Skip to content

Comments

Bump the all-pip-packages group with 5 updates#411

Merged
IanButterworth merged 1 commit intomasterfrom
dependabot/pip/all-pip-packages-0bc6b89d00
Sep 2, 2025
Merged

Bump the all-pip-packages group with 5 updates#411
IanButterworth merged 1 commit intomasterfrom
dependabot/pip/all-pip-packages-0bc6b89d00

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps the all-pip-packages group with 5 updates:

Package From To
flask 3.1.1 3.1.2
python-gnupg 0.5.4 0.5.5
types-requests 2.32.4.20250611 2.32.4.20250809
types-pyyaml 6.0.12.20250516 6.0.12.20250822
boto3 1.40.0 1.40.21

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates python-gnupg from 0.5.4 to 0.5.5

Release notes

Sourced from python-gnupg's releases.

Enhancement and bug-fix release 0.5.5

This is an enhancement and bug-fix release, and all users are encouraged to upgrade.

Brief summary:

  • Fix #249: Handle fetching GPG version when not the first item in the configuration.

  • Fix #250: Capture uid info in a uid_map attribute of ScanKeys/ListKeys.

  • Fix #255: Improve handling of exceptions raised in background threads.

This release has been signed with my code signing key:

Vinay Sajip (CODE SIGNING KEY) <vinay_sajip at yahoo.co.uk> Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86

Commits
  • 5f83627 Changes for 0.5.5.
  • e42cbbd Add more directories and file patterns to .gitignore.
  • 9818609 Add some directories to .gitignore.
  • a886e2f Add Python 3.13t to CI.
  • 0ed485f Correct typo in assertion message.
  • ee5c61e Removed pypy-2.7 from CI.
  • a83fb34 Change assertion.
  • b9f7723 Improve assertion message.
  • 19c3a3b Catch IOError (broken pipe) exception in one more place.
  • 1b086ac Catch IOError (broken pipe) exception.
  • Additional commits viewable in compare view

Updates types-requests from 2.32.4.20250611 to 2.32.4.20250809

Commits

Updates types-pyyaml from 6.0.12.20250516 to 6.0.12.20250822

Commits

Updates boto3 from 1.40.0 to 1.40.21

Commits
  • 8f8cca7 Merge branch 'release-1.40.21'
  • f52857a Bumping version to 1.40.21
  • 2929a26 Add changelog entries from botocore
  • 3e12c82 Merge branch 'release-1.40.20'
  • 95ccc42 Merge branch 'release-1.40.20' into develop
  • 8b5d5ce Bumping version to 1.40.20
  • 5be943b Add changelog entries from botocore
  • 2438288 Merge branch 'release-1.40.19'
  • 7630391 Merge branch 'release-1.40.19' into develop
  • 29c8360 Bumping version to 1.40.19
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-pip-packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [python-gnupg](https://github.com/vsajip/python-gnupg) | `0.5.4` | `0.5.5` |
| [types-requests](https://github.com/typeshed-internal/stub_uploader) | `2.32.4.20250611` | `2.32.4.20250809` |
| [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) | `6.0.12.20250516` | `6.0.12.20250822` |
| [boto3](https://github.com/boto/boto3) | `1.40.0` | `1.40.21` |


Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `python-gnupg` from 0.5.4 to 0.5.5
- [Release notes](https://github.com/vsajip/python-gnupg/releases)
- [Changelog](https://github.com/vsajip/python-gnupg/blob/master/release)
- [Commits](vsajip/python-gnupg@0.5.4...0.5.5)

Updates `types-requests` from 2.32.4.20250611 to 2.32.4.20250809
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `types-pyyaml` from 6.0.12.20250516 to 6.0.12.20250822
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `boto3` from 1.40.0 to 1.40.21
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.0...1.40.21)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-packages
- dependency-name: python-gnupg
  dependency-version: 0.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-packages
- dependency-name: types-requests
  dependency-version: 2.32.4.20250809
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-packages
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20250822
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-packages
- dependency-name: boto3
  dependency-version: 1.40.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-pip-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2025
@IanButterworth IanButterworth merged commit 70a4c8d into master Sep 2, 2025
3 checks passed
@IanButterworth IanButterworth deleted the dependabot/pip/all-pip-packages-0bc6b89d00 branch September 2, 2025 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant