fix(deps): update dependency packaging to v26

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
packaging	==25.0 → ==26.3

---

Release Notes

pypa/packaging (packaging)

v26.3

Compare Source

What's Changed

Features

• Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#​1267, #​1270, #​1298)
• PEP 808: accept Metadata-Version: 2.6. (#​1194)
• Add a limit argument to parse_tag() for compressed tag sets. (#​1220)
• Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#​1334)
• Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#​1346)
• Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#​1313)

Behavior adaptations

• Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#​1157)
• Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#​160)

Fixes for versions and specifiers

• Raise InvalidVersion instead of TypeError when Version is given a non-string. (#​1319)
• Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#​1241)
• Fix an AttributeError when hashing internally trimmed versions. (#​1242)
• Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#​1257)

Fixes for requirements and markers

• Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#​1232)
• Normalize requested extra names before comparing or hashing requirements. (#​644)
• Preserve a Requirement's specifier prereleases override across a pickle round trip. (#​1204)
• Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#​1332)
• Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#​1299)
• Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#​1213)
• Keep the parentheses of a nested group when serializing markers. (#​1316)
• Normalize extra and dependency_groups values in nested markers at parse time. (#​1246, #​1310)
• Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#​1265)
• Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#​1276)
• Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#​1249)
• Reject requirements and markers with a trailing line break. (#​1345)

Fixes for metadata and licenses

• Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#​1268)
• Accept the UTF-8 charset case-insensitively in email payloads. (#​1330)
• Reject malformed Description-Content-Type values. (#​1329)
• Don't rewrite user values that contain {field} placeholders in error messages. (#​1327)
• Route multipart email payloads to unparsed instead of asserting. (#​1247)
• Make InvalidMetadata and CyclicDependencyGroup picklable. (#​1328)
• Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#​1356)
• Raise InvalidLicenseExpression for misplaced WITH clauses and empty LicenseRef- names. (#​1266)
• Raise InvalidLicenseExpression instead of KeyError for a LicenseRef- with a + suffix. (#​1219)

Fixes for tags and filenames

• Raise InvalidTag from parse_tag() for tags with the wrong number of components. (#​1238)
• Reject empty tag components in parse_wheel_filename() and parse_tag(). (#​1234)
• Reject an empty project name in the wheel and sdist filename parsers. (#​1305)
• Reject wheel filenames with a trailing newline. (#​1341)
• Reject wheel tags whose interpreter component is not an identifier. (#​577)
• is_normalized_name now rejects names with collapsed double hyphens like a--b. (#​1230)
• Fix duplicate explicit abi3t tags. (#​1245)
• Forward the warn argument to generic_tags() in sys_tags(). (#​1264)
• Raise SystemError for an empty or malformed CPython EXT_SUFFIX. (#​1271, #​1301)
• Fix a typo in the macOS fat3 architecture name (was fat32). (#​1199)

Fixes for pylock, direct URLs, and dependency groups

• Percent-decode pylock artifact file names derived from a url so that local versions (e.g. a wheel with 2.12.1+cu130 encoded as 2.12.1%2Bcu130) yield a valid file name. (#​1314)
• Use an explicitly empty tags sequence in Pylock.select() instead of falling back to sys_tags(). (#​1349)
• Fix Pylock.select() on Python builds that report a non-PEP 440 python_full_version (e.g. 3.15.0+). (#​1179)
• Reject TOML booleans where integers are expected in pylock files. (#​1244)
• Add PylockSelectError to packaging.pylock.__all__. (#​1202)
• Fix DirectUrl credential stripping for passwords containing @. (#​1218)
• Parse the URL scheme case-insensitively when checking for file URLs in direct_url. (#​1240)
• Require absolute file URLs for local directories in direct_url. (#​1297)
• Collect InvalidRequirement errors while resolving dependency groups instead of leaking them. (#​1302)
• Don't cache malformed dependency group parses. (#​1248)

Performance

• Implement Specifier and SpecifierSet filtering with the new range engine. (#​1120, #​1259)
• Cache the default marker environment. (#​1250)
• Cache the _manylinux module lookup process-wide. (#​1254)
• Add __slots__ to Requirement and the token classes. (#​1320, #​1258)
• Keep range caches across canonicalization, precompile the wheel project-name pattern, simplify parse_tag(), and skip platform.mac_ver() when the version and arch are given. (#​1253, #​1256, #​1236, #​1255)

Documentation

• Describe the validation scope of packaging.pylock. (#​1339)
• Explain which packaging.metadata fields are validated. (#​1342)
• Document RFC822Policy in the low-level packaging.metadata interface. (#​1222)
• Enable nitpicky mode and render missing classes and fields in the API reference. (#​1196, #​1225, #​1277)
• Add missing versionadded / versionchanged directives and many small docstring fixes across the API reference. (#​1205, #​1207, #​1208, #​1209, #​1211, #​1216, #​1217, #​1223, #​1272, #​1273, #​1274, #​1291, #​1300, #​1303, #​1317, #​1344)

Internal

• Add Python 3.15 to the test matrix. (#​1190)
• Add a musl/Alpine test job and make the test suite pass on musl. (#​1226, #​1227)
• Expand the downstream test matrix by ten projects. (#​1261)
• Update to mypy 2. (#​1191)
• Use nox's uv integration. (#​1057)

New Contributors

• @​Sean-Kenneth-Doherty made their first contribution in #​1187
• @​jsirois made their first contribution in #​1199
• @​Alan-K-Biju-7 made their first contribution in #​1217
• @​facutuesca made their first contribution in #​1218
• @​NovaLux12 made their first contribution in #​1317
• @​atsuoishimoto made their first contribution in #​1314
• @​gaoflow made their first contribution in #​1291
• @​jacobdr made their first contribution in #​608
• @​deepakganesh78 made their first contribution in #​1351
• @​rajath201 made their first contribution in #​1356

Full Changelog: pypa/packaging@26.2...26.3

v26.2

Compare Source

What's Changed

Fixes:

• Fix incorrect sysconfig var name for pyemscripten by @​ryanking13 in #​1160
• Make Version, Specifier, SpecifierSet, Tag, Marker, and Requirement pickle-safe
  and backward-compatible with pickles created in 25.0-26.1 (including references to the removed
  packaging._structures module) by @​eachimei and @​henryiii in #​1163, #​1168, #​1170, and #​1171
• fix: re-export ExceptionGroup for now by @​henryiii in #​1164

Documentation:

• docs: add errors section and fix missing details by @​henryiii in #​1159
• docs(dev): document property-based test suite by @​r266-tech in #​1167
• Fix typo in DirectUrl documentation by @​sbidoul in #​1169
• docs(specifiers): add is_unsatisfiable() usage example by @​r266-tech in #​1166

Internal:

• Enable the auditor persona on zizmor by @​henryiii in #​1158
• Test new pickle guarantees by @​henryiii in #​1174
• Use native uv integration in rtd by @​henryiii in #​1175

New Contributors

• @​ryanking13 made their first contribution in #​1160
• @​eachimei made their first contribution in #​1163

Full Changelog: pypa/packaging@26.1...26.2

v26.1

Compare Source

Features:

• PEP 783: add handling for Emscripten wheel tags by @​hoodmane in #​804 (old name used in implementation, will be fixed in next release)
• PEP 803: add handling for the abi3.abi3t free-threading tag by @​ngoldbaum in #​1099
• PEP 723: add packaging.dependency_groups module, based on the dependency-groups package by @​sirosen in #​1065
• Add the packaging.direct_url module by @​sbidoul in #​944
• Add the packaging.errors module by @​henryiii in #​1071
• Add SpecifierSet.is_unsatisfiable using ranges (new internals that will be expanded in future versions) by @​notatallshaw in #​1119
• Add create_compatible_tags_selector to select compatible tags by @​sbidoul in #​1110
• Add a key argument to SpecifierSet.filter() by @​frostming in #​1068
• Support & and | for Marker's by @​henryiii in #​1146
• Normalize Version.__replace__ and add Version.from_parts by @​henryiii in #​1078
• Add an option to validate compressed tag set sort order in parse_wheel_filename by @​r266-tech in #​1150

Behavior adaptations:

• Narrow exclusion of pre-releases for <V.postN to match spec by @​notatallshaw in #​1140
• Narrow exclusion of post-releases for >V to match spec by @​notatallshaw in #​1141
• Rename format_full_version to _format_full_version to make it visibly private by @​r266-tech in #​1125
• Restrict local version to ASCII by @​henryiii in #​1102

Pylock (PEP 751) updates:

• Add pylock select function by @​sbidoul in #​1092
• Document pylock select() method and PylockSelectError by @​r266-tech in #​1153
• Add filename property to PackageSdist and PackageWheel, more validation by @​sbidoul in #​1095
• Give preference to path over url by @​sbidoul in #​1128
• Validate name/version consistency in file names by @​sbidoul in #​1114

Fixes:

• Fix > comparison for versions with dev+local segments by @​veeceey in #​1097
• Fix incorrect self-comparison for InfinityType and NegativeInfinityType by @​bysiber in #​1093
• Canonicalize when deduplicating specifiers in SpecifierSet by @​notatallshaw in #​1109
• Fix charset error message formatting by @​notatallshaw in #​1121
• Handle the key parameter in SpecifierSet.filter when specifiers are empty and prerelease is False by @​notatallshaw in #​1096
• Standardize inner components of repr output by @​henryiii in #​1090
• Specifier's === uses original string, not normalized, when available by @​notatallshaw in #​1124
• Propagate int-max-str-digits ValueError by @​notatallshaw in #​1155

Performance:

• Add fast path for parsing simple versions (digits and dots only) by @​notatallshaw in #​1082
• Add fast path for Version to Version comparison by skipping _key property by @​notatallshaw in #​1083
• Cache Version hash value in dedicated slot by @​notatallshaw in #​1118
• Overhaul _cmpkey to remove use of custom objects by @​notatallshaw in #​1116
• Skip __replace__ in Specifier comparison if not needed by @​notatallshaw in #​1081
• SpecifierSet use tuple instead of frozenset for _specs by @​notatallshaw in #​1108
• Speed up complex SpecifierSet filtering by implementing cost-based ordering by @​notatallshaw in #​1105
• Speed up wildcard comparison by @​notatallshaw in #​1111
• Stream PEP440 filtering in SpecifierSet.filter by @​notatallshaw in #​1076
• Add __slots__ to Marker by @​henryiii in #​1147
• Simply Specifier regex by @​sirosen in #​1106
• Skip using the hash property internally by @​notatallshaw in #​1115

Internal:

• Add downstream testing by @​henryiii in #​1049
• Benchmarking suite by @​henryiii in #​1059
• Benchmark variance reduction by @​notatallshaw in #​1107
• Add property-based tests for PEP 440 by @​notatallshaw in #​1144
• Clean up a few collections.namedtuple in tests by @​henryiii in #​1070
• Do not reload the tags module in tests by @​henryiii in #​1152
• Limit dir() / tab-completion in REPL by @​henryiii in #​1011
• Add more __all__/__dir__ by @​henryiii in #​1069
• Cleanup pre-commit a bit by @​henryiii in #​1080
• Pin pre-commit file, use dependabot by @​henryiii in #​1133
• Remove sphinx-toolbox by @​henryiii in #​1135
• Use docs group, faster readthedocs by @​henryiii in #​1061
• Add free-threaded Python to CI by @​henryiii in #​1098
• Simplify combining SpecifierSet.prereleases by @​notatallshaw in #​1073
• Use direct operator methods in _compare_compatible by @​notatallshaw in #​1100
• Remove unnecessary if statement in Specifier.prereleases by @​notatallshaw in #​1074
• Remove unneeded nesting in Specifier.prereleases by @​notatallshaw in #​1072

Documentation:

• Fix documentation: grammar, typos, formatting, and outdated references by @​DimitriPapadopoulos in #​1084
• Fix versionadded for Version.from_parts() by @​Jackenmen in #​1134
• Document & and | operators for combining Marker objects by @​r266-tech in #​1151
• Expand and clean up Version documentation by @​henryiii in #​1089
• Move license docs inline by @​henryiii in #​1131
• Move markers inline by @​henryiii in #​1104
• Move tags docs to inline by @​henryiii in #​1130
• Move utilities inline, like other modules by @​henryiii in #​1103

Benchmarks

Performance improvements since 26.0, from the new integrated benchmark suite:

uv run asv run 26.0..HEAD

New Contributors

• @​veeceey made their first contribution in #​1097
• @​bysiber made their first contribution in #​1093
• @​sirosen made their first contribution in #​1106
• @​Jackenmen made their first contribution in #​1134
• @​ngoldbaum made their first contribution in #​1099
• @​r266-tech made their first contribution in #​1151
• @​hoodmane made their first contribution in #​804

Full Changelog: pypa/packaging@26.0...26.1

v26.0

Compare Source

Read about the performance improvements here: https://iscinumpy.dev/post/packaging-faster.

What's Changed

Features:

• PEP 751: support pylock by @​sbidoul in #​900
• PEP 794: import name metadata by @​brettcannon in #​948
• Support writing metadata by @​henryiii in #​846
• Support __replace__ for Version by @​henryiii in #​1003
• Support positional pattern matching for Version and Specifier by @​henryiii in #​1004

Behavior adaptations:

• PEP 440 handling of prereleases for Specifier.contains, SpecifierSet.contains, and SpecifierSet.filter by @​notatallshaw in #​897
• Handle PEP 440 edge case in SpecifierSet.filter by @​notatallshaw in #​942
• Adjust arbitrary equality intersection preservation in SpecifierSet by @​notatallshaw in #​951
• Return False instead of raising for .contains with invalid version by @​Liam-DeVoe in #​932
• Support arbitrary equality on arbitrary strings for Specifier and SpecifierSet's filter and contains method. by @​notatallshaw in #​954
• Only try to parse as Version on certain marker keys, return False on unequal ordered comparsions by @​JP-Ellis in #​939

Fixes:

• Update _hash when unpickling Tag() by @​dholth in #​860
• Correct comment and simplify implicit prerelease handling in Specifier.prereleases by @​notatallshaw in #​896
• Use explicit _GLibCVersion NamedTuple in _manylinux by @​cthoyt in #​868
• Detect invalid license expressions containing () by @​bwoodsend in #​879
• Correct regex for metadata 'name' format by @​di in #​925
• Improve the message around expecting a semicolon by @​pradyunsg in #​833
• Support nested parens in license expressions by @​Liam-DeVoe in #​931
• Add space before at symbol in Requirements string by @​henryiii in #​953
• A root logger use found by ruff LOG, use packaging logger instead by @​henryiii in #​965
• Better support for subclassing Marker and Requirement by @​henryiii in #​1022
• Normalize all extras, not just if it comes first by @​henryiii in #​1024
• Don't produce a broken repr if Marker fails to construct by @​henryiii in #​1033

Performance:

• Avoid recompiling regexes in the tokenizer for a 3x speedup by @​hauntsaninja in #​1019
• Improve performance in _manylinux.py by @​cthoyt in #​869
• Minor cleanups to Version by @​bearomorphism in #​913
• Skip redundant creation of Versions in specifier comparison by @​notatallshaw in #​986
• Cache Specifier's Version by @​notatallshaw in #​985
• Make Version a little faster by @​henryiii in #​987
• Minor Version regex cleanup by @​henryiii in #​990
• Faster regex on Python 3.11.5+ by @​henryiii in #​988 and #​1055
• Lazily calculate _key in Version by @​notatallshaw in #​989 and regression for packaging_legacy fixed by @​henryiii in #​1048
• Faster canonicalize_version by @​henryiii in #​993
• Use fullmatch in a couple more places by @​henryiii in #​992
• Use fullmatch for markers too by @​henryiii in #​1029
• Use map instead of generator by @​henryiii in #​996
• Deprecate ._version (_Version, a NamedTuple) by @​henryiii in #​995 and #​1062
• Avoid duplicate Version creation in canonicalize_version by @​henryiii in #​994
• Add __slots__ to Version by @​henryiii in #​1001
• Add __slots__ to Specifiers by @​henryiii in #​1002
• Add __slots__ to Nodes by @​henryiii in #​1032
• Use version.__replace__ in specifier comparison by @​notatallshaw in #​999
• Use _get_spec_version in more places in Specifier by @​notatallshaw in #​1005
• Pull set construction out of function by @​henryiii in #​1012
• Letter normalization dict for prereleases and the like by @​henryiii in #​1014
• Avoid normalizing extras again when comparing by @​henryiii in #​1028
• Speed up Version.__str__ by about 10% by @​henryiii in #​997
• Increase the performance of canonicalize_name by avoiding a regex by @​henryiii in #​1030, #​1047, and #​1064
• Faster zero stripping by @​henryiii in #​1058

Type annotations:

• Fix a type annotation by @​brettcannon in #​907
• Fix tags return type in parse_wheel_filename docs by @​ncoghlan in #​973
• Add type hint for _version in .version.Version by @​brettcannon in #​927
• Changed static type annotations in prereleases setter method in specifier.py by @​subhajitsaha01 in #​930
• Statically type the tests by @​henryiii in #​982

Internal:

• Test and declare support Python 3.14 by @​henryiii in #​901
• Modernize and speed up tests on Python 3.14 by @​henryiii in #​903
• Change our license metadata to use an SPDX license expression by @​cdce8p in #​881
• No need for license-files by @​DimitriPapadopoulos in #​924
• Update mypy by @​hauntsaninja in #​891
• Some config updates by @​henryiii in #​902
• Add spell check and rst check by @​henryiii in #​904
• Clean up ruff ignores by @​henryiii in #​905
• Update example for env marker python_version by @​trim21 in #​908
• Move codespell configuration into pyproject.toml by @​yarikoptic in #​910
• Check warning a little more precisely by @​henryiii in #​837
• Speed up mypy a little by @​henryiii in #​836
• Apply ruff/flake8-pyi rules (PYI) by @​DimitriPapadopoulos in #​835
• Better local runs for codespell by @​henryiii in #​911
• Remove outdated/confusing Gist link by @​stefan6419846 in #​921
• Fix docs and docs ci after #​897 landed by @​notatallshaw in #​926
• Run twine-check on push in CI by @​EpicWink in #​922
• ruff was renamed ruff-check in pre-commit by @​henryiii in #​933
• Fix incorrectly implicitly concatenated string in specifiers test by @​notatallshaw in #​946
• Simplify conditional by @​ofek in #​949
• Modernize nox, use dependency-groups for tests by @​henryiii in #​952
• Add more checks that don't affect anything by @​henryiii in #​957
• Enable Ruff ISC rule by @​henryiii in #​959
• Ruff code FLY by @​henryiii in #​963
• pytest log_level is better than log_cli_level by @​henryiii in #​956
• Ruff code TRY by @​henryiii in #​961
• Add the ruff PL checks by @​henryiii in #​964
• Enable Ruff ARG rules by @​henryiii in #​958
• Ruff PT code (pytest) by @​henryiii in #​960
• Add ruff DTZ by @​henryiii in #​968
• Add ruff BLE by @​henryiii in #​967
• Add the ruff SIM checks by @​henryiii in #​966
• Adding ruff PERF by @​henryiii in #​969
• Move some config into coverage config by @​henryiii in #​971
• Check ruff C4 by @​henryiii in #​962
• Adding ruff T20 by @​henryiii in #​972
• Add a tests pass job by @​henryiii in #​977
• Add ruff TC by @​henryiii in #​980
• Adding part of ruff RET by @​henryiii in #​979
• Reorder mypy check by @​henryiii in #​983
• Enable ruff ALL by @​henryiii in #​984
• Link back to repo/source in furo by @​henryiii in #​991
• Add case insensitivity tests for arbitrary equality by @​notatallshaw in #​975
• Synchronize documentation and code for markers by @​zahlman in #​1008
• Use partition in _parse_project_urls by @​henryiii in #​1013
• auto-skip the dependabot PRs in the release changelog generation by @​henryiii in #​1016
• Update unreleased section in changelog by @​henryiii in #​1017
• Fix PR role to match extlinks by @​hugovk in #​1020
• Mention new parts in README by @​henryiii in #​1023
• Replace a couple of asserts with else by @​henryiii in #​1027
• Simplify and/or check a little more by @​henryiii in #​1031
• Use slim runner for all check by @​henryiii in #​1021
• Use typos instead of codespell by @​henryiii in #​1015
• Update changelog with recent additions by @​henryiii in #​1034
• Publish to PyPI via GitHub CI by @​EpicWink in #​893
• Use prek for faster pre-commit lint step by @​henryiii in #​1037
• Add help text to noxfile by @​henryiii in #​1038
• Update licenses to 3.27 by @​henryiii in #​1036
• Use relative import in packaging.licenses by @​notatallshaw in #​1039
• Add zizmor and tighten up CI by @​henryiii in #​1035
• Fix release script by @​henryiii in #​1040
• Fix using a dev version (again) by @​henryiii in #​1041
• Fix type hint of function used with contextlib.contextmanager by @​SpecLad in #​1046
• Always run tests by @​henryiii in #​1044
• Fix a changelog number by @​henryiii in #​1042
• Fix the publish job by @​henryiii in #​1043
• Get the correct tag on publish by @​henryiii in #​1045
• Test on first public release of CPython 3.11 and newer by @​henryiii in #​1056
• Fix publication job (again) by @​henryiii in #​1051
• Use actionlint to check CI workflows by @​miketheman in #​1052
• Fix formatting of distribution types in metadata.rst by @​brettcannon in #​1053

New Contributors

• @​cdce8p made their first contribution in #​881
• @​dholth made their first contribution in #​860
• @​trim21 made their first contribution in #​908
• @​yarikoptic made their first contribution in #​910
• @​cthoyt made their first contribution in #​868
• @​bwoodsend made their first contribution in #​879
• @​stefan6419846 made their first contribution in #​921
• @​bearomorphism made their first contribution in #​913
• @​EpicWink made their first contribution in #​922
• @​Liam-DeVoe made their first contribution in #​932
• @​subhajitsaha01 made their first contribution in #​930
• @​ncoghlan made their first contribution in [#​973](https://redirect.github.com/pypa/packaging

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone US/Eastern)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.