Bump pypa/cibuildwheel from 3.4.1 to 4.3.0

[dependabot]

Bumps pypa/cibuildwheel from 3.4.1 to 4.3.0.

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.3.0

• ✨ Extends option inheritance to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using CIBW_INHERIT. (#2928)
• ✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the pypy enable flag (#2998)
• ✨ Adds GraalPy 3.13 (v25.3) support on Linux, Windows, and macOS arm64, available with the graalpy enable flag (#2982)
• ✨ Adds log-fold-mode to override CI log folding, including CIBW_LOG_FOLD_MODE=disabled to keep build steps expanded (#2972)
• ✨ Adds a python-path input to the GitHub Action to choose the Python interpreter used to run cibuildwheel, and falls back to system python3 on runner architectures unsupported by setup-python, such as native riscv64 (#2990)
• 🐛 Fixes Windows command execution when paths or arguments contain shell metacharacters, including dependency specifiers containing < or > (#2978)
• 🛠 Improves readability of logged commands whose arguments contain quotes (#2993)
• 🛠 Updates Pyodide to 0.27.8, 0.29.5, and 314.0.7, and updates its build tooling, including auditwheel-emscripten 0.3.0 (#2996)
• 🛠 Updates dependencies and container pins, including CPython 3.15.0rc3 (#2986, #3003)
• 📚 Corrects references to --archs in CLI help, error messages, and documentation (#2992)

v4.2.1

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

v4.2.0

• 🌟 CPython 3.15 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (#2944)
• ✨ Adds Pyodide 3.15 support with the cp315-pyodide_wasm32 build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (#2958)
• 🐛 Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A 4xx response is still reported at once. (#2953)
• 🐛 Accepts default as a build-frontend value on Pyodide, and accepts pyodide-build in the top-level table and in overrides (#2951)
• 🛠 Holds pip back on GraalPy, where newer pip breaks the build (#2955)
• 🛠 Updates Pyodide to 314.0.4 (#2949, #2952)
• 🛠 Updates dependencies and container pins (#2952, #2960)
• 💼 Updates CI action pins (#2948, #2954)
• 🧪 Uses pp311 for the abi3 test, and deletes test_overridden_pip_constraint, which is not necessary since #2583 (#2956, #2957)

v4.1.1

• ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
• 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
• 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
• 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
• 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
• 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
• 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
• 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
• 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
• 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
• 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
• 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
• 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
• 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
• 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
• 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
• 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)

v4.1.0

• ✨ Updates Pyodide to the final 314.0.0 release, so Pyodide 3.14 wheels now build by default without the pyodide-prerelease enable flag. (#2906)

... (truncated)

Changelog

Sourced from pypa/cibuildwheel's changelog.

v4.3.0

5 October 2026

• ✨ Extends option inheritance to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using CIBW_INHERIT. (#2928)
• ✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the pypy enable flag (#2998)
• ✨ Adds GraalPy 3.13 (v25.3) support on Linux, Windows, and macOS arm64, available with the graalpy enable flag (#2982)
• ✨ Adds log-fold-mode to override CI log folding, including CIBW_LOG_FOLD_MODE=disabled to keep build steps expanded (#2972)
• ✨ Adds a python-path input to the GitHub Action to choose the Python interpreter used to run cibuildwheel, and falls back to system python3 on runner architectures unsupported by setup-python, such as native riscv64 (#2990)
• 🐛 Fixes Windows command execution when paths or arguments contain shell metacharacters, including dependency specifiers containing < or > (#2978)
• 🛠 Improves readability of logged commands whose arguments contain quotes (#2993)
• 🛠 Updates Pyodide to 0.27.8, 0.29.5, and 314.0.7, and updates its build tooling, including auditwheel-emscripten 0.3.0 (#2996)
• 🛠 Updates dependencies and container pins, including CPython 3.15.0rc3 (#2986, #3003)
• 📚 Corrects references to --archs in CLI help, error messages, and documentation (#2992)

v4.2.1

5 September 2026

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

v4.2.0

4 August 2026

• 🌟 CPython 3.15 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (#2944)
• ✨ Adds Pyodide 3.15 support with the cp315-pyodide_wasm32 build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (#2958)
• 🐛 Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A 4xx response is still reported at once. (#2953)
• 🐛 Accepts default as a build-frontend value on Pyodide, and accepts pyodide-build in the top-level table and in overrides (#2951)
• 🛠 Holds pip back on GraalPy, where newer pip breaks the build (#2955)
• 🛠 Updates Pyodide to 314.0.4 (#2949, #2952)
• 🛠 Updates dependencies and container pins (#2952, #2960)
• 💼 Updates CI action pins (#2948, #2954)
• 🧪 Uses pp311 for the abi3 test, and deletes test_overridden_pip_constraint, which is not necessary since #2583 (#2956, #2957)

v4.1.1

24 July 2026

• ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
• 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
• 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
• 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
• 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
• 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
• 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
• 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)

... (truncated)

Commits

• adba99c Bump version: v4.3.0
• 8a0d481 Add the ability to set 'inherit' at all levels of the options cascade (#2928)
• 8bc038b chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the actions gro...
• 5cad3d9 [Bot] Update dependencies (#3003)
• 82bef7c Make logged commands readable when they contain quotes (#2993)
• 84f6233 feat: add GraalPy 3.13 (25.3) (#2982)
• 85ca3f6 fix(ci): use GitHub's dedicated self-repository syntax (#3002)
• ae4799a [Bot] Update dependencies (#2986)
• 69adf52 fix: don't run call() through cmd.exe on Windows (#2978)
• ad9dc7a feat: add log fold mode override (#2972)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)