Bump the dev-dependencies group across 1 directory with 9 updates #83

dependabot · 2025-11-24T22:54:43Z

Bumps the dev-dependencies group with 9 updates in the / directory:

Package	From	To
pytest	`8.4.1`	`8.4.2`
pytest-asyncio	`1.1.0`	`1.3.0`
pytest-cov	`6.2.1`	`7.0.0`
bandit	`1.8.6`	`1.9.2`
pre-commit	`4.3.0`	`4.5.0`
ruff	`0.12.10`	`0.12.12`
mypy	`1.17.1`	`1.18.2`
twine	`6.1.0`	`6.2.0`
types-pyyaml	`6.0.12.20250822`	`6.0.12.20250915`

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

#13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

#13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.

#13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.

#13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

Commits

bfae422 Prepare release version 8.4.2
8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
2c94c4a add missing colon (#13640) (#13641)
c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
f87289c Fix crash with times output style and skipped module (#13573) (#13579)
Additional commits viewable in compare view

Updates pytest-asyncio from 1.1.0 to 1.3.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 1.3.0

1.3.0 - 2025-11-10

Removed

Support for Python 3.9 (#1278)

Added

Support for pytest 9 (#1279)

Notes for Downstream Packagers

Tested Python versions include free threaded Python 3.14t (#1274)

Tests are run in the same pytest process, instead of spawning a subprocess with pytest.Pytester.runpytest_subprocess. This prevents the test suite from accidentally using a system installation of pytest-asyncio, which could result in test errors. (#1275)

pytest-asyncio 1.2.0

1.2.0 - 2025-09-12

Added

--asyncio-debug CLI option and asyncio_debug configuration option to enable asyncio debug mode for the default event loop. (#980)

A pytest.UsageError for invalid configuration values of asyncio_default_fixture_loop_scope and asyncio_default_test_loop_scope. (#1189)

Compatibility with the Pyright type checker (#731)

Fixed

RuntimeError: There is no current event loop in thread 'MainThread' when any test unsets the event loop (such as when using asyncio.run and asyncio.Runner). (#1177)

Deprecation warning when decorating an asynchronous fixture with @pytest.fixture in [strict]{.title-ref} mode. The warning message now refers to the correct package. (#1198)

Notes for Downstream Packagers

Bump the minimum required version of tox to v4.28. This change is only relevant if you use the tox.ini file provided by pytest-asyncio to run tests.

Extend dependency on typing-extensions>=4.12 from Python<3.10 to Python<3.13.

pytest-asyncio 1.1.1

v1.1.1 - 2025-09-12

Notes for Downstream Packagers

- Addresses a build problem with setuptoos-scm >= 9 caused by invalid setuptools-scm configuration in pytest-asyncio. (#1192)

Commits

2e9695f docs: Compile changelog for v1.3.0
dd0e9ba docs: Reference correct issue in news fragment.
4c31abe Build(deps): Bump nh3 from 0.3.1 to 0.3.2
13e9477 Link to migration guides from changelog
4d2cf3c tests: handle Python 3.14 DefaultEventLoopPolicy deprecation warnings
ee3549b test: Remove obsolete test for the event_loop fixture.
7a67c82 tests: Fix failing test by preventing warning conversion to error.
a17b689 test: add pytest config to isolated test directories
18afc9d fix(tests): replace runpytest_subprocess with runpytest
cdc6bd1 Add support for pytest 9 and drop Python 3.9 support
Additional commits viewable in compare view

Updates pytest-cov from 6.2.1 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

Dropped support for subprocesses measurement.

It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

.. code-block:: ini

[run] patch = subprocess

This release also requires at least coverage 7.10.6.

Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

Removed some not really necessary testing deps like six.

6.3.0 (2025-09-06)

Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.

Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.

Commits

224d896 Bump version: 6.3.0 → 7.0.0
73424e3 Cleanup the docs a bit.
36f1cc2 Bump pins in template.
f299c59 Bump the github-actions group with 2 updates
25f0b2e Update docs/config.rst
bb23eac Improve configuration docs
a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
82f9993 Update changelog.
211b5cd Fix links.
97aadd7 Update some ci config, reformat and apply some lint fixes.
Additional commits viewable in compare view

Updates bandit from 1.8.6 to 1.9.2

Release notes

Sourced from bandit's releases.

1.9.2

What's Changed

Argparse Python 3.14 enhancements by @ericwb in PyCQA/bandit#1331

Check whether Constant value is str by @ericwb in PyCQA/bandit#1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

1.9.1

What's Changed

More Python version related fixes by @ericwb in PyCQA/bandit#1327

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

1.9.0

What's Changed

Add instructions for Maintainers to create/publish a release by @ericwb in PyCQA/bandit#1275

Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in PyCQA/bandit#1289

Bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in PyCQA/bandit#1290

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1291

Bump actions/checkout from 4 to 5 by @dependabot[bot] in PyCQA/bandit#1292

Replace deprecated datetime.datetime.utcnow() by @purplezimmermann in PyCQA/bandit#1295

Bump actions/setup-python from 5 to 6 by @dependabot[bot] in PyCQA/bandit#1296

Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in PyCQA/bandit#1298

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1303

Fix typos by @Shortfinga in PyCQA/bandit#1305

Bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in PyCQA/bandit#1306

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1315

Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in PyCQA/bandit#1317

Support of Python 3.14 by @ericwb in PyCQA/bandit#1323

Drop support of end-of-life Python 3.9 by @ericwb in PyCQA/bandit#1325

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1324

New Contributors

@purplezimmermann made their first contribution in PyCQA/bandit#1295

@Shortfinga made their first contribution in PyCQA/bandit#1305

Full Changelog: PyCQA/bandit@1.8.6...1.9.0

Commits

ea0d187 Check whether Constant value is str (#1333)
8bf7594 Argparse Python 3.14 enhancements (#1331)
a255dfa More Python version related fixes (#1327)
3f07bb0 [pre-commit.ci] pre-commit autoupdate (#1324)
c8c3fb8 Drop support of end-of-life Python 3.9 (#1325)
5c30350 Support of Python 3.14 (#1323)
e1ffdf6 Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#1317)
176d4ca [pre-commit.ci] pre-commit autoupdate (#1315)
2fc3e9c Bump docker/login-action from 3.5.0 to 3.6.0 (#1306)
6a68546 Fix typos (#1305)
Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.0

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

pre-commit v4.4.0

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.5.0 - 2025-11-22

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Commits

1af6c8f v4.5.0
3358a3b Merge pull request #3585 from pre-commit/hazmat
bdf6879 add pre-commit hazmat
e436690 Merge pull request #3584 from pre-commit/exitstack
8d34f95 use ExitStack instead of start + stop
9c7ea88 Merge pull request #3583 from pre-commit/forward-compat-map-manifest
844dacc add forward-compat error message
6a1d543 Merge pull request #3582 from pre-commit/move-gc-back
66278a9 move logic for gc back to commands.gc
1b32c50 Merge pull request #3579 from pre-commit/pre-commit-ci-update-config
Additional commits viewable in compare view

Updates ruff from 0.12.10 to 0.12.12

Release notes

Sourced from ruff's releases.

0.12.12

Release Notes

Preview features

Show fixes by default (#19919)

[airflow] Convert DatasetOrTimeSchedule(datasets=...) to AssetOrTimeSchedule(assets=...) (AIR311) (#20202)

[airflow] Improve the AIR002 error message (#20173)

[airflow] Move airflow.operators.postgres_operator.Mapping from AIR302 to AIR301 (#20172)

[flake8-async] Implement blocking-input rule (ASYNC250) (#20122)

[flake8-use-pathlib] Make PTH119 and PTH120 fixes unsafe because they can change behavior (#20118)

[pylint] Add U+061C to PLE2502 (#20106)

[ruff] Fix false negative for empty f-strings in deque calls (RUF037) (#20109)

Bug fixes

Less confidently mark f-strings as empty when inferring truthiness (#20152)

[fastapi] Fix false positive for paths with spaces around parameters (FAST003) (#20077)

[flake8-comprehensions] Skip C417 when lambda contains yield/yield from (#20201)

[perflint] Handle tuples in dictionary comprehensions (PERF403) (#19934)

Rule changes

[pycodestyle] Preserve return type annotation for ParamSpec (E731) (#20108)

Documentation

Add fix safety sections to docs (#17490,#17499)

Contributors

@11happy

@AlexWaygood

@BurntSushi

@Gankra

@JelleZijlstra

@Kalmaegi

@Lee-W

@MatthewMckee4

@PrettyWood

@Renkai

@ShaharNaveh

@amyreese

@carljm

@charliermarsh

@chirizxc

@danparizher

@dcreager

@dhruvmanila

@dylwil3

@github-actions

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.12

Preview features

Show fixes by default (#19919)

[airflow] Convert DatasetOrTimeSchedule(datasets=...) to AssetOrTimeSchedule(assets=...) (AIR311) (#20202)

[airflow] Improve the AIR002 error message (#20173)

[airflow] Move airflow.operators.postgres_operator.Mapping from AIR302 to AIR301 (#20172)

[flake8-async] Implement blocking-input rule (ASYNC250) (#20122)

[flake8-use-pathlib] Make PTH119 and PTH120 fixes unsafe because they can change behavior (#20118)

[pylint] Add U+061C to PLE2502 (#20106)

[ruff] Fix false negative for empty f-strings in deque calls (RUF037) (#20109)

Bug fixes

Less confidently mark f-strings as empty when inferring truthiness (#20152)

[fastapi] Fix false positive for paths with spaces around parameters (FAST003) (#20077)

[flake8-comprehensions] Skip C417 when lambda contains yield/yield from (#20201)

[perflint] Handle tuples in dictionary comprehensions (PERF403) (#19934)

Rule changes

[pycodestyle] Preserve return type annotation for ParamSpec (E731) (#20108)

Documentation

Add fix safety sections to docs (#17490,#17499)

0.12.11

Preview features

[airflow] Extend AIR311 and AIR312 rules (#20082)

[airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) (#20081)

[flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) (#20091)

[flake8-logging-format] Add auto-fix for f-string logging calls (G004) (#19303)

[flake8-use-pathlib] Add autofix for PTH211 (#20009)

[flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior (#20100)

Bug fixes

[pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) (#20048)

[pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) (#20115)

[ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) (#20032)

[ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#19647)

Rule changes

[ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) (#20045)

... (truncated)

Commits

c6516e9 Bump 0.12.12 (#20242)
1aaa084 [ty] More tests for TypedDict (#20205)
b49aa35 Split LICENSE addendum by derivation type (#20222)
1e34f3f [ty] Fix small test typo (#20220)
77b2cee [ty] Add functions for revealing assignability/subtyping constraints (#20217)
200349c [flake8-comprehensions] Skip C417 when lambda contains yield/`yield fro...
0d4f7dd [ty] Treat __new__ as a static method (#20212)
cb1ba0d Expose Indentation in ruff_python_codegen (#20216)
cda376a [ty]eliminate definitely-impossible types from union in equality narrowing (#...
b14fc96 Update Rust crate tracing-subscriber to v0.3.20 (#20162)
Additional commits viewable in compare view

Updates mypy from 1.17.1 to 1.18.2

Changelog

Sourced from mypy's changelog.

Mypy 1.18.2

Fix crash on recursive alias (Ivan Levkivskyi, PR 19845)

Add additional guidance for stubtest errors when runtime is object.__init__ (Stephen Morton, PR 19733)

Fix handling of None values in f-string expressions in mypyc (BobTheBuidler, PR 19846)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

Ali Hamdan

Anthony Sottile

BobTheBuidler

Brian Schubert

Chainfire

Charlie Denton

Christoph Tyralla

CoolCat467

Daniel Hnyk

Emily

Emma Smith

Ethan Sarp

Ivan Levkivskyi

Jahongir Qurbonov

Jelle Zijlstra

Joren Hammudoglu

Jukka Lehtosalo

Marc Mueller

Omer Hadari

Piotr Sawicki

PrinceNaroliya

Randolf Scholz

Robsdedude

Saul Shanabrook

Shantanu

Stanislav Terliakov

Stephen Morton

wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.17

We’ve just uploaded mypy 1.17 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

... (truncated)

Commits

df05f05 remove +dev from version
01a7a12 Update changelog for 1.18.2 (#19873)
ca5abf0 Typeshed cherry-pick: Make type of unitest.mock.Any a subclass of Any (#1...
9d794b5 [mypyc] fix: inappropriate Nones in f-strings (#19846)
2c0510c stubtest: additional guidance on errors when runtime is object.init (#19733)
2f3f03c Bump version to 1.18.2+dev for point release
7669841 Fix crash on recursive alias in indirection.py (#19845)
03fbaa9 bump version to 1.18.1 due to wheels failure
b44a1fb removed +dev from version
7197a99 Removed Unreleased in the Changelog for Release 1.18 (#19827)
Additional commits viewable in compare view

Updates twine from 6.1.0 to 6.2.0

Changelog

Sourced from twine's changelog.

twine 6.2.0 (2025-09-04)

Features ^^^^^^^^

Automatically refresh short-lived PyPI token in long running Trusted Publishing uploads.

In the event that a trusted publishing upload job is taking longer than the validity period of a trusted publishing token (15 minutes at the time of this writing), and we are already 10 minutes into that validity period, we will begin to attempt to replace the token on each subsequent request. ([#1246](https://github.com/pypa/twine/issues/1246) <https://github.com/pypa/twine/issues/1246>_)

Bugfixes ^^^^^^^^

Fix compatibility kludge for invalid License-File metadata entries emitted by build backends to work also with packaging version 24.0. ([#1217](https://github.com/pypa/twine/issues/1217) <https://github.com/pypa/twine/issues/1217>_)

Fix a couple of incorrectly rendered error messages. ([#1224](https://github.com/pypa/twine/issues/1224) <https://github.com/pypa/twine/issues/1224>_)

twine now enforces keyring >= 21.2.0, which was previously implicitly required by API usage. ([#1229](https://github.com/pypa/twine/issues/1229) <https://github.com/pypa/twine/issues/1229>_)

twine now catches configparser.Error to prevent accidental leaks of secret tokens or passwords to the user's console. ([#1240](https://github.com/pypa/twine/issues/1240) <https://github.com/pypa/twine/issues/1240>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

Remove hacks that support --skip-existing for indexes other than PyPI and TestPyPI.

To date, these hacks continue to accrue and there have been numerous issues with them, not the least of which being that every time we update them, the paid index providers change things to break the compatibility we implement for them. Beyond that, these hacks do not work when text is internationalized in the response from the index provider.

For a sample of past issues, see:

pypa/twine#1251

pypa/twine#918

pypa/twine#856

pypa/twine#693

pypa/twine#332 ([#1251](https://github.com/pypa/twine/issues/1251) <https://github.com/pypa/twine/issues/1251>_)

... (truncated)

Commits

14ceb29 Update changelog for 6.2.0 (#1264)
60e377b build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1263)
88821f2 feat(package): remove MD5 hashing entirely (#1262)
ce5fe53 build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0
6a696ed PEP 639 compliance
9175334 rename 1247.misc.rst to changelog/1247.misc.rst
d94a475 fix(tests): update expected error message
c1c02d1 Remove --skip-existing support for non-PyPI indices
a24d308 Set trusted publishing logging to INFO/WARN (#1247)
becf1a8 Fix py3.9 mypy error in __init__ around PackageMetadata
Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20250822 to 6.0.12.20250915

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

github-actions · 2025-11-24T22:54:53Z

🚨 Major version update detected!

This PR contains major version updates that may include breaking changes:

pytest, pytest-asyncio, pytest-cov, bandit, pre-commit, ruff, mypy, twine, types-pyyaml

Please review carefully before merging. Consider:

Reading the changelog/release notes
Testing locally
Checking for breaking changes

This PR will NOT be auto-merged due to the major version change.

github-actions · 2025-12-06T05:01:07Z

🚨 Major version update detected!

This PR contains major version updates that may include breaking changes:

pytest, pytest-asyncio, pytest-cov, bandit, pre-commit, ruff, mypy, twine, types-pyyaml

Please review carefully before merging. Consider:

Reading the changelog/release notes
Testing locally
Checking for breaking changes

This PR will NOT be auto-merged due to the major version change.

github-actions · 2025-12-15T22:41:16Z

🚨 Major version update detected!

This PR contains major version updates that may include breaking changes:

pytest, pytest-asyncio, pytest-cov, bandit, pre-commit, ruff, mypy, twine, types-pyyaml

Please review carefully before merging. Consider:

Reading the changelog/release notes
Testing locally
Checking for breaking changes

This PR will NOT be auto-merged due to the major version change.

github-actions · 2025-12-15T22:44:48Z

🚨 Major version update detected!

This PR contains major version updates that may include breaking changes:

pytest, pytest-asyncio, pytest-cov, bandit, pre-commit, ruff, mypy, twine, types-pyyaml

Please review carefully before merging. Consider:

Reading the changelog/release notes
Testing locally
Checking for breaking changes

This PR will NOT be auto-merged due to the major version change.

Bumps the dev-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `8.4.2` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.1.0` | `1.3.0` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.2.1` | `7.0.0` | | [bandit](https://github.com/PyCQA/bandit) | `1.8.6` | `1.9.2` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.12.10` | `0.12.12` | | [mypy](https://github.com/python/mypy) | `1.17.1` | `1.18.2` | | [twine](https://github.com/pypa/twine) | `6.1.0` | `6.2.0` | | [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) | `6.0.12.20250822` | `6.0.12.20250915` | Updates `pytest` from 8.4.1 to 8.4.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.1...8.4.2) Updates `pytest-asyncio` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.1.0...v1.3.0) Updates `pytest-cov` from 6.2.1 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.2.1...v7.0.0) Updates `bandit` from 1.8.6 to 1.9.2 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](PyCQA/bandit@1.8.6...1.9.2) Updates `pre-commit` from 4.3.0 to 4.5.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.3.0...v4.5.0) Updates `ruff` from 0.12.10 to 0.12.12 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/0.12.12/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.10...0.12.12) Updates `mypy` from 1.17.1 to 1.18.2 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.17.1...v1.18.2) Updates `twine` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@6.1.0...6.2.0) Updates `types-pyyaml` from 6.0.12.20250822 to 6.0.12.20250915 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) --- updated-dependencies: - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: pytest-asyncio dependency-version: 1.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: bandit dependency-version: 1.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pre-commit dependency-version: 4.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: ruff dependency-version: 0.12.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: mypy dependency-version: 1.18.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: twine dependency-version: 6.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: types-pyyaml dependency-version: 6.0.12.20250915 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-12-16T22:57:30Z

🚨 Major version update detected!

This PR contains major version updates that may include breaking changes:

pytest, pytest-asyncio, pytest-cov, bandit, pre-commit, ruff, mypy, twine, types-pyyaml

Please review carefully before merging. Consider:

Reading the changelog/release notes
Testing locally
Checking for breaking changes

This PR will NOT be auto-merged due to the major version change.

dependabot bot assigned cayossarian Nov 24, 2025

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 24, 2025

dependabot bot force-pushed the dependabot/pip/dev-dependencies-aa158859b4 branch from 30cefaf to 59914e5 Compare December 6, 2025 05:00

dependabot bot force-pushed the dependabot/pip/dev-dependencies-aa158859b4 branch from 59914e5 to cd3b182 Compare December 15, 2025 22:41

dependabot bot force-pushed the dependabot/pip/dev-dependencies-aa158859b4 branch from cd3b182 to 45c891a Compare December 15, 2025 22:44

dependabot bot force-pushed the dependabot/pip/dev-dependencies-aa158859b4 branch from 45c891a to a8ddd22 Compare December 16, 2025 22:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dev-dependencies group across 1 directory with 9 updates #83

Bump the dev-dependencies group across 1 directory with 9 updates #83

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Nov 24, 2025

Uh oh!

github-actions bot commented Dec 6, 2025

Uh oh!

github-actions bot commented Dec 15, 2025

Uh oh!

github-actions bot commented Dec 15, 2025

Uh oh!

github-actions bot commented Dec 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the dev-dependencies group across 1 directory with 9 updates #83

Are you sure you want to change the base?

Bump the dev-dependencies group across 1 directory with 9 updates #83

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

Improved documentation

Contributor-facing changes

pytest-asyncio 1.3.0

1.3.0 - 2025-11-10

Removed

Added

Notes for Downstream Packagers

pytest-asyncio 1.2.0

1.2.0 - 2025-09-12

Added

Fixed

Notes for Downstream Packagers

pytest-asyncio 1.1.1

v1.1.1 - 2025-09-12

Notes for Downstream Packagers

7.0.0 (2025-09-09)

6.3.0 (2025-09-06)

1.9.2

What's Changed

1.9.1

What's Changed

1.9.0

What's Changed

New Contributors

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

0.12.12

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

0.12.12

Preview features

Bug fixes

Rule changes

Documentation

0.12.11

Preview features

Bug fixes

Rule changes

Mypy 1.18.2

Acknowledgements

Mypy 1.17

twine 6.2.0 (2025-09-04)

Uh oh!

github-actions bot commented Nov 24, 2025

Uh oh!

github-actions bot commented Dec 6, 2025

Uh oh!

github-actions bot commented Dec 15, 2025

Uh oh!

github-actions bot commented Dec 15, 2025

Uh oh!

github-actions bot commented Dec 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading