Skip to content

Bump the dependencies group with 14 updates #1402

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the dependencies group with 14 updates #1402

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 12, 2025 •
edited
Loading

Bumps the dependencies group with 14 updates:

Package From To
mypy 1.14.1 1.17.1
pytest 8.3.4 8.4.1
pytest-cov 6.0.0 6.2.1
types-setuptools 75.6.0.20241223 80.9.0.20250809
ruff 0.8.5 0.12.8
python-debian 0.1.49 1.0.1
pysequoia 0.1.25 0.1.29
zizmor 1.0.0 1.11.0
coverage 7.6.10 7.10.3
iniconfig 2.0.0 2.1.0
mypy-extensions 1.0.0 1.1.0
packaging 24.2 25.0
pluggy 1.5.0 1.6.0
typing-extensions 4.12.2 4.14.1

Updates mypy from 1.14.1 to 1.17.1

Changelog

Sourced from mypy's changelog.

Mypy 1.17.1

  • Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
  • Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
  • Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alexey Makridenko
  • Brian Schubert
  • Chad Dombrova
  • Chainfire
  • Charlie Denton
  • Charulata
  • Christoph Tyralla
  • CoolCat467
  • Donal Burns
  • Guy Wilson
  • Ivan Levkivskyi
  • johnthagen
  • Jukka Lehtosalo
  • Łukasz Kwieciński
  • Marc Mueller
  • Michael J. Sullivan
  • Mikhail Golubev
  • Sebastian Rittau
  • Shantanu
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table>

... (truncated)

Commits
  • acb2983 Bump version to 1.17.1
  • 933c913 Retain None as constraints bottom if no bottoms were provided (#19485)
  • 5f4428f Fix "ignored exception in hasattr" in dmypy (#19428)
  • 88fdeaa Prevent a crash when InitVar is redefined with a method in a subclass (#19453)
  • e44d14f Bump version to 1.17.1+dev
  • 0260991 Update version string
  • 3901aa2 Updates to 1.17 changelog (#19436)
  • 7d13396 Initial changelog for 1.17 release (#19427)
  • a182dec Combine the revealed types of multiple iteration steps in a more robust manne...
  • ab4fd57 Improve the handling of "iteration dependent" errors and notes in finally cla...
  • Additional commits viewable in compare view

Updates pytest from 8.3.4 to 8.4.1

Release notes

Sourced from pytest's releases.

8.4.1

pytest 8.4.1 (2025-06-17)

Bug fixes

  • #13461: Corrected _pytest.terminal.TerminalReporter.isatty to support being called as a method. Before it was just a boolean which could break correct code when using -o log_cli=true).

  • #13477: Reintroduced pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.

    This warning is raised when a test functions returns a value other than None, which is often a mistake made by beginners.

    See return-not-none{.interpreted-text role="ref"} for more information.

  • #13497: Fixed compatibility with Twisted 25+.

Improved documentation

  • #13492: Fixed outdated warning about faulthandler not working on Windows.

8.4.0

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

  • #11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.

  • #12346: Tests will now fail, instead of raising a warning, if they return any value other than None.

  • #12874: We dropped support for Python 3.8 following its end of life (2024-10-07).

  • #12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

    See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

  • #10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

  • #11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.

  • #12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.

  • #12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.

  • #12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

... (truncated)

Commits

Updates pytest-cov from 6.0.0 to 6.2.1

Changelog

Sourced from pytest-cov's changelog.

6.2.1 (2025-06-12)

  • Added a version requirement for pytest's pluggy dependency (1.2.0, released 2023-06-21) that has the required new-style hookwrapper API.

  • Removed deprecated license classifier (packaging).

  • Disabled coverage warnings in two more situations where they have no value:

    • "module-not-measured" in workers
    • "already-imported" in subprocesses

6.2.0 (2025-06-11)

  • The plugin now adds 3 rules in the filter warnings configuration to prevent common coverage warnings being raised as obscure errors::

    default:unclosed database in <sqlite3.Connection object at:ResourceWarning once::PytestCovWarning once::CoverageWarning

    This fixes most of the bad interactions that are occurring on pytest 8.4 with filterwarnings=error.

    The plugin will check if there already matching rules for the 3 categories (ResourceWarning, PytestCovWarning, CoverageWarning) and message (unclosed database in <sqlite3.Connection object at) before adding the filters.

    This means you can have this in your pytest configuration for complete oblivion (not recommended, if that is not clear)::

    filterwarnings = [ "error", "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning", "ignore::PytestCovWarning", "ignore::CoverageWarning", ]

6.1.1 (2025-04-05)

  • Fixed breakage that occurs when --cov-context and the no_cover marker are used together.

6.1.0 (2025-04-01)

  • Change terminal output to use full width lines for the coverage header. Contributed by Tsvika Shapira in [#678](https://github.com/pytest-dev/pytest-cov/issues/678) <https://github.com/pytest-dev/pytest-cov/pull/678>_.
  • Removed unnecessary CovFailUnderWarning. Fixes [#675](https://github.com/pytest-dev/pytest-cov/issues/675) <https://github.com/pytest-dev/pytest-cov/issues/675>_.
  • Fixed the term report not using the precision specified via --cov-precision.
Commits
  • 55dbe43 Bump version: 6.2.0 → 6.2.1
  • d17e9b7 Update changelog.
  • 8964ab7 Add a note for this warning disable.
  • e932e41 Prevent unimported warnings @ pytest-xdist workers
  • 573379b Bring pytest-cov's suprocess management in line with coverage's process_start...
  • f1884e8 Fix xdist pin.
  • 512c669 Added minium version requirements for pluggin (for new-style hookwrappers). P...
  • 629ba64 Remove deprecated license classifier.
  • dca5723 Bump version: 6.1.1 → 6.2.0
  • f69166a Also trigger the sqlite warning.
  • Additional commits viewable in compare view

Updates types-setuptools from 75.6.0.20241223 to 80.9.0.20250809

Commits

Updates ruff from 0.8.5 to 0.12.8

Release notes

Sourced from ruff's releases.

0.12.8

Release Notes

Preview features

  • [flake8-use-pathlib] Expand PTH201 to check all PurePath subclasses (#19440)

Bug fixes

  • [flake8-blind-except] Change BLE001 to correctly parse exception tuples (#19747)
  • [flake8-errmsg] Exclude typing.cast from EM101 (#19656)
  • [flake8-simplify] Fix raw string handling in SIM905 for embedded quotes (#19591)
  • [flake8-import-conventions] Avoid false positives for NFKC-normalized __debug__ import aliases in ICN001 (#19411)
  • [isort] Fix syntax error after docstring ending with backslash (I002) (#19505)
  • [pylint] Mark PLC0207 fixes as unsafe when *args unpacking is present (#19679)
  • [pyupgrade] Prevent infinite loop with I002 (UP010, UP035) (#19413)
  • [ruff] Parenthesize generator expressions in f-strings (RUF010) (#19434)

Rule changes

  • [eradicate] Don't flag pyrefly pragmas as unused code (ERA001) (#19731)

Documentation

  • Replace "associative" with "commutative" in docs for RUF036 (#19706)
  • Fix copy and line separator colors in dark mode (#19630)
  • Fix link to typing documentation (#19648)
  • [refurb] Make more examples error out-of-the-box (#19695,#19673,#19672)

Other changes

  • Include column numbers in GitLab output format (#19708)
  • Always expand tabs to four spaces in diagnostics (#19618)
  • Update pre-commit's ruff id (#19654)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.8

Preview features

  • [flake8-use-pathlib] Expand PTH201 to check all PurePath subclasses (#19440)

Bug fixes

  • [flake8-blind-except] Change BLE001 to correctly parse exception tuples (#19747)
  • [flake8-errmsg] Exclude typing.cast from EM101 (#19656)
  • [flake8-simplify] Fix raw string handling in SIM905 for embedded quotes (#19591)
  • [flake8-import-conventions] Avoid false positives for NFKC-normalized __debug__ import aliases in ICN001 (#19411)
  • [isort] Fix syntax error after docstring ending with backslash (I002) (#19505)
  • [pylint] Mark PLC0207 fixes as unsafe when *args unpacking is present (#19679)
  • [pyupgrade] Prevent infinite loop with I002 (UP010, UP035) (#19413)
  • [ruff] Parenthesize generator expressions in f-strings (RUF010) (#19434)

Rule changes

  • [eradicate] Don't flag pyrefly pragmas as unused code (ERA001) (#19731)

Documentation

  • Replace "associative" with "commutative" in docs for RUF036 (#19706)
  • Fix copy and line separator colors in dark mode (#19630)
  • Fix link to typing documentation (#19648)
  • [refurb] Make more examples error out-of-the-box (#19695,#19673,#19672)

Other changes

  • Include column numbers in GitLab output format (#19708)
  • Always expand tabs to four spaces in diagnostics (#19618)
  • Update pre-commit's ruff id (#19654)

0.12.7

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6

Preview features

  • [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
  • [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
  • [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

  • Support .pyi files in ruff analyze graph (#19611)
  • [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)

... (truncated)

Commits

Updates python-debian from 0.1.49 to 1.0.1

Updates pysequoia from 0.1.25 to 0.1.29

Commits
  • ba6f94b Merge pull request #48 from wiktor-k/wiktor-k/release
  • 99ad2a6 Release version 0.1.29
  • 11e2e65 Fix lints reported by latest cargo clippy
  • 442a95d Update dependencies
  • 8152fdb Describe changes in this version
  • 9e89b5a Merge pull request #47 from jap/v6-keys
  • 80fcc7f Add an option to Cert.generate to explicitly select v4/v6 keys
  • f33d1ce Merge pull request #46 from wiktor-k/wiktor-k/release-0.1.28
  • a0188dc Release version 0.1.28
  • e6b53d0 Update dependencies
  • Additional commits viewable in compare view

Updates zizmor from 1.0.0 to 1.11.0

Release notes

Sourced from zizmor's releases.

v1.11.0

New Features 🌈🔗

Enhancements 🌱🔗

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would crash when attempting to extract subfeatures from features containing non-ASCII codepoints (#989)

v1.10.0

This is a huge new release, with multiple new features, enhancements, and bugfixes!

New Features 🌈🔗

  • New audit: anonymous-definition detects unnamed workflows and actions. Definitions without a name: field appear anonymously in the GitHub Actions UI, making them harder to distinguish (#937)

    Many thanks to @​andrewpollack for implementing this audit!

  • Auto-fix mode: zizmor now experimentally supports --fix=[MODE], which enables the brand new auto-fix mode. This mode can automatically fix a subset of zizmor's findings. For this experimental release, auto-fixes are available for findings from the following audits:

    • artipacked: zizmor will attempt to add persist-credentials: false to actions/checkout steps that do not already have it.

    • template-injection: zizmor will attempt to rewrite run: blocks containing ${{ foo.bar }} to use ${FOO_BAR} instead, and will add an appropriate env: block to set FOO_BAR to the expression's evaluation.

    Read more about the new auto-fix mode in the documentation.

    Many thanks to @​mostafa for implementing this feature!

Enhancements 🌱🔗

  • The artipacked audit now produces findings on composite action definitions, rather than just workflow definitions (#896)
  • The use-trusted-publishing audit now produces findings on composite action definitions, rather than just workflow definitions (#899)
  • The bot-conditions audit now detects more spoofable actor checks, including checks against well-known user IDs for bot accounts (#905)
  • The template-injection and other audits now produce more precise findings when analyzing env context accesses for static-ness (#911)
  • The template-injection audit now produces more precise findings when analyzing inputs context accesses (#919)
  • zizmor now produces more descriptive error messages when it fails to parse a workflow or action definition (#956)
  • The bot-conditions audit now returns precise spans for flagged actor checks, instead of flagging the entire if: value (#949)
  • The template-injection audit now returns precise spans for flagged contexts and expressions, instead of flagging the entire script block (#958)
  • The obfuscation audit now returns precise spans for flagged expressions (#969)
  • The obfuscation audit now detects computed indices (e.g. inputs.foo[inputs.bar]) as a potentially obfuscatory pattern (#969)

Bug Fixes 🐛🔗

  • The template-injection audit no longer crashes when attempting to evaluate the static-ness of an environment context within a composite action uses: step (#887)
  • The bot-conditions audit now correctly analyzes index-style contexts, e.g. github['actor'] (#905)
  • Fixed a bug where zizmor would fail to parse expressions that contained >= or <= (#916)
  • Fixed a bug where zizmor would fail to parse expressions containing contexts with interstitial whitespace (#958)

... (truncated)

Changelog

Sourced from zizmor's changelog.

1.11.0

New Features 🌈

Enhancements 🌱

  • The [bot-conditions] audit now supports auto-fixes for many findings (#921)
  • The [bot-conditions] audit now produces findings on triggers other than pull_request_target (#921)

Bug Fixes 🐛

  • Fixed a bug where zizmor would crash when attempting to extract subfeatures from features containing non-ASCII codepoints (#989)

1.10.0

This is a huge new release, with multiple new features, enhancements, and bugfixes!

New Features 🌈

  • New audit: [anonymous-definition] detects unnamed workflows and actions. Definitions without a name: field appear anonymously in the GitHub Actions UI, making them harder to distinguish (#937)

    Many thanks to @​andrewpollack for implementing this audit!

  • Auto-fix mode: zizmor now experimentally supports --fix=[MODE], which enables the brand new auto-fix mode. This mode can automatically fix a subset of zizmor's findings. For this experimental release, auto-fixes are available for findings from the following audits:

    • [artipacked]: zizmor will attempt to add #!yaml persist-credentials: false to actions/checkout steps that do not already have it.

    • [template-injection]: zizmor will attempt to rewrite #!yaml run: blocks containing ${{ foo.bar }} to use ${FOO_BAR} instead, and will add an appropriate #!yaml env: block to set FOO_BAR to the expression's evaluation.

    Read more about the new auto-fix mode in the documentation.

    Many thanks to @​mostafa for implementing this feature!

Enhancements 🌱

... (truncated)

Commits

Updates coverage from 7.6.10 to 7.10.3

Changelog

Sourced from coverage's changelog.

Version 7.10.3 — 2025-08-10

  • Fixes for patch = subprocess:

    • If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.

    • If subprocesses were created in other directories, their data files were stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.

    • On Windows (or maybe only some Windows?) the patch would fail with a ModuleNotFound error trying to import coverage. This is now fixed, closing issue 2022_.

    • Originally only options set in the coverage configuration file would apply to subprocesses. Options set on the coverage run command line (such as --branch) wouldn't be communicated to the subprocesses. This could lead to combining failures, as described in issue 2021_. Now the entire configuration is used in subprocesses, regardless of its origin.

    • Added debug=patch to help diagnose problems.

  • Fix: really close all SQLite databases, even in-memory ones. Closes issue 2017_.

.. _issue 2017: nedbat/coveragepy#2017 .. _issue 2021: nedbat/coveragepy#2021 .. _issue 2022: nedbat/coveragepy#2022 .. _issue 2024: nedbat/coveragepy#2024 .. _issue 2025: nedbat/coveragepy#2025

.. _changes_7-10-2:

Version 7.10.2 — 2025-08-03

  • Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: nedbat/coveragepy#1999

.. _changes_7-10-1:

Version 7.10.1 — 2025-07-27

... (truncated)

Commits

Updates iniconfig from 2.0.0 to 2.1.0

Release notes

Sourced from iniconfig's releases.

v2.1.0

What's Changed

New Contributors

Full Changelog: pytest-dev/iniconfig@v2.0.0...v2.1.0

Changelog

Sourced from iniconfig's changelog.

2.1.0

  • fix artifact building - pin minimal version of hatch
  • drop eol python 3.8
  • add python 3.12 and 3.13
Commits
  • 34793a6 pre-commit
  • 136435d update changelog
  • 0bb99ad fix #62: require a minimal hatch version with correct metadata
  • 16793ea Merge pull request #56 from hugovk/add-3.12
  • 3dc2b2d Add support for Python 3.13
  • 2eb8abf Bump GitHub Actions
  • 8c4bb5b Set python-version for pre-commit to remove CI warning
  • 58b22b2 Drop support for EOL Python 3.7
  • 4a53042 Add support for Python 3.12
  • 9cae431 Merge pull request #54 from webknjaz/patch-1
  • Additional commits viewable in compare view

Updates mypy-extensions from 1.0.0 to 1.1.0

Commits

Updates packaging from 24.2 to 25.0

Release notes

Sourced from packaging's releases.

25.0

What's Changed

New Contributors

Full Changelog: pypa/packaging@24.2...25.0

Changelog

Sourced from packaging's changelog.

25.0 - 2025-04-19


* PEP 751: Add support for ``extras`` and ``dependency_groups`` markers. (:issue:`885`)
* PEP 738: Add support for Android platform tags. (:issue:`880`)
Commits
  • f585376 Bump for release
  • 600ecea Add changelog entries
  • 3910129 support 'extras' and 'dependency_groups' markers (#888)
  • 8e49b43 Add support for PEP 738 Android tags (#880)
  • e624d8e Bump the github-actions group with 3 updates (#886)
  • 71f38d8 Bump the github-actions group with 2 updates (#878)
  • 9b4922d Bump the github-actions group with 3 updates (#870)
  • 8510bd9 Upgrade to ruff 0.9.1 (#865)
  • 9375ec2 Re-add tests for Unicode file name parsing (#863)
  • 2256ed4 Bump the github-actions group across 1 directory with 2 updates (#864)
  • Additional commits viewable in compare view

Updates pluggy from 1.5.0 to 1.6.0

Changelog

Sourced from pluggy's changelog.

pluggy 1.6.0 (2025-05-15)

Deprecations and Removals

  • [#556](https://github.com/pytest-dev/pluggy/issues/556) <https://github.com/pytest-dev/pluggy/issues/556>_: Python 3.8 is no longer supported.

Bug Fixes

  • [#504](https://github.com/pytest-dev/pluggy/issues/504) <https://github.com/pytest-dev/pluggy/issues/504>_: Fix a regression in pluggy 1.1.0 where using :func:result.get_result() <pluggy.Result.get_result> on the same failed :class:~pluggy.Result causes the exception's traceback to get longer and longer.

  • [#544](https://github.com/pytest-dev/pluggy/issues/544) <https://github.com/pytest-dev/pluggy/issues/544>_: Correctly pass :class:StopIteration through hook wrappers.

    Raising a :class:StopIteration in a generator triggers a :class:RuntimeError.

    If the :class:RuntimeError of a generator has the passed in :class:StopIteration as cause resume with that :class:StopIteration as normal exception instead of failing with the :class:RuntimeError.

  • [#573](https://github.com/pytest-dev/pluggy/issues/573) <https://github.com/pytest-dev/pluggy/issues/573>_: Fix python 3.14 SyntaxError by rearranging code.

Commits
  • fd08ab5 Preparing release 1.6.0
  • c240362 [pre-commit.ci] pre-commit autoupdate (#578)
  • 0ceb558 Merge pull request #546 from RonnyPfannschmidt/ronny/hookwrapper-wrap-legacy
  • 1f4872e [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 4be0c55 add changelog
  • 615c6c5 Merge branch 'main' into hookwrapper-wrap-legacy
  • 2acc644 [pre-commit.ci] pre-commit a...

    Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 12, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 12, 2025 20:37
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from 0d6993f to 6fb1830 Compare August 19, 2025 01:17
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from 6fb1830 to b1ef0a7 Compare September 8, 2025 17:12
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from b1ef0a7 to 1f08f19 Compare September 22, 2025 17:08
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch 2 times, most recently from f074d57 to d4475f1 Compare October 6, 2025 17:03
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from d4475f1 to ba317ad Compare October 13, 2025 17:03
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from ba317ad to 0eb1d5a Compare October 20, 2025 17:16
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch 2 times, most recently from 7d1cb40 to e43262a Compare November 3, 2025 17:26
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch 2 times, most recently from ebf72cd to 8b00b2a Compare November 17, 2025 17:03
@dependabot
Bump the dependencies group with 14 updates
842aa92 
Bumps the dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [mypy](https://github.com/python/mypy) | `1.14.1` | `1.17.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `8.4.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `6.2.1` |
| [types-setuptools](https://github.com/typeshed-internal/stub_uploader) | `75.6.0.20241223` | `80.9.0.20250809` |
| [ruff](https://github.com/astral-sh/ruff) | `0.8.5` | `0.12.8` |
| [python-debian](https://salsa.debian.org/python-debian-team/python-debian) | `0.1.49` | `1.0.1` |
| [pysequoia](https://github.com/wiktor-k/pysequoia) | `0.1.25` | `0.1.29` |
| [zizmor](https://github.com/zizmorcore/zizmor) | `1.0.0` | `1.11.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.10` | `7.10.3` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.0.0` | `2.1.0` |
| [mypy-extensions](https://github.com/python/mypy_extensions) | `1.0.0` | `1.1.0` |
| [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.5.0` | `1.6.0` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.14.1` |


Updates `mypy` from 1.14.1 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.14.1...v1.17.1)

Updates `pytest` from 8.3.4 to 8.4.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...8.4.1)

Updates `pytest-cov` from 6.0.0 to 6.2.1
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.0.0...v6.2.1)

Updates `types-setuptools` from 75.6.0.20241223 to 80.9.0.20250809
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `ruff` from 0.8.5 to 0.12.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.5...0.12.8)

Updates `python-debian` from 0.1.49 to 1.0.1

Updates `pysequoia` from 0.1.25 to 0.1.29
- [Commits](wiktor-k/pysequoia@v0.1.25...v0.1.29)

Updates `zizmor` from 1.0.0 to 1.11.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.0.0...v1.11.0)

Updates `coverage` from 7.6.10 to 7.10.3
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.6.10...7.10.3)

Updates `iniconfig` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.0.0...v2.1.0)

Updates `mypy-extensions` from 1.0.0 to 1.1.0
- [Commits](python/mypy_extensions@1.0.0...1.1.0)

Updates `packaging` from 24.2 to 25.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@24.2...25.0)

Updates `pluggy` from 1.5.0 to 1.6.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.5.0...1.6.0)

Updates `typing-extensions` from 4.12.2 to 4.14.1
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.14.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest-cov
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: types-setuptools
  dependency-version: 80.9.0.20250809
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.12.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: python-debian
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pysequoia
  dependency-version: 0.1.29
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: zizmor
  dependency-version: 1.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.10.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: iniconfig
  dependency-version: 2.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: mypy-extensions
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: packaging
  dependency-version: '25.0'
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pluggy
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: typing-extensions
  dependency-version: 4.14.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies-76a2bba041 branch from 8b00b2a to 842aa92 Compare November 24, 2025 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant