Skip to content

chore(deps-dev): bump hatchling from 1.27.0 to 1.32.0 - #3661

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/hatchling-1.32.0
Open

chore(deps-dev): bump hatchling from 1.27.0 to 1.32.0#3661
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/hatchling-1.32.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown

Bumps hatchling from 1.27.0 to 1.32.0.

Release notes

Sourced from hatchling's releases.

Hatchling v1.32.0

Changed:

  • Bump default core metadata version to 2.5

  • Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

  • The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

  • Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.

  • Reject project.readme paths that are absolute or resolve outside of the project directory.

Hatchling v1.31.0

Fixed

  • Only rewrite the shebang of a shared script when a Python shebang is present on the first line, preserving binary files and other content verbatim instead of dropping leading bytes.

Hatchling v1.30.1

Fixed

  • Default core metadata version kept at 2.4 until more tools support 2.5

Hatchling v1.29.0

Fixed:

  • Source Date Epoch no longer fails when set to date before 1980.

Hatchling v1.28.0

Changed:

  • Drop support for Python 3.9

Added:

  • Add sbom-files option and sbom_files build data to the wheel build target for including Software Bill of Materials files.
Commits
  • 558061c Fix ci (#2377)
  • bc6d1bc release Hatch v1.18.0 (#2376)
  • 8429e5d release Hatchling v1.32.0 (#2375)
  • 413b3a8 Prepare for release (#2374)
  • 4ccc9ea Bug Fix - fix CTRL-C behavior to correctly handle signals (#2369)
  • a885803 Add sources to enable other types of local dependencies (#2313)
  • ab3e000 Add --all flag to hatch build for building all workspace members (#2352)
  • bb90277 fix: Allow the ; private annotation in import-names/import-namespaces p...
  • 3a9d853 fix: prevent backward relative paths in readme (#2354)
  • c4dc4f8 test: Fix test expectations for metadata generated by flit-core (#2365)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 19, 2026 14:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026
@openai-sdks

openai-sdks Bot commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

OkTest Summary

Failed for Python SDK PR #3661.

View OkTest run #33028789915

SDK merge (dce01f8bb7e0) · head (401ce9d9b0fd) · base (79c588bb3a40) · OkTest (2b1bdfd25e98)

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f929764a5d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread uv.lock Outdated
[[package]]
name = "openai"
version = "3.3.0" # x-release-please-version
version = "3.3.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Restore the Release Please marker in the lockfile

When the next release is generated, removing # x-release-please-version prevents Release Please's generic extra-file updater from rewriting this embedded package version, even though release-please-config.json:61-64 explicitly registers uv.lock. The release will update pyproject.toml while leaving this value at 3.3.0, after which the release build's locked uv export/uv sync detects an outdated lockfile and blocks publishing; retain the marker after regenerating the lock.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/uv/hatchling-1.32.0 branch from f929764 to ccbae29 Compare August 19, 2026 15:22
@dependabot dependabot Bot changed the title build(deps-dev): bump hatchling from 1.26.3 to 1.32.0 build(deps-dev): bump hatchling from 1.27.0 to 1.32.0 Aug 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/hatchling-1.32.0 branch from ccbae29 to 04841b1 Compare August 19, 2026 16:27

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 04841b13a3

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pyproject.toml
# Also constrain editable/source builds performed by uv sync.
build-constraint-dependencies = [
"hatchling==1.27.0",
"hatchling==1.32.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Pin tomlkit in the isolated-build constraints

When uv sync --locked performs the editable/source build described above this list, Hatchling 1.32 resolves its new tomlkit runtime dependency in an isolated build environment, but tomlkit is absent from these constraints. As uv help sync states, --locked only asserts that uv.lock remains unchanged, so after another compatible tomlkit release clears the rolling cutoff, sync may execute that unreviewed version instead of the locked 0.15.1; add tomlkit==0.15.1 to the build constraints and build dependency group.

AGENTS.md reference: AGENTS.md:L21-L24

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/uv/hatchling-1.32.0 branch from 04841b1 to 00c4f67 Compare August 19, 2026 16:33
@dependabot dependabot Bot changed the title build(deps-dev): bump hatchling from 1.27.0 to 1.32.0 chore(deps-dev): bump hatchling from 1.27.0 to 1.32.0 Aug 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/hatchling-1.32.0 branch from 00c4f67 to b4e0485 Compare August 26, 2026 21:50
@github-actions

github-actions Bot commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Castiron custom code

✅ No new custom-code files detected.

34 mixed files remain; 0 existing customizations changed.

Compared 79c588bb3a40401ce9d9b0fd. Generated baselines verified.

34 existing customizations unchanged
  • api.md
  • scripts/castiron/README.md
  • scripts/castiron/custom_code_report.py
  • scripts/castiron/test_custom_code_report.py
  • src/openai/init.py
  • src/openai/_client.py
  • src/openai/resources/audio/transcriptions.py
  • src/openai/resources/audio/translations.py
  • src/openai/resources/beta/beta.py
  • src/openai/resources/beta/responses/responses.py
  • src/openai/resources/beta/threads/runs/runs.py
  • src/openai/resources/beta/threads/threads.py
  • src/openai/resources/chat/completions/completions.py
  • src/openai/resources/embeddings.py
  • src/openai/resources/files.py
  • src/openai/resources/realtime/realtime.py
  • src/openai/resources/responses/responses.py
  • src/openai/resources/uploads/uploads.py
  • src/openai/resources/vector_stores/file_batches.py
  • src/openai/resources/vector_stores/files.py
  • src/openai/resources/videos.py
  • src/openai/resources/webhooks/init.py
  • src/openai/resources/webhooks/webhooks.py
  • src/openai/types/chat/init.py
  • src/openai/types/chat/chat_completion_message_tool_call.py
  • src/openai/types/fine_tuning/fine_tuning_job_integration.py
  • src/openai/types/responses/init.py
  • src/openai/types/responses/response.py
  • src/openai/types/responses/response_function_web_search.py
  • src/openai/types/responses/response_function_web_search_param.py
  • src/openai/types/responses/tool.py
  • src/openai/types/responses/tool_param.py
  • src/openai/types/webhooks/init.py
  • tests/api_resources/test_videos.py

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 33028811283 --repo openai/openai-python \
  --name castiron-custom-code-33028811283-1 --dir /tmp/castiron-custom-code-33028811283-1
git apply --stat /tmp/castiron-custom-code-33028811283-1/custom-code.patch
cat /tmp/castiron-custom-code-33028811283-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 79c588bb3a40fb698c65e35c94ad96c0b44c30d4 401ce9d9b0fdc47de271e2f331b7c49026b599d3
python3 scripts/castiron/custom_code_report.py report \
  --base 79c588bb3a40fb698c65e35c94ad96c0b44c30d4 \
  --head 401ce9d9b0fdc47de271e2f331b7c49026b599d3 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-401ce9d9b0fd
cat /tmp/castiron-custom-code-401ce9d9b0fd/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

Bumps [hatchling](https://github.com/pypa/hatch) from 1.27.0 to 1.32.0.
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.27.0...hatchling-v1.32.0)

---
updated-dependencies:
- dependency-name: hatchling
  dependency-version: 1.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/hatchling-1.32.0 branch from b4e0485 to 401ce9d Compare August 27, 2026 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants