chore(deps): bump the uv group across 1 directory with 10 updates#239
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the uv group across 1 directory with 10 updates#239dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the uv group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [authlib](https://github.com/authlib/authlib) | `1.6.5` | `1.6.9` | | [cryptography](https://github.com/pyca/cryptography) | `45.0.5` | `46.0.7` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.12.4` | `3.20.3` | | [marshmallow](https://github.com/marshmallow-code/marshmallow) | `4.0.0` | `4.1.2` | | [pip](https://github.com/pypa/pip) | `25.1.1` | `26.0` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `4.25.8` | `5.29.6` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.20` | `0.0.22` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.33.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.6.1` | `2.6.3` | | [virtualenv](https://github.com/pypa/virtualenv) | `20.31.2` | `20.36.1` | Updates `authlib` from 1.6.5 to 1.6.9 - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](authlib/authlib@v1.6.5...v1.6.9) Updates `cryptography` from 45.0.5 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@45.0.5...46.0.7) Updates `filelock` from 3.12.4 to 3.20.3 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.12.4...3.20.3) Updates `marshmallow` from 4.0.0 to 4.1.2 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@4.0.0...4.1.2) Updates `pip` from 25.1.1 to 26.0 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@25.1.1...26.0) Updates `protobuf` from 4.25.8 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-multipart` from 0.0.20 to 0.0.22 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.20...0.0.22) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.33.0) Updates `urllib3` from 2.6.1 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `virtualenv` from 20.31.2 to 20.36.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.31.2...20.36.1) --- updated-dependencies: - dependency-name: authlib dependency-version: 1.6.9 dependency-type: indirect dependency-group: uv - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: indirect dependency-group: uv - dependency-name: filelock dependency-version: 3.20.3 dependency-type: indirect dependency-group: uv - dependency-name: marshmallow dependency-version: 4.1.2 dependency-type: indirect dependency-group: uv - dependency-name: pip dependency-version: '26.0' dependency-type: indirect dependency-group: uv - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: indirect dependency-group: uv - dependency-name: python-multipart dependency-version: 0.0.22 dependency-type: indirect dependency-group: uv - dependency-name: requests dependency-version: 2.33.0 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect dependency-group: uv - dependency-name: virtualenv dependency-version: 20.36.1 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
TIP This summary will be updated as you push new changes. Give us feedback
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 10 updates in the / directory:
1.6.51.6.945.0.546.0.73.12.43.20.34.0.04.1.225.1.126.04.25.85.29.60.0.200.0.222.32.42.33.02.6.12.6.320.31.220.36.1Updates
authlibfrom 1.6.5 to 1.6.9Release notes
Sourced from authlib's releases.
Commits
9266eaachore: release 1.6.9b9bb2b2fix(oidc): fail close at validating c_hash and at_hash1b0a1d9fix(jose): generate random cek when cek length doesn't match5be3c51fix(jose): add ES256K into default jwt algorithms48b345ffix(jose): remove deprecated algorithm from default registrya5d4b2dfix(jose): do not use header's jwk automaticallya769f34chore: release 1.6.884f3fa2fix: add EdDSA to default jwt algorithms38e872achore: release 1.6.7b87c32efix: remove "none" algorithm from default jwt instanceUpdates
cryptographyfrom 45.0.5 to 46.0.7Changelog
Sourced from cryptography's changelog.
... (truncated)
Commits
622d67246.0.7 release (#14602)91d7288Cherry-pick #14542 (#14543)06e120ebump version for 46.0.5 release (#14289)0eebb9dEC check key on cofactor > 1 (#14287)bedf6e1fix openssl version on 46 branch (#14220)e6f44fcbump for 46.0.4 and drop win arm64 due to CI issues (#14217)c0af4ddrelease 46.0.3 (#13681)99efe5abump version for 46.0.2 (#13531)e735cfcrelease 46.0.1 (#13450)4e457ffExplicitly specify python in mac uv build invocation (#13447)Updates
filelockfrom 3.12.4 to 3.20.3Release notes
Sourced from filelock's releases.
... (truncated)
Changelog
Sourced from filelock's changelog.
... (truncated)
Commits
41b42ddFix TOCTOU symlink vulnerability in SoftFileLock (#465)f2e7d40[pre-commit.ci] pre-commit autoupdate (#464)5088854Support Unix systems without O_NOFOLLOW (#463)377f622[pre-commit.ci] pre-commit autoupdate (#460)4724d7fFix TOCTOU symlink vulnerability in lock file creation (#461)cb69414Bump actions/upload-artifact from 5 to 6 (#459)0769294Bump actions/download-artifact from 6 to 7 (#458)414193a[pre-commit.ci] pre-commit autoupdate (#457)1456797[pre-commit.ci] pre-commit autoupdate (#456)8d6bf90Bump actions/checkout from 5 to 6 (#455)Updates
marshmallowfrom 4.0.0 to 4.1.2Changelog
Sourced from marshmallow's changelog.
Commits
692e79dMerge pull request #2876 from marshmallow-code/delint045c5f6[pre-commit.ci] auto fixes from pre-commit.com hooks94c4d98Delintd24a0c9Merge commit from fork1682640Bump version and update changelog36f8787Only deep copy error message collections70141f4Add test coverage for error message modification218d98aMerge error store messages without rebuilding collections80f1110Bump version and update changelog10fe10bMerge pull request #2874 from T90REAL/fix_case_sensitivityUpdates
pipfrom 25.1.1 to 26.0Changelog
Sourced from pip's changelog.
... (truncated)
Commits
2f4d4a8Merge pull request #13779 from notatallshaw/fix-26.0-news04307a4fix 26.0 news6ec7b0aMerge pull request #13775 from notatallshaw/release/26.04104356Bump for release58be883Update AUTHORS.txt66f2decMerge pull request #13778 from ichard26/docs/groups0214103doc: Re-expose package selection group optionsfdbe762Install pip within docs Nox sessions8e227a9Merge pull request #13777 from sethmlarson/commonpathf5315adMerge pull request #13776 from ichard26/docs/versionaddedUpdates
protobuffrom 4.25.8 to 5.29.6Release notes
Sourced from protobuf's releases.
... (truncated)
Commits
Updates
python-multipartfrom 0.0.20 to 0.0.22Release notes
Sourced from python-multipart's releases.
Changelog
Sourced from python-multipart's changelog.
Commits
bea7bbbVersion 0.0.22 (#222)0fb59a9chore: add return type on test (#221)9433f4bMerge commit from forkd5c91ecBump the github-actions group with 2 updates (#219)5a90631bump uv (#218)1f72955Version 0.0.21 (#217)47ecfedAdd support for Python 3.14 and drop EOL 3.8 and 3.9 (#216)f18b709Bump the github-actions group across 1 directory with 4 updates (#214)b388e9achore: use depedency-groups inpyproject.toml(#212)6113e75Bump the github-actions group across 1 directory with 3 updates (#210)Updates
requestsfrom 2.32.4 to 2.33.0Release notes
Sourced from requests's releases.
Changelog
Sourced from requests's changelog.
Commits
bc04dfdv2.33.066d21cbMerge commit from fork8b9bc8fMove badges to top of README (#7293)e331a28Remove unused extraction call (#7292)753fd08docs: fix FAQ grammar in httplib2 example774a0b8docs(socks): same block as other sections9c72a41Bump github/codeql-action from 4.33.0 to 4.34.1ebf7190Bump github/codeql-action from 4.32.0 to 4.33.00e4ae38docs: exclude Response.is_permanent_redirect from API docs (#7244)d568f47docs: clarify Quickstart POST example (#6960)Updates
urllib3from 2.6.1 to 2.6.3Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
0248277Release 2.6.38864ac4Merge commit from fork70cecb2Fix Scorecard issues related to vulnerable dev dependencies (#3755)41f249aMove "v2.0 Migration Guide" to the end of the table of contents (#3747)fd4dffdPatchVerifiedHTTPSConnectionfor Emscripten (#3752)13f0bfdHandle massive values in Retry-After when calculating time to sleep for (#3743)8c480bfBump actions/upload-artifact from 5.0.0 to 6.0.0 (#3748)4b40616Bump actions/cache from 4.3.0 to 5.0.1 (#3750)82b8479Bump actions/download-artifact from 6.0.0 to 7.0.0 (#3749)34284cbMention experimental features in the security policy (#3746)Updates
virtualenvfrom 20.31.2 to 20.36.1Release notes
Sourced from virtualenv's releases.