Skip to content

Bump the dependencies group in /.config with 6 updates #4599

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
ansibuddy merged 1 commit into from
May 4, 2025
Merged

Bump the dependencies group in /.config with 6 updates #4599

ansibuddy merged 1 commit into from
May 4, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 4, 2025

Bumps the dependencies group in /.config with 6 updates:

Package From To
cryptography 44.0.2 44.0.3
charset-normalizer 3.4.1 3.4.2
pymdown-extensions 10.14.3 10.15
setproctitle 1.3.5 1.3.6
setuptools 79.0.1 80.3.0
termcolor 3.0.1 3.1.0

Updates cryptography from 44.0.2 to 44.0.3

Changelog

Sourced from cryptography's changelog.

44.0.3 - 2025-05-02


* Fixed compilation when using LibreSSL 4.1.0.

.. _v44-0-2:

Commits

Updates charset-normalizer from 3.4.1 to 3.4.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Changelog

Sourced from charset-normalizer's changelog.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
Commits
  • 6422af1 📝 update release date
  • 0e60ec1 🔖 Release 3.4.2 (#614)
  • f6630ce ⬆️ Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (#617)
  • 677c999 ⬆️ Bump actions/download-artifact from 4.2.1 to 4.3.0 (#618)
  • 960ab1e ⬆️ Bump actions/setup-python from 5.5.0 to 5.6.0 (#619)
  • 6eb6325 ⬆️ Bump github/codeql-action from 3.28.10 to 3.28.16 (#620)
  • c99c0f2 ⬆️ Update coverage requirement from <7.7,>=7.2.7 to >=7.2.7,<7.9 (#606)
  • 270f28e ⬆️ Bump actions/setup-python from 5.4.0 to 5.5.0 (#607)
  • d4d89a0 ⬆️ Bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (#608)
  • 905fcf5 ⬆️ Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#609)
  • Additional commits viewable in compare view

Updates pymdown-extensions from 10.14.3 to 10.15

Release notes

Sourced from pymdown-extensions's releases.

10.15.0

  • NEW: SuperFences: Add relaxed_headers option which can tolerate bad content in the fenced code header. When enabled, code blocks with bad content in the header will likely still convert into code blocks, often respecting the specified language.
  • NEW: Add type hints to the Blocks interface and a few additional files.
  • FIX: Blocks: Fix some corner cases of nested blocks with lists.
  • FIX: Tab and Tabbed: Fix a case where tabs could fail if combine_header_slug was enabled and there was no header.
Commits
  • d32c6b3 Update changelog
  • 9f5c3ca Finish typing the Blocks interface and type additional referenced files (#2652)
  • 84a087b add type annotations to block.py (#2634)
  • 70e475c Docs: update JS deps
  • 0eb2047 Provide option for more relaxed fenced code headers (#2649)
  • 677a863 Fix some corner cases with Blocks and nested lists (#2651)
  • f655468 Fix a corner case with combine_header_slug and Tab and Tabbed
  • 3e8a097 Only show "steps" as direct list items
  • f8d7f62 Docs: Mermaid Pie chart is now considered viable and update version used
  • 48cda23 Add a note about snippet syntax and XML files
  • Additional commits viewable in compare view

Updates setproctitle from 1.3.5 to 1.3.6

Changelog

Sourced from setproctitle's changelog.

Version 1.3.6

  • Add support for free-threading (issue #147)
Commits

Updates setuptools from 79.0.1 to 80.3.0

Changelog

Sourced from setuptools's changelog.

v80.3.0

Features

v80.2.0

Features

  • Restored support for install_scripts --executable (and classic behavior for the executable for those invocations). Instead, build_editable provides the portable form of the executables for downstream installers to rewrite. (#4934)

v80.1.0

Features

  • Added a deadline of Oct 31 to the setup.py install deprecation.

Bugfixes

  • With setup.py install --prefix=..., fall back to distutils install rather than failing. Note that running setup.py install is deprecated. (#3143)

v80.0.1

Bugfixes

  • Fixed index_url logic in develop compatibility shim. (#4966)

v80.0.0

Bugfixes

  • Update test to honor new behavior in importlib_metadata 8.7. (#4961)

... (truncated)

Commits

Updates termcolor from 3.0.1 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group in /.config with 6 updates
c60db49 
Bumps the dependencies group in /.config with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `44.0.3` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.1` | `3.4.2` |
| [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.14.3` | `10.15` |
| [setproctitle](https://github.com/dvarrazzo/py-setproctitle) | `1.3.5` | `1.3.6` |
| [setuptools](https://github.com/pypa/setuptools) | `79.0.1` | `80.3.0` |
| [termcolor](https://github.com/termcolor/termcolor) | `3.0.1` | `3.1.0` |


Updates `cryptography` from 44.0.2 to 44.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.2...44.0.3)

Updates `charset-normalizer` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.1...3.4.2)

Updates `pymdown-extensions` from 10.14.3 to 10.15
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@10.14.3...10.15)

Updates `setproctitle` from 1.3.5 to 1.3.6
- [Changelog](https://github.com/dvarrazzo/py-setproctitle/blob/master/HISTORY.rst)
- [Commits](dvarrazzo/py-setproctitle@version-1.3.5...version-1.3.6)

Updates `setuptools` from 79.0.1 to 80.3.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v79.0.1...v80.3.0)

Updates `termcolor` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@3.0.1...3.1.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 44.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pymdown-extensions
  dependency-version: '10.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: setproctitle
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: setuptools
  dependency-version: 80.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: termcolor
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependabot-deps-updates skip-changelog Can be missed from the changelog. labels May 4, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 4, 2025 06:38
@abhikdps abhikdps removed the major label May 4, 2025
@ansibuddy ansibuddy enabled auto-merge (squash) May 4, 2025 12:37
@ansibuddy ansibuddy merged commit 4943198 into main May 4, 2025
29 of 33 checks passed
@ansibuddy ansibuddy deleted the dependabot/pip/dot-config/dependencies-db7aa269f3 branch May 4, 2025 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ansibuddy ansibuddy ansibuddy approved these changes

Assignees

No one assigned

Labels

dependencies skip-changelog Can be missed from the changelog.

Projects

🧰 devtools project board
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ansibuddy @abhikdps