Skip to content

Bump the "dependencies" group with 2 updates across multiple ecosystems - #832

Merged
kattni merged 1 commit into
mainfrom
dependabot/dependencies-8d1d7f3739
Oct 5, 2026
Merged

kattni merged 1 commit into
mainfrom
dependabot/dependencies-8d1d7f3739

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 1 update: wlc.

Updates wlc from 2.1.1 to 2.2.1

Release notes

Sourced from wlc's releases.

2.2.1

  • Released on 24th September 2026.
  • Prevented API keys from appearing in CLI request errors and rejected API keys containing line breaks.
  • Fixed component downloads when a slug contains repository and avoided relisting an already resolved component.
  • Reported local filesystem failures as CLI errors and validated component download output paths before fetching data.
  • Updated development dependencies, CI actions, and Docker base images.

2.2.0

What's Changed

Changes and improvements

Dependency updates

... (truncated)

Changelog

Sourced from wlc's changelog.

2.2.1

  • Released on 24th September 2026.
  • Prevented API keys from appearing in CLI request errors and rejected API keys containing line breaks.
  • Fixed component downloads when a slug contains repository and avoided relisting an already resolved component.
  • Reported local filesystem failures as CLI errors and validated component download output paths before fetching data.
  • Updated development dependencies, CI actions, and Docker base images.

2.2.0

  • Released on 1st September 2026.
  • Hardened authentication by disabling automatic netrc credentials, rejecting credentials embedded in URLs, and redacting credentials from HTTP failure logs.
  • Scoped insecure HTTP and TLS exceptions to explicitly trusted origins and prevented project configuration from enabling them.
  • Hardened downloads against symbolic links, non-regular files, and destination replacement races.
  • Escaped control characters in structured CSV fields and improved handling of non-text output values.
  • Added a threat model and clarified configuration discovery and precedence.
  • Updated development dependencies, CI actions, and Docker base images.
Commits
  • 3ce67fa chore: release 2.2.1
  • b61361b fix: handle CLI filesystem errors
  • 5a1937a fix: prevent API key disclosure in request errors
  • 7fb89cc chore(deps): update dependency pylint to v4.0.9
  • 46035a7 chore(deps): update dependency ty to v0.0.83
  • 3fb009a chore(deps): update astral-sh/setup-uv action to v10.2.0
  • 465dce6 chore(deps): update weblate/base docker tag to v2026.39.0
  • c896382 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • e492f80 chore(deps): update pre-commit hook pappasam/toml-sort to v0.25.0
  • fcc4b80 chore(deps): update pre-commit hook scop/pre-commit-shfmt to v3.14.1-1
  • Additional commits viewable in compare view

Bumps the dependencies group with 3 updates: https://github.com/astral-sh/ruff-pre-commit, https://github.com/rvben/rumdl-pre-commit and https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/astral-sh/ruff-pre-commit from v0.16.5 to 0.16.9

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.9

See: https://github.com/astral-sh/ruff/releases/tag/0.16.9

v0.16.8

See: https://github.com/astral-sh/ruff/releases/tag/0.16.8

v0.16.7

See: https://github.com/astral-sh/ruff/releases/tag/0.16.7

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

Commits

Updates https://github.com/rvben/rumdl-pre-commit from v0.2.62 to 0.2.77

Release notes

Sourced from https://github.com/rvben/rumdl-pre-commit's releases.

v0.2.77

See: https://github.com/rvben/rumdl/releases/tag/v0.2.77

v0.2.76

See: https://github.com/rvben/rumdl/releases/tag/v0.2.76

v0.2.75

See: https://github.com/rvben/rumdl/releases/tag/v0.2.75

v0.2.74

See: https://github.com/rvben/rumdl/releases/tag/v0.2.74

v0.2.73

See: https://github.com/rvben/rumdl/releases/tag/v0.2.73

v0.2.72

See: https://github.com/rvben/rumdl/releases/tag/v0.2.72

v0.2.71

See: https://github.com/rvben/rumdl/releases/tag/v0.2.71

v0.2.70

See: https://github.com/rvben/rumdl/releases/tag/v0.2.70

v0.2.69

See: https://github.com/rvben/rumdl/releases/tag/v0.2.69

v0.2.68

See: https://github.com/rvben/rumdl/releases/tag/v0.2.68

v0.2.67

See: https://github.com/rvben/rumdl/releases/tag/v0.2.67

v0.2.66

See: https://github.com/rvben/rumdl/releases/tag/v0.2.66

v0.2.65

See: https://github.com/rvben/rumdl/releases/tag/v0.2.65

v0.2.64

See: https://github.com/rvben/rumdl/releases/tag/v0.2.64

v0.2.63

See: https://github.com/rvben/rumdl/releases/tag/v0.2.63

Commits

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.29.0 to 1.30.1

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.30.1

Sponsorship is appreciated!

Bug Fixes 馃悰馃敆

  • Fixed a bug where zizmor would crash on pre-commit inputs that reference a GitHub URL with an explicit .git suffix (#2363)

  • Fixed a bug where self-repository auto-fixes were incorrectly marked as "safe" instead of "unsafe" (#2373)

v1.30.0

Sponsorship is appreciated!

New Features 馃寛馃敆

Bug Fixes 馃悰馃敆

... (truncated)

Commits
  • fa41207 Mirror: 1.30.1
  • 7361a0b fix: include pre-commit files in hook (#59)
  • 34c5ce3 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the github-actions group...
  • cef8b83 Mirror: 1.30.0
  • 2e74fc1 Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group (#61)
  • 7bb2343 Bump zizmorcore/zizmor-action in the github-actions group (#58)
  • 950796f chore: replace pre-commit checks with zizmor-action (#57)
  • a5dde09 chore: freeze pin commit hooks, bump usage of own hook (#56)
  • a21d6cd Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 in the github-actions group (#55)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 1 update: [wlc](https://github.com/WeblateOrg/wlc).


Updates `wlc` from 2.1.1 to 2.2.1
- [Release notes](https://github.com/WeblateOrg/wlc/releases)
- [Changelog](https://github.com/WeblateOrg/wlc/blob/main/CHANGES.md)
- [Commits](WeblateOrg/wlc@2.1.1...2.2.1)
Bump the dependencies group with 3 updates

Bumps the dependencies group with 3 updates: [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit), [https://github.com/rvben/rumdl-pre-commit](https://github.com/rvben/rumdl-pre-commit) and [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit).


Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.16.5 to 0.16.9
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.16.5...v0.16.9)

Updates `https://github.com/rvben/rumdl-pre-commit` from v0.2.62 to 0.2.77
- [Release notes](https://github.com/rvben/rumdl-pre-commit/releases)
- [Commits](rvben/rumdl-pre-commit@v0.2.62...v0.2.77)

Updates `https://github.com/zizmorcore/zizmor-pre-commit` from v1.29.0 to 1.30.1
- [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.29.0...v1.30.1)

---
updated-dependencies:
- dependency-name: wlc
  dependency-version: 2.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.9
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: https://github.com/rvben/rumdl-pre-commit
  dependency-version: 0.2.77
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: https://github.com/zizmorcore/zizmor-pre-commit
  dependency-version: 1.30.1
  dependency-type: direct:production
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 4, 2026
@kattni
kattni merged commit 8369f25 into main Oct 5, 2026
4 checks passed
@kattni
kattni deleted the dependabot/dependencies-8d1d7f3739 branch October 5, 2026 04:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant