chore(deps): bump the python-minor-patch group across 2 directories with 7 updates #191
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-minor-patch group with 4 updates in the /opendata_module directory: pyyaml, setuptools, dill and django.
Bumps the python-minor-patch group with 4 updates in the /reports_module directory: pyyaml, jinja2, requests and jsonschema.
Updates
pyyaml
from 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7
Release 6.0.3 (#889)Updates
setuptools
from 75.3.0 to 75.3.2Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
1148613
Merge tag 'v75.3.1'51a09c9
Mark failing test as xfail.be96588
Mark failing tests as xfail. Ref #4864.5cac330
Pin ruff at 2024-10-29 to avoid emergent failures from later releases.23b7b52
Bump version: 75.3.0 → 75.3.11740976
Repoint the news fragment.9559193
Merge pull request #4766 from di/fix/3777b10fa52
Reduce Ruff configs that duplicates upstream after skeleton merge (#4857)45375cd
Reduce Ruff configs that duplicates upstream after skeleton mergec11a494
Bump version: 75.9.1 → 76.0.0Updates
dill
from 0.3.9 to 0.4.0Commits
16eb90b
tag: 0.4.0cd7a5a8
Bump jinja2 from 3.1.5 to 3.1.6 in /docs (#705)0717bd1
move travis build of 3.9 to focal (#708)599265e
fix CodeType support for PyPy3.11 7.3.19+ (#707)acc49cf
update docs requirements; CI for pypy3.11 (#702)a3d129f
support pypy-3.11 (#701)7f678e7
Bump jinja2 from 3.1.4 to 3.1.5 in /docs (#695)5adb444
updated copyright for 2025 (#696)c8b8c57
fix typo in requirements (#693)e3c85c8
Bump starlette from 0.37.2 to 0.40.0 in /docs (#686)Updates
django
from 4.2.19 to 4.2.24Commits
5e23d89
[4.2.x] Bumped version for 4.2.24 release.31334e6
[4.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...d5860d5
[4.2.x] Added stub release notes and release date for 4.2.24.c3f9871
[4.2.x] Fixed #36499 -- Adjusted utils_tests.test_html.TestUtilsHtml.test_str...2a79837
[4.2.x] Fixed test_utils.tests.HTMLEqualTests.test_parsing_errors following P...7335a1a
[4.2.x] Refs #36535 -- Doc'd that docutils < 0.22 is required.591b23a
[4.2.x] Fixed GitHub Action that checks commit prefixes to fetch PR head corr...0c9ab35
[4.2.x] Added GitHub Action to enforce stable branch commit message prefix.8293b0f
[4.2.x] Added follow-up to CVE-2025-48432 to security archive.bc4d96c
[4.2.x] Post-release version bump.Updates
pyyaml
from 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7
Release 6.0.3 (#889)Updates
pyyaml
from 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7
Release 6.0.3 (#889)Updates
jinja2
from 3.1.5 to 3.1.6Release notes
Sourced from jinja2's releases.
Changelog
Sourced from jinja2's changelog.
Commits
1520688
release version 3.1.690457bb
Merge commit from fork065334d
attr filter uses env.getattr033c200
start version 3.1.6bc68d4e
use global contributing guide (#2070)247de5e
use global contributing guideab8218c
use project advisory link instead of globalb4ffc8f
release version 3.1.5 (#2066)Updates
pyyaml
from 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7
Release 6.0.3 (#889)Updates
requests
from 2.32.3 to 2.32.5Release notes
Sourced from requests's releases.
Changelog
Sourced from requests's changelog.
Commits
b25c87d
v2.32.5131e506
Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...b336cb2
Bump actions/checkout from 4.2.0 to 5.0.046e939b
Update publish workflow to useartifact-id
instead ofname
4b9c546
Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...7618dbe
Bump step-security/harden-runner from 2.12.0 to 2.13.02edca11
Add support for Python 3.14 and drop support for Python 3.8 (#6993)fec96cd
Update Makefile rules (#6996)d58d8aa
docs: clarify timeout parameter uses seconds in Session.request (#6994)91a3eab
Bump github/codeql-action from 3.28.5 to 3.29.0Updates
jsonschema
from 4.23.0 to 4.25.1Release notes
Sourced from jsonschema's releases.
Changelog
Sourced from jsonschema's changelog.
Commits
331c384
Add the fix to the changelog.c1ec0a6
Merge pull request #1398 from python-jsonschema/dependabot/github_actions/ast...8e7d594
Merge pull request #1399 from python-jsonschema/dependabot/github_actions/act...460f4fa
Merge pull request #1396 from sirosen/improve-protocol-init-signature1e58409
[pre-commit.ci] auto fixes from pre-commit.com hooks64bc217
Add a typing test for the Validator protocol6c25741
Bump actions/checkout from 4 to 5bf603d5
Bump astral-sh/setup-uv from 6.4.3 to 6.5.0a916d8f
FixValidator
protocol init to match runtimede60f18
Merge pull request #1397 from python-jsonschema/pre-commit-ci-update-configDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions