Skip to content

Bump the all-minor-and-patch-dependency-updates group with 9 updates#326

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/all-minor-and-patch-dependency-updates-9500d9847e
Closed

Bump the all-minor-and-patch-dependency-updates group with 9 updates#326
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/all-minor-and-patch-dependency-updates-9500d9847e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026 •
edited
Loading

Bumps the all-minor-and-patch-dependency-updates group with 9 updates:

Package From To
bandit 1.9.2 1.9.3
setuptools 80.9.0 80.10.2
ruff 0.14.7 0.14.14
pytest 9.0.1 9.0.2
gitpython 3.1.45 3.1.46
cachetools 6.2.1 6.2.6
build 1.3.0 1.4.0
tox 4.32.0 4.34.1
sphinx 9.0.0 9.0.4

Updates bandit from 1.9.2 to 1.9.3

Release notes

Sourced from bandit's releases.

1.9.3

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

Commits

Updates setuptools from 80.9.0 to 80.10.2

Changelog

Sourced from setuptools's changelog.

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

v80.10.1

Misc

v80.10.0

Features

  • Remove post-release tags on setuptools' own build. (#4530)
  • Refreshed vendored dependencies. (#5139)

Misc

Commits
  • 5cf2d08 Bump version: 80.10.1 → 80.10.2
  • 852cd5e Merge pull request #5166 from pypa/bugfix/5159-vendor-bin-free
  • 11115ee Suppress deprecation warning.
  • 5cf9185 Update vendored dependencies.
  • cf59f41 Delete all binaries generated by vendored package install.
  • 89a5981 Add missing newsfragments
  • c0114af Postpone deprecation warnings related to PEP 639 to 2027-Feb-18 (#5115)
  • de07603 Revert "[CI] Constraint transient test dependency on pyobjc" (#5128)
  • 3afd5d6 Revert "[CI] Constraint transient test dependency on pyobjc"
  • adfb0c9 Bump version: 80.10.0 → 80.10.1
  • Additional commits viewable in compare view

Updates ruff from 0.14.7 to 0.14.14

Release notes

Sourced from ruff's releases.

0.14.14

Release Notes

Released on 2026-01-22.

Preview features

  • Preserve required parentheses in lambda bodies (#22747)
  • Combine range suppression code diagnostics (#22613)
  • [airflow] Second positional argument to Asset/Dataset should not be a dictionary (AIR303) (#22453)
  • [ruff] Detect duplicate entries in __all__ (RUF068) (#22114)

Bug fixes

  • [pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)
  • [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • [flake8-pie] Detect duplicated declared class fields in PIE794 (#22717)

Rule changes

Documentation

  • Add --exit-non-zero-on-format to formatter exit codes section (#22761)
  • Update contributing guide for adding a new rule (#22779)
  • [FastAPI] Document fix safety for FAST001 (#22655)
  • [flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)
  • [pandas-vet] Make example error out-of-the-box (PD002) (#22561)
  • [refurb] Make the example work out of box (FURB101) (#22770)
  • [refurb] Make the example work out of box (FURB103) (#22769)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.14

Released on 2026-01-22.

Preview features

  • Preserve required parentheses in lambda bodies (#22747)
  • Combine range suppression code diagnostics (#22613)
  • [airflow] Second positional argument to Asset/Dataset should not be a dictionary (AIR303) (#22453)
  • [ruff] Detect duplicate entries in __all__ (RUF068) (#22114)

Bug fixes

  • [pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)
  • [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • [flake8-pie] Detect duplicated declared class fields in PIE794 (#22717)

Rule changes

Documentation

  • Add --exit-non-zero-on-format to formatter exit codes section (#22761)
  • Update contributing guide for adding a new rule (#22779)
  • [FastAPI] Document fix safety for FAST001 (#22655)
  • [flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)
  • [pandas-vet] Make example error out-of-the-box (PD002) (#22561)
  • [refurb] Make the example work out of box (FURB101) (#22770)
  • [refurb] Make the example work out of box (FURB103) (#22769)

Contributors

... (truncated)

Commits
  • 8b2e7b3 Prepare release v0.14.14 (#22813)
  • 4c7d1f5 [ty] Infer TypedDict types with >=1 required key as being always truthy (#2...
  • b7de434 add CCfW hooks (#22803)
  • b912dfc [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • 1ff062d [ty] Improve completion rankings for raise-from/except contexts (#22775)
  • 7e408a5 Update dependency wrangler to v4.59.1 (#22793)
  • ceb876b [flake8-pyi] Fix inconsistent handling of forward references for __new__,...
  • c5b4ee6 [ty] Support solving generics involving PEP 695 type aliases (#22678)
  • b9a6129 [ty] Improve support for kwarg splats in dictionary literals (#22781)
  • f516d47 Update contributing guide for adding a new rule (#22779)
  • Additional commits viewable in compare view

Updates pytest from 9.0.1 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

  • #13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

    You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

    Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

  • #13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

  • #13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

  • #13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

  • #4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.
Commits
  • 3d10b51 Prepare release version 9.0.2
  • 188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
  • b7d7bef Merge pull request #14014 from bluetech/compat-note
  • bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
  • bc78386 Add CLI options reference documentation (#13930)
  • 5a4e398 Fix docs typo (#14005) (#14008)
  • d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
  • 556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
  • c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
  • 73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
  • Additional commits viewable in compare view

Updates gitpython from 3.1.45 to 3.1.46

Release notes

Sourced from gitpython's releases.

3.1.46

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.45...3.1.46

Commits
  • 9e24eb6 Prepare next release
  • b8bb60e Merge pull request #2094 from George-Ogden/join-pathlike
  • c8b58c0 Update test/test_tree.py
  • 88e2614 Allow joining path to tree
  • 9fa28ae Add failing tests for joining paths
  • 6d66a02 Merge pull request #2093 from gitpython-developers/dependabot/submodules/git/...
  • f738029 Bump git/ext/gitdb from 65321a2 to 4c63ee6
  • eecc28d Merge pull request #2086 from George-Ogden/true-pathlike
  • 0cb55fb Revert "Add tests with non-ascii characters"
  • 1710626 Add tests with non-ascii characters
  • Additional commits viewable in compare view

Updates cachetools from 6.2.1 to 6.2.6

Changelog

Sourced from cachetools's changelog.

v6.2.6 (2026-01-27)

  • Improve typedkey performance.

  • Minor documentation improvements.

  • Minor testing improvements.

  • Minor code readability improvements.

v6.2.5 (2026-01-25)

  • Improve documentation regarding @cachedmethod with lock parameter.

  • Add test cases for cache stampede scenarios.

  • Update CI environment.

v6.2.4 (2025-12-15)

  • Fix license information displayed on PyPI be using an updated version of twine for uploading.

v6.2.3 (2025-12-12)

  • Improve documentation regarding @cachedmethod with condition parameter.

  • Minor style and readability improvements.

  • Modernize build environment.

  • Update CI environment.

v6.2.2 (2025-11-13)

  • Minor improvements from GitHub Copilot code review.

  • Improve documentation.

Commits

Updates build from 1.3.0 to 1.4.0

Release notes

Sourced from build's releases.

1.4.0

  • Add --quiet flag (PR #947)
  • Add option to dump PEP 517 metadata with --metadata (PR #940, PR #943)
  • Support UV environment variable (PR #971)
  • Remove a workaround for 3.14b1 (PR #960)
  • In 3.14 final release, color defaults to True already (PR #962)
  • Pass sp-repo-review (PR #942)
  • In pytest configuration, log_level is better than log_cli_level (PR #950)
  • Split up typing and mypy (PR #944)
  • Use types-colorama (PR #945)
  • In docs, first argument for _has_dependency is a name (PR #970)
  • Fix test failure when flit-core is installed (PR #921)
Changelog

Sourced from build's changelog.

1.4.0 (2026-01-08)

  • Add --quiet flag (:pr:947)
  • Add option to dump PEP 517 metadata with --metadata (:pr:940, :pr:943)
  • Support UV environment variable (:pr:971)
  • Remove a workaround for 3.14b1 (:pr:960)
  • In 3.14 final release, color defaults to True already (:pr:962)
  • Pass sp-repo-review (:pr:942)
  • In pytest configuration, log_level is better than log_cli_level (:pr:950)
  • Split up typing and mypy (:pr:944)
  • Use types-colorama (:pr:945)
  • In docs, first argument for _has_dependency is a name (PR :pr:970)
  • Fix test failure when flit-core is installed (PR :pr:921)
Commits

Updates tox from 4.32.0 to 4.34.1

Release notes

Sourced from tox's releases.

4.34.1

What's Changed

Full Changelog: tox-dev/tox@4.34.0...4.34.1

4.34.0

What's Changed

Full Changelog: tox-dev/tox@4.33.0...4.34.0

4.33.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.32.0...4.33.0

Changelog

Sourced from tox's changelog.

v4.34.1 (2026-01-09)

Bugfixes - 4.34.1

- Fix wheel corruption errors when the build backend updates the file in place - by :user:`gaborbernat`. (:issue:`3667`)

v4.34.0 (2026-01-08)


Features - 4.34.0

  • Support installing extras from the current project in dependency groups. -- by :user:czaki. (:issue:3561)

v4.33.0 (2026-01-02)

Features - 4.33.0

- Add support for conditional ``set_env`` using PEP-496 environment markers. In INI format use
  ``VAR=value; marker`` syntax, in TOML format use ``set_env.VAR = { value = "...", marker = "..." }``
  -- by :user:`gaborbernat`. (:issue:`3663`)

Bugfixes - 4.33.0

  • Added 'LocalAppData' to the default passed environment variables on Windows. (:issue:3639)

Improved Documentation - 4.33.0

- Sphinx is now set up to use :pypi:`sphinx-issues` for referencing
  GitHub issues and pull requests in the docs -- by :user:`webknjaz`. (:issue:`3202`)
Commits

Updates sphinx from 9.0.0 to 9.0.4

Release notes

Sourced from sphinx's releases.

Sphinx 9.0.4

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

  • #14143: Fix spurious build warnings when translators reorder references in strings, or use translated display text in references. Patch by Matt Wang.

Sphinx 9.0.3

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

  • #14142: autodoc: Restore some missing exports in sphinx.ext.autodoc. Patch by Adam Turner.

Sphinx 9.0.2

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

  • #14142: autodoc: Restore sphinx.ext.autodoc.mock. Patch by Adam Turner.

Sphinx 9.0.1

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

  • #13942: autodoc: Restore the mapping interface for options objects. Patch by Adam Turner.
  • #13942: autodoc: Deprecate the mapping interface for options objects. Patch by Adam Turner.
  • #13387: Update translations.
Changelog

Sourced from sphinx's changelog.

Release 9.0.4 (released Dec 04, 2025)

Bugs fixed

  • #14143: Fix spurious build warnings when translators reorder references in strings, or use translated display text in references. Patch by Matt Wang.

Release 9.0.3 (released Dec 04, 2025)

Bugs fixed

  • #14142: autodoc: Restore some missing exports in :mod:!sphinx.ext.autodoc. Patch by Adam Turner.

Release 9.0.2 (released Dec 03, 2025)

Bugs fixed

  • #14142: autodoc: Restore :mod:!sphinx.ext.autodoc.mock. Patch by Adam Turner.

Release 9.0.1 (released Dec 01, 2025)

Bugs fixed

  • #13942: autodoc: Restore the mapping interface for options objects. Patch by Adam Turner.
  • #13942: autodoc: Deprecate the mapping interface for options objects. Patch by Adam Turner.
  • #13387: Update translations.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-minor-and-patch-dependency-updates group with 9 updates
fa121f8 
Bumps the all-minor-and-patch-dependency-updates group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/PyCQA/bandit) | `1.9.2` | `1.9.3` |
| [setuptools](https://github.com/pypa/setuptools) | `80.9.0` | `80.10.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.7` | `0.14.14` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.1` | `9.0.2` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.45` | `3.1.46` |
| [cachetools](https://github.com/tkem/cachetools) | `6.2.1` | `6.2.6` |
| [build](https://github.com/pypa/build) | `1.3.0` | `1.4.0` |
| [tox](https://github.com/tox-dev/tox) | `4.32.0` | `4.34.1` |
| [sphinx](https://github.com/sphinx-doc/sphinx) | `9.0.0` | `9.0.4` |


Updates `bandit` from 1.9.2 to 1.9.3
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.9.2...1.9.3)

Updates `setuptools` from 80.9.0 to 80.10.2
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v80.9.0...v80.10.2)

Updates `ruff` from 0.14.7 to 0.14.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.7...0.14.14)

Updates `pytest` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.1...9.0.2)

Updates `gitpython` from 3.1.45 to 3.1.46
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.45...3.1.46)

Updates `cachetools` from 6.2.1 to 6.2.6
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v6.2.1...v6.2.6)

Updates `build` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.3.0...1.4.0)

Updates `tox` from 4.32.0 to 4.34.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.32.0...4.34.1)

Updates `sphinx` from 9.0.0 to 9.0.4
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v9.0.4/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v9.0.0...v9.0.4)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: setuptools
  dependency-version: 80.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-version: 0.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: gitpython
  dependency-version: 3.1.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: cachetools
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: build
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: tox
  dependency-version: 4.34.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 1, 2026 07:35
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 1, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 1, 2026
@dependabot dependabot bot deleted the dependabot/pip/all-minor-and-patch-dependency-updates-9500d9847e branch March 1, 2026 07:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants