Skip to content

chore(backend/deps-dev): Bump the development-dependencies group across 1 directory with 4 updates #10173

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 16, 2025

Bumps the development-dependencies group with 4 updates in the /autogpt_platform/backend directory: poethepoet, pyright, requests and ruff.

Updates poethepoet from 0.34.0 to 0.35.0

Release notes

Sourced from poethepoet's releases.

0.35.0

Enhancements

Fixes

Full Changelog: nat-n/poethepoet@v0.34.0...v0.35.0

Commits

Updates pyright from 1.1.401 to 1.1.402

Commits

Updates requests from 2.32.3 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Updates ruff from 0.11.12 to 0.11.13

Release notes

Sourced from ruff's releases.

0.11.13

Release Notes

Preview features

  • [airflow] Add unsafe fix for module moved cases (AIR301,AIR311,AIR312,AIR302) (#18367,#18366,#18363,#18093)
  • [refurb] Add coverage of set and frozenset calls (FURB171) (#18035)
  • [refurb] Mark FURB180 fix unsafe when class has bases (#18149)

Bug fixes

  • [perflint] Fix missing parentheses for lambda and ternary conditions (PERF401, PERF403) (#18412)
  • [pyupgrade] Apply UP035 only on py313+ for get_type_hints() (#18476)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP004,UP050) (#18393, #18390)

Rule changes

  • [fastapi] Avoid false positive for class dependencies (FAST003) (#18271)

Documentation

  • Update editor setup docs for Neovim and Vim (#18324)

Other changes

  • Support Python 3.14 template strings (t-strings) in formatter and parser (#17851)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.13

Preview features

  • [airflow] Add unsafe fix for module moved cases (AIR301,AIR311,AIR312,AIR302) (#18367,#18366,#18363,#18093)
  • [refurb] Add coverage of set and frozenset calls (FURB171) (#18035)
  • [refurb] Mark FURB180 fix unsafe when class has bases (#18149)

Bug fixes

  • [perflint] Fix missing parentheses for lambda and ternary conditions (PERF401, PERF403) (#18412)
  • [pyupgrade] Apply UP035 only on py313+ for get_type_hints() (#18476)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP004,UP050) (#18393, #18390)

Rule changes

  • [fastapi] Avoid false positive for class dependencies (FAST003) (#18271)

Documentation

  • Update editor setup docs for Neovim and Vim (#18324)

Other changes

  • Support Python 3.14 template strings (t-strings) in formatter and parser (#17851)
Commits
  • 5faf72a Bump 0.11.13 (#18484)
  • 28dbc5c [ty] Fix completion order in playground (#18480)
  • ce216c7 Remove Message::to_rule (#18447)
  • 33468cc [pyupgrade] Apply UP035 only on py313+ for get_type_hints() (#18476)
  • 8531f4b [ty] Add infrastructure for AST garbage collection (#18445)
  • 5510020 [ty] IDE: add support for object.\<CURSOR> completions (#18468)
  • c0bb83b [perflint] fix missing parentheses for lambda and ternary conditions (PERF4...
  • 74a4e9a Combine lint and syntax error handling (#18471)
  • 8485dbb [ty] Fix --python argument for Windows, and improve error messages for bad ...
  • 0858896 [ty] type narrowing by attribute/subscript assignments (#18041)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies python Pull requests that update Python code labels Jun 16, 2025
@dependabot dependabot bot requested a review from a team as a code owner June 16, 2025 18:55
@dependabot dependabot bot requested review from Swiftyos and removed request for a team June 16, 2025 18:55
@dependabot dependabot bot requested a review from Pwuts June 16, 2025 18:55
@dependabot dependabot bot added the python Pull requests that update Python code label Jun 16, 2025
@github-project-automation github-project-automation bot moved this to 🆕 Needs initial review in AutoGPT development kanban Jun 16, 2025
Copy link

netlify bot commented Jun 16, 2025

Deploy Preview for auto-gpt-docs-dev canceled.

Name Link
🔨 Latest commit a452169
🔍 Latest deploy log https://app.netlify.com/projects/auto-gpt-docs-dev/deploys/6852eef4d05a530008ec9f17

@github-actions github-actions bot added platform/backend AutoGPT Platform - Back end size/m labels Jun 16, 2025
Copy link

deepsource-io bot commented Jun 16, 2025

Here's the code health analysis summary for commits 753a2bf..a452169. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗
DeepSource Python LogoPython✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link

netlify bot commented Jun 16, 2025

Deploy Preview for auto-gpt-docs canceled.

Name Link
🔨 Latest commit a452169
🔍 Latest deploy log https://app.netlify.com/projects/auto-gpt-docs/deploys/6852eef488d1950008615afe

@github-actions github-actions bot added the conflicts Automatically applied to PRs with merge conflicts label Jun 17, 2025
Copy link
Contributor

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.

@dependabot dependabot bot force-pushed the dependabot/pip/autogpt_platform/backend/dev/development-dependencies-1d85045818 branch from fbddd19 to 086d52e Compare June 17, 2025 09:56
@github-actions github-actions bot removed the conflicts Automatically applied to PRs with merge conflicts label Jun 17, 2025
Copy link
Contributor

Conflicts have been resolved! 🎉 A maintainer will review the pull request shortly.

…ss 1 directory with 4 updates

Bumps the development-dependencies group with 4 updates in the /autogpt_platform/backend directory: [poethepoet](https://github.com/nat-n/poethepoet), [pyright](https://github.com/RobertCraigie/pyright-python), [requests](https://github.com/psf/requests) and [ruff](https://github.com/astral-sh/ruff).


Updates `poethepoet` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.34.0...v0.35.0)

Updates `pyright` from 1.1.401 to 1.1.402
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.401...v1.1.402)

Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `ruff` from 0.11.12 to 0.11.13
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.12...0.11.13)

---
updated-dependencies:
- dependency-name: poethepoet
  dependency-version: 0.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: pyright
  dependency-version: 1.1.402
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: ruff
  dependency-version: 0.11.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/autogpt_platform/backend/dev/development-dependencies-1d85045818 branch from 086d52e to a452169 Compare June 18, 2025 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies platform/backend AutoGPT Platform - Back end python Pull requests that update Python code size/m
Projects
Status: 🆕 Needs initial review
Development

Successfully merging this pull request may close these issues.

0 participants