Skip to content

Bump the workspace-python group across 1 directory with 3 updates - #23

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/workspace-python-4a813febba
Open

Bump the workspace-python group across 1 directory with 3 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/workspace-python-4a813febba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pyright, ruff and pyinstaller to permit the latest version.
Updates pyright to 1.1.414

Commits

Updates ruff to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates pyinstaller to 6.22.3

Release notes

Sourced from pyinstaller's releases.

v6.22.3

Please see the v6.22.3 section of the changelog for a list of the changes since v6.22.2.

Changelog

Sourced from pyinstaller's changelog.

6.22.3 (2026-09-12)

Bugfix


* (Windows) Revise earlier fix for :issue:`9508` to avoid breaking
  executables located on ImDisk RAMDISK volumes. (:issue:`9510`)
* Compare the icon file suffix case-insensitively, so an icon named with an
  upper-case suffix such as ``MyApp.ICO`` is recognised as already being in the
  right format instead of being rejected or silently re-encoded.
  (:issue:`9521`)
* Fix ``onefile`` parent-process validation to allow intermixed nested
  sub-processes. (:issue:`9513`)

Bootloader

  • (POSIX) Enable onefile parent-process validation for POSIX executables that have setgid bit set, and for Linux executables that have file capabilities set (i.e., have a security.capability extended file attribute). (:issue:9524)
  • (POSIX) Revise the validation of owner and permissions of onedir application's contents directory when the executable has either setuid or setgid bit set. If setuid bit is set, the owner ID of the application's contents directory must match the owner ID of the executable itself, and only owner is allowed to have write permissions on the directory. If setgid bit is set, the group ID of the application's contents directory must match the group ID of the executable itself, and only owner and the group are allowed to have write permissions on the directory. (:issue:9524)
  • Limit onefile parent-process validation only to executables that are running with elevated privileges while inheriting environment variables set by unprivileged user. On POSIX systems, this corresponds to executables with setuid bit set, while on Windows, it corresponds to UAC-elevated processes (running with TokenElevationTypeFull token). (:issue:9520)

6.22.2 (2026-08-17)

Bugfix


* (Windows) Fix spurious security validation error when a ``onefile``
  executable is launched from a symlinked directory or a junction.
  (:issue:`9508`)

</tr></table>

... (truncated)

Commits
  • ecd7993 Release v6.22.3. [skip ci]
  • 8807296 doc: update documentation section on onefile/onedir security verification
  • bda6110 bootloader: security: improve owner/permissions check in onedir mode
  • e3fc240 bootloader: security: add detection of file capabilities on linux
  • 3d73d32 bootloader: security: enable security checks for setgid executables
  • 10c62c5 bootloader: security: make early-error message a bit more generic
  • 1919af1 Tests: Requirements: Scheduled weekly dependency update for week 36 (#9522)
  • 77907b5 doc: update documentation section on onefile security verification
  • a36324b ci: freebsd: mount /proc
  • 012e150 tests: security: adjust for platforms without parent-process verification
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the workspace-python group across 1 directory with 3 updates
9489ac1 
Updates the requirements on [pyright](https://github.com/RobertCraigie/pyright-python), [ruff](https://github.com/astral-sh/ruff) and [pyinstaller](https://github.com/pyinstaller/pyinstaller) to permit the latest version.

Updates `pyright` to 1.1.414
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414)

Updates `ruff` to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.5...0.16.7)

Updates `pyinstaller` to 6.22.3
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.22.2...v6.22.3)

---
updated-dependencies:
- dependency-name: pyright
  dependency-version: 1.1.414
  dependency-type: direct:development
  dependency-group: workspace-python
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  dependency-group: workspace-python
- dependency-name: pyinstaller
  dependency-version: 6.22.3
  dependency-type: direct:development
  dependency-group: workspace-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 17, 2026
@dependabot
dependabot Bot requested a review from Akshay-r-rao as a code owner September 17, 2026 10:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Akshay-r-rao Akshay-r-rao Awaiting requested review from Akshay-r-rao Akshay-r-rao is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants