Skip to content

Bump the python-dependencies group with 12 updates #250

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the python-dependencies group with 12 updates #250

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the python-dependencies group with 12 updates:

Package From To
jupyterlab 4.4.10 4.5.0
pylint 4.0.2 4.0.4
pytest 8.4.2 9.0.1
anyio 4.11.0 4.12.0
asttokens 3.0.0 3.0.1
beautifulsoup4 4.14.2 4.14.3
certifi 2025.10.5 2025.11.12
ipython 9.6.0 9.7.0
psutil 7.1.2 7.1.3
rpds-py 0.28.0 0.30.0
types-python-dateutil 2.9.0.20251008 2.9.0.20251115
astroid 4.0.1 4.0.2

Updates jupyterlab from 4.4.10 to 4.5.0

Release notes

Sourced from jupyterlab's releases.

v4.5.0

4.5.0

(Full Changelog)

New features added

Enhancements made

... (truncated)

Commits
  • 791aecc [ci skip] Publish 4.5.0
  • 05df0d2 Drop altair installation in release test; migrate from deprecated `vega_dat...
  • 6e6744c Update JupyterLab pre-release version to 4.5.0rc1 (#18111)
  • 885b296 [ci skip] Publish 4.5.0rc1
  • f1675bd Update lumino to v2025.11.13 (#18108)
  • 99dee73 Clean up references to Gitpod (#18107)
  • 19d0f28 Fix layout trashing when navigating notebook cell-by-cell (#18080)
  • 9a86e53 Update example for disabling buildAvailable (#18075)
  • 6f68830 Use IntersectionObserver to disable containment for on-screen cells (#18091)
  • c4826af Convert documentation to Markdown (#18044)
  • Additional commits viewable in compare view

Updates pylint from 4.0.2 to 4.0.4

Commits
  • e16f942 Bump pylint to 4.0.4, update changelog
  • 657b386 [Backport maintenance/4.0.x] [invalid-name] Fix FP for exclusive assignment o...
  • 03f8a92 [Backport maintenance/4.0.x] fix: avoid false positive when module-level name...
  • 84b6552 Bump pylint to 4.0.3, update changelog (#10741)
  • 77b0cd8 [Backport maintenance/4.0.x] fix(expand_modules): pass ignore_list to modutil...
  • 755f2d0 [Backport maintenance/4.0.x] Upgrade astroid to 4.0.2 (#10733)
  • c96a9e4 [Backport maintenance/4.0.x] Fix crash when a variable annotation is used as ...
  • 108191e [Backport maintenance/4.0.x] Fix a false positive for class attribute typed w...
  • 0ed8172 [Backport maintenance/4.0.x] Fix crash when a slice object is called (#10728)
  • b128b7d [Backport maintenance/4.0.x] Fix a false positive for ``unbalanced-tuple-unpa...
  • Additional commits viewable in compare view

Updates pytest from 8.4.2 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

  • #13895: Restore support for skipping tests via raise unittest.SkipTest.
  • #13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
  • #13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
  • #13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

  • #13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.
  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

9.0.0

pytest 9.0.0 (2025-11-05)

New features

  • #1367: Support for subtests has been added.

    subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

    Example:

    def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)

... (truncated)

Commits
  • d1b64aa Prepare release version 9.0.1
  • 0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
  • a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
  • 2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
  • a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
  • 4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
  • 15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
  • 0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
  • fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
  • b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
  • Additional commits viewable in compare view

Updates anyio from 4.11.0 to 4.12.0

Release notes

Sourced from anyio's releases.

4.12.0

  • Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)
  • Added an asynchronous implementation of the functools module (#1001)
  • Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @​Vizonex)
  • Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)
  • Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)
  • Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)
  • Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @​northisup)
  • Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)
  • Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @​gschaffner)
  • Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @​gschaffner)
  • Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @​gschaffner)
  • Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @​saper)
  • Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)
Commits
  • bc021b6 Fixed the download-artifact settings to retain the expected behavior
  • c6000aa Corrected the format of the version in the changelog
  • 9d1bfe0 Bumped up the version
  • 77f7ce2 Fixed RuntimeError while shutting down the asyncio process pool (#1039)
  • aecc666 [pre-commit.ci] pre-commit autoupdate (#1036)
  • e5569ad Bump actions/checkout from 5 to 6 in the github-actions group (#1037)
  • dde3ab8 Moved a changelog entry to its correct position
  • 250d4f1 Restore compatibility with pytest<=6.1.2 (#1030)
  • 3708e22 Fixed a typo in the documentation (#1035)
  • 9adbe08 Add new params to Path.glob & Path.rglob introduced since 3.12 (#1034)
  • Additional commits viewable in compare view

Updates asttokens from 3.0.0 to 3.0.1

Commits
  • bdbf396 Update mypy; add 3.14 to the CI; drop python 3.8 support (#167)
  • f859c05 Add tests for astroid v2, v3, and v4 to the CI (#166)
  • 84ef059 Adapt asttokens for astroid 4.x (#165)
  • 9db9335 Various links improvements (#163)
  • 3371ebf Merge pull request #161 from gristlabs/dependabot/pip/docs/requests-2.32.4
  • 3a60115 Bump requests from 2.32.2 to 2.32.4 in /docs
  • 584b51c Merge pull request #160 from gristlabs/dependabot/pip/docs/urllib3-2.5.0
  • 3e9d703 Bump urllib3 from 2.2.2 to 2.5.0 in /docs
  • 64d3f7c Merge pull request #158 from gristlabs/dependabot/pip/docs/jinja2-3.1.6
  • 9b5fb1a Bump jinja2 from 3.1.4 to 3.1.6 in /docs
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.14.2 to 4.14.3

Updates certifi from 2025.10.5 to 2025.11.12

Commits

Updates ipython from 9.6.0 to 9.7.0

Commits
  • 4d6a64a release 9.7.0
  • 6dd0bf2 create publish action on GH (#15061)
  • b805f6d create publish script
  • d4b1083 TST: add systematic backward compatibility checks against oldest supported ve...
  • a7d5d2c DEP: bump minimal requirement on stack-data (0.0.7 -> 0.6.0)
  • 558cf9e DEP: bump minimal requirement on jedi (0.17.0 -> 0.18.1)
  • a703cfb TST: add systematic backward compatibility checks against oldest supported ve...
  • 3c94df8 Add setuptools-scm to pyflyby tests (#15059)
  • 1019171 Add setuptools-scm to pyflyby tests
  • fdbc964 Move TerminalInteractiveshell.inputhook to Deprecated, from Pending. (#15053)
  • Additional commits viewable in compare view

Updates psutil from 7.1.2 to 7.1.3

Changelog

Sourced from psutil's changelog.

7.1.3

2025-11-02

Enhancements

  • 2667_: enforce clang-format on all C and header files. It is now the mandatory formatting style for all C sources.
  • 2672_, [macOS], [BSD]: increase the chances to recognize zombie processes and raise the appropriate exception (ZombieProcess_).
  • 2676_, 2678_: replace unsafe sprintf / snprintf / sprintf_s calls with str_format(). Replace strlcat / strlcpy with safe str_copy / str_append. This unifies string handling across platforms and reduces unsafe usage of standard string functions, improving robustness.

Bug fixes

  • 2674_, [Windows]: disk_usage()_ could truncate values on 32-bit platforms, potentially reporting incorrect total/free/used space for drives larger than 4GB.
  • 2675_, [macOS]: Process.status()_ incorrectly returns "running" for 99% of the processes.
  • 2677_, [Windows]: fix MAC address string construction in net_if_addrs()_. Previously, the MAC address buffer was incorrectly updated using a fixed increment and sprintf_s, which could overflow or misformat the string if the MAC length or formatting changed. Also, the final '\n' was inserted unnecessarily.
  • 2679_, [OpenBSD], [NetBSD], [critical]: can't build due to C syntax error.
Commits
  • 5904ff9 Pre-release
  • d42db80 Update DEVGUIDE.rst
  • e4e1003 psutil_kinfo_proc: return in case of badargs; also print to stderr in case of...
  • bcdede4 Introduce PSUTIL_TESTING mode. Terminate execution if str_* funcs fail
  • 6822ba7 Replace strlcat/strlcpy with safe str_copy/str_append (#2678)
  • 0a7465c Windows: use str_format() in psutil_users().
  • fd05690 [Windows] fix MAC address string construction in net_if_addrs() (#2677)
  • 7d82135 NetBSD: refact proc cwd()
  • 262977f Replace unsafe sprintf/snprintf/sprintf_s calls with str_format() (#2676)
  • 1ba3cf5 Fix #2675 / macOS: convert process status() to a meaningful value
  • Additional commits viewable in compare view

Updates rpds-py from 0.28.0 to 0.30.0

Release notes

Sourced from rpds-py's releases.

v0.30.0

What's Changed

Full Changelog: crate-py/rpds@v0.29.0...v0.30.0

v0.29.0

What's Changed

Full Changelog: crate-py/rpds@v0.28.0...v0.29.0

Commits
  • c38c979 Tag a release.
  • 09c7538 Update the pre-commit link for zizmor.
  • 086997f Remove an unneeded section of the pyproject.toml.
  • 7690933 Merge pull request #204 from edgarrmondragon/pyo3-0.27.2
  • 84f9bd1 Update to PyO3 0.27.2
  • 5cb6bc4 Merge pull request #203 from crate-py/pre-commit-ci-update-config
  • 677a6db [pre-commit.ci] pre-commit autoupdate
  • 5f1fa20 Merge pull request #202 from crate-py/pre-commit-ci-update-config
  • 6657a51 [pre-commit.ci] pre-commit autoupdate
  • 5fb6f35 Prepare for 0.29.0
  • Additional commits viewable in compare view

Updates types-python-dateutil from 2.9.0.20251008 to 2.9.0.20251115

Commits

Updates astroid from 4.0.1 to 4.0.2

Release notes

Sourced from astroid's releases.

v4.0.2

What's New in astroid 4.0.2?

Release date: 2025-11-09

  • Handle FunctionDef blockstart_tolineno edge cases correctly.

    Refs #2880

  • Add HTTPMethod enum support to brain module for Python 3.11+.

    Refs pylint-dev/pylint#10624 Closes #2877

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.0.2?

Release date: 2025-11-09

  • Handle FunctionDef blockstart_tolineno edge cases correctly.

    Refs #2880

  • Add HTTPMethod enum support to brain module for Python 3.11+.

    Refs pylint-dev/pylint#10624 Closes #2877

Commits
  • a068430 Bump astroid to 4.0.2, update changelog
  • a5ce4b0 Upgrade pylint to 4.0.0, add mypy to the allowlist
  • d71bfac [Backport maintenance/4.0.x] Handle FunctionDef blockstart_tolineno edge case...
  • e127630 [Backport maintenance/4.0.x] feat: add HTTPMethod enum support to brain_http ...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-dependencies group with 12 updates
9530133 
Bumps the python-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.4.10` | `4.5.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `4.0.2` | `4.0.4` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.1` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.12.0` |
| [asttokens](https://github.com/gristlabs/asttokens) | `3.0.0` | `3.0.1` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.14.2` | `4.14.3` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2025.11.12` |
| [ipython](https://github.com/ipython/ipython) | `9.6.0` | `9.7.0` |
| [psutil](https://github.com/giampaolo/psutil) | `7.1.2` | `7.1.3` |
| [rpds-py](https://github.com/crate-py/rpds) | `0.28.0` | `0.30.0` |
| [types-python-dateutil](https://github.com/typeshed-internal/stub_uploader) | `2.9.0.20251008` | `2.9.0.20251115` |
| [astroid](https://github.com/pylint-dev/astroid) | `4.0.1` | `4.0.2` |


Updates `jupyterlab` from 4.4.10 to 4.5.0
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.4.10...@jupyterlab/lsp@4.5.0)

Updates `pylint` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.2...v4.0.4)

Updates `pytest` from 8.4.2 to 9.0.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.1)

Updates `anyio` from 4.11.0 to 4.12.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.11.0...4.12.0)

Updates `asttokens` from 3.0.0 to 3.0.1
- [Commits](gristlabs/asttokens@v3.0.0...v3.0.1)

Updates `beautifulsoup4` from 4.14.2 to 4.14.3

Updates `certifi` from 2025.10.5 to 2025.11.12
- [Commits](certifi/python-certifi@2025.10.05...2025.11.12)

Updates `ipython` from 9.6.0 to 9.7.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.6.0...9.7.0)

Updates `psutil` from 7.1.2 to 7.1.3
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.1.2...release-7.1.3)

Updates `rpds-py` from 0.28.0 to 0.30.0
- [Release notes](https://github.com/crate-py/rpds/releases)
- [Commits](crate-py/rpds@v0.28.0...v0.30.0)

Updates `types-python-dateutil` from 2.9.0.20251008 to 2.9.0.20251115
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `astroid` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: jupyterlab
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pylint
  dependency-version: 4.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: anyio
  dependency-version: 4.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: asttokens
  dependency-version: 3.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: beautifulsoup4
  dependency-version: 4.14.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ipython
  dependency-version: 9.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: psutil
  dependency-version: 7.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: rpds-py
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20251115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: astroid
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant