Skip to content

chore(deps): bump the py-version-updates group across 1 directory with 2 updates - #158

Merged
MebinAbraham merged 1 commit into
mainfrom
dependabot/pip/py-version-updates-a4fb4c7b77
Aug 12, 2026
Merged

chore(deps): bump the py-version-updates group across 1 directory with 2 updates#158
MebinAbraham merged 1 commit into
mainfrom
dependabot/pip/py-version-updates-a4fb4c7b77

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the py-version-updates group with 2 updates in the / directory: copier and ruff.

Updates copier from 9.17.0 to 9.17.1

Release notes

Sourced from copier's releases.

v9.17.1 (2026-08-04)

Security

  • prevent code execution via Jinja finalizer by disallowing YAML tags
  • prevent code execution via Jinja sandbox escape through path and settings objects
Changelog

Sourced from copier's changelog.

v9.17.1 (2026-08-04)

Security

  • prevent code execution via Jinja finalizer by disallowing YAML tags
  • prevent code execution via Jinja sandbox escape through path and settings objects
Commits
  • e8c85ce bump: version 9.17.0 → 9.17.1
  • 3f1c1a6 fix: prevent code execution via Jinja finalizer by disallowing YAML tags
  • a5e9f3f fix: prevent code execution via Jinja sandbox escape through path and setting...
  • cd0d3aa build(deps): bump pymdown-extensions from 10.21.3 to 11.0
  • See full diff in compare view

Updates ruff from 0.16.0 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 12, 2026
@MebinAbraham

Copy link
Copy Markdown
Collaborator

@dependabot rebase

…h 2 updates
Bumps the py-version-updates group with 2 updates in the / directory: [copier](https://github.com/copier-org/copier) and [ruff](https://github.com/astral-sh/ruff).
Updates `copier` from 9.17.0 to 9.17.1
- [Release notes](https://github.com/copier-org/copier/releases)
- [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md)
- [Commits](copier-org/copier@v9.17.0...v9.17.1)
Updates `ruff` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.0...0.16.1)
---
updated-dependencies:
- dependency-name: copier
dependency-version: 9.17.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: py-version-updates
- dependency-name: ruff
dependency-version: 0.16.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: py-version-updates
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/pip/py-version-updates-a4fb4c7b77 branch from 94b99a8 to e8c6e36CompareAugust 12, 2026 06:27
@MebinAbraham
MebinAbraham merged commit 39c3854 into mainAug 12, 2026
5 checks passed
@MebinAbraham
MebinAbraham deleted the dependabot/pip/py-version-updates-a4fb4c7b77 branch August 12, 2026 06:42
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filepythonPull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@MebinAbraham