Commit 458bb19

authored

chore(deps): update python dependencies (#195)

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Adoption](https://docs.renovatebot.com/merge-confidence/) | [Passing](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [mypy](https://redirect.github.com/python/mypy) ([changelog](https://mypy.readthedocs.io/en/latest/changelog.html)) | `1.19.1` → `1.20.1` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/mypy/1.20.1?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/mypy/1.20.1?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/mypy/1.19.1/1.20.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/mypy/1.19.1/1.20.1?slim=true) | | [requests](https://redirect.github.com/psf/requests) ([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md)) | `2.33.0` → `2.33.1` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.1?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/requests/2.33.1?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/requests/2.33.0/2.33.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.33.0/2.33.1?slim=true) | | [ruff](https://docs.astral.sh/ruff) ([source](https://redirect.github.com/astral-sh/ruff), [changelog](https://redirect.github.com/astral-sh/ruff/blob/main/CHANGELOG.md)) | `0.15.7` → `0.15.10` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/ruff/0.15.10?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/ruff/0.15.10?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/ruff/0.15.7/0.15.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/ruff/0.15.7/0.15.10?slim=true) | --- ### Release Notes <details> <summary>python/mypy (mypy)</summary> ### [`v1.20.1`](https://redirect.github.com/python/mypy/blob/HEAD/CHANGELOG.md#Mypy-1201) [Compare Source](https://redirect.github.com/python/mypy/compare/v1.20.0...v1.20.1) - Always disable sync in SQLite cache (Ivan Levkivskyi, PR [21184](https://redirect.github.com/python/mypy/pull/21184)) - Temporarily skip few base64 tests (Ivan Levkivskyi, PR [21193](https://redirect.github.com/python/mypy/pull/21193)) - Revert `dict.__or__` typeshed change (Ivan Levkivskyi, PR [21186](https://redirect.github.com/python/mypy/pull/21186)) - Fix narrowing for match case with variadic tuples (Shantanu, PR [21192](https://redirect.github.com/python/mypy/pull/21192)) - Avoid narrowing `type[T]` in type calls (Shantanu, PR [21174](https://redirect.github.com/python/mypy/pull/21174)) - Fix regression for catching empty tuple in except (Shantanu, PR [21153](https://redirect.github.com/python/mypy/pull/21153)) - Fix reachability for frozenset and dict view narrowing (Shantanu, PR [21151](https://redirect.github.com/python/mypy/pull/21151)) - Fix narrowing with chained comparison (Shantanu, PR [21150](https://redirect.github.com/python/mypy/pull/21150)) - Avoid narrowing to unreachable at module level (Shantanu, PR [21144](https://redirect.github.com/python/mypy/pull/21144)) - Allow dangerous identity comparisons to `Any` typed variables (Shantanu, PR [21142](https://redirect.github.com/python/mypy/pull/21142)) - `--warn-unused-config` should not be a strict flag (Ivan Levkivskyi, PR [21139](https://redirect.github.com/python/mypy/pull/21139)) ### [`v1.20.0`](https://redirect.github.com/python/mypy/compare/v1.19.1...v1.20.0) [Compare Source](https://redirect.github.com/python/mypy/compare/v1.19.1...v1.20.0) </details> <details> <summary>psf/requests (requests)</summary> ### [`v2.33.1`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2331-2026-03-30) [Compare Source](https://redirect.github.com/psf/requests/compare/v2.33.0...v2.33.1) **Bugfixes** - Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. ([#7305](https://redirect.github.com/psf/requests/issues/7305)) - Fixed Content-Type header parsing for malformed values. ([#7309](https://redirect.github.com/psf/requests/issues/7309)) - Improved error consistency for malformed header values. ([#7308](https://redirect.github.com/psf/requests/issues/7308)) </details> <details> <summary>astral-sh/ruff (ruff)</summary> ### [`v0.15.10`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01510) [Compare Source](https://redirect.github.com/astral-sh/ruff/compare/0.15.9...0.15.10) Released on 2026-04-09. ##### Preview features - \[`flake8-logging`] Allow closures in except handlers (`LOG004`) ([#24464](https://redirect.github.com/astral-sh/ruff/pull/24464)) - \[`flake8-self`] Make `SLF` diagnostics robust to non-self-named variables ([#24281](https://redirect.github.com/astral-sh/ruff/pull/24281)) - \[`flake8-simplify`] Make the fix for `collapsible-if` safe in `preview` (`SIM102`) ([#24371](https://redirect.github.com/astral-sh/ruff/pull/24371)) ##### Bug fixes - Avoid emitting multi-line f-string elements before Python 3.12 ([#24377](https://redirect.github.com/astral-sh/ruff/pull/24377)) - Avoid syntax error from `E502` fixes in f-strings and t-strings ([#24410](https://redirect.github.com/astral-sh/ruff/pull/24410)) - Strip form feeds from indent passed to `dedent_to` ([#24381](https://redirect.github.com/astral-sh/ruff/pull/24381)) - \[`pyupgrade`] Fix panic caused by handling of octals (`UP012`) ([#24390](https://redirect.github.com/astral-sh/ruff/pull/24390)) - Reject multi-line f-string elements before Python 3.12 ([#24355](https://redirect.github.com/astral-sh/ruff/pull/24355)) ##### Rule changes - \[`ruff`] Treat f-string interpolation as potential side effect (`RUF019`) ([#24426](https://redirect.github.com/astral-sh/ruff/pull/24426)) ##### Server - Add support for custom file extensions ([#24463](https://redirect.github.com/astral-sh/ruff/pull/24463)) ##### Documentation - Document adding fixes in CONTRIBUTING.md ([#24393](https://redirect.github.com/astral-sh/ruff/pull/24393)) - Fix JSON typo in settings example ([#24517](https://redirect.github.com/astral-sh/ruff/pull/24517)) ##### Contributors - [@charliermarsh](https://redirect.github.com/charliermarsh) - [@dylwil3](https://redirect.github.com/dylwil3) - [@silverstein](https://redirect.github.com/silverstein) - [@anishgirianish](https://redirect.github.com/anishgirianish) - [@shizukushq](https://redirect.github.com/shizukushq) - [@zanieb](https://redirect.github.com/zanieb) - [@AlexWaygood](https://redirect.github.com/AlexWaygood) ### [`v0.15.9`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#0159) [Compare Source](https://redirect.github.com/astral-sh/ruff/compare/0.15.8...0.15.9) Released on 2026-04-02. ##### Preview features - \[`pyflakes`] Flag annotated variable redeclarations as `F811` in preview mode ([#24244](https://redirect.github.com/astral-sh/ruff/pull/24244)) - \[`ruff`] Allow dunder-named assignments in non-strict mode for `RUF067` ([#24089](https://redirect.github.com/astral-sh/ruff/pull/24089)) ##### Bug fixes - \[`flake8-errmsg`] Avoid shadowing existing `msg` in fix for `EM101` ([#24363](https://redirect.github.com/astral-sh/ruff/pull/24363)) - \[`flake8-simplify`] Ignore pre-initialization references in `SIM113` ([#24235](https://redirect.github.com/astral-sh/ruff/pull/24235)) - \[`pycodestyle`] Fix `W391` fixes for consecutive empty notebook cells ([#24236](https://redirect.github.com/astral-sh/ruff/pull/24236)) - \[`pyupgrade`] Fix `UP008` nested class matching ([#24273](https://redirect.github.com/astral-sh/ruff/pull/24273)) - \[`pyupgrade`] Ignore strings with string-only escapes (`UP012`) ([#16058](https://redirect.github.com/astral-sh/ruff/pull/16058)) - \[`ruff`] `RUF072`: skip formfeeds on dedent ([#24308](https://redirect.github.com/astral-sh/ruff/pull/24308)) - \[`ruff`] Avoid re-using symbol in `RUF024` fix ([#24316](https://redirect.github.com/astral-sh/ruff/pull/24316)) - \[`ruff`] Parenthesize expression in `RUF050` fix ([#24234](https://redirect.github.com/astral-sh/ruff/pull/24234)) - Disallow starred expressions as values of starred expressions ([#24280](https://redirect.github.com/astral-sh/ruff/pull/24280)) ##### Rule changes - \[`flake8-simplify`] Suppress `SIM105` for `except*` before Python 3.12 ([#23869](https://redirect.github.com/astral-sh/ruff/pull/23869)) - \[`pyflakes`] Extend `F507` to flag `%`-format strings with zero placeholders ([#24215](https://redirect.github.com/astral-sh/ruff/pull/24215)) - \[`pyupgrade`] `UP018` should detect more unnecessarily wrapped literals (UP018) ([#24093](https://redirect.github.com/astral-sh/ruff/pull/24093)) - \[`pyupgrade`] Fix `UP008` callable scope handling to support lambdas ([#24274](https://redirect.github.com/astral-sh/ruff/pull/24274)) - \[`ruff`] `RUF010`: Mark fix as unsafe when it deletes a comment ([#24270](https://redirect.github.com/astral-sh/ruff/pull/24270)) ##### Formatter - Add `nested-string-quote-style` formatting option ([#24312](https://redirect.github.com/astral-sh/ruff/pull/24312)) ##### Documentation - \[`flake8-bugbear`] Clarify RUF071 fix safety for non-path string comparisons ([#24149](https://redirect.github.com/astral-sh/ruff/pull/24149)) - \[`flake8-type-checking`] Clarify import cycle wording for `TC001`/`TC002`/`TC003` ([#24322](https://redirect.github.com/astral-sh/ruff/pull/24322)) ##### Other changes - Avoid rendering fix lines with trailing whitespace after `|` ([#24343](https://redirect.github.com/astral-sh/ruff/pull/24343)) ##### Contributors - [@charliermarsh](https://redirect.github.com/charliermarsh) - [@MichaReiser](https://redirect.github.com/MichaReiser) - [@tranhoangtu-it](https://redirect.github.com/tranhoangtu-it) - [@dylwil3](https://redirect.github.com/dylwil3) - [@zsol](https://redirect.github.com/zsol) - [@renovate](https://redirect.github.com/renovate) - [@bitloi](https://redirect.github.com/bitloi) - [@danparizher](https://redirect.github.com/danparizher) - [@chinar-amrutkar](https://redirect.github.com/chinar-amrutkar) - [@second-ed](https://redirect.github.com/second-ed) - [@getehen](https://redirect.github.com/getehen) - [@Redovo1](https://redirect.github.com/Redovo1) - [@matthewlloyd](https://redirect.github.com/matthewlloyd) - [@zanieb](https://redirect.github.com/zanieb) - [@InSyncWithFoo](https://redirect.github.com/InSyncWithFoo) - [@RenzoMXD](https://redirect.github.com/RenzoMXD) ### [`v0.15.8`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#0158) [Compare Source](https://redirect.github.com/astral-sh/ruff/compare/0.15.7...0.15.8) Released on 2026-03-26. ##### Preview features - \[`ruff`] New rule `unnecessary-if` (`RUF050`) ([#24114](https://redirect.github.com/astral-sh/ruff/pull/24114)) - \[`ruff`] New rule `useless-finally` (`RUF072`) ([#24165](https://redirect.github.com/astral-sh/ruff/pull/24165)) - \[`ruff`] New rule `f-string-percent-format` (`RUF073`): warn when using `%` operator on an f-string ([#24162](https://redirect.github.com/astral-sh/ruff/pull/24162)) - \[`pyflakes`] Recognize `frozendict` as a builtin for Python 3.15+ ([#24100](https://redirect.github.com/astral-sh/ruff/pull/24100)) ##### Bug fixes - \[`flake8-async`] Use fully-qualified `anyio.lowlevel` import in autofix (`ASYNC115`) ([#24166](https://redirect.github.com/astral-sh/ruff/pull/24166)) - \[`flake8-bandit`] Check tuple arguments for partial paths in `S607` ([#24080](https://redirect.github.com/astral-sh/ruff/pull/24080)) - \[`pyflakes`] Skip `undefined-name` (`F821`) for conditionally deleted variables ([#24088](https://redirect.github.com/astral-sh/ruff/pull/24088)) - `E501`/`W505`/formatter: Exclude nested pragma comments from line width calculation ([#24071](https://redirect.github.com/astral-sh/ruff/pull/24071)) - Fix `%foo?` parsing in IPython assignment expressions ([#24152](https://redirect.github.com/astral-sh/ruff/pull/24152)) - `analyze graph`: resolve string imports that reference attributes, not just modules ([#24058](https://redirect.github.com/astral-sh/ruff/pull/24058)) ##### Rule changes - \[`eradicate`] ignore `ty: ignore` comments in `ERA001` ([#24192](https://redirect.github.com/astral-sh/ruff/pull/24192)) - \[`flake8-bandit`] Treat `sys.executable` as trusted input in `S603` ([#24106](https://redirect.github.com/astral-sh/ruff/pull/24106)) - \[`flake8-self`] Recognize `Self` annotation and `self` assignment in `SLF001` ([#24144](https://redirect.github.com/astral-sh/ruff/pull/24144)) - \[`pyflakes`] `F507`: Fix false negative for non-tuple RHS in `%`-formatting ([#24142](https://redirect.github.com/astral-sh/ruff/pull/24142)) - \[`refurb`] Parenthesize generator arguments in `FURB142` fixer ([#24200](https://redirect.github.com/astral-sh/ruff/pull/24200)) ##### Performance - Speed up diagnostic rendering ([#24146](https://redirect.github.com/astral-sh/ruff/pull/24146)) ##### Server - Warn when Markdown files are skipped due to preview being disabled ([#24150](https://redirect.github.com/astral-sh/ruff/pull/24150)) ##### Documentation - Clarify `extend-ignore` and `extend-select` settings documentation ([#24064](https://redirect.github.com/astral-sh/ruff/pull/24064)) - Mention AI policy in PR template ([#24198](https://redirect.github.com/astral-sh/ruff/pull/24198)) ##### Other changes - Use trusted publishing for NPM packages ([#24171](https://redirect.github.com/astral-sh/ruff/pull/24171)) ##### Contributors - [@bitloi](https://redirect.github.com/bitloi) - [@Sim-hu](https://redirect.github.com/Sim-hu) - [@mvanhorn](https://redirect.github.com/mvanhorn) - [@chinar-amrutkar](https://redirect.github.com/chinar-amrutkar) - [@markjm](https://redirect.github.com/markjm) - [@RenzoMXD](https://redirect.github.com/RenzoMXD) - [@vivekkhimani](https://redirect.github.com/vivekkhimani) - [@seroperson](https://redirect.github.com/seroperson) - [@moktamd](https://redirect.github.com/moktamd) - [@charliermarsh](https://redirect.github.com/charliermarsh) - [@ntBre](https://redirect.github.com/ntBre) - [@zanieb](https://redirect.github.com/zanieb) - [@dylwil3](https://redirect.github.com/dylwil3) - [@MichaReiser](https://redirect.github.com/MichaReiser) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/DrupalSecurityTeam/drupal-advisory-database).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

1 parent c0e3f64 commit 458bb19Copy full SHA for 458bb19

1 file changed

poetry.lock

Comments

(0)