# What changed in wheel

> 10 changes in wheel 0.46 to 0.48 from its official release notes, upgrade guides and advisories: 1 deprecations, 2 security, 2 new APIs and options. Each one cited. Sources checked 2026-11-12. HTML: https://unstale.sh/pypi/wheel/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## wheel 0.48

### Security

- Prevents converted wheels from being written outside the destination directory when an input archive has a project name or version containing path separators. (0.48.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.48.0)

### New APIs and options

- Adds an option to add, replace, or remove a PEP 440 local version identifier from a wheel. (0.48.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.48.0)

### Fixes and other changes

- No longer unnecessarily upgrades compatible core metadata versions when converting wheels. (0.48.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.48.0)
- Retagging wheels with ZIP64 entries no longer produces invalid archives; the invalid central-directory ZIP64 extra field is dropped. (0.48.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.48.0)

## wheel 0.47

### New APIs and options

- Added a subcommand to display metadata about wheel files without unpacking them. (0.47.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.47.0)

### Fixes and other changes

- Fixed `WheelFile` raising `Missing RECORD file` when the wheel filename contains uppercase characters but its `.dist-info` directory uses normalized lowercase naming. (0.47.0) — [release notes](https://github.com/pypa/wheel/releases/tag/0.47.0)

## wheel 0.46

### Security

- Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack (0.46.2) — [security advisory](https://github.com/advisories/GHSA-8RRH-RW8J-W5FX), [release notes](https://github.com/pypa/wheel/releases/tag/0.46.2)

### Deprecations

- Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning. (0.46.2) — [release notes](https://github.com/pypa/wheel/releases/tag/0.46.2)

### Fixes and other changes

- Fixed an ImportError when running bdist_wheel with an old version of setuptools installed alongside wheel. (0.46.3) — [release notes](https://github.com/pypa/wheel/releases/tag/0.46.3)
- The bdist_wheel command was restored for compatibility with setuptools older than v70.1. (0.46.2) — [release notes](https://github.com/pypa/wheel/releases/tag/0.46.2)