deps(deps): bump the python-tooling-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #94 · pagopa/cloud-strategy.github

dependabot · 2026-10-12T20:11:13Z

Bumps the python-tooling-minor-patch group with 5 updates in the /.github/scripts directory:

Package	From	To
iniconfig	`2.3.0`	`2.3.1`
packaging	`26.2`	`26.3`
pygments	`2.20.0`	`2.21.0`
pytest	`9.0.3`	`9.1.1`
ruff	`0.15.11`	`0.17.0`

Updates iniconfig from 2.3.0 to 2.3.1

Release notes

Sourced from iniconfig's releases.

Version 2.3.1

Fixes

Parsing values with many continuation lines is now linear instead of quadratic in time (#78, regarding #77).

A leading UTF-8 BOM is now stripped when reading INI files. Files saved by Windows editors used to fail with ParseError (#76, thanks @Pitchfork-and-Torch).

Internal

iniconfig._parse.ParsedLine.value is now a list of lines. This is private API.

Docs

The README example now uses IniConfig.parse() (#79, thanks @MbappeWU).

Fixed the issue tracker link (#74, thanks @stefan6419846).

Full diff: pytest-dev/iniconfig@v2.3.0...v2.3.1

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pytest-dev/iniconfig#71

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pytest-dev/iniconfig#72

Fix link to issues by @stefan6419846 in pytest-dev/iniconfig#74

parse_lines: keep values as list of lines, join once by @RonnyPfannschmidt in pytest-dev/iniconfig#78

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pytest-dev/iniconfig#73

test: expect sorted all after ruff autofix by @RonnyPfannschmidt in pytest-dev/iniconfig#80

docs: use parse API in the README example by @MbappeWU in pytest-dev/iniconfig#79

Strip leading UTF-8 BOM when reading INI files by @Pitchfork-and-Torch in pytest-dev/iniconfig#76

changelog: add BOM stripping (#76) to 2.3.1 by @RonnyPfannschmidt in pytest-dev/iniconfig#81

New Contributors

@stefan6419846 made their first contribution in pytest-dev/iniconfig#74

@MbappeWU made their first contribution in pytest-dev/iniconfig#79

@Pitchfork-and-Torch made their first contribution in pytest-dev/iniconfig#76

Full Changelog: pytest-dev/iniconfig@v2.3.0...v2.3.1

Changelog

Sourced from iniconfig's changelog.

2.3.1

fix quadratic parse time for values with many continuation lines (#78, regarding #77)

strip a leading UTF-8 BOM when reading INI files, which previously raised ParseError (#76)

internal: iniconfig._parse.ParsedLine.value is now a list of lines

Commits

316fbfa changelog: add BOM stripping (#76) to 2.3.1 (#81)
d2dcb72 Strip leading UTF-8 BOM when reading INI files (#76)
40d8c03 Merge pull request #79 from MbappeWU/codex/docs-parse-inline-comments
48359c3 Merge pull request #80 from pytest-dev/claude/fix-iniconfig-test-eukh2n
b153213 test: expect sorted all after ruff RUF022 autofix
4fddfab Merge pull request #73 from pytest-dev/pre-commit-ci-update-config
15852c2 [pre-commit.ci] auto fixes from pre-commit.com hooks
2e68639 [pre-commit.ci] pre-commit autoupdate
23c9e08 docs: use parse API in the README example
e038536 Merge pull request #78 from RonnyPfannschmidt/claude/dazzling-einstein-h8zq7m
Additional commits viewable in compare view

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)

PEP 808: accept Metadata-Version: 2.6. (#1194)

Add a limit argument to parse_tag() for compressed tag sets. (#1220)

Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)

Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)

Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)

Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)

Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)

Fix an AttributeError when hashing internally trimmed versions. (#1242)

Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)

Normalize requested extra names before comparing or hashing requirements. (#644)

Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)

Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)

Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)

Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)

Keep the parentheses of a nested group when serializing markers. (#1316)

Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)

Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)

Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)

Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)

Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)

Accept the UTF-8 charset case-insensitively in email payloads. (#1330)

Reject malformed Description-Content-Type values. (#1329)

Don't rewrite user values that contain {field} placeholders in error messages. (#1327)

Route multipart email payloads to unparsed instead of asserting. (#1247)

Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)

Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() &lt;packaging.specifiers.SpecifierSet.to_range&gt;,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() &lt;packaging.specifiers.SpecifierSet.is_subset&gt;, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

929fd4b Bump for release
f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
413d006 docs: changelog for 26.3 (#1343)
4eb0753 docs(metadata): explain selective field validation (#1342)
77e9ed4 feat(tags): add pure Python tag generator (#1346)
7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
Additional commits viewable in compare view

Updates pygments from 2.20.0 to 2.21.0

Release notes

Sourced from pygments's releases.

