Skip to content

Bump the version-updates group with 4 updates - #3803

Merged
arkid15r merged 1 commit into
devfrom
dependabot/uv/dev/version-updates-48feb6b688
Sep 3, 2026
Merged

Bump the version-updates group with 4 updates#3803
arkid15r merged 1 commit into
devfrom
dependabot/uv/dev/version-updates-48feb6b688

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the version-updates group with 4 updates: gitpython, pre-commit, uv and coverage.

Updates gitpython from 3.1.58 to 3.1.59

Release notes

Sourced from gitpython's releases.

3.1.59 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Commits
  • 66340d7 prepare changelog prior to release
  • a5e047d Merge pull request #2211 from gitpython-developers/config-sanitize-more
  • ef7568e fix: ignore includes in submodule configuration
  • 4b4e47f fix: preserve multiline config values when writing
  • b473abb Merge pull request #2210 from gitpython-developers/fix-clone-unsafe-option
  • 5ff52cc Merge pull request #2209 from caroescm/fix-index-add-chmod
  • b68afff Block separate git directories during clone
  • 93677a0 fix: index.add() now supports filters (#2021)
  • 9729ed3 Merge pull request #2208 from gitpython-developers/security-fixes
  • ce9d8e8 prepare next release
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates uv from 0.12.2 to 0.12.3

Release notes

Sourced from uv's releases.

0.12.3

Release Notes

Released on 2026-08-07.

Python

  • Add CPython 3.13.15 (#20997)

Preview features

  • Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#20992)
  • Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#20991)
  • Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#20990)

Performance

  • Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#20989)
  • Reuse compiled workspace exclusion patterns during workspace discovery (#20988)
  • Speed up conflict-heavy resolutions by avoiding materialized range complements (#20982)
  • Avoid slow procfs reads during Python interpreter discovery on Linux (#20987)

Documentation

  • Add PEP 740 attestations to the GitHub Actions publishing example (#20986)
  • Restrict the GitHub Actions publishing example to Python version tags (#20973)
  • Correct --python-pin to --pin-python in the uv init --bare example (#20876)

Install uv 0.12.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.3/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.3/uv-installer.ps1 | iex"

Download uv 0.12.3

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.3

Released on 2026-08-07.

Python

  • Add CPython 3.13.15 (#20997)

Preview features

  • Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#20992)
  • Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#20991)
  • Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#20990)

Performance

  • Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#20989)
  • Reuse compiled workspace exclusion patterns during workspace discovery (#20988)
  • Speed up conflict-heavy resolutions by avoiding materialized range complements (#20982)
  • Avoid slow procfs reads during Python interpreter discovery on Linux (#20987)

Documentation

  • Add PEP 740 attestations to the GitHub Actions publishing example (#20986)
  • Restrict the GitHub Actions publishing example to Python version tags (#20973)
  • Correct --python-pin to --pin-python in the uv init --bare example (#20876)
Commits

Updates coverage from 7.15.3 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

  • Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits
  • 4c0e7ff docs: sample HTML for 7.15.4
  • db4cc32 docs: prep for 7.15.4
  • c33085c style: start gradual move to ruff 0.16
  • 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
  • b64d53d build: make 3.15 wheels
  • 53792ab build: show the python version for kits
  • f6b03c7 chore: make upgrade_one package=cibuildwheel
  • d9b660a chore: make upgrade
  • b128a31 docs: oops, move this entry to the correct place
  • a7a2c15 fix: escape filename urls in html report href attributes (#2227)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the version-updates group with 4 updates
4642b3c 
Bumps the version-updates group with 4 updates: [gitpython](https://github.com/gitpython-developers/GitPython), [pre-commit](https://github.com/pre-commit/pre-commit), [uv](https://github.com/astral-sh/uv) and [coverage](https://github.com/coveragepy/coveragepy).


Updates `gitpython` from 3.1.58 to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.58...3.1.59)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `uv` from 0.12.2 to 0.12.3
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.2...0.12.3)

Updates `coverage` from 7.15.3 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.3...7.15.4)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: uv
  dependency-version: 0.12.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 2, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 2, 2026
@sonarqubecloud

sonarqubecloud Bot commented Sep 2, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@arkid15r
arkid15r enabled auto-merge September 3, 2026 00:39
@arkid15r
arkid15r added this pull request to the merge queue Sep 3, 2026
Merged via the queue into dev with commit c1b270b Sep 3, 2026
24 checks passed
@arkid15r
arkid15r deleted the dependabot/uv/dev/version-updates-48feb6b688 branch September 3, 2026 00:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arkid15r arkid15r arkid15r approved these changes
@PPsyrius PPsyrius PPsyrius approved these changes
@KJhellico KJhellico Awaiting requested review from KJhellico KJhellico is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@arkid15r @PPsyrius