From 0eb003c4a1976279540186595beda9b9ee1159d5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 23:05:37 +0000 Subject: [PATCH] Bump the python-minor-and-patch group across 1 directory with 3 updates Bumps the python-minor-and-patch group with 3 updates in the /coordinator directory: [ruff](https://github.com/astral-sh/ruff), [bandit](https://github.com/PyCQA/bandit) and [pip-audit](https://github.com/pypa/pip-audit). Updates `ruff` from 0.6.9 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.6.9...0.16.1) Updates `bandit` from 1.7.10 to 1.9.4 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.7.10...1.9.4) Updates `pip-audit` from 2.7.3 to 2.10.1 - [Release notes](https://github.com/pypa/pip-audit/releases) - [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md) - [Commits](https://github.com/pypa/pip-audit/compare/v2.7.3...v2.10.1) --- updated-dependencies: - dependency-name: bandit dependency-version: 1.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pip-audit dependency-version: 2.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch ... Signed-off-by: dependabot[bot] --- coordinator/requirements-dev.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/coordinator/requirements-dev.txt b/coordinator/requirements-dev.txt index 57edfd1..98143ff 100644 --- a/coordinator/requirements-dev.txt +++ b/coordinator/requirements-dev.txt @@ -15,15 +15,15 @@ pytest>=8.0 pytest-asyncio>=0.23 # Lint + format (fast, replaces flake8/isort/pyupgrade). -ruff==0.6.9 +ruff==0.16.1 # Static type checking. Started non-strict / targeted (see mypy.ini) so the # job is green today and can be ratcheted toward strict per-module over time. mypy==1.11.2 # Security static analysis (AST-based). Fails the build on MEDIUM+ findings. -bandit==1.7.10 +bandit==1.9.4 # Dependency CVE auditing against requirements.txt. Honoured ignore-list lives # in pip-audit-ignore.txt (one GHSA/CVE id per line, with an inline rationale). -pip-audit==2.7.3 +pip-audit==2.10.1