Bump the python group with 10 updates by dependabot[bot] · Pull Request #57 · trailofbits/vendetect

dependabot · 2026-02-13T07:25:54Z

Bumps the python group with 10 updates:

Package	From	To
rich	`14.0.0`	`14.3.2`
pdoc	`15.0.4`	`16.0.0`
pytest	`8.4.1`	`9.0.2`
pytest-cov	`6.2.1`	`7.0.0`
ruff	`0.12.3`	`0.15.0`
mypy	`1.16.1`	`1.19.1`
types-html5lib	`1.1.11.20250708`	`1.1.11.20251117`
types-requests	`2.32.4.20250611`	`2.32.4.20260107`
twine	`6.1.0`	`6.2.0`
build	`1.2.2.post1`	`1.4.0`

Updates rich from 14.0.0 to 14.3.2

Release notes

Sourced from rich's releases.

The ZWJy release

A fix for cell_len edge cases

[14.3.2] - 2026-02-01

Fixed

Fixed solo ZWJ crash Textualize/rich#3953

Fixed control codes reporting width of 1 Textualize/rich#3953

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

Fixed characters out of unicode range reporting a cell size if 0 Textualize/rich#3944

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

IPython now respects when a Console instance is passed to pretty.install Textualize/rich#3915

Fixed extraneous blank line on non-interactive disabled Progress Textualize/rich#3905

Fixed extra padding on first cell in columns Textualize/rich#3935

Fixed trailing whitespace removed when soft_wrap=True Textualize/rich#3937

Fixed style new-lines when soft_wrap = True and a print style is set Textualize/rich#3938

Added

Added support for some multi-codepopint glyphs (will fix alignment issues for these characters) Textualize/rich#3930

Added support for UNICODE_VERSION environment variable Textualize/rich#3930

Added last_render_height property to LiveRender Textualize/rich#3934

Expose locals_max_depth and locals_overflow in traceback.install Textualize/rich#3906

Added Segment.split_lines_terminator Textualize/rich#3938

Changed

cells.cell_len now has a unicode_version parameter (that you probably should never change) Textualize/rich#3930

Live will not write a new line if there was nothing rendered Textualize/rich#3934

Changed style of Markdown headers Textualize/rich#3942

Changed style of Markdown tables, added markdown.table.header and markdown.table.border styles Textualize/rich#3942

Changed style of Markdown rules Textualize/rich#3942

The Easy as Pi release

This release bumps Python compatibility to the just-released Python 3.14.

... (truncated)

Changelog

Sourced from rich's changelog.

[14.3.2] - 2026-02-01

Fixed

Fixed solo ZWJ crash Textualize/rich#3953

Fixed control codes reporting width of 1 Textualize/rich#3953

[14.3.1] - 2026-01-24

Fixed

Fixed characters out of unicode range reporting a cell size if 0 Textualize/rich#3944

[14.3.0] - 2026-01-24

Fixed

IPython now respects when a Console instance is passed to pretty.install Textualize/rich#3915

Fixed extraneous blank line on non-interactive disabled Progress Textualize/rich#3905

Fixed extra padding on first cell in columns Textualize/rich#3935

Fixed trailing whitespace removed when soft_wrap=True Textualize/rich#3937

Fixed style new-lines when soft_wrap = True and a print style is set Textualize/rich#3938

Added

Added support for some multi-codepopint glyphs (will fix alignment issues for these characters) Textualize/rich#3930

Added support for UNICODE_VERSION environment variable Textualize/rich#3930

Added last_render_height property to LiveRender Textualize/rich#3934

Expose locals_max_depth and locals_overflow in traceback.install Textualize/rich#3906

Added Segment.split_lines_terminator Textualize/rich#3938

Changed

cells.cell_len now has a unicode_version parameter (that you probably should never change) Textualize/rich#3930

Live will not write a new line if there was nothing rendered Textualize/rich#3934

Changed style of Markdown headers Textualize/rich#3942

Changed style of Markdown tables, added markdown.table.header and markdown.table.border styles Textualize/rich#3942

Changed style of Markdown rules Textualize/rich#3942

[14.2.0] - 2025-10-09

Changed

Python3.14 compatibility Textualize/rich#3861

Fixed

Fixed exception when calling inspect on objects with unusual __qualname__ attribute Textualize/rich#3894

[14.1.0] - 2025-06-25

... (truncated)

Commits

0752ff0 Merge pull request #3953 from Textualize/zwj-fix
54ae0cf simplify
07edb85 refine
31930dd fix test
454fcfc stupid comment
13f87a4 Fix ZWJ and edge cases
1d402e0 fix dates
f2a1c3b Merge pull request #3944 from Textualize/nerf-fonts
2e5a5da changelog
73ee823 fix fonts
Additional commits viewable in compare view

Updates pdoc from 15.0.4 to 16.0.0

Changelog

Sourced from pdoc's changelog.

2025-10-27: pdoc 16.0.0

pdoc has a new logo. 🐍 (#838, @mhils)

Add support for Python 3.14. (#843, @mhils)

Drop support for Python 3.9, which as reached end of life. (#842, @mhils)

Fix linking of identifiers that contain unicode characters. (#831, @iFreilicht)

Replace vendored version of markdown2 with the official upstream

Add support for keyword args for Google flavor docs. (#840, @aleksslitvinovs)

Add support for Pydantic-style field docstrings, e.g. pydantic.Field(description="...") (#802, @jinnovation)

Commits

6677d73 pdoc 16.0.0
3f75834 Support Pydantic model defaults + field descriptions (#802)
f19fbf7 Add support for Python 3.14 (#843)
8aa648f Bump mhils/workflows in the dependencies group (#844)
b782455 Add support for keyword args for Google flavor docs (#840)
34c7759 Drop Support for Python 3.9 (#842)
0f27371 fix: remove hard-coded pdoc mention from title in template (#841)
a12c236 Add new pdoc logo (#838)
0f308ab Bump mhils/workflows in the dependencies group (#837)
7c880c5 Replace vendored markdown2 w/ official upstream (#836)
Additional commits viewable in compare view

Updates pytest from 8.4.1 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

... (truncated)

Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view

Updates pytest-cov from 6.2.1 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

Dropped support for subprocesses measurement.

It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

.. code-block:: ini

[run] patch = subprocess

This release also requires at least coverage 7.10.6.

Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

Removed some not really necessary testing deps like six.

6.3.0 (2025-09-06)

Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.

Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.

Commits

224d896 Bump version: 6.3.0 → 7.0.0
73424e3 Cleanup the docs a bit.
36f1cc2 Bump pins in template.
f299c59 Bump the github-actions group with 2 updates
25f0b2e Update docs/config.rst
bb23eac Improve configuration docs
a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
82f9993 Update changelog.
211b5cd Fix links.
97aadd7 Update some ci config, reformat and apply some lint fixes.
Additional commits viewable in compare view

Updates ruff from 0.12.3 to 0.15.0

Release notes

Sourced from ruff's releases.

0.15.0

Release Notes

Released on 2026-02-03.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now formats your code according to the 2026 style guide. See the formatter section below or in the blog post for a detailed list of changes.
The linter now supports block suppression comments. For example, to suppress N803 for all parameters in this function:
# ruff: disable[N803]
def foo(
    legacyArg1,
    legacyArg2,
    legacyArg3,
    legacyArg4,
): ...
# ruff: enable[N803]
See the documentation for more details.
The ruff:alpine Docker image is now based on Alpine 3.23 (up from 3.21).

The ruff:debian and ruff:debian-slim Docker images are now based on Debian 13 "Trixie" instead of Debian 12 "Bookworm."

Binaries for the ppc64 (64-bit big-endian PowerPC) architecture are no longer included in our releases. It should still be possible to build Ruff manually for this platform, if needed.

Ruff now resolves all extended configuration files before falling back on a default Python version.
Stabilization

The following rules have been stabilized and are no longer in preview:

blocking-http-call-httpx-in-async-function (ASYNC212)

blocking-path-method-in-async-function (ASYNC240)

blocking-input-in-async-function (ASYNC250)

map-without-explicit-strict (B912)

if-exp-instead-of-or-operator (FURB110)

single-item-membership-test (FURB171)

missing-maxsplit-arg (PLC0207)

unnecessary-lambda (PLW0108)

unnecessary-empty-iterable-within-deque-call (RUF037)

in-empty-collection (RUF060)

legacy-form-pytest-raises (RUF061)

non-octal-permissions (RUF064)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.0

Released on 2026-02-03.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now formats your code according to the 2026 style guide. See the formatter section below or in the blog post for a detailed list of changes.
The linter now supports block suppression comments. For example, to suppress N803 for all parameters in this function:
# ruff: disable[N803]
def foo(
    legacyArg1,
    legacyArg2,
    legacyArg3,
    legacyArg4,
): ...
# ruff: enable[N803]
See the documentation for more details.
The ruff:alpine Docker image is now based on Alpine 3.23 (up from 3.21).

