chore(deps): Bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #39 · ossf/si-tooling

dependabot · 2026-02-17T03:37:19Z

Bumps the dependencies group with 5 updates:

Package	From	To
click	`8.1.6`	`8.3.1`
iteration-utilities	`0.11.0`	`0.13.0`
jsonschema	`4.21.1`	`4.26.0`
pyyaml	`6.0.1`	`6.0.3`
requests	`2.32.4`	`2.32.5`

Updates click from 8.1.6 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079

Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030

Allow default to be set on Argument for nargs = -1. #2164 #3030

Show correct auto complete value for nargs option in combination with flag option #2813

Show correct auto complete value for nargs option in combination with flag option #2813

Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

Lazily import shutil. #3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055

Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068

Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079

Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137

Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021

When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090

Version 8.3.0

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)

Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value

The default parameter can now be any type (bool, None, etc.)

Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030

Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

Show correct auto complete value for nargs option in combination with flag option :issue:2813

Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

Lazily import shutil. :pr:3023

Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables.

... (truncated)

Commits

1d038f2 release version 8.3.1
03f3889 Fix Ruff UP038 warning (#3141)
3867781 Fix Ruff UP038 warning
b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
ea70da4 Don't test using a file in docs/ (#3102)
e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
a92c573 Fix test_edit to work with BSD sed (#3129)
bd131e1 Fix test_edit to work with BSD sed
0b5c6b7 Add Best practices section (#3127)
Additional commits viewable in compare view

Updates iteration-utilities from 0.11.0 to 0.13.0

Release notes

Sourced from iteration-utilities's releases.

Version 0.13.0

Python 3.13 compatibility

What's Changed

Version 0.13: Python 3.13 compatibility and minor updates by @MSeifert04 in MSeifert04/iteration_utilities#346

Full Changelog: MSeifert04/iteration_utilities@v0.12.1...v0.13.0

Version 0.12.1

Source distribution now includes all files needed to run the tests from the tarball

Version 0.12.0

Improve performance of ipartition by evaluating the predicate only once per item.

Add benchmarks comparing some functions with other libraries.

Python 3.12 compatibility

Dropped Python 3.5 and 3.6 compatibility

The top level __version__ property was removed. importlib.metadata.version from the Python standard library should be used if you need the version of iteration_utilities.

Changelog

Sourced from iteration-utilities's changelog.

Changelog for "iteration_utilities"

Version 0.14.0 (not released) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Python 3.14 compatibility: Thanks @akretz for fixing the code so the C extension compiles with Python 3.14.

Version 0.13.0 (2024-10-08) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Python 3.13 compatibility: A few optimizations are not possible anymore in Python 3.13. This means the performance of some functions (most notably groupedby) will be slightly slower.

Version 0.12.1 (2024-03-03) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Source distribution now includes all files needed to run the tests from the tarball

Version 0.12.0 (2023-10-13) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Improve performance of ipartition by evaluating the predicate only once per item.

Add benchmarks comparing some functions with other libraries.

Python 3.12 compatibility

Dropped Python 3.5 and 3.6 compatibility

The top level __version__ property was removed. importlib.metadata.version from the Python standard library should be used if you need the version of iteration_utilities.

Version 0.11.0 (2020-11-19) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

The functions implemented in C now parse boolean arguments based on their truth value instead of their integer value. This should be unnoticeable in typical usage.

Added always_iterable which wraps non-iterable inputs with an iterable.

Added empty as singleton representing an empty iterable.

... (truncated)

Commits

085e3c6 Merge pull request #346 from MSeifert04/python-3.13-removed-pyarg-parsestack
fb458c1 Version 0.13.0: Python 3.13 compatibility
d3df1a7 Include all of the tests folder in the source tarball
801ec40 Merge pull request #343 from MSeifert04/new_version
2dc2e9c Version 0.12.0
5c5f0f8 Fixed installation docs to reflect Python 3.7+ dependency and new optional de...
52d02df Try to fix the RTD builds
fdd4b7f Merge pull request #342 from MSeifert04/pyproject
66f3c92 Use pyproject.toml instead of setup.cfg
c2803a2 Merge pull request #341 from MSeifert04/removed-unuse-ci-scripts
Additional commits viewable in compare view

Updates jsonschema from 4.21.1 to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1400

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1405

Bump astral-sh/setup-uv from 6.5.0 to 6.6.0 by @dependabot[bot] in python-jsonschema/jsonschema#1406

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1407

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1413

Bump astral-sh/setup-uv from 6.6.0 to 6.6.1 by @dependabot[bot] in python-jsonschema/jsonschema#1412

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in python-jsonschema/jsonschema#1410

Bump softprops/action-gh-release from 2.3.2 to 2.3.3 by @dependabot[bot] in python-jsonschema/jsonschema#1409

Bump actions/setup-python from 5 to 6 by @dependabot[bot] in python-jsonschema/jsonschema#1411

validators: avoid urllib.request at import-time by @gudnimg in python-jsonschema/jsonschema#1416

Bump astral-sh/setup-uv from 6.6.1 to 6.8.0 by @dependabot[bot] in python-jsonschema/jsonschema#1417

Bump softprops/action-gh-release from 2.3.3 to 2.3.4 by @dependabot[bot] in python-jsonschema/jsonschema#1418

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1415

Bump softprops/action-gh-release from 2.3.4 to 2.4.1 by @dependabot[bot] in python-jsonschema/jsonschema#1419

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in python-jsonschema/jsonschema#1420

Bump astral-sh/setup-uv from 6.8.0 to 7.1.0 by @dependabot[bot] in python-jsonschema/jsonschema#1421

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1424

Bump astral-sh/setup-uv from 7.1.0 to 7.1.1 by @dependabot[bot] in python-jsonschema/jsonschema#1423

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1425

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1429

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1431

Bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in python-jsonschema/jsonschema#1432

Bump astral-sh/setup-uv from 7.1.1 to 7.1.2 by @dependabot[bot] in python-jsonschema/jsonschema#1430

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1434

Bump astral-sh/setup-uv from 7.1.2 to 7.1.4 by @dependabot[bot] in python-jsonschema/jsonschema#1435

Bump actions/checkout from 5 to 6 by @dependabot[bot] in python-jsonschema/jsonschema#1436

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1437

Bump softprops/action-gh-release from 2.4.2 to 2.5.0 by @dependabot[bot] in python-jsonschema/jsonschema#1438

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1439

Document uuid format by @sim642 in python-jsonschema/jsonschema#1440

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1441

Bump astral-sh/setup-uv from 7.1.4 to 7.1.6 by @dependabot[bot] in python-jsonschema/jsonschema#1442

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema#1443

New Contributors

@gudnimg made their first contribution in python-jsonschema/jsonschema#1416

@sim642 made their first contribution in python-jsonschema/jsonschema#1440

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

v4.25.1

What's Changed

Fix Validator protocol init to match runtime by @sirosen in python-jsonschema/jsonschema#1396

... (truncated)

Changelog

Sourced from jsonschema's changelog.

v4.26.0

Decrease import time by delaying importing of urllib.request (#1416).

v4.25.1

Fix an incorrect required argument in the Validator protocol's type annotations (#1396).

v4.25.0

Add support for the iri and iri-reference formats to the format-nongpl extra via the MIT-licensed rfc3987-syntax. They were alread supported by the format extra. (#1388).

v4.24.1

Properly escape segments in ValidationError.json_path (#139).

v4.24.0

Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).

Support for Python 3.8 has been dropped, as it is end-of-life.

v4.23.0

Do not reorder dictionaries (schemas, instances) that are printed as part of validation errors.

Declare support for Py3.13

v4.22.0

Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).

(Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

Commits

a727743 Add a changelog entry for 4.26.
6d28c13 Update the lockfile.
739499e Update pre-commit hooks.
cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
e6bbbb7 [pre-commit.ci] pre-commit autoupdate
d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
1f7c9fb Partially update docs requirements.
241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
2818efb Apache-2.0 -> nongpl
Additional commits viewable in compare view

Updates pyyaml from 6.0.1 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

6.0.2

What's Changed

Support for Cython 3.x and Python 3.13.

Full Changelog: yaml/pyyaml@6.0.1...6.0.2

6.0.2rc1

Support for extension build with Cython 3.x

Support for Python 3.13

Added PyPI wheels for musllinux on aarch64

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

yaml/pyyaml#808 -- Support for Cython 3.x and Python 3.13

Commits

49790e7 Release 6.0.3 (#889)
41309b0 Release 6.0.2 (#819)
dd9f0e1 6.0.2rc1 (#809)
f5527a2 disable CI trigger on PR edits
b4d80a7 Python 3.12 + musllinux_1_1_x86_64 wheel support
See full diff in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [click](https://github.com/pallets/click) | `8.1.6` | `8.3.1` | | [iteration-utilities](https://github.com/MSeifert04/iteration_utilities) | `0.11.0` | `0.13.0` | | [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.21.1` | `4.26.0` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | Updates `click` from 8.1.6 to 8.3.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.6...8.3.1) Updates `iteration-utilities` from 0.11.0 to 0.13.0 - [Release notes](https://github.com/MSeifert04/iteration_utilities/releases) - [Changelog](https://github.com/MSeifert04/iteration_utilities/blob/master/docs/CHANGES.rst) - [Commits](MSeifert04/iteration_utilities@v0.11.0...v0.13.0) Updates `jsonschema` from 4.21.1 to 4.26.0 - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/jsonschema@v4.21.1...v4.26.0) Updates `pyyaml` from 6.0.1 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.1...6.0.3) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) --- updated-dependencies: - dependency-name: click dependency-version: 8.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: iteration-utilities dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jsonschema dependency-version: 4.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 17, 2026

dependabot bot requested a review from eddie-knight as a code owner February 17, 2026 03:37

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the dependencies group with 5 updates#39

chore(deps): Bump the dependencies group with 5 updates#39
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/dependencies-c326e90a2c

dependabot bot commented on behalf of github Feb 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 17, 2026

8.3.1

8.3.0

8.2.2

Version 8.3.1

Version 8.3.0

Version 8.2.2

Version 0.13.0

What's Changed

Version 0.12.1

Version 0.12.0

Changelog for "iteration_utilities"

v4.26.0

What's Changed

New Contributors

v4.25.1

What's Changed

v4.26.0

v4.25.1

v4.25.0

v4.24.1

v4.24.0

v4.23.0

v4.22.0

6.0.3

What's Changed

6.0.2

What's Changed

6.0.2rc1

v2.32.5

2.32.5 (2025-08-18)

2.32.5 (2025-08-18)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments