Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 2, 2025

Bumps the python group with 14 updates:

Package From To
certifi 2025.7.14 2025.8.3
charset-normalizer 3.4.2 3.4.3
cryptography 45.0.5 45.0.6
jsonschema 4.25.0 4.25.1
pygithub 2.6.1 2.7.0
requests 2.32.4 2.32.5
rpds-py 0.26.0 0.27.0
wrapt 1.17.2 1.17.3
zstandard 0.23.0 0.24.0
pywin32 310 311
mypy 1.17.0 1.17.1
ruff 0.12.4 0.12.9
types-jsonschema 4.25.0.20250720 4.25.0.20250809
types-pyyaml 6.0.12.20250516 6.0.12.20250809

Updates certifi from 2025.7.14 to 2025.8.3

Commits

Updates charset-normalizer from 3.4.2 to 3.4.3

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
Changelog

Sourced from charset-normalizer's changelog.

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
Commits
  • 46f662d Release 3.4.3 (#638)
  • 1a059b2 🔧 skip building on freethreaded as we're not confident it is stable
  • 2275e3d 📝 final note in CHANGELOG.md
  • c96acdf 📝 update release date on CHANGELOG.md
  • 43e5460 📝 update README.md
  • f277074 🔧 automatically lower confidence on small bytes str on non Unicode res...
  • 15ae241 🐛 automatically fallback on valid UTF-16 or UTF-32 even if the md says it...
  • 37397c1 🔧 enable 3.14 in nox test_mypyc session
  • cb82537 ⏪ revert license due to compat python 3.7 issue setuptools
  • 6a2efeb 🎨 fix linter errors
  • Additional commits viewable in compare view

Updates cryptography from 45.0.5 to 45.0.6

Changelog

Sourced from cryptography's changelog.

45.0.6 - 2025-08-05


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.2.

.. _v45-0-5:

Commits

Updates jsonschema from 4.25.0 to 4.25.1

Release notes

Sourced from jsonschema's releases.

v4.25.1

What's Changed

Full Changelog: python-jsonschema/jsonschema@v4.25.0...v4.25.1

Changelog

Sourced from jsonschema's changelog.

v4.25.1

  • Fix an incorrect required argument in the Validator protocol's type annotations (#1396).
Commits
  • 331c384 Add the fix to the changelog.
  • c1ec0a6 Merge pull request #1398 from python-jsonschema/dependabot/github_actions/ast...
  • 8e7d594 Merge pull request #1399 from python-jsonschema/dependabot/github_actions/act...
  • 460f4fa Merge pull request #1396 from sirosen/improve-protocol-init-signature
  • 1e58409 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 64bc217 Add a typing test for the Validator protocol
  • 6c25741 Bump actions/checkout from 4 to 5
  • bf603d5 Bump astral-sh/setup-uv from 6.4.3 to 6.5.0
  • a916d8f Fix Validator protocol init to match runtime
  • de60f18 Merge pull request #1397 from python-jsonschema/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates pygithub from 2.6.1 to 2.7.0

Release notes

Sourced from pygithub's releases.

v2.7.0

What's Changed

Breaking Changes

  • Method Github.get_rate_limit() now returns RateLimitOverview rather than RateLimit (PyGithub/PyGithub#3205).

Code like

gh.get_rate_limit().core.remaining

should be replaced with

gh.get_rate_limit().resources.core.remaining
  • Method GitTag.verification now returns GitCommitVerification rather than dict[str, Any] (PyGithub/PyGithub#3226).

Code like

tag.verification["reason"]
tag.verification.get("reason")

should be replaced with

tag.verification.reason

New Features

Improvements

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.7.0 (July 31, 2025)

Breaking Changes ^^^^^^^^^^^^^^^^

  • Method Github.get_rate_limit() now returns RateLimitOverview rather than RateLimit ([#3205](https://github.com/pygithub/pygithub/issues/3205) <https://github.com/PyGithub/PyGithub/pull/3205>) (56ee057a <https://github.com/PyGithub/PyGithub/commit/56ee057a>).

    Code like

    .. code-block:: python

    gh.get_rate_limit().core.remaining

    should be replaced with

    .. code-block:: python

    gh.get_rate_limit().resources.core.remaining

  • Method GitTag.verification now returns GitCommitVerification rather than dict[str, Any] ([#3226](https://github.com/pygithub/pygithub/issues/3226) <https://github.com/PyGithub/PyGithub/pull/3226>) (850932cc <https://github.com/PyGithub/PyGithub/commit/850932cc>).

    Code like

    .. code-block:: python

    tag.verification["reason"] tag.verification.get("reason")

    should be replaced with

    .. code-block:: python

    tag.verification.reason

Deprecations ^^^^^^^^^^^^

  • Methods dismissal_users and dismissal_teams of RequiredPullRequestReviews are deprecated, use dismissal_restrictions.users and dismissal_restrictions.teams instead.

New Features ^^^^^^^^^^^^

  • Add getting list of self-hosted runners of organization ([#3190](https://github.com/pygithub/pygithub/issues/3190) <https://github.com/PyGithub/PyGithub/pull/3190>) (b4092b5d <https://github.com/PyGithub/PyGithub/commit/b4092b5d>)
  • Apply OpenAPI spec ([#3317](https://github.com/pygithub/pygithub/issues/3317) <https://github.com/PyGithub/PyGithub/pull/3317>) (858b9e5b <https://github.com/PyGithub/PyGithub/commit/858b9e5b>)
  • Add support for Sub-Issues ([#3258](https://github.com/pygithub/pygithub/issues/3258) <https://github.com/PyGithub/PyGithub/pull/3258>) (c7858c85 <https://github.com/PyGithub/PyGithub/commit/c7858c85>)

Improvement ^^^^^^^^^^^

  • Refactor search results into separate classes ([#3204](https://github.com/pygithub/pygithub/issues/3204) <https://github.com/PyGithub/PyGithub/pull/3204>) (938f80b1 <https://github.com/PyGithub/PyGithub/commit/938f80b1>)

... (truncated)

Commits
  • bccc5aa Release 2.7.0 (#3323)
  • cb42815 Add delete_self_hosted_runner to Organization (#3306)
  • 01196d6 Normalize App ID to String & Enhance JWT Issuer Verification (#3272)
  • c7858c8 Add support for Sub-Issues (#3258)
  • 131949b Make TimingData.run_duration_ms optional (#3268)
  • 0378cce Fix side-effect when removing Authorization key from headers (#3313)
  • da73fc8 Fix url encoding of strings with slashes in URLs (#3263)
  • f51a3f4 Adds multi_select and true_false options to CustomProperty.value_type (...
  • e7110bf Relax 404 condition in Requester exception handling (#3299)
  • 95f015c Support built-in reversed() on PaginatedList (#3260)
  • Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates rpds-py from 0.26.0 to 0.27.0

Release notes

Sourced from rpds-py's releases.

v0.27.0

What's Changed

New Contributors

Full Changelog: crate-py/rpds@v0.26.0...v0.27.0

Commits
  • c7cd37d Tag a release for RISC
  • 7adac99 Merge pull request #150 from ffgan/feature/allow_riscv_package
  • 439ad44 fix format error
  • 2091f27 downgrade riscv64 manylinux version
  • 29a539f Merge branch 'crate-py:main' into feature/allow_riscv_package
  • 7546f2d Allow packaging of wheels for riscv64 architecture
  • 8ede3f4 Merge pull request #149 from crate-py/dependabot/github_actions/github/codeql...
  • 0840694 Merge pull request #148 from crate-py/dependabot/github_actions/astral-sh/set...
  • 725aabe Bump github/codeql-action from 3.29.2 to 3.29.3
  • db4a842 Bump astral-sh/setup-uv from 6.3.1 to 6.4.1
  • See full diff in compare view

Updates wrapt from 1.17.2 to 1.17.3

Release notes

Sourced from wrapt's releases.

wrapt-1.17.3

See the project page on the Python Package Index at https://pypi.org/project/wrapt/1.17.3/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 1.17.3

Bugs Fixed

  • Reference count was not being incremented on type object for C implementation of the partial callable object proxy when module was initialized. If wrapt was being used in Python sub interpreters which were deleted it could lead to the process crashing.
Commits
  • 99130c0 Build for Windows 11 ARM.
  • 26f5344 Build for Python 3.14.
  • 43dbbe0 Modify artifact upload pattern.
  • e90bd88 Update cibuildwheel version.
  • 58efb76 Update to ubuntu-latest.
  • 800a204 Increment release version.
  • 33b8840 Update obsolete GitHub action.
  • 1c755a1 Rename GitHub workflow file so can build package.
  • ff4981b Fix crash due to lack of reference count.
  • ecbaaa1 Revert "Remove the dependency on pkg_resources and hence setuptools on py...
  • Additional commits viewable in compare view

Updates zstandard from 0.23.0 to 0.24.0

Release notes

Sourced from zstandard's releases.

0.24.0

Backwards Compatibility Notes

  • Support for Python 3.8 has been dropped because it reached end of life. Python 3.9 is the minimum supported Python version. The code should still be compatible with Python 3.8 and removing of version checks from setup.py will likely yield a working install. However, this is not officially supported.

Changes

  • Bundled zstd library upgraded from 1.5.6 to 1.5.7. (#255)
  • We now use and require cffi 1.17.0 or newer. Previously, the constraint was >=1.11.0 on Python <3.13.
  • The pyproject.toml file now defines a [project] section.
  • We now use GitHub's native ARM Linux runners to build wheels and run tests. Previously, Linux ARM wheels were built inside a QEMU virtualized environment and we didn't run tests on this platform.
  • We now use GitHub's native ARM Windows runners to build wheels and run tests. Previously, Windows ARM wheels were cross compiled from an x86-64 runner and we never ran tests for the Windows ARM platform.
  • We now collections.abs.Buffer on Python 3.12+ instead of typing.ByteString, as typing.ByteString was deprecated and later removed. (#238, #262)
  • PyO3 Rust crate upgraded from 0.21 to 0.22 (#257) and later to 0.24.
  • Removed CI coverage for PyPy 3.9.
  • Added CI coverage for PyPy 3.11.
  • Anaconda Windows CI builds have been disabled because we're running into an apparent conda bug.
  • Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows x86-64 (but the Windows builds no-op due to above issue).
  • get_frame_parameters() now accepts an optional format argument defining the zstandard frame type. You can pass e.g. zstandard.FORMAT_ZSTD1_MAGICLESS to decode frames without header magic. (#217)
  • Initial Python 3.14 support. We build wheels and have CI test coverage.

Source Archive Publishing Error

During the release process of this version, we uploaded the source archive to PyPI after some wheels. PyPI rejected the source archive because of presence of a license-file entry while using metadata version 2.4. We manually generated the source distribution locally. The source distribution on PyPI therefore does not match what GitHub Actions produced.

Changelog

Sourced from zstandard's changelog.

0.24.0 (released 2025-08-17)

Changes

  • Bundled zstd library upgraded from 1.5.6 to 1.5.7. (#255)
  • We now use and require cffi 1.17.0 or newer. Previously, the constraint was >=1.11.0 on Python <3.13.
  • The pyproject.toml file now defines a [project] section.
  • We now use GitHub's native ARM Linux runners to build wheels and run tests. Previously, Linux ARM wheels were built inside a QEMU virtualized environment and we didn't run tests on this platform.
  • We now use GitHub's native ARM Windows runners to build wheels and run tests. Previously, Windows ARM wheels were cross-compiled from an x86-64 runner and we never ran tests for the Windows ARM platform.
  • We now collections.abs.Buffer on Python 3.12+ instead of typing.ByteString, as typing.ByteString was deprecated and later removed. (#238, #262)
  • PyO3 Rust crate upgraded from 0.21 to 0.22 (#257) and later to 0.24.
  • Removed CI coverage for PyPy 3.9.
  • Added CI coverage for PyPy 3.11.
  • Anaconda Windows CI builds have been disabled because we're running into an apparant conda bug.
  • Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows x86-64 (but the Windows builds no-op due to above issue).
  • get_frame_parameters() now accepts an optional format argument defining the zstandard frame type. You can pass e.g. zstandard.FORMAT_ZSTD1_MAGICLESS to decode frames without header magic. (#217)
  • Initial Python 3.14 support. We build wheels and have CI test coverage.

Backwards Compatibility Notes

  • Support for Python 3.8 has been dropped because it reached end of life. Python 3.9 is the minimum supported Python version. The code should still be compatible with Python 3.7 and removing of version checks from setup.py will likely yield a working install. However, this is not officially supported.
Commits
  • 9223924 global: release 0.24.0
  • b63f21e ci: remove cibuildwheel from requirements.txt
  • 724df3d build: require cffi 1.17.0
  • 58fca18 build: use static dependency metadata
  • fd95536 docs: move the potential 1.0 feature list from news.rst to `missing_feature...
  • a32e7a6 docs: fix incorrect dict_id() reference
  • 4110f71 ci: add Python 3.14 wheels and test coverage
  • c950bbf ci: upgrade macOS wheel environment to Python 3.13
  • 075f8ca docs: add top-level docs section for One-Shot APIs
  • 7312fae frameparams: support defining frame format for get_frame_parameters()
  • Additional commits viewable in compare view

Updates pywin32 from 310 to 311

Release notes

Sourced from pywin32's releases.

Build 311

A release with a number of incremental improvements

Install via pip:

pip install pywin32 --upgrade

More details in the README

Changelog

Sourced from pywin32's changelog.

Build 311, released 2025/07/14

  • Fix use-after-free in CertDeleteCertificateFromStore (mhammond#2637)
  • Better support for COM identifiers with non-ascii characters (mhammond#2632)
  • pywin32's own warnings will now refer to the caller, rather than to the internal source of warning itself (mhammond#2594, [@​Avasam][Avasam])
  • Fixed a regression that broke special __dunder__ methods with CoClass. (mhammond#1870, mhammond#2493, [@​Avasam][Avasam], [@​geppi][geppi])
  • Fixed TypeError: cannot unpack non-iterable NoneType object when registering an axscript client ScriptItem (mhammond#2513, [@​Avasam][Avasam])
  • Fixed a memory leak when SafeArrays are used as out parameters ([@​the-snork][the-snork])
  • Fixed dispatch handling for properties ([@​the-snork][the-snork])
  • Resolved a handful of deprecation warnings (mhammond#2567, mhammond#2576, [@​Avasam][Avasam])
  • The following classes now produce a valid eval string representation when calling repr: (mhammond#2573, [@​Avasam][Avasam])
    • pywin.tools.browser.HLIPythonObject
    • win32com.server.exception.COMException
    • win32comext.axscript.client.error.AXScriptException
    • win32comext.axscript.client.pyscript.NamedScriptAttribute
  • Added initial DECIMAL/VT_DECIMAL support (mhammond#1501, [@​gesslerpd][gesslerpd])
Commits

Updates mypy from 1.17.0 to 1.17.1

Changelog

Sourced from mypy's changelog.

Mypy 1.17.1

  • Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
  • Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
  • Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alexey Makridenko
  • Brian Schubert
  • Chad Dombrova
  • Chainfire
  • Charlie Denton
  • Charulata
  • Christoph Tyralla
  • CoolCat467
  • Donal Burns
  • Guy Wilson
  • Ivan Levkivskyi
  • johnthagen
  • Jukka Lehtosalo
  • Łukasz Kwieciński
  • Marc Mueller
  • Michael J. Sullivan
  • Mikhail Golubev
  • Sebastian Rittau
  • Shantanu
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table> 

... (truncated)

Commits

Updates ruff from 0.12.4 to 0.12.9

Release notes

Sourced from ruff's releases.

0.12.9

Release Notes

Preview features

  • [airflow] Add check for airflow.secrets.cache.SecretCache (AIR301) (#17707)
  • [ruff] Offer a safe fix for multi-digit zeros (RUF064) (#19847)

Bug fixes

  • [flake8-blind-except] Fix BLE001 false-positive on raise ... from None (#19755)
  • [flake8-comprehensions] Fix false positive for C420 with attribute, subscript, or slice assignment targets (#19513)
  • [flake8-simplify] Fix handling of U+001C..U+001F whitespace (SIM905) (#19849)

Rule changes

  • [pylint] Use lowercase hex characters to match the formatter (PLE2513) (#19808)

Documentation

  • Fix lint.future-annotations link (#19876)

Other changes

  • Build riscv64 binaries for release (#19819)

  • Add rule code to error description in GitLab output (#19896)

  • Improve rendering of the full output format (#19415)

    Below is an example diff for F401:

    -unused.py:8:19: F401 [*] `pathlib` imported but unused
    +F401 [*] `pathlib` imported but unused
    +  --> unused.py:8:19
        |
      7 | # Unused, _not_ marked as required (due to the alias).
      8 | import pathlib as non_alias
    -   |                   ^^^^^^^^^ F401
    +   |                   ^^^^^^^^^
      9 |
     10 | # Unused, marked as required.
        |
    -   = help: Remove unused import: `pathlib`
    +help: Remove unused import: `pathlib`

    For now, the primary difference is the movement of the filename, line number, and column information to a second line in the header. This new representation will allow us to make further additions to Ruff's diagnostics, such as adding sub-diagnostics and multiple annotations to the same snippet.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.9

Preview features

  • [airflow] Add check for airflow.secrets.cache.SecretCache (AIR301) (#17707)
  • [ruff] Offer a safe fix for multi-digit zeros (RUF064) (#19847)

Bug fixes

  • [flake8-blind-except] Fix BLE001 false-positive on raise ... from None (#19755)
  • [flake8-comprehensions] Fix false positive for C420 with attribute, subscript, or slice assignment targets (#19513)
  • [flake8-simplify] Fix handling of U+001C..U+001F whitespace (SIM905) (#19849)

Rule changes

  • [pylint] Use lowercase hex characters to match the formatter (PLE2513) (#19808)

Documentation

  • Fix lint.future-annotations link (#19876)

Other changes

  • Build riscv64 binaries for release (#19819)

  • Add rule code to error description in GitLab output (#19896)

  • Improve rendering of the full output format (#19415)

    Below is an example diff for F401:

    -unused.py:8:19: F401 [*] `pathlib` imported but unused
    +F401 [*] `pathlib` imported but unused
    +  --> unused.py:8:19
        |
      7 | # Unused, _not_ marked as required (due to the alias).
      8 | import pathlib as non_alias
    -   |                   ^^^^^^^^^ F401
    +   |                   ^^^^^^^^^
      9 |
     10 | # Unused, marked as required.
        |
    -   = help: Remove unused import: `pathlib`
    +help: Remove unused import: `pathlib`

    For now, the primary difference is the movement of the filename, line number, and column information to a second line in the header. This new representation will allow us to make further additions to Ruff's diagnostics, such as adding sub-diagnostics and multiple annotations to the same snippet.

0.12.8

... (truncated)

Commits
  • ef42246 Bump 0.12.9 (#19917)
  • dc2e8ab [ty] support kw_only=True for dataclass() and field() (#19677)
  • 9aaa82d Feature/build riscv64 bin (#19819)
  • 3288ac2 [ty] Add caching to CodeGeneratorKind::matches() (#19912)
  • 1167ed6 [ty] Rename functionArgumentNames to callArgumentNames inlay hint setting...
  • 2ee47d8 [ty] Default ty.inlayHints.* server settings to true (#19910)
  • d324ced [ty] Remove py-fuzzer skips for seeds that are no longer slow (#19906)
  • 5a570c8 [ty] fix deferred name loading in PEP695 generic classes/functions (#19888)
  • baadb5a [ty] Add some additional type safety to CycleDetector (#19903)
  • df0648a [flake8-blind-except] Fix BLE001 false-positive on raise ... from None ...
  • Additional commits viewable in compare view

Updates types-jsonschema from 4.25.0.20250720 to 4.25.0.20250809

Commits

Updates types-pyyaml from 6.0.12.20250516 to 6.0.12.20250809

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [certifi](https://github.com/certifi/python-certifi) | `2025.7.14` | `2025.8.3` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.4.3` |
| [cryptography](https://github.com/pyca/cryptography) | `45.0.5` | `45.0.6` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.0` | `4.25.1` |
| [pygithub](https://github.com/pygithub/pygithub) | `2.6.1` | `2.7.0` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [rpds-py](https://github.com/crate-py/rpds) | `0.26.0` | `0.27.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.2` | `1.17.3` |
| [zstandard](https://github.com/indygreg/python-zstandard) | `0.23.0` | `0.24.0` |
| [pywin32](https://github.com/mhammond/pywin32) | `310` | `311` |
| [mypy](https://github.com/python/mypy) | `1.17.0` | `1.17.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.4` | `0.12.9` |
| [types-jsonschema](https://github.com/typeshed-internal/stub_uploader) | `4.25.0.20250720` | `4.25.0.20250809` |
| [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) | `6.0.12.20250516` | `6.0.12.20250809` |


Updates `certifi` from 2025.7.14 to 2025.8.3
- [Commits](certifi/python-certifi@2025.07.14...2025.08.03)

Updates `charset-normalizer` from 3.4.2 to 3.4.3
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.2...3.4.3)

Updates `cryptography` from 45.0.5 to 45.0.6
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@45.0.5...45.0.6)

Updates `jsonschema` from 4.25.0 to 4.25.1
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.0...v4.25.1)

Updates `pygithub` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.6.1...v2.7.0)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `rpds-py` from 0.26.0 to 0.27.0
- [Release notes](https://github.com/crate-py/rpds/releases)
- [Commits](crate-py/rpds@v0.26.0...v0.27.0)

Updates `wrapt` from 1.17.2 to 1.17.3
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@1.17.2...1.17.3)

Updates `zstandard` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/indygreg/python-zstandard/releases)
- [Changelog](https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst)
- [Commits](indygreg/python-zstandard@0.23.0...0.24.0)

Updates `pywin32` from 310 to 311
- [Release notes](https://github.com/mhammond/pywin32/releases)
- [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md)
- [Commits](https://github.com/mhammond/pywin32/commits)

Updates `mypy` from 1.17.0 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.0...v1.17.1)

Updates `ruff` from 0.12.4 to 0.12.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.4...0.12.9)

Updates `types-jsonschema` from 4.25.0.20250720 to 4.25.0.20250809
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `types-pyyaml` from 6.0.12.20250516 to 6.0.12.20250809
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: charset-normalizer
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: cryptography
  dependency-version: 45.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: jsonschema
  dependency-version: 4.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pygithub
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: rpds-py
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: wrapt
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: zstandard
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pywin32
  dependency-version: '311'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.12.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: types-jsonschema
  dependency-version: 4.25.0.20250809
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20250809
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 2, 2025
@zanieb zanieb merged commit ba74729 into main Sep 3, 2025
486 of 488 checks passed
@zanieb zanieb deleted the dependabot/pip/python-34084f18bf branch September 3, 2025 14:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant