Build(deps): Bump typer from 0.9.0 to 0.19.2

[dependabot]

Bumps typer from 0.9.0 to 0.19.2.

Release notes

Sourced from typer's releases.

0.19.2

Fixes

• 🐛 Fix list convertor with an empty list default factory . PR #1350 by @​svlandeg.

Refactors

• 🔥 Drop support for Python 3.7. PR #830 by @​kinuax.

Internal

• ⬆ Bump ruff from 0.13.0 to 0.13.1. PR #1339 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #1351 by @​pre-commit-ci[bot].
• ⬆ Bump markdown-include-variants from 0.0.4 to 0.0.5. PR #1348 by @​dependabot[bot].

0.19.1

Note: this is the last version to support Python 3.7, going forward Typer will require Python 3.8+. And soon Python 3.8 will also be dropped as Python 3.8 reached it's end of life almost a year ago.

Fixes

• 🐛 Ensure that Optional[list] values work correctly with callbacks. PR #1018 by @​solesensei.

0.19.0

Features

• ✨ Support typing.Literal to define a set of predefined choices. PR #429 by @​blackary.
• ✨ Allow setting an environment variable to None in CliRunner.invoke. PR #1303 by @​arjenzorgdoc.

Refactors

• ✅ Use Ruff rules to ensure safe lazy-loading of rich. PR #1297 by @​nathanjmcdougall.
• ✅ Avoid rich formatting in number test. PR #1305 by @​svlandeg.

Docs

• 📝 Clarify single-command vs multi-command behaviour in README. PR #1268 by @​MorgenPronk.

0.18.0

Fixes

• 👽️ Ensure compatibility with Click 8.3.0 by restoring the original value_is_missing function. PR #1333 by @​svlandeg.

Upgrades

• 📌 Remove pin for Click < 8.3.0 now that there's a fix for the changes. PR #1346 by @​tiangolo.

0.17.5

Fixes

• ⬇️ Restrict Click to below 8.3.0 to handle changes in the new version. PR #1336 by @​svlandeg.

... (truncated)

Changelog

Sourced from typer's changelog.

0.19.2

Fixes

• 🐛 Fix list convertor with an empty list default factory . PR #1350 by @​svlandeg.

Refactors

• 🔥 Drop support for Python 3.7. PR #830 by @​kinuax.

Internal

• ⬆ Bump ruff from 0.13.0 to 0.13.1. PR #1339 by @​dependabot[bot].
• ⬆ [pre-commit.ci] pre-commit autoupdate. PR #1351 by @​pre-commit-ci[bot].
• ⬆ Bump markdown-include-variants from 0.0.4 to 0.0.5. PR #1348 by @​dependabot[bot].

0.19.1

Note: this is the last version to support Python 3.7, going forward Typer will require Python 3.8+. And soon Python 3.8 will also be dropped as Python 3.8 reached it's end of life almost a year ago.

Fixes

• 🐛 Ensure that Optional[list] values work correctly with callbacks. PR #1018 by @​solesensei.

0.19.0

Features

• ✨ Support typing.Literal to define a set of predefined choices. PR #429 by @​blackary.
• ✨ Allow setting an environment variable to None in CliRunner.invoke. PR #1303 by @​arjenzorgdoc.

Refactors

• ✅ Use Ruff rules to ensure safe lazy-loading of rich. PR #1297 by @​nathanjmcdougall.
• ✅ Avoid rich formatting in number test. PR #1305 by @​svlandeg.

Docs

• 📝 Clarify single-command vs multi-command behaviour in README. PR #1268 by @​MorgenPronk.

0.18.0

Fixes

• 👽️ Ensure compatibility with Click 8.3.0 by restoring the original value_is_missing function. PR #1333 by @​svlandeg.

Upgrades

• 📌 Remove pin for Click < 8.3.0 now that there's a fix for the changes. PR #1346 by @​tiangolo.

... (truncated)

Commits

• dc07284 🔖 Release version 0.19.2
• a84fa46 📝 Update release notes
• f34aa4a 🐛 Fix list convertor with an empty list default factory (#1350)
• df2359a 📝 Update release notes
• 437c51e 📝 Update release notes
• e921e7c ⬆ Bump ruff from 0.13.0 to 0.13.1 (#1339)
• 923f608 ⬆ [pre-commit.ci] pre-commit autoupdate (#1351)
• 805095c 📝 Update release notes
• 6be50c6 ⬆ Bump markdown-include-variants from 0.0.4 to 0.0.5 (#1348)
• 549596c 📝 Update release notes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Bump CLI dependency typer in requirements/base.txt from 0.9.0 to 0.19.2.

^{Written by Cursor Bugbot for commit 496f39a. This will update automatically on new commits. Configure here.}

[github-actions]

תזכורת: PR של Dependabot מחכה לאישור ידני. @amirbiron

[github-actions]

🧯 Dangerous deletes guard report

Policy: see .cursorrules — dangerous deletions are blocked unless wrapped safely.

Summary:

• Flagged findings (blocking): 0
  0
• Excluded matches (not blocking): 15
• Total matches (all files): 125

Flagged findings (file:line:snippet):
(none)

Excluded matches (by path pattern)

./Dockerfile:32:    rm -rf /var/lib/apt/lists/*
./Dockerfile:73:    rm -rf /var/lib/apt/lists/*
./webapp/static/js/md_preview.bundle.js.map:4:  "sourcesContent": ["// Markdown-it plugin to render GitHub-style task lists; see\n//\n// https://github.com/blog/1375-task-lists-in-gfm-issues-pulls-comments\n// https://github.com/blog/1825-t … [truncated]
./README.md:754:find . -name "__pycache__" -exec rm -rf {} +
./docs/DOCUMENTATION_GUIDE.md:453:rm -rf _build
./docs/Makefile:24:	rm -rf $(BUILDDIR)
./node_modules/mermaid/dist/chunks/mermaid.core/chunk-KS23V3DP.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence  … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequen … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs:1:var r={name:"mermaid",version:"11.12.0",description:"Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graph … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm/chunk-2M32CCKP.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence d … [truncated]
./node_modules/mermaid/dist/mermaid.min.js:1524:`,"getStyles"),c1e=RQe});var h1e={};dr(h1e,{diagram:()=>NQe});var NQe,f1e=N(()=>{"use strict";$ge();a1e();l1e();u1e();NQe={parser:Fge,db:n1e,renderer:o1e,styles:c1e}});var m1e,g1e=N(()=>{"use  … [truncated]
./node_modules/mermaid/dist/mermaid.js.map:4:  "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values for tr … [truncated]
./node_modules/mermaid/dist/mermaid.min.js.map:4:  "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values fo … [truncated]
./node_modules/katex/package.json:153:    "build": "rimraf dist/ && mkdirp dist && cp README.md dist && rollup -c --failAfterWarnings && webpack && node update-sri.js package dist/README.md",
./node_modules/katex/src/fonts/Makefile:139:	rm -rf pfa ff otf ttf woff woff2

[github-actions]

⏱️ Performance report

• Run: https://github.com/amirbiron/CodeBot/actions/runs/18661380298
• Artifact: perf-durations

(No performance test durations collected. Mark tests with @pytest.mark.performance.)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[amirbiron]

@cursoragent

למזג?

1 configuration not found
Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (security-scan.yml)
❓ .github/workflows/security-scan.yml:security-scan
View all branch alerts.

[cursor]

כן — אפשר למזג

• סיכון נמוך: אין שימוש ב‑typer בקוד, רק תלות ב‑requirements/base.txt. המינימום של Typer עבר ל‑Python ≥ 3.8, והפרויקט רץ על 3.11/3.12 — תקין.
• ההתראה של Code Scanning: זו התראת מידע כי GitHub לא מצא ריצה של הקונפיגורציה .github/workflows/security-scan.yml:security-scan על הענף הזה. ה‑workflow קיים, וזה לא חוסם מיזוג.

אם רוצים לנקות את הההתראה לפני מיזוג:

• Actions → “🔒 Security Scan” → Run workflow על הענף dependabot/pip/typer-0.19.2, או להגיב @dependabot rebase כדי להדליק בדיקות מחדש.

אם הכל ירוק ב‑CI (Unit Tests 3.11/3.12 ו‑"Code Quality & Security") — מומלץ למזג.

---

 

_{Learn more about Cursor Agents}