Skip to content

Bump the python-dependencies group across 1 directory with 9 updates - #75

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/apps/lms-api/python-dependencies-17de3e316c
Closed

Bump the python-dependencies group across 1 directory with 9 updates#75
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/apps/lms-api/python-dependencies-17de3e316c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 17, 2025

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 9 updates in the /apps/lms-api directory:

Package From To
flask-cors 6.0.1 6.0.2
pre-commit 4.5.0 4.5.1
coverage[toml] 7.12.0 7.13.0
pytest-run-parallel 0.7.1 0.8.0
pytest-playwright 0.7.1 0.7.2
playwright 1.55.0 1.57.0
ruff 0.14.6 0.14.9
mypy 1.18.2 1.19.1
hatch 1.15.1 1.16.2

Updates flask-cors from 6.0.1 to 6.0.2

Release notes

Sourced from flask-cors's releases.

6.0.2

What's Changed

New Contributors

Full Changelog: corydolphin/flask-cors@6.0.1...6.0.2

Commits

Updates pre-commit from 4.5.0 to 4.5.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.
Changelog

Sourced from pre-commit's changelog.

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.
Commits
  • 8a0630c v4.5.1
  • fcbc745 Merge pull request #3597 from pre-commit/empty-setup-py
  • 51592ee fix python local template when artifact dirs are present
  • 67e8faf Merge pull request #3596 from pre-commit/pre-commit-ci-update-config
  • c251e6b [pre-commit.ci] pre-commit autoupdate
  • 98ccafa Merge pull request #3593 from pre-commit/pre-commit-ci-update-config
  • 4895355 [pre-commit.ci] pre-commit autoupdate
  • 2cedd58 Merge pull request #3588 from pre-commit/pre-commit-ci-update-config
  • 465192d [pre-commit.ci] pre-commit autoupdate
  • fd42f96 Merge pull request #3586 from pre-commit/zipapp-sha256-file-not-needed
  • Additional commits viewable in compare view

Updates coverage[toml] from 7.12.0 to 7.13.0

Release notes

Sourced from coverage[toml]'s releases.

7.13.0

Version 7.13.0 — 2025-12-08

  • Feature: coverage.py now supports .coveragerc.toml configuration files. These files use TOML syntax and take priority over pyproject.toml but lower priority than .coveragerc files. Closes issue 1643 thanks to Olena Yefymenko.
  • Fix: we now include a permanent .pth file which is installed with the code, fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn’t work when using the source wheel (py3-none-any). This is now fixed. Thanks, Henry Schreiner.
  • Deprecated: when coverage.py is installed, it creates three command entry points: coverage, coverage3, and coverage-3.10 (if installed for Python 3.10). The second and third of these are not needed and will eventually be removed. They still work for now, but print a message about their deprecation.

➡️  PyPI page: coverage 7.13.0. :arrow_right:  To install: python3 -m pip install coverage==7.13.0

7.12.1b1

Version 7.12.1b1 — 2025-11-30

  • Fix: coverage.py now includes a permanent .pth file in the distribution which is installed with the code. This fixes issue 2084: failure to patch for subprocess measurement when site-packages is not writable.

➡️  PyPI page: coverage 7.12.1b1. :arrow_right:  To install: python3 -m pip install coverage==7.12.1b1

Changelog

Sourced from coverage[toml]'s changelog.

Version 7.13.0 — 2025-12-08

  • Feature: coverage.py now supports :file:.coveragerc.toml configuration files. These files use TOML syntax and take priority over :file:pyproject.toml but lower priority than :file:.coveragerc files. Closes issue 1643_ thanks to Olena Yefymenko <pull 1952_>_.

  • Fix: we now include a permanent .pth file which is installed with the code, fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn't work when using the source wheel (py3-none-any). This is now fixed. Thanks, Henry Schreiner <pull 2100_>.

  • Deprecated: when coverage.py is installed, it creates three command entry points: coverage, coverage3, and coverage-3.10 (if installed for Python 3.10). The second and third of these are not needed and will eventually be removed. They still work for now, but print a message about their deprecation.

.. _issue 1643: coveragepy/coveragepy#1643 .. _pull 1952: coveragepy/coveragepy#1952 .. _pull 2100: coveragepy/coveragepy#2100

.. _changes_7-12-1b1:

Version 7.12.1b1 — 2025-11-30

  • Fix: coverage.py now includes a permanent .pth file in the distribution which is installed with the code. This fixes issue 2084_: failure to patch for subprocess measurement when site-packages is not writable.

.. _issue 2084: coveragepy/coveragepy#2084

.. _changes_7-12-0:

Commits
  • 52fde9c docs: sample HTML for 7.13.0
  • 69de009 docs: prep for 7.13.0
  • 01387fc docs: tweak changes
  • 60206e8 chore: make edit_for_release
  • 78cfd57 docs: tweak CHANGES.rst
  • 21e726f feat: support .coveragerc.toml for configuration (#1952)
  • 3914e50 chore: bump the action-dependencies group with 2 updates (#2102)
  • d5e7c3a test: no need to group tests by needs_pth
  • ed516c4 test: fix metacov again
  • da833a1 fix: use Development Status classifier properly. #2101
  • Additional commits viewable in compare view

Updates pytest-run-parallel from 0.7.1 to 0.8.0

Release notes

Sourced from pytest-run-parallel's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: Quansight-Labs/pytest-run-parallel@v0.7.1...v0.8.0

Commits
  • 988928d Release v0.8.0 (#154)
  • d20eb17 Merge pull request #152 from lysnikolaou/raise-forever-zero-tests
  • 859ac3f Improve error message
  • e378d88 Raise helpful error when forever is combined with 0 selected tests
  • 7f3f427 Deprecated parallel_threads marker when n>1 (#149)
  • e0c46c4 Test on 3.15 and 3.15t on CI (#150)
  • d14ceb7 Detect gc.collect and mark tests as thread unsafe (#148)
  • 3b618c3 Merge pull request #146 from ngoldbaum/thread-limit-decorator
  • c1e0902 allow parallel_threads_limit('auto') for compatibility
  • 1121cc9 tweak unsafe detection logic and test
  • Additional commits viewable in compare view

Updates pytest-playwright from 0.7.1 to 0.7.2

Release notes

Sourced from pytest-playwright's releases.

v0.7.2

What's Changed

New Contributors

Full Changelog: microsoft/playwright-pytest@v0.7.1...v0.7.2

Commits

Updates playwright from 1.55.0 to 1.57.0

Release notes

Sourced from playwright's releases.

v1.57.0

Chrome for Testing

Starting with this release, Playwright switches from Chromium, to using Chrome for Testing builds. Both headed and headless browsers are subject to this. Your tests should still be passing after upgrading to Playwright 1.57.

We're expecting no functional changes to come from this switch. The biggest change is the new icon and title in your toolbar.

If you still see an unexpected behaviour change, please file an issue.

On Arm64 Linux, Playwright continues to use Chromium.

Breaking Change

After 3 years of being deprecated, we removed page.accessibility from our API. Please use other libraries such as Axe if you need to test page accessibility. See our Node.js guide for integration with Axe.

New APIs

  • worker.on("console") event is emitted when JavaScript within the worker calls one of console API methods, e.g. console.log or console.dir. worker.expect_event() can be used to wait for it.
  • locator.description() returns locator description previously set with locator.describe().
  • New option steps in locator.click() and locator.drag_to() that configures the number of mousemove events emitted while moving the mouse pointer to the target element.
  • Network requests issued by Service Workers are now reported and can be routed through the BrowserContext, only in Chromium. You can opt out using the PLAYWRIGHT_DISABLE_SERVICE_WORKER_NETWORK environment variable.
  • Console messages from Service Workers are dispatched through worker.on("console"). You can opt out of this using the PLAYWRIGHT_DISABLE_SERVICE_WORKER_CONSOLE environment variable.

Browser Versions

  • Chromium 143.0.7499.4
  • Mozilla Firefox 144.0.2
  • WebKit 26.0

v1.56.0

New APIs

Breaking Changes

Miscellaneous

  • Aria snapshots render and compare input placeholder

Browser Versions

  • Chromium 141.0.7390.37
  • Mozilla Firefox 142.0.1
  • WebKit 26.0
Commits

Updates ruff from 0.14.6 to 0.14.9

Release notes

Sourced from ruff's releases.

0.14.9

Release Notes

Released on 2025-12-11.

Preview features

  • [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
  • [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

  • Fix comment placement in lambda parameters (#21868)
  • Skip over trivia tokens after re-lexing (#21895)
  • [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
  • [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

  • [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

  • Use memchr for computing line indexes (#21838)

Documentation

  • Document *.pyw is included by default in preview (#21885)
  • Document range suppressions, reorganize suppression docs (#21884)
  • Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

Install ruff 0.14.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.9

Released on 2025-12-11.

Preview features

  • [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
  • [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

  • Fix comment placement in lambda parameters (#21868)
  • Skip over trivia tokens after re-lexing (#21895)
  • [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
  • [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

  • [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

  • Use memchr for computing line indexes (#21838)

Documentation

  • Document *.pyw is included by default in preview (#21885)
  • Document range suppressions, reorganize suppression docs (#21884)
  • Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

0.14.8

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

... (truncated)

Commits
  • 3f63ea4 Prepare 0.14.9 release (#21927)
  • c8851ec [ty] Defer all parameter and return type annotations (#21906)
  • d442433 [ty] Fix workspace symbols to return members too (#21926)
  • c055d66 Document range suppressions, reorganize suppression docs (#21884)
  • 7a578ce Ignore ruff:isort like ruff:noqa in new suppressions (#21922)
  • 34f7a04 [ty] Handle Definitions in SemanticModel::scope (#21919)
  • c9fe4e2 [ty] Attach salsa db when running ide tests for easier debugging (#21917)
  • fbeeb05 [ty] Don't show hover for expressions with no inferred type (#21924)
  • 4fdb4e8 [ty] avoid unions of generic aliases of the same class in fixpoint (#21909)
  • c548ef2 [ty] Squash false positive logs for failing to find builtins as a real module
  • Additional commits viewable in compare view

Updates mypy from 1.18.2 to 1.19.1

Changelog

Sourced from mypy's changelog.

Mypy 1.19.1

  • Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
  • Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
  • Allow types.NoneType in match cases (A5rocks, PR 20383)
  • Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
  • Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
  • Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
  • Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
  • Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • A5rocks
  • BobTheBuidler
  • bzoracler
  • Chainfire
  • Christoph Tyralla
  • David Foster
  • Frank Dana
  • Guo Ci
  • iap
  • Ivan Levkivskyi
  • James Hilton-Balfe
  • jhance
  • Joren Hammudoglu
  • Jukka Lehtosalo
  • KarelKenens
  • Kevin Kannammalil
  • Marc Mueller
  • Michael Carlstrom
  • Michael J. Sullivan
  • Piotr Sawicki
  • Randolf Scholz
  • Shantanu
  • Sigve Sebastian Farstad
  • sobolevn
  • Stanislav Terliakov
  • Stephen Morton
  • Theodore Ando
  • Thiago J. Barbalho
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.18

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance

... (truncated)

Commits

Updates hatch from 1.15.1 to 1.16.2

Release notes

Sourced from hatch's releases.

Hatch v1.16.2

Fixed:

  • Properly send informational output to stderr instead of stdout
  • Implement documented support for sbom-files as build data for the wheel build target
  • Fix regression where environments no longer acknowledged the project.optional-dependencies field

Hatchling v1.16.1

Fixed:

  • Fix determining the built executable path for the app build target option when using a local copy of PyApp when there is an explicit target triple set

Hatch v1.16.1

Fixed:

  • Handle special characters correctly in path for editable installs.
  • Fix multiple calls to install on sync_dependencies to become a single call.
  • Fix context variable formatting in project dependencies to prevent crashes when using variables like {root:parent:uri} in the [project] section.
  • Fix environment overrides for dependency-groups field to properly support matrix and conditional configurations.

Hatchling v1.16.0

Added:

  • Add app build target option to build using a local copy of the PyApp repository

Hatch v1.16.0

Changed:

  • Drop support for 3.9
  • Environment type plugins are now no longer expected to support a pseudo-build environment as any environment now may be used for building. The following methods have been removed: build_environment, build_environment_exists, run_builder, construct_build_command

Added:

  • Support for workspaces inspired by Cargo Workspaces
  • Dependency group support.
  • The version and project metadata commands now support projects that do not use Hatchling as the build backend
  • The version command accepts a --force option, allowing for downgrades when an explicit version number is given.
  • Build environments can now be configured, the default build environment is hatch-build
  • The environment interface now has the following methods and properties in order to better support builds on remote machines: project_root, sep, pathsep, fs_context
  • Bump the minimum supported version of packaging to 24.2
  • Upgrade Ruff to 0.13.2

Fixed:

  • All HTTP requests now set an identifiable User-Agent header.
  • Fix issue where terminal output would be out of sync during build.
  • Fix for Click Sentinel value when using run command
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 9 updates in the /apps/lms-api directory:

| Package | From | To |
| --- | --- | --- |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.1` | `6.0.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.0` | `4.5.1` |
| [coverage[toml]](https://github.com/coveragepy/coveragepy) | `7.12.0` | `7.13.0` |
| [pytest-run-parallel](https://github.com/Quansight-Labs/pytest-run-parallel) | `0.7.1` | `0.8.0` |
| [pytest-playwright](https://github.com/microsoft/playwright-pytest) | `0.7.1` | `0.7.2` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.55.0` | `1.57.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.6` | `0.14.9` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.1` |
| [hatch](https://github.com/pypa/hatch) | `1.15.1` | `1.16.2` |



Updates `flask-cors` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.1...6.0.2)

Updates `pre-commit` from 4.5.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.5.0...v4.5.1)

Updates `coverage[toml]` from 7.12.0 to 7.13.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.12.0...7.13.0)

Updates `pytest-run-parallel` from 0.7.1 to 0.8.0
- [Release notes](https://github.com/Quansight-Labs/pytest-run-parallel/releases)
- [Changelog](https://github.com/Quansight-Labs/pytest-run-parallel/blob/main/RELEASE.md)
- [Commits](Quansight-Labs/pytest-run-parallel@v0.7.1...v0.8.0)

Updates `pytest-playwright` from 0.7.1 to 0.7.2
- [Release notes](https://github.com/microsoft/playwright-pytest/releases)
- [Commits](microsoft/playwright-pytest@v0.7.1...v0.7.2)

Updates `playwright` from 1.55.0 to 1.57.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.55.0...v1.57.0)

Updates `ruff` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.6...0.14.9)

Updates `mypy` from 1.18.2 to 1.19.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.18.2...v1.19.1)

Updates `hatch` from 1.15.1 to 1.16.2
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatch-v1.15.1...hatch-v1.16.2)

---
updated-dependencies:
- dependency-name: flask-cors
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: coverage[toml]
  dependency-version: 7.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-run-parallel
  dependency-version: 0.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-playwright
  dependency-version: 0.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: playwright
  dependency-version: 1.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.14.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 1.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hatch
  dependency-version: 1.16.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 17, 2025
@dependabot @github

dependabot Bot commented on behalf of github Jan 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 5, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/apps/lms-api/python-dependencies-17de3e316c branch January 5, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants