Bump the python-root group across 1 directory with 5 updates by dependabot[bot] · Pull Request #1353 · bufbuild/protoc-gen-validate

dependabot · 2026-01-24T16:31:06Z

Bumps the python-root group with 5 updates in the / directory:

Package	From	To
isort	`6.1.0`	`7.0.0`
build	`1.3.0`	`1.4.0`
wheel	`0.46.2`	`0.46.3`
setuptools	`80.9.0`	`80.10.1`
protobuf	`6.32.1`	`6.33.4`

Updates isort from 6.1.0 to 7.0.0

Release notes

Sourced from isort's releases.

7.0.0

Changes

💥 Breaking Changes

Drop support for Python 3.9 (#2430) @DanielNoord

🚀 Features

Show absolute paths in skipped file messages (#2416) @pranlawate

🪲 Fixes

Some fixes for Python 3.14 (#2433) @DanielNoord

Test on 3.14 and fix any bugs (#2425) @DanielNoord

Update CHANGELOG.md + Fix Formatting and Grammar (#2419) @lukbrew25

Fix output of hanging indent for long lines with noqa (#2407) @matan1008

👷 Continuous Integration

Format with ruff instead of black (#2432) @DanielNoord

Target 3.10 for ruff (#2431) @DanielNoord

Update development dependencies to latest version (#2426) @DanielNoord

docs: update pre-commit examples to version 6.1.0 (#2413) @pranlawate

Small cleanup for developer environment (#2418) @DanielNoord

📦 Dependencies

Bump actions/setup-python from 5 to 6 in the github-actions group (#2411) @dependabot[bot]

Changelog

Sourced from isort's changelog.

Changelog

NOTE: isort follows the semver versioning standard. Find out more about isort's release policy here.

Unreleased

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev

Commits

0a09c78 Merge pull request #2433 from DanielNoord/python-314
0fee794 Add 3.14 to stdlibds
332a1ad Bump zstandard for 3.14 compat
f756e56 Merge pull request #2432 from DanielNoord/ruff-it-up
52f5134 Format with ruff instead of black
012aa69 Merge pull request #2431 from DanielNoord/ruff-it-up
89773db Target 3.10 with ruff
933e382 Merge pull request #2430 from DanielNoord/drop-39
8b6e00c Remove support for Python 3.9
b5f9f29 Bump profile plugin to 3.10+ and re-lock
Additional commits viewable in compare view

Updates build from 1.3.0 to 1.4.0

Release notes

Sourced from build's releases.

1.4.0

Add --quiet flag (PR #947)

Add option to dump PEP 517 metadata with --metadata (PR #940, PR #943)

Support UV environment variable (PR #971)

Remove a workaround for 3.14b1 (PR #960)

In 3.14 final release, color defaults to True already (PR #962)

Pass sp-repo-review (PR #942)

In pytest configuration, log_level is better than log_cli_level (PR #950)

Split up typing and mypy (PR #944)

Use types-colorama (PR #945)

In docs, first argument for _has_dependency is a name (PR #970)

Fix test failure when flit-core is installed (PR #921)

Changelog

Sourced from build's changelog.

1.4.0 (2026-01-08)

Add --quiet flag (:pr:947)

Add option to dump PEP 517 metadata with --metadata (:pr:940, :pr:943)

Support UV environment variable (:pr:971)

Remove a workaround for 3.14b1 (:pr:960)

In 3.14 final release, color defaults to True already (:pr:962)

Pass sp-repo-review (:pr:942)

In pytest configuration, log_level is better than log_cli_level (:pr:950)

Split up typing and mypy (:pr:944)

Use types-colorama (:pr:945)

In docs, first argument for _has_dependency is a name (PR :pr:970)

Fix test failure when flit-core is installed (PR :pr:921)

Commits

54f238d chore: prepare for 1.4.0 (#972)
f219276 docs: first argument for _has_dependency is a name (#970)
7adb29e fix: support UV environment variable (#971)
a40623b build(deps): bump actions/attest-build-provenance in the actions group (#968)
c8fae34 pre-commit: bump repositories (#965)
ed9c379 build(deps): bump actions/download-artifact in the actions group
0e44fd2 Add quiet flag (#947)
60e15ed chore: color defaults to True in 3.14 (#962)
0486d9d pre-commit: bump repositories (#961)
393b775 MNT: remove workaround for 3.14b1 (#960)
Additional commits viewable in compare view

Updates wheel from 0.46.2 to 0.46.3

Release notes

Sourced from wheel's releases.

0.46.3

Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#676)

Changelog

Sourced from wheel's changelog.

Release Notes

0.46.3 (2026-01-22)

Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

Restored the bdist_wheel command for compatibility with setuptools older than v70.1

Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning

Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

Dropped support for Python 3.8

Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.

Removed vendored packaging in favor of a run-time dependency on it

Made the wheel.metadata module private (with a deprecation warning if it's imported

Made the wheel.cli package private (no deprecation warning)

Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

Refactored the convert command to not need setuptools to be installed

Don't configure setuptools logging unless running bdist_wheel

Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

Projects are still advised to migrate away from the deprecated module and import

... (truncated)

Commits

8b6fa74 Created a new release
7445fb5 Fixed an import of a removed module
See full diff in compare view

Updates setuptools from 80.9.0 to 80.10.1

Changelog

Sourced from setuptools's changelog.

v80.10.1

Misc

#5152

v80.10.0

Features

Remove post-release tags on setuptools' own build. (#4530)

Refreshed vendored dependencies. (#5139)

Misc

#5033

Commits

adfb0c9 Bump version: 80.10.0 → 80.10.1
8535d10 docs: Link pyproject.toml to ext_modules (#5125)
fafbe2c [CI] Workaround for GHA handling of 'skipped' in job dependency chain (#5152)
d171023 Add news fragment
3dbba06 Refine comment to reference issue
e4922c8 Apply suggestion from @webknjaz
218c146 [CI] Workaround for GHA handling of 'skipped' in job dependency chain
2903171 Bump version: 80.9.0 → 80.10.0
23a2b18 [CI] Allow the action check-changed-folders to be skipped in the check ac...
660e581 [CI] Allow the action check-changed-folders to be skipped in the check ac...
Additional commits viewable in compare view

Updates protobuf from 6.32.1 to 6.33.4

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

This version includes breaking changes to: C++, Objective-C, PHP, Python.

[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

[C++] Make generator headers private (protocolbuffers/protobuf@3a2af35)

[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (protocolbuffers/protobuf@7a75898)

[C++] Add [[nodiscard]] to many APIs. (protocolbuffers/protobuf@a70115f)

[C++] Make the arena-enabled constructors of RepeatedField, RepeatedPtrField, and Map private. (protocolbuffers/protobuf@ef890c3)

[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (protocolbuffers/protobuf@b115358)

[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (protocolbuffers/protobuf@68346ec)

[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (protocolbuffers/protobuf@837a2cd)

[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() && !is_repeated()) instead (protocolbuffers/protobuf@9dbc5d4)

[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

[C++] All entity names have length limit (2afb0dc)

[ObjC] Remove generate_minimal_imports generation option warning (protocolbuffers/protobuf@45b1297)

[ObjC] Fix nullability annotations on some GPB*Dictionary types. (protocolbuffers/protobuf@ea67d6d)

[ObjC] Remove -[GPBFieldDescriptor optional] (protocolbuffers/protobuf@3414dc1)

[Other] Remove deprecated flag for enabling MSVC support (protocolbuffers/protobuf@97c979b)

[PHP] Remove deprecated PHP APIs (protocolbuffers/protobuf@9c45014)

[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (protocolbuffers/protobuf@4208121, protocolbuffers/protobuf@cd76e67, protocolbuffers/protobuf@4208121)

[PHP] Add PHP typehints for setters and remove redundant GPBUtil checks (protocolbuffers/protobuf#25296) (protocolbuffers/protobuf@aee03b7)

