Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps psutil from 5.9.8 to 7.1.3.

Changelog

Sourced from psutil's changelog.

7.1.3

2025-11-02

Enhancements

  • 2667_: enforce clang-format on all C and header files. It is now the mandatory formatting style for all C sources.
  • 2672_, [macOS], [BSD]: increase the chances to recognize zombie processes and raise the appropriate exception (ZombieProcess_).
  • 2676_, 2678_: replace unsafe sprintf / snprintf / sprintf_s calls with str_format(). Replace strlcat / strlcpy with safe str_copy / str_append. This unifies string handling across platforms and reduces unsafe usage of standard string functions, improving robustness.

Bug fixes

  • 2674_, [Windows]: disk_usage()_ could truncate values on 32-bit platforms, potentially reporting incorrect total/free/used space for drives larger than 4GB.
  • 2675_, [macOS]: Process.status()_ incorrectly returns "running" for 99% of the processes.
  • 2677_, [Windows]: fix MAC address string construction in net_if_addrs()_. Previously, the MAC address buffer was incorrectly updated using a fixed increment and sprintf_s, which could overflow or misformat the string if the MAC length or formatting changed. Also, the final '\n' was inserted unnecessarily.
  • 2679_, [OpenBSD], [NetBSD], [critical]: can't build due to C syntax error.

7.1.2

2025-10-25

Enhancements

  • 2657_: stop publishing prebuilt Linux and Windows wheels for 32-bit Python. 32-bit CPython is still supported, but psutil must now be built from source. 2565_: produce wheels for free-thread cPython 3.13 and 3.14 (patch by Lysandros Nikolaou)

Bug fixes

  • 2650_, [macOS]: Process.cmdline()_ and Process.environ()_ may incorrectly raise NoSuchProcess_ instead of ZombieProcess_.
  • 2658_, [macOS]: double free() in Process.environ()_ when it fails internally. This posed a risk of segfault.
  • 2662_, [macOS]: massive C code cleanup to guard against possible segfaults which were (not so) sporadically spotted on CI.

... (truncated)

Commits
  • 5904ff9 Pre-release
  • d42db80 Update DEVGUIDE.rst
  • e4e1003 psutil_kinfo_proc: return in case of badargs; also print to stderr in case of...
  • bcdede4 Introduce PSUTIL_TESTING mode. Terminate execution if str_* funcs fail
  • 6822ba7 Replace strlcat/strlcpy with safe str_copy/str_append (#2678)
  • 0a7465c Windows: use str_format() in psutil_users().
  • fd05690 [Windows] fix MAC address string construction in net_if_addrs() (#2677)
  • 7d82135 NetBSD: refact proc cwd()
  • 262977f Replace unsafe sprintf/snprintf/sprintf_s calls with str_format() (#2676)
  • 1ba3cf5 Fix #2675 / macOS: convert process status() to a meaningful value
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [psutil](https://github.com/giampaolo/psutil) from 5.9.8 to 7.1.3.
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-5.9.8...release-7.1.3)

---
updated-dependencies:
- dependency-name: psutil
  dependency-version: 7.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 3, 2025
@wpt-pr-bot wpt-pr-bot added infra wptrunner The automated test runner, commonly called through ./wpt run labels Nov 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file infra python Pull requests that update Python code wptrunner The automated test runner, commonly called through ./wpt run

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants