From 10c78ef08b07462ef9598e2486414e53901715d4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Nov 2023 14:12:55 +0000
Subject: [PATCH] Bump build from 0.10.0 to 1.0.3 (#567)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [build](https://github.com/pypa/build) from 0.10.0 to 1.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/releases">build's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: avoid bug in various patch releases of Python by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/675">pypa/build#675</a></li>
<li>changelog: fix issue reference by <a
href="https://github.com/michael-k"><code>@​michael-k</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/671">pypa/build#671</a></li>
<li>tox: format file by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/678">pypa/build#678</a></li>
<li>chore: bump to 1.0.3 by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/681">pypa/build#681</a></li>
<li>chore: release 1.0.1 by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/677">pypa/build#677</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/michael-k"><code>@​michael-k</code></a>
made their first contribution in <a
href="https://redirect.github.com/pypa/build/pull/671">pypa/build#671</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/build/compare/1.0.0...1.0.3">https://github.com/pypa/build/compare/1.0.0...1.0.3</a></p>
<h2>Version 1.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>infra: replace flake8 with ruff by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/565">pypa/build#565</a></li>
<li>Refactor <code>IsolatedEnv</code>, take two by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/537">pypa/build#537</a></li>
<li>util: allow passing alternative runner to
<code>project_wheel_metadata</code> by <a
href="https://github.com/q0w"><code>@​q0w</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/566">pypa/build#566</a></li>
<li>ci: do not trigger workflow for RST file changes by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/568">pypa/build#568</a></li>
<li>build: drop toml fallback by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/567">pypa/build#567</a></li>
<li>infra: fix ruff configuration and add a few checks by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/573">pypa/build#573</a></li>
<li>Minor doc fixes by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/574">pypa/build#574</a></li>
<li>docs: reorder installation instructions by <a
href="https://github.com/hauntsaninja"><code>@​hauntsaninja</code></a>
in <a
href="https://redirect.github.com/pypa/build/pull/575">pypa/build#575</a></li>
<li>Specify encoding by <a
href="https://github.com/jaraco"><code>@​jaraco</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/578">pypa/build#578</a></li>
<li>infra: use latest Ruff instead of isort by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/581">pypa/build#581</a></li>
<li>tests: report installed versions of common packages by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/588">pypa/build#588</a></li>
<li>tests: strip formatting from stderr (pip 23) by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/589">pypa/build#589</a></li>
<li>docs: remove direct references to PEP 517 in docs landing page by <a
href="https://github.com/pradyunsg"><code>@​pradyunsg</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/562">pypa/build#562</a></li>
<li>docs: use sphinx-issues by <a
href="https://github.com/FFY00"><code>@​FFY00</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/590">pypa/build#590</a></li>
<li>config: support running Ruff 0.258+ directly on source by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/591">pypa/build#591</a></li>
<li>tests: useless .stdout detected by Ruff PR by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/594">pypa/build#594</a></li>
<li>Fix link to installation page in docs by <a
href="https://github.com/atugushev"><code>@​atugushev</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/597">pypa/build#597</a></li>
<li>fix: mypy update by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/606">pypa/build#606</a></li>
<li>chore: minor cleanup by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/605">pypa/build#605</a></li>
<li>chore: isort Ruff code was missing by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/604">pypa/build#604</a></li>
<li>🎨🧪 Modularize GHA workflow through reuse by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/618">pypa/build#618</a></li>
<li>Improve CLI help text by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/616">pypa/build#616</a></li>
<li>ci: add 3.12 beta testing by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/624">pypa/build#624</a></li>
<li>chore: remove unneeded target-version by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/634">pypa/build#634</a></li>
<li>pre-commit: ruff moved to astral-sh by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/635">pypa/build#635</a></li>
<li>main: filter out malicious files when extracting tar archives by <a
href="https://github.com/layday"><code>@​layday</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/609">pypa/build#609</a></li>
<li>main: avoid cost of importing virtualenv if not using it by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/636">pypa/build#636</a></li>
<li>Bump importlib metadata dependency by <a
href="https://github.com/jaraco"><code>@​jaraco</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/631">pypa/build#631</a></li>
<li>main: ensure config_settings are passed to get_requires_for_build by
<a
href="https://github.com/jameshilliard"><code>@​jameshilliard</code></a>
in <a
href="https://redirect.github.com/pypa/build/pull/627">pypa/build#627</a></li>
<li>tests: add network marker by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/649">pypa/build#649</a></li>
<li>chore: use 2x faster black mirror by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/652">pypa/build#652</a></li>
<li>docs: bump furo/sphinx by <a
href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a
href="https://redirect.github.com/pypa/build/pull/660">pypa/build#660</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's
changelog</a>.</em></p>
<blockquote>
<h1>1.0.3 (2023-09-06)</h1>
<ul>
<li>Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink
bug
triggered by adding <code>data_filter</code> in 1.0.0.
(PR :pr:<code>675</code>, fixes issue :issue:<code>674</code>)</li>
</ul>
<h1>1.0.0 (2023-09-01)</h1>
<ul>
<li>Removed the <code>toml</code> library fallback; <code>toml</code>
can no longer be used
as a substitute for <code>tomli</code>
(PR :pr:<code>567</code>)</li>
<li>Added <code>runner</code> parameter to
<code>util.project_wheel_metadata</code>
(PR :pr:<code>566</code>, fixes issue :issue:<code>553</code>)</li>
<li>Modified <code>ProjectBuilder</code> constructor signature, added
alternative
<code>ProjectBuilder.from_env</code> constructor, redefined
<code>env.IsolatedEnv</code>
interface, and exposed <code>env.DefaultIsolatedEnv</code>, replacing
<code>env.IsolatedEnvBuilder</code>. The aim has been to shift
responsibility for
modifying the environment from the project builder to the
<code>IsolatedEnv</code>
entirely and to ensure that the builder will be initialised from an
<code>IsolatedEnv</code> in a consistent manner. Mutating the project
builder is no
longer supported.
(PR :pr:<code>537</code>)</li>
<li><code>virtualenv</code> is no longer imported when using
<code>-n</code>, for faster builds
(PR :pr:<code>636</code>, fixes issue :issue:<code>510</code>)</li>
<li>The SDist now contains the repository contents, including tests.
Flit-core
3.8+ required.
(PR :pr:<code>657</code>, :pr:<code>661</code>, fixes issue
:issue:<code>656</code>)</li>
<li>The minimum version of <code>importlib-metadata</code> has been
increased to 4.6 and
Python 3.10 due to a bug in the standard library version with URL
requirements in extras. This is still not required for 3.8 when
bootstrapping
(as long as you don't have URL requirements in extras).
(PR :pr:<code>631</code>, fixes issue :issue:<code>630</code>)</li>
<li>Docs now built with Sphinx 7
(PR :pr:<code>660</code>)</li>
<li>Tests now contain a <code>network</code> marker
(PR :pr:<code>649</code>, fixes issue :issue:<code>648</code>)</li>
<li>Config-settings are now passed to <code>get_requires*</code> hooks,
fixing a long
standing bug. If this affects your setuptools build, you can use
<code>-C--build-option=&lt;cmd&gt;
-C--build-option=&lt;option&gt;</code> to workaround an issue
with Setuptools not allowing unrecognised build options when running
this
hook.
(PR :pr:<code>627</code>, fixes issue
:issue:<code>[#264](https://github.com/pypa/build/issues/264)</code>)</li>
<li>Test on Python 3.12 betas/RCs
(PR :pr:<code>624</code>)</li>
<li>Filter out malicious files when extracting tar archives when Python
supports it
(PR :pr:<code>609</code>)</li>
<li>Specify encoding, fixing issues when
<code>PYTHONWARNDEFAULTENCODING</code> is set.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/build/commit/38d1a688d5e05557a929245ada14d106f3e5b547"><code>38d1a68</code></a>
chore: bump to 1.0.3</li>
<li><a
href="https://github.com/pypa/build/commit/17cefaf178a2c08abe319d90f8b9690707007f35"><code>17cefaf</code></a>
tox: format file</li>
<li><a
href="https://github.com/pypa/build/commit/c48f4ca7cbe84f027f37ad575713870f5f4f7818"><code>c48f4ca</code></a>
chore: release 1.0.1</li>
<li><a
href="https://github.com/pypa/build/commit/4b61b8e1344324dbf43c7b59b5cf61835b8fa2e3"><code>4b61b8e</code></a>
Apply suggestions from code review</li>
<li><a
href="https://github.com/pypa/build/commit/d6138f59f35bef619db9c071a45f9c13956c1571"><code>d6138f5</code></a>
fix: avoid bug in various patch releases of Python</li>
<li><a
href="https://github.com/pypa/build/commit/eada8112cdfa342390e02e1258da6795a19ada36"><code>eada811</code></a>
build(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/pypa/build/issues/673">#673</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/955e69786fa5a4be0b7fd15e13dfb58ba044ae35"><code>955e697</code></a>
pre-commit: bump repositories (<a
href="https://redirect.github.com/pypa/build/issues/672">#672</a>)</li>
<li><a
href="https://github.com/pypa/build/commit/f51c089ddc608472f34dec002237af3de2d48c43"><code>f51c089</code></a>
changelog: fix issue reference</li>
<li><a
href="https://github.com/pypa/build/commit/1fff01ed7440d5b5626fec31422026a4920b7764"><code>1fff01e</code></a>
style: ignore W005, since we are build</li>
<li><a
href="https://github.com/pypa/build/commit/06e0481cee5321c3a755fd1675e15c3fa926d201"><code>06e0481</code></a>
ci: build and test SDist/wheels</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/build/compare/0.10.0...1.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=build&package-manager=pip&previous-version=0.10.0&new-version=1.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 Pipfile.lock | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/Pipfile.lock b/Pipfile.lock
index bce46f8a..5b3d2102 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -197,11 +197,12 @@
         },
         "build": {
             "hashes": [
-                "sha256:af266720050a66c893a6096a2f410989eeac74ff9a68ba194b3f6473e8e26171",
-                "sha256:d5b71264afdb5951d6704482aac78de887c80691c52b88a9ad195983ca2c9269"
+                "sha256:538aab1b64f9828977f84bc63ae570b060a8ed1be419e7870b8b4fc5e6ea553b",
+                "sha256:589bf99a67df7c9cf07ec0ac0e5e2ea5d4b37ac63301c4986d1acb126aa83f8f"
             ],
             "index": "pypi",
-            "version": "==0.10.0"
+            "markers": "python_version >= '3.7'",
+            "version": "==1.0.3"
         },
         "certifi": {
             "hashes": [