Bump build from 1.4.4 to 1.5.0

[dependabot]

Bumps build from 1.4.4 to 1.5.0.

Release notes

Sourced from build's releases.

1.5.0

What's Changed

• ci: try to improve release docs by @​henryiii in pypa/build#1051
• feat: drop 3.9, require 3.10+ by @​henryiii in pypa/build#1036
• chore: tox toml by @​henryiii in pypa/build#1033
• fix: api should not ignore installed, only CLI by @​henryiii in pypa/build#1056

Full Changelog: pypa/build@1.4.4...1.5.0

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

---

Features

---

• Drop Python 3.9 support - by :user:henryiii (:issue:1036)

---

Bugfixes

---

• Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

---

Miscellaneous

---

• :issue:1033

#################### 1.4.4 (2026-04-22) ####################

---

Bugfixes

---

• Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
• Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
• Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
• Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

---

Miscellaneous

---

• :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

---

Features

---

... (truncated)

Commits

• 615d04c chore: prepare for 1.5.0
• 776f702 fix: api should not ignore installed, only CLI (#1056)
• 42da4c4 pre-commit: bump repositories (#1055)
• b445cd2 chore: tox toml (#1033)
• c44c143 feat: drop 3.9, require 3.10+ (#1036)
• a9bb456 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions group...
• cb33511 ci: try to improve release docs (#1051)
• See full diff in compare view

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps the build dependency from 1.4.4 to 1.5.0 in pyproject.toml.

---

Code Quality

• ✅ Style guide: Single-line change in pyproject.toml, no style concerns.
• ✅ No commented-out code: N/A
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic errors or bugs introduced. This is a dependency version bump in the development group, so it only affects development tooling, not production code.
• ✅ CLAUDE.md: Not affected by this change.

Testing

• ✅ Unit/integration tests: No code changes requiring new tests.
• ✅ Edge cases: N/A
• ✅ Test coverage: N/A — dependency bump only.

Documentation

• ✅ README: No update needed for a dev-dependency bump.
• ✅ API docs: N/A
• ✅ Inline comments: N/A
• ✅ CHANGELOG.md: Not present in this diff, but for a dependency-only bump this is typically acceptable depending on project convention.
• ✅ Markdown formatting: N/A

Security

• ✅ No hardcoded credentials: N/A
• ✅ Input validation: N/A
• ✅ Error handling: N/A
• ✅ No sensitive data in logs: N/A
• ✅ No license files (.lic): None present.

---

Overall Assessment

Approved. This is a straightforward dependency bump of build (a Python build frontend used for packaging) from 1.4.4 → 1.5.0 in the development dependency group. It has no runtime impact. No issues found.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps the build development dependency from 1.4.4 to 1.5.0 in pyproject.toml.

---

Code Quality

• ✅ Style guide — Single-line change in a config file; no style concerns.
• ✅ No commented-out code — N/A.
• ✅ Meaningful variable names — N/A.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic, security, or runtime concerns. build is a development dependency group only, so it does not affect production or end-user installs.
• ✅ CLAUDE.md — No issues; the project config is general and environment-agnostic.

Testing

• ✅ Unit/integration tests — A dev tooling version bump does not require new tests.
• ✅ Edge cases / coverage — N/A.

Documentation

• ✅ README — No update needed for a dev dependency bump.
• ✅ API docs — N/A.
• ✅ Inline comments — N/A.
• ✅ CHANGELOG.md — Dependency bumps of this nature (automated/bot-driven) typically do not require a changelog entry; acceptable.
• ✅ Markdown formatting — No markdown files changed.

Security

• ✅ No hardcoded credentials — N/A.
• ✅ Input validation — N/A.
• ✅ Error handling — N/A.
• ✅ Sensitive data in logs — N/A.
• ✅ License files — None present.

---

Verdict: APPROVED — Clean, minimal bump of a development-only tool dependency. No issues found.

Automated code review analyzing defects and coding standards