Skip to content

Deps: Bump the python-packages group with 7 updates#85

Merged
greenbonebot merged 1 commit into
mainfrom
dependabot/pip/python-packages-4cb77d45db
Aug 4, 2025
Merged

Deps: Bump the python-packages group with 7 updates#85
greenbonebot merged 1 commit into
mainfrom
dependabot/pip/python-packages-4cb77d45db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2025

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 7 updates:

Package From To
pontos 25.6.0 25.7.2
coverage 7.10.1 7.10.2
certifi 2025.7.14 2025.8.3
mypy 1.17.0 1.17.1
pydantic 1.10.22 2.11.7
ruff 0.12.5 0.12.7
sqlalchemy 2.0.41 2.0.42

Updates pontos from 25.6.0 to 25.7.2

Release notes

Sourced from pontos's releases.

pontos 25.7.2

25.7.2 - 2025-07-30

Bug Fixes

  • Invalid CVE configurations data for node schema a6287f1e

pontos 25.7.1

25.7.1 - 2025-07-29

Dependencies

  • Bump the python-packages group across 1 directory with 4 updates 175a6401
  • Bump starlette from 0.47.1 to 0.47.2 073c944b

pontos 25.7.0

25.7.0 - 2025-07-28

Bug Fixes

  • format_date timespec and fallback timezone 12da523c

Dependencies

  • Bump the python-packages group across 1 directory with 10 updates 35505503
Commits
  • a9c266d Automatic release to 25.7.2
  • a6287f1 Fix: Invalid CVE configurations data for node schema
  • a53d2e9 Automatic adjustments after release [skip ci]
  • 4347052 Automatic release to 25.7.1
  • 175a640 Deps: Bump the python-packages group across 1 directory with 4 updates
  • 073c944 Deps: Bump starlette from 0.47.1 to 0.47.2
  • 811895e Automatic adjustments after release [skip ci]
  • 6a052af Automatic release to 25.7.0
  • d970b37 Future proof by capturing *args
  • c32c95d Additonal format_date tests
  • Additional commits viewable in compare view

Updates coverage from 7.10.1 to 7.10.2

Changelog

Sourced from coverage's changelog.

Version 7.10.2 — 2025-08-03

  • Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: nedbat/coveragepy#1999

.. _changes_7-10-1:

Commits
  • a867852 docs: sample HTML for 7.10.2
  • e7bfabe docs: prep for 7.10.2
  • 5dbd736 test: this test often borks metacov, retry it
  • b7430fa debug: more convenient run_trace.py
  • e2039d0 refactor: less redundancy in branch_trails
  • c177731 fix: see through nop bytecodes to get the right arcs. #1999
  • 7a83ab0 test: don't try to make pth files when invoked from pth #2011
  • 6d8b091 refactor: remove a commented-out line
  • fc507ad test: add a case for an extension-less Python file parse error
  • 05a6e8d test: no need for skip, we already skip windows
  • Additional commits viewable in compare view

Updates certifi from 2025.7.14 to 2025.8.3

Commits

Updates mypy from 1.17.0 to 1.17.1

Changelog

Sourced from mypy's changelog.

Mypy 1.17.1

  • Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
  • Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
  • Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alexey Makridenko
  • Brian Schubert
  • Chad Dombrova
  • Chainfire
  • Charlie Denton
  • Charulata
  • Christoph Tyralla
  • CoolCat467
  • Donal Burns
  • Guy Wilson
  • Ivan Levkivskyi
  • johnthagen
  • Jukka Lehtosalo
  • Łukasz Kwieciński
  • Marc Mueller
  • Michael J. Sullivan
  • Mikhail Golubev
  • Sebastian Rittau
  • Shantanu
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table>

... (truncated)

Commits

Updates pydantic from 1.10.22 to 2.11.7

Release notes

Sourced from pydantic's releases.

v2.11.7 2025-06-14

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.11.6...v2.11.7

v2.11.6 2025-06-13

v2.11.6 (2025-06-13)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.11.5...v2.11.6

v2.11.5 2025-05-22

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.11.4...v2.11.5

v2.11.4 2025-04-29

What's Changed

Packaging

Changes

  • Allow config and bases to be specified together in create_model() by @​Viicos in #11714. This change was backported as it was previously possible (although not meant to be supported) to provide model_config as a field, which would make it possible to provide both configuration and bases.

Fixes

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.11.7 (2025-06-14)

GitHub release

What's Changed

Fixes

  • Copy FieldInfo instance if necessary during FieldInfo build by @​Viicos in #11898

v2.11.6 (2025-06-13)

GitHub release

What's Changed

Fixes

v2.11.5 (2025-05-22)

GitHub release

What's Changed

Fixes

v2.11.4 (2025-04-29)

GitHub release

What's Changed

Packaging

Changes

  • Allow config and bases to be specified together in create_model() by @​Viicos in #11714. This change was backported as it was previously possible (although not meant to be supported) to provide model_config as a field, which would make it possible to provide both configuration and bases.

... (truncated)

Commits
  • 5f033e4 Prepare release v2.11.7
  • c3368b8 Copy FieldInfo instance if necessary during FieldInfo build (#11980)
  • 3987b23 Prepare release v2.11.6
  • dc7a9d2 Always store the original field assignment on FieldInfo
  • c284c27 Rebuild dataclass fields before schema generation
  • 5e6d1dc Prepare release v2.11.5
  • 1b63218 Do not duplicate metadata on model rebuild (#11902)
  • 5aefad8 Do not delete mock validator/serializer in model_rebuild()
  • 8fbe658 Check if FieldInfo is complete after applying type variable map
  • 12b371a Update documentation about @dataclass_transform support
  • Additional commits viewable in compare view

Updates ruff from 0.12.5 to 0.12.7

Release notes

Sourced from ruff's releases.

0.12.7

Release Notes

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6 Release Notes

Preview features

  • [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
  • [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
  • [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

  • Support .pyi files in ruff analyze graph (#19611)
  • [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
  • [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
  • [refurb] Ignore decorated functions for FURB118 (#19339)
  • [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
  • [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

  • [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

  • Add support for specifying minimum dots in detected string imports (#19538)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.7

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6

Preview features

  • [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
  • [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
  • [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

  • Support .pyi files in ruff analyze graph (#19611)
  • [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
  • [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
  • [refurb] Ignore decorated functions for FURB118 (#19339)
  • [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
  • [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

  • [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

  • Add support for specifying minimum dots in detected string imports (#19538)
Commits
  • c5ac998 Bump 0.12.7 (#19627)
  • 04a8f64 Revert license and license-files changes in pyproject.toml (#19624)
  • 6e00adf Bump 0.12.6 (#19622)
  • 864196b Add Checker::context method, deduplicate Unicode checks (#19609)
  • ae26fa0 [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
  • 88a6799 [ty] Add flow diagram for import resolution
  • 941be52 [ty] Add comments to some core resolver functions
  • 13624ce [ty] Add missing ticks and use consistent quoting
  • edb2f8e [ty] Reflow some long lines
  • 5e6ad84 [ty] Unexport helper function
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.41 to 2.0.42

Release notes

Sourced from sqlalchemy's releases.

2.0.42

Released: July 29, 2025

orm

  • [orm] [usecase] Added dataclass_metadata argument to all ORM attribute constructors that accept dataclasses parameters, e.g. mapped_column.dataclass_metadata, relationship.dataclass_metadata, etc. It's passed to the underlying dataclass metadata attribute of the dataclass field. Pull request courtesy Sigmund Lahn.

    References: #10674

  • [orm] [bug] Implemented the _orm.defer(), _orm.undefer() and _orm.load_only() loader options to work for composite attributes, a use case that had never been supported previously.

    References: #12593

  • [orm] [bug] Fixed bug where the ORM would pull in the wrong column into an UPDATE when a key name inside of the ValuesBase.values() method could be located from an ORM entity mentioned in the statement, but where that ORM entity was not the actual table that the statement was inserting or updating. An extra check for this edge case is added to avoid this problem.

    References: #12692

engine

  • [engine] Improved validation of execution parameters passed to the _engine.Connection.execute() and similar methods to provided a better error when tuples are passed in. Previously the execution would fail with a difficult to understand error message.

sql

  • [sql] [usecase] The _sql.values() construct gains a new method _sql.Values.cte(), which allows creation of a named, explicit-columns CTE against an unnamed VALUES expression, producing a syntax that allows column-oriented selection from a VALUES construct on modern versions of PostgreSQL, SQLite, and MariaDB.

    References: #12734

  • [sql] [bug] Fixed issue where select() of a free-standing scalar expression that

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the python-packages group with 7 updates
92f73ce 
Bumps the python-packages group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [pontos](https://github.com/greenbone/pontos) | `25.6.0` | `25.7.2` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.1` | `7.10.2` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.7.14` | `2025.8.3` |
| [mypy](https://github.com/python/mypy) | `1.17.0` | `1.17.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `1.10.22` | `2.11.7` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.5` | `0.12.7` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.41` | `2.0.42` |


Updates `pontos` from 25.6.0 to 25.7.2
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](greenbone/pontos@v25.6.0...v25.7.2)

Updates `coverage` from 7.10.1 to 7.10.2
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.1...7.10.2)

Updates `certifi` from 2025.7.14 to 2025.8.3
- [Commits](certifi/python-certifi@2025.07.14...2025.08.03)

Updates `mypy` from 1.17.0 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.0...v1.17.1)

Updates `pydantic` from 1.10.22 to 2.11.7
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v1.10.22...v2.11.7)

Updates `ruff` from 0.12.5 to 0.12.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.5...0.12.7)

Updates `sqlalchemy` from 2.0.41 to 2.0.42
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

---
updated-dependencies:
- dependency-name: pontos
  dependency-version: 25.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: coverage
  dependency-version: 7.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pydantic
  dependency-version: 2.11.7
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.12.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: sqlalchemy
  dependency-version: 2.0.42
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 4, 2025
@dependabot dependabot Bot requested review from a team as code owners August 4, 2025 05:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 4, 2025
@greenbonebot greenbonebot enabled auto-merge (rebase) August 4, 2025 05:35
@greenbonebot greenbonebot merged commit 378295f into main Aug 4, 2025
10 of 11 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-4cb77d45db branch August 4, 2025 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bjoernricks bjoernricks bjoernricks approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@bjoernricks @greenbonebot