chore(deps-dev): bump wheel from 0.45.1 to 0.46.2
What the developer wrote
Authored by dependabot[bot]
chore(deps-dev): bump wheel from 0.45.1 to 0.46.2
Bumps [wheel](https://github.com/pypa/wheel) from 0.45.1 to 0.46.2.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](https://github.com/pypa/wheel/compare/0.45.1...0.46.2)
---
updated-dependencies:
- dependency-name: wheel
dependency-version: 0.46.2
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps the Python 'wheel' development dependency from version 0.45.1 to 0.46.2 in the project's lock file. It only changes a package metadata entry and does not alter any device firmware, wallet logic, or runtime code. There is no indication this fixes or introduces a security issue.
No security action required. Treat as normal dependency hygiene; review the wheel 0.46.2 release notes in your standard dependency update workflow if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies uv.lock to record wheel 0.46.2 instead of 0.45.1. wheel is a direct:development dependency used for building Python packages, not a runtime dependency of the Trezor firmware. The diff shows only registry URL, hash, size, and version changes; no source code is touched. No security advisory, CVE, or vendor security statement is present in the commit or supplied references.
Changed components
uv.lockPython development dependency: wheelInspect captured patch +6 / −3
diff --git a/uv.lock b/uv.lock
index 81ded210..d4776f11 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2545,11 +2545,14 @@ wheels = [
[[package]]
name = "wheel"
-version = "0.45.1"
+version = "0.46.2"
source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/8a/98/2d9906746cdc6a6ef809ae6338005b3f21bb568bea3165cfc6a243fdc25c/wheel-0.45.1.tar.gz", hash = "sha256:661e1abd9198507b1409a20c02106d9670b2576e916d58f520316666abca6729", size = 107545, upload-time = "2024-11-23T00:18:23.513Z" }
+dependencies = [
+ { name = "packaging" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/9b/92/3a64fa9639b8e290fe8630d8067a66f7c5510845c6d73686ad880c9b04d9/wheel-0.46.2.tar.gz", hash = "sha256:3d79e48fde9847618a5a181f3cc35764c349c752e2fe911e65fa17faab9809b0", size = 60274, upload-time = "2026-01-21T23:55:25.838Z" }
wheels = [
- { url = "https://files.pythonhosted.org/packages/0b/2c/87f3254fd8ffd29e4c02732eee68a83a1d3c346ae39bc6822dcbcb697f2b/wheel-0.45.1-py3-none-any.whl", hash = "sha256:708e7481cc80179af0e556bbf0cc00b8444c7321e2700b8d8580231d13017248", size = 72494, upload-time = "2024-11-23T00:18:21.207Z" },
+ { url = "https://files.pythonhosted.org/packages/13/2c/5e079cefe955ae58e5a052fe037c850ce493eb7269dedeb960237e78fb0f/wheel-0.46.2-py3-none-any.whl", hash = "sha256:33ae60725d69eaa249bc1982e739943c23b34b58d51f1cb6253453773aca6e65", size = 29971, upload-time = "2026-01-21T23:55:24.447Z" },
]
[[package]]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.