diff --git a/CHANGELOG.md b/CHANGELOG.md index 553185739..57c52d7f2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,13 @@ ## [Unreleased] +## [v344] - 2026-05-07 + +- Updated pip from 26.0.1 to 26.1.1. ([#2089](https://github.com/heroku/heroku-buildpack-python/pull/2089)) +- Updated Pipenv from 2026.5.2 to 2026.6.1. ([#2082](https://github.com/heroku/heroku-buildpack-python/pull/2082)) +- Updated Poetry from 2.3.4 to 2.4.0. ([#2088](https://github.com/heroku/heroku-buildpack-python/pull/2088)) +- Updated uv from 0.11.6 to 0.11.11. ([#2090](https://github.com/heroku/heroku-buildpack-python/pull/2090)) + ## [v343] - 2026-04-13 - Updated Pipenv from 2026.5.1 to 2026.5.2. ([#2080](https://github.com/heroku/heroku-buildpack-python/pull/2080)) @@ -1522,7 +1529,8 @@ Default Python is now latest 2.7.10. Updated pip and Distribute. - Setuptools updated to v16.0 - pip updated to v7.0.1 -[unreleased]: https://github.com/heroku/heroku-buildpack-python/compare/v343...main +[unreleased]: https://github.com/heroku/heroku-buildpack-python/compare/v344...main +[v344]: https://github.com/heroku/heroku-buildpack-python/compare/v343...v344 [v343]: https://github.com/heroku/heroku-buildpack-python/compare/v342...v343 [v342]: https://github.com/heroku/heroku-buildpack-python/compare/v341...v342 [v341]: https://github.com/heroku/heroku-buildpack-python/compare/v340...v341 diff --git a/Gemfile.lock b/Gemfile.lock index 13b3f38a5..b355c0362 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -20,13 +20,13 @@ GEM rrrretry (~> 1) thor (~> 1) threaded (~> 0) - json (2.19.3) + json (2.19.5) language_server-protocol (3.17.0.5) lint_roller (1.1.0) logger (1.7.0) moneta (1.0.0) multi_json (1.19.1) - parallel (1.27.0) + parallel (2.1.0) parallel_split_test (0.10.0) parallel (>= 0.5.13) rspec-core (>= 3.9.0) @@ -41,7 +41,7 @@ GEM racc (1.8.1) rainbow (3.1.1) rate_throttle_client (0.1.2) - regexp_parser (2.11.3) + regexp_parser (2.12.0) rrrretry (1.0.0) rspec-core (3.13.6) rspec-support (~> 3.13.0) @@ -51,11 +51,11 @@ GEM rspec-retry (0.6.2) rspec-core (> 3.3) rspec-support (3.13.7) - rubocop (1.86.0) + rubocop (1.86.1) json (~> 2.3) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.1.0) - parallel (~> 1.10) + parallel (>= 1.10) parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) regexp_parser (>= 2.9.3, < 3.0) @@ -98,13 +98,13 @@ CHECKSUMS excon (1.4.0) sha256=5d2bc9d2c79511a562e7fcac77cc7a40acd9cebcc55b80e537975ad8187f2924 heroics (0.1.3) sha256=31d792e8706ecc6f78299f52d0b0f8ab55489a13b5f4f76c3050b07912563562 heroku_hatchet (8.0.6) sha256=886a7d7d686859db9fac19df1194a35c5349285956ca4d134054c5c376accea3 - json (2.19.3) sha256=289b0bb53052a1fa8c34ab33cc750b659ba14a5c45f3fcf4b18762dc67c78646 + json (2.19.5) sha256=218a18553e4801d579ca7e0f5bc72bafd776d7397238a1fb4e74db5b0a812c59 language_server-protocol (3.17.0.5) sha256=fd1e39a51a28bf3eec959379985a72e296e9f9acfce46f6a79d31ca8760803cc lint_roller (1.1.0) sha256=2c0c845b632a7d172cb849cc90c1bce937a28c5c8ccccb50dfd46a485003cc87 logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203 moneta (1.0.0) sha256=2224e5a68156e8eceb525fb0582c8c4e0f29f67cae86507cdcfb406abbb1fc5d multi_json (1.19.1) sha256=7aefeff8f2c854bf739931a238e4aea64592845e0c0395c8a7d2eea7fdd631b7 - parallel (1.27.0) sha256=4ac151e1806b755fb4e2dc2332cbf0e54f2e24ba821ff2d3dcf86bf6dc4ae130 + parallel (2.1.0) sha256=b35258865c2e31134c5ecb708beaaf6772adf9d5efae28e93e99260877b09356 parallel_split_test (0.10.0) sha256=4abd6bedc6a1b169ecb93a1bf982fa7fbd437b66c360594d56d107c25f53b05f parser (3.3.11.1) sha256=d17ace7aabe3e72c3cc94043714be27cc6f852f104d81aa284c2281aecc65d54 platform-api (3.9.0) sha256=be3b919955c52649fd931a9f62d571bd6f06613de630970dc7255fc95eb7d962 @@ -112,13 +112,13 @@ CHECKSUMS racc (1.8.1) sha256=4a7f6929691dbec8b5209a0b373bc2614882b55fc5d2e447a21aaa691303d62f rainbow (3.1.1) sha256=039491aa3a89f42efa1d6dec2fc4e62ede96eb6acd95e52f1ad581182b79bc6a rate_throttle_client (0.1.2) sha256=f9de968b892fea9272154f6182b4f5cfb74292585e66763fb8a8510181ec83ee - regexp_parser (2.11.3) sha256=ca13f381a173b7a93450e53459075c9b76a10433caadcb2f1180f2c741fc55a4 + regexp_parser (2.12.0) sha256=35a916a1d63190ab5c9009457136ae5f3c0c7512d60291d0d1378ba18ce08ebb rrrretry (1.0.0) sha256=3c60784501701a49d8ad499af7e76dbddf9a8be916beffe885bd0f443ad1c749 rspec-core (3.13.6) sha256=a8823c6411667b60a8bca135364351dda34cd55e44ff94c4be4633b37d828b2d rspec-expectations (3.13.5) sha256=33a4d3a1d95060aea4c94e9f237030a8f9eae5615e9bd85718fe3a09e4b58836 rspec-retry (0.6.2) sha256=6101ba23a38809811ae3484acde4ab481c54d846ac66d5037ccb40131a60d858 rspec-support (3.13.7) sha256=0640e5570872aafefd79867901deeeeb40b0c9875a36b983d85f54fb7381c47c - rubocop (1.86.0) sha256=4ff1186fe16ebe9baff5e7aad66bb0ad4cabf5cdcd419f773146dbba2565d186 + rubocop (1.86.1) sha256=44415f3f01d01a21e01132248d2fd0867572475b566ca188a0a42133a08d4531 rubocop-ast (1.49.1) sha256=4412f3ee70f6fe4546cc489548e0f6fcf76cafcfa80fa03af67098ffed755035 rubocop-rspec (3.9.0) sha256=8fa70a3619408237d789aeecfb9beef40576acc855173e60939d63332fdb55e2 ruby-progressbar (1.13.0) sha256=80fc9c47a9b640d6834e0dc7b3c94c9df37f08cb072b7761e4a71e22cff29b33 diff --git a/builds/Dockerfile b/builds/Dockerfile index 44bfb88c8..5a17355ce 100644 --- a/builds/Dockerfile +++ b/builds/Dockerfile @@ -1,5 +1,5 @@ ARG STACK_VERSION="24" -FROM ghcr.io/sigstore/cosign/cosign:v3.0.5@sha256:be924970ba7438c22e18067dec5637946d6566eac711f5bedd1584e7137008fb AS cosign +FROM ghcr.io/sigstore/cosign/cosign:v3.0.6@sha256:de9c65609e6bde17e6b48de485ee788407c9502fa08b8f4459f595b21f56cd00 AS cosign FROM heroku/heroku:${STACK_VERSION}-build ARG STACK_VERSION diff --git a/lib/pip.sh b/lib/pip.sh index 0d4bcadc2..5f054b09e 100644 --- a/lib/pip.sh +++ b/lib/pip.sh @@ -21,7 +21,7 @@ function pip::install_pip() { local packages_display_text="pip ${PIP_VERSION}" # We only install setuptools on Python 3.12 and older, since: - # - pip now uses isolated build environments into which it installed setuptools and wheel + # - pip now uses isolated build environments into which it installs setuptools and wheel # if needed when installing packages from an sdist. # - Most of the Python ecosystem has stopped installing them for Python 3.12+ already. # See the Python CNB's removal for more details: https://github.com/heroku/buildpacks-python/pull/243 diff --git a/requirements/pip.txt b/requirements/pip.txt index c1dd99e28..074276481 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -1 +1 @@ -pip==26.0.1 +pip==26.1.1 diff --git a/requirements/pipenv.txt b/requirements/pipenv.txt index 269dce251..b61f78890 100644 --- a/requirements/pipenv.txt +++ b/requirements/pipenv.txt @@ -1 +1 @@ -pipenv==2026.5.2 +pipenv==2026.6.1 diff --git a/requirements/poetry.txt b/requirements/poetry.txt index eb883feb4..1d3276616 100644 --- a/requirements/poetry.txt +++ b/requirements/poetry.txt @@ -1 +1 @@ -poetry==2.3.4 +poetry==2.4.0 diff --git a/requirements/uv.txt b/requirements/uv.txt index 3dd4ad9bd..f5139606e 100644 --- a/requirements/uv.txt +++ b/requirements/uv.txt @@ -1 +1 @@ -uv==0.11.6 +uv==0.11.11