pypa · notatallshaw · Oct 24, 2025 · Oct 24, 2025 · Oct 24, 2025 · Oct 24, 2025
diff --git a/.mailmap b/.mailmap
@@ -50,3 +50,6 @@ Stephan Erb         <github@stephanerb.eu>                  <stephan@dev.static-
 Victor Stinner      <victor.stinner@gmail.com>              <vstinner@redhat.com>
 Yoval P                                                     <yoval@gmx.com>
 Zhiping Deng                                                <kofreestyler@gmail.com>
+dkjsone              <221672629+dkjsone@users.noreply.github.com>   user <empty>
+Meet Vasita          <meetvasita85@gmail.com>               meet-vasita <meetvasita85@gmail.com>
+Meet Vasita          <meetvasita85@gmail.com>               Meet_Vasita <84974738+meet-vasita@users.noreply.github.com>
diff --git a/AUTHORS.txt b/AUTHORS.txt
@@ -24,6 +24,7 @@ albertg
 Alberto Sottile
 Aleks Bunin
 Ales Erjavec
+Alessandro Molina
 Alethea Flowers
 Alex Gaynor
 Alex Grönholm
@@ -37,6 +38,7 @@ Alexandre Conrad
 Alexey Popravka
 Aleš Erjavec
 Alli
+Aman
 Ami Fischman
 Ananya Maiti
 Anatoly Techtonik
@@ -56,6 +58,7 @@ Aniruddha Basak
 Anish Tambe
 Anrs Hu
 Anthony Sottile
+Antoine Lambert
 Antoine Musso
 Anton Ovchinnikov
 Anton Patrushev
@@ -236,6 +239,7 @@ Dimitri Merejkowsky
 Dimitri Papadopoulos
 Dimitri Papadopoulos Orfanos
 Dirk Stolle
+dkjsone
 Dmitry Gladkov
 Dmitry Volodin
 Domen Kožar
@@ -347,6 +351,7 @@ Igor Sobreira
 Ikko Ashimine
 Ilan Schnell
 Illia Volochii
+Ilya Abdolmanafi
 Ilya Baryshev
 Inada Naoki
 Ionel Cristian Mărieș
@@ -482,6 +487,7 @@ luojiebin
 luz.paz
 László Kiss Kollár
 M00nL1ght
+MajorTanya
 Malcolm Smith
 Marc Abramowitz
 Marc Tamlyn
@@ -498,6 +504,7 @@ Martin Pavlasek
 Masaki
 Masklinn
 Matej Stuchlik
+Mateusz Sokół
 Mathew Jennings
 Mathieu Bridon
 Mathieu Kniewallner
@@ -525,6 +532,7 @@ mayeut
 mbaluna
 Md Sujauddin Sekh
 mdebi
+Meet Vasita
 memoselyk
 meowmeowcat
 Michael
@@ -714,6 +722,7 @@ Shivansh-007
 Shixian Sheng
 Shlomi Fish
 Shovan Maity
+Shubham Nagure
 Simeon Visser
 Simon Cross
 Simon Pichugin

diff --git a/NEWS.rst b/NEWS.rst
@@ -9,6 +9,70 @@
 
 .. towncrier release notes start
 
+25.3 (2025-10-24)
+=================
+
+Deprecations and Removals
+-------------------------
+
+- Remove support for the legacy ``setup.py develop`` editable method in setuptools
+  editable installs; setuptools >= 64 is now required. (`#11457 <https://github.com/pypa/pip/issues/11457>`_)
+- Remove the deprecated ``--global-option`` and ``--build-option``.
+  ``--config-setting`` is now the only way to pass options to the build backend. (`#11859 <https://github.com/pypa/pip/issues/11859>`_)
+- Deprecate the ``PIP_CONSTRAINT`` environment variable for specifying build
+  constraints.
+
+  Use the ``--build-constraint`` option or the ``PIP_BUILD_CONSTRAINT`` environment variable
+  instead. When build constraints are used, ``PIP_CONSTRAINT`` no longer affects isolated build
+  environments. To enable this behavior without specifying any build constraints, use
+  ``--use-feature=build-constraint``. (`#13534 <https://github.com/pypa/pip/issues/13534>`_)
+- Remove support for non-standard legacy wheel filenames. (`#13581 <https://github.com/pypa/pip/issues/13581>`_)
+- Remove support for the deprecated ``setup.py bdist_wheel`` mechanism. Consequently,
+  ``--use-pep517`` is now always on, and ``--no-use-pep517`` has been removed. (`#6334 <https://github.com/pypa/pip/issues/6334>`_)
+
+Features
+--------
+
+- When :pep:`658` metadata is available, full distribution files are no longer downloaded when using ``pip lock`` or ``pip install --dry-run``. (`#12603 <https://github.com/pypa/pip/issues/12603>`_)
+- Add support for installing an editable requirement written as a Direct URL (``PackageName @ URL``). (`#13495 <https://github.com/pypa/pip/issues/13495>`_)
+- Add support for build constraints via the ``--build-constraint`` option. This
+  allows constraining the versions of packages used during the build process
+  (e.g., setuptools) without affecting the final installation. (`#13534 <https://github.com/pypa/pip/issues/13534>`_)
+- On ``ResolutionImpossible`` errors, include a note about causes with no candidates. (`#13588 <https://github.com/pypa/pip/issues/13588>`_)
+- Building pip itself from source now uses flit-core instead of setuptools.
+  This does not affect how pip installs or builds packages you use. (`#13743 <https://github.com/pypa/pip/issues/13743>`_)
+
+Bug Fixes
+---------
+
+- Handle malformed ``Version`` metadata entries and
+  show a sensible error message instead of crashing. (`#13443 <https://github.com/pypa/pip/issues/13443>`_)
+- Permit spaces between a filepath and extras in an install requirement. (`#13523 <https://github.com/pypa/pip/issues/13523>`_)
+- Ensure the self-check files in the cache have the same permissions as the rest of the cache. (`#13528 <https://github.com/pypa/pip/issues/13528>`_)
+- Avoid concurrency issues and improve performance when caching locally built wheels,
+  especially when the temporary build directory is on a different filesystem than the cache.
+  The wheel directory passed to the build backend is now a temporary subdirectory inside
+  the cache directory. (`#13540 <https://github.com/pypa/pip/issues/13540>`_)
+- Include relevant user-supplied constraints in logs when reporting dependency conflicts. (`#13545 <https://github.com/pypa/pip/issues/13545>`_)
+- Fix a regression in configuration parsing that was turning a single value
+  into a list and thus leading to a validation error. (`#13548 <https://github.com/pypa/pip/issues/13548>`_)
+- For Python versions that do not support :pep:`706`, pip will now raise an installation error for a
+  source distribution when it includes a symlink that points outside the source distribution archive. (`#13550 <https://github.com/pypa/pip/issues/13550>`_)
+- Prevent ``--user`` installs if ``site.ENABLE_USER_SITE`` is set to ``False``. (`#8794 <https://github.com/pypa/pip/issues/8794>`_)
+
+
+Vendored Libraries
+------------------
+
+- Upgrade certifi to 2025.10.5
+- Upgrade msgpack to 1.1.2
+- Upgrade platformdirs to 4.5.0
+- Upgrade requests to 2.32.5
+- Upgrade resolvelib to 1.2.1
+- Upgrade rich to 14.2.0
+- Upgrade tomli to 2.3.0
+- Upgrade truststore to 0.10.4
+
 25.2 (2025-07-30)
 =================
 

diff --git a/news/11457.removal.rst b/news/11457.removal.rst
diff --git a/news/11859.removal.rst b/news/11859.removal.rst
diff --git a/news/12603.feature.rst b/news/12603.feature.rst
diff --git a/news/13443.bugfix.rst b/news/13443.bugfix.rst
diff --git a/news/13495.feature.rst b/news/13495.feature.rst
diff --git a/news/13523.bugfix.rst b/news/13523.bugfix.rst
diff --git a/news/13528.bugfix.rst b/news/13528.bugfix.rst
diff --git a/news/13534.feature.rst b/news/13534.feature.rst
diff --git a/news/13534.removal.rst b/news/13534.removal.rst
diff --git a/news/13540.bugfix.rst b/news/13540.bugfix.rst
diff --git a/news/13545.bugfix.rst b/news/13545.bugfix.rst
diff --git a/news/13548.bugfix.rst b/news/13548.bugfix.rst
diff --git a/news/13550.bugfix.rst b/news/13550.bugfix.rst
diff --git a/news/13561.doc.rst b/news/13561.doc.rst
diff --git a/news/13581.removal.rst b/news/13581.removal.rst
diff --git a/news/13588.feature.rst b/news/13588.feature.rst
diff --git a/news/13743.feature.rst b/news/13743.feature.rst
diff --git a/news/6334.removal.rst b/news/6334.removal.rst
diff --git a/news/8794.bugfix.rst b/news/8794.bugfix.rst
diff --git a/news/FURB100.trivial.rst b/news/FURB100.trivial.rst
diff --git a/news/certifi.vendor.rst b/news/certifi.vendor.rst
diff --git a/news/msgpack.vendor.rst b/news/msgpack.vendor.rst
diff --git a/news/platformdirs.vendor.rst b/news/platformdirs.vendor.rst
diff --git a/news/requests.vendor.rst b/news/requests.vendor.rst
diff --git a/news/resolvelib.vendor.rst b/news/resolvelib.vendor.rst
diff --git a/news/rich.vendor.rst b/news/rich.vendor.rst
diff --git a/news/tomli.vendor.rst b/news/tomli.vendor.rst
diff --git a/news/truststore.vendor.rst b/news/truststore.vendor.rst
diff --git a/src/pip/__init__.py b/src/pip/__init__.py
@@ -1,6 +1,6 @@
 from __future__ import annotations
 
-__version__ = "25.3.dev0"
+__version__ = "26.0.dev0"
 
 
 def main(args: list[str] | None = None) -> int: