Merge pull request #502 from freedomofpress/dependabot/pip/workstatio…

…n-bootstrap/wheel-0.38.1 Bump wheel from 0.36.2 to 0.38.1 in /workstation-bootstrap
freedomofpress · Nov 21, 2024 · b2edd0e · b2edd0e
2 parents 696631a + 19977eb
commit b2edd0e
Show file tree

Hide file tree

Showing 10 changed files with 36 additions and 28 deletions.
diff --git a/README.md b/README.md
@@ -35,6 +35,12 @@ gpg --armor --output workstation-bootstrap/sha256sums.txt.asc --detach-sig  work
 
 Make sure that your GPG public key is stored in `pubkeys/`, so CI can verify the signatures.
 
+> [!NOTE]
+>
+> Dependabot will produce duplicate alerts for `pyproject.toml`/`poetry.lock`
+> and `build-requirements.txt`.  Initiate the Dependabot update for the former
+> first, and following this procedure will resolve it for the latter as well.
+
 ## Updating Python wheels
 
 When adding a new production dependency to a component, new wheels will need to be built

diff --git a/workstation-bootstrap/build-requirements.txt b/workstation-bootstrap/build-requirements.txt
@@ -7,4 +7,4 @@ pyproject-hooks==1.1.0 --hash=sha256:1058f6b6ac3f83e7220aef532e4357ce45416160b27
 pytest-runner==5.3.0 --hash=sha256:3084ada00452395171c8f10199d2b5d3b74c6948518c2b6bd75e948c77ca2280
 setuptools==70.3.0 --hash=sha256:663e40f0f62eed3ee04ec66d5a8bb2c36a365b98639bf52f050a2a857a704e38
 setuptools-scm==8.1.0 --hash=sha256:ed687948d45961dba39e0931955234cce9e42fcfc3da1c8a635c2abbebd1d15e
-wheel==0.36.2 --hash=sha256:870fcd67bd55da8e73be17468e970d365ad926ac9c5fee0e00ad778019c579d9
+wheel==0.38.1 --hash=sha256:137763d8bee337a83e407c9c5df0aa829aef964421ec072682ba39f66d4b70f4
diff --git a/workstation-bootstrap/poetry.lock b/workstation-bootstrap/poetry.lock
diff --git a/workstation-bootstrap/pyproject.toml b/workstation-bootstrap/pyproject.toml
@@ -9,7 +9,7 @@ readme = "README.md"
 [tool.poetry.dependencies]
 python = "^3.11"
 build = "1.2.1"
-wheel = "0.36.2"
+wheel = "0.38.1"
 pip = "24.1.2"
 setuptools = "70.3.0"
 setuptools-scm = "8.1.0"

diff --git a/workstation-bootstrap/sha256sums.txt b/workstation-bootstrap/sha256sums.txt
@@ -41,3 +41,5 @@ ed687948d45961dba39e0931955234cce9e42fcfc3da1c8a635c2abbebd1d15e  setuptools_scm
 b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f  toml-0.10.2.tar.gz
 870fcd67bd55da8e73be17468e970d365ad926ac9c5fee0e00ad778019c579d9  wheel-0.36.2-py2.py3-none-any.whl
 e11eefd162658ea59a60a0f6c7d493a7190ea4b9a85e335b33489d9f17e0245e  wheel-0.36.2.tar.gz
+137763d8bee337a83e407c9c5df0aa829aef964421ec072682ba39f66d4b70f4  wheel-0.38.1-py3-none-any.whl
+ea041edf63f4ccba53ad6e035427997b3bb10ee88a4cd014ae82aeb9eea77bb9  wheel-0.38.1.tar.gz
diff --git a/workstation-bootstrap/sha256sums.txt.asc b/workstation-bootstrap/sha256sums.txt.asc
@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCAAdFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmaeeMcACgkQ8QX4EBsF
-JpuLvw//ae7xNktqI9L/AqlueVgtR0dgdG9tM673LA9QB2jw+7keokum3b6CcPhK
-P1dZzk784TvVwvGGne8uJEHwsnKNGcI0e57/70S8WIs4hj2dqjO8zfWXknLdnYTn
-/K9BVBWsadgyL0vODb43cDQJs6R9HhBUChUMEZF3dozIuGTBmC2jKSMYVfoXt2+E
-wgJWWPSdJ/1dTzrK8tF8OSpN67r3MqrKKcfvHpxADadyFuu7y+JvUmwfA0XHd61I
-svFBaG4r3/vNgg+OYYI6fR9SUfVVwWfUWJtmwzfWii8pqE1f2JbdMHqqPQ69WxXB
-rrJcofrgtB460v0JYADz+MqNM2Wun/WzxONNnO78ZT7Cdq+tQrWprTYVcjNZGXc0
-hVowICVoUKUrblm4zMlNRQ9dQxJU3UCbIUcx67FXdYFqpt6MW/u9/0gkUNJlT1QP
-U1qjz6v23yTx1iZRPfLV6Oks72L95WvpTfXXePJ2ihsz7J3bPyjLPLYKUGukU7Lo
-36Zkz7mHTJ6iu1OYSGByNVHAy/bszLllpuXAfNlGakuDb9a5wvrUGgPXRB4IC3eq
-JcL1rp+T/cQBd2tosCqTdoYZPQoaln0/cij/iYpX6JpYTsurNc3mPOZltjSaMrV8
-DtK2YZ6y+4QcHeHWa1m0H4/c98EGqKxinWPtreeGu6hlf0fgZxs=
-=OGDn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+=YLvS
 -----END PGP SIGNATURE-----
diff --git a/workstation-bootstrap/wheels/wheel-0.36.2-py2.py3-none-any.whl b/workstation-bootstrap/wheels/wheel-0.36.2-py2.py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/wheel-0.36.2.tar.gz b/workstation-bootstrap/wheels/wheel-0.36.2.tar.gz
diff --git a/workstation-bootstrap/wheels/wheel-0.38.1-py3-none-any.whl b/workstation-bootstrap/wheels/wheel-0.38.1-py3-none-any.whl
diff --git a/workstation-bootstrap/wheels/wheel-0.38.1.tar.gz b/workstation-bootstrap/wheels/wheel-0.38.1.tar.gz