Bump pip-tools from 7.4.1 to 7.5.0

[dependabot]

Bumps pip-tools from 7.4.1 to 7.5.0.

Release notes

Sourced from pip-tools's releases.

v7.5.0

2025-07-30

Bug fixes

• Fixed the ordering of format controls to preserve underlying pip behavior -- by @​sethmlarson.

  PRs and issues: #2082

• Fixed NoCandidateFound exception to be compatible with pip >= 24.1 -- by @​chrysle.

  PRs and issues: #2083

• pip-compile now produces relative paths for editable dependencies -- by @​macro1.

  PRs and issues: #2087

• Fixed crash failures due to incompatibility with pip >= 25.1 -- by @​gkreitz and @​sirosen.

  PRs and issues: #2176, #2178

Features

• pip-compile now treats package versions requested on the command line as constraints for the underlying pip usage. This applies to build deps in addition to normal package requirements.

  -- by @​chrysle

  PRs and issues: #2106

• pip-tools now tests on and officially supports Python 3.12 -- by @​sirosen.

  PRs and issues: #2188

• Requirements file paths in pip-compile output are now normalized to POSIX-style, even when pip-compile is run on Windows. This provides more consistent output across various platforms.

  -- by @​sirosen

  PRs and issues: #2195

• pip-tools now tests against and supports pip up to version 25.1 -- by @​sirosen.

  PRs and issues: #2195

Removals and backward incompatible breaking changes

• pip-compile will now relativize the requirements paths which are recorded in its output. Paths are made relative to the working directory. This provides more consistent results across pip versions.

... (truncated)

Changelog

Sourced from pip-tools's changelog.

v7.5.0

2025-07-30

Bug fixes

• Fixed the ordering of format controls to preserve underlying pip behavior -- by {user}sethmlarson.

  PRs and issues: {issue}2082

• Fixed NoCandidateFound exception to be compatible with pip >= 24.1 -- by {user}chrysle.

  PRs and issues: {issue}2083

• pip-compile now produces relative paths for editable dependencies -- by {user}macro1.

  PRs and issues: {issue}2087

• Fixed crash failures due to incompatibility with pip >= 25.1 -- by {user}gkreitz and {user}sirosen.

  PRs and issues: {issue}2176, {issue}2178

Features

• pip-compile now treats package versions requested on the command line as constraints for the underlying pip usage. This applies to build deps in addition to normal package requirements.

  -- by {user}chrysle

  PRs and issues: {issue}2106

• pip-tools now tests on and officially supports Python 3.12 -- by {user}sirosen.

  PRs and issues: {issue}2188

• Requirements file paths in pip-compile output are now normalized to POSIX-style, even when pip-compile is run on Windows. This provides more consistent output across various platforms.

  -- by {user}sirosen

  PRs and issues: {issue}2195

• pip-tools now tests against and supports pip up to version 25.1

... (truncated)

Commits

• debe5a4 Update changelog for version 7.5.0
• 1c7d9fb Merge pull request #2210 from webknjaz/bugfixes/release-env-context-access
• 96ed4d2 Merge pull request #2209 from webknjaz/maintenance/release-attestations-cleanup
• a180dd9 📝 Link the PR #2209 change note to PR #2149
• 7f9512a 📝 Link the PR #2210 change note to PR #2149
• 396da33 Run the dist build job in PRs
• 7b1c22c Fix accessing repo id in the release workflow
• 05daad6 Drop release attestations for Jazzband upload
• b4ddd75 Merge pull request #2203 from sirosen/use-towncrier
• a136172 Add a run of 'changelog-draft' to QA CI jobs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.92%. Comparing base (7e274bd) to head (e31e4b6).
⚠️ Report is 8 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #8875   +/-   ##
=======================================
  Coverage   76.91%   76.92%           
=======================================
  Files         574      574           
  Lines       28937    28937           
  Branches     3569     3569           
=======================================
+ Hits        22258    22260    +2     
+ Misses       6501     6499    -2     
  Partials      178      178           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.