Deps: Bump the python-packages group with 7 updates #790
+79
−85
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the python-packages group with 7 updates: | Package | From | To | | --- | --- | --- | | [codespell](https://github.com/codespell-project/codespell) | `2.3.0` | `2.4.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.9.2` | `0.9.4` | | [black](https://github.com/psf/black) | `24.10.0` | `25.1.0` | | [certifi](https://github.com/certifi/python-certifi) | `2024.12.14` | `2025.1.31` | | [h2](https://github.com/python-hyper/h2) | `4.1.0` | `4.2.0` | | [hpack](https://github.com/python-hyper/hpack) | `4.0.0` | `4.1.0` | | [hyperframe](https://github.com/python-hyper/hyperframe) | `6.0.1` | `6.1.0` | Updates `codespell` from 2.3.0 to 2.4.1 - [Release notes](https://github.com/codespell-project/codespell/releases) - [Commits](codespell-project/codespell@v2.3.0...v2.4.1) Updates `ruff` from 0.9.2 to 0.9.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.9.2...0.9.4) Updates `black` from 24.10.0 to 25.1.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.10.0...25.1.0) Updates `certifi` from 2024.12.14 to 2025.1.31 - [Commits](certifi/python-certifi@2024.12.14...2025.01.31) Updates `h2` from 4.1.0 to 4.2.0 - [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst) - [Commits](python-hyper/h2@v4.1.0...v4.2.0) Updates `hpack` from 4.0.0 to 4.1.0 - [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst) - [Commits](python-hyper/hpack@v4.0.0...v4.1.0) Updates `hyperframe` from 6.0.1 to 6.1.0 - [Changelog](https://github.com/python-hyper/hyperframe/blob/master/CHANGELOG.rst) - [Commits](python-hyper/hyperframe@v6.0.1...v6.1.0) --- updated-dependencies: - dependency-name: codespell dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: black dependency-type: indirect update-type: version-update:semver-major dependency-group: python-packages - dependency-name: certifi dependency-type: indirect update-type: version-update:semver-major dependency-group: python-packages - dependency-name: h2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: hpack dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: hyperframe dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Dependency ReviewThe following issues were found:
Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. License Issuespoetry.lock
Allowed Licenses: 0BSD, AGPL-3.0-or-later, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause-Clear, BSD-3-Clause, BSL-1.0, CAL-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-4.0, CC0-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-or-later, GPL-2.0, GPL-3.0-or-later, ISC, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1, LGPL-3.0-only, LGPL-3.0, LGPL-3.0-or-later, MIT, MIT-CMU, MPL-1.1, MPL-2.0, OFL-1.1, PSF-2.0, Python-2.0, Python-2.0.1, Unicode-DFS-2016, Unlicense OpenSSF Scorecard
Scanned Files
|
Conventional Commits Report
🚀 Conventional commits found. |
mbrinkhoff
approved these changes
Feb 3, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-packages group with 7 updates:
2.3.02.4.10.9.20.9.424.10.025.1.02024.12.142025.1.314.1.04.2.04.0.04.1.06.0.16.1.0Updates
codespellfrom 2.3.0 to 2.4.1Release notes
Sourced from codespell's releases.
... (truncated)
Commits
63c8f83Reverthep->heap, help,in dictionary_rare.txt from #3461 (#3624)db0100eRun pytest GitHub Action on an ARM processor (#3619)c6bdc1f[pre-commit.ci] autoupdate less frequently654b3edRunruff format913871eApply ruff/flake8-pytest-style rule PT006b782f25Changes for ruff 0.9.19c3a652[pre-commit.ci] pre-commit autoupdate2626491Remove socioeconomic entriesec57cffAdd spelling correction for denila and variant.2acfc37[pre-commit.ci] pre-commit autoupdateUpdates
rufffrom 0.9.2 to 0.9.4Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
854ab03Bump version to 0.9.4 (#15831)b0b8b06Remove semicolon after TypeScript interface definition (#15827)451f251[red-knot] Clarify behavior when redeclaring base class attributes (#15826)13cf3e6[flake8-comprehensions] Parenthesizesortedwhen needed for `unnecessary-...56f956a[pyupgrade] Handle end-of-line comments forquoted-annotation(UP037) (...7a10a40[flake8-bandit] Permit suspicious imports within stub files (S4) (#15822)3125332[red-knot] Format mdtest snippets with the latest version of black (#15819)15d886a[red-knot] Consider all definitions after terminal statements unreachable (#1...e1c9d10[flake8-comprehensions] Do not emitunnecessary-mapdiagnostic when lambd...23c9884Preserve quotes in generated f-strings (#15794)Updates
blackfrom 24.10.0 to 25.1.0Release notes
Sourced from black's releases.
... (truncated)
Changelog
Sourced from black's changelog.
... (truncated)
Commits
8a737e7Prepare release 25.1.0 (#4563)d330deedocs: We're not going to use backslashes for the with statement (#4564)3d81290Movewrap_long_dict_values_in_parensto the preview style (#4561)459562cImprove function declaration wrapping when it contains generic type definitio...99dbf30Cache executor to avoid hitting open file limits (#4560)c0b92f3Prepare the 2025 stable style (#4558)e58baf1Add test for #1187 (#4559)1455ae4Fix docs CI (#4555)584d033fix: Don't remove parenthesis around long dictionary values (#4377)6e96540Fix CI (#4551)Updates
certififrom 2024.12.14 to 2025.1.31Commits
088f9312025.01.31 (#336)1c17795Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#335)a2e88f0Bump actions/upload-artifact from 4.5.0 to 4.6.0 (#334)82284edBump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (#333)10d3d1dBump actions/upload-artifact from 4.4.3 to 4.5.0 (#332)Updates
h2from 4.1.0 to 4.2.0Changelog
Sourced from h2's changelog.
Commits
dacd614v4.2.00b98b24tests: linting++9bfb877fix backward-compatibility of semi-public API for #12753f5a608linting++01c080aenable type checking using mypy1acf9c1add typing information82d97daclarify RequestReceived CONTINUATION frame behavioree4fa16migrate tox.ini into pyproject.tomlb0485e9bump codecov integration20c8e71update changelogUpdates
hpackfrom 4.0.0 to 4.1.0Changelog
Sourced from hpack's changelog.
Commits
d78d4cbv4.1.027e8a86lint++9a54234typing++2602e6cadd simple code sample to readme53a18denuke left-over documentationae788d9migrate tox.ini into pyproject.toml96f12a3bump codecov integrationf8ee36bmodernize everything131b44cadd typing information3789435add test for full coverageUpdates
hyperframefrom 6.0.1 to 6.1.0Changelog
Sourced from hyperframe's changelog.
Commits
ab477bav6.1.00be70d1lint++2595cf6migrate tox.ini into pyproject.toml06993dabump codecov integration5039d79fix coverage path mapping0b85069modernize everything48965e0improve typing informationb72d64blinting8174dfdupdate supported Python versions554fcaddocs: fix function parameter referenceDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions