Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps the minor-and-patch group with 9 updates:

Package From To
black 25.9.0 25.11.0
coverage 7.11.0 7.11.3
pre-commit 4.3.0 4.4.0
pyupgrade 3.21.0 3.21.1
safety 3.6.2 3.7.0
pydantic 2.12.3 2.12.4
pydantic-core 2.41.4 2.41.5
pytokens 0.2.0 0.3.0
regex 2025.10.23 2025.11.3

Updates black from 25.9.0 to 25.11.0

Release notes

Sourced from black's releases.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Improve error message for vim plugin users. It now handles independently vim version
  • Vim: Warn on unsupported Vim and Python versions independently (#4772)
  • Vim: Print the import paths when importing black fails (#4675)
  • Vim: Fix handling of virtualenvs that have a different Python version (#4675)
Changelog

Sourced from black's changelog.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Improve error message for vim plugin users. It now handles independently vim version
  • Vim: Warn on unsupported Vim and Python versions independently (#4772)
  • Vim: Print the import paths when importing black fails (#4675)
  • Vim: Fix handling of virtualenvs that have a different Python version (#4675)
Commits

Updates coverage from 7.11.0 to 7.11.3

Release notes

Sourced from coverage's releases.

7.11.3

Version 7.11.3 — 2025-11-09

  • Fix: the 7.11.1 changes meant that conflicts between a requested measurement core and other settings would raise an error. This was a breaking change from previous behavior, as reported in issue 2076 and issue 2078.

    The previous behavior has been restored: when the requested core conflicts with other settings, another core is used instead, and a warning is issued.

  • For contributors: the repo has moved from Ned’s nedbat GitHub account to the coveragepy GitHub organization. The default branch has changed from master to main.

➡️  PyPI page: coverage 7.11.3. :arrow_right:  To install: python3 -m pip install coverage==7.11.3

7.11.2

Version 7.11.2 — 2025-11-08

  • Fix: using the “sysmon” measurement core in 7.11.1, if Python code was claimed to come from a non-Python file, a NotPython exception could be raised. This could happen for example with Jinja templates compiled to Python, as reported in issue 2077. This is now fixed.
  • Doc: corrected the first entry in the 7.11.1 changelog.

➡️  PyPI page: coverage 7.11.2. :arrow_right:  To install: python3 -m pip install coverage==7.11.2

7.11.1

Version 7.11.1 — 2025-11-07

  • Fix: some chanages to details of how the measurement core is chosen, and how conflicting settings are handled. The “sysmon” core cannot be used with some conurrency settings, with dynamic context, and in Python 3.12/3.13, with branch measurement.
    • If the core is not specified and defaults to “sysmon” (Python 3.14+), but other settings conflict with sysmon, then the “ctrace” core will be used instead with no warning. For concurrency conflicts, this used to produce an error, as described in issue 2064.
    • If the “sysmon” core is explicitly requested in your configuration, but other settings conflict, an error is now raised. This used to produce a warning.
  • Fix: some multi-line case clauses or for loops (and probably other constructs) could cause incorrect claims of missing branches with the sys.monitoring core, as described in issue 2070. This is now fixed.
  • Fix: when running in pytest under coverage, a breakpoint() would stop in the wrong frame, one level down from where it should, as described in issue 1420. This was due to a coverage change in v6.4.1 that seemed to give a slight performance improvement, but I couldn’t reproduce the performance gain, so it’s been reverted, fixing the debugger problem.
  • A new debug option --debug=core shows which core is in use and why.
  • Split sqlite debugging information out of the sys coverage debug and --debug option options since it’s bulky and not very useful.
  • Updated the How coverage.py works page to better describe the three different measurement cores.

➡️  PyPI page: coverage 7.11.1. :arrow_right:  To install: python3 -m pip install coverage==7.11.1

7.11.1

Version 7.11.1 — 2025-11-07

  • Fix: some chanages to details of how the measurement core is chosen, and how conflicting settings are handled. The “sysmon” core cannot be used with some conurrency settings, with dynamic context, and in Python 3.12/3.13, with branch measurement.
    • If the core is not specified and defaults to “sysmon” (Python 3.14+), but other settings conflict with sysmon, then the “ctrace” core will be used instead with no warning. For concurrency conflicts, this used to produce an error, as described in issue 2064.
    • If the “sysmon” core is explicitly requested in your configuration, but other settings conflict, an error is now raised. This used to produce a warning.
  • Fix: some multi-line case clauses or for loops (and probably other constructs) could cause incorrect claims of missing branches with the sys.monitoring core, as described in issue 2070. This is now fixed.
  • Fix: when running in pytest under coverage, a breakpoint() would stop in the wrong frame, one level down from where it should, as described in issue 1420. This was due to a coverage change in v6.4.1 that seemed to give a slight performance improvement, but I couldn’t reproduce the performance gain, so it’s been reverted, fixing the debugger problem.
  • A new debug option --debug=core shows which core is in use and why.
  • Split sqlite debugging information out of the sys coverage debug and --debug option options since it’s bulky and not very useful.
  • Updated the How coverage.py works page to better describe the three different measurement cores.

➡️  PyPI page: coverage 7.11.1. :arrow_right:  To install: python3 -m pip install coverage==7.11.1

Changelog

Sourced from coverage's changelog.

Version 7.11.3 — 2025-11-09

  • Fix: the 7.11.1 changes meant that conflicts between a requested measurement core and other settings would raise an error. This was a breaking change from previous behavior, as reported in issue 2076_ and issue 2078_.

    The previous behavior has been restored: when the requested core conflicts with other settings, another core is used instead, and a warning is issued.

  • For contributors: the repo has moved from Ned's nedbat GitHub account_ to the coveragepy GitHub organization_. The default branch has changed from master to main.

.. _issue 2076: coveragepy/coveragepy#2076 .. _issue 2078: coveragepy/coveragepy#2078 .. _nedbat GitHub account: https://github.com/nedbat .. _coveragepy GitHub organization: https://github.com/coveragepy

.. _changes_7-11-2:

Version 7.11.2 — 2025-11-08

  • Fix: using the "sysmon" measurement core in 7.11.1, if Python code was claimed to come from a non-Python file, a NotPython exception could be raised. This could happen for example with Jinja templates compiled to Python, as reported in issue 2077_. This is now fixed.

  • Doc: corrected the first entry in the 7.11.1 changelog.

.. _issue 2077: coveragepy/coveragepy#2077

.. _changes_7-11-1:

Version 7.11.1 — 2025-11-07

  • Fix: some chanages to details of how the measurement core is chosen, and how conflicting settings are handled. The "sysmon" core cannot be used with some conurrency settings, with dynamic context, and in Python 3.12/3.13, with branch measurement.

    • If the core is not specified and defaults to "sysmon" (Python 3.14+), but other settings conflict with sysmon, then the "ctrace" core will be used instead with no warning. For concurrency conflicts, this used to produce an error, as described in issue 2064_.

... (truncated)

Commits
  • 8bb1230 docs: remove duplicate entry in the changelog
  • 06c493c docs: sample HTML for 7.11.3
  • 0823a70 docs: prep for 7.11.3
  • 8434792 fix: sysmon conflicts no longer cause errors
  • 1f21184 chore: bump docker/setup-qemu-action in the action-dependencies group (#2080)
  • bd61620 docs: django_coverage_plugin moved
  • 1bd73f1 build: nedbat/coverage-reports moved to coveragepy/metacov-reports
  • b54131f docs: moved to coveragepy, master->main
  • f2d740f build: change more github urls to the coveragepy org
  • 776f313 docs: issue and pr references moved to coveragepy org
  • Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.4.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.4.0

Features

Fixes

Changelog

Sourced from pre-commit's changelog.

4.4.0 - 2025-11-08

Features

Fixes

Commits
  • 17cf886 v4.4.0
  • cb63a5c Merge pull request #3535 from br-rhrbacek/fix-cgroups
  • f80801d Fix docker-in-docker detection for cgroups v2
  • 9143fc3 Merge pull request #3577 from pre-commit/language-unsupported
  • 725acc9 rename system and script languages to unsupported / unsupported_script
  • 3815e2e Merge pull request #3576 from pre-commit/fix-stages-config-error
  • aa2961c fix missing context in error for stages
  • 46297f7 Merge pull request #3575 from pre-commit/rm-python3-hooks-repo
  • 95eec75 rm python3_hooks_repo
  • 5e4b354 Merge pull request #3574 from pre-commit/rm-hook-with-spaces-test
  • Additional commits viewable in compare view

Updates pyupgrade from 3.21.0 to 3.21.1

Commits

Updates safety from 3.6.2 to 3.7.0

Release notes

Sourced from safety's releases.

Version 3.7.0

What's Changed

  • bump: version 3.7.0b5 → 3.7.0 (9df3a6f)
  • fix: npm ecosystem check on render package details (#820) (9780ac2)

Version 3.7.0b5

What's Changed

  • bump: version 3.7.0b4 → 3.7.0b5 (7f138f1)
  • fix: bash priority issues (#819) (933dc82)

Version 3.7.0b4

What's Changed

  • bump: version 3.7.0b3 → 3.7.0b4 (3b1e4dc)
  • ci: remove version from the artifacts name (#818) (c5134b5)

Version 3.7.0b3

What's Changed

  • bump: version 3.7.0b2 → 3.7.0b3 (04f24e5)
  • ci: separate checksum artifacts for signed and unsigned builds (#817) (a08a347)

Version 3.7.0b0

What's Changed

  • bump: version 3.6.2 → 3.7.0b0 (b289a6c)
  • fix: replace deprecated pkg_resources with importlib.metadata (#813) (c1e07ef)
  • chore: drop python 3.8 support (#791) (a41c82b)
  • chore: set minimum tenacity version to 8.1.0 (#812) (973a265)
  • chore: restructure GitHub issue templates and remove bug bounty references (#811) (2fcbe72)
  • feat: add firewall support for NPM (#800) (5d44edf)
Changelog

Sourced from safety's changelog.

3.7.0 (2025-11-06)

Fix

  • npm ecosystem check on render package details (#820)

3.7.0b5 (2025-11-04)

Fix

  • bash priority issues (#819)

3.7.0b4 (2025-11-03)

3.7.0b3 (2025-11-03)

3.7.0b2 (2025-11-03)

3.7.0b1 (2025-11-03)

3.7.0b0 (2025-10-22)

Feat

  • add firewall support for NPM (#800)

Fix

  • replace deprecated pkg_resources with importlib.metadata (#813)
Commits
  • 9df3a6f bump: version 3.7.0b5 → 3.7.0
  • 9780ac2 fix: npm ecosystem check on render package details (#820)
  • 7f138f1 bump: version 3.7.0b4 → 3.7.0b5
  • 933dc82 fix: bash priority issues (#819)
  • 3b1e4dc bump: version 3.7.0b3 → 3.7.0b4
  • c5134b5 ci: remove version from the artifacts name (#818)
  • 04f24e5 bump: version 3.7.0b2 → 3.7.0b3
  • a08a347 ci: separate checksum artifacts for signed and unsigned builds (#817)
  • 2ff7ace bump: version 3.7.0b1 → 3.7.0b2
  • 2964f19 ci: load version on release jobs (#816)
  • Additional commits viewable in compare view

Updates pydantic from 2.12.3 to 2.12.4

Release notes

Sourced from pydantic's releases.

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

Changelog

Sourced from pydantic's changelog.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Commits
  • 5c842df Prepare release v2.12.4
  • c678a71 Bump pydantic-core to v2.41.5
  • a7cd292 Bump cloudpickle to v3.1.2
  • 21f6278 Bump actions/setup-node from 5 to 6
  • 8d6be8f Bump astral-sh/setup-uv from 6 to 7
  • 17865ea Bump actions/upload-artifact from 4 to 5
  • 90ad0af Bump actions/download-artifact from 5 to 6
  • 18e6672 Drop testing under PyPy 3.9
  • 650215b Document workaround for MongoDsn default port
  • e326790 Fix example of for bytes_invalid_encoding validation error
  • Additional commits viewable in compare view

Updates pydantic-core from 2.41.4 to 2.41.5

Release notes

Sourced from pydantic-core's releases.

v2.41.5

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-core@v2.41.4...v2.41.5

Commits

Updates pytokens from 0.2.0 to 0.3.0

Commits

Updates regex from 2025.10.23 to 2025.11.3

Changelog

Sourced from regex's changelog.

Version: 2025.11.3

Git issue 594: Support relative PARNO in recursive subpatterns

Version: 2025.10.23

'setup.py' was missing from the source distribution.

Version: 2025.10.22

Fixed test in main.yml.

Version: 2025.10.21

Moved tests into subfolder.

Version: 2025.10.20

Re-organised files.

Updated to Unicode 17.0.0.

Version: 2025.9.20

Enable free-threading support in cibuildwheel in another place.

Version: 2025.9.19

Enable free-threading support in cibuildwheel.

Version: 2025.9.18

Git issue 565: Support the free-threaded build of CPython 3.13

Version: 2025.9.1

Git PR 585: Fix AttributeError: 'AnyAll' object has no attribute '_key'

Version: 2025.8.29

Git issue 584: AttributeError: 'AnyAll' object has no attribute 'positive'

Version: 2025.7.34

Git issue 575: Issues with ASCII/Unicode modifiers

Version: 2025.7.33

Updated main.yml and pyproject.toml.

... (truncated)

Commits
  • b01d6e7 Git issue 594: Support relative PARNO in recursive subpatterns
  • dd256cd Merge pull request #591 from foosel/ci-tests
  • 1b2ca8c ci: run tests against sdist
  • 609733a ci: only release if the tests are green
  • fa08ff1 ci: make sure to always run tests against full matrix
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `25.9.0` | `25.11.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.11.0` | `7.11.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.4.0` |
| [pyupgrade](https://github.com/asottile/pyupgrade) | `3.21.0` | `3.21.1` |
| [safety](https://github.com/pyupio/safety) | `3.6.2` | `3.7.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.3` | `2.12.4` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.41.4` | `2.41.5` |
| [pytokens](https://github.com/tusharsadhwani/pytokens) | `0.2.0` | `0.3.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2025.10.23` | `2025.11.3` |


Updates `black` from 25.9.0 to 25.11.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.9.0...25.11.0)

Updates `coverage` from 7.11.0 to 7.11.3
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.11.0...7.11.3)

Updates `pre-commit` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.4.0)

Updates `pyupgrade` from 3.21.0 to 3.21.1
- [Commits](asottile/pyupgrade@v3.21.0...v3.21.1)

Updates `safety` from 3.6.2 to 3.7.0
- [Release notes](https://github.com/pyupio/safety/releases)
- [Changelog](https://github.com/pyupio/safety/blob/main/CHANGELOG.md)
- [Commits](pyupio/safety@3.6.2...3.7.0)

Updates `pydantic` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.12.4/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.3...v2.12.4)

Updates `pydantic-core` from 2.41.4 to 2.41.5
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.41.4...v2.41.5)

Updates `pytokens` from 0.2.0 to 0.3.0
- [Commits](tusharsadhwani/pytokens@0.2.0...0.3.0)

Updates `regex` from 2025.10.23 to 2025.11.3
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2025.10.23...2025.11.3)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 25.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: coverage
  dependency-version: 7.11.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pre-commit
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pyupgrade
  dependency-version: 3.21.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: safety
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.12.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pydantic-core
  dependency-version: 2.41.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pytokens
  dependency-version: 0.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: regex
  dependency-version: 2025.11.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 10, 2025
@gadomski gadomski merged commit f9e6c9d into main Nov 10, 2025
10 checks passed
@gadomski gadomski deleted the dependabot/pip/minor-and-patch-9786d93340 branch November 10, 2025 14:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants