Skip to content

chore(deps): bump the gha group across 1 directory with 4 updates #3188

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 28, 2025

Bumps the gha group with 4 updates in the /packages/opentelemetry-instrumentation-chromadb directory: opentelemetry-semantic-conventions-ai, flake8, pytest and chromadb.

Updates opentelemetry-semantic-conventions-ai from 0.4.11 to 0.4.12

Updates flake8 from 7.0.0 to 7.3.0

Commits

Updates pytest from 8.2.2 to 8.4.1

Release notes

Sourced from pytest's releases.

8.4.1

pytest 8.4.1 (2025-06-17)

Bug fixes

  • #13461: Corrected _pytest.terminal.TerminalReporter.isatty to support being called as a method. Before it was just a boolean which could break correct code when using -o log_cli=true).

  • #13477: Reintroduced pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.

    This warning is raised when a test functions returns a value other than None, which is often a mistake made by beginners.

    See return-not-none{.interpreted-text role="ref"} for more information.

  • #13497: Fixed compatibility with Twisted 25+.

Improved documentation

  • #13492: Fixed outdated warning about faulthandler not working on Windows.

8.4.0

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

  • #11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.

  • #12346: Tests will now fail, instead of raising a warning, if they return any value other than None.

  • #12874: We dropped support for Python 3.8 following its end of life (2024-10-07).

  • #12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

    See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

  • #10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

  • #11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.

  • #12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.

  • #12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.

  • #12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

... (truncated)

Commits

Updates chromadb from 0.5.4 to 1.0.15

Release notes

Sourced from chromadb's releases.

1.0.15

Version: 1.0.15 Git ref: refs/tags/1.0.15 Build Date: 2025-07-02T17:07 PIP Package: chroma-1.0.15.tar.gz Github Container Registry Image: :1.0.15 DockerHub Image: :1.0.15

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Important

Bumps dependencies in pyproject.toml for opentelemetry-instrumentation-chromadb, including opentelemetry-semantic-conventions-ai, flake8, pytest, and chromadb.

  • Dependency Updates:
    • Bumps opentelemetry-semantic-conventions-ai from 0.4.11 to 0.4.12.
    • Bumps flake8 from 7.0.0 to 7.3.0.
    • Bumps pytest from 8.2.2 to 8.4.1.
    • Bumps chromadb from 0.5.4 to 1.0.15.

This description was created by Ellipsis for bf6c71a. You can customize this summary. It will automatically update as commits are pushed.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 28, 2025
Copy link

coderabbitai bot commented Jul 28, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Contributor

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to bf6c71a in 52 seconds. Click for details.
  • Reviewed 24 lines of code in 1 files
  • Skipped 1 files when reviewing.
  • Skipped posting 3 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/opentelemetry-instrumentation-chromadb/pyproject.toml:30
  • Draft comment:
    Updated opentelemetry-semantic-conventions-ai to 0.4.12. Verify that this minor bump is compatible with related OpenTelemetry dependencies.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to verify compatibility of a minor version bump, which falls under the rule of not asking the author to ensure compatibility or verify behavior. It does not provide a specific suggestion or point out a specific issue.
2. packages/opentelemetry-instrumentation-chromadb/pyproject.toml:34
  • Draft comment:
    flake8 bumped to 7.3.0. Ensure that new linting rules don't unexpectedly break the code style checks.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change, specifically the flake8 version bump. It asks the author to ensure that new linting rules don't break the code style checks, which is a form of asking the author to double-check something. This violates the rules against commenting on dependency changes and asking for confirmation or double-checking.
3. packages/opentelemetry-instrumentation-chromadb/pyproject.toml:39
  • Draft comment:
    chromadb version constraint updated to '>=0.5,<1.1'. Confirm that this range (which will include 1.0.15) is appropriate given potential breaking changes and API differences.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the author to confirm the appropriateness of a version range for a dependency, which is related to dependencies. The rules specify not to comment on dependency changes or library versions that are not recognized. Therefore, this comment should be removed.

Workflow ID: wflow_ifZQDuQEjtcylKs4

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@dependabot dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-chromadb/gha-2e6b045fdc branch 2 times, most recently from 050075b to 8079129 Compare August 4, 2025 08:44
@dependabot dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-chromadb/gha-2e6b045fdc branch 7 times, most recently from 752285d to 71fdb6f Compare August 14, 2025 12:12
Bumps the gha group with 4 updates in the /packages/opentelemetry-instrumentation-chromadb directory: opentelemetry-semantic-conventions-ai, [flake8](https://github.com/pycqa/flake8), [pytest](https://github.com/pytest-dev/pytest) and [chromadb](https://github.com/chroma-core/chroma).


Updates `opentelemetry-semantic-conventions-ai` from 0.4.11 to 0.4.12

Updates `flake8` from 7.0.0 to 7.3.0
- [Commits](PyCQA/flake8@7.0.0...7.3.0)

Updates `pytest` from 8.2.2 to 8.4.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.2.2...8.4.1)

Updates `chromadb` from 0.5.4 to 1.0.15
- [Release notes](https://github.com/chroma-core/chroma/releases)
- [Changelog](https://github.com/chroma-core/chroma/blob/main/RELEASE_PROCESS.md)
- [Commits](chroma-core/chroma@0.5.4...1.0.15)

---
updated-dependencies:
- dependency-name: opentelemetry-semantic-conventions-ai
  dependency-version: 0.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: chromadb
  dependency-version: 1.0.15
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: gha
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-chromadb/gha-2e6b045fdc branch from 71fdb6f to ac3767e Compare August 14, 2025 14:42
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 14, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 14, 2025
@dependabot dependabot bot deleted the dependabot/pip/packages/opentelemetry-instrumentation-chromadb/gha-2e6b045fdc branch August 14, 2025 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants