Skip to content

chore(deps): bump the pip group across 1 directory with 6 updates #296

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the pip group across 1 directory with 6 updates #296

wants to merge 1 commit into from
+6 −6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 25, 2025 •
edited
Loading

Bumps the pip group with 6 updates in the / directory:

Package From To
black 25.1.0 25.9.0
pillow 11.3.0 12.0.0
pyinstaller 6.15.0 6.16.0
pylint 3.3.8 4.0.2
pytest 8.4.1 8.4.2
requests 2.32.4 2.32.5

Updates black from 25.1.0 to 25.9.0

Release notes

Sourced from black's releases.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
  • Build gallery docker image with python3-slim and reduce image size (#4686)

... (truncated)

Changelog

Sourced from black's changelog.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)

... (truncated)

Commits

Updates pillow from 11.3.0 to 12.0.0

Release notes

Sourced from pillow's releases.

12.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits

Updates pyinstaller from 6.15.0 to 6.16.0

Release notes

Sourced from pyinstaller's releases.

v6.16.0

Please see the v6.16.0 section of the changelog for a list of the changes since v6.15.0.

Changelog

Sourced from pyinstaller's changelog.

6.16.0 (2025-09-13)

Features


* (POSIX) Adjust the destination directory for collected python's standard
  extensions, from ``lib-dynload`` to ``python3.x/lib-dynload`` directory,
  in order to preserve the relative relationship between the extension
  location and the (grand-parent) shared library directory that is commonly
  found in POSIX python environments. This is required for compatibility
  with upcoming Linux builds of ``astral-sh/python-build-standalone#`` that
  will set relative library paths in extensions via both ``DT_NEEDED`` and
  ``DT_RPATH``. (:issue:`9212`)
* Rework the anonymization of the ``co_filename`` attribute in collected
  code objects - instead of trying to obtain anonymized relative name by
  removing known path prefixes from the original absolute-path ``co_filename``,
  we now construct the anonymized relative name directly from the collected
  module's (or script's) destination name w.r.t. its destination container
  (i.e., the ``PKG`` archive, the ``PYZ`` archive, or the ``base_library.zip``
  archive). (:issue:`9226`)
* Rework the search for python shared library in order to reduce amount of
  guess-work and better accommodate variations in naming across platforms
  and due to different build options (e.g., debug build with "d" suffix,
  free-thread build with "t" suffix, combination of both).

On Windows, the loaded python DLL is now resolved by calling
GetModuleFileName
on the handle exposed by :data:sys.dllhandle; this applies to python.org
Windows
builds, Anaconda python on Windows, and MSYS2 python.


On other platforms, first explicitly verify that shared library is enabled,
by checking the value of Py_ENABLE_SHARED variable exposed by the
sysconfig module. On macOS, also check if .framework bundle is
enabled instead, which is implied by a non-empty PYTHONFRAMEWORK
variable in sysconfig. If shared library is enabled, use INSTSONAME
variable exposed by sysconfig module as the only source of truth
w.r.t. its name. This works even with Debian-packaged python and
astral-sh/python-build-standalone POSIX builds; while they have
their python executable statically linked against python shared
library, they seem to properly set these variables.


In contrast, both Linux and macOS builds of Anaconda python seem to
build their interpreter executable and python shared library separately,
so the interpreter reports Py_ENABLE_SHARED variable to be set to 0
(and INSTSONAME gives name of the static library). Therefore, for
Anaconda python on non-Windows, use the old approach of guessing the
library name from the major and minor version and whether free-threading
is enabled or not (i.e., the presence of the "t" suffix).
</tr></table>

... (truncated)

Commits
  • 7f2ae63 Release v6.16.0. [skip ci]
  • 2683834 ci: move work-around for potentially broken setuptools upgrade
  • 383196a ci: fix check for broken setuptools upgrade
  • 5447da7 ci/test requirements: Track setuptools in tests/requirements-libraries.txt
  • 95226da Remove empty pytest.ini allegedly needed by test entrypoints
  • 255305d setup: Drop questionable/pointless project keywords
  • 5df0f47 setup: Drop setuptools, move to hatchling
  • 100c9ce bootloader build: Address noisy deprecation warning from waf
  • 52782f8 release: Add retry for compiling with qemu
  • 9e84501 Move non packaging configuration out of setup.cfg/pyproject.toml
  • Additional commits viewable in compare view

Updates pylint from 3.3.8 to 4.0.2

Commits
  • 0eb92d2 Bump pylint to 4.0.2, update changelog
  • caf95d5 [Backport maintenance/4.0.x] Fix FP for invalid-name for partially uninfera...
  • 4d52769 [Backport maintenance/4.0.x] Ignore unraisable exceptions on stdlib primer (#...
  • 92a13df [Backport maintenance/4.0.x] Fix FP for invalid-name on module-level consta...
  • 4c913c0 [Backport maintenance/4.0.x] Fix FP for invalid-name for TypedDicts (#10674)
  • 9a30350 Bump pylint to 4.0.1, update changelog (#10667)
  • 0ad9d26 [Backport maintenance/4.0.x] Check enums created with functional syntax again...
  • 60a01e4 [Backport maintenance/4.0.x] Improve conditionals (#10655)
  • e60b80e [Backport maintenance/4.0.x] Fix unused-variable false positive with `__all...
  • abcf2ed [Backport maintenance/4.0.x] Fix false-positive for bare-name-capture-pattern...
  • Additional commits viewable in compare view

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the pip group across 1 directory with 6 updates
8b1abd1 
Bumps the pip group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `25.1.0` | `25.9.0` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.0.0` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.15.0` | `6.16.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `3.3.8` | `4.0.2` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `8.4.2` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |



Updates `black` from 25.1.0 to 25.9.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.1.0...25.9.0)

Updates `pillow` from 11.3.0 to 12.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.0.0)

Updates `pyinstaller` from 6.15.0 to 6.16.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.15.0...v6.16.0)

Updates `pylint` from 3.3.8 to 4.0.2
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.3.8...v4.0.2)

Updates `pytest` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...8.4.2)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 25.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pyinstaller
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pylint
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant