Module import error with hishel >= 1.0.0

[ncoghlan]

Describe the bug

Attempting to upgrade the CI dependencies in venvstacks, I found that pdm was failing to set up a new environment due to hishel._serializers being missing.

I traced this to the recent hishel 1.0.0 release, as that included a significant source tree rearrangement that eliminated that private module: karpetrosyan/hishel@d1f8abf

To reproduce

Try to run pdm with hishel>=1.0.0

Expected Behavior

pdm to work normally

Environment Information

https://github.com/lmstudio-ai/venvstacks/actions/runs/19102506427 (initial CI run for lmstudio-ai/venvstacks#317, all triggered platform and Python version combinations)

Edit: switched to a specific PR action run link, as the PR itself now has an upper bound on hishel as a workaround

Verbose Command Output

No response

Additional Context

No response

Are you willing to submit a PR to fix this bug?

• Yes, I would like to submit a PR.

[frostming]

You need to pull the latest version of PDM, which already has an upper bound on hishel fixed by #3659

[ncoghlan]

Huh, that's curious. I hit this on a full dependency relock, so when pdm stayed at 0.25.9, I assumed it was because that was still the latest version.

I'll bump the minimum version specifier, thanks!