Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2025

Bumps the all-minor-and-patch-dependency-updates group with 10 updates in the / directory:

Package From To
bandit 1.8.0 1.8.3
pytest 8.3.4 8.3.5
pytest-cov 6.0.0 6.1.0
ruff 0.8.4 0.11.2
tox 4.23.2 4.25.0
sphinx 8.1.3 8.2.3
sphinx-book-theme 1.1.3 1.1.4
nbsphinx 0.9.6 0.9.7
ray[default] 2.40.0 2.44.1
torch 2.5.1 2.6.0

Updates bandit from 1.8.0 to 1.8.3

Release notes

Sourced from bandit's releases.

1.8.3

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

1.8.2

What's Changed

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

1.8.1

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

Commits

Updates pytest from 8.3.4 to 8.3.5

Release notes

Sourced from pytest's releases.

8.3.5

pytest 8.3.5 (2025-03-02)

Bug fixes

  • #11777: Fixed issue where sequences were still being shortened even with -vv verbosity.
  • #12888: Fixed broken input when using Python 3.13+ and a libedit build of Python, such as on macOS or with uv-managed Python binaries from the python-build-standalone project. This could manifest e.g. by a broken prompt when using Pdb, or seeing empty inputs with manual usage of input() and suspended capturing.
  • #13026: Fixed AttributeError{.interpreted-text role="class"} crash when using --import-mode=importlib when top-level directory same name as another module of the standard library.
  • #13053: Fixed a regression in pytest 8.3.4 where, when using --import-mode=importlib, a directory containing py file with the same name would cause an ImportError
  • #13083: Fixed issue where pytest could crash if one of the collected directories got removed during collection.

Improved documentation

  • #12842: Added dedicated page about using types with pytest.

    See types{.interpreted-text role="ref"} for detailed usage.

Contributor-facing changes

  • #13112: Fixed selftest failures in test_terminal.py with Pygments >= 2.19.0
  • #13256: Support for Towncrier versions released in 2024 has been re-enabled when building Sphinx docs -- by webknjaz{.interpreted-text role="user"}.
Commits

Updates pytest-cov from 6.0.0 to 6.1.0

Changelog

Sourced from pytest-cov's changelog.

6.1.0 (2025-04-01)

  • Change terminal output to use full width lines for the coverage header. Contributed by Tsvika Shapira in [#678](https://github.com/pytest-dev/pytest-cov/issues/678) <https://github.com/pytest-dev/pytest-cov/pull/678>_.
  • Removed unnecessary CovFailUnderWarning. Fixes [#675](https://github.com/pytest-dev/pytest-cov/issues/675) <https://github.com/pytest-dev/pytest-cov/issues/675>_.
  • Fixed the term report not using the precision specified via --cov-precision.
Commits
  • 10f8cde Bump version: 6.0.0 → 6.1.0
  • 10b14af Update changelog.
  • aa57aed Refactor a bit the internals to be a bit less boilerplatey and have more clar...
  • e760099 Make sure the CLI precision is used when creating report. Fixes #674.
  • 44540e1 Remove unnecessary CovFailUnderWarning. Closes #675.
  • 204af14 Update changelog.
  • 089e7bb Upgrade ruff.
  • ab2cd26 Add py 3.13 to test grid and update some deps.
  • 2de0c6c add reference to code source
  • 362a359 move section between functions
  • Additional commits viewable in compare view

Updates ruff from 0.8.4 to 0.11.2

Release notes

Sourced from ruff's releases.

0.11.2

Release Notes

Preview features

  • [syntax-errors] Fix false-positive syntax errors emitted for annotations on variadic parameters before Python 3.11 (#16878)

Contributors

Install ruff 0.11.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.11.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.11.2/ruff-installer.ps1 | iex"

Download ruff 0.11.2

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
ruff-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
ruff-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
ruff-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
ruff-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
ruff-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
ruff-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.2

Preview features

  • [syntax-errors] Fix false-positive syntax errors emitted for annotations on variadic parameters before Python 3.11 (#16878)

0.11.1

Preview features

  • [airflow] Add chain, chain_linear and cross_downstream for AIR302 (#16647)
  • [syntax-errors] Improve error message and range for pre-PEP-614 decorator syntax errors (#16581)
  • [syntax-errors] PEP 701 f-strings before Python 3.12 (#16543)
  • [syntax-errors] Parenthesized context managers before Python 3.9 (#16523)
  • [syntax-errors] Star annotations before Python 3.11 (#16545)
  • [syntax-errors] Star expression in index before Python 3.11 (#16544)
  • [syntax-errors] Unparenthesized assignment expressions in sets and indexes (#16404)

Bug fixes

  • Server: Allow FixAll action in presence of version-specific syntax errors (#16848)
  • [flake8-bandit] Allow raw strings in suspicious-mark-safe-usage (S308) #16702 (#16770)
  • [refurb] Avoid panicking unwrap in verbose-decimal-constructor (FURB157) (#16777)
  • [refurb] Fix starred expressions fix (FURB161) (#16550)
  • Fix --statistics reporting for unsafe fixes (#16756)

Rule changes

  • [flake8-executables] Allow uv run in shebang line for shebang-missing-python (EXE003) (#16849,#16855)

CLI

  • Add --exit-non-zero-on-format (#16009)

Documentation

  • Update Ruff tutorial to avoid non-existent fix in __init__.py (#16818)
  • [flake8-gettext] Swap format- and printf-in-get-text-func-call examples (INT002, INT003) (#16769)

0.11.0

This is a follow-up to release 0.10.0. Because of a mistake in the release process, the requires-python inference changes were not included in that release. Ruff 0.11.0 now includes this change as well as the stabilization of the preview behavior for PGH004.

Breaking changes

  • Changes to how the Python version is inferred when a target-version is not specified (#16319)

    In previous versions of Ruff, you could specify your Python version with:

    • The target-version option in a ruff.toml file or the [tool.ruff] section of a pyproject.toml file.

... (truncated)

Commits

Updates tox from 4.23.2 to 4.25.0

Release notes

Sourced from tox's releases.

4.25.0

What's Changed

Full Changelog: tox-dev/tox@4.24.2...4.25.0

4.24.2

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.24.1...4.24.2

4.24.1

What's Changed

Full Changelog: tox-dev/tox@4.24.0...4.24.1

4.24.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

v4.25.0 (2025-03-27)

Features - 4.25.0

- Add support for number ranges in generative environments, more details :ref:`here<generative-environment-list>`. - by :user:`mimre25` (:issue:`3502`)

Bugfixes - 4.25.0

  • Make tox tests pass with Python 3.14.0a6
    • by :user:hroncok (:issue:3500)

v4.24.2 (2025-03-07)

Bugfixes - 4.24.2

- multiple source_type supports for the same filename. Like pyproject.toml can be load by both TomlPyProject & LegacyToml (:issue:`3117`)
- Support ``set_env = { file = "conf{/}local.env"}`` for TOML format - by :user:`juditnovak`. (:issue:`3474`)
- fix example on the docs (:issue:`3480`)
- - ``--parallel-no-spinner`` now respects max CPU set by ``--parallel N`` (:issue:`3495`)

Improved Documentation - 4.24.2

  • Updates the documentation for os.environ['KEY'] when the variable does not exist - by :user:jugmac00. (:issue:3456)

v4.24.1 (2025-01-21)

Misc - 4.24.1

- :issue:`3426`

v4.24.0 (2025-01-21)

Features - 4.24.0

  • Add a schema command to produce a JSON Schema for tox and the current plugins.

    • by :user:henryiii (:issue:3446)

Bugfixes - 4.24.0

- Log exception name when subprocess execution produces one.
  • by :user:ssbarnea (:issue:3450)

Improved Documentation - 4.24.0

... (truncated)

Commits

Updates sphinx from 8.1.3 to 8.2.3

Release notes

Sourced from sphinx's releases.

Sphinx 8.2.3

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Sphinx 8.2.2

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Sphinx 8.2.1

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Sphinx 8.2.0

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Dependencies

  • #13000: Drop Python 3.10 support.

Incompatible changes

  • #13044: Remove the internal and undocumented has_equations data from the MathDomain domain. The undocumented MathDomain.has_equations method now unconditionally returns True. These are replaced by the has_maths_elements key of the page context dict. Patch by Adam Turner.
  • #13227: HTML output for sequences of keys in the kbd role no longer uses a <kbd class="kbd compound"> element to wrap the keys and separators, but places them directly in the relevant parent node. This means that CSS rulesets targeting kbd.compound or .kbd.compound will no longer have any effect. Patch by Adam Turner.

Deprecated

  • #13037: Deprecate the SingleHTMLBuilder.fix_refuris method. Patch by James Addison.
  • #13083, #13330: Un-deprecate sphinx.util.import_object. Patch by Matthias Geier.

Features added

  • #13173: Add a new duplicate_declaration warning type, with duplicate_declaration.c and duplicate_declaration.cpp subtypes. Patch by Julien Lecomte and Adam Turner.
  • #11824: linkcode: Allow extensions to add support for a domain by defining the keys that should be present.

... (truncated)

Commits
  • 847ad0c Bump to 8.2.3 final
  • 4091fe3 Add CHANGES for Sphinx 8.2.3
  • c84c21f Correct the date for Sphinx 8.2.2
  • b3881bb Fix _CurrentDocument membership testing with '{c,cpp}:parent_symbol'
  • 92b5303 Define _StrPath.__radd__()
  • 5739a9d Bump version
  • ee96ef3 Bump to 8.2.2 final
  • 3e0021c Move Sphinx 8.2.2 CHANGES to doc/changes
  • 1a62f31 Fix apidoc extension not setting default header/package name (#13391)
  • 13d2899 Replace None filename with '' in Sphinx.add_js_file() (#13402)
  • Additional commits viewable in compare view

Updates sphinx-book-theme from 1.1.3 to 1.1.4

Release notes

Sourced from sphinx-book-theme's releases.

v1.1.4 - 2025-02-20

(full changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Other merged PRs

Contributors to this release

(GitHub contributors page for this release)

@​agoose77 | @​askras | @​bsipocz | @​choldgraf | @​dependabot | @​dylanh724 | @​kloczek | @​mitya57 | @​nilsleh | @​pre-commit-ci | @​Snoopy1866 | @​stevepiercy | @​welcome

Commits
  • 23f6936 chore: bump version
  • d3552e2 MAINT: pin PST theme version for now (#898)
  • ee815b1 CI: adding explicit sphinx config into RTD config (#897)
  • 8822eef really drop python<=3.8 support (#844)
  • 40f7c41 Build(deps): Bump the actions group with 3 updates (#876)
  • 1cd3ca6 Build(deps-dev): Bump express from 4.18.2 to 4.21.2 (#886)
  • c9a7d49 Build(deps-dev): Bump sass from 1.80.4 to 1.81.0 (#877)
  • 7d118ba Build(deps-dev): Bump dedent from 0.7.0 to 1.5.3 (#878)
  • 2732526 Fix links in documentation (#884)
  • e2eea6f [pre-commit.ci] pre-commit autoupdate (#885)
  • Additional commits viewable in compare view

Updates nbsphinx from 0.9.6 to 0.9.7

Release notes

Sourced from nbsphinx's releases.

nbsphinx 0.9.7

https://pypi.org/project/nbsphinx/0.9.7/

  • Disable Sphinx 8.2+ (for now)
Changelog

Sourced from nbsphinx's changelog.

Version 0.9.7 -- 2025-03-03 -- PyPI__ -- diff__

  • Disable Sphinx 8.2+ (for now)

__ https://pypi.org/project/nbsphinx/0.9.7/ __ spatialaudio/nbsphinx@0.9.6...0.9.7

Version 0.9.6 -- 2024-12-24 -- PyPI__ -- diff__

  • Markdown: allow lists without leading blank line

__ https://pypi.org/project/nbsphinx/0.9.6/ __ spatialaudio/nbsphinx@0.9.5...0.9.6

Version 0.9.5 -- 2024-08-13 -- PyPI__ -- diff__

  • Miscellaneous fixes

__ https://pypi.org/project/nbsphinx/0.9.5/ __ spatialaudio/nbsphinx@0.9.4...0.9.5

Version 0.9.4 -- 2024-05-06 -- PyPI__ -- diff__

  • Require docutils >= 0.18.1
  • Minor fixes, documentation and CI updates

__ https://pypi.org/project/nbsphinx/0.9.4/ __ spatialaudio/nbsphinx@0.9.3...0.9.4

Version 0.9.3 -- 2023-08-27 -- PyPI__ -- diff__

  • Fix gallery regression in Sphinx 7.2

__ https://pypi.org/project/nbsphinx/0.9.3/ __ spatialaudio/nbsphinx@0.9.2...0.9.3

Version 0.9.2 -- 2023-05-24 -- PyPI__ -- diff__

  • Improve support for sphinx_immaterial theme
  • Improve support for links starting with #
  • Add support for in-text citations
  • LaTeX: Add support for admonition titles

__ https://pypi.org/project/nbsphinx/0.9.2/ __ spatialaudio/nbsphinx@0.9.1...0.9.2

Version 0.9.1 -- 2023-03-14 -- PyPI__ -- diff__

  • pandoc: disable "smart" option only for version 2.0+

__ https://pypi.org/project/nbsphinx/0.9.1/ __ spatialaudio/nbsphinx@0.9.0...0.9.1

Version 0.9.0 -- 2023-03-12 -- PyPI__ -- diff__

  • Split nbsphinx.py (a Python module) into:

    • nbsphinx/__init__.py (a Python package)

... (truncated)

Commits

Updates ray[default] from 2.40.0 to 2.44.1

Release notes

Sourced from ray[default]'s releases.

Ray-2.44.1

Under screen-lit skies A ray of bliss in each patch Joy at any scale

Ray-2.44.0

Release Highlights

  • This release features Ray Compiled Graph (beta). Ray Compiled Graph gives you a classic Ray Core-like API, but with (1) less than 50us system overhead for workloads that repeatedly execute the same task graph; and (2) native support for GPU-GPU communication via NCCL. Ray Compiled Graph APIs simplify high-performance multi-GPU workloads such as LLM inference and training. The beta release refines the API, enhances stability, and adds or improves features like visualization, profiling and experimental GPU compute/computation overlap. For more information, refer to Ray documentation: https://docs.ray.io/en/latest/ray-core/compiled-graph/ray-compiled-graph.html
  • The experimental Ray Workflows library has been deprecated and will be removed in a future version of Ray. Ray Workflows has been marked experimental since its inception and hasn’t been maintained due to the Ray team focusing on other priorities. If you are using Ray Workflows, we recommend pinning your Ray version to 2.44.

Ray Libraries

Ray Data

🎉 New Features:

  • Add Iceberg write support through pyiceberg (#50590)
  • [LLM] Various feature enhancements to Ray Data LLM, including LoRA support #50804 and structured outputs #50901

💫 Enhancements:

  • Add dataset/operator state, progress, total metrics (#50770)
  • Make chunk combination threshold configurable (#51200)
  • Store average memory use per task in OpRuntime...

    Description has been truncated

…ory with 10 updates

Bumps the all-minor-and-patch-dependency-updates group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/PyCQA/bandit) | `1.8.0` | `1.8.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `8.3.5` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `6.1.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.8.4` | `0.11.2` |
| [tox](https://github.com/tox-dev/tox) | `4.23.2` | `4.25.0` |
| [sphinx](https://github.com/sphinx-doc/sphinx) | `8.1.3` | `8.2.3` |
| [sphinx-book-theme](https://github.com/executablebooks/sphinx-book-theme) | `1.1.3` | `1.1.4` |
| [nbsphinx](https://github.com/spatialaudio/nbsphinx) | `0.9.6` | `0.9.7` |
| [ray[default]](https://github.com/ray-project/ray) | `2.40.0` | `2.44.1` |
| [torch](https://github.com/pytorch/pytorch) | `2.5.1` | `2.6.0` |



Updates `bandit` from 1.8.0 to 1.8.3
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.0...1.8.3)

Updates `pytest` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...8.3.5)

Updates `pytest-cov` from 6.0.0 to 6.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.0.0...v6.1.0)

Updates `ruff` from 0.8.4 to 0.11.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.4...0.11.2)

Updates `tox` from 4.23.2 to 4.25.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.23.2...4.25.0)

Updates `sphinx` from 8.1.3 to 8.2.3
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v8.1.3...v8.2.3)

Updates `sphinx-book-theme` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/executablebooks/sphinx-book-theme/releases)
- [Changelog](https://github.com/executablebooks/sphinx-book-theme/blob/master/CHANGELOG.md)
- [Commits](executablebooks/sphinx-book-theme@v1.1.3...v1.1.4)

Updates `nbsphinx` from 0.9.6 to 0.9.7
- [Release notes](https://github.com/spatialaudio/nbsphinx/releases)
- [Changelog](https://github.com/spatialaudio/nbsphinx/blob/master/NEWS.rst)
- [Commits](spatialaudio/nbsphinx@0.9.6...0.9.7)

Updates `ray[default]` from 2.40.0 to 2.44.1
- [Release notes](https://github.com/ray-project/ray/releases)
- [Commits](ray-project/ray@ray-2.40.0...ray-2.44.1)

Updates `torch` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pytest-cov
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: tox
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-book-theme
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: nbsphinx
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ray[default]
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: torch
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner April 1, 2025 13:27
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2025
@xiangchenjhu xiangchenjhu merged commit 4c75b5e into main Apr 3, 2025
4 of 6 checks passed
@dependabot dependabot bot deleted the dependabot/pip/all-minor-and-patch-dependency-updates-2f29770ec2 branch April 3, 2025 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant