Skip to content

Bump the pip-security-updates group across 3 directories with 2 updates - #70660

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/task-sdk/pip-security-updates-c239d66960
Closed

Bump the pip-security-updates group across 3 directories with 2 updates#70660
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/task-sdk/pip-security-updates-c239d66960

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 29, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-security-updates group with 1 update in the /airflow-core directory: gitpython.
Bumps the pip-security-updates group with 1 update in the /airflow-ctl directory: datamodel-code-generator.
Bumps the pip-security-updates group with 1 update in the /task-sdk directory: datamodel-code-generator.

Updates gitpython from 3.1.52 to 3.1.54

Release notes

Sourced from gitpython's releases.

3.1.54 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

Commits
  • e59d9ba prepare next release
  • a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
  • 1d51b89 fix: guard diff output options
  • ffcb535 fix: reject unsafe clone templates
  • e8d0fbf fix: validate split short-option values
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • 1ed1b92 fix: validate config section delimiters
  • 354eb2f Merge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks
  • 9bc287a Address review feedback about hook resolution
  • Additional commits viewable in compare view

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Changelog

Sourced from datamodel-code-generator's changelog.

0.64.0 - 2026-06-14

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Commits

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Changelog

Sourced from datamodel-code-generator's changelog.

0.64.0 - 2026-06-14

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Commits

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 29, 2026
@potiukpotiuk mentioned this pull request Jul 29, 2026
Merged
1 task
@dependabot
Bump the pip-security-updates group across 3 directories with 2 updates
91ea27b
Bumps the pip-security-updates group with 1 update in the /airflow-core directory: [gitpython](https://github.com/gitpython-developers/GitPython).
Bumps the pip-security-updates group with 1 update in the /airflow-ctl directory: [datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator).
Bumps the pip-security-updates group with 1 update in the /task-sdk directory: [datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator).
Updates `gitpython` from 3.1.52 to 3.1.54
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.52...3.1.54)
Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)
Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)
Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)
Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)
---
updated-dependencies:
- dependency-name: datamodel-code-generator
dependency-version: 0.64.0
dependency-type: direct:development
dependency-group: pip-security-updates
- dependency-name: datamodel-code-generator
dependency-version: 0.64.0
dependency-type: direct:development
dependency-group: pip-security-updates
- dependency-name: gitpython
dependency-version: 3.1.54
dependency-type: direct:development
dependency-group: pip-security-updates
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/pip/task-sdk/pip-security-updates-c239d66960 branch from 40aebd6 to 91ea27bCompareJuly 29, 2026 16:54
@dependabot@github

dependabotBot commented on behalf of githubJul 30, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabotdependabotBot closed this Jul 30, 2026
@dependabot
dependabotBot deleted the dependabot/pip/task-sdk/pip-security-updates-c239d66960 branch July 30, 2026 06:32
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ashbashbAwaiting requested review from ashbashb is a code owner
@kaxilkaxilAwaiting requested review from kaxilkaxil is a code owner
@amoghrajeshamoghrajeshAwaiting requested review from amoghrajeshamoghrajesh is a code owner
@bugraoz93bugraoz93Awaiting requested review from bugraoz93bugraoz93 is a code owner
@potiukpotiukAwaiting requested review from potiukpotiuk is a code owner
@dheerajturagadheerajturagaAwaiting requested review from dheerajturagadheerajturaga is a code owner
@henry3260henry3260Awaiting requested review from henry3260henry3260 is a code owner

Assignees

No one assigned

Labels

area:airflow-ctlarea:task-sdkbackport-to-airflow-ctl/v0-1-testdependenciesPull requests that update a dependency filepythonPull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants