Skip to content

fix(deps): update vulnfeeds-python#4881

Merged
G-Rath merged 1 commit into
google:masterfrom
renovate-bot:renovate/vulnfeeds-python
Feb 24, 2026
Merged

fix(deps): update vulnfeeds-python#4881
G-Rath merged 1 commit into
google:masterfrom
renovate-bot:renovate/vulnfeeds-python

Conversation

@renovate-bot

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Change Age Confidence
pandas ==3.0.0==3.0.1 age confidence
pylint (changelog) 4.0.44.0.5 age confidence

Release Notes

pandas-dev/pandas (pandas)

v3.0.1: pandas 3.0.1

Compare Source

We are pleased to announce the release of pandas 3.0.1.
This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher.
The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pylint-dev/pylint (pylint)

v4.0.5

Compare Source

What's new in Pylint 4.0.5?

Release date: 2026-02-20

False Positives Fixed

  • Fix possibly-used-before-assignment false positive when using self.fail() in tests.

    Closes #​10743

  • Fixed false positive for logging-unsupported-format when no arguments are provided to logging functions.

    According to Python's logging documentation, no formatting is performed when no arguments are supplied, so strings like logging.error("%test") are valid.

    Closes #​10752

  • Fix a false positive for invalid-name where a dataclass field typed with Final
    was evaluated against the class_const regex instead of the class_attribute regex.

    Closes #​10790

  • Avoid emitting unspecified-encoding (W1514) when py-version is 3.15+.

    Refs #​10791

Other Bug Fixes

  • Fix --known_third_party config being ignored.

    Closes #​10801

  • Fixed dynamic color mapping for "fail-on" messages when using multiple reporter/output formats.

    Closes #​10825

  • dependency on isort is now set to <9, permitting to use isort 8.

    Closes #​10857


Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Feb 24, 2026
@G-Rath G-Rath merged commit e4a8144 into google:master Feb 24, 2026
20 checks passed
@renovate-bot renovate-bot deleted the renovate/vulnfeeds-python branch February 24, 2026 18:06
tymzd pushed a commit to tymzd/osv.dev that referenced this pull request Apr 13, 2026
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pandas](https://redirect.github.com/pandas-dev/pandas) | `==3.0.0` →
`==3.0.1` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/pandas/3.0.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pandas/3.0.0/3.0.1?slim=true)
|
| [pylint](https://redirect.github.com/pylint-dev/pylint)
([changelog](https://pylint.readthedocs.io/en/latest/whatsnew/3/)) |
`4.0.4` → `4.0.5` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/pylint/4.0.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pylint/4.0.4/4.0.5?slim=true)
|

---

### Release Notes

<details>
<summary>pandas-dev/pandas (pandas)</summary>

###
[`v3.0.1`](https://redirect.github.com/pandas-dev/pandas/releases/tag/v3.0.1):
pandas 3.0.1

[Compare
Source](https://redirect.github.com/pandas-dev/pandas/compare/v3.0.0...v3.0.1)

We are pleased to announce the release of pandas 3.0.1.
This is a patch release in the 3.0.x series and includes some regression
fixes and bug fixes. We recommend that all users of the 3.0.x series
upgrade to this version.

See the [full
whatsnew](https://pandas.pydata.org/docs/dev/whatsnew/v3.0.1.html) for a
list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher.
The release can be installed from PyPI:

```
python -m pip install --upgrade pandas==3.0.*
```

Or from conda-forge

```
conda install -c conda-forge pandas=3.0
```

Please report any issues with the release on the [pandas issue
tracker](https://redirect.github.com/pandas-dev/pandas/issues).

Thanks to all the contributors who made this release possible.

</details>

<details>
<summary>pylint-dev/pylint (pylint)</summary>

###
[`v4.0.5`](https://redirect.github.com/pylint-dev/pylint/releases/tag/v4.0.5)

[Compare
Source](https://redirect.github.com/pylint-dev/pylint/compare/v4.0.4...v4.0.5)

## What's new in Pylint 4.0.5?

Release date: 2026-02-20

## False Positives Fixed

- Fix possibly-used-before-assignment false positive when using
self.fail() in tests.

Closes
[#&#8203;10743](https://redirect.github.com/pylint-dev/pylint/issues/10743)

- Fixed false positive for `logging-unsupported-format` when no
arguments are provided to logging functions.

According to Python's logging documentation, no formatting is performed
when no arguments are supplied, so strings like `logging.error("%test")`
are valid.

Closes
[#&#8203;10752](https://redirect.github.com/pylint-dev/pylint/issues/10752)

- Fix a false positive for `invalid-name` where a dataclass field typed
with `Final`
was evaluated against the `class_const` regex instead of the
`class_attribute` regex.

Closes
[#&#8203;10790](https://redirect.github.com/pylint-dev/pylint/issues/10790)

- Avoid emitting `unspecified-encoding` (W1514) when `py-version` is
3.15+.

Refs
[#&#8203;10791](https://redirect.github.com/pylint-dev/pylint/issues/10791)

## Other Bug Fixes

- Fix `--known_third_party` config being ignored.

Closes
[#&#8203;10801](https://redirect.github.com/pylint-dev/pylint/issues/10801)

- Fixed dynamic color mapping for "fail-on" messages when using multiple
reporter/output formats.

Closes
[#&#8203;10825](https://redirect.github.com/pylint-dev/pylint/issues/10825)

- dependency on isort is now set to <9, permitting to use isort 8.

Closes
[#&#8203;10857](https://redirect.github.com/pylint-dev/pylint/issues/10857)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMzIuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants