Skip to content

chore(deps): bump the python group with 3 updates#14988

Merged
dguido merged 1 commit intomainfrom
dependabot/uv/python-270edb683c
Apr 8, 2026
Merged

chore(deps): bump the python group with 3 updates#14988
dguido merged 1 commit intomainfrom
dependabot/uv/python-270edb683c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps the python group with 3 updates: boto3, requests and linode-api4.

Updates boto3 from 1.42.75 to 1.42.80

Commits
  • d66479d Merge branch 'release-1.42.80'
  • e930bfc Bumping version to 1.42.80
  • 2596b71 Add changelog entries from botocore
  • 617e6fb Bump github/codeql-action from 4.34.1 to 4.35.1 (#4746)
  • 9c5880d Bump pygments from 2.18.0 to 2.20.0 (#4747)
  • 79b815b Merge branch 'release-1.42.79'
  • 937a2b2 Merge branch 'release-1.42.79' into develop
  • b11c6f7 Bumping version to 1.42.79
  • 98fabce Add changelog entries from botocore
  • b5acf8b Merge branch 'release-1.42.78'
  • Additional commits viewable in compare view

Updates requests from 2.32.5 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits

Updates linode-api4 from 5.41.0 to 5.42.0

Release notes

Sourced from linode-api4's releases.

v5.42.0

What's Changed

🚀 New Features

💡 Improvements

🧪 Testing Improvements

⚙️ Repo/CI Improvements

Full Changelog: linode/linode_api4-python@v5.41.0...v5.42.0

Commits
  • 2fbed9e Merge pull request #677 from linode/dev
  • d692eef TPT-4324: Allow dict passthrough for config_create 'devices' field; update re...
  • c9e18a5 TPT-4318: Add @​linode/dx-sdets to CODEOWNERS (#671)
  • c77ec6d TPT-3809: Added DiskEncryption field for LKE Node Pool creation (#670)
  • c10fadc TPT-4213: Fix assertion for database engine config integration test (#662)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 3 updates: [boto3](https://github.com/boto/boto3), [requests](https://github.com/psf/requests) and [linode-api4](https://github.com/linode/linode_api4-python).


Updates `boto3` from 1.42.75 to 1.42.80
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.75...1.42.80)

Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `linode-api4` from 5.41.0 to 5.42.0
- [Release notes](https://github.com/linode/linode_api4-python/releases)
- [Commits](linode/linode_api4-python@v5.41.0...v5.42.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.42.80
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: linode-api4
  dependency-version: 5.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 8, 2026
@dependabot dependabot bot requested a review from jackivanov as a code owner April 8, 2026 08:47
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 8, 2026
@dguido dguido merged commit 5b53b85 into main Apr 8, 2026
21 checks passed
@dguido dguido deleted the dependabot/uv/python-270edb683c branch April 8, 2026 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant