Bump pypa/cibuildwheel from 4.1.0 to 4.2.1

[dependabot]

Bumps pypa/cibuildwheel from 4.1.0 to 4.2.1.

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.2.1

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

v4.2.0

• 🌟 CPython 3.15 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (#2944)
• ✨ Adds Pyodide 3.15 support with the cp315-pyodide_wasm32 build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (#2958)
• 🐛 Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A 4xx response is still reported at once. (#2953)
• 🐛 Accepts default as a build-frontend value on Pyodide, and accepts pyodide-build in the top-level table and in overrides (#2951)
• 🛠 Holds pip back on GraalPy, where newer pip breaks the build (#2955)
• 🛠 Updates Pyodide to 314.0.4 (#2949, #2952)
• 🛠 Updates dependencies and container pins (#2952, #2960)
• 💼 Updates CI action pins (#2948, #2954)
• 🧪 Uses pp311 for the abi3 test, and deletes test_overridden_pip_constraint, which is not necessary since #2583 (#2956, #2957)

v4.1.1

• ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
• 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
• 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
• 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
• 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
• 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
• 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
• 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
• 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
• 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
• 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
• 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
• 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
• 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
• 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
• 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
• 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)

Changelog

Sourced from pypa/cibuildwheel's changelog.

---

title: Changelog ref: changelog

Changelog

v4.2.1

5 September 2026

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

v4.2.0

4 August 2026

• 🌟 CPython 3.15 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (#2944)
• ✨ Adds Pyodide 3.15 support with the cp315-pyodide_wasm32 build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (#2958)
• 🐛 Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A 4xx response is still reported at once. (#2953)
• 🐛 Accepts default as a build-frontend value on Pyodide, and accepts pyodide-build in the top-level table and in overrides (#2951)
• 🛠 Holds pip back on GraalPy, where newer pip breaks the build (#2955)
• 🛠 Updates Pyodide to 314.0.4 (#2949, #2952)
• 🛠 Updates dependencies and container pins (#2952, #2960)
• 💼 Updates CI action pins (#2948, #2954)
• 🧪 Uses pp311 for the abi3 test, and deletes test_overridden_pip_constraint, which is not necessary since #2583 (#2956, #2957)

v4.1.1

24 July 2026

• ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
• 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
• 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
• 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
• 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
• 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
• 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
• 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
• 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
• 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
• 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
• 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
• 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
• 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
• 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
• 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)

... (truncated)

Commits

• e090b81 Bump version: v4.2.1
• 59501f4 Respect configured NuGet package sources (#2966)
• 885ead0 [Bot] Update dependencies (#2985)
• 3d9e8c5 docs: refresh CircleCI and CPython platform links (#2977)
• 7d5ec95 [Bot] Update dependencies (#2981)
• a007eed [Bot] Update dependencies (#2976)
• fdda545 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the actions grou...
• 8832cf6 chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the ...
• a35209b [Bot] Update dependencies (#2970)
• 148ea70 chore: faster and stricter mypy (#2968)
• Additional commits viewable in compare view

[github-actions]

Javascript size report

	Size
Base (main)	1121.2 KB
PR	1123.8 KB
Delta	+2.6 KB (+0.2%)

⚠️ Size increased +0.2% (within 5% threshold).

[abkfenris]

@dependabot rebase