Skip to content

chore(deps): bump the python-minor-patch group across 1 directory with 9 updates#88

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/python-minor-patch-f0f6cd8fa2
Closed

chore(deps): bump the python-minor-patch group across 1 directory with 9 updates#88
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/python-minor-patch-f0f6cd8fa2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 9 updates in the / directory:

Package From To
snakemake 9.23.0 9.23.1
ruff 0.15.17 0.15.18
pytest 9.1.0 9.1.1
hypothesis 6.155.3 6.155.7
fastapi 0.137.1 0.138.0
pydantic-settings 2.14.1 2.14.2
semgrep 1.166.0 1.167.0
prettytable 3.17.0 3.18.0
msgpack 1.2.0 1.2.1

Updates snakemake from 9.23.0 to 9.23.1

Release notes

Sourced from snakemake's releases.

v9.23.1

9.23.1 (2026-06-17)

Bug Fixes

  • LoggerManager.shutdown() error handling, flush all loggers (#4196) (5bcdbf3)
  • temp files not deleted when using remote storage plugins (#4232) (7c58f53)

Documentation

  • mention sponsoring in docs (c659d62)
Changelog

Sourced from snakemake's changelog.

9.23.1 (2026-06-17)

Bug Fixes

  • LoggerManager.shutdown() error handling, flush all loggers (#4196) (5bcdbf3)
  • temp files not deleted when using remote storage plugins (#4232) (7c58f53)

Documentation

  • mention sponsoring in docs (c659d62)
Commits
  • 3d933e6 chore(main): release 9.23.1 (#4227)
  • 7c58f53 fix: temp files not deleted when using remote storage plugins (#4232)
  • 2a95afb build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the dependencies gr...
  • 84d7941 fmt
  • c659d62 docs: mention sponsoring in docs
  • eaa3c34 configure sponsor button
  • 5bcdbf3 fix: LoggerManager.shutdown() error handling, flush all loggers (#4196)
  • See full diff in compare view

Updates ruff from 0.15.17 to 0.15.18

Release notes

Sourced from ruff's releases.

0.15.18

Release Notes

Released on 2026-06-18.

Preview features

  • Handle nested ruff:ignore comments (#25791)
  • Stop displaying severity in output (#26050)
  • Use human-readable names in CLI output (#25937)
  • Use human-readable names in LSP and playground diagnostics (#26058)
  • [pydocstyle] Prevent property docstrings starting with verbs (D421) (#23775)
  • [flake8-pyi] Extend PYI033 to Python files (#26129)

Bug fixes

  • Detect equivalent numeric mapping keys (#26009)
  • Detect mapping keys equivalent to booleans (#25982)
  • Detect repeated signed and complex dictionary keys (#26007)

Rule changes

  • [flake8-pyi] Rename PYI033 to legacy-type-comment (#26131)

Performance

  • Use ThinVec for call keywords (#25999)
  • Inline parser recovery context checks (#26038)
  • Match parser keywords as bytes (#26037)
  • Move value parsing out of lexing (#25360)

Server

  • Render subdiagnostics and secondary annotations as related information (#26011)

Documentation

  • Update fix availability for always-fixable rules (#26091)
  • [flake8-tidy-imports] Add fix safety section (TID252) (#17491)

Parser

  • Reject __debug__ lambda parameters (#26022)
  • Reject _ as a match-pattern target (#25977)
  • Reject multiple starred names in sequence patterns (#25976)
  • Reject parenthesized star imports (#26021)
  • Reject starred comprehension targets (#26023)
  • Reject unparenthesized generator expressions in class bases (#25978)
  • Reject yield expressions after commas (#26024)
  • Validate function type parameter default order (#25981)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.18

Released on 2026-06-18.

Preview features

  • Handle nested ruff:ignore comments (#25791)
  • Stop displaying severity in output (#26050)
  • Use human-readable names in CLI output (#25937)
  • Use human-readable names in LSP and playground diagnostics (#26058)
  • [pydocstyle] Prevent property docstrings starting with verbs (D421) (#23775)
  • [flake8-pyi] Extend PYI033 to Python files (#26129)

Bug fixes

  • Detect equivalent numeric mapping keys (#26009)
  • Detect mapping keys equivalent to booleans (#25982)
  • Detect repeated signed and complex dictionary keys (#26007)

Rule changes

  • [flake8-pyi] Rename PYI033 to legacy-type-comment (#26131)

Performance

  • Use ThinVec for call keywords (#25999)
  • Inline parser recovery context checks (#26038)
  • Match parser keywords as bytes (#26037)
  • Move value parsing out of lexing (#25360)

Server

  • Render subdiagnostics and secondary annotations as related information (#26011)

Documentation

  • Update fix availability for always-fixable rules (#26091)
  • [flake8-tidy-imports] Add fix safety section (TID252) (#17491)

Parser

  • Reject __debug__ lambda parameters (#26022)
  • Reject _ as a match-pattern target (#25977)
  • Reject multiple starred names in sequence patterns (#25976)
  • Reject parenthesized star imports (#26021)
  • Reject starred comprehension targets (#26023)
  • Reject unparenthesized generator expressions in class bases (#25978)
  • Reject yield expressions after commas (#26024)
  • Validate function type parameter default order (#25981)

... (truncated)

Commits

Updates pytest from 9.1.0 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.
Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates hypothesis from 6.155.3 to 6.155.7

Commits
  • 929e5fb Bump hypothesis version to 6.155.7 and update changelog
  • 93ee3c9 Merge pull request #4772 from Liam-DeVoe/recursive-property-thread-safety
  • 0bb0f2f drop more 3.13t
  • de6bd79 drop inbetween
  • ff583cc drop 313t jobs
  • a5474e4 claude: re-trigger CI
  • 55d2b97 claude: re-trigger CI (flaky conjecture-coverage + transient scipy/OpenBLAS b...
  • 0a2bdae claude: fix recursive_property thread-safety; install Python via fresh uv met...
  • 4641d65 Bump hypothesis version to 6.155.6 and update changelog
  • 7d90a93 Merge pull request #4770 from Liam-DeVoe/ignore-up037
  • Additional commits viewable in compare view

Updates fastapi from 0.137.1 to 0.138.0

Release notes

Sourced from fastapi's releases.

0.138.0

Features

  • ✨ Add support for app.frontend("/", directory="dist") and router.frontend("/", directory="dist"). PR #15800 by @​tiangolo.

Docs

Translations

Internal

0.137.2

Features

  • ✨ Add iter_route_contexts() for advanced use cases that used to use router.routes (e.g. Jupyverse). PR #15785 by @​tiangolo.

Translations

Internal

... (truncated)

Commits

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates semgrep from 1.166.0 to 1.167.0

Release notes

Sourced from semgrep's releases.

Release v1.167.0

1.167.0 - 2026-06-17

### Added

  • Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more. (const-folding)
  • Added a nosemgrep_disabled field to the scan configuration so the platform can disable nosemgrep inline ignore comments org-wide for a scan. (APPEX-1122)
  • Semgrep now skips binary files (images, archives, compiled executables, etc.) during scanning by default, detected via matching file extensions to known file-format magic bytes Pass --no-exclude-binary-files to scan binary files as before. (ENGINE-2708)

### Fixed

  • semgrep ci with --sarif now correctly populates the output's ignores field with nosemgrep-suppressed findings, in accordance with other output formatters. (gh-6651)

### Infra/Release Changes

  • Updated the ocaml-tree-sitter-core submodule to the latest upstream main, providing

    • improved thread-safety
    • bumps the tree-sitter CLI option used from 0.20.6 to 0.20.8.

    (ocaml-tree-sitter-core-bump)

Changelog

Sourced from semgrep's changelog.

1.167.0 - 2026-06-17

### Added

  • Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more. (const-folding)
  • Added a nosemgrep_disabled field to the scan configuration so the platform can disable nosemgrep inline ignore comments org-wide for a scan. (APPEX-1122)
  • Semgrep now skips binary files (images, archives, compiled executables, etc.) during scanning by default, detected via matching file extensions to known file-format magic bytes Pass --no-exclude-binary-files to scan binary files as before. (ENGINE-2708)

### Fixed

  • semgrep ci with --sarif now correctly populates the output's ignores field with nosemgrep-suppressed findings, in accordance with other output formatters. (gh-6651)

### Infra/Release Changes

  • Updated the ocaml-tree-sitter-core submodule to the latest upstream main, providing

    • improved thread-safety
    • bumps the tree-sitter CLI option used from 0.20.6 to 0.20.8.

    (ocaml-tree-sitter-core-bump)

Commits
  • 2e64163 chore: release 1.167.0
  • 4e0501d chore(partial-scans): add atd types and cli flag for specifying partial scan ...
  • 3d1c0acsemgrep/semgrep-proprietary#6480
  • c9fee93 fix: add event trigger type to wait-for logic (semgrep/semgrep-proprietar...
  • 008fd21 chore: update ocaml-tree-sitter-core submodule to use tree-sitter 0.20.8 (sem...
  • 8d0fc8a chore: split Dockerfilesemgrep/semgrep-proprietary#6553
  • a7a6827semgrep/semgrep-proprietary#6444
  • fd6d28d feat(ci): cut osx-x86 make test to subset smoke test (semgrep/semgrep-propr...
  • b203aa2semgrep/semgrep-proprietary#6574
  • fe22e0a feat(cli): Honor nosemgrep_disabled scan config setting in semgrep ci (semg...
  • Additional commits viewable in compare view

Updates prettytable from 3.17.0 to 3.18.0

Release notes

Sourced from prettytable's releases.

Release 3.18.0

Added

Changed

Deprecated

  • Performance: deprecate and defer import of OptionsType (#462) @​hugovk
  • Performance: deprecate and defer import of TableHandler (#460) @​hugovk

Fixed

Commits
  • 069405f Speed up import time (#471)
  • 95810e2 Add support for Python 3.16 (#470)
  • 868b51e Stop testing experimental Python 3.13t (#469)
  • d02b216 Expand tabs in cell values so columns stay aligned (#468)
  • e4c9c69 Drop stale align/valign keys when field_names are renamed (#465)
  • 266ff5d Document header_horizontal_char and remove a duplicate docstring line (#467)
  • 144749c Performance: deprecate and defer import of OptionsType (#462)
  • 23f3eb7 Bump mypy from 1.20.2 to 2.1.0 in the pip group (#466)
  • 2fe26d3 Bump mypy from 1.19.1 to 1.20.2 in the actions group (#464)
  • e4babc3 Hash pin GitHub Actions (#463)
  • Additional commits viewable in compare view

Updates msgpack from 1.2.0 to 1.2.1

Release notes

Sourced from msgpack's releases.

v1.2.1

What's Changed

Full Changelog: msgpack/msgpack-python@v1.2.0...v1.2.1

Changelog

Sourced from msgpack's changelog.

1.2.1

Release Date: 2026-06-19

Fix a segfault when calling Unpacker.unpack() or Unpacker.skip() after an unpacking failure. But note that reusing the same Unpacker instance after an unpacking failure is not supported. Please create a new Unpacker instance instead. GHSA-6v7p-g79w-8964

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 22, 2026
@dependabot dependabot Bot requested a review from Gavin-Borges as a code owner June 22, 2026 21:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 22, 2026
@Gavin-Borges

Gavin-Borges commented Jun 22, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

This was referenced Jun 22, 2026
Closed
Closed
Closed
Closed
@Gavin-Borges

Gavin-Borges commented Jun 22, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/pip/python-minor-patch-f0f6cd8fa2 branch from 5d2495c to 27f3060 Compare June 22, 2026 22:52
@dependabot
chore(deps): bump the python-minor-patch group across 1 directory wit…
9d0af12 
…h 9 updates

Bumps the python-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [snakemake](https://github.com/snakemake/snakemake) | `9.23.0` | `9.23.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.15.18` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.0` | `9.1.1` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.155.3` | `6.155.7` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.137.1` | `0.138.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [semgrep](https://github.com/semgrep/semgrep) | `1.166.0` | `1.167.0` |
| [prettytable](https://github.com/prettytable/prettytable) | `3.17.0` | `3.18.0` |
| [msgpack](https://github.com/msgpack/msgpack-python) | `1.2.0` | `1.2.1` |



Updates `snakemake` from 9.23.0 to 9.23.1
- [Release notes](https://github.com/snakemake/snakemake/releases)
- [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md)
- [Commits](snakemake/snakemake@v9.23.0...v9.23.1)

Updates `ruff` from 0.15.17 to 0.15.18
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.17...0.15.18)

Updates `pytest` from 9.1.0 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.0...9.1.1)

Updates `hypothesis` from 6.155.3 to 6.155.7
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.155.3...v6.155.7)

Updates `fastapi` from 0.137.1 to 0.138.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.137.1...0.138.0)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `semgrep` from 1.166.0 to 1.167.0
- [Release notes](https://github.com/semgrep/semgrep/releases)
- [Changelog](https://github.com/semgrep/semgrep/blob/v1.167.0/CHANGELOG.md)
- [Commits](semgrep/semgrep@v1.166.0...v1.167.0)

Updates `prettytable` from 3.17.0 to 3.18.0
- [Release notes](https://github.com/prettytable/prettytable/releases)
- [Changelog](https://github.com/prettytable/prettytable/blob/main/CHANGELOG.md)
- [Commits](prettytable/prettytable@3.17.0...3.18.0)

Updates `msgpack` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.138.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: hypothesis
  dependency-version: 6.155.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: msgpack
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: prettytable
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.15.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: semgrep
  dependency-version: 1.167.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: snakemake
  dependency-version: 9.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/python-minor-patch-f0f6cd8fa2 branch from 27f3060 to 9d0af12 Compare June 22, 2026 23:45
@Gavin-Borges Gavin-Borges enabled auto-merge June 23, 2026 02:36
Gavin-Borges
Gavin-Borges approved these changes Jun 23, 2026
View reviewed changes

@Gavin-Borges Gavin-Borges left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All CI green. Companion python-minor-patch group bump with same security packages.

@Gavin-Borges

Gavin-Borges commented Jun 23, 2026

Copy link
Copy Markdown
Owner

Superseded: root requirements.in was updated by the merged PR #87 and the requirements.txt hashes have been manually synced directly on main (same Dependabot-verified hashes). environments/ files were fully covered by PR #87. No remaining delta.

auto-merge was automatically disabled June 23, 2026 03:16

Pull request was closed

@dependabot @github

dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/python-minor-patch-f0f6cd8fa2 branch June 23, 2026 03:16
Gavin-Borges added a commit that referenced this pull request Jun 23, 2026
@Gavin-Borges
chore(deps): sync requirements.txt lock hashes with updated requireme…
6095b00 
…nts.in

requirements.in was updated by PR #87 (fastapi 0.138.0, hypothesis 6.155.7,
pytest 9.1.1) but the compiled requirements.txt hash entries were not
regenerated in that merge. Apply the pre-verified hashes from Dependabot
PR #88 so the lock file is consistent with the manifest.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Gavin-Borges Gavin-Borges Gavin-Borges approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Gavin-Borges