Upgrade pip to 25.2 to resolve relative path issue in pip-compile

python/helpers/requirements.txt

@@ -1,5 +1,5 @@
-pip==24.2
-pip-tools==7.4.1
+pip==25.2
+pip-tools==7.5.0
 flake8==7.3.0
 hashin==1.0.5
 pipenv==2024.4.1

python/spec/dependabot/python/file_updater/pip_compile_file_updater_spec.rb

@@ -551,6 +551,64 @@
         expect(updated_files.first.content).not_to include("boto3")
       end
     end
+
+    context "with relative import paths (regression test for pip >25 issue)" do
+      # This test verifies that the upgrade to pip 25.2 and pip-tools 7.5.0
+      # correctly preserves relative paths in generated comments instead of
+      # converting them to absolute paths. This was an issue with pip >25 and
+      # older pip-tools versions.
+      let(:dependency_files) do
+        [base_file, manifest_file, generated_file]
+      end
+      let(:base_file) do
+        Dependabot::DependencyFile.new(
+          name: "base.in",
+          content: "authlib"
+        )
+      end
+      let(:manifest_file) do
+        Dependabot::DependencyFile.new(
+          name: "requirements/test.in",
+          content: "-r ../base.in\nruff==0.12.3"
+        )
+      end
+      let(:generated_file) do
+        Dependabot::DependencyFile.new(
+          name: "requirements/test.txt",
+          content: fixture("requirements", "pip_compile_unpinned.txt")
+        )
+      end
+      let(:dependency_name) { "ruff" }
+      let(:dependency_version) { "0.12.4" }
+      let(:dependency_previous_version) { "0.12.3" }
+      let(:dependency_requirements) do
+        [{
+          file: "requirements/test.in",
+          requirement: nil,
+          groups: [],
+          source: nil
+        }]
+      end
+      let(:dependency_previous_requirements) do
+        [{
+          file: "requirements/test.in",
+          requirement: nil,
+          groups: [],
+          source: nil
+        }]
+      end
+
+      it "preserves relative paths in generated comments (not absolute)", :slow do
+        updated_content = updated_files.first.content
+
+        # The key assertion: ensure that relative paths in comments are preserved
+        # and not converted to absolute paths like "/tmp/..." or "/home/..."
+        expect(updated_content).not_to match(%r{# via -r /})  # No absolute paths starting with /
+        expect(updated_content).not_to include("/tmp/")       # No temp directory paths
+        expect(updated_content).not_to include("/home/")      # No home directory paths
+        expect(updated_content).not_to include("/opt/")       # No opt directory paths
+      end
+    end
   end
 
   describe "#package_hashes_for" do