Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 24, 2025

Bumps pip from 23.3 to 25.2.

Changelog

Sourced from pip's changelog.

25.2 (2025-07-30)

Features

  • Declare support for Python 3.14 ([#13506](https://github.com/pypa/pip/issues/13506) <https://github.com/pypa/pip/issues/13506>_)
  • Automatic download resumption and retrying is enabled by default. ([#13464](https://github.com/pypa/pip/issues/13464) <https://github.com/pypa/pip/issues/13464>_)
  • Requires-Python error message displays version clauses in numerical order. ([#13367](https://github.com/pypa/pip/issues/13367) <https://github.com/pypa/pip/issues/13367>_)
  • Minor performance improvement getting the order to install a very large number of interdependent packages. ([#13424](https://github.com/pypa/pip/issues/13424) <https://github.com/pypa/pip/issues/13424>_)
  • Show time taken instead of eta 0:00:00 at download completion. ([#13483](https://github.com/pypa/pip/issues/13483) <https://github.com/pypa/pip/issues/13483>_)
  • Speed up small CLI tools by removing import re from the console script executable template. ([#13165](https://github.com/pypa/pip/issues/13165) <https://github.com/pypa/pip/issues/13165>_)
  • Remove warning when cloning from a Git reference that does not look like a commit hash. ([#12283](https://github.com/pypa/pip/issues/12283) <https://github.com/pypa/pip/issues/12283>_)

Bug Fixes

  • pip config debug now correctly separates options as set by the different files at the same level. ([#12099](https://github.com/pypa/pip/issues/12099) <https://github.com/pypa/pip/issues/12099>_)

  • Ensure truststore feature remains active even when a proxy is also in use. ([#13343](https://github.com/pypa/pip/issues/13343) <https://github.com/pypa/pip/issues/13343>_)

  • Include sub-commands in tab completion. ([#13140](https://github.com/pypa/pip/issues/13140) <https://github.com/pypa/pip/issues/13140>_)

  • pip list with the json or freeze format enabled will no longer crash when encountering a package with an invalid version. ([#13345](https://github.com/pypa/pip/issues/13345) <https://github.com/pypa/pip/issues/13345>_)

  • Provide a hint if a system error is raised involving long filenames or path segments on Windows. ([#13346](https://github.com/pypa/pip/issues/13346) <https://github.com/pypa/pip/issues/13346>_)

  • Resumed downloads are saved to the HTTP cache like any other normal download. ([#13441](https://github.com/pypa/pip/issues/13441) <https://github.com/pypa/pip/issues/13441>_)

  • Configured verbosity is consistently forwarded while calling Git during VCS operations. ([#13329](https://github.com/pypa/pip/issues/13329) <https://github.com/pypa/pip/issues/13329>_)

  • Suppress the progress bar, when running with --log and --quiet.

    Consequently, a new auto mode for --progress-bar has been added. auto will enable progress bars unless suppressed by --quiet, while on will always enable progress bars. ([#10915](https://github.com/pypa/pip/issues/10915) <https://github.com/pypa/pip/issues/10915>_)

  • Fix normalization of local URLs with non-file schemes. ([#13509](https://github.com/pypa/pip/issues/13509) <https://github.com/pypa/pip/issues/13509>_)

  • Fix normalization of local file URLs on Windows in newer Python versions. ([#13510](https://github.com/pypa/pip/issues/13510) <https://github.com/pypa/pip/issues/13510>_)

  • Fix remaining test failures in Python 3.14 by adjusting path_to_url and similar functions. ([#13423](https://github.com/pypa/pip/issues/13423) <https://github.com/pypa/pip/issues/13423>_)

  • Fix missing network test markings, making the suite pass in offline environments again. ([#13378](https://github.com/pypa/pip/issues/13378) <https://github.com/pypa/pip/issues/13378>_)

Vendored Libraries

  • Upgrade CacheControl to 0.14.3
  • Upgrade certifi to 2025.7.14
  • Upgrade distlib to 0.4.0
  • Upgrade msgpack to 1.1.1
  • Upgrade platformdirs to 4.3.8
  • Upgrade pygments to 2.19.2
  • Upgrade requests to 2.32.4
  • Upgrade resolvelib to 1.2.0

... (truncated)

Commits
  • 2e05cae Bump for release
  • f249061 Update AUTHORS.txt
  • 78d15a5 Copyedit news entries before 25.2 (again)
  • 4fe68d7 Merge pull request #13506 from ichard26/3.14
  • 775a86f Fix broken unit tests & xfail weird failure
  • 2773b13 Reformat and add --allow-unix-socket to pytest config
  • e384d10 Declare Python 3.14 support
  • 4117dc7 Always remove authority section when cleaning local URL path (#13510)
  • 2e21934 Fix cleaning of local URLs with VCS schemes (#13509)
  • 853a593 Improve path_to_url() tests (#13496)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pip](https://github.com/pypa/pip) from 23.3 to 25.2.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@23.3...25.2)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '25.2'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 24, 2025
@thestinger thestinger closed this Sep 24, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 24, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/drivers/gpu/drm/ci/xfails/pip-25.2 branch September 24, 2025 23:53
thestinger pushed a commit that referenced this pull request Nov 16, 2025
[ Upstream commit 48918ca ]

The test starts a workload and then opens events. If the events fail
to open, for example because of perf_event_paranoid, the gopipe of the
workload is leaked and the file descriptor leak check fails when the
test exits. To avoid this cancel the workload when opening the events
fails.

Before:
```
$ perf test -vv 7
  7: PERF_RECORD_* events & perf_sample fields:
 --- start ---
test child forked, pid 1189568
Using CPUID GenuineIntel-6-B7-1
 ------------------------------------------------------------
perf_event_attr:
  type                    	   0 (PERF_TYPE_HARDWARE)
  config                  	   0xa00000000 (cpu_atom/PERF_COUNT_HW_CPU_CYCLES/)
  disabled                	   1
 ------------------------------------------------------------
sys_perf_event_open: pid 0  cpu -1  group_fd -1  flags 0x8
sys_perf_event_open failed, error -13
 ------------------------------------------------------------
perf_event_attr:
  type                             0 (PERF_TYPE_HARDWARE)
  config                           0xa00000000 (cpu_atom/PERF_COUNT_HW_CPU_CYCLES/)
  disabled                         1
  exclude_kernel                   1
 ------------------------------------------------------------
sys_perf_event_open: pid 0  cpu -1  group_fd -1  flags 0x8 = 3
 ------------------------------------------------------------
perf_event_attr:
  type                             0 (PERF_TYPE_HARDWARE)
  config                           0x400000000 (cpu_core/PERF_COUNT_HW_CPU_CYCLES/)
  disabled                         1
 ------------------------------------------------------------
sys_perf_event_open: pid 0  cpu -1  group_fd -1  flags 0x8
sys_perf_event_open failed, error -13
 ------------------------------------------------------------
perf_event_attr:
  type                             0 (PERF_TYPE_HARDWARE)
  config                           0x400000000 (cpu_core/PERF_COUNT_HW_CPU_CYCLES/)
  disabled                         1
  exclude_kernel                   1
 ------------------------------------------------------------
sys_perf_event_open: pid 0  cpu -1  group_fd -1  flags 0x8 = 3
Attempt to add: software/cpu-clock/
..after resolving event: software/config=0/
cpu-clock -> software/cpu-clock/
 ------------------------------------------------------------
perf_event_attr:
  type                             1 (PERF_TYPE_SOFTWARE)
  size                             136
  config                           0x9 (PERF_COUNT_SW_DUMMY)
  sample_type                      IP|TID|TIME|CPU
  read_format                      ID|LOST
  disabled                         1
  inherit                          1
  mmap                             1
  comm                             1
  enable_on_exec                   1
  task                             1
  sample_id_all                    1
  mmap2                            1
  comm_exec                        1
  ksymbol                          1
  bpf_event                        1
  { wakeup_events, wakeup_watermark } 1
 ------------------------------------------------------------
sys_perf_event_open: pid 1189569  cpu 0  group_fd -1  flags 0x8
sys_perf_event_open failed, error -13
perf_evlist__open: Permission denied
 ---- end(-2) ----
Leak of file descriptor 6 that opened: 'pipe:[14200347]'
 ---- unexpected signal (6) ----
iFailed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
Failed to read build ID for //anon
    #0 0x565358f6666e in child_test_sig_handler builtin-test.c:311
    #1 0x7f29ce849df0 in __restore_rt libc_sigaction.c:0
    #2 0x7f29ce89e95c in __pthread_kill_implementation pthread_kill.c:44
    #3 0x7f29ce849cc2 in raise raise.c:27
    #4 0x7f29ce8324ac in abort abort.c:81
    #5 0x565358f662d4 in check_leaks builtin-test.c:226
    #6 0x565358f6682e in run_test_child builtin-test.c:344
    torvalds#7 0x565358ef7121 in start_command run-command.c:128
    torvalds#8 0x565358f67273 in start_test builtin-test.c:545
    torvalds#9 0x565358f6771d in __cmd_test builtin-test.c:647
    torvalds#10 0x565358f682bd in cmd_test builtin-test.c:849
    torvalds#11 0x565358ee5ded in run_builtin perf.c:349
    torvalds#12 0x565358ee6085 in handle_internal_command perf.c:401
    torvalds#13 0x565358ee61de in run_argv perf.c:448
    torvalds#14 0x565358ee6527 in main perf.c:555
    torvalds#15 0x7f29ce833ca8 in __libc_start_call_main libc_start_call_main.h:74
    torvalds#16 0x7f29ce833d65 in __libc_start_main@@GLIBC_2.34 libc-start.c:128
    torvalds#17 0x565358e391c1 in _start perf[851c1]
  7: PERF_RECORD_* events & perf_sample fields                       : FAILED!
```

After:
```
$ perf test 7
  7: PERF_RECORD_* events & perf_sample fields                       : Skip (permissions)
```

Fixes: 16d00fe ("perf tests: Move test__PERF_RECORD into separate object")
Signed-off-by: Ian Rogers <[email protected]>
Tested-by: Arnaldo Carvalho de Melo <[email protected]>
Cc: Adrian Hunter <[email protected]>
Cc: Alexander Shishkin <[email protected]>
Cc: Athira Rajeev <[email protected]>
Cc: Chun-Tse Shao <[email protected]>
Cc: Howard Chu <[email protected]>
Cc: Ingo Molnar <[email protected]>
Cc: James Clark <[email protected]>
Cc: Jiri Olsa <[email protected]>
Cc: Kan Liang <[email protected]>
Cc: Mark Rutland <[email protected]>
Cc: Namhyung Kim <[email protected]>
Cc: Peter Zijlstra <[email protected]>
Signed-off-by: Arnaldo Carvalho de Melo <[email protected]>
Signed-off-by: Sasha Levin <[email protected]>
thestinger pushed a commit that referenced this pull request Nov 16, 2025
[ Upstream commit bbf0c98 ]

net/bridge/br_private.h:1627 suspicious rcu_dereference_protected() usage!
other info that might help us debug this:

rcu_scheduler_active = 2, debug_locks = 1
7 locks held by socat/410:
 #0: ffff88800d7a9c90 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0
 #1: ffffffff9a779900 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x62/0x1830
 [..]
 #6: ffffffff9a779900 (rcu_read_lock){....}-{1:3}, at: nf_hook.constprop.0+0x8a/0x440

Call Trace:
 lockdep_rcu_suspicious.cold+0x4f/0xb1
 br_vlan_fill_forward_path_pvid+0x32c/0x410 [bridge]
 br_fill_forward_path+0x7a/0x4d0 [bridge]

Use to correct helper, non _rcu variant requires RTNL mutex.

Fixes: bcf2766 ("net: bridge: resolve forwarding path for VLAN tag actions in bridge devices")
Signed-off-by: Eric Woudstra <[email protected]>
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Sasha Levin <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants