Skip to content

Comments

Deps: Bump the dependencies group across 1 directory with 7 updates#737

Merged
greenbonebot merged 1 commit intomainfrom
dependabot/pip/dependencies-4717bd0124
Aug 4, 2025
Merged

Deps: Bump the dependencies group across 1 directory with 7 updates#737
greenbonebot merged 1 commit intomainfrom
dependabot/pip/dependencies-4717bd0124

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 4, 2025

Bumps the dependencies group with 7 updates in the / directory:

Package From To
pontos 25.6.0 25.7.2
rich 14.0.0 14.1.0
coverage 7.9.2 7.10.2
furo 2024.8.6 2025.7.19
mypy 1.16.1 1.17.1
certifi 2025.7.14 2025.8.3
ruff 0.12.3 0.12.7

Updates pontos from 25.6.0 to 25.7.2

Release notes

Sourced from pontos's releases.

pontos 25.7.2

25.7.2 - 2025-07-30

Bug Fixes

  • Invalid CVE configurations data for node schema a6287f1e

pontos 25.7.1

25.7.1 - 2025-07-29

Dependencies

  • Bump the python-packages group across 1 directory with 4 updates 175a6401
  • Bump starlette from 0.47.1 to 0.47.2 073c944b

pontos 25.7.0

25.7.0 - 2025-07-28

Bug Fixes

  • format_date timespec and fallback timezone 12da523c

Dependencies

  • Bump the python-packages group across 1 directory with 10 updates 35505503
Commits
  • a9c266d Automatic release to 25.7.2
  • a6287f1 Fix: Invalid CVE configurations data for node schema
  • a53d2e9 Automatic adjustments after release [skip ci]
  • 4347052 Automatic release to 25.7.1
  • 175a640 Deps: Bump the python-packages group across 1 directory with 4 updates
  • 073c944 Deps: Bump starlette from 0.47.1 to 0.47.2
  • 811895e Automatic adjustments after release [skip ci]
  • 6a052af Automatic release to 25.7.0
  • d970b37 Future proof by capturing *args
  • c32c95d Additonal format_date tests
  • Additional commits viewable in compare view

Updates rich from 14.0.0 to 14.1.0

Release notes

Sourced from rich's releases.

The Lively Release

Live objects may now be nested. Previously a progress bar inside another progress context would fail. See the changelog below for this and other changes.

[14.1.0] - 2025-06-25

Changed

Fixed

Added

  • Added TTY_INTERACTIVE environment variable to force interactive mode off or on Textualize/rich#3777
Changelog

Sourced from rich's changelog.

[14.1.0] - 2025-06-25

Changed

Fixed

Added

  • Added TTY_INTERACTIVE environment variable to force interactive mode off or on Textualize/rich#3777
Commits

Updates coverage from 7.9.2 to 7.10.2

Changelog

Sourced from coverage's changelog.

Version 7.10.2 — 2025-08-03

  • Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: nedbat/coveragepy#1999

.. _changes_7-10-1:

Version 7.10.1 — 2025-07-27

  • Fix: the exclusion for if TYPE_CHECKING: was wrong: it marked the branch as partial, but it should have been a line exclusion so the entire clause would be excluded. Improves issue 831_.

  • Fix: changed where .pth files are written for patch = subprocess, closing issue 2006_.

.. _issue 2006: nedbat/coveragepy#2006

.. _changes_7-10-0:

Version 7.10.0 — 2025-07-24

  • A new configuration option: ":ref:config_run_patch" specifies named patches to work around some limitations in coverage measurement. These patches are available:

    • patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process. This closes long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.

    • patch = subprocess measures coverage in Python subprocesses created with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of functions. Closes old issue 367_ and duplicate issue 378_.

    • patch = execv adjusts the :func:execv <python:os.execl> family of functions to save coverage data before ending the current program and starting the next. Not available on Windows. Closes issue 43_ after 15 years!

  • The HTML report now dimly colors subsequent lines in multi-line statements.

... (truncated)

Commits
  • a867852 docs: sample HTML for 7.10.2
  • e7bfabe docs: prep for 7.10.2
  • 5dbd736 test: this test often borks metacov, retry it
  • b7430fa debug: more convenient run_trace.py
  • e2039d0 refactor: less redundancy in branch_trails
  • c177731 fix: see through nop bytecodes to get the right arcs. #1999
  • 7a83ab0 test: don't try to make pth files when invoked from pth #2011
  • 6d8b091 refactor: remove a commented-out line
  • fc507ad test: add a case for an extension-less Python file parse error
  • 05a6e8d test: no need for skip, we already skip windows
  • Additional commits viewable in compare view

Updates furo from 2024.8.6 to 2025.7.19

Changelog

Sourced from furo's changelog.

Changelog

2025.07.19 -- Frozen Flame

  • ✨ Switch to accessible-pygments themes
  • ✨ Prefetch the sidebar logos
  • ✨ Fix flickering header drop shadow on Safari
  • Add rel=edit attribute to "Edit this page" link/icon
  • Bump NodeJS and npm dependency versions
  • Bump Saas & Webpack major versions
  • Improve current page detection to be resilient to sticky elements above header
  • Modernise Sass and use @use + @forward
  • Remove top of code border-radius with captions
  • Remove "debug printf" for headerTop value
  • Use distinct images for light and dark mode in the documentation
  • Use the modern Saas Modules

2024.08.06 -- Energetic Eminence

  • ✨ Add support for Sphinx 8
  • ✨ Add smoother transitions between breakpoints
  • Increase specificity of table-wrapper selector
  • Avoid page breaks inside paragraphs

2024.07.18 -- Dull Denim

  • Improve how icons are handled and aligned.
  • Improve scroll event handler.
  • Hide the copybutton by default.
  • Fix source_view_link configuration handling.
  • Fix close tag on pencil icon.

2024.05.06 -- Cheerful Cerulean

  • ✨ Add new custom icons for auto mode, reflecting the currently active theme.
  • ✨ Add a view this page button.
  • ✨ Add colours and highlighting to "version modified" API helpers.
  • ✨ Add release information to various customisation knobs.
  • Make all icons bigger and use a thinner stroke with them.

... (truncated)

Commits
  • e2cbfce Prepare release: 2025.07.19
  • 2753741 Update changelog
  • 5dc72a3 Prefetch the sidebar logos
  • 01eb613 Use @use variables as *
  • 0dab870 Modernise Sass and use @use + @forward
  • 6a76aa7 Silence mypy on pygments attributes
  • 7d57173 Use distinct images for light and dark mode
  • 007374a Drop the URL to unsplash
  • 03c8880 Make current page section detection resilient to sticky elements above header...
  • ff34139 Fix flickering header drop shadow (#884)
  • Additional commits viewable in compare view

Updates mypy from 1.16.1 to 1.17.1

Changelog

Sourced from mypy's changelog.

Mypy 1.17.1

  • Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
  • Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
  • Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alexey Makridenko
  • Brian Schubert
  • Chad Dombrova
  • Chainfire
  • Charlie Denton
  • Charulata
  • Christoph Tyralla
  • CoolCat467
  • Donal Burns
  • Guy Wilson
  • Ivan Levkivskyi
  • johnthagen
  • Jukka Lehtosalo
  • Łukasz Kwieciński
  • Marc Mueller
  • Michael J. Sullivan
  • Mikhail Golubev
  • Sebastian Rittau
  • Shantanu
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table>

... (truncated)

Commits
  • acb2983 Bump version to 1.17.1
  • 933c913 Retain None as constraints bottom if no bottoms were provided (#19485)
  • 5f4428f Fix "ignored exception in hasattr" in dmypy (#19428)
  • 88fdeaa Prevent a crash when InitVar is redefined with a method in a subclass (#19453)
  • e44d14f Bump version to 1.17.1+dev
  • 0260991 Update version string
  • 3901aa2 Updates to 1.17 changelog (#19436)
  • 7d13396 Initial changelog for 1.17 release (#19427)
  • a182dec Combine the revealed types of multiple iteration steps in a more robust manne...
  • ab4fd57 Improve the handling of "iteration dependent" errors and notes in finally cla...
  • Additional commits viewable in compare view

Updates certifi from 2025.7.14 to 2025.8.3

Commits

Updates ruff from 0.12.3 to 0.12.7

Release notes

Sourced from ruff's releases.

0.12.7

Release Notes

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6 Release Notes

Preview features

  • [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
  • [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
  • [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

  • Support .pyi files in ruff analyze graph (#19611)
  • [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
  • [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
  • [refurb] Ignore decorated functions for FURB118 (#19339)
  • [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
  • [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

  • [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

  • Add support for specifying minimum dots in detected string imports (#19538)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.7

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6

Preview features

  • [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
  • [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
  • [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

  • Support .pyi files in ruff analyze graph (#19611)
  • [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
  • [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
  • [refurb] Ignore decorated functions for FURB118 (#19339)
  • [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
  • [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

  • [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

  • Add support for specifying minimum dots in detected string imports (#19538)

0.12.5

Preview features

  • [flake8-use-pathlib] Add autofix for PTH101, PTH104, PTH105, PTH121 (#19404)
  • [ruff] Support byte strings (RUF055) (#18926)

Bug fixes

  • Fix unreachable panic in parser (#19183)
  • [flake8-pyi] Skip fix if all Union members are None (PYI016) (#19416)
  • [perflint] Parenthesize generator expressions (PERF401) (#19325)
  • [pylint] Handle empty comments after line continuation (PLR2044) (#19405)

Rule changes

  • [pep8-naming] Fix N802 false positives for CGIHTTPRequestHandler and SimpleHTTPRequestHandler (#19432)

0.12.4

... (truncated)

Commits
  • c5ac998 Bump 0.12.7 (#19627)
  • 04a8f64 Revert license and license-files changes in pyproject.toml (#19624)
  • 6e00adf Bump 0.12.6 (#19622)
  • 864196b Add Checker::context method, deduplicate Unicode checks (#19609)
  • ae26fa0 [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • 88a6799 [ty] Add flow diagram for import resolution
  • 941be52 [ty] Add comments to some core resolver functions
  • 13624ce [ty] Add missing ticks and use consistent quoting
  • edb2f8e [ty] Reflow some long lines
  • 5e6ad84 [ty] Unexport helper function
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the dependencies group across 1 directory with 7 updates
b6c8f71 
Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pontos](https://github.com/greenbone/pontos) | `25.6.0` | `25.7.2` |
| [rich](https://github.com/Textualize/rich) | `14.0.0` | `14.1.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.9.2` | `7.10.2` |
| [furo](https://github.com/pradyunsg/furo) | `2024.8.6` | `2025.7.19` |
| [mypy](https://github.com/python/mypy) | `1.16.1` | `1.17.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.7.14` | `2025.8.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.3` | `0.12.7` |



Updates `pontos` from 25.6.0 to 25.7.2
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](greenbone/pontos@v25.6.0...v25.7.2)

Updates `rich` from 14.0.0 to 14.1.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.0.0...v14.1.0)

Updates `coverage` from 7.9.2 to 7.10.2
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.9.2...7.10.2)

Updates `furo` from 2024.8.6 to 2025.7.19
- [Release notes](https://github.com/pradyunsg/furo/releases)
- [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md)
- [Commits](pradyunsg/furo@2024.08.06...2025.07.19)

Updates `mypy` from 1.16.1 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.1)

Updates `certifi` from 2025.7.14 to 2025.8.3
- [Commits](certifi/python-certifi@2025.07.14...2025.08.03)

Updates `ruff` from 0.12.3 to 0.12.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.3...0.12.7)

---
updated-dependencies:
- dependency-name: pontos
  dependency-version: 25.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rich
  dependency-version: 14.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.10.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: furo
  dependency-version: 2025.7.19
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.12.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 4, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 4, 2025 05:15
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 4, 2025
@greenbonebot greenbonebot enabled auto-merge (rebase) August 4, 2025 05:16
@github-actions
Copy link

github-actions bot commented Aug 4, 2025

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@greenbonebot greenbonebot merged commit a285e18 into main Aug 4, 2025
19 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/dependencies-4717bd0124 branch August 4, 2025 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@y0urself y0urself y0urself approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@y0urself @greenbonebot