Deps: Bump the python-packages group across 1 directory with 5 updates by dependabot[bot] · Pull Request #337 · greenbone/greenbone-feed-sync

dependabot · 2026-02-23T04:09:44Z

Bumps the python-packages group with 5 updates in the / directory:

Package	From	To
rich	`14.3.2`	`14.3.3`
pontos	`25.8.1`	`26.2.0`
coverage	`7.13.2`	`7.13.4`
librt	`0.7.8`	`0.8.1`
ruff	`0.14.14`	`0.15.2`

Updates rich from 14.3.2 to 14.3.3

Release notes

Sourced from rich's releases.

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Changelog

Sourced from rich's changelog.

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Commits

ce01188 Merge pull request #4008 from Textualize/bump1433
14a47c9 bump
f54bfe0 Merge pull request #4007 from Textualize/copilot/sub-pr-4006
7338cb9 Merge pull request #4006 from Textualize/fix-grapheme-stuck
905b397 Update tests/test_cells.py
b031dca Update tests/test_cells.py
f07a3fc Add regression tests for VS16 after zero-width chars in split_graphemes
b618ccc spelling
378c34b Initial plan
87e7ca2 refinements, and tests
Additional commits viewable in compare view

Updates pontos from 25.8.1 to 26.2.0

Release notes

Sourced from pontos's releases.

pontos 26.2.0

[26.2.0] - 2026-02-20

Added

Add --project-type to release create and all version CLI commands a6ff904e

add test a5d5d0f7

Bug Fixes

Add or Update detect-hidden-unicode.yml 4e995a14

fix linting 823399a1

fix error 2fcf4ada

fix errors 88d2a2b7

formatting 1c2a48e0

fix linting a9b74c9b

fix linting 9c28e94b

Dependencies

Bump the python-packages group with 2 updates e6ee003d

Bump ruff from 0.14.14 to 0.15.0 in the python-packages group 9e2ece33

Bump the python-packages group with 4 updates f15e15d9

Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group 43f5f9ae

Bump the python-packages group with 5 updates 51838e2c

Bump the python-packages group with 4 updates 60b8e915

Bump the python-packages group with 4 updates a7b75e65

Bump urllib3 from 2.6.2 to 2.6.3 7d7eaf82

Bump the python-packages group with 2 updates b6433dd5

Bump librt from 0.7.4 to 0.7.5 in the python-packages group c15f3cb1

Bump the python-packages group with 7 updates bb9ad208

Bump actions/upload-artifact in the actions group 0e79c666

Bump the python-packages group with 2 updates 4361aeb1

Bump actions/checkout from 6.0.0 to 6.0.1 in the actions group 7c9fea85

Bump the python-packages group with 3 updates c6dac7a3

Bump the python-packages group with 4 updates 9ecb7ee9

Bump actions/checkout from 5.0.0 to 6.0.0 in the actions group 2ba4bf91

Bump the python-packages group with 3 updates bce90a24

Bump the python-packages group with 3 updates 0f929fd1

Bump the python-packages group with 3 updates e0bf5947

Bump actions/upload-artifact in the actions group 770ddc90

Bump the python-packages group with 3 updates ec1f62c3

Bump ruff from 0.14.1 to 0.14.2 in the python-packages group 7bc68fc0

Bump the python-packages group with 5 updates 6bea2e02

Bump the python-packages group with 4 updates 48ec5950

Bump ossf/scorecard-action in the actions group 86a2faa0

Bump the python-packages group with 3 updates a2d17964

Bump the python-packages group across 1 directory with 11 updates e8850f23

Bump the python-packages group with 3 updates a046f472

Bump pypa/gh-action-pypi-publish in the actions group ccb073b8

Bump ruff from 0.11.13 to 0.12.12 in the python-packages group d99e8f00

Bump the python-packages group with 4 updates 6d36a9e9

Bump the actions group with 2 updates 01c1f450

... (truncated)

Commits

ff7b80e Automatic release to 26.2.0
a6ff904 Add: Add --project-type to release create and all version CLI commands
e6ee003 Deps: Bump the python-packages group with 2 updates
9e2ece3 Deps: Bump ruff from 0.14.14 to 0.15.0 in the python-packages group
f15e15d Deps: Bump the python-packages group with 4 updates
43f5f9a Deps: Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group
51838e2 Deps: Bump the python-packages group with 5 updates
60b8e91 Deps: Bump the python-packages group with 4 updates
e9eb455 Fix Add or Update detect-hidden-unicode.yml (#1177)
a7b75e6 Deps: Bump the python-packages group with 4 updates
Additional commits viewable in compare view

Updates coverage from 7.13.2 to 7.13.4

Changelog

Sourced from coverage's changelog.

Version 7.13.4 — 2026-02-09

Fix: the third-party code fix in 7.13.3 required examining the parent directories where coverage was run. In the unusual situation that one of the parent directories is unreadable, a PermissionError would occur, as described in issue 2129_. This is now fixed.

Fix: in test suites that change sys.path, coverage.py could fail with "RuntimeError: Set changed size during iteration" as described and fixed in pull 2130_. Thanks, Noah Fatsi.

We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: coveragepy/coveragepy#2121 .. _issue 2129: coveragepy/coveragepy#2129 .. _pull 2130: coveragepy/coveragepy#2130

.. _changes_7-13-3:

Version 7.13.3 — 2026-02-03

Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

.. _issue 2082: coveragepy/coveragepy#2082

.. _changes_7-13-2:

Commits

4f78d57 build: no need to publish status.json
f8616ff docs: sample HTML for 7.13.4
fcf8c68 docs: prep for 7.13.4
189ecfd docs: thanks Pankhudi Jain for ppc64le wheels #2121
58aade0 build: add support for ppc64le architecture (#2121)
8ea42c8 chore: bump actions/attest-build-provenance (#2131)
c09595f docs: Janine put a lot of effort into debugging issue #2128
8ee1760 docs: Greg wrote a great issue: #2129
76ba043 docs: thanks, Noah Fatsi
371fcc5 fix: set fixed paths_list in TreeMatcher init (#2130)
Additional commits viewable in compare view

Updates librt from 0.7.8 to 0.8.1

Commits

e9c167e Sync mypy
26eb1d2 Bump version to 0.8.0; add tests for base64
588d6c6 Sync mypy: base64 is non-experimental now
80dcab7 feat: Build wheel for riscv64 (#31)
See full diff in compare view

Updates ruff from 0.14.14 to 0.15.2

Release notes

Sourced from ruff's releases.

0.15.2

Release Notes

Released on 2026-02-19.

Preview features
Expand the default rule set (#23385)

In preview, Ruff now enables a significantly expanded default rule set of 412 rules, up from the stable default set of 59 rules. The new rules are mostly a superset of the stable defaults, with the exception of these rules, which are removed from the preview defaults:

multiple-imports-on-one-line (E401)

module-import-not-at-top-of-file (E402)

module-import-not-at-top-of-file (E701)

multiple-statements-on-one-line-semicolon (E702)

useless-semicolon (E703)

none-comparison (E711)

true-false-comparison (E712)

not-in-test (E713)

not-is-test (E714)

type-comparison (E721)

lambda-assignment (E731)

ambiguous-variable-name (E741)

ambiguous-class-name (E742)

ambiguous-function-name (E743)

undefined-local-with-import-star (F403)

undefined-local-with-import-star-usage (F405)

undefined-local-with-nested-import-star-usage (F406)

forward-annotation-syntax-error (F722)

If you use preview and prefer the old defaults, you can restore them with configuration like:
# ruff.toml
[lint]
select = ["E4", "E7", "E9", "F"]
pyproject.toml
[tool.ruff.lint]
select = ["E4", "E7", "E9", "F"]
If you do give them a try, feel free to share your feedback in the GitHub discussion!
[flake8-pyi] Also check string annotations (PYI041) (#19023)
Bug fixes

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.2

Released on 2026-02-19.

Preview features
Expand the default rule set (#23385)

In preview, Ruff now enables a significantly expanded default rule set of 412 rules, up from the stable default set of 59 rules. The new rules are mostly a superset of the stable defaults, with the exception of these rules, which are removed from the preview defaults:

multiple-imports-on-one-line (E401)

module-import-not-at-top-of-file (E402)

module-import-not-at-top-of-file (E701)

multiple-statements-on-one-line-semicolon (E702)

useless-semicolon (E703)

none-comparison (E711)

true-false-comparison (E712)

not-in-test (E713)

not-is-test (E714)

type-comparison (E721)

lambda-assignment (E731)

ambiguous-variable-name (E741)

ambiguous-class-name (E742)

ambiguous-function-name (E743)

undefined-local-with-import-star (F403)

undefined-local-with-import-star-usage (F405)

undefined-local-with-nested-import-star-usage (F406)

forward-annotation-syntax-error (F722)

If you use preview and prefer the old defaults, you can restore them with configuration like:
# ruff.toml
[lint]
select = ["E4", "E7", "E9", "F"]
pyproject.toml
[tool.ruff.lint]
select = ["E4", "E7", "E9", "F"]
If you do give them a try, feel free to share your feedback in the GitHub discussion!

... (truncated)

Commits

9d18ee9 Hard code workflow name and cancel-in-progress only for PRs (#23431)
7cc15f0 Bump 0.15.2 (#23430)
d1b5443 Add extension mapping to configuration file options (#23384)
222574a Expand the default rule set (#23385)
1465b5d [flake8-async] Fix in_async_context logic (#23426)
410902f [pyupgrade] Fix handling of typing.{io,re} (UP035) (#23131)
729610a [ty] Fall back to ambiguous for large control flow graphs (#23399)
1425c18 [ty] Add code folding support
97acaae [ty] Fix stack overflow for self-referential TypeOf in annotations (#23407)
1f380c8 [ty] Update tests reveal_type and Never (#23418)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rich](https://github.com/Textualize/rich) | `14.3.2` | `14.3.3` | | [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.2.0` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.13.2` | `7.13.4` | | [librt](https://github.com/mypyc/librt) | `0.7.8` | `0.8.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.14` | `0.15.2` | Updates `rich` from 14.3.2 to 14.3.3 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.2...v14.3.3) Updates `pontos` from 25.8.1 to 26.2.0 - [Release notes](https://github.com/greenbone/pontos/releases) - [Commits](greenbone/pontos@v25.8.1...v26.2.0) Updates `coverage` from 7.13.2 to 7.13.4 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.13.2...7.13.4) Updates `librt` from 0.7.8 to 0.8.1 - [Commits](mypyc/librt@v0.7.8...v0.8.1) Updates `ruff` from 0.14.14 to 0.15.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.14...0.15.2) --- updated-dependencies: - dependency-name: rich dependency-version: 14.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pontos dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: coverage dependency-version: 7.13.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: librt dependency-version: 0.8.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.15.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-02-23T04:10:10Z

Conventional Commits Report

Type	Number
Dependencies	1

🚀 Conventional commits found.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 23, 2026

dependabot bot requested review from a team as code owners February 23, 2026 04:09

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 23, 2026

greenbonebot enabled auto-merge (rebase) February 23, 2026 04:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Deps: Bump the python-packages group across 1 directory with 5 updates#337

Deps: Bump the python-packages group across 1 directory with 5 updates#337
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-packages-9af1f1d8f6

dependabot bot commented on behalf of github Feb 23, 2026

Uh oh!

github-actions bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 23, 2026

The infinite Release

[14.3.3] - 2026-02-19

Fixed

[14.3.3] - 2026-02-19

Fixed

pontos 26.2.0

[26.2.0] - 2026-02-20

Added

Bug Fixes

Dependencies

Version 7.13.4 — 2026-02-09

Version 7.13.3 — 2026-02-03

0.15.2

Release Notes

Preview features

Bug fixes

0.15.2

Preview features

Uh oh!

github-actions bot commented Feb 23, 2026

Conventional Commits Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants