Skip to content

Comments

Deps: Bump the python-packages group with 3 updates#332

Merged
greenbonebot merged 1 commit intomainfrom
dependabot/pip/python-packages-cf9bee9b3e
Jan 19, 2026
Merged

Deps: Bump the python-packages group with 3 updates#332
greenbonebot merged 1 commit intomainfrom
dependabot/pip/python-packages-cf9bee9b3e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the python-packages group with 3 updates: librt, ruff and tomlkit.

Updates librt from 0.7.7 to 0.7.8

Commits

Updates ruff from 0.14.11 to 0.14.13

Release notes

Sourced from ruff's releases.

0.14.13

Release Notes

Released on 2026-01-15.

This is a follow-up release to 0.14.12. Because of an issue publishing the WASM packages, there is no GitHub release or Git tag for 0.14.12, although the package was published to PyPI. The contents of the 0.14.13 release are identical to 0.14.12.

0.14.12

Preview features

  • [flake8-blind-except] Allow more logging methods (BLE001) (#22057)
  • [ruff] Respect lint.pydocstyle.property-decorators in RUF066 (#22515)

Bug fixes

  • Fix configuration path in --show-settings (#22478)
  • Respect fmt: skip for multiple statements on the same logical line (#22119)

Rule changes

  • [pydocstyle] Update Rust crate imperative to v1.0.7 (D401) (#22519)
  • [isort] Insert imports in alphabetical order (I002) (#22493)

Documentation

  • Add llms.txt support for documentation (#22463)
  • Use prek in documentation and CI (#22505)
  • [flake8-pytest-style] Add check parameter example to PT017 docs (#22546)
  • [ruff] Make example error out-of-the-box (RUF103) (#22558)
  • [ruff] document RUF100 trailing comment fix behavior (#22479)

Other changes

  • wasm: Require explicit logging initialization (#22587)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.13

Released on 2026-01-15.

This is a follow-up release to 0.14.12. Because of an issue publishing the WASM packages, there is no GitHub release or Git tag for 0.14.12, although the package was published to PyPI. The contents of the 0.14.13 release are identical to 0.14.12.

0.14.12

Released on 2026-01-15.

Preview features

  • [flake8-blind-except] Allow more logging methods (BLE001) (#22057)
  • [ruff] Respect lint.pydocstyle.property-decorators in RUF066 (#22515)

Bug fixes

  • Fix configuration path in --show-settings (#22478)
  • Respect fmt: skip for multiple statements on the same logical line (#22119)

Rule changes

  • [pydocstyle] Update Rust crate imperative to v1.0.7 (D401) (#22519)
  • [isort] Insert imports in alphabetical order (I002) (#22493)

Documentation

  • Add llms.txt support for documentation (#22463)
  • Use prek in documentation and CI (#22505)
  • [flake8-pytest-style] Add check parameter example to PT017 docs (#22546)
  • [ruff] Make example error out-of-the-box (RUF103) (#22558)
  • [ruff] document RUF100 trailing comment fix behavior (#22479)

Other changes

  • wasm: Require explicit logging initialization (#22587)

Contributors

... (truncated)

Commits
  • b4b8299 [ty] Make NamedTuple(...) and namedtuple(...) calls stricter (#22601)
  • fd9f87d Bump 0.14.13 (#22604)
  • 048f02f [ty] Remove redundant re-exports that share the same top-most module
  • a72af10 [ty] Add ModuleName::top
  • 2f34836 [ty] Add test capturing redundant re-exports from pandas
  • db9eee7 [ty] Attach origin module on to re-exported symbols
  • 2cbd68a [ty] Move fully qualified name into auto-import implementation
  • 2a09467 Add trailing slashes to npm publish paths (#22603)
  • eca58ca [ty] Override __file__ to str when applicable on imported modules (#22333)
  • aa9f1b2 Further improvements to typing conformance script (#22596)
  • Additional commits viewable in compare view

Updates tomlkit from 0.13.3 to 0.14.0

Release notes

Sourced from tomlkit's releases.

0.14.0

What's Changed

New Contributors

Full Changelog: python-poetry/tomlkit@0.13.3...0.14.0

Changelog

Sourced from tomlkit's changelog.

[0.14.0] - 2026-01-13

Changed

  • Drop support for Python older than 3.9. Remove 3.8 from the CI matrix.

Added

  • Custom encoders can now receive _parent and _sort_keys parameters to enable proper encoding of nested structures. (#429)
  • Add String.type property to get the string type. (#443)

Fixed

  • Fixed tomlkit.boolean() API to correctly handle boolean inputs. (#442)
Commits
  • 090a28e chore(deps-dev): bump setuptools from 70.0.0 to 78.1.1 (#453)
  • 9bccd76 chore: bump version to 0.14.0 in pyproject.toml and init.py
  • e457892 chore(deps-dev): bump urllib3 from 2.2.2 to 2.6.3 (#452)
  • 82970a1 chore: update pre-commit hooks and refactor imports for consistency
  • edba395 chore: update Python version and GitHub Actions to use latest versions (#451)
  • 5495784 feat: add String.type property to retrieve the string type
  • a61a4d5 [pre-commit.ci] pre-commit autoupdate (#444)
  • 87ace5e [pre-commit.ci] pre-commit autoupdate (#438)
  • 3687d0d fix: update boolean function to handle both string and boolean inputs correctly
  • 6042e0c feat: enhance custom encoders to accept _parent and _sort_keys parameters (#436)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the python-packages group with 3 updates
b093e71 
Bumps the python-packages group with 3 updates: [librt](https://github.com/mypyc/librt), [ruff](https://github.com/astral-sh/ruff) and [tomlkit](https://github.com/sdispater/tomlkit).


Updates `librt` from 0.7.7 to 0.7.8
- [Commits](mypyc/librt@v0.7.7...v0.7.8)

Updates `ruff` from 0.14.11 to 0.14.13
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.11...0.14.13)

Updates `tomlkit` from 0.13.3 to 0.14.0
- [Release notes](https://github.com/sdispater/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.13.3...0.14.0)

---
updated-dependencies:
- dependency-name: librt
  dependency-version: 0.7.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.14.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: tomlkit
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 19, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 19, 2026 04:25
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 19, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 19, 2026 04:25
@dependabot dependabot bot added the python Pull requests that update Python code label Jan 19, 2026
@greenbonebot greenbonebot enabled auto-merge (rebase) January 19, 2026 04:25
@greenbonebot
Copy link
Member

greenbonebot commented Jan 19, 2026

Scan: 'poetry.lock'

Nothing detected in poetry.lock
Scan took 0.01 seconds

@github-actions
Copy link

github-actions bot commented Jan 19, 2026

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@greenbonebot greenbonebot merged commit 10955c9 into main Jan 19, 2026
25 of 26 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-cf9bee9b3e branch January 19, 2026 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bjoernricks bjoernricks bjoernricks approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@greenbonebot @bjoernricks