Changelog for python3-wheel: 0.47.0 -> 0.48.0
Source: docs/news.rst

**0.48.0** (2026-08-12)

- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or remove a
  PEP 440 local version identifier from a wheel
  (`#570 <https://github.com/pypa/wheel/issues/570>`_)
- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata versions
  (`#643 <https://github.com/pypa/wheel/issues/643>`_)
- Fixed ``wheel tags`` producing invalid archives when retagging wheels whose
  entries use ZIP64, by dropping the central-directory ZIP64 extra field that is
  not valid in a local file header
  (`#692 <https://github.com/pypa/wheel/issues/692>`_)
- Fixed ``wheel convert`` writing the converted wheel outside the destination
  directory when the input archive contained a maliciously crafted project name
  or version with path separators (arbitrary file write / path traversal)
  (`GHSA-vgq5-9859-3mmw <https://github.com/pypa/wheel/security/advisories/GHSA-vgq5-9859-3mmw>`_)