From a504eaf72a94e0ed1393570b7676e915864105b0 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 5 Aug 2026 20:40:23 +0000 Subject: [PATCH 1/3] Initial plan From 61d7f6a6ebb2f92c96e050a86a4555e52dd58314 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 5 Aug 2026 20:49:27 +0000 Subject: [PATCH 2/3] fix(python): update setuptools to 83.0.0 Co-authored-by: l0lawrence <100643745+l0lawrence@users.noreply.github.com> --- .../templates/packaging_templates/pyproject.toml.jinja2 | 2 +- packages/http-client-python/generator/setup.py | 2 +- .../generated/azure/authentication-union/pyproject.toml | 2 +- .../tests/unit/test_pyproject_keep_fields.py | 5 +++++ 4 files changed, 8 insertions(+), 3 deletions(-) diff --git a/packages/http-client-python/generator/pygen/codegen/templates/packaging_templates/pyproject.toml.jinja2 b/packages/http-client-python/generator/pygen/codegen/templates/packaging_templates/pyproject.toml.jinja2 index 68915429341..5f63b5a2a03 100644 --- a/packages/http-client-python/generator/pygen/codegen/templates/packaging_templates/pyproject.toml.jinja2 +++ b/packages/http-client-python/generator/pygen/codegen/templates/packaging_templates/pyproject.toml.jinja2 @@ -5,7 +5,7 @@ {% endif %} [build-system] -requires = ["setuptools>=77.0.3", "wheel"] +requires = ["setuptools>=83.0.0", "wheel"] build-backend = "setuptools.build_meta" [project] diff --git a/packages/http-client-python/generator/setup.py b/packages/http-client-python/generator/setup.py index cb08938e73d..a2e69410646 100644 --- a/packages/http-client-python/generator/setup.py +++ b/packages/http-client-python/generator/setup.py @@ -52,6 +52,6 @@ "Jinja2==3.1.6", "PyYAML==6.0.1", "tomli==2.0.1", - "setuptools==75.3.2", + "setuptools==83.0.0", ], ) diff --git a/packages/http-client-python/tests/generated/azure/authentication-union/pyproject.toml b/packages/http-client-python/tests/generated/azure/authentication-union/pyproject.toml index c31cd4a1a76..58165878495 100644 --- a/packages/http-client-python/tests/generated/azure/authentication-union/pyproject.toml +++ b/packages/http-client-python/tests/generated/azure/authentication-union/pyproject.toml @@ -6,7 +6,7 @@ # -------------------------------------------------------------------------- [build-system] -requires = ["setuptools>=77.0.3", "wheel"] +requires = ["setuptools>=83.0.0", "wheel"] build-backend = "setuptools.build_meta" [project] diff --git a/packages/http-client-python/tests/unit/test_pyproject_keep_fields.py b/packages/http-client-python/tests/unit/test_pyproject_keep_fields.py index b58c4ef6000..a74ecbabf9f 100644 --- a/packages/http-client-python/tests/unit/test_pyproject_keep_fields.py +++ b/packages/http-client-python/tests/unit/test_pyproject_keep_fields.py @@ -213,6 +213,11 @@ def _render_pyproject(option_value, existing_content): """ +def test_render_requires_patched_setuptools(): + parsed = _render_pyproject("", _EXISTING) + assert parsed["build-system"]["requires"] == ["setuptools>=83.0.0", "wheel"] + + def test_render_keeps_selected_fields(): parsed = _render_pyproject("authors,description", _EXISTING)["project"] # Selected fields are preserved from the existing file. From 38a2f664265bda583715703e8b230826de033646 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 5 Aug 2026 22:32:11 +0000 Subject: [PATCH 3/3] chore: add Python dependency changelog Co-authored-by: l0lawrence <100643745+l0lawrence@users.noreply.github.com> --- .chronus/changes/update-python-setuptools-2026-8-5.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 .chronus/changes/update-python-setuptools-2026-8-5.md diff --git a/.chronus/changes/update-python-setuptools-2026-8-5.md b/.chronus/changes/update-python-setuptools-2026-8-5.md new file mode 100644 index 00000000000..ac116dd827e --- /dev/null +++ b/.chronus/changes/update-python-setuptools-2026-8-5.md @@ -0,0 +1,7 @@ +--- +changeKind: dependencies +packages: + - "@typespec/http-client-python" +--- + +Update setuptools to 83.0.0 to address CVE-2026-59890.