Bump the python-requirements group with 8 updates #934
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the python-requirements group with 8 updates: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `2.8.2` | `2.9.2` | | [rich](https://github.com/Textualize/rich) | `13.8.0` | `13.8.1` | | [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20240808` | `6.0.12.20240917` | | [types-requests](https://github.com/python/typeshed) | `2.32.0.20240712` | `2.32.0.20240914` | | [albumentations](https://github.com/albumentations-team/albumentations) | `1.4.16` | `1.4.17` | | [debugpy](https://github.com/microsoft/debugpy) | `1.8.5` | `1.8.6` | | [ruff](https://github.com/astral-sh/ruff) | `0.6.3` | `0.6.8` | | [validate-pyproject](https://github.com/abravalheri/validate-pyproject) | `0.19` | `0.20.2` | Updates `pydantic` from 2.8.2 to 2.9.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.8.2...v2.9.2) Updates `rich` from 13.8.0 to 13.8.1 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.8.0...v13.8.1) Updates `types-pyyaml` from 6.0.12.20240808 to 6.0.12.20240917 - [Commits](https://github.com/python/typeshed/commits) Updates `types-requests` from 2.32.0.20240712 to 2.32.0.20240914 - [Commits](https://github.com/python/typeshed/commits) Updates `albumentations` from 1.4.16 to 1.4.17 - [Release notes](https://github.com/albumentations-team/albumentations/releases) - [Commits](albumentations-team/albumentations@1.4.16...1.4.17) Updates `debugpy` from 1.8.5 to 1.8.6 - [Release notes](https://github.com/microsoft/debugpy/releases) - [Commits](microsoft/debugpy@v1.8.5...v1.8.6) Updates `ruff` from 0.6.3 to 0.6.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.6.3...0.6.8) Updates `validate-pyproject` from 0.19 to 0.20.2 - [Release notes](https://github.com/abravalheri/validate-pyproject/releases) - [Changelog](https://github.com/abravalheri/validate-pyproject/blob/main/CHANGELOG.rst) - [Commits](abravalheri/validate-pyproject@v0.19...v0.20.2) --- updated-dependencies: - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: types-pyyaml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: types-requests dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: albumentations dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: debugpy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: validate-pyproject dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements ... Signed-off-by: dependabot[bot] <[email protected]>
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
JBWilkie
approved these changes
Oct 2, 2024
dependabot
bot
deleted the
dependabot/pip/python-requirements-b6508e9a1f
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-requirements group with 8 updates:
2.8.22.9.213.8.013.8.16.0.12.202408086.0.12.202409172.32.0.202407122.32.0.202409141.4.161.4.171.8.51.8.60.6.30.6.80.190.20.2Updates
pydanticfrom 2.8.2 to 2.9.2Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
7cedbfbhistory updates7eab2b8v bumpc0a288fFixZoneInfowith various invalid types (#10408)ea6115dFix variance issue in_IncExtype alias, only allowTrue(#10414)fbfe25aFix serialization schema generation when usingPlainValidator(#10427)26cff3cAdding notes on designing callable discriminators (#10400)8a0e7adDo not error when trying to evaluate annotations of private attributes (#10358)ecc5275bump2c61bfdFix evaluation of stringified annotations during namespace inspection (#10347)3d364cbUse correct types namespace when building namedtuple core schemas (#10337)Updates
richfrom 13.8.0 to 13.8.1Release notes
Sourced from rich's releases.
Changelog
Sourced from rich's changelog.
Commits
260b35fMerge pull request #3485 from Textualize/bump1381574038dbump1f131d1Merge pull request #3481 from hugovk/add-3.13c8abbb3Fix test for Python 3.13815596eAdd support for Python 3.1322c2cffMerge pull request #3480 from Textualize/fix-infinite-appendf44e8bdchangelogf2ee295fix infinite loop in appendUpdates
types-pyyamlfrom 6.0.12.20240808 to 6.0.12.20240917Commits
Updates
types-requestsfrom 2.32.0.20240712 to 2.32.0.20240914Commits
Updates
albumentationsfrom 1.4.16 to 1.4.17Release notes
Sourced from albumentations's releases.
Commits
e7d5ef1Version boosted to 1.4.17 (#1956)7be7f1bUpdate elastic (#1954)e79e183Improve coarse dropout (#1953)972da69Add RandomOrder compose container and update SomeOf to handle n > len(transfo...Updates
debugpyfrom 1.8.5 to 1.8.6Release notes
Sourced from debugpy's releases.
Commits
25955a0Get debug attach to work for 3.12 (#1683)ae6812bPull in pydevd sys.monitoring support (#1680)a2f8081Detect whether debugger is already running and skip connecting/listening in t...fb6158aUpdate round-robin.yml (#1653)ddcb193Add round-robin issue assigner (#1650)Updates
rufffrom 0.6.3 to 0.6.8Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
ae39ce5Bump version to 0.6.8 (#13522)ff2d214Don't skip over imports and other nodes containing nested statements in impor...9442cd8Parenthesizematch..caseifguards (#13513)8012707Align formatting of patterns in match-cases with expression formatting in cla...d7ffe46Disable thetypesetplugin (#13517)7c83af4red-knot: Implement thenotoperator for allTypevariants (#13432)bbb044eDetect tuples bound to variadic positional arguments i.e.*args(#13512)4810652Avoid UP028 false negatives with non-reference shadowed bindings of loop vari...11f06e0Detect SIM910 when using variadic keyword arguments, i.e.,**kwargs(#13503)f27a8b8[internal]ComparableExpr(f)strings and bytes made invariant under concate...Updates
validate-pyprojectfrom 0.19 to 0.20.2Release notes
Sourced from validate-pyproject's releases.
Changelog
Sourced from validate-pyproject's changelog.
Commits
435e09fPrevent Github action for ignoring files for cachec23edc4Ensure iterator is consumed in tools/cache_urls_for_tests6d0e71dUpdate CHANGELOG18b3595Updatesetuptools.schema.json(#206)d1ea8f3Add tests to setuptools ext-modulesf0c2f49Updatesetuptools.schema.json6a9d2edAttempt building and linting in a single task for Cirrus CI (#205)730e339[pre-commit.ci] pre-commit autoupdate (#199)538dab7Update Cirrus CI config from latest PyScaffold template (#204)0f0e464Update Cirrus CI config from latest PyScaffold templateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions