ci: Update build requirement from <1.4,>=1.2 to >=1.2,<1.7 in /python

[dependabot]

Updates the requirements on build to permit the latest version.

Release notes

Sourced from build's releases.

1.6.0

What's Changed

• Replace prettier with mdformat and yamlfmt by @​gaborbernat in pypa/build#1133
• Let yamlfmt format the workflows by @​gaborbernat in pypa/build#1134
• 🐛 fix(release): semver auto bump, changelog reflow, and roll back 1.5.1 by @​gaborbernat in pypa/build#1132
• fix: hash verification in --dependency-constraints-txt could be silently skipped by @​manfred-kaiser in pypa/build#1140
• 🐛 fix(ci): bump build-and-inspect-python-package to v3.0.1 by @​gaborbernat in pypa/build#1147
• 🐛 fix(ci): pin coverage core to ctrace so test contexts record by @​gaborbernat in pypa/build#1148
• chore: run mypy on more parts of the code by @​henryiii in pypa/build#1151
• chore: turn up strictness on mypy by @​henryiii in pypa/build#1153
• chore: faster mypy, fix merge error by @​henryiii in pypa/build#1156
• 🐛 fix(ci): rerun integration tests on transient network errors by @​gaborbernat in pypa/build#1150
• chore: clean up unused casts in tests by @​henryiii in pypa/build#1154
• refactor(typing): apply review feedback from #1093 by @​henryiii in pypa/build#1155
• chore: Generator is more accurate than Iterator by @​henryiii in pypa/build#1152
• tests: mark test_main_sdist_input_end_to_end with pytest.mark.network by @​frenzymadness in pypa/build#1144
• Revert "⚠️ feat(util): deprecate project_wheel_metadata" by @​henryiii in pypa/build#1158
• tests: download integration sources once per run by @​henryiii in pypa/build#1157
• Use stdlib importlib.metadata for typing by @​layday in pypa/build#1162
• Drop redundant exc_info parameter from backend exception wrapper by @​layday in pypa/build#1161
• Drop a few PyPy-specific test skips by @​layday in pypa/build#1164
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in pypa/build#1165
• 👷 ci: use app token for releases by @​gaborbernat in pypa/build#1169

New Contributors

• @​manfred-kaiser made their first contribution in pypa/build#1140
• @​frenzymadness made their first contribution in pypa/build#1144

Full Changelog: pypa/build@1.5.1...1.6.0

Changelog

Sourced from build's changelog.

#################### 1.6.1 (2026-09-10) ####################

---

Bugfixes

---

• Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:henryiii (:issue:1175) (:issue:1175)

---

Documentation

---

• Fix doubled backslashes in the Windows pip config path (%APPDATA%\pip\pip.ini) in the docs - by :user:aroh3006 (:issue:1149)

---

Miscellaneous

---

• :issue:1168, :issue:1170, :issue:1178

#################### 1.6.0 (2026-08-27) ####################

---

Features

---

• Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
• The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
• The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
• Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
• Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
  • by :user:gaborbernat (:issue:655)
• Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
• On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

---

Bugfixes

---

... (truncated)

Commits

• 7ac9efe chore: prepare for 1.6.0
• e57e2bf 👷 ci: use app token for releases (#1169)
• 66438ab pre-commit: bump repositories (#1167)
• 4ed9658 build(deps): bump the github-actions group with 3 updates (#1166)
• c76707f 🔧 chore: batch dependency updates weekly on Tuesday (#1165)
• b317437 Drop a few PyPy-specific test skips (#1164)
• 561f331 pre-commit: bump repositories (#1163)
• 9456281 refactor: drop redundant exc_info parameter from backend exception wrapper ...
• 3e7a445 Use stdlib importlib.metadata for typing (#1162)
• 9a2e1e9 tests: download integration sources once per run (#1157)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[xsscx]

2026-09-14 12:45:41 UTC