wheel-0.48.0 (Python module)

[Bruce Dubbs]

New minor version.

[Bruce Dubbs]

0.48.0 (2026-08-12)

• Added a --local-version option to wheel pack to add, replace, or remove a PEP 440 local version identifier from a wheel

• Fixed wheel convert unnecessarily upgrading compatible core metadata versions

• Fixed wheel tags producing invalid archives when retagging wheels whose entries use ZIP64, by dropping the central-directory ZIP64 extra field that is not valid in a local file header

• Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file write / path traversal)

[Bruce Dubbs]

Fixed at commit 88e6ea998d.

    Update to iana-etc-20260805.
    Update to libffi-3.8.0.
    Update to linux-7.1.8.
    Update to meson-1.12.0.
    Update to procps-ng-4.0.7.
    Update to setuptools-84.0.0 (Python module).
    Update to shadow-4.20.2.
    Update to vim-9.2.0954.
    Update to wheel-0.48.0 (Python module).