Bump build from 1.4.1 to 1.4.2

[dependabot]

Bumps build from 1.4.1 to 1.4.2.

Release notes

Sourced from build's releases.

1.4.2

What's Changed

• fix(uv): always pass the python to use by @​henryiii in pypa/build#996
• 🐛 fix(release): detect pre-commit environment inconsistencies by @​gaborbernat in pypa/build#1001
• 🔧 fix(towncrier): match docstrfmt RST formatting expectations by @​gaborbernat in pypa/build#1002
• Fix _has_valid_outer_pip when pip is missing by @​notatallshaw in pypa/build#1003
• fix: release changelog issue by @​henryiii in pypa/build#1006

New Contributors

• @​notatallshaw made their first contribution in pypa/build#1003

Full Changelog: pypa/build@1.4.1...1.4.2

Changelog

Sourced from build's changelog.

#################### 1.4.3 (2026-04-10) ####################

---

Features

---

• Add kind parameter to log messages to separate semantic and representation - by :user:abitrolly (:issue:973)

---

Bugfixes

---

• Strip PYTHONPATH from the environment during isolated builds to prevent host packages from leaking into the build
  • by :user:gaborbernat (:issue:405)
• Pass --no-input to pip to prevent hidden credential prompts that cause hangs, and automatically set PIP_KEYRING_PROVIDER=subprocess (or UV_KEYRING_PROVIDER=subprocess for the uv installer) when the keyring CLI is on PATH -- by :user:gaborbernat (:issue:409)
• check_dependency now reports URL requirements as unmet instead of silently accepting them when a package with the same name is installed - by :user:gaborbernat (:issue:860)
• Fix misleading missing dependency error display where transitive dependency chains showed the top-level package on a separate line, making it appear as if the top-level package itself was missing - by :user:gaborbernat (:issue:875)
• Fix towncrier template to generate changelog categories in definition order - by :user:gaborbernat (:issue:1007)
• Resolve thread-safety races in the build API - by :user:gaborbernat (:issue:1015)
• Validate backend-path entries exist on disk with a clear error - by :user:gaborbernat (:issue:1016)

---

Miscellaneous

---

• :issue:1020, :issue:1021

#################### 1.4.2 (2026-03-25) ####################

---

Bugfixes

---

• Ensure the uv installer uses the current version of Python, avoiding an issue if UV_PYTHON is set, for example. (:issue:977)
• Fix _has_valid_outer_pip returning True when pip is missing, causing build to try using a non-existent pip instead of falling back to virtualenv. (:issue:1003)

#################### 1.4.1 (2026-03-24) ####################

... (truncated)

Commits

• 7b7ae07 chore: prepare for 1.4.2
• 17f3b57 fix: release changelog issue (#1006)
• b945752 fix: _has_valid_outer_pip when pip is missing (#1003)
• 74ae997 🔧 fix(towncrier): match docstrfmt RST formatting expectations (#1002)
• 3786929 🐛 fix(release): detect pre-commit environment inconsistencies (#1001)
• 737bdb7 fix(uv): always pass the python to use (#996)
• See full diff in compare view

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Change: Bump build dependency from 1.4.1 to 1.4.2 in pyproject.toml (development group).

---

Code Quality

• ✅ Style guide — Single-line change in a TOML config file; no style concerns.
• ✅ No commented-out code — N/A.
• ✅ Meaningful variable names — N/A.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic errors or security concerns. This is a patch-level version bump to the build tool, which is only in the development dependency group and does not affect production runtime behavior.
• ✅ CLAUDE.md — No issues; the project config is general and appropriate.

Testing

• ✅ No new code paths introduced; no tests required for a dev-tooling dependency bump.

Documentation

• ✅ README — No update needed.
• ✅ CHANGELOG.md — Not required for an automated dependency bump PR.
• ✅ Markdown — No markdown files changed.

Security

• ✅ No hardcoded credentials — N/A.
• ✅ No license files — No .lic files or AQAAAD-prefixed strings present.

---

Summary: This is a routine automated patch-level bump of the build package (dev dependency only). No issues found. Safe to merge.

Automated code review analyzing defects and coding standards

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

This is a minimal dependency bump PR — updating build from 1.4.1 to 1.4.2 in pyproject.toml.

---

Code Quality

• ✅ Style guide: Single-line change in pyproject.toml, no style concerns.
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic, no bugs. Pure version pin update.
• ✅ CLAUDE.md: No issues with project configuration.

Testing

• ✅ No new functions or endpoints introduced; no tests required for a dependency version bump.

Documentation

• ✅ README: No update needed.
• ✅ API docs: No update needed.
• ✅ Inline comments: N/A
• ✅ CHANGELOG.md: No CHANGELOG.md exists in this repo — not applicable.
• ✅ Markdown formatting: No markdown changes.

Security

• ✅ No hardcoded credentials
• ✅ Input validation: N/A
• ✅ Error handling: N/A
• ✅ Sensitive data in logs: N/A
• ✅ License files: None present.

---

Summary

This is a straightforward patch-version bump of the build dependency (1.4.1 → 1.4.2) in the development dependency group. No functional code changes. Approved with no issues.

Automated code review analyzing defects and coding standards