Skip to content

Bump the minor group in /sample-py-app with 23 updates - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sample-py-app/minor-611ec3d824
Closed

Bump the minor group in /sample-py-app with 23 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sample-py-app/minor-611ec3d824

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group in /sample-py-app with 23 updates:

Package From To
anyio 4.12.1 4.13.0
beaker 1.12.1 1.13.0
blivet 3.12.1 3.13.2
boto3 1.42.84 1.43.2
botocore 1.42.84 1.43.2
click 8.1.7 8.3.3
humanize 4.13.0 4.15.0
idna 3.10 3.13
jmespath 1.0.1 1.1.0
jsonschema 4.23.0 4.26.0
lxml 6.0.1 6.1.0
mako 1.2.3 1.3.12
psutil 7.0.0 7.2.2
pycairo 1.28.0 1.29.0
pyenchant 3.2.2 3.3.0
pygobject 3.54.5 3.56.2
pyopenssl 26.0.0 26.1.0
rapidfuzz 3.12.2 3.14.5
referencing 0.36.2 0.37.0
regex 2026.2.28 2026.4.4
requests 2.32.5 2.33.1
rpds-py 0.27.0 0.30.0
s3transfer 0.16.0 0.17.0

Updates anyio from 4.12.1 to 4.13.0

Release notes

Sourced from anyio's releases.

4.13.0

  • Dropped support for Python 3.9
  • Added a ttl parameter to the anyio.functools.lru_cache wrapper (#1073; PR by @​Graeme22)
  • Widened the type annotations of file I/O streams to accept IO[bytes] instead of just BinaryIO (#1078)
  • Fixed anyio.Path not being compatible with Python 3.15 due to the removal of pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__() (#1061; PR by @​veeceey)
  • Fixed the BrokenResourceError raised by the asyncio SocketStream not having the original exception as its cause (#1055; PR by @​veeceey)
  • Fixed the TypeError raised when using "func" as a parameter name in pytest.mark.parametrize when using the pytest plugin (#1068; PR by @​JohnnyDeuss)
  • Fixed the pytest plugin not running tests that had the anyio marker added programmatically via pytest_collection_modifyitems (#422; PR by @​chbndrhnns)
  • Fixed cancellation exceptions leaking from a CancelScope on asyncio when they are contained in an exception group alongside non-cancellation exceptions (#1091; PR by @​gschaffner)
  • Fixed Condition.wait() not passing on a notification when the task is cancelled but already received a notification
  • Fixed inverted condition in the process pool shutdown phase which would cause still-running pooled processes not to be terminated (#1074; PR by @​bysiber)
Commits
  • afbe93c Bumped up the version
  • 33bdf2e Rearranged the changelog entries
  • 19e09e2 Fixed inverted condition in _forcibly_shutdown_process_pool_on_exit (#1074)
  • 9369d80 Fixed Condition.wait() not handing over notification when cancelled
  • 6f122ab Fixed cancellation exceptions leaking from a CancelScope on asyncio when th...
  • beaa45a [pre-commit.ci] pre-commit autoupdate (#1097)
  • 602f660 Widened type annotations to accept IO[bytes] in file streams
  • b5dcd45 Added note about erasing the template
  • d68670b [pre-commit.ci] pre-commit autoupdate (#1090)
  • fc17a22 tweak to_thread docs about abandon_on_cancel (#1088)
  • Additional commits viewable in compare view

Updates beaker from 1.12.1 to 1.13.0

Release notes

Sourced from beaker's releases.

Version 1.13.0

What's Changed

New Contributors

Full Changelog: bbangert/beaker@1.12.1...1.13.0

Changelog

Sourced from beaker's changelog.

Release 1.13.0 (2024-04-11)

  • Fix validation messages for validate_key and encrypt_key
  • Added support for rediscluster via ext:redisclusternm
  • Removed the need to install mock library to run tests
Commits

Updates blivet from 3.12.1 to 3.13.2

Release notes

Sourced from blivet's releases.

Blivet 3.13.2

  • fs: Set EFIFS min size to 32 MiB (vtrefny)
  • Fix log message in DeviceFactory._filter_disks (vtrefny)
  • iscsi: Fix getting firmware initiator name (vtrefny)
  • iscsi: Fix calling initiator methods without argument (vtrefny)
  • doc: Fix generating documentation with Sphinx 8 (vtrefny)
  • Only enforce /boot location limit on non-EFI systems (#2391443) (vtrefny)

Blivet 3.13.1

  • infra: bump actions/checkout from 5 to 6 (49699333+dependabot[bot])
  • CONTRIBUTING: Update directions for updating documentation (vtrefny)
  • tests: Do not patch builtins.open directly (vtrefny)
  • Protect against errors when checking DM subsystem (vtrefny)
  • Do not set XBOOTLDR GUID for /boot partition (#2406974) (vtrefny)
  • pylint: Remove suggestion-mode from pylintrc (vtrefny)
  • tests: Add check for saving passphrase with context not set (vtrefny)
  • infra: bump actions/upload-artifact from 4 to 5 (49699333+dependabot[bot])
  • Fix luks save_passphrase for missing format context (rvykydal)
  • tests: Add a simple test case for parsing iSCSI lun (vtrefny)
  • iSCSI: don't crash when LUN ID >= 256 (rmetrich)
  • Allow using uninitialized disks in device factory (vtrefny)
  • Make sure size for VGs without PVs is Size not int (vtrefny)
  • Fix setting mount options in FSTabManager.get_device (vtrefny)
  • Fix working with mountpoint in FSTabManager.get_device (vtrefny)
  • Fix working with fstype in FSTabManager.get_device (vtrefny)

Blivet 3.13.0

  • tests: Skip translation tests if required locales aren't available (vtrefny)
  • tests: Select only available libbytesize locales for size tests (vtrefny)
  • tests: Move VM tests to StorageTestCase (vtrefny)
  • tests: Move partitioning tests that don't need storage to unit tests (vtrefny)
  • tests: Move ImageBackedTestCase tests to StorageTestCase (vtrefny)
  • misc: Remove custom Vagrantfile (vtrefny)
  • tests: Use dasbus in run_tests too (vtrefny)
  • spec: Bump required version of libblockdev to 3.4.0 (vtrefny)
  • luks: Check for LUKS escrow support separately (vtrefny)
  • Do not run Stratis populator on other formats than stratis and LUKS (vtrefny)
  • Use dasbus for DBus connections (vtrefny)
  • Fix assert in md_test.MDLUKSTestCase (vtrefny)
  • Run udev trigger after creating a new MD array (vtrefny)
  • Add support for percentage based sizes for thin logical volumes (vtrefny)
  • Create helper functions for common code in LVM tests (vtrefny)
  • Add tests for percentage based sizes and grow with LVM (vtrefny)
  • Use libblockdev for (un)mounting for btrfs operations (vtrefny)
  • infra: bump actions/checkout from 4 to 5 (49699333+dependabot[bot])
  • ci: Add UDisks iSCSI module to test dependencies (vtrefny)
  • ci: Run all tests in Packit (vtrefny)
  • tests: Add parameter to allow running CI-only tests too (vtrefny)
  • tests: Make sure iscsi-init.service is started for iSCSI tests (vtrefny)
  • Add a pre-wipe fixup function for LVM logical volumes (vtrefny)

... (truncated)

Changelog

Sourced from blivet's changelog.

3.13.0

  • Multiple contexts support for LUKS devices_
  • ExFAT filesystem creating support_
  • Stratis 3.8.0 support_
  • Optional format destroy action_
  • LUKS label and subsystem support_
  • DBus client functions now use dasbus library_
  • Python build process modernization_

Multiple contexts support for LUKS devices

Blivet now allows using multiple passphrases or key files when creating a new or managing an existing LUKS device. In the future more context types (kernel keyring, TPM etc.) will be supported.

ExFAT filesystem creating support

ExFAT filesystem can now be created by blivet.

Stratis 3.8.0 support

Blivet support for Stratis devices was adjusted to work with the latest 3.8.0 release. This includes for example working with stopped Stratis pools.

Optional format destroy action

ActionDestroyFormat can now be marked as optional to ignore errors when removing the format fails. This is enabled by default when removing a device.

LUKS label and subsystem support

Label and subsystem can now be specified when creating a new LUKS format.

DBus client functions now use dasbus library

Blivet now uses the dasbus library for DBus client calls replacing our custom GLib based implementation.

Python build process modernization

With the upcoming deprecation of setup.py install, blivet has updated its build process to use modern Python features.

3.12.0

... (truncated)

Commits
  • 8d1ce09 New version: 3.13.2
  • 6c66dc5 fs: Set EFIFS min size to 32 MiB
  • 0a29788 Fix log message in DeviceFactory._filter_disks
  • 8aac445 iscsi: Fix getting firmware initiator name
  • d6befaf iscsi: Fix calling initiator methods without argument
  • 6da08f0 doc: Fix generating documentation with Sphinx 8
  • 050ae95 Only enforce /boot location limit on non-EFI systems (#2391443)
  • 3ba5748 New version: 3.13.1
  • 79376d2 Merge pull request #1438 from vojtechtrefny/main_contributing-update
  • 364b01e Merge pull request #1439 from storaged-project/dependabot/github_actions/acti...
  • Additional commits viewable in compare view

Updates boto3 from 1.42.84 to 1.43.2

Commits
  • 7dc336e Merge branch 'release-1.43.2'
  • 99fd421 Bumping version to 1.43.2
  • 80f4db8 Add changelog entries from botocore
  • be6bdf3 Bump pytest from 8.1.1 to 9.0.3 (#4782)
  • 753bcab Merge branch 'release-1.43.1'
  • 09f56f4 Merge branch 'release-1.43.1' into develop
  • dd5b3a6 Bumping version to 1.43.1
  • 014f4ad Add changelog entries from botocore
  • 32edf1c Bump requests from 2.32.4 to 2.33.1 (#4781)
  • 959ae84 Merge branch 'release-1.43.0'
  • Additional commits viewable in compare view

Updates botocore from 1.42.84 to 1.43.2

Commits

Updates click from 8.1.7 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177
  • Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239
  • Mark make_default_short_help as private API. #3189 #3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248

8.3.2

This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-2 Milestone: https://github.com/pallets/click/milestone/29

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177
  • Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239
  • Mark make_default_short_help as private API. :issue:3189 :pr:3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248

Version 8.3.2

Released 2026-04-02

  • Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. :issue:3084 :pr:3152
  • Hide Sentinel.UNSET values as None when using lookup_default(). :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224

... (truncated)

Commits
  • c06d2d0 Release 8.3.3
  • f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
  • bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
  • 4a35225 Reduce blast-radius of UNSET in default_map (#3240)
  • c07bb93 Merge branch 'stable' into unset-in-default-map
  • c7e1ba8 Reorder ParameterSource (#3248)
  • 76552ff Show default string in prompt (#3328)
  • ac5cec5 Reorder ParameterSource from most to least explicit
  • 8c452e0 Merge branch 'stable' into show-default-string-in-prompt
  • 8c95c73 Reconcile default value passing and default activation (#3239)
  • Additional commits viewable in compare view

Updates humanize from 4.13.0 to 4.15.0

Release notes

Sourced from humanize's releases.

4.15.0

Added

Changed

Fixed

4.14.0

Added

Changed

Commits
  • 2ddb590 Replace Exception with more specific FileNotFoundError (#286)
  • e87f2e2 Add locale support for decimal separator in intword (#287)
  • 7175184 Add locale support for decimal separator in intword
  • 2526999 Update config (#285)
  • ba532d9 Replace Exception with more specific FileNotFoundError
  • bdc49ea Don't ignore UP038, it's been removed from Ruff
  • 86f116b Add seven-day cooldown to Renovate
  • e3f7116 No need for setup-python with prek-action
  • 3dca143 naturaldelta: round the value to nearest unit that makes sense (#272)
  • bac6f26 Apply suggestion from @​hugovk
  • Additional commits viewable in compare view

Updates idna from 3.10 to 3.13

Changelog

Sourced from idna's changelog.

3.13 (2026-04-22) +++++++++++++++++

  • Correct classification error for codepoint U+A7F1

3.12 (2026-04-21) +++++++++++++++++

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

3.11 (2025-10-12) +++++++++++++++++

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.
Commits
  • 89cdfd2 Release v3.13
  • 1eb0686 Pre-release 3.13
  • 5f20d1e Merge pull request #220 from kjd/unicode-next
  • 4ea8425 Regenerate idnadata.py with correct NFKC_CF data
  • fd47341 Use NFKC_CF from Unicode data files instead of Python's unicodedata module
  • a5304a4 Merge pull request #219 from kjd/release-3.12
  • d80d6f9 Release v3.12
  • 1bb44dd Merge pull request #218 from kjd/release-candidate-3.12rc0
  • 909c49d Release candidate for 3.12
  • c5459a1 Merge pull request #217 from kjd/housekeeping-2
  • Additional commits viewable in compare view

Updates jmespath from 1.0.1 to 1.1.0

Changelog

Sourced from jmespath's changelog.

1.1.0

  • Fix concurrency issue with cache (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)
  • Added support for Python 3.12-3.14 (pr [#331](https://github.com/jmespath/jmespath.py/issues/331) <https://github.com/jmespath/jmespath.py/pull/331>__)
  • Removed support for Python 3.7-3.8 (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)
Commits
  • 6ff419a Merge branch 'release-1.1.0'
  • 17e964f Bump version to 1.1.0
  • 5ce13aa Merge branch 'v1.1.0' into develop
  • d8f0457 Revert versions back to current version
  • 8cb3082 1.1.0
  • 6e37991 Update permissions in codeql.yml workflow (#338)
  • 141734d Bring .github settings up-to-date (#336)
  • 07e30cf Merge pull request #337 from nateprewitt/python_changelog
  • 9170711 Add missing changelog entries for Python support
  • cdb9327 Fix file encoding for Windows
  • Additional commits viewable in compare view

Updates jsonschema from 4.23.0 to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

v4.25.1

What's Changed

... (truncated)

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).

v4.25.1

  • Fix an incorrect required argument in the Validator protocol's type annotations (#1396).

v4.25.0

  • Add support for the iri and iri-reference formats to the format-nongpl extra via the MIT-licensed rfc3987-syntax. They were alread supported by the format extra. (#1388).

v4.24.1

  • Properly escape segments in ValidationError.json_path (#139).

v4.24.0

  • Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).
  • Support for Python 3.8 has been dropped, as it is end-of-life.
Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates lxml from 6.0.1 to 6.1.0

Changelog

Sourced from lxml's changelog.

6.1.0 (2026-04-17)

This release fixes a possible external entity injection (XXE) vulnerability in iterparse() and the ETCompatXMLParser.

Features added

  • GH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes in lxml.html.defs. This allows lxml_html_clean to pass them through. Patch by oomsveta.

  • The default chunk size for reading from file-likes in iterparse() is now configurable with a new chunk_size argument.

Bugs fixed

  • LP#2146291: The resolve_entities option was still set to True for iterparse and ETCompatXMLParser, allowing for external entity injection (XXE) when using these parsers without setting this option explicitly. The default was now changed to 'internal' only (as for the normal XML and HTML parsers since lxml 5.0). Issue found by Sihao Qiu as CVE-2026-41066.

6.0.4 (2026-04-12)

Bugs fixed

  • LP#2148019: Spurious MemoryError during namespace cleanup.

6.0.3 (2026-04-09)

Bugs fixed

  • Several out of memory error cases now raise MemoryError that were not handled before.

  • Slicing with large step values (outside of +/- sys.maxsize) could trigger undefined C behaviour.

  • LP#2125399: Some failing tests were fixed or disabled in PyPy.

  • LP#2138421: Memory leak in error cases when setting the public_id or system_url of a document.

... (truncated)

Commits
  • 43722f4 Update changelog.
  • 8747040 Name version of option change in docstring.
  • 6c36e6c Fix pypistats URL in download statistics script.
  • c7d76d6 Change security policy to point to Github security advisories.
  • 378ccf8 Update project income report.
  • 315270b Docs: Reduce TOC depth of package pages and move module contents first.
  • 6dbba7f Docs: Show current year in copyright line.
  • e4385bf Update project income report.
  • 5bed1e1 Validate file hashes in release download script.
  • c13ee10 Prepare release of 6.1.0.
  • Additional commits viewable in compare view

Updates mako from 1.2.3 to 1.3.12

Release notes

Sourced from mako's releases.

1.3.12

Released: Tue Apr 28 2026

bug

  • [bug] [template] Fixed issue in TemplateLookup where a URI with backslash path separators (e.g. \..\secret.txt) could bypass the directory traversal check on Windows, allowing reads of arbitrary files outside of the template directory. Backslash characters in URIs are now normalized to forward slashes before path resolution.

    References: #435

1.3.11

Released: Tue Apr 14 2026

bug

  • [bug] [template] Fixed issue in TemplateLookup where a URI with a double-slash prefix (e.g. //../../) could bypass the directory traversal check in Template, allowing reads of arbitrary files outside of the template directory. The issue was caused by an inconsistency in how leading slashes were stripped between TemplateLookup.get_template() and Template initialization.

    References: #434

1.3.10

Released: Thu Apr 10 2025

bug

  • [bug] [lexer] Fix undefined variable errors when strict_undefined=True when using a nested list comprehension. Pull request courtesy Sébastien Granjoux.

    References: #418

1.3.9

Released: Tue Feb 4 2025

bug

... (truncated)

Commits

Updates psutil from 7.0.0 to 7.2.2

Changelog

Sourced from psutil's changelog.

7.2.2 — 2026-01-28 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:2705: [Linux]: :meth:Process.wait now uses pidfd_open() + poll() (no busy loop). Requires Linux >= 5.3 and Pyt...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 2, 2026
@mr-jeeves
mr-jeeves Bot force-pushed the dependabot/pip/sample-py-app/minor-611ec3d824 branch 3 times, most recently from 29d664a to af37e59 Compare May 2, 2026 09:40
@dependabot @mr-jeeves
Bump the minor group in /sample-py-app with 23 updates
cf8932d 
Bumps the minor group in /sample-py-app with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.13.0` |
| [beaker](https://github.com/bbangert/beaker) | `1.12.1` | `1.13.0` |
| [blivet](https://github.com/storaged-project/blivet) | `3.12.1` | `3.13.2` |
| [boto3](https://github.com/boto/boto3) | `1.42.84` | `1.43.2` |
| [botocore](https://github.com/boto/botocore) | `1.42.84` | `1.43.2` |
| [click](https://github.com/pallets/click) | `8.1.7` | `8.3.3` |
| [humanize](https://github.com/python-humanize/humanize) | `4.13.0` | `4.15.0` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.13` |
| [jmespath](https://github.com/jmespath/jmespath.py) | `1.0.1` | `1.1.0` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.23.0` | `4.26.0` |
| [lxml](https://github.com/lxml/lxml) | `6.0.1` | `6.1.0` |
| [mako](https://github.com/sqlalchemy/mako) | `1.2.3` | `1.3.12` |
| [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.2.2` |
| [pycairo](https://github.com/pygobject/pycairo) | `1.28.0` | `1.29.0` |
| [pyenchant](https://github.com/pyenchant/pyenchant) | `3.2.2` | `3.3.0` |
| [pygobject](https://pygobject.gnome.org) | `3.54.5` | `3.56.2` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `26.0.0` | `26.1.0` |
| [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) | `3.12.2` | `3.14.5` |
| [referencing](https://github.com/python-jsonschema/referencing) | `0.36.2` | `0.37.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.2.28` | `2026.4.4` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.1` |
| [rpds-py](https://github.com/crate-py/rpds) | `0.27.0` | `0.30.0` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.16.0` | `0.17.0` |


Updates `anyio` from 4.12.1 to 4.13.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.12.1...4.13.0)

Updates `beaker` from 1.12.1 to 1.13.0
- [Release notes](https://github.com/bbangert/beaker/releases)
- [Changelog](https://github.com/bbangert/beaker/blob/master/CHANGELOG)
- [Commits](bbangert/beaker@1.12.1...1.13.0)

Updates `blivet` from 3.12.1 to 3.13.2
- [Release notes](https://github.com/storaged-project/blivet/releases)
- [Changelog](https://github.com/storaged-project/blivet/blob/main/release_notes.rst)
- [Commits](storaged-project/blivet@blivet-3.12.1...blivet-3.13.2)

Updates `boto3` from 1.42.84 to 1.43.2
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.84...1.43.2)

Updates `botocore` from 1.42.84 to 1.43.2
- [Commits](boto/botocore@1.42.84...1.43.2)

Updates `click` from 8.1.7 to 8.3.3
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.7...8.3.3)

Updates `humanize` from 4.13.0 to 4.15.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.13.0...4.15.0)

Updates `idna` from 3.10 to 3.13
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.13)

Updates `jmespath` from 1.0.1 to 1.1.0
- [Changelog](https://github.com/jmespath/jmespath.py/blob/develop/CHANGELOG.rst)
- [Commits](jmespath/jmespath.py@1.0.1...1.1.0)

Updates `jsonschema` from 4.23.0 to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.23.0...v4.26.0)

Updates `lxml` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.0.1...lxml-6.1.0)

Updates `mako` from 1.2.3 to 1.3.12
- [Release notes](https://github.com/sqlalchemy/mako/releases)
- [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/mako/commits)

Updates `psutil` from 7.0.0 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v7.0.0...v7.2.2)

Updates `pycairo` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/pygobject/pycairo/releases)
- [Changelog](https://github.com/pygobject/pycairo/blob/main/NEWS)
- [Commits](pygobject/pycairo@v1.28.0...v1.29.0)

Updates `pyenchant` from 3.2.2 to 3.3.0
- [Release notes](https://github.com/pyenchant/pyenchant/releases)
- [Commits](pyenchant/pyenchant@v3.2.2...v3.3.0)

Updates `pygobject` from 3.54.5 to 3.56.2

Updates `pyopenssl` from 26.0.0 to 26.1.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@26.0.0...26.1.0)

Updates `rapidfuzz` from 3.12.2 to 3.14.5
- [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases)
- [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst)
- [Commits](rapidfuzz/RapidFuzz@v3.12.2...v3.14.5)

Updates `referencing` from 0.36.2 to 0.37.0
- [Release notes](https://github.com/python-jsonschema/referencing/releases)
- [Changelog](https://github.com/python-jsonschema/referencing/blob/main/docs/changes.rst)
- [Commits](python-jsonschema/referencing@v0.36.2...v0.37.0)

Updates `regex` from 2026.2.28 to 2026.4.4
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.2.28...2026.4.4)

Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `rpds-py` from 0.27.0 to 0.30.0
- [Release notes](https://github.com/crate-py/rpds/releases)
- [Commits](crate-py/rpds@v0.27.0...v0.30.0)

Updates `s3transfer` from 0.16.0 to 0.17.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.16.0...0.17.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: beaker
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: blivet
  dependency-version: 3.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: boto3
  dependency-version: 1.43.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: botocore
  dependency-version: 1.43.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: click
  dependency-version: 8.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: humanize
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: idna
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: jmespath
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: lxml
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: mako
  dependency-version: 1.3.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pycairo
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pyenchant
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pygobject
  dependency-version: 3.56.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pyopenssl
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: rapidfuzz
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: referencing
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: regex
  dependency-version: 2026.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: rpds-py
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: s3transfer
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@mr-jeeves
mr-jeeves Bot force-pushed the dependabot/pip/sample-py-app/minor-611ec3d824 branch from af37e59 to cf8932d Compare May 2, 2026 09:41
@maansaake maansaake closed this May 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/pip/sample-py-app/minor-611ec3d824 branch May 2, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@maansaake