cibuildwheel 4.3.1__tar.gz → 4.3.2__tar.gz

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cibuildwheel
-Version: 4.3.1
+Version: 4.3.2
 Summary: Build Python wheels on CI with minimal configuration.
 Project-URL: Changelog, https://github.com/pypa/cibuildwheel#changelog
 Project-URL: Documentation, https://cibuildwheel.pypa.io
@@ -136,7 +136,7 @@ jobs:
       - uses: actions/setup-python@v6
 
       - name: Install cibuildwheel
-        run: python -m pip install cibuildwheel==4.3.1
+        run: python -m pip install cibuildwheel==4.3.2
 
       - name: Build wheels
         run: python -m cibuildwheel --output-dir wheelhouse
@@ -278,6 +278,12 @@ Changelog
 
 <!-- [[[cog from readme_changelog import mini_changelog; print(mini_changelog()) ]]] -->
 
+### v4.3.2
+
+_20 October 2026_
+
+- 🔐 Updates our dependency pins to certifi==2026.10.19, following the [eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/). Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.
+
 ### v4.3.1
 
 _10 October 2026_
@@ -322,29 +328,7 @@ _4 August 2026_
 - 💼 Updates CI action pins (#2948, #2954)
 - 🧪 Uses pp311 for the abi3 test, and deletes `test_overridden_pip_constraint`, which is not necessary since #2583 (#2956, #2957)
 
-### v4.1.1
-
-_24 July 2026_
-
-- ✨ Adds `pyodide-build` as a separate [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend), now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
-- 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in `pinned_docker_images.cfg`. (#2915)
-- 🐛 Fixes platform-specific [`test-runtime`](https://cibuildwheel.pypa.io/en/stable/options/#test-runtime) environment variables (e.g. `CIBW_TEST_RUNTIME_ANDROID`) not being honored (#2941)
-- 🐛 Fixes quoting of [`test-requires`](https://cibuildwheel.pypa.io/en/stable/options/#test-requires) and [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) so PEP 508 specifiers containing spaces work (#2913)
-- 🐛 Makes [`archs`](https://cibuildwheel.pypa.io/en/stable/options/#archs) parsing case-insensitive and platform-aware, so e.g. `arm64` works on Windows (#2920)
-- 🐛 Uses an absolute path for the `{project}` placeholder in [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2934)
-- 🐛 Validates the [`pyodide-version`](https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version) option against the build identifier with a clear error (#2925)
-- 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from `.tar.bz2` to `.tar.gz` (#2939)
-- 🐛 Makes a matching `python3-config` available in the build and test venvs on macOS (#2922)
-- 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
-- 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
-- 🛠 Drops the `orjson` dependency, no longer used by mypy 2+ (#2923)
-- 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
-- 📚 Adds the missing `cp314-pyodide_wasm32` entry to the build identifier table (#2947)
-- 📚 Removes outdated notes about the `pip wheel` build frontend and ClearLinux (#2926)
-- 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
-- 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)
-
-<!-- [[[end]]] (sum: s/G/aNqXhb) -->
+<!-- [[[end]]] (sum: WtbQqSi3CC) -->
 
 ---
 

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/README.md

@@ -99,7 +99,7 @@ jobs:
       - uses: actions/setup-python@v6
 
       - name: Install cibuildwheel
-        run: python -m pip install cibuildwheel==4.3.1
+        run: python -m pip install cibuildwheel==4.3.2
 
       - name: Build wheels
         run: python -m cibuildwheel --output-dir wheelhouse
@@ -241,6 +241,12 @@ Changelog
 
 <!-- [[[cog from readme_changelog import mini_changelog; print(mini_changelog()) ]]] -->
 
+### v4.3.2
+
+_20 October 2026_
+
+- 🔐 Updates our dependency pins to certifi==2026.10.19, following the [eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/). Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.
+
 ### v4.3.1
 
 _10 October 2026_
@@ -285,29 +291,7 @@ _4 August 2026_
 - 💼 Updates CI action pins (#2948, #2954)
 - 🧪 Uses pp311 for the abi3 test, and deletes `test_overridden_pip_constraint`, which is not necessary since #2583 (#2956, #2957)
 
-### v4.1.1
-
-_24 July 2026_
-
-- ✨ Adds `pyodide-build` as a separate [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend), now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
-- 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in `pinned_docker_images.cfg`. (#2915)
-- 🐛 Fixes platform-specific [`test-runtime`](https://cibuildwheel.pypa.io/en/stable/options/#test-runtime) environment variables (e.g. `CIBW_TEST_RUNTIME_ANDROID`) not being honored (#2941)
-- 🐛 Fixes quoting of [`test-requires`](https://cibuildwheel.pypa.io/en/stable/options/#test-requires) and [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) so PEP 508 specifiers containing spaces work (#2913)
-- 🐛 Makes [`archs`](https://cibuildwheel.pypa.io/en/stable/options/#archs) parsing case-insensitive and platform-aware, so e.g. `arm64` works on Windows (#2920)
-- 🐛 Uses an absolute path for the `{project}` placeholder in [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2934)
-- 🐛 Validates the [`pyodide-version`](https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version) option against the build identifier with a clear error (#2925)
-- 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from `.tar.bz2` to `.tar.gz` (#2939)
-- 🐛 Makes a matching `python3-config` available in the build and test venvs on macOS (#2922)
-- 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
-- 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
-- 🛠 Drops the `orjson` dependency, no longer used by mypy 2+ (#2923)
-- 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
-- 📚 Adds the missing `cp314-pyodide_wasm32` entry to the build identifier table (#2947)
-- 📚 Removes outdated notes about the `pip wheel` build frontend and ClearLinux (#2926)
-- 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
-- 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)
-
-<!-- [[[end]]] (sum: s/G/aNqXhb) -->
+<!-- [[[end]]] (sum: WtbQqSi3CC) -->
 
 ---
 

cibuildwheel-4.3.2/cibuildwheel/__init__.py

@@ -0,0 +1 @@
+__version__ = "4.3.2"

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-pyodide312.txt

@@ -15,7 +15,7 @@ cattrs==26.2.1
     # via
     #   pyodide-build
     #   pyodide-lock
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-pyodide313.txt

@@ -15,7 +15,7 @@ cattrs==26.2.1
     # via
     #   pyodide-build
     #   pyodide-lock
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-pyodide314.txt

@@ -15,7 +15,7 @@ cattrs==26.2.1
     # via
     #   pyodide-build
     #   pyodide-lock
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-pyodide315.txt

@@ -15,7 +15,7 @@ cattrs==26.2.1
     # via
     #   pyodide-build
     #   pyodide-lock
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python310.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python311.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python312.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python313.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python314.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python315.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints-python39.txt

@@ -16,7 +16,7 @@ build==1.4.4
     # via -r cibuildwheel/resources/constraints.in
 cattrs==25.3.0
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/cibuildwheel/resources/constraints.txt

@@ -16,7 +16,7 @@ build==1.6.1
     # via -r cibuildwheel/resources/constraints.in
 cattrs==26.2.1
     # via requests-cache
-certifi==2026.7.22
+certifi==2026.10.19
     # via requests
 charset-normalizer==3.5.2
     # via requests

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/docs/changelog.md

@@ -5,6 +5,12 @@ ref: changelog
 
 # Changelog
 
+### v4.3.2
+
+_20 October 2026_
+
+- 🔐 Updates our dependency pins to certifi==2026.10.19, following the [eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/). Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.
+
 ### v4.3.1
 
 _10 October 2026_

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/docs/faq.md

@@ -158,7 +158,7 @@ There are two suggested methods for keeping cibuildwheel up to date that instead
 If you use GitHub Actions for builds, you can use cibuildwheel as an action:
 
 ```yaml
-uses: pypa/cibuildwheel@v4.3.1
+uses: pypa/cibuildwheel@v4.3.2
 ```
 
 This is a composite step that just runs cibuildwheel using pipx. You can set command-line options as `with:` parameters, and use `env:` as normal.
@@ -183,7 +183,7 @@ The second option, and the only one that supports other CI systems, is using a `
 
 ```bash
 # requirements-cibw.txt
-cibuildwheel==4.3.1
+cibuildwheel==4.3.2
 ```
 
 Then your install step would have `python -m pip install -r requirements-cibw.txt` in it. Your `.github/dependabot.yml` file could look like this:
@@ -402,7 +402,7 @@ Solutions to this vary, but the simplest is to use pipx:
 # most runners have pipx preinstalled, but in case you don't
 python3 -m pip install pipx
 
-pipx run cibuildwheel==4.3.1 --output-dir wheelhouse
+pipx run cibuildwheel==4.3.2 --output-dir wheelhouse
 pipx run twine upload wheelhouse/*.whl
 ```
 

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/azure-pipelines-minimal.yml

@@ -6,7 +6,7 @@ jobs:
     - bash: |
         set -o errexit
         python3 -m pip install --upgrade pip
-        pip3 install cibuildwheel==4.3.1
+        pip3 install cibuildwheel==4.3.2
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels
@@ -20,7 +20,7 @@ jobs:
     - bash: |
         set -o errexit
         python3 -m pip install --upgrade pip
-        python3 -m pip install cibuildwheel==4.3.1
+        python3 -m pip install cibuildwheel==4.3.2
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels
@@ -34,7 +34,7 @@ jobs:
     - bash: |
         set -o errexit
         python -m pip install --upgrade pip
-        pip install cibuildwheel==4.3.1
+        pip install cibuildwheel==4.3.2
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/circleci-minimal.yml

@@ -11,7 +11,7 @@ jobs:
       - run:
           name: Build the Linux wheels.
           command: |
-            python3 -m pip install --user cibuildwheel==4.3.1
+            python3 -m pip install --user cibuildwheel==4.3.2
             cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/
@@ -28,7 +28,7 @@ jobs:
       - run:
           name: Build the Linux aarch64 wheels.
           command: |
-            python3 -m pip install --user cibuildwheel==4.3.1
+            python3 -m pip install --user cibuildwheel==4.3.2
             python3 -m cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/
@@ -44,7 +44,7 @@ jobs:
           name: Build the OS X wheels.
           command: |
             sudo softwareupdate --install-rosetta --agree-to-license  # for x86_64/universal2 tests
-            pip3 install cibuildwheel==4.3.1
+            pip3 install cibuildwheel==4.3.2
             cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/github-deploy.yml

@@ -53,7 +53,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v4.3.1
+        uses: pypa/cibuildwheel@v4.3.2
         env:
           CIBW_PLATFORM: ${{ matrix.platform || 'auto' }}
           CIBW_ARCHS: ${{ matrix.archs || 'auto' }}

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/github-minimal.yml

@@ -17,7 +17,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v4.3.1
+        uses: pypa/cibuildwheel@v4.3.2
         # env:
         #   CIBW_SOME_OPTION: value
         #   ...

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/github-pipx.yml

@@ -17,7 +17,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        run: pipx run cibuildwheel==4.3.1
+        run: pipx run cibuildwheel==4.3.2
 
       - uses: actions/upload-artifact@v4
         with:

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/github-with-qemu.yml

@@ -23,7 +23,7 @@ jobs:
           platforms: all
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v4.3.1
+        uses: pypa/cibuildwheel@v4.3.2
         env:
           # configure cibuildwheel on Linux to build native archs ('auto'),
           # and to split the remaining architectures between the x86_64 and

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/gitlab-minimal.yml

@@ -12,7 +12,7 @@ linux:
     DOCKER_TLS_CERTDIR: ""
   script:
     - curl -sSL https://get.docker.com/ | sh
-    - python -m pip install cibuildwheel==4.3.1
+    - python -m pip install cibuildwheel==4.3.2
     - cibuildwheel --output-dir wheelhouse
   artifacts:
     paths:
@@ -23,7 +23,7 @@ windows:
   before_script:
     - choco install python -y --allow-downgrade --version 3.12.4
     - choco install git.install -y
-    - py -m pip install cibuildwheel==4.3.1
+    - py -m pip install cibuildwheel==4.3.2
   script:
     - py -m cibuildwheel --output-dir wheelhouse --platform windows
   artifacts:
@@ -35,7 +35,7 @@ windows:
 macos:
   image: macos-14-xcode-15
   before_script:
-    - python3 -m pip install cibuildwheel==4.3.1
+    - python3 -m pip install cibuildwheel==4.3.2
   script:
     - python3 -m cibuildwheel --output-dir wheelhouse
   artifacts:

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/examples/gitlab-with-qemu.yml

@@ -14,7 +14,7 @@ linux:
     - curl -sSL https://get.docker.com/ | sh
     # Warning: This is extremely slow, be careful with how many wheels you build
     - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-    - python -m pip install cibuildwheel==4.3.1
+    - python -m pip install cibuildwheel==4.3.2
     # Assuming your CI runner's default architecture is x86_64...
     - cibuildwheel --output-dir wheelhouse --platform linux --archs aarch64
   artifacts:

{cibuildwheel-4.3.1 → cibuildwheel-4.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cibuildwheel"
-version = "4.3.1"
+version = "4.3.2"
 description = "Build Python wheels on CI with minimal configuration."
 readme = "README.md"
 license = "BSD-2-Clause"

cibuildwheel-4.3.1/cibuildwheel/__init__.py

@@ -1 +0,0 @@
-__version__ = "4.3.1"