Skip to content

chore(deps): bump the python-packages group across 1 directory with 11 updates - #140

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-packages-2b0deaba4a
Open

chore(deps): bump the python-packages group across 1 directory with 11 updates#140
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-packages-2b0deaba4a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 11 updates in the / directory:

Package From To
datetime 5.5 6.0
playwright 1.58.0 1.61.0
pygithub 2.9.0 2.9.1
pytest-asyncio 1.2.0 1.4.0
build 1.4.2 1.5.0
bandit 1.8.6 1.9.4
pipdeptree 2.28.0 3.1.0
pylint 3.3.9 4.0.6
python-dotenv 1.2.1 1.2.2
mkdocs-git-revision-date-localized-plugin 1.5.0 1.5.3
mkdocstrings-python 1.18.2 2.0.5

Updates datetime from 5.5 to 6.0

Changelog

Sourced from datetime's changelog.

6.0 (2025-11-25)

  • Add support for Python 3.13, 3.14.

  • Drop support for Python 3.7, 3.8, 3.9.

  • Remove setuptools fossils.

  • Remove Python2 compatiblity code.

Commits
  • f880a58 Preparing release 6.0
  • c5d41db Prepare release.
  • d53bac4 Update Python version support. (#69)
  • b8f078c Update Python version support. (#68)
  • d67044d Add missing version specifier to setup.py
  • e95b160 Merge pull request #66 from zopefoundation/config-with-zope-product-template-...
  • 28d6788 - remove exclude
  • 77babde fixup! - update to latest meta/config templates (#67)
  • c6d71aa - update to latest meta/config templates
  • e0c8be8 Merge pull request #65 from zopefoundation/setuptools-fossils
  • Additional commits viewable in compare view

Updates playwright from 1.58.0 to 1.61.0

Release notes

Sourced from playwright's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

context = browser.new_context()
Seed a passkey your backend provisioned for a test user.
context.credentials.create("example.com",
id=credential_id,
user_handle=user_handle,
private_key=private_key,
public_key=public_key,
)
context.credentials.install()
page = context.new_page()
page.goto("https://example.com/login")
The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

page.local_storage.set_item("token", "abc")
token = page.local_storage.get_item("token")
items = page.session_storage.items()

New APIs

🛠️ Other improvements

  • Playwright now supports Ubuntu 26.04.
  • HAR and trace recordings now include WebSocket requests.

Browser Versions

  • Chromium 149.0.7827.55
  • Mozilla Firefox 151.0
  • WebKit 26.5

This version was also tested against the following stable channels:

... (truncated)

Commits
  • bd499b2 build(deps): bump typing-extensions from 4.14.1 to 4.15.0 (#3119)
  • 5b318a5 build(deps): bump mypy from 1.19.1 to 2.1.0 (#3117)
  • e6bfce9 build(deps): bump actions/checkout from 6 to 7 in the actions group across 1 ...
  • 2b41bf8 devops(driver): assemble driver from npm package and Node.js builds (#3122)
  • f75d727 feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image (#3113)
  • 613c3bf chore(roll): v1.61.0 (#3102)
  • f7c6259 chore(python): drop Python 3.9, add 3.14 (#3109)
  • 0d7c116 build(deps-dev): bump setuptools from 80.9.0 to 82.0.1 (#3105)
  • 47ea94a build(deps): bump mypy from 1.17.1 to 1.19.1 (#3104)
  • 42d4b83 build(deps-dev): bump auditwheel from 6.4.0 to 6.4.2 (#3106)
  • Additional commits viewable in compare view

Updates pygithub from 2.9.0 to 2.9.1

Release notes

Sourced from pygithub's releases.

v2.9.1

Bug Fixes

Full Changelog: PyGithub/PyGithub@v2.9.0...v2.9.1

Changelog

Sourced from pygithub's changelog.

Version 2.9.1 (April 14, 2026)

Bug Fixes ^^^^^^^^^

  • Fix getting release by tag in lazy mode ([#3469](https://github.com/pygithub/pygithub/issues/3469) <https://github.com/PyGithub/PyGithub/pull/3469>) (7d1ba281e <https://github.com/PyGithub/PyGithub/commit/7d1ba281e>)
Commits

Updates pytest-asyncio from 1.2.0 to 1.4.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

  • Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)
  • Updated minimum supported pytest version to v8.4.0. (#1397)

Fixed

  • Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)

Notes for Downstream Packagers

  • Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

  • Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged on pytest 8.4+.

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

... (truncated)

Commits
  • 6e14cd2 chore: Prepare release of v1.4.0.
  • 4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
  • ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
  • a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
  • e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
  • fc43340 Build(deps): Bump idna from 3.14 to 3.15
  • 762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
  • b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
  • 9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
  • 82a393c ci: Remove unnecessary debug output.
  • Additional commits viewable in compare view

Updates build from 1.4.2 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

1.4.4

What's Changed

Full Changelog: pypa/build@1.4.3...1.4.4

1.4.3

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

Features

  • Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes

  • Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous

  • :issue:1033

#################### 1.4.4 (2026-04-22) ####################

Bugfixes

  • Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
  • Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
  • Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
  • Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous

  • :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

Features

... (truncated)

Commits

Updates bandit from 1.8.6 to 1.9.4

Release notes

Sourced from bandit's releases.

1.9.4

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

1.9.3

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

1.9.2

What's Changed

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

1.9.1

What's Changed

... (truncated)

Commits
  • 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
  • c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
  • 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
  • e27493f Include filename in nosec 'no failed test' warning (#1363)
  • b69b336 Fix B613 crash when reading from stdin (#1361)
  • e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
  • ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
  • c0def6c chore: fixed some typos in comments (#1351)
  • 765f00d Limit B614 to torch.load deserializers (#1348)
  • 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
  • Additional commits viewable in compare view

Updates pipdeptree from 2.28.0 to 3.1.0

Release notes

Sourced from pipdeptree's releases.

3.1.0

What's Changed

Full Changelog: tox-dev/pipdeptree@3.0.0...3.1.0

3.0.0

What's Changed

New Contributors

Full Changelog: tox-dev/pipdeptree@2.35.3...3.0.0

2.35.3

What's Changed

Full Changelog: tox-dev/pipdeptree@2.35.2...2.35.3

2.35.2

What's Changed

Full Changelog: tox-dev/pipdeptree@2.35.1...2.35.2

2.35.1

... (truncated)

Commits
  • e9d941a ✨ feat(cli): add --summary health report (text/rich/json) (#597)
  • 62d16cb ✨ feat(cli): add from-lock subcommand to render a PEP 751 lock offline (#595)
  • c829ef7 ✨ feat(cli): add from-index subcommand to resolve a tree from a package index...
  • ecf3820 [pre-commit.ci] pre-commit autoupdate (#594)
  • d1f2f5f ✨ feat(api): add programmatic render() for notebooks (#590)
  • 796bc8b ✨ feat(cli): accept extras in --packages filter (#589)
  • 5597a0a ⏪ build: drop hatchling <1.30 cap now that 1.30 is yanked (#592)
  • da28264 ✨ feat(extras): default --extras to explicit, add active/none modes (#587)
  • 259260f ✨ feat(cli): auto-detect active virtualenv by default (#588)
  • 25372d5 🔧 build: cap hatchling <1.30 so pkg_meta produces publishable metadata (#591)
  • Additional commits viewable in compare view

Updates pylint from 3.3.9 to 4.0.6

Commits
  • 8a39635 Bump pylint to 4.0.6, update changelog (#11105)
  • 150f23c [Backport maintenance/4.0.x] Allow digits in ParamSpec and TypeVarTuple names...
  • 8b6251e [Backport maintenance/4.0.x] Fix crash when enum member inference fails (#11093)
  • d57aadb [Backport maintenance/4.0.x] Fix implicit-str-concat false positive for mix...
  • d9ea8d9 [Backport maintenance/4.0.x] Fix unnecessary-comprehension suggestion when ...
  • cb1792a [Backport maintenance/4.0.x] Allow digits in TypeVar names for invalid-name c...
  • ee2ab9a Handle InferenceError in decorator return analysis
  • 5bb5498 [Backport maintenance/4.0.x] Fix crash in typecheck checker when metaclass ar...
  • a940533 [Backport maintenance/4.0.x] Fix a crash in consider-using-enumerate for no...
  • b7a873a [Backport maintenance/4.0.x] Fix crash in deprecated checker for non-string `...
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Commits

Updates mkdocs-git-revision-date-localized-plugin from 1.5.0 to 1.5.3

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.5.3

What's Changed

New Contributors

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.2...v1.5.3

v1.5.2

What's Changed

Bug fixes

Dependency updates (security)

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.1...v1.5.2

revision-date-localized v1.5.1

What's Changed

New Contributors

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.0...v1.5.1

Commits
  • 30e5876 Bump version to 1.5.3
  • d58c5be Merge pull request #211 from mitya57/fix-manifest
  • 6da0b4e Fix paths in MANIFEST.in
  • aa0d4a3 Constrain mkdocs to <2
  • 2afa3d2 Bump version to 1.5.2
  • 66e9b7e Document release process in CONTRIBUTING.md
  • 2fb5070 Merge pull request #209 from timvink/dependabot/uv/urllib3-2.7.0
  • d0bacc8 Bump urllib3 from 2.6.3 to 2.7.0
  • ee28ad9 Merge pull request #208 from timvink/dependabot/uv/gitpython-3.1.50
  • befbdab Bump gitpython from 3.1.49 to 3.1.50
    • Description has been truncated

@dependabot
chore(deps): bump the python-packages group across 1 directory with 1…
c1960a2 
…1 updates

Bumps the python-packages group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [datetime](https://github.com/zopefoundation/DateTime) | `5.5` | `6.0` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.58.0` | `1.61.0` |
| [pygithub](https://github.com/pygithub/pygithub) | `2.9.0` | `2.9.1` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.2.0` | `1.4.0` |
| [build](https://github.com/pypa/build) | `1.4.2` | `1.5.0` |
| [bandit](https://github.com/PyCQA/bandit) | `1.8.6` | `1.9.4` |
| [pipdeptree](https://github.com/tox-dev/pipdeptree) | `2.28.0` | `3.1.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `3.3.9` | `4.0.6` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin) | `1.5.0` | `1.5.3` |
| [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.18.2` | `2.0.5` |



Updates `datetime` from 5.5 to 6.0
- [Changelog](https://github.com/zopefoundation/DateTime/blob/master/CHANGES.rst)
- [Commits](zopefoundation/DateTime@5.5...6.0)

Updates `playwright` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.58.0...v1.61.0)

Updates `pygithub` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.9.0...v2.9.1)

Updates `pytest-asyncio` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.2.0...v1.4.0)

Updates `build` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.4.2...1.5.0)

Updates `bandit` from 1.8.6 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.6...1.9.4)

Updates `pipdeptree` from 2.28.0 to 3.1.0
- [Release notes](https://github.com/tox-dev/pipdeptree/releases)
- [Commits](tox-dev/pipdeptree@2.28.0...3.1.0)

Updates `pylint` from 3.3.9 to 4.0.6
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.3.9...v4.0.6)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `mkdocs-git-revision-date-localized-plugin` from 1.5.0 to 1.5.3
- [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases)
- [Commits](timvink/mkdocs-git-revision-date-localized-plugin@v1.5.0...v1.5.3)

Updates `mkdocstrings-python` from 1.18.2 to 2.0.5
- [Release notes](https://github.com/mkdocstrings/python/releases)
- [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/python@1.18.2...2.0.5)

---
updated-dependencies:
- dependency-name: datetime
  dependency-version: '6.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: playwright
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pygithub
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pipdeptree
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: pylint
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mkdocs-git-revision-date-localized-plugin
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mkdocstrings-python
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot Upgrades project dependencies by dependabot dependencies Project dependencies python Pull requests that updates Python code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from Nicconike as a code owner July 1, 2026 12:45
@dependabot dependabot Bot added dependabot Upgrades project dependencies by dependabot dependencies Project dependencies python Pull requests that updates Python code labels Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Nicconike Nicconike Awaiting requested review from Nicconike Nicconike is a code owner

Assignees

No one assigned

Labels

dependabot Upgrades project dependencies by dependabot dependencies Project dependencies python Pull requests that updates Python code

Projects

Steam Stats
Status: Todo

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants