-
Notifications
You must be signed in to change notification settings - Fork 0
⬆️(project) upgrade python dependencies #36
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/python-dependencies
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
4aab368 to
f0b25e5
Compare
0d0140d to
37fa4cd
Compare
c6b78ab to
409bf77
Compare
05ff8d4 to
7fd92d1
Compare
532a93e to
aa1155d
Compare
3b904cc to
960b19e
Compare
960b19e to
2ec0a62
Compare
b96e65d to
26024be
Compare
37fee4d to
c2e666b
Compare
77e2ca3 to
7e1bc1f
Compare
9f1ee31 to
75733ef
Compare
75733ef to
c510e19
Compare
c510e19 to
34b1677
Compare
fcbbdce to
a74c0d1
Compare
3d058ed to
1b36338
Compare
ad88600 to
3d520c9
Compare
610bb9f to
530e9e2
Compare
530e9e2 to
aed66cb
Compare
0ff7664 to
2faccdc
Compare
2faccdc to
bd82b47
Compare
| datasource | package | from | to | | ---------- | -------------- | ------- | ------- | | pypi | bandit | 1.7.10 | 1.8.6 | | pypi | black | 24.10.0 | 25.11.0 | | pypi | check-manifest | 0.50 | 0.51 | | pypi | cryptography | 43.0.3 | 46.0.3 | | pypi | factory-boy | 3.3.1 | 3.3.3 | | pypi | flake8 | 7.1.1 | 7.3.0 | | pypi | ipython | 8.28.0 | 9.7.0 | | pypi | isort | 5.13.2 | 7.0.0 | | pypi | pyopenssl | 24.2.1 | 25.3.0 | | pypi | pycodestyle | 2.12.1 | 2.14.0 | | pypi | pylint | 3.3.1 | 4.0.3 | | pypi | pytest | 8.2.0 | 9.0.1 | | pypi | pytest-cov | 5.0.0 | 7.0.0 | | pypi | pytest-django | 4.9.0 | 4.11.1 | | pypi | pytest-mock | 3.14.0 | 3.15.1 | | pypi | redis | 5.3.1 | 7.0.1 | | pypi | signxml | 4.0.2 | 4.2.0 | | pypi | uvicorn | 0.32.0 | 0.38.0 | | pypi | websockets | 13.1 | 15.0.1 | | pypi | wheel | 0.44.0 | 0.45.1 | | pypi | whitenoise | 6.7.0 | 6.11.0 |
bd82b47 to
af7cacf
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.7.10->==1.8.6==24.10.0->==25.11.0==0.50->==0.51==43.0.3->==46.0.3==3.3.1->==3.3.3==7.1.1->==7.3.0==8.28.0->==9.7.0==5.13.2->==7.0.0==24.2.1->==25.3.0==2.12.1->==2.14.0==3.3.1->==4.0.3==8.2.0->==9.0.1==5.0.0->==7.0.0==4.9.0->==4.11.1==3.14.0->==3.15.1>=5.0.0,<6->>=7.0.1,<8==4.0.2->==4.2.0==0.32.0->==0.38.0>=13,<14->>=15,<16==0.44.0->==0.45.1==6.7.0->==6.11.0Release Notes
PyCQA/bandit (bandit)
v1.8.6Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.5...1.8.6
v1.8.5Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.8.4...1.8.5
v1.8.3Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.2...1.8.3
v1.8.2Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.8.1...1.8.2
v1.8.1Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.0...1.8.1
v1.8.0Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.7.10...1.8.0
psf/black (black)
v25.11.0Compare Source
Highlights
Stable style
# fmt: offand# fmt: onwere reformatted (#4811)being normalized (#4811)
Preview style
multiline_string_handlingfrom--unstableto--preview(#4760)comments (#4764)
# type: <value>(#4645)fix_fmt_skip_in_one_linerspreview feature to respect# fmt: skipfor compoundstatements with semicolon-separated bodies (#4800)
Configuration
no_cacheoption to control caching behavior. (#4803)Packaging
Output
(#4610)
Blackd
requests to blackd (#4774)
Integrations
psf/blackto support therequired-versionmajor-version-only"stability" format when using pyproject.toml (#4770)
v25.9.0Compare Source
Highlights
await/asyncas soft keywords/variable names(#4676)
Stable style
delstatement containing tuples (#4628)withstatements (#4630)
# fmt: skipfollowed by a comment at the end of file (#4635)asclause of awithstatement (#4634)withstatement (#4646)\followed by a\rfollowed by a comment (#4663)\\r\n(#4673)await ...(where...is a literalEllipsis) (#4676)(#4670)
Preview style
# fmt: skipwould stillbe formatted (#4552)
multiline_string_handlingwith ternaries and dictionaries (#4657)string_processingwould not split f-strings directly afterexpressions (#4680)
inclause of comprehensions across lines if necessary (#4699)exceptandexcept*withoutas. (#4720)\rstyle newlines to the potential newlines to normalize file newlines both fromand to (#4710)
Parser
parameter bounds and defaults. (#4602)
Performance
Integrations
psf/blackto read Black version from an additional section inpyproject.toml:
[project.dependency-groups](#4606)Documentation
v25.1.0Compare Source
Highlights
This release introduces the new 2025 stable style (#4558), stabilizing the following
changes:
# fmt: skipcomments is no longer normalized (#4146)(#4154)
*and more complex type variable tuple (#4440)The following changes were not in any previous release:
over multiple lines first instead of type parameter definitions (#4553)
Stable style
empty lines (#4484)
withstatements containing tuple generators/unpacking(#4538)
Preview style
(#4498)
string_processingandwrap_long_dict_values_in_parensfrom removingparentheses around long dictionary values (#4377)
wrap_long_dict_values_in_parensfrom the unstable to preview style (#4561)Packaging
License-Expressionmetadata field, seePEP 639. (#4479)
Performance
is_fstring_startfunction in Black's tokenizer (#4541)Integrations
--stdin-filenameset to a force excluded path, stdin won't beformatted. (#4539)
mgedmin/check-manifest (check-manifest)
v0.51Compare Source
pyca/cryptography (cryptography)
v46.0.3Compare Source
v46.0.2Compare Source
v46.0.1Compare Source
v46.0.0Compare Source
v45.0.7Compare Source
v45.0.6Compare Source
v45.0.5Compare Source
v45.0.4Compare Source
v45.0.3Compare Source
v45.0.2Compare Source
v45.0.1Compare Source
v45.0.0Compare Source
v44.0.3Compare Source
v44.0.2Compare Source
v44.0.1Compare Source
v44.0.0Compare Source
FactoryBoy/factory_boy (factory_boy)
v3.3.3Compare Source
v3.3.2Compare Source
pycqa/flake8 (flake8)
v7.3.0Compare Source
v7.2.0Compare Source
v7.1.2Compare Source
ipython/ipython (ipython)
v9.7.0Compare Source
v9.6.0Compare Source
v9.5.0Compare Source
v9.4.0Compare Source
v9.3.0Compare Source
v9.2.0Compare Source
v9.1.0Compare Source
v9.0.2Compare Source
v9.0.1Compare Source
v9.0.0Compare Source
v8.37.0Compare Source
v8.36.0Compare Source
v8.35.0Compare Source
v8.34.0Compare Source
v8.33.0Compare Source
v8.32.0Compare Source
v8.31.0Compare Source
v8.30.0Compare Source
v8.29.0Compare Source
PyCQA/isort (isort)
v7.0.0Compare Source
Changes
💥 Breaking Changes
🚀 Features
🪲 Fixes
3.14and fix any bugs (#2425) @DanielNoord👷 Continuous Integration
ruffinstead ofblack(#2432) @DanielNoordruff(#2431) @DanielNoord📦 Dependencies
v6.1.0Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
pyca/pyopenssl (pyOpenSSL)
v25.3.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Deprecations:
^^^^^^^^^^^^^
Changes:
^^^^^^^^
cryptographyversion is now 46.x.v25.2.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
cryptographyversion is now 45.0.7.Deprecations:
^^^^^^^^^^^^^
Changes:
^^^^^^^^
SSL_MODE_ACCEPT_MOVING_WRITE_BUFFERon connections by default, matching CPython's behavior.OpenSSL.SSL.Context.clear_mode.OpenSSL.SSL.Context.set_tls13_ciphersuitesto set the allowed TLS 1.3 ciphers.OpenSSL.SSL.Connection.set_info_callbackv25.1.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Deprecations:
^^^^^^^^^^^^^
OpenSSL.SSL.Contextafter ithas been used to create an
OpenSSL.SSL.Connectionwill emit a warning. Ina future release, this will raise an exception.
Changes:
^^^^^^^^
cryptographymaximum version has been increased to 45.0.x.v25.0.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Deprecations:
^^^^^^^^^^^^^
Changes:
^^^^^^^^
Context.set_alpn_select_callback,Context.set_session_cache_mode,Context.set_options,Context.set_mode,X509.subject_name_hash, andX509Store.load_locations.warnings.deprecated.mypywill emit deprecation notices for them when used with--enable-error-code deprecated.v24.3.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.dump_crl, andOpenSSL.crypto.load_crl.cryptography.x509's CRL functionality should be used instead.OpenSSL.crypto.signandOpenSSL.crypto.verify.cryptography.hazmat.primitives.asymmetric's signature APIs should be used instead.Deprecations:
^^^^^^^^^^^^^
OpenSSL.rand- callers should useos.urandom()instead.add_extensionsandget_extensionsonOpenSSL.crypto.X509ReqandOpenSSL.crypto.X509. These should have been deprecated at the same timeX509Extensionwas. Users should use pyca/cryptography's X.509 APIs instead.OpenSSL.crypto.get_elliptic_curvesandOpenSSL.crypto.get_elliptic_curve, as well as passing the reult of them toOpenSSL.SSL.Context.set_tmp_ecdh, users should instead pass curves fromcryptography.X509objects toOpenSSL.SSL.Context.use_certificate,OpenSSL.SSL.Connection.use_certificate,OpenSSL.SSL.Context.add_extra_chain_cert, andOpenSSL.SSL.Context.add_client_ca, users should instead passcryptography.x509.Certificateinstances. This is in preparation for deprecating pyOpenSSL'sX509entirely.PKeyobjects toOpenSSL.SSL.Context.use_privatekeyandOpenSSL.SSL.Connection.use_privatekey, users should instead passcryptographyprivate key instances. This is in preparation for deprecating pyOpenSSL'sPKeyentirely.Changes:
^^^^^^^^
cryptographymaximum version has been increased to 44.0.x.OpenSSL.SSL.Connection.get_certificate,OpenSSL.SSL.Connection.get_peer_certificate,OpenSSL.SSL.Connection.get_peer_cert_chain, andOpenSSL.SSL.Connection.get_verified_chainnow take anas_cryptographykeyword-argument. WhenTrueis passed thencryptography.x509.Certificateare returned, instead ofOpenSSL.crypto.X509. In the future, passingFalse(the default) will be deprecated.pylint-dev/pylint (pylint)
v4.0.3Compare Source
What's new in Pylint 4.0.3?
Release date: 2025-11-13
False Positives Fixed
Add Enum dunder methods
_generate_next_value_,_missing_,_numeric_repr_,_add_alias_, and_add_value_alias_to the list passed to--good-dunder-names.Closes #10435
Fixed false positive for
invalid-namewithtyping.Annotated.Closes #10696
Fix false positive for
f-string-without-interpolationwith template stringswhen using format spec.
Closes #10702
Fix a false positive when an UPPER_CASED class attribute was raising an
invalid-namewhen typed withFinal.Closes #10711
Fix a false positive for
unbalanced-tuple-unpackingwhen a tuple is assigned to a function call and the structure of the function's return value is ambiguous.Closes #10721
Other Bug Fixes
Make 'ignore' option work as expected again.
Closes #10669
Fix crash for
consider-using-assignment-exprwhen a variable annotation without assignmentis used as the
iftest expression.Closes #10707
Fix crash for
prefer-typing-namedtupleandconsider-math-not-floatwhena
sliceobject is called.Closes #10708
v4.0.2Compare Source
False Positives Fixed
Fix false positive for
invalid-nameon a partially uninferable module-level constant.Closes #10652
Fix a false positive for
invalid-nameon exclusive module-level assignmentscomposed of three or more branches. We won't raise
disallowed-nameon module-level names that can't be inferreduntil a further refactor to remove this false negative is done.
Closes #10664
Fix false positive for
invalid-nameforTypedDictinstances.Closes #10672
v4.0.1Compare Source
What's new in Pylint 4.0.1?
Release date: 2025-10-14
False Positives Fixed
Exclude
__all__and__future__.annotationsfromunused-variable.Closes #10019
Fix false-positive for
bare-name-capture-patternif a case guard is used.Closes #10647
Check enums created with the
Enum()functional syntax to pass against the--class-rgxfor theinvalid-namecheck, like other enums.Closes #10660
v4.0.0Compare Source
Pylint now supports Python 3.14.
Pylint's inference engine (
astroid) is now much more precise,understanding implicit booleanness and ternary expressions. (Thanks @zenlyj!)
Consider this example:
The required
astroidversion is now 4.0.0. See the astroid changelog for additional fixes, features, and performance improvements applicable to pylint.invalid-nameat the module level was patchy. Now,module-level constants that are reassigned are treated as variables and checked
against
--variable-rgxrather than--const-rgx. Module-level lists,sets, and objects can pass against either regex.
Here,
LIMITis reassigned, so pylint only uses--variable-rgx:If this is undesired, refactor using exclusive assignment so that it is
evident that this assignment happens only once:
Lists, sets, and objects still pass against either
const-rgxorvariable-rgxeven if reassigned, but are no longer completely skipped:
Remember to adjust the regexes and allow lists to your liking.
Breaking Changes
invalid-namenow distinguishes module-level constants that are assigned only oncefrom those that are reassigned and now applies
--variable-rgxto the latter. Valuesother than literals (lists, sets, objects) can pass against either the constant or
variable regexes (e.g. "LOGGER" or "logger" but not "LoGgEr").
Remember that
--good-namesor--good-names-rgxscan be provided to explicitlyallow good names.
Closes #3585
The unused
pylintrcargument toPyLinter.__init__()is deprecatedand will be removed.
Refs #6052
Commented out code blocks such as
# bar() # TODO: remove dead codewill no longer emitfixme.Refs #9255
pyreverseRunwas changed to no longer callsys.exit()in its__init__.You should now call
Run(args).run()which will return the exit code instead.Having a class that always raised a
SystemExitexception was considered a bug.Normal usage of pyreverse through the CLI will not be affected by this change.
Refs #9689
The
suggestion-modeoption was removed, as pylint now always emits user-friendly hints insteadof false-positive error messages. You should remove it from your conf if it's defined.
Refs #9962
The
async.pychecker module has been renamed toasync_checker.pysinceasyncis a Python keywordand cannot be imported directly. This allows for better testing and extensibility of the async checker functionality.
Refs #10071
The message-id of
continue-in-finallywas changed fromE0116toW0136. The warning isnow emitted for every Python version since it will raise a syntax warning in Python 3.14.
See PEP 765 - Disallow return/break/continue that exit a finally block.
Refs #10480
Removed support for
nmp.NaNalias fornumpy.NaNbeing recognized in ':ref:nan-comparison'. Usenpornumpyinstead.Refs #10583
Version requirement for
isorthas been bumped to >=5.0.0.The internal compatibility for older
isortversions exposed viapylint.utils.IsortDriverhasbeen removed.
Refs #10637
New Features
comparison-of-constantsnow uses the unicode from the ast instead of reformatting fromthe node's values preventing some bad formatting due to
utf-8limitation. The message now uses"instead of'to better work with what the python ast returns.Refs #8736
Enhanced pyreverse to properly distinguish between UML relationship types (association, aggregation, composition) based on object ownership semantics. Type annotations without assignment are now treated as associations, parameter assignments as aggregations, and object instantiation as compositions.
Closes #9045
Closes #9267
The
fixmecheck can now search through docstrings as well as comments, by usingcheck-fixme-in-docstring = truein the[tool.pylint.miscellaneous]section.Closes #9255
The
use-implicit-booleaness-not-xchecks now distinguish between comparisonsused in boolean contexts and those that are not, enabling them to provide more accurate refactoring suggestions.
Closes #9353
The verbose option now outputs the filenames of the files that have been checked.
Previously, it only included the number of checked and skipped files.
Closes #9357
colorized reporter now colorizes messages/categories that have been configured as
fail-onin red inverse.This makes it easier to quickly find the errors that are causing pylint CI job failures.
Clo
Configuration
📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.