Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Bumps the python group in /python with 1 update: psutil.

Updates psutil from 7.0.0 to 7.1.0

Changelog

Sourced from psutil's changelog.

7.1.0

2025-09-17

Enhancements

  • 2581_, [Windows]: publish ARM64 wheels. (patch by Matthieu Darbois)
  • 2571_, [FreeBSD]: Dropped support for FreeBSD 8 and earlier. FreeBSD 8 was maintained from 2009 to 2013.
  • 2575_: introduced dprint CLI tool to format .yml and .md files.

Bug fixes

  • 2473_, [macOS]: Fix build issue on macOS 11 and lower.
  • 2494_, [Windows]: All APIs dealing with paths, such as Process.memory_maps(), Process.exe() and Process.open_files()_ does not properly handle UNC paths. Paths such as \\??\\C:\\Windows\\Temp and '\\Device\\HarddiskVolume1\\Windows\\Temp' are now converted to C:\\Windows\\Temp. (patch by Ben Peddell)
  • 2506_, [Windows]: Windows service APIs had issues with unicode services using special characters in their name.
  • 2514_, [Linux]: Process.cwd()_ sometimes fail with FileNotFoundError due to a race condition.
  • 2526_, [Linux]: Process.create_time(), which is used to univocally identify a process over time, is subject to system clock updates, and as such can lead to Process.is_running() returning a wrong result. A monotonic creation time is now used instead. (patch by Jonathan Kohler)
  • 2528_, [Linux]: Process.children()_ may raise PermissionError. It will now raise AccessDenied_ instead.
  • 2540_, [macOS]: boot_time()_ is off by 45 seconds (C precision issue).
  • 2541_, 2570_, 2578_ [Linux], [macOS], [NetBSD]: Process.create_time()_ does not reflect system clock updates.
  • 2542_: if system clock is updated Process.children()_ and Process.parent()_ may not be able to return the right information.
  • 2545_: [Illumos]: Fix handling of MIB2_UDP_ENTRY in net_connections()_.
  • 2552_, [Windows]: boot_time()_ didn't take into account the time spent during suspend / hibernation.
  • 2560_, [Linux]: Process.memory_maps()_ may crash with IndexError on RISCV64 due to a malformed /proc/{PID}/smaps file. (patch by Julien Stephan)
  • 2586_, [macOS], [CRITICAL]: fixed different places in C code which can trigger a segfault.
  • 2604_, [Linux]: virtual_memory()_ "used" memory does not match recent versions of free CLI utility. (patch by Isaac K. Ko)
  • 2605_, [Linux]: psutil.sensors_battery() reports a negative amount for seconds left.
  • 2607_, [Windows]: WindowsService.description() method may fail with ERROR_NOT_FOUND. Now it returns an empty string instead.
  • 2610:, [macOS], [CRITICAL]: fix cpu_freq()_ segfault on ARM architectures.

... (truncated)

Commits
  • 0d18187 Revert HISTORY notes about #2629. We still do publish 3.6 and 3.7 wheels.
  • 229e2de Pre-release
  • fb75b28 Chore: skip CI tests except on Python 3.8 and 3.13
  • 3a4c016 Stop publishing wheels for Python 3.6 and 3.7 (#2629)
  • 83e4f7f OSX: disable failing test
  • df0d4e2 Call GetExtended[Tcp|Udp]Table twice under free-threaded build (round 2) (#2627)
  • dcbfb81 [Windows] fix unicode issues around service APIs (#2626)
  • ef72dcd revert #2590 (Call GetExtended[Tcp|Udp]Table twice under free-threaded build)
  • 8773698 small refact around UTXENT_MUTEX_LOCK
  • 13b711f Lock around uses of getutent/setutent/endutent (#2615)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group in /python with 1 update: [psutil](https://github.com/giampaolo/psutil).


Updates `psutil` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.0.0...release-7.1.0)

---
updated-dependencies:
- dependency-name: psutil
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 22, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 22, 2025
Copy link

github-actions bot commented Sep 22, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/psutil 7.1.0 🟢 5.7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 5/30 approved changesets -- score normalized to 1
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • python/requirements.txt

@sramakintel
Copy link
Contributor

@dependabot rebase

@sramakintel
Copy link
Contributor

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 23, 2025

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@sramakintel
Copy link
Contributor

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 23, 2025

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jitendra42 jitendra42 merged commit 7be4ba3 into main Sep 29, 2025
25 checks passed
@jitendra42 jitendra42 deleted the dependabot/pip/python/python-44b45ad1da branch September 29, 2025 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code Review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants