Skip to content

chore(deps-dev): bump the python group with 9 updates - #3430

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-50f2f413a7
Closed

chore(deps-dev): bump the python group with 9 updates#3430
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-50f2f413a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 9 updates:

Package From To
ruff 0.17.1 0.17.2
types-python-dateutil 2.9.0.20260807 2.9.0.20261021
certifi 2026.10.18 2026.10.23
django-dbbackup 5.3.1 5.4.0
python-dateutil 2.9.0.post0 3.0.0
sentry-sdk 2.72.0 2.73.0
yt-dlp 2026.8.19 2026.10.21
playwright 1.64.0 1.64.1
time-machine 3.5.1 3.6.0

Updates ruff from 0.17.1 to 0.17.2

Release notes

Sourced from ruff's releases.

0.17.2

Release Notes

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

Configuration

  • [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

  • Clarify documentation and correct stale guidance (#29374)
  • [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

Install ruff 0.17.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.2/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.2

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

Configuration

  • [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

  • Clarify documentation and correct stale guidance (#29374)
  • [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

Commits
  • 30516b4 Bump version to 0.17.2 (#29637)
  • 59a9e85 [ty] Generalize nested types in inferred return types (#29488)
  • 0d562aa [ty] Check inherited attribute conflicts (#28559)
  • 48dcdd0 [ty] Restrict range implications from gradual equivalence (#29577)
  • 734d75a [ty] Check for unsatisfiable bodies before existentially quantifying (#29504)
  • b0f9526 [ty] Preserve checks for recursive descriptor setter types (#29148)
  • 32869b4 Avoid creating deployments for automation jobs (#29626)
  • ec891ba Link the commit in pull request report footers (#29621)
  • 8958748 [ty] Publish ecosystem reports from GitHub Actions (#29609)
  • 01f5394 [ty] Publish typing conformance reports from GitHub Actions (#29608)
  • Additional commits viewable in compare view

Updates types-python-dateutil from 2.9.0.20260807 to 2.9.0.20261021

Commits

Updates certifi from 2026.10.18 to 2026.10.23

Commits

Updates django-dbbackup from 5.3.1 to 5.4.0

Release notes

Sourced from django-dbbackup's releases.

5.4.0

Added

  • PostgreSQL connectors now forward the sslmode, sslrootcert, sslcert, sslkey, passfile and service keys of the Django database OPTIONS setting to pg_dump, psql and pg_restore as their matching libpq environment variable, the same way Django forwards them to its own command line tools. Backups and restores now use the TLS and client certificate configuration of the ORM, including the PostGIS activation step.

Changed

  • A value set in the PostgreSQL OPTIONS setting now takes precedence over the same variable configured through ENV, DUMP_ENV or RESTORE_ENV, where the environment used to win.

Fixed

  • ADMIN_PASSWORD is now passed to the PostGIS activation step, it had no effect until now.
  • PgDumpBinaryConnector now applies RESTORE_ENV to pg_restore, which was receiving DUMP_ENV instead. DUMP_ENV no longer leaks into the restore phase, put in RESTORE_ENV the variables which were reaching pg_restore from it.
  • DBBACKUP_GPG_ALWAYS_TRUST setting is now respected instead of being enabled whenever DBBACKUP_GPG_RECIPIENT is set. Encrypting to a public key that GPG does not trust will now fail, as documented, unless the key is trusted or DBBACKUP_GPG_ALWAYS_TRUST = True is set.
  • Pass configured DBBACKUP_CONNECTORS settings when instantiating connector from backup metadata in dbrestore.
  • dbrestore no longer discards the DROP and PG_OPTIONS values configured in DBBACKUP_CONNECTORS. --no-drop and --pg-options still take precedence when passed.
  • Connector options holding a list or a dict (EXCLUDE, SCHEMAS, ENV, DUMP_ENV, RESTORE_ENV) are now copied per connector. dbbackup --exclude-tables used to append to the class default, silently excluding those tables from every other database of the same run and from connectors created afterwards.
Changelog

Sourced from django-dbbackup's changelog.

[5.4.0] - 2026-10-24

Added

  • PostgreSQL connectors now forward the sslmode, sslrootcert, sslcert, sslkey, passfile and service keys of the Django database OPTIONS setting to pg_dump, psql and pg_restore as their matching libpq environment variable, the same way Django forwards them to its own command line tools. Backups and restores now use the TLS and client certificate configuration of the ORM, including the PostGIS activation step.

Changed

  • A value set in the PostgreSQL OPTIONS setting now takes precedence over the same variable configured through ENV, DUMP_ENV or RESTORE_ENV, where the environment used to win.

Fixed

  • ADMIN_PASSWORD is now passed to the PostGIS activation step, it had no effect until now.
  • PgDumpBinaryConnector now applies RESTORE_ENV to pg_restore, which was receiving DUMP_ENV instead. DUMP_ENV no longer leaks into the restore phase, put in RESTORE_ENV the variables which were reaching pg_restore from it.
  • DBBACKUP_GPG_ALWAYS_TRUST setting is now respected instead of being enabled whenever DBBACKUP_GPG_RECIPIENT is set. Encrypting to a public key that GPG does not trust will now fail, as documented, unless the key is trusted or DBBACKUP_GPG_ALWAYS_TRUST = True is set.
  • Pass configured DBBACKUP_CONNECTORS settings when instantiating connector from backup metadata in dbrestore.
  • dbrestore no longer discards the DROP and PG_OPTIONS values configured in DBBACKUP_CONNECTORS. --no-drop and --pg-options still take precedence when passed.
  • Connector options holding a list or a dict (EXCLUDE, SCHEMAS, ENV, DUMP_ENV, RESTORE_ENV) are now copied per connector. dbbackup --exclude-tables used to append to the class default, silently excluding those tables from every other database of the same run and from connectors created afterwards.
Commits

Updates python-dateutil from 2.9.0.post0 to 3.0.0

Release notes

Sourced from python-dateutil's releases.

3.0.0

This is the last major version of dateutil that will support any version of Python older than 3.11. The next release will be the 4.x series, which will support Python 3.11 and later. We may release fixes for serious bugs in the 3.0.x series, but there are no plans for new features there.

The biggest change in this release is a rewrite of tz.tzfile, which affects nearly every user of dateutil.tz and changes the UTC offset of nonexistent times (see below). dateutil also now depends on the tzdata package, and no longer ships its own time zone database.

Data updates

  • dateutil no longer bundles a copy of the IANA time zone database. Time zone data now comes from the system (see dateutil.tz.TZPATH) or, failing that, from the new tzdata dependency, so the data version is whatever version of tzdata is installed. (gh pr #1130)

Features

  • Rewrote tz.tzfile based on a backport of the zoneinfo module's pure-Python implementation. This adds support for Version 2 and Version 3 tzfile(5) binaries, resolving issues with timestamps beyond 2038 and "slim" format binaries. (gh issues #462, #1059, gh pr #1130)
  • Added dateutil.tz.TZPATH and dateutil.tz.reset_tzpath to allow for runtime configuration of the IANA time zone data search path. These replace the mutable dateutil.tz.TZPATHS list, which has been removed. (gh pr #1130)
  • dateutil now depends on the tzdata package, which gettz consults after the search path and before the Windows registry. On Windows this means that names that are both IANA keys and Windows time zone names, such as "UTC", now return a tzfile rather than a tzwin. (gh pr #1130)

Bugfixes

  • tz.tzfile now follows PEP 495 for times that fall in a gap: with fold=0 it uses the offset from before the transition, and with fold=1 the offset from after it. Previously it always used the offset from after the transition, so for example datetime(2003, 4, 6, 2, 30, tzinfo=tz.gettz("America/New_York")) had a UTC offset of -04:00, where it now has -05:00, the same as with zoneinfo. (gh pr #1130)
  • tz.tzfile objects for fixed-offset zones, such as tz.gettz("UTC"), now return their offset, DST offset and abbreviation when utcoffset, dst and tzname are called with None, as tz.tzutc, tz.tzoffset and zoneinfo.ZoneInfo do. This means that datetime.time objects with such a zone attached are now aware: time(12, tzinfo=tz.gettz("UTC")).isoformat() is now "12:00:00+00:00" rather than "12:00:00". (gh pr #1130)
  • tz.tzfile now infers dst() from the standard time on both sides of each DST period, rather than only the one before it, and does so for each transition rather than for each local time type. This fixes dst() for double summer time (e.g. in Europe/London in the 1940s), for half-hour DST (e.g. in Pacific/Rarotonga) and where the standard offset changed at the same time as a DST transition (e.g. in America/Bahia_Banderas in 2010). Against the standard offsets in the tz database source, the only remaining errors are in Europe/Paris in 1944 and 1945. (gh pr #1130)
  • Fixed rrulestr raising ValueError on experimental X- parameters in an RRULE line (such as GNOME Evolution's X-EVOLUTION-ENDDATE); these are now ignored as RFC 5545 permits. Fixed by @​yajo (gh pr #1374)
  • Enabled pickling and deepcopy of cached rrule and rruleset instances. The cache setting is preserved, and cached results are regenerated on demand without copying locks or generators. Reported by @​niccokunzmann (gh issue #1369). Fixed by @​Jay1023CN (gh pr #1600).
  • Fixed relativedelta.__ne__ raising TypeError when comparing against an unsupported type such as None; it now returns True. Reported and fixed by @​kevinkt1 (gh issue #1157, gh pr #1158)
  • Raised the minimum version of six to 1.6, fixing No module named 'six.moves' errors with older versions. Reported by @​skytreader (gh issue #1415), fixed by @​jdarias3 (gh pr #1424).

Deprecations

  • Deprecated the dateutil.zoneinfo module. The module now acts as a wrapper around the tzdata package and will be removed in a future version. Users are encouraged to migrate to dateutil.tz.gettz or the standard library's zoneinfo module. dateutil.zoneinfo.rebuild.rebuild no longer does anything, and by default raises RebuildDeprecationWarning as an error; filter the warning to call it as a no-op. (gh pr #1130)
  • Deprecated passing gettz a relative key that refers to a file outside of every directory on TZPATH, such as "../../etc/localtime". By default this now raises dateutil.tz.DeprecatedTzKeyWarning as an error; filter the warning to keep the old behavior for now, or pass an absolute path instead. (gh pr #1130)

Documentation changes

  • Added intersphinx to the docs build and cleaned up some broken links. (gh pr #1463)

Misc

Changelog

Sourced from python-dateutil's changelog.

Version 3.0.0 (2026-10-21)

This is the last major version of dateutil that will support any version of Python older than 3.11. The next release will be the 4.x series, which will support Python 3.11 and later. We may release fixes for serious bugs in the 3.0.x series, but there are no plans for new features there.

The biggest change in this release is a rewrite of tz.tzfile, which affects nearly every user of dateutil.tz and changes the UTC offset of nonexistent times (see below). dateutil also now depends on the tzdata package, and no longer ships its own time zone database.

Data updates

  • dateutil no longer bundles a copy of the IANA time zone database. Time zone data now comes from the system (see dateutil.tz.TZPATH) or, failing that, from the new tzdata dependency, so the data version is whatever version of tzdata is installed. (gh pr #1130)

Features

  • Rewrote tz.tzfile based on a backport of the zoneinfo module's pure-Python implementation. This adds support for Version 2 and Version 3 tzfile(5) binaries, resolving issues with timestamps beyond 2038 and "slim" format binaries. (gh issues #462, #1059, gh pr #1130)
  • Added dateutil.tz.TZPATH and dateutil.tz.reset_tzpath to allow for runtime configuration of the IANA time zone data search path. These replace the mutable dateutil.tz.TZPATHS list, which has been removed. (gh pr #1130)
  • dateutil now depends on the tzdata package, which gettz consults after the search path and before the Windows registry. On Windows this means that names that are both IANA keys and Windows time zone names, such as "UTC", now return a tzfile rather than a tzwin. (gh pr #1130)

Bugfixes

  • tz.tzfile now follows PEP 495 for times that fall in a gap: with fold=0 it uses the offset from before the transition, and with fold=1 the offset from after it. Previously it always used the offset from after the transition, so for example datetime(2003, 4, 6, 2, 30, tzinfo=tz.gettz("America/New_York")) had a UTC offset of -04:00, where it now has -05:00, the same as with zoneinfo. (gh pr #1130)
  • tz.tzfile objects for fixed-offset zones, such as tz.gettz("UTC"), now return their offset, DST offset and abbreviation when utcoffset, dst and tzname are called with None, as tz.tzutc, tz.tzoffset and

... (truncated)

Commits
  • 10f317f Prepare release 3.0.0
  • fabac8d Run the tests against a wheel built once on a recent Python
  • 21b6862 Allow pickling and deepcopy of cached recurrence rules (#1600)
  • bd5fd88 Remove deprecated setuptools usage from the build
  • 962f0a5 Don't fetch an unpinned setuptools_scm via setup_requires
  • db944cf Update the Python version classifiers
  • 3b07521 Test on Python 3.14t, 3.15 and 3.15t
  • 6899421 Fix dateutil/dateutil#1157
  • bc90ab4 Use trusted publishing to upload to PyPI
  • 950abb6 fix(rrule): don't die on experimental properties
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.72.0 to 2.73.0

Release notes

Sourced from sentry-sdk's releases.

2.73.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

Changelog

Sourced from sentry-sdk's changelog.

2.73.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

Commits
  • 54160ae release: 2.73.0
  • 25d265b fix: Exclude litellm==1.107.0 from extras (#8104)
  • 60116ac fix(celery): Don't round down beat schedule intervals (#7842)
  • 68bc4dd fix(arq): Don't monitor cron jobs with unsupported schedules (#8098)
  • 1c249d8 feat(huey): Add an option to monitor Huey periodic tasks (#8052)
  • 4e19592 feat(rq): Add an option to monitor rq-scheduler jobs (#8053)
  • f8b08b3 meta: Update AGENTS.md (#8077)
  • cfce72f chore(deps): bump uv from 0.13.0 to 0.13.4 (#8095)
  • a9553c4 feat(arq): Add an option to monitor arq cron jobs (#8051)
  • 641517a fix(attributes): Handle special float values correctly (#8067)
  • Additional commits viewable in compare view

Updates yt-dlp from 2026.8.19 to 2026.10.21

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2026.10.21

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable and release tarball contain code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt

Important changes

  • Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks
    • A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.
    • If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the -U, --update, --update-to command-line options), and instead manually download and install this release's executable.
    • For more details, see the certifi security advisory

Core changes

Extractor changes

... (truncated)

Changelog

Sourced from yt-dlp's changelog.

2026.10.21

Important changes

  • Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks
    • A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.
    • If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the -U, --update, --update-to command-line options), and instead manually download and install this release's executable.
    • For more details, see the certifi security advisory

Core changes

Extractor changes

Networking changes

... (truncated)

Commits
  • 6ccd977 Release 2026.10.21
  • 8cdf4fe [build] Fix armv7l executable verification (#17886)
  • 36b92b4 [cleanup] Misc (Description has been truncated

@dependabot
chore(deps-dev): bump the python group with 9 updates
8a49e04 
Bumps the python group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.1` | `0.17.2` |
| [types-python-dateutil](https://github.com/python/typeshed) | `2.9.0.20260807` | `2.9.0.20261021` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.10.18` | `2026.10.23` |
| [django-dbbackup](https://github.com/Archmonger/django-dbbackup) | `5.3.1` | `5.4.0` |
| [python-dateutil](https://github.com/dateutil/dateutil) | `2.9.0.post0` | `3.0.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.72.0` | `2.73.0` |
| [yt-dlp](https://github.com/yt-dlp/yt-dlp) | `2026.8.19` | `2026.10.21` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.64.0` | `1.64.1` |
| [time-machine](https://github.com/adamchainz/time-machine) | `3.5.1` | `3.6.0` |


Updates `ruff` from 0.17.1 to 0.17.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.1...0.17.2)

Updates `types-python-dateutil` from 2.9.0.20260807 to 2.9.0.20261021
- [Commits](https://github.com/python/typeshed/commits)

Updates `certifi` from 2026.10.18 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.18...2026.10.23)

Updates `django-dbbackup` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/Archmonger/django-dbbackup/releases)
- [Changelog](https://github.com/Archmonger/django-dbbackup/blob/master/CHANGELOG.md)
- [Commits](Archmonger/django-dbbackup@5.3.1...5.4.0)

Updates `python-dateutil` from 2.9.0.post0 to 3.0.0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.9.0.post0...3.0.0)

Updates `sentry-sdk` from 2.72.0 to 2.73.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.72.0...2.73.0)

Updates `yt-dlp` from 2026.8.19 to 2026.10.21
- [Release notes](https://github.com/yt-dlp/yt-dlp/releases)
- [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md)
- [Commits](yt-dlp/yt-dlp@2026.08.19...2026.10.21)

Updates `playwright` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.64.0...v1.64.1)

Updates `time-machine` from 3.5.1 to 3.6.0
- [Changelog](https://github.com/adamchainz/time-machine/blob/main/docs/changelog.rst)
- [Commits](adamchainz/time-machine@3.5.1...3.6.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20261021
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: django-dbbackup
  dependency-version: 5.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: python-dateutil
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: sentry-sdk
  dependency-version: 2.73.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: yt-dlp
  dependency-version: 2026.10.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: playwright
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: time-machine
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 29, 2026 05:58
@sonarqubecloud

sonarqubecloud Bot commented Oct 29, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

vpetersson-bot
vpetersson-bot approved these changes Oct 29, 2026
View reviewed changes

@vpetersson-bot vpetersson-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

  • python-dateutil 2.9 → 3.0.0 is the only major bump. The 3.0 changes are in dateutil.tz (the tzfile rewrite, plus tzdata now coming from the tzdata package instead of a bundled copy). Anthias only uses dateutil.parser.parse(...).replace(tzinfo=None) in src/anthias_server/api/helpers.py, and the parser is unchanged. The lockfile picks up the new tzdata dependency as expected.
  • django-dbbackup 5.4.0 only changes how the PostgreSQL connector handles env and SSL options, plus a GPG trust fix. Anthias doesn't use the PostgreSQL connector or GPG. The remaining bumps are patch or minor releases.
  • Python tests, mypy, the build and CodeQL all pass.

The failing run-python-linter is not from this PR. ruff format --check flags the Python snippet in website/content/agents.md, which is already on master. #3431 fails the same way without touching Python, and #3427 fixes it.

This was referenced Oct 30, 2026
Open
Merged
@vpetersson-bot

vpetersson-bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-50f2f413a7 branch November 3, 2026 12:09
@vpetersson-bot vpetersson-bot mentioned this pull request Nov 3, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vpetersson-bot vpetersson-bot vpetersson-bot approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vpetersson-bot