chore(deps): bump the build-dependencies group in /tools/schemacode with 11 updates#2459
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps the build-dependencies group in /tools/schemacode with 11 updates: | Package | From | To | | --- | --- | --- | | [click](https://github.com/pallets/click) | `8.3.1` | `8.4.1` | | [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.6` | `0.15.17` | | [check-jsonschema](https://github.com/python-jsonschema/check-jsonschema) | `0.37.0` | `0.37.3` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.0` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `2.1.0` | | [types-jsonschema](https://github.com/python/typeshed) | `4.26.0.20260202` | `4.26.0.20260518` | | [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20250915` | `6.0.12.20260518` | | [types-tabulate](https://github.com/python/typeshed) | `0.10.0.20260308` | `0.10.0.20260508` | Updates `click` from 8.3.1 to 8.4.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.3.1...8.4.1) Updates `markdown-it-py` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/executablebooks/markdown-it-py/releases) - [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md) - [Commits](executablebooks/markdown-it-py@v4.0.0...v4.2.0) Updates `ruff` from 0.15.6 to 0.15.17 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.6...0.15.17) Updates `check-jsonschema` from 0.37.0 to 0.37.3 - [Release notes](https://github.com/python-jsonschema/check-jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/check-jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/check-jsonschema@0.37.0...0.37.3) Updates `pytest` from 9.0.3 to 9.1.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.0) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `lxml` from 6.1.0 to 6.1.1 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-6.1.0...lxml-6.1.1) Updates `mypy` from 1.19.1 to 2.1.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v2.1.0) Updates `types-jsonschema` from 4.26.0.20260202 to 4.26.0.20260518 - [Commits](https://github.com/python/typeshed/commits) Updates `types-pyyaml` from 6.0.12.20250915 to 6.0.12.20260518 - [Commits](https://github.com/python/typeshed/commits) Updates `types-tabulate` from 0.10.0.20260308 to 0.10.0.20260508 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-dependencies - dependency-name: markdown-it-py dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-dependencies - dependency-name: ruff dependency-version: 0.15.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies - dependency-name: check-jsonschema dependency-version: 0.37.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies - dependency-name: pytest dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build-dependencies - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build-dependencies - dependency-name: lxml dependency-version: 6.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies - dependency-name: mypy dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: build-dependencies - dependency-name: types-jsonschema dependency-version: 4.26.0.20260518 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies - dependency-name: types-pyyaml dependency-version: 6.0.12.20260518 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies - dependency-name: types-tabulate dependency-version: 0.10.0.20260508 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
exclude-from-changelog
dependabot
Bot
added
the
exclude-from-changelog
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #2459 +/- ##
=======================================
Coverage 83.07% 83.07%
=======================================
Files 22 22
Lines 1696 1696
=======================================
Hits 1409 1409
Misses 287 287 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Collaborator
|
for my own sake -- @effigies, it should be safe/desired to keep the lock file updating ? |
Collaborator
|
Yes, the use of the lockfile (for us) is so that a dependency making a new release that breaks something does not suddenly cause all CI to start failing. PRs like this one are where we should expect to see breakage, so we mainly want to check that CI is passing (it is) and that rendering looks good (I haven't looked, but this set of dependencies is unlikely to have an impact). |
Collaborator
|
"rendering looks good" -- sounds like worth extra CI run to compare, potentially with some AI to do the assessment. WDYT? |
Collaborator
|
Sure, if you know how to automate that comparison. I don't. |
yarikoptic
approved these changes
Jul 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the build-dependencies group in /tools/schemacode with 11 updates:
8.3.18.4.14.0.04.2.00.15.60.15.170.37.00.37.39.0.39.1.07.0.07.1.06.1.06.1.11.19.12.1.04.26.0.202602024.26.0.202605186.0.12.202509156.0.12.202605180.10.0.202603080.10.0.20260508Updates
clickfrom 8.3.1 to 8.4.1Release notes
Sourced from click's releases.
... (truncated)
Changelog
Sourced from click's changelog.
... (truncated)
Commits
6eeb50erelease version 8.4.167921d5change log and doc fixes (#3495)9c41f46Fix changelog and version admonitions6cb3477fix skip condition5ee8e31fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)becbde5pager doesn't close std streamsa5f5aa6Handle empty bytes in echo (#3493)4d3db84handle empty bytes in echod42f15bFixget_parameter_source()during type conversion and eager callbacks (#3484)0baa8dbDocument ctx.params bypass with test and docUpdates
markdown-it-pyfrom 4.0.0 to 4.2.0Release notes
Sourced from markdown-it-py's releases.
Changelog
Sourced from markdown-it-py's changelog.
Commits
36c5f54🚀 RELEASE v4.2.0 (#395)96cf077✨ Addmake_fence_rule()factory for configurable fence markers (#394)3b4ff6d🚀 RELEASE v4.1.0 (#393)8951f26🔧 Update pre-commit hooks (#392)693bb24✨ Addgfm-like2preset with task lists, alerts, and single-tilde strikethro...df6fd36✨Allow plugins to register inline terminator characters (#391)d4ea0ca👌 Fix quadratic complexity infragments_join/text_join(#389)8933147🔧 Add typing to Scanner (#382)2f6ae10🔧 Add AGENTS.md and copilot-setup-steps workflow (#380)49043e4Add --stdin option to CLI for reading Markdown from standard input (#379)Updates
rufffrom 0.15.6 to 0.15.17Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
7c645a9Bump 0.15.17 (#25872)f381eb1Prioritize human-readable names in CLI output (#25869)b9b4546Minor workflow simplification (#25870)1e77ba0[ty] MovePreformattedBlockScannerto format-agnostic location. (#25856)6f2b772[ty] Preserve nominal type of enum.property instances (#25849)be4777c[ty] Fix site-package error when multiple versions of pythons are installed i...53f6ff7Allow human-readable names in suppression comments (#25614)6740325[ty] Restrict uncached raw signature access (#25866)970b1bfAuto-update snapshots when syncing typeshed (#25841)0785793Fix handling ofignorecomments within adisable/enablepair (#25845)Updates
check-jsonschemafrom 0.37.0 to 0.37.3Release notes
Sourced from check-jsonschema's releases.
Changelog
Sourced from check-jsonschema's changelog.
Commits
5030dcaBump version for releasee49ebfeMerge pull request #687 from python-jsonschema/dependabot/pip/responses-0.26.1b3ae064Bump responses from 0.26.0 to 0.26.148ba608Fix stale test dataed0cecfUpdate vendored schemasb1f7546Merge pull request #686 from python-jsonschema/vendor-schemas-autod99034f[vendor-schemas] automated update566da04Merge pull request #684 from python-jsonschema/vendor-schemas-autodca8424Merge pull request #685 from python-jsonschema/pre-commit-ci-update-config520b76e[pre-commit.ci] pre-commit autoupdateUpdates
pytestfrom 9.0.3 to 9.1.0Release notes
Sourced from pytest's releases.
... (truncated)
Commits
b2522cfPrepare release version 9.1.0368d2fc[refactor] TightenSetComparisonFunctiontoIterator[str](#14587)ff77cd8[refactor] Make base assertion comparisons return an iterator instead of a li...0d8491abuild(deps): Bump actions/stale from 10.2.0 to 10.3.04a809d9Merge pull request #14568 from pytest-dev/register-fixture5dfa385Fix recursion traceback test to cover all styles (#14582)f52ff0cAddpytest.register_fixturea8ac094Merge pull request #14567 from pytest-dev/more-visibility-deprecatee5620cd[pre-commit.ci] pre-commit autoupdate (#14577)2ce9c6dMerge pull request #14540 from minbang930/fix-14533-doctest-module-fixturesUpdates
pytest-covfrom 7.0.0 to 7.1.0Changelog
Sourced from pytest-cov's changelog.
Commits
66c8a52Bump version: 7.0.0 → 7.1.0f707662Make the examples use pypy 3.11.6049a78Make context test use the old ctracer (seems the new sysmon tracer behaves di...8ebf20bUpdate changelog.861d30eRemove the backup context manager - shouldn't be needed since coverage 5.0, ...fd4c956Pass the precision on the nulled total (seems that there's some caching goion...78c9c4eOnly run the 3.9 on older deps.4849a92Punctuation.197c35eUpdate changelog and hopefully I don't forget to publish release again :))14dc1c9Update examples to use 3.11 and make the adhoc layout example look a bit more...Updates
lxmlfrom 6.1.0 to 6.1.1Changelog
Sourced from lxml's changelog.
Commits
b4a4c59Build: Fix build in Py3.8.a116dcbFix typo: type annotions -> type annotations in PEP 560 comments (GH-504)7287a75Prepare release of 6.1.1.5927a6dAdd missing "xlink:href" to the known HTML link attributes.23efeb4Build: Fix build in Py3.8.2c0563bBuild: Add bug patch for libxslt 1.1.43 and apply it during the static librar...8a35fccFix doctest in PyPy3.9.Updates
mypyfrom 1.19.1 to 2.1.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
c1c336dRemove +dev from version74df14bAdd changelog for mypy 2.1 (#21464)022d9bcRevert "TypeForm: Enable by default (#21262)"8826288[mypyc] Document librt.random (#21463)3f4067bBump librt version to 0.11.0 (#21458)2b1eb58[mypyc] Enable incremental self-compilation (#21369)8152f4aRespect file config comments for stale modules (#21444)116d60bFix nondeterminism from nonassociativity of overload joins (#21455)6c4af8eFix function call message change for small number of args (#21432)4b8fdca[mypyc] Add librt.random module (#21433)Updates
types-jsonschemafrom 4.26.0.20260202 to 4.26.0.20260518Commits
Updates
types-pyyamlfrom 6.0.12.20250915 to 6.0.12.20260518Commits
Updates
types-tabulatefrom 0.10.0.20260308 to 0.10.0.20260508Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions