devel/py-setuptools_scm 10.2.3 NetBSD

## 10.3.4 (2026-09-23) ### Fixed - Ship the tracked files of projects whose `pyproject.toml` sits in a subdirectory of the checkout. `root` defaults to the project directory, so version inference correctly finds no SCM there and answers from `SETUPTOOLS_SCM_PRETEND_VERSION` or `fallback_version` -- but that says nothing about which files git tracks, and the sdist and wheel came out with none of them. This was the 10.3.0 regression fixed in 10.3.3, surviving in the subdirectory layout. File discovery now follows the checkout the project sits in, independently of the `root` that scopes versioning, and records `scm_file_list.json` in the egg-info as a root-level project already did. ([#1543](https://github.com/pypa/setuptools-scm/issues/1543)) …

10.2.3 (2026-09-03) Miscellaneous - Do not run the xmlsec download regression test on Python 3.8, where no lxml wheel exists and `--no-build-isolation` leaves pip without a build toolchain for the lxml sdist.

10.2.2 (2026-09-01) Miscellaneous - The `pkginfo` workdir discovery entry point moved to vcs-versioning; `vcs-versioning>=2.3.2` is now required (the workspace pin carries a `.dev0` suffix so in-tree builds resolve, matching the existing convention). `setuptools_scm._integration._discover.discover_pkginfo` remains as a re-export. - Stop shipping a per-package `uv.lock` in the sdist. It could not be generated correctly whenever `setuptools-scm` required an unreleased `vcs-versioning`, which broke the release proposal workflow.

10.2.1 (2026-07-21) Fixed - Omit ``scm_version.json`` and ``scm_file_list.json`` from wheel ``.dist-info`` while still including them in sdists for fallback discovery.