2.21.0

New lexers:

BitBake (#3103)

Caddyfile (#3225)

CEL (#3048)

PureScript (#1077, #3054)

Updated lexers:

Bash: Fix coloured keyword at the beginning of a name (#2926)

Boogie: Add missing Boogie and Civl Verifier keywords (#3156)

C#:

Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)

Support dollar-prefixed and multi-quote raw strings (#3129, #2897)

Recognize union (#3182)

C/C++:

Add C23/C++26 attributes (#3084)

Add more C2Y keywords (#3092)

Highlight a function following a namespace body (#2928)

Fix C/C++ lexer support for multiline pre-processor comments (#3051)

Add .ipp as a file extension (#3141, #1008)

Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)

Csound: Add missing opcode parameter type letter (#3161)

CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)

D: Allow non-ASCII (Unicode) identifiers (#1088)

Fish: Fix single quote backslash escape (#3138, #2821)

Go: Various lexer improvements (#3199)

GoogleSQL: Require a word break after SET (#3167)

Hexdump: Only match valid digits (#3200, #2847)

JavaScript: Highlight the arguments object (#3146)

Jsonnet: Recognize colons in array slice expressions (#2828)

JSX: Allow apostrophes in element text (#2816)

Julia: Fix rstrings backslash (#3140, #2537)

Kotlin: Support companion objects without an explicit name (#2525)

Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)

Kusto: Recognize member-access dots in dynamic objects (#2779)

Lua: Various improvements (#3143)

Macaulay2: Update symbols to 1.26.05 (#3120)

Markdown:

Highlight bold-italics (***...*** and ___...___) (#3067)

Fix mention regex to support hyphens in usernames (#3139, #3135)

Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for embedded code blocks (#3133)

Mathematica: Recognize \[Name] named-character escapes such as \[Nu] instead of emitting an Error token (#3097)

... (truncated)

Changelog

Sourced from pygments's changelog.

Version 2.21.0

(released August 17th, 2026)

New lexers:

BitBake (#3103)

Caddyfile (#3225)

CEL (#3048)

PureScript (#1077, #3054)

Updated lexers:

Bash: Fix coloured keyword at the beginning of a name (#2926)

Boogie: Add missing Boogie and Civl Verifier keywords (#3156)

C#:

Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)

Support dollar-prefixed and multi-quote raw strings (#3129, #2897)

Recognize union (#3182)

C/C++:

Add C23/C++26 attributes (#3084)

Add more C2Y keywords (#3092)

Highlight a function following a namespace body (#2928)

Fix C/C++ lexer support for multiline pre-processor comments (#3051)

Add .ipp as a file extension (#3141, #1008)

Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)

Csound: Add missing opcode parameter type letter (#3161)

CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)

D: Allow non-ASCII (Unicode) identifiers (#1088)

Fish: Fix single quote backslash escape (#3138, #2821)

Go: Various lexer improvements (#3199)

GoogleSQL: Require a word break after SET (#3167)

Hexdump: Only match valid digits (#3200, #2847)

JavaScript: Highlight the arguments object (#3146)

Jsonnet: Recognize colons in array slice expressions (#2828)

JSX: Allow apostrophes in element text (#2816)

Julia: Fix rstrings backslash (#3140, #2537)

Kotlin: Support companion objects without an explicit name (#2525)

Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)

Kusto: Recognize member-access dots in dynamic objects (#2779)

Lua: Various improvements (#3143)

Macaulay2: Update symbols to 1.26.05 (#3120)

Markdown:

Highlight bold-italics (***...*** and ___...___) (#3067)

Fix mention regex to support hyphens in usernames (#3139, #3135)

Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for

... (truncated)

Commits

a43b45d Get ready for the 2.21.0 release.
d8f14cb Fix version_added for Purescript.
19c5817 Remove superfluous parentheses from PostgresExplainLexer (#3232)
9992e09 Merge pull request #3191 from jvoisin/dupes
bd22577 Fix regexlint warnings after latest update.
6a62df1 Release preparation: Update the changelog.
aabba32 Merge pull request #3221 from jvoisin/alter
d3441d0 Merge pull request #3225 from jvoisin/caddy
c593f3f Add a lexer for Caddy
0644b53 Simplify single-character regex alternations to character classes
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates ruff from 0.15.11 to 0.17.0

Release notes

Sourced from ruff's releases.

0.17.0

Release Notes

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

Update the default and latest Python versions for 3.15 (#28792)

Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

Update the default rule set (#28786)

Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

Update Rust crate quick-junit to 0.8.0 (#27295)

JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

[flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

Support Unicode dummy variable names (#28722)

The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

Update to Unicode 17 (#21229, #28784)

Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

Always show unsafe and display-only fixes in the CLI (#27810)

The default full output format now shows unsafe fixes and suggestions requiring manual review, regardless of the unsafe-fixes setting. Actually applying unsafe fixes still requires explicit opt-in.

Remove the Python dependency from conda-forge builds (conda-forge/ruff-feedstock#361)

The conda-forge build no longer depends on Python, now supports linux-riscv64, win-arm64, and linux-ppc64le platforms, and now includes shell completions. However, no longer depending on Python means that python -m ruff and import ruff will no longer work. Use ruff directly from PATH instead. PyPI installations and those from the standalone installer are unaffected.

Remove support for ruff-lsp (#28750)

Support for ruff-lsp, the legacy Python language server deprecated in Ruff v0.9.5, has been removed. The Ruff VS Code extension now always uses the native language server; ruff.nativeServer is deprecated and ignored. See the migration guide.

Stabilization

The following rules have been stabilized and are no longer in preview:

lazy-import-mismatch (TID254)

lazy-import-immediately-resolved (TID255)

os-path-commonprefix (RUF071)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

Update the default and latest Python versions for 3.15 (#28792)

Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

Update the default rule set (#28786)

Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

Update Rust crate quick-junit to 0.8.0 (#27295)

JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

[flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

Support Unicode dummy variable names (#28722)

The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

Update to Unicode 17 (#21229, #28784)

Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

Always show unsafe and display-only fixes in the CLI (#27810)

... (truncated)

Commits

5b27c1c Bump version to 0.17.0 (#29259)
8f362bf Integrate vendored Unicode names into Ruff
88a50d6 Revert upstream Unicode loose matching
276832a Revert upstream Unicode alias normalization
26911ca Vendor unicode_names2 from upstream
27e3797 [ruff] Stabilize os-path-commonprefix (RUF071) (#28764)
bbb52c1 [flake8-tidy-imports] Stabilize lazy-import-immediately-resolved (`TID255...
5aa9cbd [flake8-tidy-imports] Stabilize lazy-import-mismatch (TID254) (#28760)
dba1bc8 [flake8-import-conventions] Add datetime as dt as a conventional alias (`...
ef23c9c Update default and latest Python versions for 3.15 (#28792)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ory with 5 updates Bumps the python-tooling-minor-patch group with 5 updates in the /.github/scripts directory: | Package | From | To | | --- | --- | --- | | [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` | | [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` | | [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.11` | `0.17.0` | Updates `iniconfig` from 2.3.0 to 2.3.1 - [Release notes](https://github.com/pytest-dev/iniconfig/releases) - [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG) - [Commits](pytest-dev/iniconfig@v2.3.0...v2.3.1) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `pygments` from 2.20.0 to 2.21.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.20.0...2.21.0) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `ruff` from 0.15.11 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.11...0.17.0) --- updated-dependencies: - dependency-name: iniconfig dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-tooling-minor-patch - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-tooling-minor-patch - dependency-name: pygments dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-tooling-minor-patch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-tooling-minor-patch - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-tooling-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T20:11:16Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-10-19T06:35:59Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested review from a team and GNuccio96 as code owners October 12, 2026 20:11

dependabot Bot closed this Oct 19, 2026

dependabot Bot deleted the dependabot/pip/dot-github/scripts/python-tooling-minor-patch-564b90270f branch October 19, 2026 06:36

Navigation Menu

Repository navigation

deps(deps): bump the python-tooling-minor-patch group across 1 directory with 5 updates - #94

deps(deps): bump the python-tooling-minor-patch group across 1 directory with 5 updates#94
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dot-github/scripts/python-tooling-minor-patch-564b90270f

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 2.3.1

Fixes

Internal

Docs

What's Changed

New Contributors

2.3.1

26.3

What's Changed

Features

Behavior adaptations

Fixes for versions and specifiers

Fixes for requirements and markers

Fixes for metadata and licenses

2.21.0

Version 2.21.0

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

0.17.0

Release Notes

Breaking changes

Stabilization

0.17.0

Breaking changes

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading