Skip to content

build(deps): bump the pip group with 28 updates#539

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/pip-61cbcc13aa
Open

build(deps): bump the pip group with 28 updates#539
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/pip-61cbcc13aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on markupsafe, python-box, pyyaml, data-to-xml, gitpython, lizard, mypy, packaging, pandas-stubs, pre-commit, psutil, pydeps, pygal, pytest, pytest-benchmark, pytest-cov, pytest-item-dict, pytest-mock, pytest-randomly, pytest-rerunfailures, ruff, types-psutil, types-pyyaml, types-requests, types-toml, vulture, yamllint and pudb to permit the latest version.
Updates markupsafe to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505

Version 3.0.2

Released 2024-10-18

  • Fix compatibility when __str__ returns a str subclass. :issue:472
  • Build requires setuptools >= 70.1. :issue:475

Version 3.0.1

Released 2024-10-08

  • Address compiler warnings that became errors in GCC 14. :issue:466
  • Fix compatibility with proxy objects. :issue:467

Version 3.0.0

Released 2024-10-07

  • Support Python 3.13 and its experimental free-threaded build. :pr:461
  • Drop support for Python 3.7 and 3.8.
  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. :pr:348
  • Change distutils imports to setuptools. :pr:399
  • Use deferred evaluation of annotations. :pr:400
  • Update signatures for Markup methods to match str signatures. Use positional-only arguments. :pr:400
  • Some str methods on Markup no longer escape their argument: strip, lstrip, rstrip, removeprefix, removesuffix, partition, and rpartition; replace only escapes its new argument. These methods are conceptually linked to search methods such as in, find, and index, which already do not escape their argument.

... (truncated)

Commits

Updates python-box to 7.4.1

Release notes

Sourced from python-box's releases.

Version 7.4.1

  • Fixing #303 Wrong version number (7.3.3) in 7.4.0 release (thanks to Michał Górny)
Changelog

Sourced from python-box's changelog.

Version 7.4.1

  • Fixing #303 Wrong version number (7.3.3) in 7.4.0 release (thanks to Michał Górny)

Version 7.4.0

  • Adding #297 'box_dots_exclude' parameter to keep certain keys with dots from being broken down (thanks to J vanBemmel)
  • Adding #301 support for TOON serialization format (thanks to richieadler)
  • Adding support for YAML width
  • Adding support for Python 3.14
  • Fixing #291 adding frozen boxes (thanks to m-janicki)
  • Removing support for Python 3.9 as it is EOL

Version 7.3.3

  • Mistakenly released 7.4.0 as 7.3.3 in PyPI, same as above

Version 7.3.2

  • Fixing #288 default get value error when using box_dots (thanks to Sébastien Weber)

Version 7.3.1

  • Fixing #275 default_box_create_on_get is ignored with from_yaml (thanks to Ward Loos)
  • Fixing #285 Infinite Recursion when accessing non existent list index in a DefaultBox with box_dots (thanks to Jesper Schlegel)

Version 7.3.0

  • Adding tests and Cython releases for Python 3.13
  • Fixing #281 consistent error message about missing YAML parser (thanks to J vanBemmel)
  • Removing support for Python 3.8 as it is EOL

Version 7.2.0

  • Adding #266 support for accessing nested items in BoxList using numpy-style tuple indexing (thanks to Bit0r)
  • Adding tests and Cython releases for Python 3.12
  • Fixing #251 support for circular references in lists (thanks to Muspi Merol)
  • Fixing #261 altering all __repr__ methods so that subclassing will output the correct class name (thanks to Gabriel Tkacz)
  • Fixing #267 Fix type 'int' not iterable (thanks to YISH)

Version 7.1.1

... (truncated)

Commits

Updates pyyaml to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

6.0.1 (2023-07-18)

6.0 (2021-10-13)

5.4.1 (2021-01-20)

  • yaml/pyyaml#480 -- Fix stub compat with older pyyaml versions that may unwittingly load it

5.4 (2021-01-19)

5.3.1 (2020-03-18)

  • yaml/pyyaml#386 -- Prevents arbitrary code execution during python/object/new constructor

5.3 (2020-01-06)

... (truncated)

Commits

Updates data-to-xml to 1.0.14

Release notes

Sourced from data-to-xml's releases.

v1.0.14 (2026-05-17)

Detailed Changes: v1.0.13...v1.0.14

Changelog

Sourced from data-to-xml's changelog.

v1.0.14 (2026-05-17)

v1.0.13 (2026-05-17)

Bug Fixes

v1.0.12 (2026-05-17)

Bug Fixes

v1.0.11 (2026-05-17)

Bug Fixes

v1.0.10 (2026-05-17)

Bug Fixes

Chores

v1.0.9 (2024-11-13)

v1.0.8 (2024-11-13)

... (truncated)

Commits

Updates gitpython to 3.1.50

Release notes

Sourced from gitpython's releases.

3.1.50

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.49...3.1.50

Commits

Updates lizard to 1.23.0

Release notes

Sourced from lizard's releases.

1.23.0

New Features

  • Python — structural pattern matching (match/case, PEP 634, Python 3.10+) is now counted correctly for cyclomatic complexity (including --modified mode)

Bug Fixes

  • C/C++: stop raw string literals (R"(…)") from swallowing following code in the tokenizer (issue #478, PR #479)

Published to PyPI via GitHub Actions (release.yml).

Changelog

Sourced from lizard's changelog.

1.23.0

New Features

  • Python — structural pattern matching (match/case, PEP 634, Python 3.10+) is now counted correctly:
    • Each case arm adds +1 to cyclomatic complexity (like an if/elif branch)
    • case guards (case x if cond:) count the if as a normal condition
    • case and match used as plain variable names (assignments, attribute access, function calls, subscripts, tuple unpacking, annotated assignments) are not counted — soft-keyword disambiguation via lookahead in preprocess
    • --modified: an entire match/case block counts as 1, consistent with switch/case in C-family languages

Bug Fixes

  • C/C++: stop raw string literals (R"(…)") from swallowing following code in the tokenizer (issue #478, PR #479)

1.22.2

Bug Fixes

  • TypeScript: handle function stack correctly when starting a new function (avoids incorrect nesting / metrics)
  • Duplicate finder: avoid double-counting overlapping duplicate code ranges (PR #474)

Security

  • Demo Flask app (index.py): enable debug only when FLASK_DEBUG is set, not by default (PR #475)

1.22.1

Bug Fixes

  • TypeScript: prevent IndexError when parsing nested template literals (issue #471, PR #472)

1.22.0

Improvements

  • TypeScript, TSX, and JSX — parsing and metrics are much closer to real code (PRs #467, #468):
    • TSX/JSX use the same TypeScriptStates path as .ts (tokenizer-only layer for JSX), so class methods and CCN are no longer wrong or double-counted.
    • Skips that reduce false functions: interface { … } method signatures, type … = value types, abstract method declarations without bodies; ES2022 private names #foo in tokenization; smarter parameters (type keyword noise, commas inside Map<…>, etc.).
    • Class field arrows (handleClick = () => {}) are reported under the field name instead of (anonymous); better call vs definition and class-body cases (typed fields, static / async fields, LWC-style async x => fields, field = CONST.PROP;, JSX attribute expressions).

1.21.7

Bug Fixes

  • Java: treat record as a contextual keyword (field and method name record are no longer parsed as a record class); track brace depth for field array/object initializers so = { } does not end the class body before a static block (issue #470)

1.21.6

Improvements

  • Release workflow: clarify how PyPI matches trusted publishers (repository owner id, workflow file, environment); add optional PYPI_API_TOKEN secret for token-based upload when OIDC is not used

1.21.5

Improvements

  • Release workflow: publish to PyPI without a GitHub Environment so trusted publishing matches PyPI’s default GitHub publisher settings (owner, repository, release.yml, empty environment name)

1.21.4

... (truncated)

Commits
  • 06284ec Release 1.23.0
  • 414f806 fix(clike): improve handling of C++ raw string literals in tokenizer
  • 6c3ea38 Merge pull request #479 from StressTestor/fix/478-cpp-raw-string-overmatch
  • bfaa1b1 fix(clike): stop C++ raw string literals from swallowing following code
  • 82c8e7a Merge pull request #477 from ixnes/fix/python_match_case
  • 0d22cc7 added support for python match-case statements for normal and modified cyclom...
  • bd261a1 Release 1.22.2
  • 147b163 fix: handle function stack correctly when starting a new function in TypeScri...
  • a1d1cac Merge pull request #475 from tomaioo/fix/security/flask-debug-mode-enabled-in...
  • 142c7c5 fix(security): 2 improvements across 1 files
  • Additional commits viewable in compare view

Updates mypy to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

  • Enable incremental self-compilation (Vaggelis Danias, PR 21369)
  • Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)
  • Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)
  • Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

  • Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)
  • Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

... (truncated)

Commits

Updates packaging to 26.2

Release notes

Sourced from packaging's releases.

26.2

What's Changed

Fixes:

Documentation:

Internal:

New Contributors

Full Changelog: pypa/packaging@26.1...26.2

Changelog

Sourced from packaging's changelog.

26.2 - 2026-04-24


Fixes:

    

  • Fix incorrect sysconfig var name for pyemscripten in (:pull:1160)
    • 

  • Make Version, Specifier, SpecifierSet, Tag, Marker, and Requirement pickle-safe
    
and backward-compatible with pickles created in 25.0-26.1 (including references to the removed
    
packaging._structures module) (:pull:1163, :pull:1168, :pull:1170, :pull:1171)
    • 

  • Re-export ExceptionGroup in metadata for now in (:pull:1164)
    • 



Documentation:


    

  • Add errors section and fix missing details in (:pull:1159)
    • 

  • Document our property-based test suite in (:pull:1167)
    • 

  • Fix a DirectUrl typo in (:pull:1169)
    • 

  • Add example of is_unsatisfiable in (:pull:1166)
    • 



Internal:


    

  • Enable the auditor persona on zizmor in (:pull:1158)
    • 

  • Test new pickle guarantees in (:pull:1174)
    • 

  • Use new native ReadTheDocs uv integration in (:pull:1175)
    • 



26.1 - 2026-04-14

Features:

  • PEP 783: add handling for Emscripten wheel tags in (:pull:804) (old name used in implementation, fixed in next release)
  • PEP 803: add handling for the abi3.abi3t free-threading tag in (:pull:1099)
  • PEP 735: add packaging.dependency_groups module, based on the dependency-groups package in (:pull:1065)
  • Add the packaging.direct_url module in (:pull:944)
  • Add the packaging.errors module in (:pull:1071)
  • Add SpecifierSet.is_unsatisfiable using ranges (new internals that will be expanded in future versions) in (:pull:1119)
  • Add create_compatible_tags_selector to select compatible tags in (:pull:1110)
  • Add a key argument to SpecifierSet.filter() in (:pull:1068)
  • Support & and | for Marker's in (:pull:1146)
  • Normalize Version.__replace__ and add Version.from_parts in (:pull:1078)
  • Add an option to validate compressed tag set sort order in parse_wheel_filename in (:pull:1150)

Behavior adaptations:

  • Narrow exclusion of pre-releases for <V.postN to match spec in (:pull:1140)
  • Narrow exclusion of post-releases for >V to match spec in (:pull:1141)
  • Rename format_full_version to _format_full_version to make it visibly private in (:pull:1125)
  • Restrict local version to ASCII in (:pull:1102)

Pylock (PEP 751) updates:

... (truncated)

Commits

Updates pandas-stubs to 3.0.3.260530

Commits
  • 1a40eec Version 3.0.3.260530
  • 0f063ec Make mypy reject float(Series) calls (#1753)
  • a073669 GH1415 Enhance typing of Series[Categorical] (#1748)
  • 9df3c52 TYP: GH1727 Narrow Series.to_numpy return types based on the dtype argument (...
  • 2da5f78 GH1742 fix nightly CI (#1747)
  • 84e7d1a BUG: allow kwargs in Styler apply_index and map_index (#1725)
  • 82c9851 GH1654 Pandas 3.0 support (#1741)
  • 4f6f533 MNT: Fix missing check/assert_type harness where missing (#1749)
  • 3bbd508 chore(ci): declare contents: read on test (#1751)
  • ee82af5 Modernize project settings in pyproject.toml (#1746)
  • Additional commits viewable in compare view

Updates pre-commit to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

... (truncated)

Commits
  • f35134b v4.6.0
  • 2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
  • d7dee32 make --hook-dir optional for hook-impl
  • 965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
  • 2eacc06 --hook-type is required for hook-impl
  • f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
  • 054cc5b [pre-commit.ci] pre-commit autoupdate
  • 5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
  • a5d9114 [pre-commit.ci] pre-commit autoupdate
  • 129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
  • Additional commits viewable in compare view

Updates psutil to 7.2.2

Changelog

Sourced from psutil's changelog.

7.2.2 — 2026-01-28 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:2705: [Linux]: :meth:Process.wait now uses pidfd_open() + poll() (no busy loop). Requires Linux >= 5.3 and Python >= 3.9.
  • :gh:2705: [macOS], [BSD]: :meth:Process.wait now uses kqueue() (no busy loop).

Bug fixes

  • :gh:2701, [macOS]: fix compilation error on macOS < 10.7. (patch by :user:Sergey Fedorov <barracuda156>)
  • :gh:2707, [macOS]: fix potential memory leaks in error paths of :meth:Process.memory_full_info and :meth:Process.threads.
  • :gh:2708, [macOS]: :meth:Process.cmdline and :meth:Process.environ may fail with OSError: [Errno 0] Undefined error (from sysctl(KERN_PROCARGS2)). They now raise :exc:AccessDenied instead.

7.2.1 — 2025-12-29 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:2699, [FreeBSD], [NetBSD]: :func:heap_info does not detect small allocations (<= 1K). In order to fix that, we now flush internal jemalloc cache before fetching the metrics.

7.2.0 — 2025-12-23 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:1275: new :func:heap_info and :func:heap_trim functions, providing direct access to the platform's native C :term:heap allocator (glibc, mimalloc, libmalloc). Useful to create tools to detect memory leaks.
  • :gh:2403, [Linux]: publish wheels for Linux musl.
  • :gh:2680: unit tests are no longer installed / part of the distribution. They now live under tests/ instead of psutil/tests.

Bug fixes

  • :gh:2684, [FreeBSD], [critical]: compilation fails on FreeBSD 14 due to missing include.
  • :gh:2691, [Windows]: fix memory leak in :func:net_if_stats due to missing Py_CLEAR.

Compatibility notes

... (truncated)

Commits
  • 9eea97d Pre-release
  • 938ac64 Rm sphinxcontrib.googleanalytics; override layout.html
  • 9dcbb7e Add sphinxcontrib-googleanalytics to requirements.txt
  • 76eaf9a Try to add google analytics to doc
  • de1cafa Update doc mentioning Process.wait() internal details
  • bb30943 Refact can_use_pidfd_open() and can_use_kqueue()
  • a571717 #2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)
  • 8b98c3e Pre-release
  • 700b7e6 [macOS] fix potential leaks in error paths (#2707)
  • 7cc7923 Windows / cmdline(): be more defensive in free()ing in case of error
  • Additional commits viewable in compare view

Updates pydeps to 3.0.6

Changelog

Sourced from pydeps's changelog.

Changelog

v2.0.0

Python 3.8+ only.

v1.10.12

Fix bug where sys.real_prefix had disappeared

v1.10.11

Look for top_level.txt in .egg-info and .egg directories as well.

v1.10.10

v1.10.9

v1.10.8

v1.10.7

v1.10.6

v1.10.5

Check PAT permissions.

v1.10.4

Jump start CD pipeline.

v1.10.3

Fix bug in finding site-packages directory on debian derivatives.

v1.10.2

Fix documentation bug.

v1.10.1

Support for rendering the graph in different directions using the --rankdir option.

v1.10.0

... (truncated)

Commits
  • ebff932 tagged-upversion
  • 5878ccc update version history
  • a70db76 Undeprecate --show-cycles; filter graph to cycle nodes only
  • a0f81d0 Use SPDX license identifier in setup.py

@dependabot
build(deps): bump the pip group with 28 updates
16391d3 
Updates the requirements on [markupsafe](https://github.com/pallets/markupsafe), [python-box](https://github.com/cdgriffith/Box), [pyyaml](https://github.com/yaml/pyyaml), [data-to-xml](https://github.com/anogowski/data-to-xml), [gitpython](https://github.com/gitpython-developers/GitPython), [lizard](https://github.com/terryyin/lizard), [mypy](https://github.com/python/mypy), [packaging](https://github.com/pypa/packaging), [pandas-stubs](https://github.com/pandas-dev/pandas-stubs), [pre-commit](https://github.com/pre-commit/pre-commit), [psutil](https://github.com/giampaolo/psutil), [pydeps](https://github.com/thebjorn/pydeps), [pygal](https://github.com/Kozea/pygal), [pytest](https://github.com/pytest-dev/pytest), [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [pytest-item-dict](https://github.com/anogowski/pytest-item-dict), [pytest-mock](https://github.com/pytest-dev/pytest-mock), [pytest-randomly](https://github.com/pytest-dev/pytest-randomly), [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures), [ruff](https://github.com/astral-sh/ruff), [types-psutil](https://github.com/python/typeshed), [types-pyyaml](https://github.com/python/typeshed), [types-requests](https://github.com/python/typeshed), [types-toml](https://github.com/python/typeshed), [vulture](https://github.com/jendrikseipp/vulture), [yamllint](https://github.com/adrienverge/yamllint) and [pudb](https://github.com/inducer/pudb) to permit the latest version.

Updates `markupsafe` to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `python-box` to 7.4.1
- [Release notes](https://github.com/cdgriffith/Box/releases)
- [Changelog](https://github.com/cdgriffith/Box/blob/master/CHANGES.rst)
- [Commits](cdgriffith/Box@7.2.0...7.4.1)

Updates `pyyaml` to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.1...6.0.3)

Updates `data-to-xml` to 1.0.14
- [Release notes](https://github.com/anogowski/data-to-xml/releases)
- [Changelog](https://github.com/anogowski/data-to-xml/blob/main/CHANGELOG.md)
- [Commits](anogowski/data-to-xml@v1.0.9...v1.0.14)

Updates `gitpython` to 3.1.50
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.44...3.1.50)

Updates `lizard` to 1.23.0
- [Release notes](https://github.com/terryyin/lizard/releases)
- [Changelog](https://github.com/terryyin/lizard/blob/master/CHANGELOG.md)
- [Commits](terryyin/lizard@1.17.31...1.23.0)

Updates `mypy` to 2.1.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.0...v2.1.0)

Updates `packaging` to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@25.0...26.2)

Updates `pandas-stubs` to 3.0.3.260530
- [Changelog](https://github.com/pandas-dev/pandas-stubs/blob/main/docs/release_procedure.md)
- [Commits](pandas-dev/pandas-stubs@v2.3.0.250703...v3.0.3.260530)

Updates `pre-commit` to 4.6.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.6.0)

Updates `psutil` to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v7.0.0...v7.2.2)

Updates `pydeps` to 3.0.6
- [Release notes](https://github.com/thebjorn/pydeps/releases)
- [Changelog](https://github.com/thebjorn/pydeps/blob/master/CHANGELOG.md)
- [Commits](thebjorn/pydeps@v3.0.1...v3.0.6)

Updates `pygal` to 3.1.3
- [Release notes](https://github.com/Kozea/pygal/releases)
- [Changelog](https://github.com/Kozea/pygal/blob/master/docs/changelog.rst)
- [Commits](Kozea/pygal@3.0.5...3.1.3)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pytest-benchmark` from 5.1 to 5.2.3
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v5.1.0...v5.2.3)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.2.1...v7.1.0)

Updates `pytest-item-dict` to 1.3.7
- [Release notes](https://github.com/anogowski/pytest-item-dict/releases)
- [Changelog](https://github.com/anogowski/pytest-item-dict/blob/main/CHANGELOG.md)
- [Commits](anogowski/pytest-item-dict@v1.1.2...v1.3.7)

Updates `pytest-mock` to 3.15.1
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.14.1...v3.15.1)

Updates `pytest-randomly` to 4.1.0
- [Changelog](https://github.com/pytest-dev/pytest-randomly/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-randomly@3.16.0...4.1.0)

Updates `pytest-rerunfailures` to 16.4
- [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst)
- [Commits](pytest-dev/pytest-rerunfailures@16.3...16.4)

Updates `ruff` to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.16...0.15.20)

Updates `types-psutil` to 7.2.2.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pyyaml` to 6.0.12.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-requests` to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-toml` to 0.10.8.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `vulture` to 2.16
- [Release notes](https://github.com/jendrikseipp/vulture/releases)
- [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md)
- [Commits](jendrikseipp/vulture@v2.14...v2.16)

Updates `yamllint` to 1.38.0
- [Release notes](https://github.com/adrienverge/yamllint/releases)
- [Changelog](https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst)
- [Commits](adrienverge/yamllint@v1.37.1...v1.38.0)

Updates `pudb` to 2025.1.5
- [Release notes](https://github.com/inducer/pudb/releases)
- [Commits](inducer/pudb@v2025.1...v2025.1.5)

---
updated-dependencies:
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-box
  dependency-version: 7.4.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: data-to-xml
  dependency-version: 1.0.14
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: gitpython
  dependency-version: 3.1.50
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: lizard
  dependency-version: 1.23.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: mypy
  dependency-version: 2.1.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pandas-stubs
  dependency-version: 3.0.3.260530
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pydeps
  dependency-version: 3.0.6
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pygal
  dependency-version: 3.1.3
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest-benchmark
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest-item-dict
  dependency-version: 1.3.7
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest-mock
  dependency-version: 3.15.1
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest-randomly
  dependency-version: 4.1.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pytest-rerunfailures
  dependency-version: '16.4'
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: types-psutil
  dependency-version: 7.2.2.20260518
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260518
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: types-toml
  dependency-version: 0.10.8.20260518
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: vulture
  dependency-version: '2.16'
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: yamllint
  dependency-version: 1.38.0
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pudb
  dependency-version: 2025.1.5
  dependency-type: direct:development
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 6, 2026
@vercel

vercel Bot commented Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
command-ghostwriter Ready Ready Preview, Comment Jul 6, 2026 11:07am

@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
See the Details below.

License Issues

pyproject.toml

PackageVersionLicenseIssue Type
markupsafe>= 3.0.3,< 4NullUnknown License
python-box>= 7.4.1,< 8NullUnknown License
pyyaml>= 6.0.3,< 7NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/markupsafe >= 3.0.3,< 4 UnknownUnknown
pip/python-box >= 7.4.1,< 8 UnknownUnknown
pip/pyyaml >= 6.0.3,< 7 UnknownUnknown

Scanned Files

  • pyproject.toml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants