Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps the python-packages group with 5 updates:

Package From To
coverage 7.10.5 7.10.6
platformdirs 4.3.8 4.4.0
ruff 0.12.10 0.12.11
soupsieve 2.7 2.8
typing-extensions 4.14.1 4.15.0

Updates coverage from 7.10.5 to 7.10.6

Changelog

Sourced from coverage's changelog.

Version 7.10.6 — 2025-08-29

  • Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.

  • Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: nedbat/coveragepy#1499 .. _pull 2038: nedbat/coveragepy#2038

.. _changes_7-10-5:

Commits
  • 88c55ff docs: sample HTML for 7.10.6
  • 01d8995 docs: prep for 7.10.6
  • 9b0c24f docs: thanks Alex #2038
  • 66d6910 fix: make source paths absolute where they exist. #1499
  • bb3382f build: no need for the combine/html times now
  • 9ea349a lab: warn_executed.py
  • 808c9b4 build: changing metacov.ini should trigger metacov
  • 384f5f2 build: oops, some 'if's are really line pragmas
  • a7224af perf: pre-compute the mapping between other_db.context and main.context (#2038)
  • 5c00c5b chore: bump the action-dependencies group with 3 updates (#2039)
  • Additional commits viewable in compare view

Updates platformdirs from 4.3.8 to 4.4.0

Release notes

Sourced from platformdirs's releases.

4.4.0

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.3.8...4.4.0

Commits
  • c945a28 feat: improve homebrew path detection (#370)
  • 9f616e9 [pre-commit.ci] pre-commit autoupdate (#372)
  • 5720f26 [pre-commit.ci] pre-commit autoupdate (#367)
  • 848924d [pre-commit.ci] pre-commit autoupdate (#365)
  • df2e678 Bump actions/checkout from 4 to 5 in the all group (#366)
  • 009a3f8 Bump actions/download-artifact from 4 to 5 in the all group (#364)
  • 3d194ee [pre-commit.ci] pre-commit autoupdate (#363)
  • 6046533 [pre-commit.ci] pre-commit autoupdate (#362)
  • 88389ce [pre-commit.ci] pre-commit autoupdate (#361)
  • 82763ff [pre-commit.ci] pre-commit autoupdate (#360)
  • Additional commits viewable in compare view

Updates ruff from 0.12.10 to 0.12.11

Release notes

Sourced from ruff's releases.

0.12.11

Release Notes

Preview features

  • [airflow] Extend AIR311 and AIR312 rules (#20082)
  • [airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) (#20081)
  • [flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) (#20091)
  • [flake8-logging-format] Add auto-fix for f-string logging calls (G004) (#19303)
  • [flake8-use-pathlib] Add autofix for PTH211 (#20009)
  • [flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior (#20100)

Bug fixes

  • [pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) (#20048)
  • [pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) (#20115)
  • [ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) (#20032)
  • [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#19647)

Rule changes

  • [ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) (#20045)

Documentation

  • Fix incorrect D413 links in docstrings convention FAQ (#20089)
  • [flake8-use-pathlib] Update links to the table showing the correspondence between os and pathlib (#20103)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.11

Preview features

  • [airflow] Extend AIR311 and AIR312 rules (#20082)
  • [airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) (#20081)
  • [flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) (#20091)
  • [flake8-logging-format] Add auto-fix for f-string logging calls (G004) (#19303)
  • [flake8-use-pathlib] Add autofix for PTH211 (#20009)
  • [flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior (#20100)

Bug fixes

  • [pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) (#20048)
  • [pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) (#20115)
  • [ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) (#20032)
  • [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#19647)

Rule changes

  • [ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) (#20045)

Documentation

  • Fix incorrect D413 links in docstrings convention FAQ (#20089)
  • [flake8-use-pathlib] Update links to the table showing the correspondence between os and pathlib (#20103)
Commits
  • c2bc15b Bump 0.12.11 (#20136)
  • e586f6d [ty] Benchmarks for problematic implicit instance attributes cases (#20133)
  • 76a6b7e [pyflakes] Fix allowed-unused-imports matching for top-level modules (`F4...
  • 1ce6571 Move GitLab output rendering to ruff_db (#20117)
  • d9aaacd [ty] Evaluate reachability of non-definitely-bound to Ambiguous (#19579)
  • 18eaa65 [ty] Introduce a representation for the top/bottom materialization of an inva...
  • af259fa [flake8-async] Implement blocking-http-call-httpx (ASYNC212) (#20091)
  • d75ef38 [ty] print diagnostics with fully qualified name to disambiguate some cases (...
  • 89ca493 [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#...
  • 4b80f5f [ty] Optimize TDD atom ordering (#20098)
  • Additional commits viewable in compare view

Updates soupsieve from 2.7 to 2.8

Release notes

Sourced from soupsieve's releases.

2.8

  • NEW: Drop support for Python 3.8.
  • NEW: Add support for Python 3.14.
  • NEW: Deploy with PyPI's "Trusted Publisher".
Commits

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.5` | `7.10.6` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.8` | `4.4.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.10` | `0.12.11` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.7` | `2.8` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.15.0` |


Updates `coverage` from 7.10.5 to 7.10.6
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.5...7.10.6)

Updates `platformdirs` from 4.3.8 to 4.4.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.3.8...4.4.0)

Updates `ruff` from 0.12.10 to 0.12.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.10...0.12.11)

Updates `soupsieve` from 2.7 to 2.8
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.7...2.8)

Updates `typing-extensions` from 4.14.1 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.14.1...4.15.0)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.10.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: platformdirs
  dependency-version: 4.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.12.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: soupsieve
  dependency-version: '2.8'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2025
@dependabot dependabot bot requested review from a team as code owners September 1, 2025 07:32
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2025
@greenbonebot greenbonebot enabled auto-merge (rebase) September 1, 2025 07:32
@github-actions
Copy link

github-actions bot commented Sep 1, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/coverage 7.10.6 🟢 8.5
Details
CheckScoreReason
Security-Policy🟢 10security policy file detected
Code-Review⚠️ 0Found 1/29 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
pip/platformdirs 4.4.0 UnknownUnknown
pip/ruff 0.12.11 UnknownUnknown
pip/soupsieve 2.8 🟢 5.6
Details
CheckScoreReason
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 1Found 4/27 approved changesets -- score normalized to 1
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/typing-extensions 4.15.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 9Found 27/30 approved changesets -- score normalized to 9
Maintained🟢 1025 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 46 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • poetry.lock

@github-actions
Copy link

github-actions bot commented Sep 1, 2025

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@greenbonebot greenbonebot merged commit 5e36e85 into main Sep 3, 2025
25 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-9cb09ba33a branch September 3, 2025 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants