Skip to content

build(deps): bump vcs-versioning from 1.1.1 to 2.2.0 - #35

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/vcs-versioning-2.2.0
Closed

build(deps): bump vcs-versioning from 1.1.1 to 2.2.0#35
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/vcs-versioning-2.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown

Bumps vcs-versioning from 1.1.1 to 2.2.0.

Release notes

Sourced from vcs-versioning's releases.

vcs-versioning v2.2.0

Added

  • Restore Python 3.8 and 3.9 support, re-enabling use as a build dependency for projects like scikit-build that still support these versions. (#1445)

Miscellaneous

  • Move PKG-INFO discovery tests to setuptools-scm where the entry points are registered. (#1446)

vcs-versioning v2.1.2

Fixed

  • Fix MetadataWorkdir crash when using custom tag_regex — stored tags are already parsed version strings and no longer re-parsed through the tag regex. (#1439)

vcs-versioning v2.1.1

Fixed

  • Fix spurious DeprecationWarning for tag_regex when using default value via get_version(). (#1434)

vcs-versioning v2.1.0

Added

  • Add VcsEnvironment.build_config_from_pyproject, build_config_from_data, and pyproject_tool_names methods for canonical env-first configuration creation. (#1424)

Fixed

  • Fix DeprecationWarning leak in pretend API by ensuring all public APIs attach VcsEnvironment to Configuration before accessing env-dependent properties. (#1424)
  • Fix fallback discovery so an unprocessed .git_archival.txt no longer shadows a valid PKG-INFO in PyPI sdists. (#1431)

vcs-versioning v2.0.1

Fixed

  • Update CI to use PyPy 3.11 as cryptography has no PyPy 3.10 build available (#1421)

vcs-versioning v2.0.0

Removed

  • Remove module-level accessor functions from vcs_versioning.overrides: get_active_overrides(), get_debug_level(), get_subprocess_timeout(), get_hg_command(), get_source_date_epoch(), and source_epoch_or_utc_now(). Use VcsEnvironment.from_env() or config.env instead. External consumer audit confirmed no downstream usage of these functions. (#removed-accessors)

Added

  • Introduce VcsEnvironment and the chained API (env → config → workdir → version) for explicit runtime settings. Add Configuration.env, Configuration.discover_workdir(), and the vcs_versioning.discover_workdir entry-point group. Integrators can now use VcsEnvironment.from_env("MY_TOOL").build_config() to thread timeout, hg command, and other settings without ambient globals. (#chained-api)
  • Warn when version_file or write_to targets a file that is tracked by version control. A tracked version file causes git describe --dirty to report a dirty tree after builds rewrite it, leading to unexpected dev-version bumps on tag checkouts. The warning advises removing the file from VCS and adding it to the ignore file. (#468)
  • Add native Jujutsu (jj) VCS backend with version inference, file finder, and strict error when .jj/ is detected but jj is not installed. The SETUPTOOLS_SCM_DISABLE_JJ=1 environment variable can be used to opt out of jj discovery in environments where jj is not available. (#1070)
  • Add no-local-version-strict local scheme that combines no-local-version and fail-on-uncommitted-changes in a single entry-point. When the working tree is dirty the build fails with DirtyWorkingTreeError; otherwise the local segment is stripped, producing PyPI-safe versions suitable for release builds. (#1238)
  • Modernize Mercurial backend to use latesttag(pattern) template instead of manual tag discovery with revsets, reducing subprocess calls and enabling tag.prefix/tag.strict support for Mercurial repositories. (#1335)
  • Add tag.prefix and tag.strict configuration options for controlling which VCS tags are considered version tags. tag.prefix filters and strips a literal prefix (for monorepo tag schemes like hatchling-v1.0.0). tag.strict (tri-state) requires tags to contain at least one dot, rejecting non-version tags like event markers. Both compose to generate the git describe --match glob automatically. (#1411)

... (truncated)

Commits
  • a705891 Merge pull request #1448 from pypa/release/main
  • 630448e Prepare release: setuptools-scm v10.2.0, vcs-versioning v2.2.0
  • aaf4950 Merge pull request #1445 from RonnyPfannschmidt/python-legacy
  • dd60bf9 Merge pull request #1447 from RonnyPfannschmidt/fix/1446-move-pkginfo-tests
  • 535f5ff fix: move PKG-INFO discovery tests to setuptools-scm (#1446)
  • 3546a0e feat: restore Python 3.8 and 3.9 support
  • 0cde123 Merge pull request #1443 from pypa/release/main
  • 51bc391 Prepare release: vcs-versioning v2.1.2
  • 310f3c3 Merge pull request #1442 from RonnyPfannschmidt/fix/1439-metadata-workdir-cus...
  • b7b70a8 fix: don't re-parse stored tags through tag_regex in MetadataWorkdir (#1439)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vcs-versioning](https://github.com/pypa/setuptools-scm) from 1.1.1 to 2.2.0.
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@vcs-versioning-v1.1.1...vcs-versioning-v2.2.0)

---
updated-dependencies:
- dependency-name: vcs-versioning
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Author

Superseded by #37.

@dependabot dependabot Bot closed this Jul 6, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/vcs-versioning-2.2.0 branch July 6, 2026 01:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants