chore(deps): Bump the "dependencies" group with 4 updates across multiple ecosystems by dependabot[bot] · Pull Request #577 · benthevining/BenBot

dependabot · 2026-04-26T21:05:22Z

Bumps the dependencies group with 1 update: Apple-Actions/import-codesign-certs.

Updates Apple-Actions/import-codesign-certs from 6.1.0 to 7.0.0

Release notes

Sourced from Apple-Actions/import-codesign-certs's releases.

v7.0.0

What's Changed

Switch from ncc to esbuild

Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in Apple-Actions/import-codesign-certs#166

Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in Apple-Actions/import-codesign-certs#167

Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in Apple-Actions/import-codesign-certs#168

Bump knip from 5.78.0 to 6.2.0 by @dependabot[bot] in Apple-Actions/import-codesign-certs#173

Full Changelog: Apple-Actions/import-codesign-certs@v6.1.0...v7.0.0

Commits

5142e02 [main] Switch from ncc to esbuild and upgrade dependencies
d118e79 [main] Lock down versions with SHA
fa7fd27 Merge pull request #173 from Apple-Actions/dependabot/npm_and_yarn/knip-6.2.0
44741a8 Bump knip from 5.78.0 to 6.2.0
71c8098 Merge pull request #168 from Apple-Actions/dependabot/npm_and_yarn/picomatch-...
7ebdf79 Bump picomatch from 2.3.1 to 2.3.2
4cf892c Merge pull request #167 from Apple-Actions/dependabot/github_actions/actions/...
0d67bcd Bump actions/setup-node from 6.2.0 to 6.3.0
50a47bf Merge pull request #166 from Apple-Actions/dependabot/npm_and_yarn/flatted-3.4.2
2219450 Bump flatted from 3.4.1 to 3.4.2
See full diff in compare view

Bumps the dependencies group in /config/lichess with 1 update: lichessbotdevs/lichess-bot.

Updates lichessbotdevs/lichess-bot from 2026.4.15.1 to 2026.4.20.1

Updates the requirements on pre-commit, clang-tidy, cmake, ninja, rust-just and tqdm to permit the latest version.
Updates pre-commit to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

4.5.1 - 2025-12-16

Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.

4.5.0 - 2025-11-22

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

... (truncated)

Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view

Updates pre-commit to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

4.5.1 - 2025-12-16

Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.

4.5.0 - 2025-11-22

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

... (truncated)

Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view

Updates clang-tidy to 22.1.0.1

Commits

See full diff in compare view

Updates cmake to 4.3.2

Release notes

Sourced from cmake's releases.

4.3.2

What's Changed

fix: make archive more stable by @henryiii in scikit-build/cmake-python-distributions#690

[Bot] Update to CMake 4.3.1 by @scikit-build-app-bot[bot] in scikit-build/cmake-python-distributions#691

[Bot] Update to OpenSSL 3.5.6 by @scikit-build-app-bot[bot] in scikit-build/cmake-python-distributions#695

ci: bump setup-uv to maintained tag scheme by @henryiii in scikit-build/cmake-python-distributions#696

[Bot] Update to CMake 4.3.2 by @scikit-build-app-bot[bot] in scikit-build/cmake-python-distributions#699

Full Changelog: scikit-build/cmake-python-distributions@4.3.0...4.3.2

Commits

3a57f36 [Bot] Update to CMake 4.3.2 (#699)
c959cbe chore(deps): bump astral-sh/setup-uv in the actions group (#698)
b8257b3 chore(deps): bump wntrblm/nox in the actions group (#697)
a14b50e chore(deps): update pre-commit hooks (#694)
03c4d2a ci: bump setup-uv to maintained tag scheme (#696)
f47d7e8 [Bot] Update to OpenSSL 3.5.6 (#695)
53c45a6 [Bot] Update to CMake 4.3.1 (#691)
fe14b65 fix: make archive more stable (#690)
72f2101 chore(deps): bump actions/create-github-app-token in the actions group (#688)
e4548e0 chore(deps): update pre-commit hooks (#685)
Additional commits viewable in compare view

Updates ninja to 1.13.0

Release notes

Sourced from ninja's releases.

v1.13.0

Ninja now automatically joins a GNU Make jobserver as a client (version 4.4 on non-Windows systems required for "fifo" style) #1139

Print exit code of failed subcommands #1507

New tool ninja -t compdb-targets like compdb, but takes a list of targets instead of rules #1544

Support for ANSI (color) escape codes in NINJA_STATUS #713

See https://github.com/ninja-build/ninja/milestone/8?closed=1 for a complete list of changes.

Commits

b4d51f6 v1.13.0
732994a Merge branch 'master' into release
6564125 mark this 1.14.0.git
1b52e21 Merge pull request #2590 from Balletie/filenames-with-ampersands-and-quotes-i...
896f6bf Remove incorrect paragraph about jobserver on Posix
a5da6f9 Merge pull request #2506 from digit-google/jobserver
04175ab Merge pull request #2591 from SR4ven/cgroup2
cb85708 Use auto
d9b1efd Add std:: namespace, braces and replace insert with emplace
882f49c Add support for cgroup2 in CPU quota parsing
Additional commits viewable in compare view

Updates rust-just to 1.50.0

Release notes

Sourced from rust-just's releases.

1.50.0

Added

Filter --choose by --group (#3298 by casey)

Add [android] recipe attribute (#2884 by duncanawoods)

Add module_path() function (#3270 by casey)

Fixed

Preserve trailing comments when formatting (#3282 by casey)

Preserve comments before [doc] attribute (#3275 by casey)

Allow comments after unexports (#3264 by casey)

Changed

Stabilize --fmt subcommand (#3301 by casey)

Ignore trailing :: on last argument (#3300 by casey)

Complete files and directories when completing arguments (#3299 by casey)

Include module_path field in JSON (#3288 by casey)

Partially collapse blank lines between items (#3274 by casey)

Omit defaults when formatting settings (#3268 by casey)

Misc

Fix read() description (#3295 by casey)

Note that pull requests are not currently being accepted (#3289 by casey)

Improve completer config parsing (#3287 by casey)

Test that aliases complete with environment variable (#3286 by casey)

Replace unnecessary raw strings (#3281 by casey)

Fix test string indentation (#3280 by casey)

Document assert() in readme (#3279 by casey)

Replace dashes with underscores when using --evaluate-format shell (#3278 by casey)

Fix readme typos (#3277 by casey)

Test multi-line recipe comments (#3276 by casey)

Document set no-exit-message and [exit-message] (#3269 by casey)

Refactor end-of-file handling in lexer (#3267 by casey)

Fix end-of-file parsing (#3266 by casey)

Update softprops/action-gh-release to 2.6.1 (#3253 by casey)

Include bash completion script in crate (#3252 by casey)

Changelog

Sourced from rust-just's changelog.

1.50.0 - 2026-04-19

Added

Filter --choose by --group (#3298 by casey)

Add [android] recipe attribute (#2884 by duncanawoods)

Add module_path() function (#3270 by casey)

Fixed

Preserve trailing comments when formatting (#3282 by casey)

Preserve comments before [doc] attribute (#3275 by casey)

Allow comments after unexports (#3264 by casey)

Changed

Stabilize --fmt subcommand (#3301 by casey)

Ignore trailing :: on last argument (#3300 by casey)

Complete files and directories when completing arguments (#3299 by casey)

Include module_path field in JSON (#3288 by casey)

Partially collapse blank lines between items (#3274 by casey)

Omit defaults when formatting settings (#3268 by casey)

Misc

Fix read() description (#3295 by casey)

Note that pull requests are not currently being accepted (#3289 by casey)

Improve completer config parsing (#3287 by casey)

Test that aliases complete with environment variable (#3286 by casey)

Replace unnecessary raw strings (#3281 by casey)

Fix test string indentation (#3280 by casey)

Document assert() in readme (#3279 by casey)

Replace dashes with underscores when using --evaluate-format shell (#3278 by casey)

Fix readme typos (#3277 by casey)

Test multi-line recipe comments (#3276 by casey)

Document set no-exit-message and [exit-message] (#3269 by casey)

Refactor end-of-file handling in lexer (#3267 by casey)

Fix end-of-file parsing (#3266 by casey)

Update softprops/action-gh-release to 2.6.1 (#3253 by casey)

Include bash completion script in crate (#3252 by casey)

1.49.0 - 2026-04-04

Added

Add --time to print recipe execution time (#3099 by GeorgeLS)

Add user-defined functions (#3247 by casey)

Add just skill for agents (#3241 by casey)

Allow expressions in confirm attribute (#3238 by begoon)

Add --complete-aliases (#3235 by casey)

Add --justfile-name to configure justfile filename (#3234 by casey)

Add runtime_directory() function (#3226 by barskern)

Add --evaluate-format (#3221 by casey)

... (truncated)

Commits

bca479b Merge pull request #453 from gnpaone/sync-action
648fab7 chore: sync files from source repo
6c2b04d Add version change check and trigger release workflow
f45f616 Update release workflow to use repository_dispatch
1a5527a Simplify workflow by removing validate-version step
594c965 Revert "Update path pattern for Cargo.toml in workflow"
8630c64 Revert "Merge pull request #452 from gnpaone/sync-action"
99b7b3b Merge pull request #452 from gnpaone/sync-action
638cecb chore: sync files from source repo
41f35e6 Update path pattern for Cargo.toml in workflow
Additional commits viewable in compare view

Updates tqdm to 4.67.3

Release notes

Sourced from tqdm's releases.

tqdm v4.67.3 stable

fix py3.7 dependencies (#1706 <- #1705)

Commits

75bdb6c fix py3.7 compat
09a863b bump version, merge pull request #1704 from tqdm/devel
33d24cd update pyproject syntax
70b9124 add py3.13 support
a74d8f8 drop _dist_ver
14d72e2 Merge pull request #1703 from wingding12/fix-pandas-3.0-and-negative-interval
a69dac8 fix dedented docstrings
a986d22 tests: fix pandas deprecation warnings
bb7aa4d tests: fix pandas deprecated applymap
0647db1 misc tidy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 1 update: [Apple-Actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs). Updates `Apple-Actions/import-codesign-certs` from 6.1.0 to 7.0.0 - [Release notes](https://github.com/apple-actions/import-codesign-certs/releases) - [Commits](Apple-Actions/import-codesign-certs@fe74d46...5142e02) chore(deps): bump lichessbotdevs/lichess-bot Bumps the dependencies group in /config/lichess with 1 update: lichessbotdevs/lichess-bot. Updates `lichessbotdevs/lichess-bot` from 2026.4.15.1 to 2026.4.20.1 chore(deps): bump the dependencies group with 2 updates chore(deps): bump the dependencies group across 3 directories with 6 updates Updates the requirements on [pre-commit](https://github.com/pre-commit/pre-commit), [clang-tidy](https://github.com/ssciwr/clang-tidy-wheel), [cmake](https://github.com/scikit-build/cmake-python-distributions), [ninja](https://github.com/ninja-build/ninja), [rust-just](https://github.com/gnpaone/rust-just) and [tqdm](https://github.com/tqdm/tqdm) to permit the latest version. Updates `pre-commit` to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.0.1...v4.6.0) Updates `pre-commit` to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.0.1...v4.6.0) Updates `clang-tidy` to 22.1.0.1 - [Commits](https://github.com/ssciwr/clang-tidy-wheel/commits) Updates `cmake` to 4.3.2 - [Release notes](https://github.com/scikit-build/cmake-python-distributions/releases) - [Changelog](https://github.com/scikit-build/cmake-python-distributions/blob/main/HISTORY.rst) - [Commits](scikit-build/cmake-python-distributions@3.31.0...4.3.2) Updates `ninja` to 1.13.0 - [Release notes](https://github.com/ninja-build/ninja/releases) - [Commits](ninja-build/ninja@v1.12.0...v1.13.0) Updates `rust-just` to 1.50.0 - [Release notes](https://github.com/gnpaone/rust-just/releases) - [Changelog](https://github.com/gnpaone/rust-just/blob/master/CHANGELOG.md) - [Commits](gnpaone/rust-just@1.39.0...1.50.0) Updates `tqdm` to 4.67.3 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.67.1...v4.67.3) --- updated-dependencies: - dependency-name: Apple-Actions/import-codesign-certs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: lichessbotdevs/lichess-bot dependency-version: 2026.4.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: https://github.com/pre-commit/mirrors-clang-format dependency-version: 22.1.4 dependency-type: direct:production dependency-group: dependencies - dependency-name: clang-format dependency-version: 22.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:production dependency-group: dependencies - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:production dependency-group: dependencies - dependency-name: clang-tidy dependency-version: 22.1.0.1 dependency-type: direct:production dependency-group: dependencies - dependency-name: cmake dependency-version: 4.3.2 dependency-type: direct:production dependency-group: dependencies - dependency-name: ninja dependency-version: 1.13.0 dependency-type: direct:production dependency-group: dependencies - dependency-name: rust-just dependency-version: 1.50.0 dependency-type: direct:production dependency-group: dependencies - dependency-name: tqdm dependency-version: 4.67.3 dependency-type: direct:production dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-26T21:19:50Z

Test Results (pull_request)

13 files 13 suites 54m 15s ⏱️
221 tests 221 ✅ 0 💤 0 ❌
2 531 runs 2 531 ✅ 0 💤 0 ❌

Results for commit 76a9279.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 26, 2026

dependabot Bot requested a review from benthevining as a code owner April 26, 2026 21:05

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 26, 2026

pull-request-size Bot added the size/S label Apr 26, 2026

benthevining merged commit 6f315a3 into main Apr 26, 2026
23 of 25 checks passed

benthevining deleted the dependabot/dependencies-42d157b13b branch April 26, 2026 22:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the "dependencies" group with 4 updates across multiple ecosystems#577

chore(deps): Bump the "dependencies" group with 4 updates across multiple ecosystems#577
benthevining merged 1 commit into
mainfrom
dependabot/dependencies-42d157b13b

dependabot Bot commented on behalf of github Apr 26, 2026

Uh oh!

github-actions Bot commented Apr 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 26, 2026

v7.0.0

What's Changed

pre-commit v4.6.0

Features

Fixes

4.6.0 - 2026-04-21

Features

Fixes

4.5.1 - 2025-12-16

Fixes

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

pre-commit v4.6.0

Features

Fixes

4.6.0 - 2026-04-21

Features

Fixes

4.5.1 - 2025-12-16

Fixes

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

4.3.2

What's Changed

v1.13.0

1.50.0

Added

Fixed

Changed

Misc

1.50.0 - 2026-04-19

Added

Fixed

Changed

Misc

1.49.0 - 2026-04-04

Added

tqdm v4.67.3 stable

Uh oh!

github-actions Bot commented Apr 26, 2026

Test Results (pull_request)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant