Web2Executable icon indicating copy to clipboard operation
Web2Executable copied to clipboard
verified publisher icon nwutils

chore(deps): bump the pip group across 1 directory with 7 updates

Open dependabot[bot] opened this issue 2 months ago • 0 comments

Bumps the pip group with 7 updates in the / directory:

Package From To
black 25.1.0 25.11.0
pillow 11.3.0 12.0.0
pyinstaller 6.15.0 6.16.0
pylint 3.3.8 4.0.3
pyside6 6.9.1 6.10.1
pytest 8.4.1 9.0.1
requests 2.32.4 2.32.5

Updates black from 25.1.0 to 25.11.0

Release notes

Sourced from black's releases.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Improve error message for vim plugin users. It now handles independently vim version
  • Vim: Warn on unsupported Vim and Python versions independently (#4772)
  • Vim: Print the import paths when importing black fails (#4675)
  • Vim: Fix handling of virtualenvs that have a different Python version (#4675)

... (truncated)

Changelog

Sourced from black's changelog.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)
  • Releases now include arm64 Windows binaries and wheels (#4814)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)
  • Improve error message for vim plugin users. It now handles independently vim version

... (truncated)

Commits

Updates pillow from 11.3.0 to 12.0.0

Release notes

Sourced from pillow's releases.

12.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits

Updates pyinstaller from 6.15.0 to 6.16.0

Release notes

Sourced from pyinstaller's releases.

v6.16.0

Please see the v6.16.0 section of the changelog for a list of the changes since v6.15.0.

Changelog

Sourced from pyinstaller's changelog.

6.16.0 (2025-09-13)

Features


* (POSIX) Adjust the destination directory for collected python's standard
  extensions, from ``lib-dynload`` to ``python3.x/lib-dynload`` directory,
  in order to preserve the relative relationship between the extension
  location and the (grand-parent) shared library directory that is commonly
  found in POSIX python environments. This is required for compatibility
  with upcoming Linux builds of ``astral-sh/python-build-standalone#`` that
  will set relative library paths in extensions via both ``DT_NEEDED`` and
  ``DT_RPATH``. (:issue:`9212`)
* Rework the anonymization of the ``co_filename`` attribute in collected
  code objects - instead of trying to obtain anonymized relative name by
  removing known path prefixes from the original absolute-path ``co_filename``,
  we now construct the anonymized relative name directly from the collected
  module's (or script's) destination name w.r.t. its destination container
  (i.e., the ``PKG`` archive, the ``PYZ`` archive, or the ``base_library.zip``
  archive). (:issue:`9226`)
* Rework the search for python shared library in order to reduce amount of
  guess-work and better accommodate variations in naming across platforms
  and due to different build options (e.g., debug build with "d" suffix,
  free-thread build with "t" suffix, combination of both).

On Windows, the loaded python DLL is now resolved by calling
GetModuleFileName
on the handle exposed by :data:sys.dllhandle; this applies to python.org
Windows
builds, Anaconda python on Windows, and MSYS2 python.


On other platforms, first explicitly verify that shared library is enabled,
by checking the value of Py_ENABLE_SHARED variable exposed by the
sysconfig module. On macOS, also check if .framework bundle is
enabled instead, which is implied by a non-empty PYTHONFRAMEWORK
variable in sysconfig. If shared library is enabled, use INSTSONAME
variable exposed by sysconfig module as the only source of truth
w.r.t. its name. This works even with Debian-packaged python and
astral-sh/python-build-standalone POSIX builds; while they have
their python executable statically linked against python shared
library, they seem to properly set these variables.


In contrast, both Linux and macOS builds of Anaconda python seem to
build their interpreter executable and python shared library separately,
so the interpreter reports Py_ENABLE_SHARED variable to be set to 0
(and INSTSONAME gives name of the static library). Therefore, for
Anaconda python on non-Windows, use the old approach of guessing the
library name from the major and minor version and whether free-threading
is enabled or not (i.e., the presence of the "t" suffix).
</tr></table>

... (truncated)

Commits
  • 7f2ae63 Release v6.16.0. [skip ci]
  • 2683834 ci: move work-around for potentially broken setuptools upgrade
  • 383196a ci: fix check for broken setuptools upgrade
  • 5447da7 ci/test requirements: Track setuptools in tests/requirements-libraries.txt
  • 95226da Remove empty pytest.ini allegedly needed by test entrypoints
  • 255305d setup: Drop questionable/pointless project keywords
  • 5df0f47 setup: Drop setuptools, move to hatchling
  • 100c9ce bootloader build: Address noisy deprecation warning from waf
  • 52782f8 release: Add retry for compiling with qemu
  • 9e84501 Move non packaging configuration out of setup.cfg/pyproject.toml
  • Additional commits viewable in compare view

Updates pylint from 3.3.8 to 4.0.3

Commits
  • 84b6552 Bump pylint to 4.0.3, update changelog (#10741)
  • 77b0cd8 [Backport maintenance/4.0.x] fix(expand_modules): pass ignore_list to modutil...
  • 755f2d0 [Backport maintenance/4.0.x] Upgrade astroid to 4.0.2 (#10733)
  • c96a9e4 [Backport maintenance/4.0.x] Fix crash when a variable annotation is used as ...
  • 108191e [Backport maintenance/4.0.x] Fix a false positive for class attribute typed w...
  • 0ed8172 [Backport maintenance/4.0.x] Fix crash when a slice object is called (#10728)
  • b128b7d [Backport maintenance/4.0.x] Fix a false positive for ``unbalanced-tuple-unpa...
  • 1a26dea [Backport maintenance/4.0.x] Add Enum dunder to the list of allowed dunder (#...
  • fc920b6 [Backport maintenance/4.0.x] Fix false positive for `f-string-without-interpo...
  • aeffe52 [Backport maintenance/4.0.x] Fix FP for invalid-name with `typing.Annotated...
  • Additional commits viewable in compare view

Updates pyside6 from 6.9.1 to 6.10.1

Updates pytest from 8.4.1 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

  • #13895: Restore support for skipping tests via raise unittest.SkipTest.
  • #13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
  • #13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
  • #13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

  • #13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.
  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

9.0.0

pytest 9.0.0 (2025-11-05)

New features

  • #1367: Support for subtests has been added.

    subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

    Example:

    def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...

    def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
    
for path in Path.cwd().glob("*.py"):
    
with subtests.test(path=str(path)):
    
assert contains_docstring(path)

... (truncated)

Commits
  • d1b64aa Prepare release version 9.0.1
  • 0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
  • a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
  • 2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
  • a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
  • 4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
  • 15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
  • 0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
  • fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
  • b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
  • Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot[bot] avatar Nov 22 '25 10:11 dependabot[bot]