# IMPORTANT: The versions here must be compatible with the environment where
# uv-pre-commit hooks run. We do not pin setuptools in .pre-commit-config.yaml
# to allow uv to resolve a version that satisfies these constraints.
wheel >= 0.46.3
# Floor at the CVE fix: 78.1.1 patches GHSA-5rjg-fvgr-3xxf
# (PYSEC-2025-49) -- path traversal in setuptools.PackageIndex.download.
# A higher floor (e.g. 80.x) makes the PEP 517 build-env install fail
# with ResolutionImpossible when pip 25.2 source-builds packages whose
# isolated build env asks for ``setuptools == 78.1.1`` (the version pip
# bootstraps build envs with), e.g. yarl on Python 3.14 where no cp314
# wheel is available under salt's ``--no-binary=:all:`` policy.
setuptools >= 78.1.1
pip == 25.2
markdown-it-py < 3.0.0; python_version == "3.9"
