build(deps): bump the minor-and-patch group with 14 updates #707
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
Bumps the minor-and-patch group with 14 updates: | Package | From | To | | --- | --- | --- | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [shapely](https://github.com/shapely/shapely) | `2.1.1` | `2.1.2` | | [furo](https://github.com/pradyunsg/furo) | `2025.7.19` | `2025.9.25` | | [safety](https://github.com/pyupio/safety) | `3.6.1` | `3.6.2` | | [sphinx-click](https://github.com/click-contrib/sphinx-click) | `6.0.0` | `6.1.0` | | [anyio](https://github.com/agronholm/anyio) | `4.10.0` | `4.11.0` | | [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.5` | `4.14.2` | | [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` | | [pydantic](https://github.com/pydantic/pydantic) | `2.9.2` | `2.11.9` | | [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.23.4` | `2.33.2` | | ruamel-yaml-clib | `0.2.12` | `0.2.14` | | [safety-schemas](https://github.com/pyupio/safety_schemas) | `0.0.14` | `0.0.16` | | [typer](https://github.com/fastapi/typer) | `0.19.1` | `0.19.2` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.36.0` | `0.37.0` | Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) Updates `shapely` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/shapely/shapely/releases) - [Changelog](https://github.com/shapely/shapely/blob/main/CHANGES.txt) - [Commits](shapely/shapely@2.1.1...2.1.2) Updates `furo` from 2025.7.19 to 2025.9.25 - [Release notes](https://github.com/pradyunsg/furo/releases) - [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md) - [Commits](pradyunsg/furo@2025.07.19...2025.09.25) Updates `safety` from 3.6.1 to 3.6.2 - [Release notes](https://github.com/pyupio/safety/releases) - [Changelog](https://github.com/pyupio/safety/blob/main/CHANGELOG.md) - [Commits](pyupio/safety@3.6.1...3.6.2) Updates `sphinx-click` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/click-contrib/sphinx-click/releases) - [Commits](click-contrib/sphinx-click@6.0.0...6.1.0) Updates `anyio` from 4.10.0 to 4.11.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst) - [Commits](agronholm/anyio@4.10.0...4.11.0) Updates `beautifulsoup4` from 4.13.5 to 4.14.2 Updates `markupsafe` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@3.0.2...3.0.3) Updates `pydantic` from 2.9.2 to 2.11.9 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.11.9/HISTORY.md) - [Commits](pydantic/pydantic@v2.9.2...v2.11.9) Updates `pydantic-core` from 2.23.4 to 2.33.2 - [Release notes](https://github.com/pydantic/pydantic-core/releases) - [Commits](pydantic/pydantic-core@v2.23.4...v2.33.2) Updates `ruamel-yaml-clib` from 0.2.12 to 0.2.14 Updates `safety-schemas` from 0.0.14 to 0.0.16 - [Commits](https://github.com/pyupio/safety_schemas/commits) Updates `typer` from 0.19.1 to 0.19.2 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.19.1...0.19.2) Updates `uvicorn` from 0.36.0 to 0.37.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.36.0...0.37.0) --- updated-dependencies: - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: shapely dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: furo dependency-version: 2025.9.25 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: safety dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sphinx-click dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: anyio dependency-version: 4.11.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: beautifulsoup4 dependency-version: 4.14.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: markupsafe dependency-version: 3.0.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.11.9 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pydantic-core dependency-version: 2.33.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruamel-yaml-clib dependency-version: 0.2.14 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: safety-schemas dependency-version: 0.0.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typer dependency-version: 0.19.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: uvicorn dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 14 updates:
6.0.26.0.32.1.12.1.22025.7.192025.9.253.6.13.6.26.0.06.1.04.10.04.11.04.13.54.14.23.0.23.0.32.9.22.11.92.23.42.33.20.2.120.2.140.0.140.0.160.19.10.19.20.36.00.37.0Updates
pyyamlfrom 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7Release 6.0.3 (#889)Updates
shapelyfrom 2.1.1 to 2.1.2Release notes
Sourced from shapely's releases.
Changelog
Sourced from shapely's changelog.
Commits
5fb639dRLS: 2.1.270509a1DOC/RLS: indicate Python 3.14 support in pyproject.toml and release notes for...5c572b6CI: add testing with GEOS 3.14 and Python 3.14 (#2330)a909333Bump pypa/cibuildwheel from 3.1.3 to 3.2.0 (#2328)2086d44Bump actions/setup-python from 5 to 6 (#2326)50c1cf3Bump actions/download-artifact from 4 to 5 (#2321)39490abTST: update test_coverage_union_overlapping_inputs for upstream GEOS change (...5ef437cBump actions/checkout from 4 to 5 (#2320)7b5ff3dBLD: add Python 3.14 wheels [Bump pypa/cibuildwheel from 3.0.1 to 3.1.3] (#2316)480dbb1TST: update frechet_distance densify test for latest GEOS main (densify>0.001...Updates
furofrom 2025.7.19 to 2025.9.25Changelog
Sourced from furo's changelog.
... (truncated)
Commits
7c5f8faPrepare release: 2025.09.258bfdc54Update changelogd92b62fSwitch the dark mode theme back tonative83c3446Add Blender to "used by" section (#898)426ea05Remove old scrollbar selectors (#892)d22d31cRemove trailing slash on void elements (#895)f91944aFix invalid HTML5 (#894)a1f74d8Back to developmentUpdates
safetyfrom 3.6.1 to 3.6.2Release notes
Sourced from safety's releases.
Changelog
Sourced from safety's changelog.
Commits
f0c46b2bump: version 3.6.2b0 → 3.6.2dda0a45chore: prepare for stable releasef0e4d24bump: version 3.6.1 → 3.6.2b0071c858refactor: firewall tools and parsers (#798)4180179fix: allow passing package and tool location (#797)ee430dechore: use the latest safety_schemas version (#795)6f97082ci: add firewall index to the project setup (#794)3fd3031chore: relax pydantic version constraints (#793)70c2c27ci: add bot access to the comment workflow (#790)2d69508ci: resolve PR number via graphql API and update artifacts message (#789)Updates
sphinx-clickfrom 6.0.0 to 6.1.0Commits
58473a8Migrate to trusted publishing0d4f938Drop support for Python < 3.10, add Python 3.13073353aMigrate setuptools, mypy configuration to pyproject.toml83a5a17Prefer Group over MultiCommandd9705e8Bump actions versionsa94049apre-commit: Bump versionsdc11fe1pre-commit: Migrate to ruffc999be2pre-commit: Bump versionsUpdates
anyiofrom 4.10.0 to 4.11.0Release notes
Sourced from anyio's releases.
Changelog
Sourced from anyio's changelog.
... (truncated)
Commits
08737afBumped up the version8bb9fe0Fixed the inconsistent exception on sending to a closed TCP stream (#980)9637093[pre-commit.ci] pre-commit autoupdate (#981)f1bc6eeFixed changelog entry formatting0b58964Mentioned the sub-interpreter support in the README1ed112cEnsure same port is used for IPv4/IPv6 when creating TCP listener with local_...aceeee0Re-enabled coverage reporting on macOS6b890dcReworded a changelog entry and added PR links to others944257dUpdated pre-commit modules087975fFixed a documentation style (#976)Updates
beautifulsoup4from 4.13.5 to 4.14.2Updates
markupsafefrom 3.0.2 to 3.0.3Release notes
Sourced from markupsafe's releases.
Changelog
Sourced from markupsafe's changelog.
Commits
297fc8erelease version 3.0.37e4e6ceFree-threading: run with pytest-run-paralell (#507)6100b9cenable riscv64 wheels (#506)c9d5ecfenable riscv64 wheels2f9b337tox for 3.1478d951aupdate dev dependenciesbb6744eadd entry65c4134upgrade cibuildwheel, addcp314wheels and test on CPython 3.14 (#504)3a9bd88add cp314 wheelsaafe44dremove slsa provenance (#501)Updates
pydanticfrom 2.9.2 to 2.11.9Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
9231095Prepare release v2.11.9f003a89Backport v1.10.23 changes96b81ddPrepare release v2.11.8966f377Fix mypy v2 plugin for upcoming1.18mypy release5f033e4Prepare release v2.11.7c3368b8CopyFieldInfoinstance if necessary duringFieldInfobuild (#11980)3987b23Prepare release v2.11.6dc7a9d2Always store the original field assignment onFieldInfoc284c27Rebuild dataclass fields before schema generation5e6d1dcPrepare release v2.11.5Updates
pydantic-corefrom 2.23.4 to 2.33.2Release notes
Sourced from pydantic-core's releases.
... (truncated)
Commits
74fc28bBump version to v2.33.2 (#1702)a11eb18Do not reuse validator and serializer when unpicklinge630f77Mark some tests as xfailing on free-threaded6f98e10Fix CI condition forreleasejob x2f34bc6dFix CI condition forreleasejob0a5bbfcBump pyo3 from 0.24.0 to 0.24.1 (#1677)59e655eBump serde_json from 1.0.138 to 1.0.140 (#1679)5a32b4fBump uuid from 1.15.1 to 1.16.0 (#1678)ee8c173fix clippy lints for Rust 1.86 (#1682)baa8cbfBump version to v2.33.1 (#1681)Updates
ruamel-yaml-clibfrom 0.2.12 to 0.2.14Updates
safety-schemasfrom 0.0.14 to 0.0.16Commits
Updates
typerfrom 0.19.1 to 0.19.2Release notes
Sourced from typer's releases.
Changelog
Sourced from typer's changelog.
Commits
dc07284🔖 Release version 0.19.2a84fa46📝 Update release notesf34aa4a🐛 Fix list convertor with an empty list default factory (#1350)df2359a📝 Update release notes437c51e📝 Update release notese921e7c⬆ Bump ruff from 0.13.0 to 0.13.1 (#1339)923f608⬆ [pre-commit.ci] pre-commit autoupdate (#1351)805095c📝 Update release notes6be50c6⬆ Bump markdown-include-variants from 0.0.4 to 0.0.5 (#1348)549596c📝 Update release notesUpdates
uvicornfrom 0.36.0 to 0.37.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
Commits
4098bcaVersion 0.37.0 (#2712)8c057faAddos.PathLike[str]type tossl_ca_certs(#2676)bbe119eAdd note about--timeout-keep-alivebeing measured in seconds (#2669)2744f14Add--timeout-worker-healthchecksetting (#2711)1dfb0bdVersion 0.36.1 (#2710)3d0d46aRaise an exception when calling removedConfig.setup_event_loop()(#2709)ad9e5b9docs: redirect uvicorn.org to uvicorn.dev (#2705)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions