Skip to content

build: Bump setuptools to 80.10.2#1830

Merged
chtruong814 merged 1 commit intomainfrom
chtruong/bump-setuptools
Jan 27, 2026
Merged

build: Bump setuptools to 80.10.2#1830
chtruong814 merged 1 commit intomainfrom
chtruong/bump-setuptools

Conversation

@chtruong814
Copy link
Copy Markdown
Contributor

@chtruong814 chtruong814 commented Jan 26, 2026

What does this PR do ?

build: Bump setuptools to 80.10.2

Setuptools released this just yesterday. We need this to address the CVE associated with wheel because setuptools vendors this dependency. So even though we bumped wheel in the uv lock file, it's still getting flagged.

Issues

List issues that this PR closes (syntax):

Usage

  • You can potentially add a usage example below
# Add a code snippet demonstrating how to use this

Before your PR is "Ready for review"

Pre checks:

  • Make sure you read and followed Contributor guidelines
  • Did you write any new necessary tests?
  • Did you run the unit tests and functional tests locally? Visit our Testing Guide for how to run tests
  • Did you add or update any necessary documentation? Visit our Document Development Guide for how to write, build and test the docs.

Additional Information

  • ...

Summary by CodeRabbit

  • Chores
    • Updated build tool dependency to the latest patch version.

✏️ Tip: You can customize this high-level summary in your review settings.

@chtruong814 chtruong814 requested a review from a team as a code owner January 26, 2026 19:04
@chtruong814 chtruong814 added CI:L1 Run doctests, unit tests, and functional tests r0.5.0 and removed CI:L1 Run doctests, unit tests, and functional tests labels Jan 26, 2026
@chtruong814 chtruong814 added the CI:L1 Run doctests, unit tests, and functional tests label Jan 26, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jan 26, 2026

📝 Walkthrough

Walkthrough

The setuptools override-dependencies constraint in pyproject.toml is updated from version >=80.10.1 to >=80.10.2. This is a minor version bump of the lower bound requirement with no functional or control flow changes.

Changes

Cohort / File(s) Summary
Dependency Version Update
pyproject.toml
Updated setuptools version constraint in override-dependencies from >=80.10.1 to >=80.10.2

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested labels

CI:L1

Suggested reviewers

  • terrykong
  • yuki-97
🚥 Pre-merge checks | ✅ 4
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely summarizes the main change: bumping setuptools to version 80.10.2, which matches the single file modification in pyproject.toml.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Test Results For Major Changes ✅ Passed This PR contains only a minor patch-level version bump of setuptools in pyproject.toml to address a security vulnerability, affecting only a single dependency constraint with no runtime code impact.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

thomasdhc
thomasdhc previously approved these changes Jan 26, 2026
@chtruong814 chtruong814 force-pushed the chtruong/bump-setuptools branch from c7e8227 to d9c7086 Compare January 26, 2026 19:53
@chtruong814 chtruong814 added CI:L1 Run doctests, unit tests, and functional tests and removed CI:L1 Run doctests, unit tests, and functional tests labels Jan 26, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
@chtruong814 chtruong814 force-pushed the chtruong/bump-setuptools branch from d9c7086 to 1e75884 Compare January 26, 2026 19:58
@chtruong814 chtruong814 added CI:L1 Run doctests, unit tests, and functional tests and removed CI:L1 Run doctests, unit tests, and functional tests labels Jan 26, 2026
@chtruong814 chtruong814 enabled auto-merge (squash) January 26, 2026 22:38
@chtruong814 chtruong814 merged commit 8a52017 into main Jan 27, 2026
83 of 90 checks passed
@chtruong814 chtruong814 deleted the chtruong/bump-setuptools branch January 27, 2026 17:22
chtruong814 added a commit that referenced this pull request Jan 27, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
hijkzzz pushed a commit to hijkzzz/RL that referenced this pull request Jan 30, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Signed-off-by: jianh <jianh@nvidia.com>
yfw pushed a commit that referenced this pull request Feb 9, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Signed-off-by: Yi-Fu Wu <yifu.wu@gmail.com>
xavier-owkin pushed a commit to owkin/Owkin-NeMo-RL that referenced this pull request Feb 10, 2026
yuanhangsu1986 pushed a commit to yuanhangsu1986/RL-Nemontron-Edge-Omni that referenced this pull request Feb 12, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Signed-off-by: yuanhangs <yuanhangs@nvidia.com>
yuanhangsu1986 pushed a commit to yuanhangsu1986/RL-Nemontron-Edge-Omni that referenced this pull request Feb 21, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Signed-off-by: yuanhangs <yuanhangs@nvidia.com>
seonjinn pushed a commit that referenced this pull request Mar 8, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
seonjinn pushed a commit that referenced this pull request Mar 8, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
seonjinn pushed a commit that referenced this pull request Mar 9, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Aniketsy pushed a commit to Aniketsy/RL that referenced this pull request Mar 29, 2026
Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Signed-off-by: Aniket Singh Yadav <singhyadavaniket43@gmail.com>
avenkateshha pushed a commit to avenkateshha/RL that referenced this pull request Apr 10, 2026
…-NeMo#1831)

Signed-off-by: Charlie Truong <chtruong@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI:L1 Run doctests, unit tests, and functional tests r0.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants