Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 3 updates - #111

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-e7e7460049
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-e7e7460049

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 3 updates in the / directory: coverage, gitpython and python-semantic-release.

Updates coverage from 7.16.1 to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Commits

Updates gitpython from 3.1.62 to 3.2.0

Release notes

Sourced from gitpython's releases.

3.2.0 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.62...3.2.0

Commits
  • 6a7180a prepare for next release, v3.2
  • 25a1a69 Merge pull request #2259 from radhika1314/config-option-line-bound
  • a3e1ea4 Merge pull request #2258 from gitpython-developers/sec-audit
  • 1a2117c fix(remote): validate protocols in rendered transport arguments
  • 2235723 fix(config): bound option-line parsing
  • cc02e45 ci: remove codespell checks and configuration
  • f2dfa9f fix(index): confine staging reads to worktree files
  • d1576c4 fix(tree): validate entry names and record boundaries
  • a75aedf fix(index): validate paths at native index boundaries
  • 428d205 fix(repo): validate rendered archive remote options
  • Additional commits viewable in compare view

Updates python-semantic-release from 10.6.2 to 10.7.0

Release notes

Sourced from python-semantic-release's releases.

v10.7.0 (2026-09-22)

This release is published under the MIT License.

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

✅ Resolved Issues

  • #1441: feat: add option to signoff commits made by python-semantic-release

  • #1443: feat: extend version_variables to replace vars with python type annotations


Detailed Changes: v10.6.2...v10.7.0


Installable artifacts are available from:

Changelog

Sourced from python-semantic-release's changelog.

v10.7.0 (2026-09-22)

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables, closes [#1443](https://github.com/python-semantic-release/python-semantic-release/issues/1443)_ (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits, closes [#1441](https://github.com/python-semantic-release/python-semantic-release/issues/1441)_ (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

.. _#1441: python-semantic-release/python-semantic-release#1441 .. _#1443: python-semantic-release/python-semantic-release#1443 .. _3cecbeb: python-semantic-release/python-semantic-release@3cecbeb .. _947c57b: python-semantic-release/python-semantic-release@947c57b .. _e4b3bad: python-semantic-release/python-semantic-release@e4b3bad .. _fa87c95: python-semantic-release/python-semantic-release@fa87c95 .. _PR#1485: python-semantic-release/python-semantic-release#1485 .. _PR#1486: python-semantic-release/python-semantic-release#1486 .. _PR#1489: python-semantic-release/python-semantic-release#1489 .. _PR#1492: python-semantic-release/python-semantic-release#1492

.. _changelog-v10.6.2:

Commits
  • b700dbe chore: release v10.7.0
  • 3cecbeb feat(cmd-version): add optional git --signoff to version commits (#1492)
  • 0f4d414 build(deps-dev): expand filelock compatibility range to include v4.0+ (#1...
  • 35f7674 ci(deps): bump docker/[email protected] to v7.4.0 (#1495)
  • fa87c95 build(deps): expand click dependency range to include v8.5.* (#1489)
  • 4e78311 test(fixtures): adjust git monorepo creation fixtures to prevent race conditi...
  • 1d56d3a test(cmd-version): refactor imports to new flatdict variant
  • 1c48576 build(deps-test): swap broken flatdict with cj365-flatdict variant
  • f77ed51 ci(deps): bump mikepenz/[email protected] to v6.5.0 (#1484)
  • 086cf14 test(fixtures): adjust git repo creation fixtures to prevent race conditions ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 3 updates

Bumps the development-dependencies group with 3 updates in the / directory: [coverage](https://github.com/coveragepy/coveragepy), [gitpython](https://github.com/gitpython-developers/GitPython) and [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release).


Updates `coverage` from 7.16.1 to 7.16.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.16.1...7.16.2)

Updates `gitpython` from 3.1.62 to 3.2.0
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.62...3.2.0)

Updates `python-semantic-release` from 10.6.2 to 10.7.0
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@v10.6.2...v10.7)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: gitpython
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: python-semantic-release
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: jonzeolla. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from JonZeolla as a code owner October 5, 2026 08:06

@ai-coding-guardrails ai-coding-guardrails Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice work! 😎

I didn't find anything of concern

List of skipped files due to configuration

Risk: 🟢 Low

Reviewed with 🤟 by Zenable

@ai-coding-guardrails ai-coding-guardrails Bot added the zenable/risk:low Zenable assessed this PR as LOW risk. label Oct 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/development-dependencies-e7e7460049 branch October 19, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

zenable/risk:low Zenable assessed this PR as LOW risk.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant