build(deps): Bump pypa/cibuildwheel from 2.21 to 4.1

[dependabot]

Bumps pypa/cibuildwheel from 2.21 to 4.1.

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.1.0

• ✨ Updates Pyodide to the final 314.0.0 release, so Pyodide 3.14 wheels now build by default without the pyodide-prerelease enable flag. (#2906)
• 🐛 Raises clear errors when a build produces no wheel, instead of failing later with a confusing message (#2909)
• 🛠 Speeds up CLI startup through lazy imports on Python 3.15 (#2797)
• 📚 Adds an FAQ section on caching cibuildwheel's downloaded tools with CIBW_CACHE_PATH (#2842)
• 📚 Documentation improvements: clarifies which shell is used for command options, clarifies environment variable precedence, and fixes a dead Pyodide env info link (#2904, #2905, #2911)

v4.0.0

See @​henryiii's release post for more info on new features!

• 🌟 Adds wheel auditing with abi3audit as a default after the repair step, with new audit-requires and audit-command options (#2805)

• 🌟 Adds pyemscripten platform tag support (PEP 783), updates Pyodide to 314.0.0a2, and adds a pyodide-eol enable flag for building end-of-life Pyodide versions (#2812, #2848)

• 🌟 Sets up delvewheel as the default repair-wheel-command for Windows, so extension module DLLs are now bundled automatically. Skip by setting it to empty if not needed. (#2831)

• ✨ Adds CPython 3.15 support, under the enable option cpython-prerelease. This version of cibuildwheel uses 3.15.0b2. (#2833, #2850)

  While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.15 will be available in cibuildwheel without the flag.

• ✨ Adds CPython 3.15 support for iOS and Android (#2857, #2858)

• ✨ Adds Android improvements for building NumPy and related packages, including auditwheel support, pkg-config and Fortran configuration, and the xbuild-files option (#2695)

• ✨ Adds CIBUILDWHEEL_BUILD_IDENTIFIER environment variable set to the current build identifier (e.g. cp311-manylinux_x86_64) during per-build steps (#2872)

• ✨ Adds {project} and {package} placeholders to config-settings (#2827)

• ⚠️ Drops support for Python 3.8 (#2686)

• ⚠️ Removes the experimental CPython 3.13 free-threading builds and the cpython-freethreading enable option. CPython 3.14+ free-threading support remains available without the enable flag. (#2684)

• ⚠️ Drops support for Cirrus CI, which is shutting down June 1, 2026 (#2817)

• ⚠️ Drops GraalPy 3.11 (gp311) support, as agreed in #2741, and removes GraalPy 24-only workarounds (#2895)

• 🔐 Adds SHA256 verification for direct downloads of Python interpreters, virtualenv, and python-build-standalone assets (#2873)

• 🔐 Adds tarfile extraction filter for safe archive extraction (#2856)

• 🐛 Fixes UV_PYTHON not being set for before-build on Linux when using uv as the build-frontend (#2830)

• 🐛 Fixes detection of musl libc when downloading python-build-standalone, which previously always selected the gnu asset on musl hosts like Alpine (#2889)

• 🐛 Fixes config-settings expansion when {project} or {package} contains spaces or backslashes (#2886)

• 🐛 Prevents deadlock when linux32 fails and forwards platform args to the sanity check (#2880, #2888)

• 🐛 Fixes container resource leaks on start failure and during teardown (#2879, #2887)

• 🐛 Removes potential partial cache-population in case of error (#2892)

• 🐛 Raises a clear error when ANDROID_API_LEVEL is not an integer (#2891)

• 🐛 Replaces assert with proper exception in python-build-standalone (#2859)

• 🐛 Uses ConfigurationError when package_dir is outside cwd instead of a generic Exception (#2898)

• 🛠 Updates dependencies and container pins (#2893, #2882, #2874, #2868, #2862, #2884, #2845, #2837, #2818, #2810, #2838, #2813)

• 🛠 Updates Android to Python 3.13.13 and 3.14.4 (#2821)

• 🛠 Applies Pyodide-specific patches to the Emscripten toolchain installation (#2800)

• 🛠 Uses python -V -V for Windows build diagnostics (#2832)

• 🛠 Simplifies pinned container image lookup (#2897)

• 🛠 Minor fixups across error messages, OCI container, and options (#2860)

• 💼 Adds PEP 723 metadata for bin/ scripts and drops the bin dependency group (#2819)

• 💼 Improves Azure test reliability with retries and caching (#2890)

• 💼 Fixes Windows GitLab CI test running (#2870)

• 💼 Updates CI action pins and dev dependencies (#2902, #2867, #2851, #2843, #2826, #2823, #2820, #2807)

• 💼 Adds agent and copilot setup files (#2861)

• 💼 Uses if TYPE_CHECKING: blocks (#2866, #2864)

• 🧪 Fixes Android tests using the uv frontend (#2809)

• 🧪 Fixes the update-dependencies workflow to use uv to run nox (#2808)

... (truncated)

Changelog

Sourced from pypa/cibuildwheel's changelog.

v2.14.1

15 July 2023

• 🛠 Updates the prerelease CPython 3.12 version to 3.12.0b4 (#1550)

v2.14.0

10 July 2023

• ✨ Adds support for building PyPy 3.10 wheels. (#1525)
• 🛠 Updates the prerelease CPython 3.12 version to 3.12.0b3.
• ✨ Allow the use of the {wheel} placeholder in CIBW_TEST_COMMAND (#1533)
• 📚 Docs & examples updates (#1532, #1416)
• ⚠️ Removed support for running cibuildwheel in Python 3.7. Python 3.7 is EOL. However, cibuildwheel continues to build Python 3.7 wheels for the moment. (#1175)

v2.13.1

10 June 2023

• 🛠 Updates the prerelease CPython 3.12 version to 3.12.0b2. (#1516)
• 🛠 Adds a moving v<major>.<minor> tag for use in GitHub Actions workflow files. If you use this, you'll get the latest patch release within a minor version. Additionally, Dependabot won't send you PRs for patch releases. (#1517)

v2.13.0

28 May 2023

• ✨ Adds CPython 3.12 support, under the prerelease flag CIBW_PRERELEASE_PYTHONS. This version of cibuildwheel uses 3.12.0b1.

  While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.12 will be available in cibuildwheel without the flag. (#1507)

• ✨ Adds the ability to pass arguments to the container engine when the container is created, using the CIBW_CONTAINER_ENGINE option. (#1499)

v2.12.3

19 April 2023

• 🐛 Fix an import error when running on Python 3.7. (#1479)

v2.12.2

18 April 2023

• 🐛 Fix a bug that caused an extra empty config-setting to be passed to the backend when CIBW_BUILD_FRONTEND is set to build. (#1474)
• 🐛 Fix a crash that occurred when overwriting an existing wheel on Windows. (#1464)
• 🛠 Pinned version updates, including CPython 3.10.11, 3.11.3, pip 23.1 and wheel 0.40.0.

v2.12.1

11 March 2023

... (truncated)

Commits

• 4726cd3 Bump version: v4.1.1
• 1af5cd7 docs: switch from mkdocs to properdocs (#2946)
• b21d76a docs: add missing cp314-pyodide_wasm32 to build-id table (#2947)
• 03cbe93 fix(macos): make matching python3-config available in build/test venvs (#2922)
• b7cac6d fix: don't error when a global build-frontend is set on pyodide (#2945)
• 1520daf fix: support platform-specific test runtime environment variables (#2941)
• 17b7420 [Bot] Update dependencies (#2939)
• f8d8cca chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the actions group...
• 265b435 chore(deps): bump the actions group with 2 updates (#2942)
• 3f8bd1c chore(deps): bump the actions group with 3 updates (#2938)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mstrathman]

Applied on main as one batch alongside the other four action bumps; see the batch commit.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.