The ruff:debian and ruff:debian-slim Docker images are now based on Debian 13 "Trixie" instead of Debian 12 "Bookworm."

Binaries for the ppc64 (64-bit big-endian PowerPC) architecture are no longer included in our releases. It should still be possible to build Ruff manually for this platform, if needed.

Ruff now resolves all extended configuration files before falling back on a default Python version.
Stabilization

The following rules have been stabilized and are no longer in preview:

blocking-http-call-httpx-in-async-function (ASYNC212)

blocking-path-method-in-async-function (ASYNC240)

blocking-input-in-async-function (ASYNC250)

map-without-explicit-strict (B912)

if-exp-instead-of-or-operator (FURB110)

single-item-membership-test (FURB171)

... (truncated)

Commits

ce5f7b6 Bump 0.15.0 (#23055)
b4e40f5 [ty] Fix __contains__ to respect descriptors (#23056)
848cb72 [ty] Fix narrowing of nonlocal variables with conditional assignments (#22966)
da7f33a [ty] Add a diagnostic for Final without assignment (#23001)
e65f9a6 Document markdown formatting feature (#22990)
c0c1b98 Format markdown code blocks with line-by-line regex parse (#22996)
9f8f3e1 Allow positional-only params with defaults in method overrides (#23037)
ef83810 [ty] ecosystem-analyzer: Support bare git repositories (#23054)
54dfee4 Customize where the fix_title sub-diagnostic appears (#23044)
b534607 2026 Ruff Formatter Style (#22735)
Additional commits viewable in compare view

Updates mypy from 1.16.1 to 1.19.1

Changelog

Sourced from mypy's changelog.

Mypy 1.19.1

Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)

Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)

Allow types.NoneType in match cases (A5rocks, PR 20383)

Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)

Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)

Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)

Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)

Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

A5rocks

BobTheBuidler

bzoracler

Chainfire

Christoph Tyralla

David Foster

Frank Dana

Guo Ci

iap

Ivan Levkivskyi

James Hilton-Balfe

jhance

Joren Hammudoglu

Jukka Lehtosalo

KarelKenens

Kevin Kannammalil

Marc Mueller

Michael Carlstrom

Michael J. Sullivan

Piotr Sawicki

Randolf Scholz

Shantanu

Sigve Sebastian Farstad

sobolevn

Stanislav Terliakov

Stephen Morton

Theodore Ando

Thiago J. Barbalho

wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.18

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance

... (truncated)

Commits

412c19a Bump version to 1.19.1
20aea0a Update changelog for 1.19.1 (#20414)
2b23b50 Serialize raw errors in cache metas (#20372)
f60f90f Fail on PyPy in main instead of setup.py (#20389)
58d485b Fail with an explicit error on PyPy (#20384)
a4b31a2 Allow types.NoneType in match cases (#20383)
8a6eff4 [mypyc] fix generator regression with empty tuple (#20371)
70eceea Fix noncommutative joins with bounded TypeVars (#20345)
3890fc4 Fix crash involving Unpack-ed TypeVarTuple (#20323)
c93d917 Fix crash on star import of redefinition (#20333)
Additional commits viewable in compare view

Updates types-html5lib from 1.1.11.20250708 to 1.1.11.20251117

Commits

See full diff in compare view

Updates types-requests from 2.32.4.20250611 to 2.32.4.20260107

Commits

See full diff in compare view

Updates twine from 6.1.0 to 6.2.0

Changelog

Sourced from twine's changelog.

twine 6.2.0 (2025-09-04)

Features ^^^^^^^^

Automatically refresh short-lived PyPI token in long running Trusted Publishing uploads.

In the event that a trusted publishing upload job is taking longer than the validity period of a trusted publishing token (15 minutes at the time of this writing), and we are already 10 minutes into that validity period, we will begin to attempt to replace the token on each subsequent request. ([#1246](https://github.com/pypa/twine/issues/1246) <https://github.com/pypa/twine/issues/1246>_)

Bugfixes ^^^^^^^^

Fix compatibility kludge for invalid License-File metadata entries emitted by build backends to work also with packaging version 24.0. ([#1217](https://github.com/pypa/twine/issues/1217) <https://github.com/pypa/twine/issues/1217>_)

Fix a couple of incorrectly rendered error messages. ([#1224](https://github.com/pypa/twine/issues/1224) <https://github.com/pypa/twine/issues/1224>_)

twine now enforces keyring >= 21.2.0, which was previously implicitly required by API usage. ([#1229](https://github.com/pypa/twine/issues/1229) <https://github.com/pypa/twine/issues/1229>_)

twine now catches configparser.Error to prevent accidental leaks of secret tokens or passwords to the user's console. ([#1240](https://github.com/pypa/twine/issues/1240) <https://github.com/pypa/twine/issues/1240>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

Remove hacks that support --skip-existing for indexes other than PyPI and TestPyPI.

To date, these hacks continue to accrue and there have been numerous issues with them, not the least of which being that every time we update them, the paid index providers change things to break the compatibility we implement for them. Beyond that, these hacks do not work when text is internationalized in the response from the index provider.

For a sample of past issues, see:

pypa/twine#1251

pypa/twine#918

pypa/twine#856

pypa/twine#693

pypa/twine#332 ([#1251](https://github.com/pypa/twine/issues/1251) <https://github.com/pypa/twine/issues/1251>_)

... (truncated)

Commits

14ceb29 Update changelog for 6.2.0 (#1264)
60e377b build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1263)
88821f2 feat(package): remove MD5 hashing entirely (#1262)
ce5fe53 build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0
6a696ed PEP 639 compliance
9175334 rename 1247.misc.rst to changelog/1247.misc.rst
d94a475 fix(tests): update expected error message
c1c02d1 Remove --skip-existing support for non-PyPI indices
a24d308 Set trusted publishing logging to INFO/WARN (#1247)
becf1a8 Fix py3.9 mypy error in __init__ around PackageMetadata
Additional commits viewable in compare view

Updates build from 1.2.2.post1 to 1.4.0

Release notes

Sourced from build's releases.

1.4.0

Add --quiet flag (PR #947)

Add option to dump PEP 517 metadata with --metadata (PR #940, PR #943)

Support UV environment variable (PR #971)

Remove a workaround for 3.14b1 (PR #960)

In 3.14 final release, color defaults to True already (PR #962)

Pass sp-repo-review (PR #942)

In pytest configuration, log_level is better than log_cli_level (PR #950)

Split up typing and mypy (PR #944)

Use types-colorama (PR #945)

In docs, first argument for _has_dependency is a name (PR #970)

Fix test failure when flit-core is installed (PR #921)

1.3.0

Add --config-json (PR #916, fixes issue #900)

Drop Python 3.8 (PR #891)

Test on Python 3.14, colorful help on 3.14+ (PR #895)

Fix ModuleNotFoundError when pip is not installed (PR #898)

Disable use of pip install --python for debundled pip (PR #861)

Don't pass no-wheel to virtualenv if it would warn (PR #892)

Optimize our tests to run faster (PR #871, #872, #738)

Allow running our tests without virtualenv (PR #911)

Fix issues in our tests (PR #824, #918, #870, #915, #862, #863, #899, #896, #854)

Use SPDX identifiers for our license metadata (PR #914)

Use dependency-groups for our development (PR #880)

Mention conda and update uv mention in README/docs (PR #842, #816, #917)

Changelog

Sourced from build's changelog.

1.4.0 (2026-01-08)

Add --quiet flag (:pr:947)

Add option to dump PEP 517 metadata with --metadata (:pr:940, :pr:943)

Support UV environment variable (:pr:971)

Remove a workaround for 3.14b1 (:pr:960)

In 3.14 final release, color defaults to True already (:pr:962)

Pass sp-repo-review (:pr:942)

In pytest configuration, log_level is better than log_cli_level (:pr:950)

Split up typing and mypy (:pr:944)

Use types-colorama (:pr:945)

In docs, first argument for _has_dependency is a name (PR :pr:970)

Fix test failure when flit-core is installed (PR :pr:921)

1.3.0 (2025-08-01)

Add --config-json (PR :pr:916, fixes issue :issue:900)

Drop Python 3.8 (PR :pr:891)

Test on Python 3.14, colorful help on 3.14+ (PR :pr:895)

Fix ModuleNotFoundError when pip is not installed (PR :pr:898)

Disable use of pip install --python for debundled pip (PR :pr:861)

Don't pass no-wheel to virtualenv if it would warn (PR :pr:892)

Optimize our tests to run faster (PR :pr:871, :pr:872, :pr:738)

Allow running our tests without virtualenv (PR :pr:911)

Fix issues in our tests (PR :pr:824, :pr:918, :pr:870, :pr:915, :pr:862, :pr:863, :pr:899, :pr:896, :pr:854)

Use SPDX identifiers for our license metadata (PR :pr:914)

... (truncated)

Commits

54f238d chore: prepare for 1.4.0 (#972)
f219276 docs: first argument for _has_dependency is a name (#970)
7adb29e fix: support UV environment variable (#971)
a40623b build(deps): bump actions/attest-build-provenance in the actions group (#968)
c8fae34 pre-commit: bump repositories (#965)
ed9c379 build(deps): bump actions/download-artifact in the actions group
0e44fd2 Add quiet flag (#947)
60e15ed chore: color defaults to True in 3.14 (#962)
0486d9d pre-commit: bump repositories (#961)
393b775 MNT: remove workaround for 3.14b1 (#960)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 10 updates: | Package | From | To | | --- | --- | --- | | [rich](https://github.com/Textualize/rich) | `14.0.0` | `14.3.2` | | [pdoc](https://github.com/mitmproxy/pdoc) | `15.0.4` | `16.0.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `9.0.2` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.2.1` | `7.0.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.12.3` | `0.15.0` | | [mypy](https://github.com/python/mypy) | `1.16.1` | `1.19.1` | | [types-html5lib](https://github.com/typeshed-internal/stub_uploader) | `1.1.11.20250708` | `1.1.11.20251117` | | [types-requests](https://github.com/typeshed-internal/stub_uploader) | `2.32.4.20250611` | `2.32.4.20260107` | | [twine](https://github.com/pypa/twine) | `6.1.0` | `6.2.0` | | [build](https://github.com/pypa/build) | `1.2.2.post1` | `1.4.0` | Updates `rich` from 14.0.0 to 14.3.2 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.0.0...v14.3.2) Updates `pdoc` from 15.0.4 to 16.0.0 - [Changelog](https://github.com/mitmproxy/pdoc/blob/main/CHANGELOG.md) - [Commits](mitmproxy/pdoc@v15.0.4...v16) Updates `pytest` from 8.4.1 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.1...9.0.2) Updates `pytest-cov` from 6.2.1 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.2.1...v7.0.0) Updates `ruff` from 0.12.3 to 0.15.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.3...0.15.0) Updates `mypy` from 1.16.1 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.16.1...v1.19.1) Updates `types-html5lib` from 1.1.11.20250708 to 1.1.11.20251117 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) Updates `types-requests` from 2.32.4.20250611 to 2.32.4.20260107 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) Updates `twine` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@6.1.0...6.2.0) Updates `build` from 1.2.2.post1 to 1.4.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.2.2.post1...1.4.0) --- updated-dependencies: - dependency-name: rich dependency-version: 14.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pdoc dependency-version: 16.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: ruff dependency-version: 0.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: types-html5lib dependency-version: 1.1.11.20251117 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: types-requests dependency-version: 2.32.4.20260107 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: twine dependency-version: 6.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: build dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 13, 2026

dependabot bot requested review from ESultanik and Ninja3047 as code owners February 13, 2026 07:25

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python group with 10 updates#57

Bump the python group with 10 updates#57
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-d0bbc886a0

dependabot bot commented on behalf of github Feb 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

The ZWJy release

[14.3.2] - 2026-02-01

Fixed

The Nerdy Fix release

[14.3.1] - 2026-01-24

Fixed

The more emojis release

[14.3.0] - 2026-01-24

Fixed

Added

Changed

The Easy as Pi release

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

Changed

[14.2.0] - 2025-10-09

Changed

Fixed

[14.1.0] - 2025-06-25

2025-10-27: pdoc 16.0.0

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

7.0.0 (2025-09-09)

6.3.0 (2025-09-06)

0.15.0

Release Notes

Breaking changes

Stabilization

0.15.0

Breaking changes

Stabilization

Mypy 1.19.1

Acknowledgements

Mypy 1.18

twine 6.2.0 (2025-09-04)

1.4.0

1.3.0

1.4.0 (2026-01-08)

1.3.0 (2025-08-01)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 13, 2026 •

edited

Loading