build(deps): update dependency pdm to v2.26.6

[huxuan-assistant]

This PR contains the following updates:

Package	Update	Change
pdm (changelog)	minor	2.22.3 -> 2.26.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pdm-project/pdm (pdm)

v2.26.6

Compare Source

Bug Fixes

• Support packaging==26.0 changes for version comparison (#​3729)

v2.26.5

Compare Source

Bug Fixes

• Respect the project path when using cookiecutter template in pdm init command. (#​3721)
• Fix a bug that resolution.excludes is not applied when evaluating candidates from the lock file. (#​3726)

Documentation

• Remove chatbot from the docs page footer. (#​3722)
• Generate llms.txt for docs powered by mkdocs-llmstxt. (#​3723)

v2.26.4

Compare Source

Bug Fixes

• Make sure cursor closing for fixing PyPy different gc mode also add PyPy in CI. (#​3708)
• Fix a bug that old HTTP cache directories cause PDM to crash when trying to clear them. (#​3715)

v2.26.3

Compare Source

Features & Improvements

• Port to hishel 1.0.0. (#​3700)

Bug Fixes

• Update .gitignore file in the default template. (#​3686)
• Correct the sysconfig variables for Python standalone build installations. (#​3693)
• Ignore packages.vcs.requested-revision if it's None when formatting pylock.toml. (#​3694)
• Fix test failures with uv test cases using non-venv Python interpreters. (#​3698)

v2.26.2

Compare Source

Features & Improvements

• Only parse TOML document with tomlkit when writing is required. (#​3672)
• Add SHA256 checksums for binary releases during the release workflow and create an installer script that downloads binaries from GitHub releases with automatic platform detection and checksum verification. (#​3679)

Bug Fixes

• Fix test_use_python_write_file_multiple_versions to match PDM's actual behavior. (#​3660)
• Correctly calculate the venv path for UV_PROJECT_ENVIRONMENT env var when using uv mode. (#​3675)
• Ensure implementation.gil_disabled is a boolean in get_current_env_spec. This fix an issue that free-threaded wheels get rejected incorrectly. (#​3677)
• Fix CLI help formatting on Python 3.14+. (#​3683)
• Make PdmBasicAuth a cached_property to accelerate execution. (#​3684)

Removals and Deprecations

• Add deprecation warning for pdm search command as PyPI no longer supports search API. (#​3674)

Miscellany

• Add tests to utils.fs_supports_link_method and utils.convert_to_datetime. (#​3541)

v2.26.1

Compare Source

Bug Fixes

• Substitute missing env vars with empty string in expand_env_vars. (#​3653)
• Constrained hishel to be less than 1.0.0 due to its refactor (#​3657)

v2.26.0

Compare Source

Features & Improvements

• Limit the log file size to 100MB and truncate the log output if exceeded. (#​3633)
• Speed up dependency resolution in the bad path by skipping candidates of the same version when resolving. (#​3647)

Bug Fixes

• Reload project files after running hook scripts. (#​3615)
• Fix a bug when using UV as the resolver does not respect the venv.location configuration. (#​3616)
• Fix publish --skip-existing for Nexus Repository OSS >= 3.70 (#​3617)
• Fix a resolution failure when both prerelease and non-prerelease requirements exist. (#​3634)
• Ignore invalid python requirement during locking. (#​3635)
• Isolate PDM loggers with the root logger to avoid log leakage. (#​3637)
• Fix a crash when resolving URL dependencies under use_uv=true. (#​3640)

v2.25.9

Compare Source

No significant changes.

v2.25.8

Compare Source

Bug Fixes

• Fix a careless error by fast apply in AI coding. (#​3612)

v2.25.7

Compare Source

Features & Improvements

• Show the path to site-packages in the output of pdm info. (#​3600)

Bug Fixes

• Fix uv python dir path resolution on Windows (#​3603)
• Strip local version in version specifiers when writing package locks. (#​3605)
• Show an error message when 'default' is used in optional dependencies or dependency groups. (#​3609)
• Prevent hash clearing when appending to lockfile with env_spec. (#​3610)

v2.25.6

Compare Source

Features & Improvements

• The pdm python install -v command now shows the download URL for the Python interpreter. (#​3552)

Bug Fixes

• Ensure make_array always returns a tomlkit array type. (#​3586)
• Preserve multi-line help text in the CLI help output. (#​3587)
• Re-caculate artifact files and hashes when the lock target changes. (#​3595)

Dependencies

• Require packaging>22.0 and remove conditional PACKAGING_22 version checks. (#​3601)
• Bump truststore to version 0.10.4. (#​3602)

v2.25.5

Compare Source

Features & Improvements

• Tell the difference between free-threaded Python and normal ones. Users need to request for free-threaded versions explicitly by adding t to the version string, otherwise the normal build will be preferred. (#​3562)

Bug Fixes

• Fix a bug that editable local package URLs are empty when using pylock.toml. (#​3565)
• Fix a bug where pdm export with --lockfile pylock.toml produced empty requirements.txt files due to missing group information extraction from pylock format markers. (#​3573)
• Read metadata from installed distribution when using reuse-installed strategy. (#​3579)
• Fix a lockfile writing error when locking git dependencies in the pylock.toml format. (#​3582)

v2.25.4

Compare Source

Bug Fixes

• Add credentials when passing source urls to uv resolver. (#​3553)
• Redact credentials in source urls in the log output, and inject credentials into the source url for uv sync command as well. (#​3555)
• Fix a bug that extra dependencies of transitive dependencies are not properly installed when USE_UV=true (#​3558)
• Improve the terminal output when setting up a script environment. (#​3560)
• Skip non-existent library paths in post-install steps when trying to fix the pth files. (#​3561)

Dependencies

• Update resolvelib to 1.2.0. (#​3557)

v2.25.3

Compare Source

Bug Fixes

• Fix a bug that local file package metadata was missing when reading the lockfile. (#​3545)
• Extract dependency-groups and extras markers from marker value when parsing pylock.toml. (#​3550)

v2.25.2

Compare Source

No significant changes.

v2.25.1

Compare Source

Bug Fixes

• Fix duplicated dependencies added to the lock file when the same dependency with extras is requested. (#​3542)
• Stabilize order of the extras and dependency-groups fields in pylock output. (#​3543)

v2.25.0

Compare Source

Features & Improvements

• Support pylock as alternative lock format and make it opt-in by config. (#​3481)
• Search for package metadata in lock file first when reuse strategy is used. (#​3522)

Bug Fixes

• Fix Windows 11 install pdm error, which is because of msgpack install failure. (#​3485)
• Change the return type of array_of_inline_tables to list[dict] from list[str] (#​3523)
• Ensure uv resolver to include hash for package files. (#​3531)
• Avoid infinite recursion when reading pyproject.toml with circular file dependencies. (#​3539)

v2.24.2

Compare Source

Bug Fixes

• Reinstalling local wheel if its checksum changes. (#​3503)
• Ignore HTTP cache entries if deserialization fails. (#​3515)
• Fetch missing URLs when static_urls is not enabled when running pdm export -f pylock. (#​3517)
• Missing self package when --self or --editable-self is passed to pdm export -f pylock. (#​3518)

Miscellany

• Add Python 3.14 to the test matrix. (#​3506)

v2.24.1

Compare Source

Bug Fixes

• Install the project when using the BaseSynchronizer with install_self set
  to True. This fixes the bug that when calling pdm sync --quiet, it skips
  installing the project itself. (#​3484)
• Mark one additional test as requiring network, and fix another one
  not to require it anymore. (#​3487)

v2.24.0

Compare Source

Features & Improvements

• New command pdm new that behaves like pdm init but creates a new project. (#​3462)
• Support use --name as project name for command pdm new e.g. pdm new hello --name world (#​3476)
• Support exporting to pylock.toml format as described by PEP 751. (#​3480)

Bug Fixes

• Pass the --quiet option to pdm sync command. (#​3401)
• If a .python-version file is found and it contains multiple lines, the file will be ignored. The usage of the .python-version file can be disabled, if configuration value python.use_python_version (or environment variable PDM_USE_PYTHON_VERSION) is False. (#​3417)
• fix pdm config -e command to open read-only file under linux (#​3423)
• Replace project names and import names in both README.md and pyproject.toml when running pdm init <template>. (#​3460)
• Fix a bug that URL dependency hashes are not updated if running pdm lock --update-reuse. (#​3461)

v2.23.1

Compare Source

Features & Improvements

• Use pyapp to wrap pdm as a Python application that bootstrap itself at runtime. (#​3429)
• Support all providers id is supporting currently for OIDC trusted publishing (#​3441)

Bug Fixes

• Installation error for local plugins specified with file URL without a name. (#​3407)
• Eliminate the warning about inherit_metadata when using uv mode. (#​3434)
• Fix an installation failure when installing editable local dependencies on Windows and Python 3.13. (#​3444)
• Fix a bug that overridden requirements in lock file get rewritten when adding a new requirement. (#​3446)
• Cyclic group inclusion is detected incorrectly. Also show the cyclic group names in the error message. (#​3447)
• Fix a bug that pdm remove doesn't handle dependency groups include correctly. (#​3452)
• Update unearth to address an issue downloading git repos with short commit hash. (#​3455)

v2.23.0

Compare Source

Features & Improvements

• Add pdm python find command to search for a python interpreter. (#​3389)
• pdm import now converts package-mode from Poetry's settings table to distribution. (#​3427)

Bug Fixes

• Excluding non-existing groups for pdm remove. (#​3404)
• Fix a bug that pdm add and pdm update remove dependency groups incorrectly. (#​3418)
• Fix a bug that using resolution overrides drops extra dependencies. (#​3426)

v2.22.4

Compare Source

Bug Fixes

• Ensure dev-dependencies are added to the correct group when the tool.pdm.dev-dependencies table has groups. (#​3392)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.