Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 4, 2025

Bumps the dependencies group in /.config with 7 updates:

Package From To
ansible-lint 25.2.1 25.4.0
ruff 0.11.7 0.11.8
charset-normalizer 3.4.1 3.4.2
cryptography 44.0.2 44.0.3
importlib-metadata 8.6.1 8.7.0
pymdown-extensions 10.14.3 10.15
termcolor 3.0.1 3.1.0

Updates ansible-lint from 25.2.1 to 25.4.0

Release notes

Sourced from ansible-lint's releases.

v25.4.0

Bugfixes

Commits

Updates ruff from 0.11.7 to 0.11.8

Release notes

Sourced from ruff's releases.

0.11.8

Release Notes

Preview features

  • [airflow] Apply auto fixes to cases where the names have changed in Airflow 3 (AIR302, AIR311) (#17553, #17570, #17571)
  • [airflow] Extend AIR301 rule (#17598)
  • [airflow] Update existing AIR302 rules with better suggestions (#17542)
  • [refurb] Mark fix as safe for readlines-in-for (FURB129) (#17644)
  • [syntax-errors] nonlocal declaration at module level (#17559)
  • [syntax-errors] Detect single starred expression assignment x = *y (#17624)

Bug fixes

  • [flake8-pyi] Ensure Literal[None,] | Literal[None,] is not autofixed to None | None (PYI061) (#17659)
  • [flake8-use-pathlib] Avoid suggesting Path.iterdir() for os.listdir with file descriptor (PTH208) (#17715)
  • [flake8-use-pathlib] Fix PTH104 false positive when rename is passed a file descriptor (#17712)
  • [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a file descriptor (#17709)
  • [flake8-use-pathlib] Fix PTH123 false positive when open is passed a file descriptor from a function call (#17705)
  • [pycodestyle] Fix duplicated diagnostic in E712 (#17651)
  • [pylint] Detect global declarations in module scope (PLE0118) (#17411)
  • [syntax-errors] Make async-comprehension-in-sync-comprehension more specific (#17460)

Configuration

  • Add option to disable typing_extensions imports (#17611)

Documentation

Other changes

  • Add Python 3.14 to configuration options (#17647)
  • Make syntax error for unparenthesized except tuples version specific to before 3.14 (#17660)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.8

Preview features

  • [airflow] Apply auto fixes to cases where the names have changed in Airflow 3 (AIR302, AIR311) (#17553, #17570, #17571)
  • [airflow] Extend AIR301 rule (#17598)
  • [airflow] Update existing AIR302 rules with better suggestions (#17542)
  • [refurb] Mark fix as safe for readlines-in-for (FURB129) (#17644)
  • [syntax-errors] nonlocal declaration at module level (#17559)
  • [syntax-errors] Detect single starred expression assignment x = *y (#17624)

Bug fixes

  • [flake8-pyi] Ensure Literal[None,] | Literal[None,] is not autofixed to None | None (PYI061) (#17659)
  • [flake8-use-pathlib] Avoid suggesting Path.iterdir() for os.listdir with file descriptor (PTH208) (#17715)
  • [flake8-use-pathlib] Fix PTH104 false positive when rename is passed a file descriptor (#17712)
  • [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a file descriptor (#17709)
  • [flake8-use-pathlib] Fix PTH123 false positive when open is passed a file descriptor from a function call (#17705)
  • [pycodestyle] Fix duplicated diagnostic in E712 (#17651)
  • [pylint] Detect global declarations in module scope (PLE0118) (#17411)
  • [syntax-errors] Make async-comprehension-in-sync-comprehension more specific (#17460)

Configuration

  • Add option to disable typing_extensions imports (#17611)

Documentation

Other changes

  • Add Python 3.14 to configuration options (#17647)
  • Make syntax error for unparenthesized except tuples version specific to before 3.14 (#17660)
Commits
  • 75effb8 Bump 0.11.8 (#17766)
  • 3353d07 [flake8-use-pathlib] Fix PTH104false positive when rename is passed a f...
  • 41f3f21 Improve messages outputted by py-fuzzer (#17764)
  • 76ec64d [red-knot] Allow subclasses of Any to be assignable to Callable types (#17717)
  • b7e69ec [red-knot] Increase durability of read-only File fields (#17757)
  • 9c57862 [red-knot] Cache source type during semanic index building (#17756)
  • 67ef370 [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a fi...
  • e17e1e8 Sync vendored typeshed stubs (#17753)
  • 03d8679 [red-knot] Preliminary NamedTuple support (#17738)
  • d33a503 [red-knot] Add tests for classes that have incompatible __new__ and `__init...
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.4.1 to 3.4.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Changelog

Sourced from charset-normalizer's changelog.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
Commits
  • 6422af1 📝 update release date
  • 0e60ec1 🔖 Release 3.4.2 (#614)
  • f6630ce ⬆️ Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (#617)
  • 677c999 ⬆️ Bump actions/download-artifact from 4.2.1 to 4.3.0 (#618)
  • 960ab1e ⬆️ Bump actions/setup-python from 5.5.0 to 5.6.0 (#619)
  • 6eb6325 ⬆️ Bump github/codeql-action from 3.28.10 to 3.28.16 (#620)
  • c99c0f2 ⬆️ Update coverage requirement from <7.7,>=7.2.7 to >=7.2.7,<7.9 (#606)
  • 270f28e ⬆️ Bump actions/setup-python from 5.4.0 to 5.5.0 (#607)
  • d4d89a0 ⬆️ Bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (#608)
  • 905fcf5 ⬆️ Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#609)
  • Additional commits viewable in compare view

Updates cryptography from 44.0.2 to 44.0.3

Changelog

Sourced from cryptography's changelog.

44.0.3 - 2025-05-02


* Fixed compilation when using LibreSSL 4.1.0.

.. _v44-0-2:

Commits

Updates importlib-metadata from 8.6.1 to 8.7.0

Changelog

Sourced from importlib-metadata's changelog.

v8.7.0

Features

  • .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

  • Raise consistent ValueError for invalid EntryPoint.value (#518)
Commits
  • 708dff4 Finalize
  • b3065f0 Merge pull request #519 from python/bugfix/493-metadata-missing
  • e4351c2 Add a new test capturing the new expectation.
  • 5a65705 Refactor the casting into a wrapper for brevity and to document its purpose.
  • 0830c39 Add news fragment.
  • 22bb567 Fix type errors where metadata could be None.
  • 57f31d7 Allow metadata to return None when there is no metadata present.
  • b9c4be4 Merge pull request #518 from python/bugfix/488-bad-ep-value
  • 9f8af01 Prefer a cached property, as the property is likely to be retrieved at least ...
  • f179e28 Also raise ValueError on construction if the value is invalid.
  • Additional commits viewable in compare view

Updates pymdown-extensions from 10.14.3 to 10.15

Release notes

Sourced from pymdown-extensions's releases.

10.15.0

  • NEW: SuperFences: Add relaxed_headers option which can tolerate bad content in the fenced code header. When enabled, code blocks with bad content in the header will likely still convert into code blocks, often respecting the specified language.
  • NEW: Add type hints to the Blocks interface and a few additional files.
  • FIX: Blocks: Fix some corner cases of nested blocks with lists.
  • FIX: Tab and Tabbed: Fix a case where tabs could fail if combine_header_slug was enabled and there was no header.
Commits
  • d32c6b3 Update changelog
  • 9f5c3ca Finish typing the Blocks interface and type additional referenced files (#2652)
  • 84a087b add type annotations to block.py (#2634)
  • 70e475c Docs: update JS deps
  • 0eb2047 Provide option for more relaxed fenced code headers (#2649)
  • 677a863 Fix some corner cases with Blocks and nested lists (#2651)
  • f655468 Fix a corner case with combine_header_slug and Tab and Tabbed
  • 3e8a097 Only show "steps" as direct list items
  • f8d7f62 Docs: Mermaid Pie chart is now considered viable and update version used
  • 48cda23 Add a note about snippet syntax and XML files
  • Additional commits viewable in compare view

Updates termcolor from 3.0.1 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group in /.config with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [ansible-lint](https://github.com/ansible/ansible-lint) | `25.2.1` | `25.4.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.7` | `0.11.8` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.1` | `3.4.2` |
| [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `44.0.3` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.6.1` | `8.7.0` |
| [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.14.3` | `10.15` |
| [termcolor](https://github.com/termcolor/termcolor) | `3.0.1` | `3.1.0` |


Updates `ansible-lint` from 25.2.1 to 25.4.0
- [Release notes](https://github.com/ansible/ansible-lint/releases)
- [Commits](ansible/ansible-lint@v25.2.1...v25.4.0)

Updates `ruff` from 0.11.7 to 0.11.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.7...0.11.8)

Updates `charset-normalizer` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.1...3.4.2)

Updates `cryptography` from 44.0.2 to 44.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.2...44.0.3)

Updates `importlib-metadata` from 8.6.1 to 8.7.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.6.1...v8.7.0)

Updates `pymdown-extensions` from 10.14.3 to 10.15
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@10.14.3...10.15)

Updates `termcolor` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@3.0.1...3.1.0)

---
updated-dependencies:
- dependency-name: ansible-lint
  dependency-version: 25.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.11.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-version: 44.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: importlib-metadata
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pymdown-extensions
  dependency-version: '10.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: termcolor
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner May 4, 2025 05:33
@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label May 4, 2025
@abhikdps abhikdps removed the minor label May 4, 2025
@ansibuddy ansibuddy enabled auto-merge (squash) May 4, 2025 12:36
@ansibuddy ansibuddy merged commit a514644 into main May 4, 2025
22 of 24 checks passed
@ansibuddy ansibuddy deleted the dependabot/pip/dot-config/dependencies-8c293fd33d branch May 4, 2025 12:36
@github-project-automation github-project-automation bot moved this from Review to Done in 🧰 devtools project board May 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot-deps-updates dependencies Pull requests that update a dependency file skip-changelog
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants