v7.5.3

[sirosen]

2026-02-11

Bug fixes

• The option --unsafe-package is now normalized -- by @shifqu.

  PRs and issues: --unsafe-package doesn't normalize hyphens/underscores #2150

• Fixed a bug in which pip-compile lost any index URL options when
  looking up hashes -- by @sirosen.

  This caused errors when a package was only available from an extra
  index, and caused pip-compile to incorrectly drop index URL options
  from output, even when they were present in the input requirements.

  PRs and issues: --extra-index-url not included in generated requirements.txt #2220, IndexError when upgrading to Python 3.11 with rlextra #2294, Fix bugs related to losing index URL information when clearing finder cache #2305

• Fixed removal of temporary files used when reading requirements from stdin
  -- by @sirosen.

Features

• pip-tools is now tested against Python 3.14 and 3.14t in CI, and
  marks them as supported in the core packaging metadata
  -- by @webknjaz.

  PRs and issues: 🧪 Start testing under Python 3.14(t) in CI #2255

• pip-tools is now compatible with pip 26.0 -- by @sirosen.

  PRs and issues: Support pip version 26.0 #2319, Support pip version 26.0 #2320

Removals and backward incompatible breaking changes

• Removed support for Python 3.8 -- by @sirosen.

Improved documentation

• The change log management infra now allows the maintainers to add notes
  before and after the regular categories -- by @webknjaz.

  PRs and issues: Consider having a "prelude"ish change note category #2287, 📝 Add highlights & afterword to Towncrier #2322

• Added documentation clarifying that pip-compile reads the existing
  output file as a constraint source, and how to use --upgrade to
  refresh dependencies -- by @maliktafheem.

  PRs and issues: docs: clarify that pip-compile reads existing output file #2307

Packaging updates and notes for downstreams

• pip-tools is now tested against Python 3.14 and 3.14t in CI, and
  marks them as supported in the core packaging metadata
  -- by @webknjaz.

  PRs and issues: 🧪 Start testing under Python 3.14(t) in CI #2255

Contributor-facing changes

• Consistency of the Markdown files is now being enforced by linting
  with pymarkdownlnt -- by @webknjaz.

  PRs and issues: 🧪 Integrate pymarkdown into pre-commit config #2256

• The linting is now set up to perform structured GitHub Actions
  workflows and actions checks against json schemas
  -- by @webknjaz.

  PRs and issues: 🧪Integrate jsonschema into pre-commit framework #2273

• The CI/CD is now set up so that the distribution build job
  is a part of the test pipeline. That pipeline is included in
  the release workflow which sources the artifact in produces.
  The tests must now pass for the release to be published to PyPI.

  -- by @webknjaz

  PRs and issues: 📦 Build release artifacts in CI workflow #2274

• Fix actionlint hook usage to always include shellcheck integration -- by @sirosen.

  PRs and issues: Update pre-commit actionlint hook to always install shellcheck, ensuring consistent behavior #2281

• Utilities for interacting with pip have started to move into the
  :py:mod:piptools._internal._pip_api subpackage -- by @sirosen.

  PRs and issues: Reduce circular dependencies between utils.py and _compat/ by migrating pip-related utilities into a new _pip_api #2285

• The change log management infra now allows the maintainers to add notes
  before and after the regular categories -- by @webknjaz.

  PRs and issues: Consider having a "prelude"ish change note category #2287, 📝 Add highlights & afterword to Towncrier #2322

• The linting is now set up to demand that typing is always
  imported as a module under the name of _t -- by @webknjaz.

  This is enforced by @sirosen's flake8-typing-as-t
  plugin for flake8.

  PRs and issues: 🧪 Integrate flake8-typing-as-t into linting #2289

• The tox.ini and .github/ parts of the repository now
  have project leads assigned as GitHub code owners -- by @webknjaz.

  PRs and issues: 🛡️ Add leads as codeowners of sensitive files #2291

• Remove a redundant 'v' prefix from the CI release workflow job name -- by @anandvenugopal-tech.

  PRs and issues: ci: remove redundant v prefix from release job name #2300

• The check-jsonschema ReadTheDocs hook has been enabled, and
  the config has been tweaked to pass -- by @sirosen.

---

This discussion was created from the release v7.5.3.