Skip to content

Bump the all-minor-and-patch-dependency-updates group across 1 directory with 7 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-minor-and-patch-dependency-updates-2293b0744c
Open

Bump the all-minor-and-patch-dependency-updates group across 1 directory with 7 updates#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-minor-and-patch-dependency-updates-2293b0744c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the all-minor-and-patch-dependency-updates group with 7 updates in the / directory:

Package From To
requests 2.32.5 2.33.1
nbsphinx 0.9.7 0.9.8
sphinx-automodapi 0.19.0 0.22.0
sphinx-rtd-theme 3.0.2 3.1.0
pytest-cov 7.0.0 7.1.0
ruff 0.11.12 0.15.8
ipykernel 7.1.0 7.2.0

Updates requests from 2.32.5 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits

Updates nbsphinx from 0.9.7 to 0.9.8

Release notes

Sourced from nbsphinx's releases.

nbsphinx 0.9.8

https://pypi.org/project/nbsphinx/0.9.8/

  • Re-enable Sphinx 8.2+
  • Support text/x-rst MIME type in raw cells
  • Support for mathjax4_config
Changelog

Sourced from nbsphinx's changelog.

Version 0.9.8 -- 2025-11-28 -- PyPI__ -- diff__

  • Re-enable Sphinx 8.2+
  • Support text/x-rst MIME type in raw cells
  • Support for mathjax4_config

__ https://pypi.org/project/nbsphinx/0.9.8/ __ spatialaudio/nbsphinx@0.9.7...0.9.8

Version 0.9.7 -- 2025-03-03 -- PyPI__ -- diff__

  • Disable Sphinx 8.2+ (for now)

__ https://pypi.org/project/nbsphinx/0.9.7/ __ spatialaudio/nbsphinx@0.9.6...0.9.7

Version 0.9.6 -- 2024-12-24 -- PyPI__ -- diff__

  • Markdown: allow lists without leading blank line

__ https://pypi.org/project/nbsphinx/0.9.6/ __ spatialaudio/nbsphinx@0.9.5...0.9.6

Version 0.9.5 -- 2024-08-13 -- PyPI__ -- diff__

  • Miscellaneous fixes

__ https://pypi.org/project/nbsphinx/0.9.5/ __ spatialaudio/nbsphinx@0.9.4...0.9.5

Version 0.9.4 -- 2024-05-06 -- PyPI__ -- diff__

  • Require docutils >= 0.18.1
  • Minor fixes, documentation and CI updates

__ https://pypi.org/project/nbsphinx/0.9.4/ __ spatialaudio/nbsphinx@0.9.3...0.9.4

Version 0.9.3 -- 2023-08-27 -- PyPI__ -- diff__

  • Fix gallery regression in Sphinx 7.2

__ https://pypi.org/project/nbsphinx/0.9.3/ __ spatialaudio/nbsphinx@0.9.2...0.9.3

Version 0.9.2 -- 2023-05-24 -- PyPI__ -- diff__

  • Improve support for sphinx_immaterial theme
  • Improve support for links starting with #
  • Add support for in-text citations
  • LaTeX: Add support for admonition titles

__ https://pypi.org/project/nbsphinx/0.9.2/ __ spatialaudio/nbsphinx@0.9.1...0.9.2

Version 0.9.1 -- 2023-03-14 -- PyPI__ -- diff__

  • pandoc: disable "smart" option only for version 2.0+

... (truncated)

Commits
  • 4f07420 Release 0.9.8
  • 75d6770 Avoid a logging error
  • dd96f11 DOC: Update URL for the <img> element
  • d97c011 Add support for mathjax4_config (#854)
  • 4882668 Fix nbsphinx_assume_equations to work with newer versions of Sphinx
  • 95372a7 CI: use "uv" for "publish" workflow
  • 9ce8c26 setup.py -> pyproject.toml
  • 394b9ee DOC: use anonymous hyperlinks for embedded URLs
  • ab85921 Bump actions/upload-artifact from 4 to 5
  • 76122c2 Bump actions/download-artifact from 4 to 6
  • Additional commits viewable in compare view

Updates sphinx-automodapi from 0.19.0 to 0.22.0

Release notes

Sourced from sphinx-automodapi's releases.

v0.22.0

What's Changed

Full Changelog: astropy/sphinx-automodapi@v0.21.0...v0.22.0

v0.21.0

What's Changed

New Contributors

Full Changelog: astropy/sphinx-automodapi@v0.20.0...v0.21.0

v0.20.0

What's Changed

New Contributors

Full Changelog: astropy/sphinx-automodapi@v0.19.0...v0.20.0

Changelog

Sourced from sphinx-automodapi's changelog.

0.22.0 (2025-12-12)

  • Minimum supported Python version is now 3.10. #229

  • Fixing deprecation introduced in Sphinx 9. #232

0.21.0 (2025-12-01)

  • Fixes compatibility with Sphinx 9.0. [#215, #220, #224]

  • Minimum supported Python version is now 3.9. #213

  • Minimum supported Sphinx version is now 5. #213

0.20.0 (2025-06-12)

  • Support for non-default dataclass fields. #208
Commits
  • 04390ab Finalizing changelog for v0.22.0
  • 038da98 Merge pull request #232 from pllim/sphinx10-compat
  • b46c8d6 Apply suggestions from code review
  • 24920e7 Add change log
  • 0f645e8 Address RemovedInSphinx10Warning
  • a3bdc2f Add SPHINX_LT_10
  • 972c9fb Merge pull request #229 from bsipocz/MAINT_remote_py39
  • 7503d7a DOC: adding changelog
  • 5905fd5 MAINT: some more post sphinx 9.0 cleanup
  • 120a605 MAINT: dropping support for python 3.9
  • Additional commits viewable in compare view

Updates sphinx-rtd-theme from 3.0.2 to 3.1.0

Changelog

Sourced from sphinx-rtd-theme's changelog.

3.1.0

  • Added support for docutils 0.22
  • Added support for Sphinx 9.x

.. _release-3.1.0rc2:

3.1.0rc2

  • Added support for docutils 0.22

.. _release-3.1.0rc1:

3.1.0rc1

  • Added support for Sphinx 9.x

.. _release-3.0.2:

Commits

Updates pytest-cov from 7.0.0 to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

  • Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

  • Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

Commits
  • 66c8a52 Bump version: 7.0.0 → 7.1.0
  • f707662 Make the examples use pypy 3.11.
  • 6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
  • 8ebf20b Update changelog.
  • 861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
  • fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
  • 78c9c4e Only run the 3.9 on older deps.
  • 4849a92 Punctuation.
  • 197c35e Update changelog and hopefully I don't forget to publish release again :))
  • 14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
  • Additional commits viewable in compare view

Updates ruff from 0.11.12 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Commits
  • c2a8815 Release 0.15.8 (#24217)
  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
  • d812662 Use the release environment in publish-docs (#24214)
  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
  • 34998be [ty] Fix typo in comment (#24211)
  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
  • Additional commits viewable in compare view

Updates ipykernel from 7.1.0 to 7.2.0

Release notes

Sourced from ipykernel's releases.

v7.2.0

7.2.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​arjxn-py (activity) | @​Carreau (activity) | @​ccordoba12 (activity) | @​ianthomas23 (activity) | @​JohanMabille (activity) | @​minrk (activity) | @​newville (activity) | @​SylvainCorlay (activity)

v7.2.0a1

7.2.0a1

(Full Changelog)

... (truncated)

Changelog

Sourced from ipykernel's changelog.

7.2.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​arjxn-py (activity) | @​Carreau (activity) | @​ccordoba12 (activity) | @​ianthomas23 (activity) | @​JohanMabille (activity) | @​minrk (activity) | @​newville (activity) | @​SylvainCorlay (activity)

7.2.0a1

(Full Changelog)

New features added

... (truncated)

Commits
  • 4b37e75 Publish 7.2.0
  • 1630c4f Temporarily revert "Test changing base method to async after (#1464)" (#1493)
  • 8086199 Temporarily revert "Test changing base method to async after (#1464)"
  • a2d47a2 chore: update pre-commit hooks (#1472)
  • 06c9aee Publish 7.2.0a1
  • 220a3c6 Made IOPubThread constructor backward compatible (#1492)
  • dee781d Update pytest requirement from <9,>=7.0 to >=7.0,<10 in the actions group acr...
  • 56b2e29 Update pytest requirement in the actions group across 1 directory
  • 13e17df Advertizes kernel protocol 5.5 (#1488)
  • 59f0c65 Advertizes kernel protocol 5.5
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-minor-and-patch-dependency-updates group across 1 direct…
d6a8a33 
…ory with 7 updates

Bumps the all-minor-and-patch-dependency-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.1` |
| [nbsphinx](https://github.com/spatialaudio/nbsphinx) | `0.9.7` | `0.9.8` |
| [sphinx-automodapi](https://github.com/astropy/sphinx-automodapi) | `0.19.0` | `0.22.0` |
| [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.2` | `3.1.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.12` | `0.15.8` |
| [ipykernel](https://github.com/ipython/ipykernel) | `7.1.0` | `7.2.0` |



Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `nbsphinx` from 0.9.7 to 0.9.8
- [Release notes](https://github.com/spatialaudio/nbsphinx/releases)
- [Changelog](https://github.com/spatialaudio/nbsphinx/blob/master/NEWS.rst)
- [Commits](spatialaudio/nbsphinx@0.9.7...0.9.8)

Updates `sphinx-automodapi` from 0.19.0 to 0.22.0
- [Release notes](https://github.com/astropy/sphinx-automodapi/releases)
- [Changelog](https://github.com/astropy/sphinx-automodapi/blob/main/CHANGES.rst)
- [Commits](astropy/sphinx-automodapi@v0.19.0...v0.22.0)

Updates `sphinx-rtd-theme` from 3.0.2 to 3.1.0
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `ruff` from 0.11.12 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.12...0.15.8)

Updates `ipykernel` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/ipython/ipykernel/releases)
- [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md)
- [Commits](ipython/ipykernel@v7.1.0...v7.2.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: nbsphinx
  dependency-version: 0.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-automodapi
  dependency-version: 0.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ipykernel
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants