0 to 1.32.0.
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.31.0...hatchling-v1.32.0)

---
updated-dependencies:
- dependency-name: hatchling
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/hatchling-1.32.0 branch from f7f5a2e to c95ac90 Compare August 25, 2026 19:27
cdeust and others added 3 commits September 2, 2026 20:56
@cdeust
merge: origin/main into dependabot/pip/hatchling-1.32.0
b8f4242
@cdeust @claude
chore(deps): regenerate lock-derived pins for hatchling 1.32.0
0cea0c6 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@cdeust @claude
chore(deps): resync uv.lock and hash-pinned exports for hatchling 1.32.0
953cf5f 
The previous regeneration commit (0cea0c6) re-exported requirements/
packaging.txt from a uv.lock that still resolved hatchling 1.31.0, which
reverted Dependabot's bump and left this PR a no-op against main.

Apply the resync .github/dependabot.yml prescribes: `uv lock
--upgrade-package hatchling==1.32.0` with uv 0.11.3 (the version ci.yml
pins), then scripts/generate_pip_constraints.py. hatchling 1.32.0 adds
tomlkit 0.15.1 as a transitive dependency, which the export now carries.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@cdeust cdeust mentioned this pull request Sep 2, 2026
Merged
@cdeust

cdeust commented Sep 2, 2026

Copy link
Copy Markdown
Owner

ZETETIC-REVIEW: APPROVE

Verdict issu d'une revue en contexte frais (code-reviewer, 2026-09-02T19:50Z) sur le commit de tête exact 953cf5f1.

Vérifications

  • Diff net contre origin/main (merge-base a093c7ef) limité à uv.lock, pyproject.toml et requirements/ : exactement le bump hatchling 1.31.0 → 1.32.0 plus la transitive forcée par le résolveur (tomlkit 0.15.1, nouvelle dépendance de hatchling 1.32). Le round 1 de cette PR avait ré-exporté les requirements/*.txt depuis un uv.lock périmé (bump silencieusement annulé, diff net vide) ; le round 2 (953cf5f1) refait la resynchronisation prescrite par .github/dependabot.yml (uv lock --upgrade-package avec uv 0.11.3, puis scripts/generate_pip_constraints.py) et le bump est cette fois bien présent dans le diff net.
  • Diff hors fichiers de verrouillage = uniquement les commits Dependabot actions/docker déjà fusionnés sur main.
  • uv lock --check (uv 0.11.3, version épinglée dans ci.yml) : OK.
  • python scripts/generate_pip_constraints.py --check : OK.
  • Tests des scripts de contraintes (tests_py/scripts/test_generate_pip_constraints.py, test_pip_constraint_sets.py, test_launcher_constraints_extras.py) : 74 passed.
  • CI GitHub sur 953cf5f1 : 23 pass, 0 fail, 2 skipped (fuzz scheduled + tag) — dont Build Package (hatchling est le backend de build) et le smoke Docker, Lint, Type Check, Craftsmanship Gate, matrice Python 3.10–3.13, SQLite, Windows.

Aucune violation de règle introduite ; aucune régression. Verdict : APPROVE.

@cdeust
cdeust merged commit 98637e9 into main Sep 2, 2026
25 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/hatchling-1.32.0 branch September 2, 2026 20:14
This was referenced Sep 2, 2026
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cdeust