build(deps): update dependency pdm to v2.26.3

[serious-scaffold]

This PR contains the following updates:

Package	Change	Age	Confidence
pdm (changelog)	2.25.4 -> 2.26.3

---

Release Notes

pdm-project/pdm (pdm)

v2.26.3

Compare Source

Features & Improvements

• Port to hishel 1.0.0. (#​3700)

Bug Fixes

• Update .gitignore file in the default template. (#​3686)
• Correct the sysconfig variables for Python standalone build installations. (#​3693)
• Ignore packages.vcs.requested-revision if it's None when formatting pylock.toml. (#​3694)
• Fix test failures with uv test cases using non-venv Python interpreters. (#​3698)

v2.26.2

Compare Source

Features & Improvements

• Only parse TOML document with tomlkit when writing is required. (#​3672)
• Add SHA256 checksums for binary releases during the release workflow and create an installer script that downloads binaries from GitHub releases with automatic platform detection and checksum verification. (#​3679)

Bug Fixes

• Fix test_use_python_write_file_multiple_versions to match PDM's actual behavior. (#​3660)
• Correctly calculate the venv path for UV_PROJECT_ENVIRONMENT env var when using uv mode. (#​3675)
• Ensure implementation.gil_disabled is a boolean in get_current_env_spec. This fix an issue that free-threaded wheels get rejected incorrectly. (#​3677)
• Fix CLI help formatting on Python 3.14+. (#​3683)
• Make PdmBasicAuth a cached_property to accelerate execution. (#​3684)

Removals and Deprecations

• Add deprecation warning for pdm search command as PyPI no longer supports search API. (#​3674)

Miscellany

• Add tests to utils.fs_supports_link_method and utils.convert_to_datetime. (#​3541)

v2.26.1

Compare Source

Bug Fixes

• Substitute missing env vars with empty string in expand_env_vars. (#​3653)
• Constrained hishel to be less than 1.0.0 due to its refactor (#​3657)

v2.26.0

Compare Source

Features & Improvements

• Limit the log file size to 100MB and truncate the log output if exceeded. (#​3633)
• Speed up dependency resolution in the bad path by skipping candidates of the same version when resolving. (#​3647)

Bug Fixes

• Reload project files after running hook scripts. (#​3615)
• Fix a bug when using UV as the resolver does not respect the venv.location configuration. (#​3616)
• Fix publish --skip-existing for Nexus Repository OSS >= 3.70 (#​3617)
• Fix a resolution failure when both prerelease and non-prerelease requirements exist. (#​3634)
• Ignore invalid python requirement during locking. (#​3635)
• Isolate PDM loggers with the root logger to avoid log leakage. (#​3637)
• Fix a crash when resolving URL dependencies under use_uv=true. (#​3640)

v2.25.9

Compare Source

No significant changes.

v2.25.8

Compare Source

Bug Fixes

• Fix a careless error by fast apply in AI coding. (#​3612)

v2.25.7

Compare Source

Features & Improvements

• Show the path to site-packages in the output of pdm info. (#​3600)

Bug Fixes

• Fix uv python dir path resolution on Windows (#​3603)
• Strip local version in version specifiers when writing package locks. (#​3605)
• Show an error message when 'default' is used in optional dependencies or dependency groups. (#​3609)
• Prevent hash clearing when appending to lockfile with env_spec. (#​3610)

v2.25.6

Compare Source

Features & Improvements

• The pdm python install -v command now shows the download URL for the Python interpreter. (#​3552)

Bug Fixes

• Ensure make_array always returns a tomlkit array type. (#​3586)
• Preserve multi-line help text in the CLI help output. (#​3587)
• Re-caculate artifact files and hashes when the lock target changes. (#​3595)

Dependencies

• Require packaging>22.0 and remove conditional PACKAGING_22 version checks. (#​3601)
• Bump truststore to version 0.10.4. (#​3602)

v2.25.5

Compare Source

Features & Improvements

• Tell the difference between free-threaded Python and normal ones. Users need to request for free-threaded versions explicitly by adding t to the version string, otherwise the normal build will be preferred. (#​3562)

Bug Fixes

• Fix a bug that editable local package URLs are empty when using pylock.toml. (#​3565)
• Fix a bug where pdm export with --lockfile pylock.toml produced empty requirements.txt files due to missing group information extraction from pylock format markers. (#​3573)
• Read metadata from installed distribution when using reuse-installed strategy. (#​3579)
• Fix a lockfile writing error when locking git dependencies in the pylock.toml format. (#​3582)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.