Deps: Bump the dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #733 · greenbone/autohooks

dependabot · 2025-07-07T05:02:49Z

Bumps the dependencies group with 8 updates in the / directory:

Package	From	To
pontos	`25.4.0`	`25.6.0`
coverage	`7.9.1`	`7.9.2`
mypy	`1.16.0`	`1.16.1`
colorful	`0.5.6`	`0.5.7`
lxml	`5.4.0`	`6.0.0`
pygments	`2.19.1`	`2.19.2`
ruff	`0.11.13`	`0.12.2`
typing-extensions	`4.14.0`	`4.14.1`

Updates pontos from 25.4.0 to 25.6.0

Release notes

Sourced from pontos's releases.

pontos 25.6.0

25.6.0 - 2025-06-24

Added

New unit tests 94290043

Changed

Silence mypy with type ignore instead of unreacable assert b75bb971

Adjust unit tests 5d35d92e

Improve error handling of all exists() API methods d9b27e4a

Dependencies

Bump urllib3 from 2.4.0 to 2.5.0 1dec6149

Bump the python-packages group across 1 directory with 8 updates c1f7066d

Bump ossf/scorecard-action in the actions group 0e460ed7

Bump the python-packages group with 5 updates 74d36fee

Bump the python-packages group with 2 updates f4b94d6a

Bump the python-packages group with 4 updates 9b569b68

Bump the python-packages group with 2 updates c0bc9b1d

Commits

d0f886a Automatic release to 25.6.0
b75bb97 Change: Silence mypy with type ignore instead of unreacable assert
9429004 Add: New unit tests
5d35d92 Change: Adjust unit tests
d9b27e4 Change: Improve error handling of all exists() API methods
1dec614 Deps: Bump urllib3 from 2.4.0 to 2.5.0
c1f7066 Deps: Bump the python-packages group across 1 directory with 8 updates
0e460ed Deps: Bump ossf/scorecard-action in the actions group
74d36fe Deps: Bump the python-packages group with 5 updates
f4b94d6 Deps: Bump the python-packages group with 2 updates
Additional commits viewable in compare view

Updates coverage from 7.9.1 to 7.9.2

Changelog

Sourced from coverage's changelog.

Version 7.9.2 — 2025-07-03

Fix: complex conditionals within a line might cause a KeyError when using sys.monitoring, as reported in issue 1991_. This is now fixed.

Fix: we can now measure coverage for code in Python archive (.par) files. Thanks, Itamer Oren <pull 1984_>_.

.. _pull 1984: nedbat/coveragepy#1984 .. _issue 1991: nedbat/coveragepy#1991

.. _changes_7-9-1:

Commits

6e77492 docs: oops, beta 3
b24cf7e docs: sample HTML for 7.9.2
35305c3 docs: prep for 7.9.2
9a8d9b6 docs: add pull request link
88dcaa2 fix: assume a missing line number is intra-line. #1991
678ec80 build: use pyenv for nightly builds. Thanks, Paul Timmins
a3d00d5 build: workflow jobs should have names
279310a chore: bump the action-dependencies group with 2 updates (#1988)
614dfbf fix: enable measuring test coverage for Python archive (.par) files (#1984)
42bf82c chore: bump the action-dependencies group with 2 updates (#1985)
Additional commits viewable in compare view

Updates mypy from 1.16.0 to 1.16.1

Commits

68b8fa0 Bump version to 1.16.1
e253ede Single underscore is not a sunder (#19273)
9fb5ff6 Fix properties with setters after deleters (#19248)
c20fd78 Handle assignment of bound methods in class bodies (#19233)
c86480c Tighten metaclass call handling in protocols (#19191)
cb3c6ec Fix crash on partial type used as context (#19216)
c39f5e7 [mypyc] Fixing condition for handling user-defined del (#19188)
0a4f284 Fix crash on invalid property inside its own body (#19208)
9b079f6 Bump version to 1.16.1+dev
See full diff in compare view

Updates colorful from 0.5.6 to 0.5.7

Release notes

Sourced from colorful's releases.

v0.5.7

What's Changed

Read version from ast.Constant instead of ast.Str by @carlwgeorge in timofurrer/colorful#56

fix: DualOutput object has no attribute isatty by @HollowMan6 in timofurrer/colorful#57

Update CI by @fliiiix in timofurrer/colorful#58

New Contributors

@HollowMan6 made their first contribution in timofurrer/colorful#57

Full Changelog: timofurrer/colorful@v0.5.6...v0.5.7

Changelog

Sourced from colorful's changelog.

[v0.5.7]

Fixed

Read version from ast.Constant instead of ast.Str thanks @carlwgeorge

fix: DualOutput object has no attribute isatty thanks @HollowMan6

Test Python 3.13 support

Unsupported Python versions 3.4, 3.5, 3.6 are not tested anymore

Commits

b9cff30 release: v0.5.7
22a1723 Merge pull request #58 from timofurrer/chore/maintanace
9130b2d Update codecov action
4fa49d2 Update test matrix and add 3.13
caccb89 Merge pull request #57 from HollowMan6/master
1648dd5 fix: DualOutput object has no attribute isatty
1430ec3 Merge pull request #56 from carlwgeorge/py314
2613391 Read version from ast.Constant instead of ast.Str
See full diff in compare view

Updates lxml from 5.4.0 to 6.0.0

Changelog

Sourced from lxml's changelog.

6.0.0 (2025-06-26)

Features added

GH#463: lxml.html.diff is faster and provides structurally better diffs. Original patch by Steven Fernandez.

GH#405: The factories Element and ElementTree can now be used in type hints.

GH#448: Parsing from memoryview and other buffers is supported to allow zero-copy parsing.

GH#437: lxml.html.builder was missing several HTML5 tag names. Patch by Nick Tarleton.

GH#458: CDATA can now be written into the incremental xmlfile() writer. Original patch by Lane Shaw.

A new parser option decompress=False was added that controls the automatic input decompression when using libxml2 2.15.0 or later. Disabling this option by default will effectively prevent decompression bombs when handling untrusted input. Code that depends on automatic decompression must enable this option. Note that libxml2 2.15.0 was not released yet, so this option currently has no effect but can already be used.

The set of compile time / runtime supported libxml2 feature names is available as etree.LIBXML_COMPILED_FEATURES and etree.LIBXML_FEATURES. This currently includes catalog, ftp, html, http, iconv, icu, lzma, regexp, schematron, xmlschema, xpath, zlib.

Bugs fixed

GH#353: Predicates in .find*() could mishandle tag indices if a default namespace is provided. Original patch by Luise K.

GH#272: The head and body properties of lxml.html elements failed if no such element was found. They now return None instead. Original patch by FVolral.

Tag names provided by code (API, not data) that are longer than INT_MAX could be truncated or mishandled in other ways.

.text_content() on lxml.html elements accidentally returned a "smart string" without additional information. It now returns a plain string.

LP#2109931: When building lxml with coverage reporting, it now disables the sys.monitoring support due to the lack of support in nedbat/coveragepy#1790

... (truncated)

Commits

2a67034 Prepare release of 6.0.0.
e0b4e02 Update changelog.
d3f4dcf Build: Upgrade libxml2 to latest 2.14.4.
014e51c Build: Add Windows arm64 wheel builds (GH-465)
d3914dc Only use "xmlCtxtIsStopped()" from libxml2 2.15.0 on since it fails to cover ...
6e41390 Avoid reading the deprecated "disableSAX" attribute of "xmlParserCtxt".
f85da81 Use newer "language_level=3" in ElementPath module.
787315e Build: bump pypa/cibuildwheel in the github-actions group (#464)
fb3adb1 Readme: Add project income report for 2024.
8e61a75 Fit cached tuple more nicely into cachelines.
Additional commits viewable in compare view

Updates pygments from 2.19.1 to 2.19.2

Release notes

Sourced from pygments's releases.

2.19.2

Lua: Fix regression introduced in 2.19.0 (#2882, #2839)

Changelog

Sourced from pygments's changelog.

Version 2.19.2

(released June 21st, 2025)

Lua: Fix regression introduced in 2.19.0 (#2882, #2839)

Commits

cfca62e Prepare v2.19.2 release.
6688300 Disable pyodide (currently broken.)
66997c3 Update ruff version.
94dda77 Update CHANGES.
26634c8 Merge pull request #2882 from thavelick/fix_lua_runaway_regex
b6a51ec fix lua regex causing runaway backtracking.
edef94d Investigation for #2839.
fb6a00e Merge pull request #2837 from dlazin/sql-cleanup
bf7aa23 Clean up sql.py
See full diff in compare view

Updates ruff from 0.11.13 to 0.12.2

Release notes

Sourced from ruff's releases.

0.12.2

Release Notes

Preview features

[flake8-pyi] Expand Optional[A] to A | None (PYI016) (#18572)

[pyupgrade] Mark UP008 fix safe if no comments are in range (#18683)

Bug fixes

[flake8-comprehensions] Fix C420 to prepend whitespace when needed (#18616)

[perflint] Fix PERF403 panic on attribute or subscription loop variable (#19042)

[pydocstyle] Fix D413 infinite loop for parenthesized docstring (#18930)

[pylint] Fix PLW0108 autofix introducing a syntax error when the lambda's body contains an assignment expression (#18678)

[refurb] Fix false positive on empty tuples (FURB168) (#19058)

[ruff] Allow more field calls from attrs (RUF009) (#19021)

[ruff] Fix syntax error introduced for an empty string followed by a u-prefixed string (UP025) (#18899)

Rule changes

[flake8-executable] Allow uvx in shebang line (EXE003) (#18967)

[pandas] Avoid flagging PD002 if pandas is not imported (#18963)

[pyupgrade] Avoid PEP-604 unions with typing.NamedTuple (UP007, UP045) (#18682)

Documentation

Document link between import-outside-top-level (PLC0415) and lint.flake8-tidy-imports.banned-module-level-imports (#18733)

Fix description of the format.skip-magic-trailing-comma example (#19095)

[airflow] Make AIR302 example error out-of-the-box (#18988)

[airflow] Make AIR312 example error out-of-the-box (#18989)

[flake8-annotations] Make ANN401 example error out-of-the-box (#18974)

[flake8-async] Make ASYNC100 example error out-of-the-box (#18993)

[flake8-async] Make ASYNC105 example error out-of-the-box (#19002)

[flake8-async] Make ASYNC110 example error out-of-the-box (#18975)

[flake8-async] Make ASYNC210 example error out-of-the-box (#18977)

[flake8-async] Make ASYNC220, ASYNC221, and ASYNC222 examples error out-of-the-box (#18978)

[flake8-async] Make ASYNC251 example error out-of-the-box (#18990)

[flake8-bandit] Make S201 example error out-of-the-box (#19017)

[flake8-bandit] Make S604 and S609 examples error out-of-the-box (#19049)

[flake8-bugbear] Make B028 example error out-of-the-box (#19054)

[flake8-bugbear] Make B911 example error out-of-the-box (#19051)

[flake8-datetimez] Make DTZ011 example error out-of-the-box (#19055)

[flake8-datetimez] Make DTZ901 example error out-of-the-box (#19056)

[flake8-pyi] Make PYI032 example error out-of-the-box (#19061)

[flake8-pyi] Make example error out-of-the-box (PYI014, PYI015) (#19097)

[flake8-pyi] Make example error out-of-the-box (PYI042) (#19101)

[flake8-pyi] Make example error out-of-the-box (PYI059) (#19080)

[flake8-pyi] Make example error out-of-the-box (PYI062) (#19079)

[flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)

[flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.2

Preview features

[flake8-pyi] Expand Optional[A] to A | None (PYI016) (#18572)

[pyupgrade] Mark UP008 fix safe if no comments are in range (#18683)

Bug fixes

[flake8-comprehensions] Fix C420 to prepend whitespace when needed (#18616)

[perflint] Fix PERF403 panic on attribute or subscription loop variable (#19042)

[pydocstyle] Fix D413 infinite loop for parenthesized docstring (#18930)

[pylint] Fix PLW0108 autofix introducing a syntax error when the lambda's body contains an assignment expression (#18678)

[refurb] Fix false positive on empty tuples (FURB168) (#19058)

[ruff] Allow more field calls from attrs (RUF009) (#19021)

[ruff] Fix syntax error introduced for an empty string followed by a u-prefixed string (UP025) (#18899)

Rule changes

[flake8-executable] Allow uvx in shebang line (EXE003) (#18967)

[pandas] Avoid flagging PD002 if pandas is not imported (#18963)

[pyupgrade] Avoid PEP-604 unions with typing.NamedTuple (UP007, UP045) (#18682)

Documentation

Document link between import-outside-top-level (PLC0415) and lint.flake8-tidy-imports.banned-module-level-imports (#18733)

Fix description of the format.skip-magic-trailing-comma example (#19095)

[airflow] Make AIR302 example error out-of-the-box (#18988)

[airflow] Make AIR312 example error out-of-the-box (#18989)

[flake8-annotations] Make ANN401 example error out-of-the-box (#18974)

[flake8-async] Make ASYNC100 example error out-of-the-box (#18993)

[flake8-async] Make ASYNC105 example error out-of-the-box (#19002)

[flake8-async] Make ASYNC110 example error out-of-the-box (#18975)

[flake8-async] Make ASYNC210 example error out-of-the-box (#18977)

[flake8-async] Make ASYNC220, ASYNC221, and ASYNC222 examples error out-of-the-box (#18978)

[flake8-async] Make ASYNC251 example error out-of-the-box (#18990)

[flake8-bandit] Make S201 example error out-of-the-box (#19017)

[flake8-bandit] Make S604 and S609 examples error out-of-the-box (#19049)

[flake8-bugbear] Make B028 example error out-of-the-box (#19054)

[flake8-bugbear] Make B911 example error out-of-the-box (#19051)

[flake8-datetimez] Make DTZ011 example error out-of-the-box (#19055)

[flake8-datetimez] Make DTZ901 example error out-of-the-box (#19056)

[flake8-pyi] Make PYI032 example error out-of-the-box (#19061)

[flake8-pyi] Make example error out-of-the-box (PYI014, PYI015) (#19097)

[flake8-pyi] Make example error out-of-the-box (PYI042) (#19101)

[flake8-pyi] Make example error out-of-the-box (PYI059) (#19080)

[flake8-pyi] Make example error out-of-the-box (PYI062) (#19079)

[flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)

[flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)

[flake8-quotes] Make example error out-of-the-box (Q003) (#19106)

... (truncated)

Commits

9bee837 Bump 0.12.2 (#19126)
1c6717b Filter private symbols from stubs if they are internal types (#19121)
1b813cd Fix description of the format.skip-magic-trailing-comma example (#19095)
b00f68a [ruff] Allow more field calls from attrs (RUF009) (#19021)
710c60f [flake8-pytest-style] Make example error out-of-the-box (PT023) (#19104)
811e25d [flake8-pytest-style] Make example error out-of-the-box (PT030) (#19105)
b78af2d [flake8-quotes] Make example error out-of-the-box (Q003) (#19106)
4f36f06 Document link between import-outside-top-level (PLC0415) and `lint.flake8-t...
2589a29 [flake8-simplify] Make example error out-of-the-box (SIM113) (#19109)
26bb8f7 [flake8-simplify] Make example error out-of-the-box (SIM401) (#19110)
Additional commits viewable in compare view

Updates typing-extensions from 4.14.0 to 4.14.1

Release notes

Sourced from typing-extensions's releases.

4.14.1

Release 4.14.1 (July 4, 2025)

Fix usage of typing_extensions.TypedDict nested inside other types (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the type system but worked on older versions, so we maintain support.

Changelog

Sourced from typing-extensions's changelog.

Release 4.14.1 (July 4, 2025)

Fix usage of typing_extensions.TypedDict nested inside other types (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the type system but worked on older versions, so we maintain support.

Commits

42027ab Prepare release 4.14.1 (#620)
59d2c20 Fix off by one in pickle protocol tests (#618)
40e22eb Do not use slots for _TypedDictSpecialForm (#616)
d17c456 allow TypedDict as a type argument (#614)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pontos](https://github.com/greenbone/pontos) | `25.4.0` | `25.6.0` | | [coverage](https://github.com/nedbat/coveragepy) | `7.9.1` | `7.9.2` | | [mypy](https://github.com/python/mypy) | `1.16.0` | `1.16.1` | | [colorful](https://github.com/timofurrer/colorful) | `0.5.6` | `0.5.7` | | [lxml](https://github.com/lxml/lxml) | `5.4.0` | `6.0.0` | | [pygments](https://github.com/pygments/pygments) | `2.19.1` | `2.19.2` | | [ruff](https://github.com/astral-sh/ruff) | `0.11.13` | `0.12.2` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.14.0` | `4.14.1` | Updates `pontos` from 25.4.0 to 25.6.0 - [Release notes](https://github.com/greenbone/pontos/releases) - [Commits](greenbone/pontos@v25.4.0...v25.6.0) Updates `coverage` from 7.9.1 to 7.9.2 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.9.1...7.9.2) Updates `mypy` from 1.16.0 to 1.16.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.16.0...v1.16.1) Updates `colorful` from 0.5.6 to 0.5.7 - [Release notes](https://github.com/timofurrer/colorful/releases) - [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md) - [Commits](timofurrer/colorful@v0.5.6...v0.5.7) Updates `lxml` from 5.4.0 to 6.0.0 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-5.4.0...lxml-6.0.0) Updates `pygments` from 2.19.1 to 2.19.2 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.19.1...2.19.2) Updates `ruff` from 0.11.13 to 0.12.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.13...0.12.2) Updates `typing-extensions` from 4.14.0 to 4.14.1 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.0...4.14.1) --- updated-dependencies: - dependency-name: pontos dependency-version: 25.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: coverage dependency-version: 7.9.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mypy dependency-version: 1.16.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: colorful dependency-version: 0.5.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: lxml dependency-version: 6.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pygments dependency-version: 2.19.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: ruff dependency-version: 0.12.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typing-extensions dependency-version: 4.14.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-07-07T05:03:15Z

Conventional Commits Report

Type	Number
Dependencies	1

🚀 Conventional commits found.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 7, 2025

dependabot bot requested a review from a team as a code owner July 7, 2025 05:02

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 7, 2025

greenbonebot enabled auto-merge (rebase) July 7, 2025 05:02

y0urself approved these changes Jul 7, 2025

View reviewed changes

greenbonebot merged commit 6db3de9 into main Jul 7, 2025
21 checks passed

greenbonebot deleted the dependabot/pip/dependencies-94704d1213 branch July 7, 2025 10:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Deps: Bump the dependencies group across 1 directory with 8 updates#733

Deps: Bump the dependencies group across 1 directory with 8 updates#733
greenbonebot merged 1 commit intomainfrom
dependabot/pip/dependencies-94704d1213

dependabot bot commented on behalf of github Jul 7, 2025

Uh oh!

github-actions bot commented Jul 7, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Comments

Conversation

dependabot bot commented on behalf of github Jul 7, 2025

pontos 25.6.0

25.6.0 - 2025-06-24

Added

Changed

Dependencies

Version 7.9.2 — 2025-07-03

v0.5.7

What's Changed

New Contributors

[v0.5.7]

Fixed

6.0.0 (2025-06-26)

Features added

Bugs fixed

2.19.2

Version 2.19.2

0.12.2

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

0.12.2

Preview features

Bug fixes

Rule changes

Documentation

4.14.1

Release 4.14.1 (July 4, 2025)

Release 4.14.1 (July 4, 2025)

Uh oh!

github-actions bot commented Jul 7, 2025

Conventional Commits Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants