From acb6a716752973de43380337e3aa77e4664c1a05 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Nov 2025 06:06:03 +0000 Subject: [PATCH 1/2] Bump the pip group with 3 updates --- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.13.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: sigstore dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: pyfakefs dependency-version: 5.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ... Signed-off-by: dependabot[bot] --- dev-requirements.txt | 43 +++++++++++-------------------------------- mypy-requirements.txt | 4 ++-- 2 files changed, 13 insertions(+), 34 deletions(-) diff --git a/dev-requirements.txt b/dev-requirements.txt index 85492253..e03ee493 100644 --- a/dev-requirements.txt +++ b/dev-requirements.txt @@ -4,14 +4,10 @@ # # pip-compile --constraint=requirements.txt --generate-hashes --output-file=dev-requirements.txt dev-requirements.in # ---only-binary :all: - aiohappyeyeballs==2.6.1 \ --hash=sha256:c3f9d0113123803ccadfdf3f0faa505bc78e6a72d1cc4806cbd719826e943558 \ --hash=sha256:f349ba8f4b75cb25c99c5c2d84e997e485204d2902a9597802b0371f09331fb8 - # via - # -c requirements.txt - # aiohttp + # via aiohttp aiohttp==3.12.15 \ --hash=sha256:010cc9bbd06db80fe234d9003f67e97a10fe003bfbedb40da7d71c1008eda0fe \ --hash=sha256:049ec0360f939cd164ecbfd2873eaa432613d5e77d6b04535e3d1fbae5a9e645 \ @@ -98,21 +94,15 @@ aiohttp==3.12.15 \ --hash=sha256:fc49c4de44977aa8601a00edbf157e9a421f227aa7eb477d9e3df48343311065 \ --hash=sha256:fd736ed420f4db2b8148b52b46b88ed038d0354255f9a73196b7bbce3ea97545 \ --hash=sha256:fe086edf38b2222328cdf89af0dde2439ee173b8ad7cb659b4e4c6f385b2be3d - # via - # -c requirements.txt - # pytest-aiohttp + # via pytest-aiohttp aiosignal==1.4.0 \ --hash=sha256:053243f8b92b990551949e63930a839ff0cf0b0ebbe0597b0f3fb19e1a0fe82e \ --hash=sha256:f47eecd9468083c2029cc99945502cb7708b082c232f9aca65da147157b251c7 - # via - # -c requirements.txt - # aiohttp + # via aiohttp attrs==24.3.0 \ --hash=sha256:8f5c07333d543103541ba7be0e2ce16eeee8130cb0b3f9238ab904ce1e85baff \ --hash=sha256:ac96cd038792094f438ad1f6ff80837353805ac950cd2aa0e0625ef19850c308 - # via - # -c requirements.txt - # aiohttp + # via aiohttp coverage[toml]==7.10.7 \ --hash=sha256:03ffc58aacdf65d2a82bbeb1ffe4d01ead4017a21bfd0454983b88ca73af94b9 \ --hash=sha256:097c1591f5af4496226d5783d036bf6fd6cd0cbc132e071b33861de756efb880 \ @@ -313,15 +303,12 @@ frozenlist==1.5.0 \ --hash=sha256:fd74520371c3c4175142d02a976aee0b4cb4a7cc912a60586ffd8d5929979b30 \ --hash=sha256:feeb64bc9bcc6b45c6311c9e9b99406660a9c05ca8a5b30d14a78555088b0b3a # via - # -c requirements.txt # aiohttp # aiosignal idna==3.10 \ --hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \ --hash=sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3 - # via - # -c requirements.txt - # yarl + # via yarl iniconfig==2.0.0 \ --hash=sha256:2d91e135bf72d31a410b17c16da610a82cb55f6b0477d1a902134b24a455b8b3 \ --hash=sha256:b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374 @@ -420,7 +407,6 @@ multidict==6.1.0 \ --hash=sha256:f90c822a402cb865e396a504f9fc8173ef34212a342d92e362ca498cad308e28 \ --hash=sha256:ff3827aef427c89a25cc96ded1759271a93603aba9fb977a6d264648ebf989db # via - # -c requirements.txt # aiohttp # yarl packaging==23.2 \ @@ -517,19 +503,16 @@ propcache==0.2.1 \ --hash=sha256:f7a31fc1e1bd362874863fdeed71aed92d348f5336fd84f2197ba40c59f061bd \ --hash=sha256:f9479aa06a793c5aeba49ce5c5692ffb51fcd9a7016e017d555d5e2b0045d212 # via - # -c requirements.txt # aiohttp # yarl -pyfakefs==5.9.3 \ - --hash=sha256:14a0514e94ff156543208c0b4832facc68bdf19de993799b67d58dd5ca05ef30 \ - --hash=sha256:b458b11abc8862d4d8500816170a9b25e10d07437332b9dffd651069f3d4c40c +pyfakefs==5.10.1 \ + --hash=sha256:2e752d2e05e77add0759bb17efb1418060c176e8c06399c8258ca49377ab5b20 \ + --hash=sha256:4d76c481ba47d5e09d7a32519e837bcbd36f0e2bd7bc09ea75e633167665a4e5 # via -r dev-requirements.in pygments==2.19.2 \ --hash=sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887 \ --hash=sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b - # via - # -c requirements.txt - # pytest + # via pytest pytest==8.4.2 \ --hash=sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01 \ --hash=sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79 @@ -557,9 +540,7 @@ pytest-mock==3.15.1 \ # via -r dev-requirements.in typing-extensions==4.12.2 \ --hash=sha256:04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d - # via - # -c requirements.txt - # aiosignal + # via aiosignal yarl==1.18.3 \ --hash=sha256:00e5a1fea0fd4f5bfa7440a47eff01d9822a65b4488f7cff83155a0f31a2ecba \ --hash=sha256:02ddb6756f8f4517a2d5e99d8b2f272488e18dd0bfbc802f31c16c6c20f22193 \ @@ -643,6 +624,4 @@ yarl==1.18.3 \ --hash=sha256:fbd6748e8ab9b41171bb95c6142faf068f5ef1511935a0aa07025438dd9a9bc1 \ --hash=sha256:fe57328fbc1bfd0bd0514470ac692630f3901c0ee39052ae47acd1d90a436719 \ --hash=sha256:fea09ca13323376a2fdfb353a5fa2e59f90cd18d7ca4eaa1fd31f0a8b4f91e62 - # via - # -c requirements.txt - # aiohttp + # via aiohttp diff --git a/mypy-requirements.txt b/mypy-requirements.txt index 6685c84f..c2148714 100644 --- a/mypy-requirements.txt +++ b/mypy-requirements.txt @@ -1,10 +1,10 @@ -aiohttp==3.12.15 +aiohttp==3.13.2 alive_progress>=3.3.0 mypy==1.18.2 pyfakefs pytest pytest-mock python-gnupg # untyped :( -sigstore==3.6.5 +sigstore==4.1.0 types-paramiko types-requests From 719e978be21a5f065489069bc04fcd189bdb4aae Mon Sep 17 00:00:00 2001 From: Ezio Melotti Date: Sat, 1 Nov 2025 14:21:44 +0800 Subject: [PATCH 2/2] Downgrade sigstore version from 4.1.0 to 3.6.5 --- mypy-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mypy-requirements.txt b/mypy-requirements.txt index c2148714..9ef47971 100644 --- a/mypy-requirements.txt +++ b/mypy-requirements.txt @@ -5,6 +5,6 @@ pyfakefs pytest pytest-mock python-gnupg # untyped :( -sigstore==4.1.0 +sigstore==3.6.5 types-paramiko types-requests