---
- branch: MAIN
  date: Tue Feb 21 06:31:45 UTC 2023
  files:
  - new: '1.59'
    old: '1.58'
    path: pkgsrc/devel/py-pip/Makefile
    pathrev: pkgsrc/devel/py-pip/Makefile@1.59
    type: modified
  - new: '1.37'
    old: '1.36'
    path: pkgsrc/devel/py-pip/PLIST
    pathrev: pkgsrc/devel/py-pip/PLIST@1.37
    type: modified
  - new: '1.50'
    old: '1.49'
    path: pkgsrc/devel/py-pip/distinfo
    pathrev: pkgsrc/devel/py-pip/distinfo@1.50
    type: modified
  - new: '1.5'
    old: '1.4'
    path: pkgsrc/devel/py-pip/patches/patch-src_pip___internal_build__env.py
    pathrev: pkgsrc/devel/py-pip/patches/patch-src_pip___internal_build__env.py@1.5
    type: modified
  id: 20230221T063145Z.07041395eb712a3536f961f84571525876eac0d2
  log: |
    py-pip: updated to 23.0.1

    23.0.1 (2023-02-17)
    ===================

    Features
    --------

    - Ignore PIP_REQUIRE_VIRTUALENV for ``pip index``
    - Implement ``--break-system-packages`` to permit installing packages into
      ``EXTERNALLY-MANAGED`` Python installations.

    Bug Fixes
    ---------

    - Improve handling of isolated build environments on platforms that
      customize the Python's installation schemes, such as Debian and
      Homebrew.
    - Do not crash in presence of misformatted hash field in ``direct_url.json``.

    23.0 (2023-01-30)
    =================

    Features
    --------

    - Change the hashes in the installation report to be a mapping. Emit the
      ``archive_info.hashes`` dictionary in ``direct_url.json``.
    - Implement logic to read the ``EXTERNALLY-MANAGED`` file as specified in PEP 668.
      This allows a downstream Python distributor to prevent users from using pip to
      modify the externally managed environment.
    - Enable the use of ``keyring`` found on ``PATH``. This allows ``keyring``
      installed using ``pipx`` to be used by ``pip``.
    - The inspect and installation report formats are now declared stabled, and their version
      has been bumped from ``0`` to ``1``.

    Bug Fixes
    ---------

    - Wheel cache behavior is restored to match previous versions, allowing the
      cache to find existing entries.
    - Use the "venv" scheme if available to obtain prefixed lib paths.
    - Deprecated a historical ambiguity in how ``egg`` fragments in URL-style
      requirements are formatted and handled. ``egg`` fragments that do not look
      like PEP 508 names now produce a deprecation warning.
    - Fix scripts path in isolated build environment on Debian.
    - Make ``pip show`` show the editable location if package is editable
    - Stop checking that ``wheel`` is present when ``build-system.requires``
      is provided without ``build-system.build-backend`` as ``setuptools``
      (which we still check for) will inject it anyway.
    - Fix an issue when an already existing in-memory distribution would cause
      exceptions in ``pip install``

    Vendored Libraries
    ------------------

    - Upgrade certifi to 2022.12.7
    - Upgrade chardet to 5.1.0
    - Upgrade colorama to 0.4.6
    - Upgrade distro to 1.8.0
    - Remove pep517 from vendored packages
    - Upgrade platformdirs to 2.6.2
    - Add pyproject-hooks 1.0.0
    - Upgrade requests to 2.28.2
    - Upgrade rich to 12.6.0
    - Upgrade urllib3 to 1.26.14

    Improved Documentation
    ----------------------

    - Fixed the description of the option "--install-options" in the documentation
    - Remove mention that editable installs are necessary for pip freeze to report the VCS
      URL.
    - Clarify that the egg URL fragment is only necessary for editable VCS installs, and
      otherwise not necessary anymore.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/devel/py-pip'
  unixtime: '1676961105'
  user: adam