From 46901b504c681b34a12634aa24716644b88ae9f3 Mon Sep 17 00:00:00 2001 From: Ajay Balasa Date: Sun, 23 Aug 2026 22:30:46 -0700 Subject: [PATCH 1/2] chore: add build constraint for setuptools version in pyproject.toml Added a build constraint to specify that setuptools must be less than version 82. This change ensures compatibility with existing dependencies. Signed-off-by: Ajay Balasa --- pyproject.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/pyproject.toml b/pyproject.toml index 6b5e4a99..5bcfa927 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -117,6 +117,7 @@ conflicts = [ { extra = "skypilot-all" } ] ] +build-constraint-dependencies = ["setuptools<82"] override-dependencies = [ "aiohttp>=3.14.0", # CVE-2026-50269 "cryptography>=46.0.6,<47", # CVE-2026-34073 From ea8ea6bc92cf0ea1713f26ae7b2f4d614a99b17a Mon Sep 17 00:00:00 2001 From: Ajay Balasa Date: Sun, 23 Aug 2026 22:41:56 -0700 Subject: [PATCH 2/2] chore: add build constraint for setuptools version in uv.lock Included a build constraint to specify that setuptools must be less than version 82, ensuring compatibility with existing dependencies. Signed-off-by: Ajay Balasa --- uv.lock | 1 + 1 file changed, 1 insertion(+) diff --git a/uv.lock b/uv.lock index c0078008..8e393265 100644 --- a/uv.lock +++ b/uv.lock @@ -54,6 +54,7 @@ overrides = [ { name = "simpleeval", specifier = ">=1.0.5" }, { name = "urllib3", specifier = ">=2.7.0" }, ] +build-constraints = [{ name = "setuptools", specifier = "<82" }] [[package]] name = "absl-py"