Skip to content

Bump the python-packages group with 9 updates #2641

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the python-packages group with 9 updates #2641

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2025

Bumps the python-packages group with 9 updates:

Package From To
websockets 13.1 15.0.1
ruff 0.11.9 0.11.12
pytest-mock 3.14.0 3.14.1
pytest-xdist[psutil] 3.6.1 3.7.0
mypy 1.15.0 1.16.0
types-pyyaml 6.0.12.20250402 6.0.12.20250516
cryptography 44.0.3 45.0.3
coverage 7.8.0 7.8.2
mkdocs-material 9.6.13 9.6.14

Updates websockets from 13.1 to 15.0.1

Release notes

Sourced from websockets's releases.

15.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

15.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

14.2

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

14.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

14.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • 37c9bc0 Release version 15.0.1.
  • fce02ab Docs. Correct Producer pattern example.
  • 5fa24bb Exit cleanly the interactive client on ^C.
  • d0e60d3 Remove spurious PYTHONPATH declarations.
  • d7dafcc Add test coverage for interactive client.
  • 3c62503 Use entrypoint instead of runpy in docs.
  • f4e4345 added entry point script for the cli client in the pyproject.toml
  • 6f89bac Start version 15.1.
  • 7ac73c6 Release version 15.0.
  • a1ba01d Rewrite interactive client (again) without threads.
  • Additional commits viewable in compare view

Updates ruff from 0.11.9 to 0.11.12

Release notes

Sourced from ruff's releases.

0.11.12

Release Notes

Preview features

  • [airflow] Revise fix titles (AIR3) (#18215)
  • [pylint] Implement missing-maxsplit-arg (PLC0207) (#17454)
  • [pyupgrade] New rule UP050 (useless-class-metaclass-type) (#18334)
  • [flake8-use-pathlib] Replace os.symlink with Path.symlink_to (PTH211) (#18337)

Bug fixes

  • [flake8-bugbear] Ignore __debug__ attribute in B010 (#18357)
  • [flake8-async] Fix anyio.sleep argument name (ASYNC115, ASYNC116) (#18262)
  • [refurb] Fix FURB129 autofix generating invalid syntax (#18235)

Rule changes

  • [flake8-implicit-str-concat] Add autofix for ISC003 (#18256)
  • [pycodestyle] Improve the diagnostic message for E712 (#18328)
  • [flake8-2020] Fix diagnostic message for != comparisons (YTT201) (#18293)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP010) (#18291)

Documentation

  • Simplify rules table to improve readability (#18297)
  • Update editor integrations link in README (#17977)
  • [flake8-bugbear] Add fix safety section (B006) (#17652)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.12

Preview features

  • [airflow] Revise fix titles (AIR3) (#18215)
  • [pylint] Implement missing-maxsplit-arg (PLC0207) (#17454)
  • [pyupgrade] New rule UP050 (useless-class-metaclass-type) (#18334)
  • [flake8-use-pathlib] Replace os.symlink with Path.symlink_to (PTH211) (#18337)

Bug fixes

  • [flake8-bugbear] Ignore __debug__ attribute in B010 (#18357)
  • [flake8-async] Fix anyio.sleep argument name (ASYNC115, ASYNC116) (#18262)
  • [refurb] Fix FURB129 autofix generating invalid syntax (#18235)

Rule changes

  • [flake8-implicit-str-concat] Add autofix for ISC003 (#18256)
  • [pycodestyle] Improve the diagnostic message for E712 (#18328)
  • [flake8-2020] Fix diagnostic message for != comparisons (YTT201) (#18293)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP010) (#18291)

Documentation

  • Simplify rules table to improve readability (#18297)
  • Update editor integrations link in README (#17977)
  • [flake8-bugbear] Add fix safety section (B006) (#17652)

0.11.11

Preview features

  • [airflow] Add autofixes for AIR302 and AIR312 (#17942)
  • [airflow] Move rules from AIR312 to AIR302 (#17940)
  • [airflow] Update AIR301 and AIR311 with the latest Airflow implementations (#17985)
  • [flake8-simplify] Enable fix in preview mode (SIM117) (#18208)

Bug fixes

  • Fix inconsistent formatting of match-case on [] and _ (#18147)
  • [pylint] Fix PLW1514 not recognizing the encoding positional argument of codecs.open (#18109)

CLI

  • Add full option name in formatter warning (#18217)

Documentation

  • Fix rendering of admonition in docs (#18163)
  • [flake8-print] Improve print/pprint docs for T201 and T203 (#18130)

... (truncated)

Commits
  • aee3af0 Bump 0.11.12 (#18369)
  • 04dc48e [refurb] Fix FURB129 autofix generating invalid syntax (#18235)
  • 27743ef [pylint] Implement missing-maxsplit-arg (PLC0207) (#17454)
  • c60b4d7 [ty] Add subtyping between Callable types and class literals with __init__ ...
  • 16621fa [flake8-bugbear ] Add fix safety section (B006) (#17652)
  • e23d4ea [flake8-bugbear] Ignore __debug__ attribute in B010 (#18357)
  • 452f992 [ty] Simplify signature types, use them in CallableType (#18344)
  • a5ebb3f [ty] Support ephemeral uv virtual environments (#18335)
  • 9925910 Add a ViolationMetadata::rule method (#18234)
  • a3ee6bb Return DiagnosticGuard from Checker::report_diagnostic (#18232)
  • Additional commits viewable in compare view

Updates pytest-mock from 3.14.0 to 3.14.1

Release notes

Sourced from pytest-mock's releases.

v3.14.1

  • #503: Python 3.14 is now officially supported.
Changelog

Sourced from pytest-mock's changelog.

3.14.1 (2025-08-26)

  • [#503](https://github.com/pytest-dev/pytest-mock/issues/503) <https://github.com/pytest-dev/pytest-mock/pull/503>_: Python 3.14 is now officially supported.
Commits

Updates pytest-xdist[psutil] from 3.6.1 to 3.7.0

Changelog

Sourced from pytest-xdist[psutil]'s changelog.

pytest-xdist 3.7.0 (2025-05-26)

Features

  • [#1142](https://github.com/pytest-dev/pytest-xdist/issues/1142) <https://github.com/pytest-dev/pytest-xdist/issues/1142>_: Added support for Python 3.13.

  • [#1144](https://github.com/pytest-dev/pytest-xdist/issues/1144) <https://github.com/pytest-dev/pytest-xdist/issues/1144>_: The internal steal command is now atomic - it unschedules either all requested tests or none.

    This is a prerequisite for group/scope support in the worksteal scheduler, so test groups won't be broken up incorrectly.

  • [#1170](https://github.com/pytest-dev/pytest-xdist/issues/1170) <https://github.com/pytest-dev/pytest-xdist/issues/1170>_: Add the --px arg to create proxy gateways.

    Proxy gateways are passed to additional gateways using the via keyword. They can serve as a way to run multiple workers on remote machines.

  • [#1200](https://github.com/pytest-dev/pytest-xdist/issues/1200) <https://github.com/pytest-dev/pytest-xdist/issues/1200>_: Now multiple xdist_group markers are considered when assigning tests to groups (order does not matter).

    Previously, only the last marker would assign a test to a group, but now if a test has multiple xdist_group marks applied (for example via parametrization or via fixtures), they are merged to make a new group.

Removals

  • [#1162](https://github.com/pytest-dev/pytest-xdist/issues/1162) <https://github.com/pytest-dev/pytest-xdist/issues/1162>_: Dropped support for EOL Python 3.8.

Trivial Changes

  • [#1092](https://github.com/pytest-dev/pytest-xdist/issues/1092) <https://github.com/pytest-dev/pytest-xdist/issues/1092>_: Update an error message to better indicate where users should go for more information.

  • [#1190](https://github.com/pytest-dev/pytest-xdist/issues/1190) <https://github.com/pytest-dev/pytest-xdist/issues/1190>_: Switched to using a SPDX license identifier introduced in PEP 639.

Commits

Updates mypy from 1.15.0 to 1.16.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
@property
def foo(self) -&gt; int:
    return self._value
@foo.setter
def foo(self, x: str | int) -&gt; None:
try:
self._value = int(x)
except ValueError:
raise Exception(f&quot;'{x}' is not a valid value for 'foo'&quot;)

This was contributed by Ivan Levkivskyi (PR 18510).

Flexible Variable Redefinitions (Experimental)

Mypy now allows unannotated variables to be freely redefined with different types when using the experimental --allow-redefinition-new flag. You will also need to enable --local-partial-types. Mypy will now infer a union type when different types are assigned to a variable:

# mypy: allow-redefinition-new, local-partial-types
def f(n: int, b: bool) -> int | str:
if b:
x = n
else:
</tr></table>

... (truncated)

Commits
  • 9e72e96 Update version to 1.16.0
  • 8fe719f Add changelog for 1.16 (#19138)
  • 2a036e7 Revert "Infer correct types with overloads of Type[Guard | Is] (#19161)
  • b6da4fc Allow enum members to have type objects as values (#19160)
  • 334469f [mypyc] Improve documentation of native and non-native classes (#19154)
  • a499d9f Document --allow-redefinition-new (#19153)
  • 96525a2 Merge commit '9e45dadcf6d8dbab36f83d9df94a706c0b4f9207' into release-1.16
  • 9e45dad Clear more data in TypeChecker.reset() instead of asserting (#19087)
  • 772cd0c Add --strict-bytes to --strict (#19049)
  • 0b65f21 Admit that Final variables are never redefined (#19083)
  • Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20250402 to 6.0.12.20250516

Commits

Updates cryptography from 44.0.3 to 45.0.3

Changelog

Sourced from cryptography's changelog.

45.0.3 - 2025-05-25


* Fixed decrypting PKCS#8 files encrypted with long salts (this impacts keys
  encrypted by Bouncy Castle).
* Fixed decrypting PKCS#8 files encrypted with DES-CBC-MD5. While wildly
  insecure, this remains prevalent.

.. _v45-0-2:


45.0.2 - 2025-05-17

  • Fixed using mypy with cryptography on older versions of Python.

.. _v45-0-1:

45.0.1 - 2025-05-17


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.0.

.. _v45-0-0:


45.0.0 - 2025-05-17 (YANKED)

  • Support for Python 3.7 is deprecated and will be removed in the next cryptography release.
  • Updated the minimum supported Rust version (MSRV) to 1.74.0, from 1.65.0.
  • Added support for serialization of PKCS#12 Java truststores in :func:~cryptography.hazmat.primitives.serialization.pkcs12.serialize_java_truststore
  • Added :meth:~cryptography.hazmat.primitives.kdf.argon2.Argon2id.derive_phc_encoded and :meth:~cryptography.hazmat.primitives.kdf.argon2.Argon2id.verify_phc_encoded methods to support password hashing in the PHC string format
  • Added support for PKCS7 decryption and encryption using AES-256 as the content algorithm, in addition to AES-128.
  • BACKWARDS INCOMPATIBLE: Made SSH private key loading more consistent with other private key loading: :func:~cryptography.hazmat.primitives.serialization.load_ssh_private_key now raises a TypeError if the key is unencrypted but a password is provided (previously no exception was raised), and raises a TypeError if the key is encrypted but no password is provided (previously a ValueError was raised).
  • Added __copy__ to the :class:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey, :class:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey, :class:~cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey, :class:~cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PrivateKey, :class:~cryptography.hazmat.primitives.asymmetric.ed448.Ed448PublicKey,

... (truncated)

Commits

Updates coverage from 7.8.0 to 7.8.2

Changelog

Sourced from coverage's changelog.

Version 7.8.2 — 2025-05-23

  • Wheels are provided for Windows ARM64 on Python 3.11, 3.12, and 3.13. Thanks, Finn Womack <pull 1972_>_.

.. _issue 1971: nedbat/coveragepy#1971 .. _pull 1972: nedbat/coveragepy#1972

.. _changes_7-8-1:

Version 7.8.1 — 2025-05-21

  • A number of EncodingWarnings were fixed that could appear if you've enabled PYTHONWARNDEFAULTENCODING, fixing issue 1966. Thanks, Henry Schreiner <pull 1967_>.

  • Fixed a race condition when using sys.monitoring with free-threading Python, closing issue 1970_.

.. _issue 1966: nedbat/coveragepy#1966 .. _pull 1967: nedbat/coveragepy#1967 .. _issue 1970: nedbat/coveragepy#1970

.. _changes_7-8-0:

Commits
  • 51ab2e5 build: have to keep expected dist counts in sync
  • be7bbf2 docs: sample HTML for 7.8.2
  • 3cee850 docs: prep for 7.8.2
  • 39bc6b0 docs: provide more details if the kit matrix is edited.
  • a608fb3 build: add support for Windows arm64 (#1972)
  • 2fe6225 build: run tox lint if actions have changed
  • 3d93a78 docs: docs need scriv for making github releases
  • 0c443a2 build: bump version to 7.8.2
  • ed98b87 docs: sample HTML for 7.8.1
  • b98bc9b docs: prep for 7.8.1
  • Additional commits viewable in compare view

Updates mkdocs-material from 9.6.13 to 9.6.14

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.6.14

  • Fixed #8215: Social plugin crashes when CairoSVG is updated to 2.8
Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.6.14 (2025-05-13)

  • Fixed #8215: Social plugin crashes when CairoSVG is updated to 2.8

mkdocs-material-9.6.13 (2025-05-10)

  • Fixed #8204: Annotations showing list markers in print view
  • Fixed #8153: Improve style of cardinality symbols in Mermaid.js ER diagrams

mkdocs-material-9.6.12 (2025-04-17)

  • Fixed #8158: Flip footnote back reference icon for right-to-left languages

mkdocs-material-9.6.11 (2025-04-01)

  • Updated Docker image to latest Alpine Linux
  • Bump required Jinja version to 3.1
  • Fixed #8133: Jinja filter items not available (9.6.10 regression)
  • Fixed #8128: Search plugin not entirely disabled via enabled setting

mkdocs-material-9.6.10 (2025-03-30)

This version is a pure refactoring release, and does not contain new features or bug fixes. It strives to improve the compatibility of our templates with alternative Jinja-like template engines that we're currently exploring, including minijinja.

Additionally, it replaces several instances of Python function invocations with idiomatic use of template filters. All instances where variables have been mutated inside templates have been replaced. Most changes have been made in partials, and only a few in blocks, and all of them are fully backward compatible, so no changes to overrides are necessary.

Note that this release does not replace the Jinja template engine with minijinja. However, our templates are now 99% compatible with minijinja, which means we can explore alternative Jinja-compatible implementations. Additionally, immutability and removal of almost all Python function invocations means much more idiomatic templating.

mkdocs-material-9.6.9 (2025-03-17)

  • Updated Serbo-Croatian translations
  • Fixed #8086: Custom SVG icons containing hashes break rendering
  • Fixed #8067: Drawer has gap on right side in Firefox on some OSs

mkdocs-material-9.6.8+insiders-4.53.16 (2025-03-13)

  • Fixed #8019: Tooltips have precedence over instant previews

mkdocs-material-9.6.8 (2025-03-13)

... (truncated)

Commits
  • 2e9bd81 Prepare 9.6.14 release
  • e45972a Fixed social plugin crashing for CairoSVG >= 2.8
  • bce053a Fixed social plugin crashing for CairoSVG >= 2.8
  • ca65624 Updated changelog
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-packages group with 9 updates
c373bb4 
Bumps the python-packages group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [websockets](https://github.com/python-websockets/websockets) | `13.1` | `15.0.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.9` | `0.11.12` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.0` | `3.14.1` |
| [pytest-xdist[psutil]](https://github.com/pytest-dev/pytest-xdist) | `3.6.1` | `3.7.0` |
| [mypy](https://github.com/python/mypy) | `1.15.0` | `1.16.0` |
| [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) | `6.0.12.20250402` | `6.0.12.20250516` |
| [cryptography](https://github.com/pyca/cryptography) | `44.0.3` | `45.0.3` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.8.0` | `7.8.2` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.13` | `9.6.14` |


Updates `websockets` from 13.1 to 15.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@13.1...15.0.1)

Updates `ruff` from 0.11.9 to 0.11.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.9...0.11.12)

Updates `pytest-mock` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.14.0...v3.14.1)

Updates `pytest-xdist[psutil]` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-xdist@v3.6.1...v3.7.0)

Updates `mypy` from 1.15.0 to 1.16.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.15.0...v1.16.0)

Updates `types-pyyaml` from 6.0.12.20250402 to 6.0.12.20250516
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `cryptography` from 44.0.3 to 45.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.3...45.0.3)

Updates `coverage` from 7.8.0 to 7.8.2
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.8.0...7.8.2)

Updates `mkdocs-material` from 9.6.13 to 9.6.14
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.6.13...9.6.14)

---
updated-dependencies:
- dependency-name: websockets
  dependency-version: 15.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.11.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest-mock
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest-xdist[psutil]
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: mypy
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20250516
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: cryptography
  dependency-version: 45.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: coverage
  dependency-version: 7.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mkdocs-material
  dependency-version: 9.6.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants