Skip to content

Build(deps): bump setuptools from 84.0.0 to 84.2.0 in /docker/commvault - #47433

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/commvault/setuptools-84.2.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/commvault/setuptools-84.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps setuptools from 84.0.0 to 84.2.0.

Changelog

Sourced from setuptools's changelog.

v84.2.0

Features

  • Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
  • Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

  • Use target sysconfig data for stable-ABI extension filenames. (#5351)

v84.1.0

Features

  • setuptools.archive_util now raises the new UnsafeMember exception when an archive member would be extracted outside of the extraction directory, where previously such a member was silently skipped. Aborting makes a malicious or malformed archive visible to the caller instead of yielding a quietly incomplete extraction, and matches the behavior of the standard library's tarfile extraction filters.

Bugfixes

  • Wheel.install_as_egg no longer creates namespace package directories outside of the destination egg directory. Entries in a wheel's namespace_packages.txt were split on . and passed straight to os.path.join, so an entry that was absolute, drive-qualified, or UNC discarded the destination and placed an __init__.py at a path chosen by the wheel. Namespace entries are now validated as dotted module names on every platform -- see GHSA-xmj3-9gf7-h52w.

    This code path is reached only by the deprecated setup_requires mechanism when setup() is invoked outside a PEP 517 frontend; the setuptools build backend never reaches it.

  • setuptools.archive_util no longer extracts archive members outside of the requested extraction directory. Both the tar and zip formats specify / as

... (truncated)

Commits
  • 301e27a Bump version: 84.1.0 → 84.2.0
  • 39a7c2e Merge pull request #5193 from ngoldbaum/abi3.abi3t
  • 7b5dea7 Merge branch 'main' into abi3.abi3t
  • b3985b6 Merge pull request #5352 from jameshilliard/fix/abi3-target-platform
  • 0c3f3c4 Merge pull request #5361 from pypa/feature/vendor-packaging-26.3
  • 77b7ace Bump version: 84.0.0 → 84.1.0
  • 97b75e6 Use target sysconfig for platform-qualified stable-ABI suffixes
  • 4b02939 Add news fragment.
  • 56bc40e Update vendored packaging version to 26.3
  • e66004c Merge pull request #5329 from pypa/fix/wheel-namespace-path-escape
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [setuptools](https://github.com/pypa/setuptools) from 84.0.0 to 84.2.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v84.0.0...v84.2.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 84.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 23, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 23, 2026 14:14
@content-bot

Copy link
Copy Markdown
Contributor

Docker Image Ready - Dev

Docker automatic build has deployed your docker image: devdemisto/commvault:1.0.0.14048492
It is available now on docker hub at: https://hub.docker.com/r/devdemisto/commvault/tags
Get started by pulling the image:

docker pull devdemisto/commvault:1.0.0.14048492

Docker Metadata

  • Image Size: 47.85M
  • Image ID: sha256:84be8b27f129838a2f28a340e7d502dcde86bda483c6b9de5264d3a85be5ef8c
  • Created: 2026-10-23T14:24:11.253476234Z
  • Arch: linux/amd64
  • Command: ["python3"]
  • Environment:
    • PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    • LANG=C.UTF-8
    • GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
    • PYTHON_VERSION=3.12.14
    • PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a
    • DOCKER_IMAGE=devdemisto/commvault:1.0.0.14048492
  • Labels:
    • io.buildah.version:1.37.5
    • org.opencontainers.image.authors:Demisto <containers@demisto.com>
    • org.opencontainers.image.revision:20d139566e4eb91e7af03820551aa1c5edfbf435
    • org.opencontainers.image.version:1.0.0.14048492
    • panw.builtby.pipeline:13495447
    • panw.builtby.project:xdr/cortex-content/dockerfiles
    • panw.builtby.template:build-scan-publish

@content-bot

Copy link
Copy Markdown
Contributor

🔍 AI Triage Report Available

An automated triage report has been generated for this pipeline.

Status: failed
Report ID: 77cb9b9722f88d7d

📋 Triage Report
💡 Resolutions are available in the full report.

⚠️ AI-generated triage. Validate before acting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant