Merge pull request #13175 from sbidoul/release/25.0

Release/25.0
pypa · Jan 26, 2025 · 984c399 · 984c399
2 parents a008888 + f58b041
commit 984c399
Show file tree

Hide file tree

Showing 35 changed files with 73 additions and 42 deletions.
diff --git a/AUTHORS.txt b/AUTHORS.txt
@@ -125,6 +125,7 @@ burrows
 Bussonnier Matthias
 bwoodsend
 c22
+Caleb Brown
 Caleb Martinez
 Calvin Smith
 Carl Meyer
@@ -134,6 +135,7 @@ Carter Thayer
 Cass
 Chandrasekhar Atina
 Charlie Marsh
+charwick
 Chih-Hsuan Yen
 Chris Brinker
 Chris Hunt
@@ -403,18 +405,22 @@ Josh Cannon
 Josh Hansen
 Josh Schneier
 Joshua
+JoshuaPerdue
 Juan Luis Cano Rodríguez
 Juanjo Bazán
 Judah Rand
 Julian Berman
 Julian Gethmann
 Julien Demoor
+July Tikhonov
 Jussi Kukkonen
+Justin van Heek
 jwg4
 Jyrki Pulliainen
 Kai Chen
 Kai Mueller
 Kamal Bin Mustafa
+Karolina Surma
 kasium
 kaustav haldar
 keanemind
@@ -625,6 +631,7 @@ R. David Murray
 Rafael Caricio
 Ralf Schmitt
 Ran Benita
+Randy Döring
 Razzi Abuissa
 rdb
 Reece Dunham

diff --git a/NEWS.rst b/NEWS.rst
@@ -9,6 +9,71 @@
 
 .. towncrier release notes start
 
+25.0 (2025-01-26)
+=================
+
+Deprecations and Removals
+-------------------------
+
+- Deprecate the ``no-python-version-warning`` flag as it has long done nothing
+  since Python 2 support was removed in pip 21.0. (`#13154 <https://github.com/pypa/pip/issues/13154>`_)
+
+Features
+--------
+
+- Prefer to display :pep:`639` ``License-Expression`` in ``pip show`` if metadata version is at least 2.4. (`#13112 <https://github.com/pypa/pip/issues/13112>`_)
+- Support :pep:`639` ``License-Expression`` and ``License-File`` metadata fields in JSON
+  output. ``pip inspect`` and ``pip install --report`` now emit
+  ``license_expression`` and ``license_file`` fields in the ``metadata`` object,
+  if the corresponding fields are present in the installed ``METADATA`` file. (`#13134 <https://github.com/pypa/pip/issues/13134>`_)
+- Files in the network cache will inherit the read/write permissions of pip's cache
+  directory (in addition to the current user retaining read/write access). This
+  enables a single cache to be shared among multiple users. (`#11012 <https://github.com/pypa/pip/issues/11012>`_)
+- Return the size, along with the number, of files cleared on ``pip cache purge`` and ``pip cache remove`` (`#12176 <https://github.com/pypa/pip/issues/12176>`_)
+- Cache ``python-requires`` checks while filtering potential installation candidates. (`#13128 <https://github.com/pypa/pip/issues/13128>`_)
+- Optimize package collection by avoiding unnecessary URL parsing and other processing. (`#13132 <https://github.com/pypa/pip/issues/13132>`_)
+
+Bug Fixes
+---------
+
+- Reorder the encoding detection when decoding a requirements file, relying on
+  UTF-8 over the locale encoding by default, matching the documented behaviour.
+  (`#12771 <https://github.com/pypa/pip/issues/12771>`_)
+- The pip version self check is disabled on ``EXTERNALLY-MANAGED`` environments. (`#11820 <https://github.com/pypa/pip/issues/11820>`_)
+- Fix a security bug allowing a specially crafted wheel to execute code during
+  installation. (`#13079 <https://github.com/pypa/pip/issues/13079>`_)
+- The inclusion of ``packaging`` 24.2 changes how pre-release specifiers with ``<`` and ``>``
+  behave. Including a pre-release version with these specifiers now implies
+  accepting pre-releases (e.g., ``<2.0dev`` can include ``1.0rc1``). To avoid
+  implying pre-releases, avoid specifying them (e.g., use ``<2.0``).
+  The exception is ``!=``, which never implies pre-releases. (`#13163 <https://github.com/pypa/pip/issues/13163>`_)
+- The ``--cert`` and ``--client-cert`` command-line options are now respected while
+  installing build dependencies. Consequently, the private ``_PIP_STANDALONE_CERT``
+  environment variable is no longer used. (`#5502 <https://github.com/pypa/pip/issues/5502>`_)
+- The ``--proxy`` command-line option is now respected while installing build dependencies. (`#6018 <https://github.com/pypa/pip/issues/6018>`_)
+
+Vendored Libraries
+------------------
+
+- Upgrade CacheControl to 0.14.1
+- Upgrade idna to 3.10
+- Upgrade msgpack to 1.1.0
+- Upgrade packaging to 24.2
+- Upgrade platformdirs to 4.3.6
+- Upgrade pyproject-hooks to 1.2.0
+- Upgrade rich to 13.9.4
+- Upgrade tomli to 2.2.1
+
+Improved Documentation
+----------------------
+
+- Removed section about non-existing ``--force-keyring`` flag. (`#12455 <https://github.com/pypa/pip/issues/12455>`_)
+
+Process
+-------
+
+- Started releasing to PyPI from a GitHub Actions CI/CD workflow that implements trusted publishing and bundles :pep:`740` digital attestations.
+
 24.3.1 (2024-10-27)
 ===================
 

diff --git a/news/11012.feature.rst b/news/11012.feature.rst
diff --git a/news/11820.bugfix.rst b/news/11820.bugfix.rst
diff --git a/news/12176.feature.rst b/news/12176.feature.rst
diff --git a/news/12455.doc.rst b/news/12455.doc.rst
diff --git a/news/12551.trivial.rst b/news/12551.trivial.rst
diff --git a/news/12771.feature.rst b/news/12771.feature.rst
diff --git a/news/13031.trivial.rst b/news/13031.trivial.rst
diff --git a/news/13048.process.rst b/news/13048.process.rst
diff --git a/news/13072.trivial.rst b/news/13072.trivial.rst
diff --git a/news/13079.bugfix.rst b/news/13079.bugfix.rst
diff --git a/news/13112.feature.rst b/news/13112.feature.rst
diff --git a/news/13128.feature.rst b/news/13128.feature.rst
diff --git a/news/13132.feature.rst b/news/13132.feature.rst
diff --git a/news/13134.feature.rst b/news/13134.feature.rst
diff --git a/news/13148.trivial.rst b/news/13148.trivial.rst
diff --git a/news/13152.trivial.rst b/news/13152.trivial.rst
diff --git a/news/13154.removal.rst b/news/13154.removal.rst
diff --git a/news/13163.bugfix.rst b/news/13163.bugfix.rst
diff --git a/news/36c500b0-9c6e-49ca-bbdb-774ef0adbbfb.trivial.rst b/news/36c500b0-9c6e-49ca-bbdb-774ef0adbbfb.trivial.rst
diff --git a/news/5502.bugfix.rst b/news/5502.bugfix.rst
diff --git a/news/6018.bugfix.rst b/news/6018.bugfix.rst
diff --git a/news/CacheControl.vendor.rst b/news/CacheControl.vendor.rst
diff --git a/news/a6275be8-84ca-48bf-98dc-1ccb196e7f47.trivial.rst b/news/a6275be8-84ca-48bf-98dc-1ccb196e7f47.trivial.rst
diff --git a/news/ba0bd1bb-2dcc-43d0-83ff-c762e7e55bf9.trivial.rst b/news/ba0bd1bb-2dcc-43d0-83ff-c762e7e55bf9.trivial.rst
diff --git a/news/c33bb4df-d6ab-4d9b-8113-55c27a237dfd.trivial.rst b/news/c33bb4df-d6ab-4d9b-8113-55c27a237dfd.trivial.rst
diff --git a/news/idna.vendor.rst b/news/idna.vendor.rst
diff --git a/news/msgpack.vendor.rst b/news/msgpack.vendor.rst
diff --git a/news/packaging.vendor.rst b/news/packaging.vendor.rst
diff --git a/news/platformdirs.vendor.rst b/news/platformdirs.vendor.rst
diff --git a/news/pyproject-hooks.vendor.rst b/news/pyproject-hooks.vendor.rst
diff --git a/news/rich.vendor.rst b/news/rich.vendor.rst
diff --git a/news/tomli.vendor.rst b/news/tomli.vendor.rst
diff --git a/src/pip/__init__.py b/src/pip/__init__.py
@@ -1,6 +1,6 @@
 from typing import List, Optional
 
-__version__ = "25.0.dev0"
+__version__ = "25.1.dev0"
 
 
 def main(args: Optional[List[str]] = None) -> int: