Bump the build-time-deps group in /.github/workflows/requirements with 4 updates

[dependabot]

Bumps the build-time-deps group in /.github/workflows/requirements with 4 updates: cibuildwheel, twine, pip and setuptools.

Updates cibuildwheel from 2.18.1 to 2.19.1

Release notes

Sourced from cibuildwheel's releases.

Version 2.19.1

• 🐛 Don't require setup-python on GHA for Pyodide (#1868)
• 🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)
• 🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)
• 🛠 Fix a warning in our schema generation script. (#1866)
• 🛠 Cleaner output on pytest 8-8.2. (#1865)

Version 2.19.0

Release post: https://iscinumpy.dev/post/cibuildwheel-2-19-0/

• 🌟 Add a Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
• 🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
• ✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
• 🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
• 🐛 Better determinism for the test environment seeding. (#1835)
• 🛠 VIRTUAL_ENV variable now set. (#1842)
• 🛠 Remove a pip<21.3 workaround. (#1842)
• 🛠 Error handling was refactored to use exceptions. (#1719)
• 🛠 Hardcoded paths in tests avoided. (#1834)
• 🛠 Single Python tests made more generic. (#1835)
• 🛠 Sped up our ci by splitting up emulation tests. (#1839)

Changelog

Sourced from cibuildwheel's changelog.

v2.19.1

• 🐛 Don't require setup-python on GHA for Pyodide (#1868)
• 🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)
• 🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)
• 🛠 Fix a warning in our schema generation script. (#1866)
• 🛠 Cleaner output on pytest 8-8.2. (#1865)

v2.19.0

See the release post for more info on new features!

• 🌟 Add Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
• 🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
• ✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
• 🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
• 🐛 Better determinism for the test environment seeding. (#1835)
• 🛠 VIRTUAL_ENV variable now set. (#1842)
• 🛠 Remove a pip<21.3 workaround. (#1842)
• 🛠 Error handling was refactored to use exceptions. (#1719)
• 🛠 Hardcoded paths in tests avoided. (#1834)
• 🛠 Single Python tests made more generic. (#1835)
• 🛠 Sped up our ci by splitting up emulation tests. (#1839)

Commits

• 932529c Bump version: v2.19.1
• 70fb1c4 fix: specify full path to non-venv Python (#1881)
• 405a475 [Bot] Update dependencies (#1879)
• 78da7ba docs: update README.md (#1874)
• 8d86d31 tests: don't print xfails (#1865)
• 89a5cfe DOC: Fix bug with link (#1870)
• 8d5d84e fix: accept current Python version if acceptable for Pyodide (#1868)
• 4ada77d [pre-commit.ci] pre-commit autoupdate (#1869)
• 829441f fix: warning in generate schema script (#1866)
• a8d190a Bump version: v2.19.0
• Additional commits viewable in compare view

Updates twine from 5.1.0 to 5.1.1

Changelog

Sourced from twine's changelog.

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

• Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

• Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

Commits

• e29791d Prepare for v5.1.1 (#1114)
• f213ede fix: Retrieve metadata correctly from importlib_metadata (#1115)
• 6fbf880 Merge pull request #1112 from pypa/bug/1111
• 3eb9121 Remove extra line from changelog entry
• 0191f0c Preserve ports when munging repository URLs
• c588793 Merge pull request #1110 from DimitriPapadopoulos/principle
• 1fdc197 Fix a couple typos
• 13b07b6 Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...
• a3e8373 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
• See full diff in compare view

Updates pip from 24.0 to 24.1.1

Changelog

Sourced from pip's changelog.

24.1.1 (2024-06-26)

Bug Fixes

• Actually use system trust stores when the truststore feature is enabled.

Vendored Libraries

• Upgrade requests to 2.32.3

24.1 (2024-06-20)

Vendored Libraries

• Upgrade truststore to 0.9.1.

24.1b2 (2024-06-12)

Features

• Report informative messages about invalid requirements. ([#12713](https://github.com/pypa/pip/issues/12713) <https://github.com/pypa/pip/issues/12713>_)

Bug Fixes

• Eagerly import the self version check logic to avoid crashes while upgrading or downgrading pip at the same time. ([#12675](https://github.com/pypa/pip/issues/12675) <https://github.com/pypa/pip/issues/12675>_)
• Accommodate for mismatches between different sources of truth for extra names, for packages generated by setuptools. ([#12688](https://github.com/pypa/pip/issues/12688) <https://github.com/pypa/pip/issues/12688>_)
• Accommodate for development versions of CPython ending in + in the version string. ([#12691](https://github.com/pypa/pip/issues/12691) <https://github.com/pypa/pip/issues/12691>_)

Vendored Libraries

• Upgrade packaging to 24.1

• Upgrade requests to 2.32.0

• Remove vendored colorama

• Remove vendored six

• Remove vendored webencodings

• Remove vendored charset_normalizer

  requests provides optional character detection support on some APIs when processing ambiguous bytes. This isn't relevant for pip to function and we're able to remove it due to recent upstream changes.

... (truncated)

Commits

• a432c7f Bump for release
• a1ae982 Update AUTHORS.txt
• 300ed75 Upgrade requests to 2.32.3 (#12784)
• 5c389ec Split up Windows tests relying on urlunparse behaviour (#12788)
• 00c75c4 Merge pull request #12773 from matthewhughes934/fix-tests-unable-to-cleanup
• 67e2a56 Merge pull request #12783 from pfmoore/rel_doc2
• a58c20a Minor release is the quarter number
• 2753c77 Merge pull request #12780 from pfmoore/rel_doc
• 4dd55eb Document the structure of our release number
• 8cdf797 Fix directories not cleaned up after test
• Additional commits viewable in compare view

Updates setuptools from 70.0.0 to 70.1.1

Changelog

Sourced from setuptools's changelog.

v70.1.1

Misc

• #4429

v70.1.0

Features

• Adopted the bdist_wheel command from the wheel project -- by :user:agronholm (#1386)

• Improve error message when pkg_resources.ZipProvider tries to extract resources with a missing Egg -- by :user:Avasam

  Added variables and parameter type annotations to pkg_resources to be nearly on par with typeshed.* -- by :user:Avasam * Excluding TypeVar and overload. Return types are currently inferred. (#4246)

• Migrated Setuptools' own config to pyproject.toml (#4310)

Bugfixes

• Prevent a TypeError: 'NoneType' object is not callable when shutil_rmtree is called without an onexc parameter on Python<=3.11 -- by :user:Avasam (#4382)
• Replace use of mktemp with can_symlink from the stdlib test suite. (#4403)
• Improvement for attr: directives in configuration to handle more edge cases related to complex package_dir. (#4405)
• Fix accidental implicit string concatenation. (#4411)

Misc

• #4365, #4422

Commits

• 222ebf9 Bump version: 70.1.0 → 70.1.1
• a66cedc "Embed" test_bdist_wheel files and execution (#4429)
• 48ce5ed pkg_resources: Merge @overload and TypeVar annotations from typeshed (#4390)
• 11bd24c Use set instead of True-only dict for non-public names (#4381)
• 82145bc Merge branch 'main' of https://github.com/pypa/setuptools into typeshed-overl...
• 807d7c1 Move check to _fn
• 2adbd4f Simplify setuptools own tool.setuptools.packages.find by using include rule...
• b4f5a07 Add news fragment
• ffea3b0 Remove no longer used bdist_wheel_testdata directory
• 61e18ff Adopt latest change from wheel test
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions