deps(deps): bump installer from 0.7.0 to 1.0.1

[dependabot]

Bumps installer from 0.7.0 to 1.0.1.

Release notes

Sourced from installer's releases.

1.0.1

v1.0.1 (May 11, 2026)

• Include docs and tests in sdist again (#322)
• Fix long path issue on Windows (#321)
• Fix date in changelog (#324)
• Use os.path.abspath() instead of Path.resolve() for performance (#326)

1.0.0

v1.0.0 (Mar 28, 2025)

• Drop support for Python 3.9, 3.8, and 3.7 (#305, #242, #206)
• Add support and Python 3.13 and 3.14 (#201, #282)
• Add --overwrite-existing CLI option (#216)
• Add --validate-record CLI option (#161)
• Support installing multiple wheels (#203)
• Handle invalid hash algorithms (#179)
• Stream-based validation instead of in-memory (#98)
• Add validate_stream methods (#99)
• Consolidate and refine validation APIs (#108, #111)
• Sort entries before writing RECORD (#245)
• Do not install pycache from wheels (#307)
• Fix a path traversal bug (#317)
• Update launcher scripts and Windows behavior (#212, #181)
• Fix Windows relpath bug (#286)
• Migrate to dataclasses (#200)
• Use cached_property for memoization (#243)
• Refactor installer.scripts (#239)
• Decouple test modules (#104)
• Avoid cross-module imports from .utils (#102)
• Lazy imports for performance (#226)
• Complete type annotations and enforce strict mypy (#173)
• Deprecate RecordEntry.validate (#186)
• Fix documentation typos and grammar (#309, #210)
• Improve docstrings and internal documentation (#100)

Changelog

Sourced from installer's changelog.

v1.0.1 (May 11, 2026)

• Include docs and tests in sdist again (#322)
• Fix long path issue on Windows (#321)
• Fix date in changelog (#324)
• Use os.path.abspath() instead of Path.resolve() for performance (#326)

v1.0.0 (Mar 28, 2026)

• Drop support for Python 3.9, 3.8, and 3.7 (#305, #242, #206)
• Add support and Python 3.13 and 3.14 (#201, #282)
• Add --overwrite-existing CLI option (#216)
• Add --validate-record CLI option (#161)
• Support installing multiple wheels (#203)
• Handle invalid hash algorithms (#179)
• Stream-based validation instead of in-memory (#98)
• Add validate_stream methods (#99)
• Consolidate and refine validation APIs (#108, #111)
• Sort entries before writing RECORD (#245)
• Do not install pycache from wheels (#307)
• Fix a path traversal bug (#317)
• Update launcher scripts and Windows behavior (#212, #181)
• Fix Windows relpath bug (#286)
• Migrate to dataclasses (#200)
• Use cached_property for memoization (#243)
• Refactor installer.scripts (#239)
• Decouple test modules (#104)
• Avoid cross-module imports from .utils (#102)
• Lazy imports for performance (#226)
• Complete type annotations and enforce strict mypy (#173)
• Deprecate RecordEntry.validate (#186)
• Fix documentation typos and grammar (#309, #210)
• Improve docstrings and internal documentation (#100)

Commits

• 7ffa96f Update changelog and bump version for release (#331)
• 8b72cf9 perf: use os.path.abspath() instead of Path.resolve() (#326)
• 24d84b5 Fix changelog date (#324)
• 418329a [pre-commit.ci] pre-commit autoupdate (#323)
• b5f03f1 Fix long path issue on Windows (#321)
• 147fd00 Include docs and tests in sdist again (#322)
• 8bee7c0 Update version after release (#319)
• 506a015 Update changelog and version for release (#318)
• 2eccd66 Fix path traversal bug (#317)
• 504fa8f Fix wrong version in deprecation notice (#316)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.