Skip to content

Bump the pip group across 2 directories with 6 updates #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Aug 22, 2025
Merged

Bump the pip group across 2 directories with 6 updates #7

merged 1 commit into from
Aug 22, 2025

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 22, 2025

Bumps the pip group with 5 updates in the /Industrial_developed_hangman directory:

Package From To
requests 2.32.4 2.32.5
certifi 2024.7.4 2025.8.3
idna 3.7 3.10
setuptools 78.1.1 80.9.0
zipp 3.19.1 3.23.0

Bumps the pip group with 1 update in the /nitkarshchourasia/to_sort/pdf_to_docx_converter directory: pillow.

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates certifi from 2024.7.4 to 2025.8.3

Commits

Updates idna from 3.7 to 3.10

Release notes

Sourced from idna's releases.

v3.10

No release notes provided.

v3.9

No release notes provided.

v3.8

What's Changed

  • Fix regression where IDNAError exception was not being produced for certain inputs.
  • Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
  • Documentation improvements
  • Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.

Full Changelog: kjd/idna@v3.7...v3.8

Changelog

Sourced from idna's changelog.

3.10 (2024-09-15) +++++++++++++++++

  • Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13) ++++++++++++++++

  • Update to Unicode 16.0.0
  • Deprecate setup.cfg in favour of pyproject.toml
  • Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

3.8 (2024-08-23) ++++++++++++++++

  • Fix regression where IDNAError exception was not being produced for certain inputs.
  • Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
  • Documentation improvements
  • Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.

Commits

Updates setuptools from 78.1.1 to 80.9.0

Changelog

Sourced from setuptools's changelog.

v80.9.0

Features

  • Set a deadline for the removal of pkg_resources later this year (December). (#3085)
  • Removed reliance on pkg_resources in test_wheel. (#3085)

v80.8.0

Features

  • Replaced more references to pkg_resources with importlib equivalents in wheel odule. (#3085)
  • Restore explicit LICENSE file. (#5001)
  • Removed no longer used build dependency on coherent.licensed. (#5003)

v80.7.1

Bugfixes

  • Only attempt to fetch eggs for unsatisfied requirements. (#4998)
  • In installer, when discovering egg dists, let metadata discovery search each egg. (#4998)

v80.7.0

Features

  • Removed usage of pkg_resources from installer. Set an official deadline on the installer deprecation to 2025-10-31. (#4997)

Misc

v80.6.0

Features

... (truncated)

Commits
  • 9c4d383 Bump version: 80.8.0 → 80.9.0
  • 05cb3c8 Merge pull request #5014 from pypa/debt/pkg_resources-deadline
  • 3b0bf5b Adjust ignore
  • 9c28cdf Set a deadline for the removal of pkg_resources later this year (December).
  • a3bfef9 Merge pull request #5013 from DimitriPapadopoulos/ISC
  • 64bf9d0 Enforce ruff/flake8-implicit-str-concat rules (ISC)
  • 3250c25 Fix broken link in docs (#4947)
  • 5ccf50e Merge pull request #5006 from pypa/feature/remove-more-pkg_resources
  • 134e587 Suppress nitpicky typecheck in pyright.
  • 0bf2663 Add news fragment.
  • Additional commits viewable in compare view

Updates zipp from 3.19.1 to 3.23.0

Changelog

Sourced from zipp's changelog.

v3.23.0

Features

  • Add a compatibility shim for Python 3.13 and earlier. (#145)

v3.22.0

Features

Bugfixes

  • Fixed .name, .stem, and other basename-based properties on Windows when working with a zipfile on disk. (#133)

v3.21.0

Features

  • Improve performances of :meth:zipfile.Path.open for non-reading modes. (1a1928d)
  • Rely on cached_property to cache values on the instance.
  • Rely on save_method_args to save method args.

v3.20.2

Bugfixes

  • Make zipp.compat.overlay.zipfile hashable. (#126)

v3.20.1

Bugfixes

... (truncated)

Commits

Updates pillow from 10.3.0 to 11.3.0

Release notes

Sourced from pillow's releases.

11.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/11.3.0.html

Deprecations

Documentation

Dependencies

Testing

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the pip group across 2 directories with 6 updates
955b8c4 
Bumps the pip group with 5 updates in the /Industrial_developed_hangman directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.7.4` | `2025.8.3` |
| [idna](https://github.com/kjd/idna) | `3.7` | `3.10` |
| [setuptools](https://github.com/pypa/setuptools) | `78.1.1` | `80.9.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.19.1` | `3.23.0` |

Bumps the pip group with 1 update in the /nitkarshchourasia/to_sort/pdf_to_docx_converter directory: [pillow](https://github.com/python-pillow/Pillow).


Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `certifi` from 2024.7.4 to 2025.8.3
- [Commits](certifi/python-certifi@2024.07.04...2025.08.03)

Updates `idna` from 3.7 to 3.10
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.7...v3.10)

Updates `setuptools` from 78.1.1 to 80.9.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v78.1.1...v80.9.0)

Updates `zipp` from 3.19.1 to 3.23.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.19.1...v3.23.0)

Updates `pillow` from 10.3.0 to 11.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.3.0...11.3.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: idna
  dependency-version: '3.10'
  dependency-type: indirect
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 80.9.0
  dependency-type: indirect
  dependency-group: pip
- dependency-name: zipp
  dependency-version: 3.23.0
  dependency-type: indirect
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 22, 2025
@lighting9999 lighting9999 merged commit f35544e into master Aug 22, 2025
1 of 5 checks passed
@dependabot dependabot bot deleted the dependabot/pip/Industrial_developed_hangman/pip-fa1e9d6d39 branch August 22, 2025 06:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@lighting9999