Bump build from 1.4.0 to 1.4.1 (#12273)

dependabot[bot] · web-flow · commit e340586ecff7 · 2026-03-25T11:02:12.000Z
Bumps [build](https://github.com/pypa/build) from 1.4.0 to 1.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/releases">build's releases</a>.</em></p> <blockquote> <h2>1.4.1</h2>  <h2>What's Changed</h2> <ul> <li>Fix documentation grammar and typos by <a href="https://github.com/DimitriPapadopoulos"><code>@​DimitriPapadopoulos</code></a> in <a href="https://redirect.github.com/pypa/build/pull/979">pypa/build#979</a></li> <li>Allow setting build constraints by <a href="https://github.com/layday"><code>@​layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/963">pypa/build#963</a></li> <li>fix: pip hack workaround by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/980">pypa/build#980</a></li> <li>📚 docs: reorganize using Diataxis framework by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/build/pull/988">pypa/build#988</a></li> <li>✨ feat(ci): automate releases and harden workflows by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/build/pull/991">pypa/build#991</a></li> <li>chore: avoid template injection zizmor issue by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/994">pypa/build#994</a></li> <li>chore: fix PR template by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/995">pypa/build#995</a></li> <li>chore: fix fix job by <a href="https://github.com/henryiii"><code>@​henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/997">pypa/build#997</a></li> <li>🐛 fix(ci): resolve pre-release auth failure and change detection by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/build/pull/999">pypa/build#999</a></li> <li>🐛 fix(deps): add pre-commit to release dependency group by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/build/pull/1000">pypa/build#1000</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/build/compare/1.4.0...1.4.1">https://github.com/pypa/build/compare/1.4.0...1.4.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/blob/main/CHANGELOG.rst">build's changelog</a>.</em></p> <blockquote> <p>#################### 1.4.1 (2026-03-24) ####################</p> <hr /> <p>Features</p> <hr /> <ul> <li>Allow setting build constraints - by :user:<code>gaborbernat</code> (:issue:<code>963</code>)</li> <li>Automate releases with pre-release workflow and trusted publishing - by :user:<code>gaborbernat</code> (:issue:<code>991</code>)</li> </ul> <hr /> <p>Documentation</p> <hr /> <ul> <li>Fix documentation grammar and typos (:issue:<code>979</code>)</li> <li>Reorganize documentation using Diataxis framework - by :user:<code>gaborbernat</code> (:issue:<code>988</code>)</li> <li>Document release process and workflow security practices in contributing guide (:issue:<code>991</code>)</li> </ul> <hr /> <p>Miscellaneous</p> <hr /> <ul> <li>:issue:<code>991</code></li> </ul> <hr /> <p>Bugfixes</p> <hr /> <ul> <li>Fix pip hack workaround - by :user:<code>gaborbernat</code> (:issue:<code>980</code>)</li> </ul> <h1>Changelog</h1> <p>#################### 1.4.0 (2026-01-08) ####################</p> <ul> <li>Add <code>--quiet</code> flag (:pr:<code>947</code>)</li> <li>Add option to dump PEP 517 metadata with <code>--metadata</code> (:pr:<code>940</code>, :pr:<code>943</code>)</li> <li>Support <code>UV</code> environment variable (:pr:<code>971</code>)</li> <li>Remove a workaround for 3.14b1 (:pr:<code>960</code>)</li> <li>In 3.14 final release, <code>color</code> defaults to <code>True</code> already (:pr:<code>962</code>)</li> <li>Pass sp-repo-review (:pr:<code>942</code>)</li> <li>In pytest configuration, <code>log_level</code> is better than <code>log_cli_level</code> (:pr:<code>950</code>)</li> <li>Split up typing and mypy (:pr:<code>944</code>)</li> <li>Use <code>types-colorama</code> (:pr:<code>945</code>)</li> <li>In docs, first argument for <code>_has_dependency</code> is a name (PR :pr:<code>970</code>)</li> <li>Fix test failure when <code>flit-core</code> is installed (PR :pr:<code>921</code>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/build/commit/bd889569a1b9e2e7722682378c2d0cec469166a2"><code>bd88956</code></a> chore: prepare for 1.4.1</li> <li><a href="https://github.com/pypa/build/commit/062e7e2caa1a33cfad8b6fe4740c5aa41d384bdc"><code>062e7e2</code></a> 🐛 fix(deps): add pre-commit to release dependency group (<a href="https://redirect.github.com/pypa/build/issues/1000">#1000</a>)</li> <li><a href="https://github.com/pypa/build/commit/3d8e260f635febc10b5e9cd0e5402746deeb6dcd"><code>3d8e260</code></a> 🐛 fix(ci): resolve pre-release auth failure and change detection (<a href="https://redirect.github.com/pypa/build/issues/999">#999</a>)</li> <li><a href="https://github.com/pypa/build/commit/f2a26104d4fd6d13fdb75a29fd067ee80271f497"><code>f2a2610</code></a> chore: fix fix job (<a href="https://redirect.github.com/pypa/build/issues/997">#997</a>)</li> <li><a href="https://github.com/pypa/build/commit/3c2ce9a38293014890822923b270cee860c8a623"><code>3c2ce9a</code></a> chore: fix PR template (<a href="https://redirect.github.com/pypa/build/issues/995">#995</a>)</li> <li><a href="https://github.com/pypa/build/commit/6563eff2e5d43c42eeeb09870da503b4751f3ab3"><code>6563eff</code></a> chore: avoid template injection zizmor issue (<a href="https://redirect.github.com/pypa/build/issues/994">#994</a>)</li> <li><a href="https://github.com/pypa/build/commit/7f46d46f1f225552f0c37bf290e2b9d2da3592b8"><code>7f46d46</code></a> ✨ feat(ci): automate releases and harden workflows (<a href="https://redirect.github.com/pypa/build/issues/991">#991</a>)</li> <li><a href="https://github.com/pypa/build/commit/a23111565e2e3be9d179473fb6f49b6fcb79cab9"><code>a231115</code></a> pre-commit: bump repositories (<a href="https://redirect.github.com/pypa/build/issues/990">#990</a>)</li> <li><a href="https://github.com/pypa/build/commit/3b944beb06a6ab70253a2f8599a985a60379fb57"><code>3b944be</code></a> pre-commit: bump repositories (<a href="https://redirect.github.com/pypa/build/issues/989">#989</a>)</li> <li><a href="https://github.com/pypa/build/commit/a77870d39f0be036894ed3e83587542b639c442b"><code>a77870d</code></a> docs: reorganize using Diataxis framework (<a href="https://redirect.github.com/pypa/build/issues/988">#988</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/build/compare/1.4.0...1.4.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=build&package-manager=pip&previous-version=1.4.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
@@ -34,7 +34,7 @@ blockbuster==1.5.26
     #   -r requirements/test-common.in
 brotli==1.2.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
-build==1.4.0
+build==1.4.1
     # via pip-tools
 certifi==2026.2.25
     # via requests
diff --git a/requirements/dev.txt b/requirements/dev.txt
@@ -34,7 +34,7 @@ blockbuster==1.5.26
     #   -r requirements/test-common.in
 brotli==1.2.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
-build==1.4.0
+build==1.4.1
     # via pip-tools
 certifi==2026.2.25
     # via requests
