Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps the minor-and-patch group with 10 updates:

Package From To
requests 2.32.4 2.32.5
coverage 7.10.5 7.10.6
identify 2.6.13 2.6.14
ipython 9.4.0 9.5.0
more-itertools 10.7.0 10.8.0
prompt-toolkit 3.0.51 3.0.52
pytest 8.4.1 8.4.2
pytest-cov 6.2.1 6.3.0
pytest-mock 3.14.1 3.15.0
tox 4.28.4 4.30.2

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates coverage from 7.10.5 to 7.10.6

Changelog

Sourced from coverage's changelog.

Version 7.10.6 — 2025-08-29

  • Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.

  • Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: nedbat/coveragepy#1499 .. _pull 2038: nedbat/coveragepy#2038

.. _changes_7-10-5:

Commits
  • 88c55ff docs: sample HTML for 7.10.6
  • 01d8995 docs: prep for 7.10.6
  • 9b0c24f docs: thanks Alex #2038
  • 66d6910 fix: make source paths absolute where they exist. #1499
  • bb3382f build: no need for the combine/html times now
  • 9ea349a lab: warn_executed.py
  • 808c9b4 build: changing metacov.ini should trigger metacov
  • 384f5f2 build: oops, some 'if's are really line pragmas
  • a7224af perf: pre-compute the mapping between other_db.context and main.context (#2038)
  • 5c00c5b chore: bump the action-dependencies group with 3 updates (#2039)
  • Additional commits viewable in compare view

Updates identify from 2.6.13 to 2.6.14

Commits
  • 6667ae3 v2.6.14
  • 0ce8827 Merge pull request #537 from LNSD/add-meson-options-support
  • 29d1fcc Merge pull request #536 from mike325/fix/add_robot_filetype
  • daf6023 Add support for meson.options
  • 6d49364 fix: add robot filetype
  • 53fdb98 Merge pull request #531 from pre-commit/pre-commit-ci-update-config
  • ffc2322 [pre-commit.ci] pre-commit autoupdate
  • See full diff in compare view

Updates ipython from 9.4.0 to 9.5.0

Commits

Updates more-itertools from 10.7.0 to 10.8.0

Release notes

Sourced from more-itertools's releases.

Version 10.8.0

What's Changed

... (truncated)

Commits
  • 8c1a6ef Merge pull request #1071 from more-itertools/version-10.8.0
  • 24be440 Add note for issue 1054
  • 3dd5980 Add a note for issue 1063
  • 2ce52d1 Update docs for 10.8.0
  • eae9156 Bump version: 10.7.0 → 10.8.0
  • a80f1c5 Merge pull request #1068 from rhettinger/cleanup_tail
  • 5701589 Merge pull request #1067 from rhettinger/reshape_beautification
  • 58e0331 Merge pull request #1069 from rhettinger/derangements_doc
  • 9a3d7e3 Clarify how derangements treats duplicate inputs
  • c509b14 Clean-up tail(). Prefer try/except over the Sized ABC.
  • Additional commits viewable in compare view

Updates prompt-toolkit from 3.0.51 to 3.0.52

Release notes

Sourced from prompt-toolkit's releases.

3.0.52

New features:

  • Add choice() shortcut for selecting an option amongst a list of choices (see documentation for examples).
  • Add support for ANSI dim text formatting.
  • Add frame=... option for prompt() and choice() shortcuts to allow for displaying a frame around the input prompt.

Fixes:

  • Fix button width when non English characters are displayed.
  • Implement flushing in Windows VT100 input.
  • Fix signal handling for GraalPy.
  • Fix handling of zero sized dimensions.
Changelog

Sourced from prompt-toolkit's changelog.

3.0.52: 2025-08-27

New features:

  • Add choice() shortcut for selecting an option amongst a list of choices (see documentation for examples).
  • Add support for ANSI dim text formatting.
  • Add frame=... option for prompt() and choice() shortcuts to allow for displaying a frame around the input prompt.

Fixes:

  • Fix button width when non English characters are displayed.
  • Implement flushing in Windows VT100 input.
  • Fix signal handling for GraalPy.
  • Fix handling of zero sized dimensions.
Commits

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates pytest-cov from 6.2.1 to 6.3.0

Changelog

Sourced from pytest-cov's changelog.

6.3.0 (2025-09-06)

  • Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.
  • Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.
Commits
  • a69d1ab Bump version: 6.2.1 → 6.3.0
  • 475bf32 Update changelog.
  • 3834009 Add GitHub Actions example and fix example to not break with default markdown...
  • 0824728 Small phrasing adustments in Markdown docs
  • 474c1f4 Move markdown dest files check to StoreReport for earlier error and parser.er...
  • 7b21833 Default markdown-append to coverage.md and raise warning if both markdown opt...
  • 3a15312 Fix usage of Path.open() to write/append to files
  • 4b79449 Change output file cov-append.md in md-append example
  • 40e9e8e Add docs and update AUTHORS.rst
  • f5ca33a Add tests for markdown and markdown-append
  • Additional commits viewable in compare view

Updates pytest-mock from 3.14.1 to 3.15.0

Release notes

Sourced from pytest-mock's releases.

v3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • #524: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Changelog

Sourced from pytest-mock's changelog.

3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • [#524](https://github.com/pytest-dev/pytest-mock/issues/524) <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Commits

Updates tox from 4.28.4 to 4.30.2

Release notes

Sourced from tox's releases.

4.30.2

What's Changed

Full Changelog: tox-dev/tox@4.30.1...4.30.2

4.30.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.30.0...4.30.1

4.30.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.29.0...4.30.0

4.29.0

What's Changed

Full Changelog: tox-dev/tox@4.28.4...4.29.0

Changelog

Sourced from tox's changelog.

v4.30.2 (2025-09-04)

Bugfixes - 4.30.2

- Previously, when tox ran in an automatically provisioned environment, it could hang waiting for a PEP 517 build backend
  if used in conjunction with the ``--installpkg`` option. This has been fixed by properly tearing down the automatically
  provisioned environment after the tests.
  - by :user:`vytas7` (:issue:`3600`)

v4.30.1 (2025-09-03)

Bugfixes - 4.30.1

  • Prevent tox from hanging upon exit due to orphaned build threads and subprocesses when the --installpkg option is used with sdist.
    • by :user:vytas7 (:issue:3530)

v4.30.0 (2025-09-03)

Features - 4.30.0

- Add ``__TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI``, which passes through the ``CI`` variable if present. This is intended for use by other libraries to detect if tox is running under CI. (:issue:`3442`)

Bugfixes - 4.30.0

  • Makes the error message more clear when pyproject.toml file cannot be loaded or is missing expected keys. (:issue:3578)

  • The :func:tox_extend_envs() hook <tox.plugin.spec.tox_extend_envs> recently added in :pull:3591 turned out to not work well with tox run. It was fixed internally, not to exhaust the underlying iterator on the first use.

    -- by :user:webknjaz (:issue:3598)

v4.29.0 (2025-08-29)

Features - 4.29.0

- A new tox life cycle event is now exposed for use via :doc:`Plugins
  API </plugins>` -- by :user:`webknjaz`.

The corresponding hook point is :func:tox_extend_envs &lt;tox.plugin.spec.tox_extend_envs&gt;. It allows plugin authors to declare ephemeral environments that they can then populate through the in-memory configuration loader interface.

</tr></table>

... (truncated)

Commits
  • 5e0784a release 4.30.2
  • 64e8a34 Bump pypa/gh-action-pypi-publish in /.github/workflows (#3604)
  • 7230088 Ensure automatically provisioned environment is torn down (#3601)
  • 2c31dbc Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (#3603)
  • b33a43c release 4.30.1
  • 9ea1c32 Prevent Tox from hanging with --installpkg sdist due to orphaned build back...
  • aa90652 release 4.30.0
  • 48fecab Ensure tox_extend_envs list can be read twice (#3598)
  • 0b8f66f fix: provide clear messaging about config file loading (#3578)
  • adf0997 Add a "version added" note for tox_extend_envs (#3595)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.5` | `7.10.6` |
| [identify](https://github.com/pre-commit/identify) | `2.6.13` | `2.6.14` |
| [ipython](https://github.com/ipython/ipython) | `9.4.0` | `9.5.0` |
| [more-itertools](https://github.com/more-itertools/more-itertools) | `10.7.0` | `10.8.0` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.51` | `3.0.52` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `8.4.2` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.2.1` | `6.3.0` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.1` | `3.15.0` |
| [tox](https://github.com/tox-dev/tox) | `4.28.4` | `4.30.2` |


Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `coverage` from 7.10.5 to 7.10.6
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.5...7.10.6)

Updates `identify` from 2.6.13 to 2.6.14
- [Commits](pre-commit/identify@v2.6.13...v2.6.14)

Updates `ipython` from 9.4.0 to 9.5.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.4.0...9.5.0)

Updates `more-itertools` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v10.7.0...v10.8.0)

Updates `prompt-toolkit` from 3.0.51 to 3.0.52
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.51...3.0.52)

Updates `pytest` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...8.4.2)

Updates `pytest-cov` from 6.2.1 to 6.3.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.2.1...v6.3.0)

Updates `pytest-mock` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.14.1...v3.15.0)

Updates `tox` from 4.28.4 to 4.30.2
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.28.4...4.30.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: coverage
  dependency-version: 7.10.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: identify
  dependency-version: 2.6.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ipython
  dependency-version: 9.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: more-itertools
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prompt-toolkit
  dependency-version: 3.0.52
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pytest-cov
  dependency-version: 6.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pytest-mock
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tox
  dependency-version: 4.30.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 8, 2025 15:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 8, 2025
@damianjachyra damianjachyra merged commit 436be29 into master Sep 8, 2025
2 checks passed
@damianjachyra damianjachyra deleted the dependabot/pip/minor-and-patch-6072aec267 branch September 8, 2025 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant