From 8ea0038d3fca3488b949a382c04b7486b6f1407f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 25 Jul 2025 10:30:25 +0000 Subject: [PATCH 1/3] Bump pypa/cibuildwheel from 3.1.0 to 3.1.1 (#11341) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 3.1.0 to 3.1.1.
Release notes

Sourced from pypa/cibuildwheel's releases.

v3.1.1

Changelog

Sourced from pypa/cibuildwheel's changelog.

v3.1.1

24 July 2025

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/cibuildwheel&package-manager=github_actions&previous-version=3.1.0&new-version=3.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci-cd.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index 0b6f2f00d33..e97d07f6743 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -436,7 +436,7 @@ jobs: run: | make cythonize - name: Build wheels - uses: pypa/cibuildwheel@v3.1.0 + uses: pypa/cibuildwheel@v3.1.1 env: CIBW_SKIP: pp* ${{ matrix.musl == 'musllinux' && '*manylinux*' || '*musllinux*' }} CIBW_ARCHS_MACOS: x86_64 arm64 universal2 From 00faab87fa58d999dae8cbef01776d8593438469 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 25 Jul 2025 10:42:47 +0000 Subject: [PATCH 2/3] Bump rich from 14.0.0 to 14.1.0 (#11342) Bumps [rich](https://github.com/Textualize/rich) from 14.0.0 to 14.1.0.
Release notes

Sourced from rich's releases.

The Lively Release

Live objects may now be nested. Previously a progress bar inside another progress context would fail. See the changelog below for this and other changes.

[14.1.0] - 2025-06-25

Changed

Fixed

Added

  • Added TTY_INTERACTIVE environment variable to force interactive mode off or on Textualize/rich#3777
Changelog

Sourced from rich's changelog.

[14.1.0] - 2025-06-25

Changed

Fixed

Added

  • Added TTY_INTERACTIVE environment variable to force interactive mode off or on Textualize/rich#3777
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rich&package-manager=pip&previous-version=14.0.0&new-version=14.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 3 +-- requirements/dev.txt | 3 +-- requirements/lint.txt | 3 +-- requirements/test.txt | 27 +++++++++++++-------------- 4 files changed, 16 insertions(+), 20 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 31522c1142c..2c2ccb0e9ea 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -211,7 +211,7 @@ requests==2.32.4 # cherry-picker # sphinx # sphinxcontrib-spelling -rich==14.0.0 +rich==14.1.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test.in @@ -275,7 +275,6 @@ typing-extensions==4.14.1 # pydantic # pydantic-core # python-on-whales - # rich # typing-inspection typing-inspection==0.4.1 # via pydantic diff --git a/requirements/dev.txt b/requirements/dev.txt index b6badecfdf2..e93164ed648 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -205,7 +205,7 @@ requests==2.32.4 # via # cherry-picker # sphinx -rich==14.0.0 +rich==14.1.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test.in @@ -266,7 +266,6 @@ typing-extensions==4.14.1 # pydantic # pydantic-core # python-on-whales - # rich # typing-inspection typing-inspection==0.4.1 # via pydantic diff --git a/requirements/lint.txt b/requirements/lint.txt index 49ffbfe0fd5..a16f5adfef2 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -90,7 +90,7 @@ python-on-whales==0.78.0 # via -r requirements/lint.in pyyaml==6.0.2 # via pre-commit -rich==14.0.0 +rich==14.1.0 # via pytest-codspeed six==1.17.0 # via python-dateutil @@ -110,7 +110,6 @@ typing-extensions==4.14.1 # pydantic # pydantic-core # python-on-whales - # rich # typing-inspection typing-inspection==0.4.1 # via pydantic diff --git a/requirements/test.txt b/requirements/test.txt index 8cc46c25d24..7706ca0a53a 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -5,19 +5,19 @@ # pip-compile --allow-unsafe --output-file=requirements/test.txt --resolver=backtracking --strip-extras requirements/test.in # aiodns==3.5.0 - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in aiohappyeyeballs==2.6.1 - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in aiosignal==1.4.0 - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 ; python_version < "3.11" - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in blockbuster==1.5.25 # via -r requirements/test.in brotli==1.1.0 ; platform_python_implementation == "CPython" - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in cffi==1.17.1 # via # cryptography @@ -41,10 +41,10 @@ freezegun==1.5.3 # via -r requirements/test.in frozenlist==1.7.0 # via - # -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # -r requirements/runtime-deps.in # aiosignal gunicorn==23.0.0 - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/base.in + # via -r requirements/base.in idna==3.6 # via # trustme @@ -59,7 +59,7 @@ mdurl==0.1.2 # via markdown-it-py multidict==6.6.3 # via - # -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # -r requirements/runtime-deps.in # yarl mypy==1.17.0 ; implementation_name == "cpython" # via -r requirements/test.in @@ -79,7 +79,7 @@ pluggy==1.6.0 # pytest-cov propcache==0.3.2 # via - # -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # -r requirements/runtime-deps.in # yarl proxy-py==2.4.10 # via -r requirements/test.in @@ -114,7 +114,7 @@ python-dateutil==2.9.0.post0 # via freezegun python-on-whales==0.78.0 # via -r requirements/test.in -rich==14.0.0 +rich==14.1.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test.in @@ -136,17 +136,16 @@ typing-extensions==4.14.1 # pydantic # pydantic-core # python-on-whales - # rich # typing-inspection typing-inspection==0.4.1 # via pydantic uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpython" - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/base.in + # via -r requirements/base.in wait-for-it==2.3.0 # via -r requirements/test.in yarl==1.20.1 - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in zlib-ng==0.5.1 # via -r requirements/test.in zstandard==0.23.0 ; platform_python_implementation == "CPython" and python_version < "3.14" - # via -r /home/dependabot/dependabot-updater/tmp/20250715-1384-v0sr9j/dependabot_20250715-1384-mw23m4/requirements/runtime-deps.in + # via -r requirements/runtime-deps.in From 911645731da52f0572484b86729b2dab141a090f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 25 Jul 2025 10:50:11 +0000 Subject: [PATCH 3/3] Bump coverage from 7.9.2 to 7.10.0 (#11343) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.9.2 to 7.10.0.
Changelog

Sourced from coverage's changelog.

Version 7.10.0 — 2025-07-24

  • A new configuration option: ":ref:config_run_patch" specifies named patches to work around some limitations in coverage measurement. These patches are available:

    • patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process. This closes long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.

    • patch = subprocess measures coverage in Python subprocesses created with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of functions. Closes old issue 367_ and duplicate issue 378_.

    • patch = execv adjusts the :func:execv <python:os.execl> family of functions to save coverage data before ending the current program and starting the next. Not available on Windows. Closes issue 43_ after 15 years!

  • The HTML report now dimly colors subsequent lines in multi-line statements. They used to have no color. This gives a better indication of the amount of code missing in the report. Closes issue 1308_.

  • Two new exclusion patterns are part of the defaults: ... is automatically excluded as a line and if TYPE_CHECKING: is excluded as a branch. Closes issue 831_.

  • A new command-line option: --save-signal=USR1 specifies a signal that coverage.py will listen for. When the signal is sent, the coverage data will be saved. This makes it possible to save data from within long-running processes. Thanks, Arkady Gilinsky <pull 1998_>_.

  • A new configuration option: ":ref:config_report_partial_also" is a list of regexes to add as pragmas for partial branches. This parallels the ":ref:config_report_exclude_also" setting for adding line exclusion patterns.

  • A few file path configuration settings didn't allow for tilde expansion: :ref:config_json_output, :ref:config_lcov_output and :ref:config_run_debug_file. This is now fixed.

  • Wheels are included for 3.14 now that 3.14 rc1 is available.

  • We no longer ship a PyPy-specific wheel. PyPy will install the pure-Python wheel. Closes issue 2001_.

  • In the very unusual situation of not having a current frame, coverage no

... (truncated)

Commits
  • ef59be0 build: missed an expected distribution count
  • f49f061 docs: sample HTML for 7.10.0
  • 6a7d5ca docs: prep for 7.10.0
  • 395c8cd build: provide 3.14 wheels
  • 6154fda feat: patch=execv
  • 787e5c4 test: we don't use 'expensive' as a mark now
  • 7e49831 refactor: patch=_exit without a global
  • 4d4ddd8 fix: better ellipsis exclusion regex. #831
  • d578c52 fix: don't assume we have a current frame. #2005
  • ecf53d5 docs: remind myself what the cores are
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coverage&package-manager=pip&previous-version=7.9.2&new-version=7.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/test.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 2c2ccb0e9ea..b1543d8195d 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -52,7 +52,7 @@ click==8.1.8 # slotscheck # towncrier # wait-for-it -coverage==7.9.2 +coverage==7.10.0 # via # -r requirements/test.in # pytest-cov diff --git a/requirements/dev.txt b/requirements/dev.txt index e93164ed648..9f5e54c8df9 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -52,7 +52,7 @@ click==8.1.8 # slotscheck # towncrier # wait-for-it -coverage==7.9.2 +coverage==7.10.0 # via # -r requirements/test.in # pytest-cov diff --git a/requirements/test.txt b/requirements/test.txt index 7706ca0a53a..eed0f5c53de 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -25,7 +25,7 @@ cffi==1.17.1 # pytest-codspeed click==8.1.8 # via wait-for-it -coverage==7.9.2 +coverage==7.10.0 # via # -r requirements/test.in # pytest-cov