- Added a
--local-versionoption towheel packto add, replace, or remove a PEP 440 local version identifier from a wheel (#570) - Fixed
wheel convertunnecessarily upgrading compatible core metadata versions (#643) - Fixed
wheel tagsproducing invalid archives when retagging wheels whose entries use ZIP64, by dropping the central-directory ZIP64 extra field that is not valid in a local file header (#692) - Fixed
wheel convertwriting the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file write / path traversal) (GHSA-vgq5-9859-3mmw)