build(deps): bump setuptools from 49.6.0 to 65.5.1
Metadata
Current evaluation
Dependabot's setuptools update was abandoned. Maintainers closed the PR because the freeze-requirements.sh script would overwrite it, opting to wait for a script update instead.
Suggested action: —
No scores available.
Issue body
Bumps [setuptools](https://github.com/pypa/setuptools) from 49.6.0 to 65.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/setuptools/releases">setuptools's releases</a>.</em></p>
<blockquote>
<h2>v65.5.1</h2>
<p>No release notes provided.</p>
<h2>v65.5.0</h2>
<p>No release notes provided.</p>
<h2>v65.4.1</h2>
<p>No release notes provided.</p>
<h2>v65.4.0</h2>
<p>No release notes provided.</p>
<h2>v65.3.0</h2>
<p>No release notes provided.</p>
<h2>v65.2.0</h2>
<p>No release notes provided.</p>
<h2>v65.1.1</h2>
<p>No release notes provided.</p>
<h2>v65.1.0</h2>
<p>No release notes provided.</p>
<h2>v65.0.2</h2>
<p>No release notes provided.</p>
<h2>v65.0.1</h2>
<p>No release notes provided.</p>
<h2>v65.0.0</h2>
<p>No release notes provided.</p>
<h2>v64.0.3</h2>
<p>No release notes provided.</p>
<h2>v64.0.2</h2>
<p>No release notes provided.</p>
<h2>v64.0.1</h2>
<p>No release notes provided.</p>
<h2>v64.0.0</h2>
<p>No release notes provided.</p>
<h2>v63.4.3</h2>
<p>No release notes provided.</p>
<h2>v63.4.2</h2>
<p>No release notes provided.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/CHANGES.rst">setuptools's changelog</a>.</em></p>
<blockquote>
<h2>v65.5.1</h2>
<p>Misc
^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3638">#3638</a>: Drop a test dependency on the <code>mock</code> package, always use :external+python:py:mod:<code>unittest.mock</code> -- by :user:<code>hroncok</code></li>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3659">#3659</a>: Fixed REDoS vector in package_index.</li>
</ul>
<h2>v65.5.0</h2>
<p>Changes
^^^^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3624">#3624</a>: Fixed editable install for multi-module/no-package <code>src</code>-layout projects.</li>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3626">#3626</a>: Minor refactorings to support distutils using stdlib logging module.</li>
</ul>
<p>Documentation changes
^^^^^^^^^^^^^^^^^^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3419">#3419</a>: Updated the example version numbers to be compliant with PEP-440 on the "Specifying Your Project’s Version" page of the user guide.</li>
</ul>
<p>Misc
^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3569">#3569</a>: Improved information about conflicting entries in the current working directory
and editable install (in documentation and as an informational warning).</li>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3576">#3576</a>: Updated version of <code>validate_pyproject</code>.</li>
</ul>
<h2>v65.4.1</h2>
<p>Misc
^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3613">#3613</a>: Fixed encoding errors in <code>expand.StaticModule</code> when system default encoding doesn't match expectations for source files.</li>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3617">#3617</a>: Merge with pypa/distutils@6852b20 including fix for <a href="https://github-redirect.dependabot.com/pypa/distutils/issues/181">pypa/distutils#181</a>.</li>
</ul>
<h2>v65.4.0</h2>
<p>Changes
^^^^^^^</p>
<ul>
<li><a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3609">#3609</a>: Merge with pypa/distutils@d82d926 including support for DIST_EXTRA_CONFIG in <a href="https://github-redirect.dependabot.com/pypa/distutils/issues/177">pypa/distutils#177</a>.</li>
</ul>
<p>v65.3.0</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/setuptools/commit/a462cb5edb324dcc56f903524b742305e4087014"><code>a462cb5</code></a> Bump version: 65.5.0 → 65.5.1</li>
<li><a href="https://github.com/pypa/setuptools/commit/de35d8be997c9f8508b425e33a1b6e52431091fa"><code>de35d8b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3656">#3656</a> from bmorris3/typos</li>
<li><a href="https://github.com/pypa/setuptools/commit/58e23de0d4c2ce0f2502d072bb9a2ed1e2ab0ba6"><code>58e23de</code></a> Update changelog. Ref <a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3659">#3659</a>.</li>
<li><a href="https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be"><code>43a9c9b</code></a> Limit the amount of whitespace to search/backtrack. Fixes <a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3659">#3659</a>.</li>
<li><a href="https://github.com/pypa/setuptools/commit/579134321d4d9397c886a5cb50cc26d0e3fa4279"><code>5791343</code></a> Add test capturing failed expectation. Ref <a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3659">#3659</a>.</li>
<li><a href="https://github.com/pypa/setuptools/commit/1f97905bc40310ca454ff1ea3884f233b7dcc88c"><code>1f97905</code></a> ⚫ Fade to black.</li>
<li><a href="https://github.com/pypa/setuptools/commit/6254567c6ae323bb8ce19a6930ae3cc5f7fb25cc"><code>6254567</code></a> Remove workaround for emacs.</li>
<li><a href="https://github.com/pypa/setuptools/commit/729b180e926634930c21ccce5558780d42707763"><code>729b180</code></a> ⚫ Fade to black.</li>
<li><a href="https://github.com/pypa/setuptools/commit/c068081a7234a0c5c322a9312654e7d0f4aaa8d1"><code>c068081</code></a> Typo corrections</li>
<li><a href="https://github.com/pypa/setuptools/commit/f777a40ed9abf529906c2939f80a184a5ed035fa"><code>f777a40</code></a> Suppress deprecation warning in --rsyncdir. Workaround for <a href="https://github-redirect.dependabot.com/pypa/setuptools/issues/3655">#3655</a>.</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/setuptools/compare/v49.6.0...v65.5.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/snapcore/snapcraft/network/alerts).
</details>
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Dependabot's setuptools update was abandoned. Maintainers closed the PR because the freeze-requirements.sh script would overwrite it, opting to wait for a script update instead. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Dependabot's setuptools update was closed without merging. A maintainer noted that the freeze-requirements.sh script will overwrite the dependency, making the PR redundant until the script is updated. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Bumping setuptools was closed and abandoned. Merging was deferred because freeze-requirements.sh will overwrite the change, pending a script update. Dependabot stopped tracking this version. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4919 build(deps): bump setuptools from 65.5.1 to 70.0.0 in /docs | snapcraft | closed | Closed without merging. The Dependabot update for setuptools in /docs was abandoned after exceeding the 30-day auto-rebase limit with no reviews or CI checks. Dependabot subsequently stopped tracking this release. | |
| #4775 build(deps): bump setuptools from 59.6.0 to 65.5.1 in /docs | snapcraft | merged | Merged Dependabot update bumping setuptools from 59.6.0 to 65.5.1 in the docs directory. Approved by two reviewers, passed CI checks, and applied a single dependency file change. | |
| #2294 build(deps-dev): bump setuptools from 76.0.0 to 78.1.1 | charmcraft | closed | Dependabot setuptools update from 76.0.0 to 78.1.1 was closed as superseded. The package is already up to date, making the change unnecessary. | |
| #4920 build(deps): update dependency setuptools to v70 [security] (hotfix/8.3) - autoclosed | snapcraft | closed | Closed without merging. Renovate proposed updating setuptools to v70.0.0 to fix CVE-2024-6345. The branch was manually modified, causing the bot to skip autoclosing. The update was ultimately abandoned. | |
| #235 build(deps): update dependency setuptools to v75.6.0 | craft-store | merged | Merged automated dependency update upgrading setuptools from v75.2.0 to v75.6.0. The change passed CI checks, received two approvals, and was successfully integrated with a single line modification. | |
| #2291 build(deps): update dependency setuptools to v78 [security] (main) - autoclosed | charmcraft | closed | Renovate bot PR updating setuptools to v78.1.1 to patch CVE-2025-47273 was autoclosed and abandoned. The security update was not merged. | |
| #298 build(deps): update dependency setuptools to v82 (main) - autoclosed | imagecraft | closed | The setuptools v82 dependency update was autoclosed without merging. A maintainer noted the requirement could be loosened based on related changes, making the strict update unnecessary. The PR was abandoned. | |
| #225 build(deps): update dependency setuptools to v75 | craft-store | merged | Merged automated dependency update upgrading setuptools from v70.3.0 to v75.1.0. Approved by two reviewers, passed CI checks, and merged into the repository. | |
| #1098 build(deps): update dependency setuptools to v78 [security] (hotfix/2.7) - autoclosed | craft-parts | closed | Security update for setuptools to v78.1.1 addressing CVE-2025-47273 was autoclosed without merging. CI checks failed on Ubuntu 20.04 and linters. The bot-generated PR was abandoned due to inactivity and configuration constraints. | |
| #535 build(deps): update dependency setuptools to v75.2.0 | craft-application | merged | Merged an automated dependency update upgrading setuptools from v75.1.0 to v75.2.0. Approved by two reviewers and passing all CI checks, the change was successfully merged into the main branch. |