Skip to content

build(deps): bump the python-dependencies group across 1 directory with 6 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-011824f3ed
Open

build(deps): bump the python-dependencies group across 1 directory with 6 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-011824f3ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Updates the requirements on rich, pillow, pymupdf, mypy, pytest and pytest-cov to permit the latest version.
Updates rich to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

[14.3.4] - 2026-04-11

Changed

[14.3.3] - 2026-02-19

Fixed

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

... (truncated)

Commits

Updates pillow to 13.0.0

Release notes

Sourced from pillow's releases.

13.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits
  • 293218a 13.0.0 version bump
  • 262e8e4 Update release notes for Pillow 13.0.0 (#10223)
  • af56ace Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 570df03 Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 53318b5 Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)
  • 0a87417 Bound retained TIFF tag data by stream size (#10225)
  • 11582e5 Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)
  • 8501adc Fix test
  • ec5f1cb Take libtiff scanline geometry tags from the image, not tiffinfo/exif
  • 4b63dff Share TIFF tag data budget across frames
  • Additional commits viewable in compare view

Updates pymupdf to 2.0

Release notes

Sourced from pymupdf's releases.

PyMuPDF-2.0 released

Wheels for Windows, Linux and MacOS, and the sdist, are available on https://pypi.org and can be installed in the usual way, for example:

python -m pip install --upgrade pymupdf

Changes in version 2.0

Fixed issues:

Other:

  • Added support for form field hierarchies.
  • Added support for radio button groups.
  • Added support for widget aliases.
  • Fixed builds with swig-4.5.
  • Fixed https://bugs.ghostscript.com/show_bug.cgi?id=709683_ Path Traversal and Arbitrary File Write in PyMuPDF CLI Font Extraction (CVE-2026-82035)
  • Fixed ignoring aspect ratio for square images.
  • Fixed potential SEGV in pymupdf.Page.get_cdrawings() if callback raises exception.
  • Fixed use with python-3.15.
  • Remove the debug timing loop from Annot.update().
  • Retrospectively marked #3478 fixed in 1.25.3.
  • Retrospectively marked #4158 fixed in 1.27.2.2
  • Retrospectively marked #4896 fixed in 1.28.0.
  • Retrospectively marked #4918 fixed in 1.28.0.
  • Supported Python versions are now 3.11-3.15.
  • Use MuPDF-1.28.5.
  • Warning for use of deprecated fitz API now uses warnings.warn() with FutureWarning.
Changelog

Sourced from pymupdf's changelog.

Change Log

Changes in version 2.0 (2026-10-19)

Fixed issues:

  • Fixed 4994 <https://github.com/pymupdf/PyMuPDF/issues/4994>_: Dehyphenate does no longer work since 1.27.1
  • Fixed 5054 <https://github.com/pymupdf/PyMuPDF/issues/5054>_: clean_contents(sanitize=True) drops glyph positioning, duplicating an overprinted leading glyph (regression in 1.28.0 from 1.27.2.3)
  • Fixed 5055 <https://github.com/pymupdf/PyMuPDF/issues/5055>_: insert_file(...) breaks radio button groups
  • Fixed 5059 <https://github.com/pymupdf/PyMuPDF/issues/5059>_: Annotations disappear or move when using Page.remove_rotation() for 90 or 270 rotated pages
  • Fixed 5067 <https://github.com/pymupdf/PyMuPDF/issues/5067>_: Memory leak in extractBLOCKS (_as_blocks): text object reference never released
  • Fixed 5077 <https://github.com/pymupdf/PyMuPDF/issues/5077>_: Page.remove_rotation() takes minutes on pages with thousands of links
  • Fixed 5082 <https://github.com/pymupdf/PyMuPDF/issues/5082>_: Regression in 1.28.x: get_pixmap() and get_text() hang at 100% CPU on a specific PDF; works in 1.27.2.3
  • Fixed 5100 <https://github.com/pymupdf/PyMuPDF/issues/5100>_: Import of fitz prints to console instead of generating a DeprecationWarning
  • Fixed 5101 <https://github.com/pymupdf/PyMuPDF/issues/5101>_: Cyclic Widget /Parent makes page operations fail with FzErrorFormat: code=7: cycle in resources
  • Fixed 5108 <https://github.com/pymupdf/PyMuPDF/issues/5108>_: Page.clip_to_rect() drops 'sh' (shading) operators
  • Fixed 5112 <https://github.com/pymupdf/PyMuPDF/issues/5112>_: Stack-based buffer overflow in JM_set_annot_callout_line
  • Fixed 5115 <https://github.com/pymupdf/PyMuPDF/issues/5115>_: Pixmap export 'unmultiply' option has no effect
  • Fixed 5122 <https://github.com/pymupdf/PyMuPDF/issues/5122>_: get_drawings() reports a wrong start point for a subpath following a re with negative width/height
  • Fixed 5125 <https://github.com/pymupdf/PyMuPDF/issues/5125>_: get_pixmap() never returns on a tagged PDF page with many MCIDs - pdf_lookup_mcid_in_mcids is a linear scan, making rendering O(n**2) per page
  • Fixed 5140 <https://github.com/pymupdf/PyMuPDF/issues/5140>_: Page.get_label() raises IndexError when the page precedes the first label definition
  • Fixed 5152 <https://github.com/pymupdf/PyMuPDF/issues/5152>_: apply_redactions() does not remove text shown with the ' operator after TL + Td (regression in 1.28)
  • Fixed 5154 <https://github.com/pymupdf/PyMuPDF/issues/5154>_: insert_pdf raises ValueError: is not in list when a widget's /Parent does not list it in /Kids
  • Fixed 5165 <https://github.com/pymupdf/PyMuPDF/issues/5165>_: Page.add_widget fails for radio buttons

Other:

  • Added support for form field hierarchies.
  • Added support for radio button groups.
  • Added support for widget aliases.
  • Fixed builds with swig-4.5.
  • Fixed https://bugs.ghostscript.com/show_bug.cgi?id=709683_ Path Traversal and Arbitrary File Write in PyMuPDF CLI Font Extraction (CVE-2026-82035)
  • Fixed ignoring aspect ratio for square images.
  • Fixed potential SEGV in pymupdf.Page.get_cdrawings() if callback raises exception.
  • Fixed use with python-3.15.
  • Remove the debug timing loop from Annot.update().
  • Retrospectively marked #3478 fixed in 1.25.3.
  • Retrospectively marked #4158 fixed in 1.27.2.2
  • Retrospectively marked #4896 fixed in 1.28.0.
  • Retrospectively marked #4918 fixed in 1.28.0.
  • Supported Python versions are now 3.11-3.15.
  • Use MuPDF-1.28.5.
  • Warning for use of deprecated fitz API now uses warnings.warn() with FutureWarning.

Changes in version 1.28.2 (2026-08-06)

Fixed issues:

... (truncated)

Commits
  • b8904b2 Revert "setup.py: require python<3.15 if we contain layout code."
  • 1f02569 Tweaks to PyMuPDF Office page
  • d40fc8e Updates documentation to reflect new 2.0 API.
  • a2fa1fe Update show_features.py
  • 4f2762d Update show_features.py
  • 902bacf Add Configuration overview
  • d262679 setup.py: require python<3.15 if we contain layout code.
  • 690d196 docs/installation.rst: minimum python version is now 3.11.
  • ec825ce changes.txt: added note about new python version range 3.11-3.15.
  • dbe7a6a README.md: updated python version range to 3.11-3.15.
  • Additional commits viewable in compare view

Updates mypy to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.15 Support

Mypy 2.4 supports running on Python 3.15 and type checking most Python 3.15 features. This includes the new builtin sentinel type for sentinel values (PEP 661), which mypy now supports (see below for details). Lazy imports (PEP 810) and unpacking in comprehensions (PEP 798) are also supported. Closed TypedDicts (PEP 728) have been supported since mypy 2.2, but the extra_items TypedDict argument, also introduced in PEP 728, is still unsupported. Support for extra_items will be added in a future mypy release.

Native Parser Enabled by Default

Mypy now uses the new native parser by default. It's based on the Ruff parser, and it's significantly faster than the legacy parser, which uses the stdlib ast module. The native parser also has other benefits:

  • You can target newer Python versions and use recent Python syntax even when running mypy on an older Python version. For example, you can use --python-version 3.15 when running mypy on Python 3.14.
  • Stub files can use syntax that is newer than the target Python version. For example, stubs can use the PEP 695 generic class syntax (class Box[T]: ...) when running on or targeting Python 3.10.
  • Parallel type checking requires the native parser.

The legacy parser is still available through --no-native-parser, or native_parser = False in the config file (native_parser = false under [tool.mypy] in pyproject.toml). We are planning to remove the legacy parser in early 2027. If you run into a problem with the native parser, please report it on the issue tracker.

Unlike the legacy parser, the native parser doesn't support type comments for variables defined by for and with statements. These type comments are silently ignored, and the types of the variables are

... (truncated)

Commits

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.
Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates pytest-cov to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

  • Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

  • Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

7.0.0 (2025-09-09)

  • Dropped support for subprocesses measurement.

    It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interactions with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

    To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

    .. code-block:: ini

    [run] patch = subprocess

    This release also requires at least coverage 7.10.6.

  • Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

  • Removed some not really necessary testing deps like six.

... (truncated)

Commits
  • 66c8a52 Bump version: 7.0.0 → 7.1.0
  • f707662 Make the examples use pypy 3.11.
  • 6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
  • 8ebf20b Update changelog.
  • 861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
  • fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
  • 78c9c4e Only run the 3.9 on older deps.
  • 4849a92 Punctuation.
  • 197c35e Update changelog and hopefully I don't forget to publish release again :))
  • 14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the python-dependencies group across 1 directory wi…
64e0bbb 
…th 6 updates

Updates the requirements on [rich](https://github.com/Textualize/rich), [pillow](https://github.com/python-pillow/Pillow), [pymupdf](https://github.com/pymupdf/pymupdf), [mypy](https://github.com/python/mypy), [pytest](https://github.com/pytest-dev/pytest) and [pytest-cov](https://github.com/pytest-dev/pytest-cov) to permit the latest version.

Updates `rich` to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.7.0...v15.0.0)

Updates `pillow` to 13.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.3.0...13.0.0)

Updates `pymupdf` to 2.0
- [Release notes](https://github.com/pymupdf/pymupdf/releases)
- [Changelog](https://github.com/pymupdf/PyMuPDF/blob/main/changes.txt)
- [Commits](pymupdf/PyMuPDF@1.24.0...2.0)

Updates `mypy` to 2.4.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.10.0...v2.4.0)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.2.0...9.1.1)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v5.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pillow
  dependency-version: 13.0.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pymupdf
  dependency-version: '2.0'
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.4.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants