Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 4 updates - #114

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-e8570110df
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-e8570110df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 4 updates in the / directory: coverage, gitpython, pre-commit and python-semantic-release.

Updates coverage from 7.16.1 to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Commits

Updates gitpython from 3.1.62 to 3.2.1

Release notes

Sourced from gitpython's releases.

3.2.1

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.2.0...3.2.1

3.2.0 - Security

What's Changed

... (truncated)

Changelog

Sourced from gitpython's changelog.

3.2.1

Security fixes for

If you can, also try and provide feedback on the upcoming v4 branch gitpython-developers/GitPython#2274 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1

3.2.0

Drops support for Python 3.7 (5 years after its EOL).

Security fixes for

If you can, also try and provide feedback on the upcoming v4 branch gitpython-developers/GitPython#2274 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0

Commits
  • c179357 prepare changelog prior to release
  • 97eadb8 fix(submodule): validate destinations before mutation
  • 6a7180a prepare for next release, v3.2
  • 0b64501 refactor(db): deprecate the pure-Python GitDB backend
  • 9349ff5 fix(repo): preserve literal separate Git directory paths
  • 8290c98 fix: bound actor and date parsing
  • 9ad28cc fix: complete safety checks in Git command wrappers
  • ce2093b bump minor version to indicate drop of python 3.7 support
  • dafafff Merge pull request #2247 from gitpython-developers/pos-arg-sanitization
  • 790bb31 fix(remote): reject option-shaped pull operands
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates python-semantic-release from 10.6.2 to 10.7.0

Release notes

Sourced from python-semantic-release's releases.

v10.7.0 (2026-09-22)

This release is published under the MIT License.

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

✅ Resolved Issues

  • #1441: feat: add option to signoff commits made by python-semantic-release

  • #1443: feat: extend version_variables to replace vars with python type annotations


Detailed Changes: v10.6.2...v10.7.0


Installable artifacts are available from:

Changelog

Sourced from python-semantic-release's changelog.

v10.7.0 (2026-09-22)

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables, closes [#1443](https://github.com/python-semantic-release/python-semantic-release/issues/1443)_ (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits, closes [#1441](https://github.com/python-semantic-release/python-semantic-release/issues/1441)_ (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

.. _#1441: python-semantic-release/python-semantic-release#1441 .. _#1443: python-semantic-release/python-semantic-release#1443 .. _3cecbeb: python-semantic-release/python-semantic-release@3cecbeb .. _947c57b: python-semantic-release/python-semantic-release@947c57b .. _e4b3bad: python-semantic-release/python-semantic-release@e4b3bad .. _fa87c95: python-semantic-release/python-semantic-release@fa87c95 .. _PR#1485: python-semantic-release/python-semantic-release#1485 .. _PR#1486: python-semantic-release/python-semantic-release#1486 .. _PR#1489: python-semantic-release/python-semantic-release#1489 .. _PR#1492: python-semantic-release/python-semantic-release#1492

.. _changelog-v10.6.2:

Commits
  • b700dbe chore: release v10.7.0
  • 3cecbeb feat(cmd-version): add optional git --signoff to version commits (#1492)
  • 0f4d414 build(deps-dev): expand filelock compatibility range to include v4.0+ (#1...
  • 35f7674 ci(deps): bump docker/[email protected] to v7.4.0 (#1495)
  • fa87c95 build(deps): expand click dependency range to include v8.5.* (#1489)
  • 4e78311 test(fixtures): adjust git monorepo creation fixtures to prevent race conditi...
  • 1d56d3a test(cmd-version): refactor imports to new flatdict variant
  • 1c48576 build(deps-test): swap broken flatdict with cj365-flatdict variant
  • f77ed51 ci(deps): bump mikepenz/[email protected] to v6.5.0 (#1484)
  • 086cf14 test(fixtures): adjust git repo creation fixtures to prevent race conditions ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 4 updates

Bumps the development-dependencies group with 4 updates in the / directory: [coverage](https://github.com/coveragepy/coveragepy), [gitpython](https://github.com/gitpython-developers/GitPython), [pre-commit](https://github.com/pre-commit/pre-commit) and [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release).


Updates `coverage` from 7.16.1 to 7.16.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.16.1...7.16.2)

Updates `gitpython` from 3.1.62 to 3.2.1
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst)
- [Commits](gitpython-developers/GitPython@3.1.62...3.2.1)

Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `python-semantic-release` from 10.6.2 to 10.7.0
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@v10.6.2...v10.7)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: gitpython
  dependency-version: 3.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: python-semantic-release
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: jonzeolla. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@ai-coding-guardrails ai-coding-guardrails Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice work! 😎

I didn't find anything of concern

List of skipped files due to configuration

Risk: 🟢 Low

Reviewed with 🤟 by Zenable

@ai-coding-guardrails ai-coding-guardrails Bot added the zenable/risk:low Zenable assessed this PR as LOW risk. label Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

zenable/risk:low Zenable assessed this PR as LOW risk.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant