Upgrading setuptools 82 to 83
Breaking82.0.1 → 83.0.0Breaking1Security1Platform1
SecurityMedium · CVSS 6.1Makes MANIFEST.in matching via FileList insensitive to Unicode normalization form, fixing exclusions that silently failed.GHSA-h35f-9h28-mq5c · CVE-2026-59890 ↗
BreakingUpgrade verdict
1 breaking change and a platform requirement change and a security fix.
In plain terms
- The dry_run option is no longer supported after syncing with the upstream distutils fork.
- This version of setuptools no longer works on Python older than 3.10.
- File exclusion rules in MANIFEST.in now match non-ASCII filenames regardless of how the characters are encoded, so excluded files are no longer accidentally published.
Must act 3 items need code or config changes
Python requirement changed in 83.0.0: >=3.9 → >=3.10.
What you must change
Breaking1
Syncs with pypa/distutils@d7633fbed, removing dry_run support.
dry_runSecurity1
Makes MANIFEST.in matching via FileList insensitive to Unicode normalization form, fixing exclusions that silently failed.
MANIFEST.inFileListexcludeglobal-excluderecursive-excludepruneMedium · CVSS 6.1Platform1
Requires Python 3.10 or later.
API changes
Generated by DepDelta from published Python source. Not mixed with prose notes.
- added:
function normalize(text)