Merge branch 'main' into fix-config-error

Author: sepehr-rs

.mailmap

@@ -50,3 +50,6 @@ Stephan Erb         <[email protected]>                  <[email protected]
 Victor Stinner      <[email protected]>              <[email protected]>
 Yoval P                                                     <[email protected]>
 Zhiping Deng                                                <[email protected]>
+dkjsone              <[email protected]>   user <empty>
+Meet Vasita          <[email protected]>               meet-vasita <[email protected]>
+Meet Vasita          <[email protected]>               Meet_Vasita <[email protected]>

AUTHORS.txt

@@ -24,6 +24,7 @@ albertg
 Alberto Sottile
 Aleks Bunin
 Ales Erjavec
+Alessandro Molina
 Alethea Flowers
 Alex Gaynor
 Alex Grönholm
@@ -37,6 +38,7 @@ Alexandre Conrad
 Alexey Popravka
 Aleš Erjavec
 Alli
+Aman
 Ami Fischman
 Ananya Maiti
 Anatoly Techtonik
@@ -56,6 +58,7 @@ Aniruddha Basak
 Anish Tambe
 Anrs Hu
 Anthony Sottile
+Antoine Lambert
 Antoine Musso
 Anton Ovchinnikov
 Anton Patrushev
@@ -236,6 +239,7 @@ Dimitri Merejkowsky
 Dimitri Papadopoulos
 Dimitri Papadopoulos Orfanos
 Dirk Stolle
+dkjsone
 Dmitry Gladkov
 Dmitry Volodin
 Domen Kožar
@@ -347,6 +351,7 @@ Igor Sobreira
 Ikko Ashimine
 Ilan Schnell
 Illia Volochii
+Ilya Abdolmanafi
 Ilya Baryshev
 Inada Naoki
 Ionel Cristian Mărieș
@@ -482,6 +487,7 @@ luojiebin
 luz.paz
 László Kiss Kollár
 M00nL1ght
+MajorTanya
 Malcolm Smith
 Marc Abramowitz
 Marc Tamlyn
@@ -498,6 +504,7 @@ Martin Pavlasek
 Masaki
 Masklinn
 Matej Stuchlik
+Mateusz Sokół
 Mathew Jennings
 Mathieu Bridon
 Mathieu Kniewallner
@@ -525,6 +532,7 @@ mayeut
 mbaluna
 Md Sujauddin Sekh
 mdebi
+Meet Vasita
 memoselyk
 meowmeowcat
 Michael
@@ -714,6 +722,7 @@ Shivansh-007
 Shixian Sheng
 Shlomi Fish
 Shovan Maity
+Shubham Nagure
 Simeon Visser
 Simon Cross
 Simon Pichugin

NEWS.rst

@@ -9,6 +9,70 @@
 
 .. towncrier release notes start
 
+25.3 (2025-10-24)
+=================
+
+Deprecations and Removals
+-------------------------
+
+- Remove support for the legacy ``setup.py develop`` editable method in setuptools
+  editable installs; setuptools >= 64 is now required. (`#11457 <https://github.com/pypa/pip/issues/11457>`_)
+- Remove the deprecated ``--global-option`` and ``--build-option``.
+  ``--config-setting`` is now the only way to pass options to the build backend. (`#11859 <https://github.com/pypa/pip/issues/11859>`_)
+- Deprecate the ``PIP_CONSTRAINT`` environment variable for specifying build
+  constraints.
+
+  Use the ``--build-constraint`` option or the ``PIP_BUILD_CONSTRAINT`` environment variable
+  instead. When build constraints are used, ``PIP_CONSTRAINT`` no longer affects isolated build
+  environments. To enable this behavior without specifying any build constraints, use
+  ``--use-feature=build-constraint``. (`#13534 <https://github.com/pypa/pip/issues/13534>`_)
+- Remove support for non-standard legacy wheel filenames. (`#13581 <https://github.com/pypa/pip/issues/13581>`_)
+- Remove support for the deprecated ``setup.py bdist_wheel`` mechanism. Consequently,
+  ``--use-pep517`` is now always on, and ``--no-use-pep517`` has been removed. (`#6334 <https://github.com/pypa/pip/issues/6334>`_)
+
+Features
+--------
+
+- When :pep:`658` metadata is available, full distribution files are no longer downloaded when using ``pip lock`` or ``pip install --dry-run``. (`#12603 <https://github.com/pypa/pip/issues/12603>`_)
+- Add support for installing an editable requirement written as a Direct URL (``PackageName @ URL``). (`#13495 <https://github.com/pypa/pip/issues/13495>`_)
+- Add support for build constraints via the ``--build-constraint`` option. This
+  allows constraining the versions of packages used during the build process
+  (e.g., setuptools) without affecting the final installation. (`#13534 <https://github.com/pypa/pip/issues/13534>`_)
+- On ``ResolutionImpossible`` errors, include a note about causes with no candidates. (`#13588 <https://github.com/pypa/pip/issues/13588>`_)
+- Building pip itself from source now uses flit-core instead of setuptools.
+  This does not affect how pip installs or builds packages you use. (`#13473 <https://github.com/pypa/pip/issues/13473>`_)
+
+Bug Fixes
+---------
+
+- Handle malformed ``Version`` metadata entries and
+  show a sensible error message instead of crashing. (`#13443 <https://github.com/pypa/pip/issues/13443>`_)
+- Permit spaces between a filepath and extras in an install requirement. (`#13523 <https://github.com/pypa/pip/issues/13523>`_)
+- Ensure the self-check files in the cache have the same permissions as the rest of the cache. (`#13528 <https://github.com/pypa/pip/issues/13528>`_)
+- Avoid concurrency issues and improve performance when caching locally built wheels,
+  especially when the temporary build directory is on a different filesystem than the cache.
+  The wheel directory passed to the build backend is now a temporary subdirectory inside
+  the cache directory. (`#13540 <https://github.com/pypa/pip/issues/13540>`_)
+- Include relevant user-supplied constraints in logs when reporting dependency conflicts. (`#13545 <https://github.com/pypa/pip/issues/13545>`_)
+- Fix a regression in configuration parsing that was turning a single value
+  into a list and thus leading to a validation error. (`#13548 <https://github.com/pypa/pip/issues/13548>`_)
+- For Python versions that do not support :pep:`706`, pip will now raise an installation error for a
+  source distribution when it includes a symlink that points outside the source distribution archive. (`#13550 <https://github.com/pypa/pip/issues/13550>`_)
+- Prevent ``--user`` installs if ``site.ENABLE_USER_SITE`` is set to ``False``. (`#8794 <https://github.com/pypa/pip/issues/8794>`_)
+
+
+Vendored Libraries
+------------------
+
+- Upgrade certifi to 2025.10.5
+- Upgrade msgpack to 1.1.2
+- Upgrade platformdirs to 4.5.0
+- Upgrade requests to 2.32.5
+- Upgrade resolvelib to 1.2.1
+- Upgrade rich to 14.2.0
+- Upgrade tomli to 2.3.0
+- Upgrade truststore to 0.10.4
+
 25.2 (2025-07-30)
 =================