[PHP] support default values for editions/proto2 (protocolbuffers/protobuf#25161) (protocolbuffers/protobuf@b01099d)

[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (protocolbuffers/protobuf@5b116fe)

[Python] Remove float_format/double_format from python proto text_format (protocolbuffers/protobuf@e4854a1)

[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (protocolbuffers/protobuf@00aaca1)

[Python] Remove float_precision from python proto json_format (protocolbuffers/protobuf@f027f1f)

[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[Python] Remove deprecated FieldDescriptor.label (protocolbuffers/protobuf@0a8ff55)

[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Migration Guide may include additional guidance for breaking changes.

Bazel

Fix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (#25168) (protocolbuffers/protobuf@8c857c3)

Breaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

Feat(bazel): wire up prebuilt protoc toolchain (#24115) (protocolbuffers/protobuf@cc23698)

Migrate proto_descriptor_set (#23369) (protocolbuffers/protobuf@8d4dfdd)

Compiler

Ruby codegen: support generation of rbs files (#15633) (protocolbuffers/protobuf@6ebdf85)

Avoid collision name problems between a message named Xyz and a direct sibling enum named XyzView (protocolbuffers/protobuf@eba53e8)

Generalizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (protocolbuffers/protobuf@ed3c571)

Fix a bug with custom features outside of the pb package. (protocolbuffers/protobuf@872d3ce)

Fix import option handling when include_imports isn't set. (protocolbuffers/protobuf@9ef9e80)

Fix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (protocolbuffers/protobuf@1229d4a)

Prevent accidental stripping of debug_redact options via import option. (protocolbuffers/protobuf@f58b098)

C++

Add EnumerateEnumValues function. (protocolbuffers/protobuf@397d5d9)

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-root group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [isort](https://github.com/PyCQA/isort) | `6.1.0` | `7.0.0` | | [build](https://github.com/pypa/build) | `1.3.0` | `1.4.0` | | [wheel](https://github.com/pypa/wheel) | `0.46.2` | `0.46.3` | | [setuptools](https://github.com/pypa/setuptools) | `80.9.0` | `80.10.1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.32.1` | `6.33.4` | Updates `isort` from 6.1.0 to 7.0.0 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@6.1.0...7.0.0) Updates `build` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.3.0...1.4.0) Updates `wheel` from 0.46.2 to 0.46.3 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.46.2...0.46.3) Updates `setuptools` from 80.9.0 to 80.10.1 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v80.9.0...v80.10.1) Updates `protobuf` from 6.32.1 to 6.33.4 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: isort dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-root - dependency-name: build dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-root - dependency-name: wheel dependency-version: 0.46.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-root - dependency-name: setuptools dependency-version: 80.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-root - dependency-name: protobuf dependency-version: 6.33.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-root ... Signed-off-by: dependabot[bot] <support@github.com>

rodaine · 2026-01-26T14:40:07Z

@dependabot rebase

dependabot · 2026-01-26T14:40:54Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added Dependencies Updates a dependency Python Python language support labels Jan 24, 2026

dependabot bot force-pushed the dependabot/pip/python-root-417872bf0e branch from c13d065 to ee5da4e Compare January 26, 2026 12:33

dependabot bot closed this Jan 26, 2026

dependabot bot deleted the dependabot/pip/python-root-417872bf0e branch January 26, 2026 14:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-root group across 1 directory with 5 updates#1353

Bump the python-root group across 1 directory with 5 updates#1353
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-root-417872bf0e

dependabot bot commented on behalf of github Jan 24, 2026 •

edited

Loading

Uh oh!

rodaine commented Jan 26, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.0.0

Changes

💥 Breaking Changes

🚀 Features

🪲 Fixes

👷 Continuous Integration

📦 Dependencies

Changelog

Unreleased

1.4.0

1.4.0 (2026-01-08)

0.46.3

Release Notes

v80.10.1

Misc

v80.10.0

Features

Misc

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

Uh oh!

rodaine commented Jan 26, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 24, 2026 •

edited

Loading