Skip to content

Bump the allpip group across 1 directory with 9 updates #539

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the allpip group across 1 directory with 9 updates #539

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 5, 2025 •
edited
Loading

Bumps the allpip group with 9 updates in the / directory:

Package From To
pydantic 2.11.2 2.11.4
pydantic-settings 2.8.1 2.9.1
uvicorn 0.34.0 0.34.2
fastapi-csrf-protect 1.0.2 1.0.3
poetry 2.1.2 2.1.3
playwright 1.51.0 1.52.0
ruff 0.11.4 0.11.8
pyright 1.1.398 1.1.400
setuptools 78.1.0 80.3.1

Updates pydantic from 2.11.2 to 2.11.4

Release notes

Sourced from pydantic's releases.

v2.11.4 2025-04-29

What's Changed

Packaging

Changes

  • Allow config and bases to be specified together in create_model() by @​Viicos in #11714. This change was backported as it was previously possible (although not meant to be supported) to provide model_config as a field, which would make it possible to provide both configuration and bases.

Fixes

v2.11.3 2025-04-08

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.11.2...v2.11.3

Changelog

Sourced from pydantic's changelog.

v2.11.4 (2025-04-29)

GitHub release

What's Changed

Packaging

Changes

  • Allow config and bases to be specified together in create_model() by @​Viicos in #11714. This change was backported as it was previously possible (although not meant to be supported) to provide model_config as a field, which would make it possible to provide both configuration and bases.

Fixes

v2.11.3 (2025-04-08)

GitHub release

What's Changed

Packaging

Fixes

  • Preserve field description when rebuilding model fields by @​Viicos in #11698
Commits
  • d444cd1 Prepare release v2.11.4
  • 828fc48 Add documentation note about common pitfall with the annotated pattern
  • 42bf1fd Bump pydantic-core to v2.33.2 (#11804)
  • 7b3f513 Allow config and bases to be specified together in create_model()
  • fc52138 Traverse function-before schemas during schema gathering
  • 25af789 Fix issue with recursive generic models
  • 91ef6bb Update monthly download count in documentation
  • a830775 Bump mkdocs-llmstxt to v0.2.0
  • f5d1c87 Fix crash when expanding root type in the mypy plugin
  • c80bb35 Remove coercion of decimal constraints
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.8.1 to 2.9.1

Release notes

Sourced from pydantic-settings's releases.

v2.9.0

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.8.1...v2.9.0

Commits

Updates uvicorn from 0.34.0 to 0.34.2

Release notes

Sourced from uvicorn's releases.

Version 0.34.2

What's Changed

New Contributors

Full Changelog: encode/uvicorn@0.34.1...0.34.2

Version 0.34.1

What's Changed

New Contributors

Full Changelog: encode/uvicorn@0.34.0...0.34.1

Changelog

Sourced from uvicorn's changelog.

0.34.2 (April 19, 2025)

Fixed

  • Flush stdout buffer on Windows to trigger reload (#2604)

0.34.1 (April 13, 2025)

Deprecated

  • Deprecate ServerState in the main module (#2581)
Commits

Updates fastapi-csrf-protect from 1.0.2 to 1.0.3

Commits

Updates poetry from 2.1.2 to 2.1.3

Release notes

Sourced from poetry's releases.

2.1.3

Changed

  • Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#10374).

Fixed

  • Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#10324).
  • Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#10352).
  • Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#10353).
  • Fix an issue where the original error was not printed if building a git dependency failed (#10366).
  • Fix an issue where wheels for the wrong platform were installed in rare cases. (#10361).

poetry-core (2.1.3)

  • Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#858).
  • Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#857).
  • Fix an issue where markers with === were not parsed correctly (#860).
  • Fix an issue where local versions with upper case letters caused an error (#859).
  • Fix an issue where extra markers with a value starting with "in" were not validated correctly (#862).
Changelog

Sourced from poetry's changelog.

[2.1.3] - 2025-05-04

Changed

  • Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#10374).

Fixed

  • Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#10324).
  • Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#10352).
  • Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#10353).
  • Fix an issue where the original error was not printed if building a git dependency failed (#10366).
  • Fix an issue where wheels for the wrong platform were installed in rare cases. (#10361).

poetry-core (2.1.3)

  • Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#858).
  • Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#857).
  • Fix an issue where markers with === were not parsed correctly (#860).
  • Fix an issue where local versions with upper case letters caused an error (#859).
  • Fix an issue where extra markers with a value starting with "in" were not validated correctly (#862).
Commits

Updates playwright from 1.51.0 to 1.52.0

Release notes

Sourced from playwright's releases.

v1.52.0

Highlights

  • New method expect(locator).to_contain_class() to ergonomically assert individual class names on the element.

      expect(page.get_by_role("listitem", name="Ship v1.52")).to_contain_class("done")

  • Aria Snapshots got two new properties: /children for strict matching and /url for links.

    expect(locator).to_match_aria_snapshot("""
  - list
    - /children: equal
    - listitem: Feature A
    - listitem:
      - link "Feature B":
        - /url: "https://playwright.dev"
""")

Miscellaneous

Breaking Changes

  • Method route.continue() does not allow to override the Cookie header anymore. If a Cookie header is provided, it will be ignored, and the cookie will be loaded from the browser's cookie store. To set custom cookies, use browserContext.add_cookies().
  • macOS 13 is now deprecated and will no longer receive WebKit updates. Please upgrade to a more recent macOS version to continue benefiting from the latest WebKit improvements.

Browser Versions

  • Chromium 136.0.7103.25
  • Mozilla Firefox 137.0
  • WebKit 18.4

This version was also tested against the following stable channels:

  • Google Chrome 135
  • Microsoft Edge 135
Commits
  • eec856f chore(roll): roll glob changes from Playwright 1.52.0 (#2824)
  • f5857df chore: publish win32-arm64 wheel (#2800)
  • ec92f20 build(deps): bump types-requests from 2.32.0.20250306 to 2.32.0.20250328 (#2807)
  • 0e23e33 build(deps): bump pytest-repeat from 0.9.3 to 0.9.4 (#2812)
  • dc525e7 chore: adjust license metadata in pyproject.toml (#2828)
  • 805147f build(deps): bump actions/create-github-app-token from 1 to 2 in the actions ...
  • 10e9ea3 build(deps): bump typing-extensions from 4.12.2 to 4.13.2 (#2817)
  • 353c9d5 build(deps): bump pytest-cov from 6.0.0 to 6.1.1 (#2811)
  • 74e2177 chore(roll): roll Playwright to 1.52.0 (omitting glob changes) (#2823)
  • 68d96cb build(deps): bump flake8 from 7.1.2 to 7.2.0 (#2806)
  • Additional commits viewable in compare view

Updates ruff from 0.11.4 to 0.11.8

Release notes

Sourced from ruff's releases.

0.11.8

Release Notes

Preview features

  • [airflow] Apply auto fixes to cases where the names have changed in Airflow 3 (AIR302, AIR311) (#17553, #17570, #17571)
  • [airflow] Extend AIR301 rule (#17598)
  • [airflow] Update existing AIR302 rules with better suggestions (#17542)
  • [refurb] Mark fix as safe for readlines-in-for (FURB129) (#17644)
  • [syntax-errors] nonlocal declaration at module level (#17559)
  • [syntax-errors] Detect single starred expression assignment x = *y (#17624)

Bug fixes

  • [flake8-pyi] Ensure Literal[None,] | Literal[None,] is not autofixed to None | None (PYI061) (#17659)
  • [flake8-use-pathlib] Avoid suggesting Path.iterdir() for os.listdir with file descriptor (PTH208) (#17715)
  • [flake8-use-pathlib] Fix PTH104 false positive when rename is passed a file descriptor (#17712)
  • [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a file descriptor (#17709)
  • [flake8-use-pathlib] Fix PTH123 false positive when open is passed a file descriptor from a function call (#17705)
  • [pycodestyle] Fix duplicated diagnostic in E712 (#17651)
  • [pylint] Detect global declarations in module scope (PLE0118) (#17411)
  • [syntax-errors] Make async-comprehension-in-sync-comprehension more specific (#17460)

Configuration

  • Add option to disable typing_extensions imports (#17611)

Documentation

Other changes

  • Add Python 3.14 to configuration options (#17647)
  • Make syntax error for unparenthesized except tuples version specific to before 3.14 (#17660)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.8

Preview features

  • [airflow] Apply auto fixes to cases where the names have changed in Airflow 3 (AIR302, AIR311) (#17553, #17570, #17571)
  • [airflow] Extend AIR301 rule (#17598)
  • [airflow] Update existing AIR302 rules with better suggestions (#17542)
  • [refurb] Mark fix as safe for readlines-in-for (FURB129) (#17644)
  • [syntax-errors] nonlocal declaration at module level (#17559)
  • [syntax-errors] Detect single starred expression assignment x = *y (#17624)

Bug fixes

  • [flake8-pyi] Ensure Literal[None,] | Literal[None,] is not autofixed to None | None (PYI061) (#17659)
  • [flake8-use-pathlib] Avoid suggesting Path.iterdir() for os.listdir with file descriptor (PTH208) (#17715)
  • [flake8-use-pathlib] Fix PTH104 false positive when rename is passed a file descriptor (#17712)
  • [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a file descriptor (#17709)
  • [flake8-use-pathlib] Fix PTH123 false positive when open is passed a file descriptor from a function call (#17705)
  • [pycodestyle] Fix duplicated diagnostic in E712 (#17651)
  • [pylint] Detect global declarations in module scope (PLE0118) (#17411)
  • [syntax-errors] Make async-comprehension-in-sync-comprehension more specific (#17460)

Configuration

  • Add option to disable typing_extensions imports (#17611)

Documentation

Other changes

  • Add Python 3.14 to configuration options (#17647)
  • Make syntax error for unparenthesized except tuples version specific to before 3.14 (#17660)

0.11.7

Preview features

  • [airflow] Apply auto fixes to cases where the names have changed in Airflow 3 (AIR301) (#17355)
  • [perflint] Implement fix for manual-dict-comprehension (PERF403) (#16719)
  • [syntax-errors] Make duplicate parameter names a semantic error (#17131)

Bug fixes

  • [airflow] Fix typos in provider package names (AIR302, AIR312) (#17574)
  • [flake8-type-checking] Visit keyword arguments in checks involving typing.cast/typing.NewType arguments (#17538)
  • [pyupgrade] Preserve parenthesis when fixing native literals containing newlines (UP018) (#17220)
  • [refurb] Mark the FURB161 fix unsafe except for integers and booleans (#17240)

... (truncated)

Commits
  • 75effb8 Bump 0.11.8 (#17766)
  • 3353d07 [flake8-use-pathlib] Fix PTH104false positive when rename is passed a f...
  • 41f3f21 Improve messages outputted by py-fuzzer (#17764)
  • 76ec64d [red-knot] Allow subclasses of Any to be assignable to Callable types (#17717)
  • b7e69ec [red-knot] Increase durability of read-only File fields (#17757)
  • 9c57862 [red-knot] Cache source type during semanic index building (#17756)
  • 67ef370 [flake8-use-pathlib] Fix PTH116 false positive when stat is passed a fi...
  • e17e1e8 Sync vendored typeshed stubs (#17753)
  • 03d8679 [red-knot] Preliminary NamedTuple support (#17738)
  • d33a503 [red-knot] Add tests for classes that have incompatible __new__ and `__init...
  • Additional commits viewable in compare view

Updates pyright from 1.1.398 to 1.1.400

Commits

Updates setuptools from 78.1.0 to 80.3.1

Changelog

Sourced from setuptools's changelog.

v80.3.1

Bugfixes

  • Restored select attributes in easy_install for temporary pbr compatibility. (#4976)

v80.3.0

Features

v80.2.0

Features

  • Restored support for install_scripts --executable (and classic behavior for the executable for those invocations). Instead, build_editable provides the portable form of the executables for downstream installers to rewrite. (#4934)

v80.1.0

Features

  • Added a deadline of Oct 31 to the setup.py install deprecation.

Bugfixes

  • With setup.py install --prefix=..., fall back to distutils install rather than failing. Note that running setup.py install is deprecated. (#3143)

v80.0.1

Bugfixes

  • Fixed index_url logic in develop compatibility shim. (#4966)

... (truncated)

Commits
  • f37845b Bump version: 80.3.0 → 80.3.1
  • a6f8db0 Merge pull request #4980 from pypa/debt/4976-pbr-compat
  • 05cf544 Add news fragment.
  • 5b39e4e Add the deprecation warning to attribute access.
  • 30c0038 Render the attributes dynamically.
  • d622935 Restore ScriptWriter and sys_executable properties.
  • 88bd892 Add a failing integration test. Ref #4976
  • 9dccfa4 Moved pbr setup into a fixture.
  • af8b322 Bump version: 80.2.0 → 80.3.0
  • e7b8084 Merge pull request #4963 from pypa/debt/remove-easy-install
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the allpip group across 1 directory with 9 updates
3b482eb 
Bumps the allpip group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.2` | `2.11.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.8.1` | `2.9.1` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.34.0` | `0.34.2` |
| [fastapi-csrf-protect](https://github.com/aekasitt/fastapi-csrf-protect) | `1.0.2` | `1.0.3` |
| [poetry](https://github.com/python-poetry/poetry) | `2.1.2` | `2.1.3` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.51.0` | `1.52.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.4` | `0.11.8` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.398` | `1.1.400` |
| [setuptools](https://github.com/pypa/setuptools) | `78.1.0` | `80.3.1` |



Updates `pydantic` from 2.11.2 to 2.11.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.2...v2.11.4)

Updates `pydantic-settings` from 2.8.1 to 2.9.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.8.1...v2.9.1)

Updates `uvicorn` from 0.34.0 to 0.34.2
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/docs/release-notes.md)
- [Commits](encode/uvicorn@0.34.0...0.34.2)

Updates `fastapi-csrf-protect` from 1.0.2 to 1.0.3
- [Commits](https://github.com/aekasitt/fastapi-csrf-protect/commits)

Updates `poetry` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.1.2...2.1.3)

Updates `playwright` from 1.51.0 to 1.52.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.51.0...v1.52.0)

Updates `ruff` from 0.11.4 to 0.11.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.4...0.11.8)

Updates `pyright` from 1.1.398 to 1.1.400
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.398...v1.1.400)

Updates `setuptools` from 78.1.0 to 80.3.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v78.1.0...v80.3.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: pydantic-settings
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: uvicorn
  dependency-version: 0.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: fastapi-csrf-protect
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: poetry
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: playwright
  dependency-version: 1.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: ruff
  dependency-version: 0.11.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: pyright
  dependency-version: 1.1.400
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: setuptools
  dependency-version: 80.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: allpip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Dependancy issue label May 5, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github May 12, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 12, 2025
@dependabot dependabot bot deleted the dependabot/pip/allpip-e21d2f909c branch May 12, 2025 06:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Dependancy issue
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants