Skip to content

Bump the "dependencies" group with 2 updates across multiple ecosystems - #274

Merged
kattni merged 1 commit into
mainfrom
dependabot/dependencies-4873f0d54c
Sep 14, 2026
Merged

Bump the "dependencies" group with 2 updates across multiple ecosystems#274
kattni merged 1 commit into
mainfrom
dependabot/dependencies-4873f0d54c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates:

Package From To
mkdocstrings-python 2.0.7 2.0.8
ruff 0.16.5 0.16.6
setuptools-scm 10.2.1 10.2.3
translate-toolkit 3.19.18 3.19.19
wlc 2.1.1 2.2.0

Updates mkdocstrings-python from 2.0.7 to 2.0.8

Release notes

Sourced from mkdocstrings-python's releases.

2.0.8

2.0.8 - 2026-08-31

Compare with 2.0.7

Performance Improvements

  • Make template existence test (for locale templates) faster (c0424f2 by Timothée Mazzucotelli).
Changelog

Sourced from mkdocstrings-python's changelog.

2.0.8 - 2026-08-31

Compare with 2.0.7

Performance Improvements

  • Make template existence test (for locale templates) faster (c0424f2 by Timothée Mazzucotelli).
Commits
  • 8125b0d chore: Prepare release 2.0.8
  • 5054240 chore: Be a bit more minijinja compatible
  • c0424f2 perf: Make template existence test (for locale templates) faster
  • See full diff in compare view

Updates ruff from 0.16.5 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

Commits

Updates setuptools-scm from 10.2.1 to 10.2.3

Release notes

Sourced from setuptools-scm's releases.

setuptools-scm v10.2.3

Miscellaneous

  • Do not run the xmlsec download regression test on Python 3.8, where no lxml wheel exists and --no-build-isolation leaves pip without a build toolchain for the lxml sdist. (#1516)

setuptools-scm v10.2.2

Miscellaneous

  • The pkginfo workdir discovery entry point moved to vcs-versioning; vcs-versioning>=2.3.2 is now required (the workspace pin carries a .dev0 suffix so in-tree builds resolve, matching the existing convention). setuptools_scm._integration._discover.discover_pkginfo remains as a re-export. (#1507)
  • Stop shipping a per-package uv.lock in the sdist. It could not be generated correctly whenever setuptools-scm required an unreleased vcs-versioning, which broke the release proposal workflow. (#1509)
Commits
  • 886267d Merge pull request #1517 from pypa/release/main
  • f57803d Prepare release: setuptools-scm v10.2.3, vcs-versioning v2.3.4
  • 9a4b179 Merge pull request #1516 from RonnyPfannschmidt/fix-1512-vcs-versioning-stand...
  • 2f8d5a3 test: move the egg-info vs PKG-INFO priority test to setuptools-scm
  • ae95190 test: do not run the xmlsec download regression test on python 3.8
  • 2822b07 test: make the vcs-versioning testsuite independent of setuptools-scm
  • 3f6f8d7 Merge pull request #1514 from pypa/release/main
  • a4e3ca2 Prepare release: vcs-versioning v2.3.3
  • 5a4539f Merge pull request #1513 from dylanpulver/semver-schemes-keep-epoch
  • 07cf0e9 Add changelog fragment
  • Additional commits viewable in compare view

Updates translate-toolkit from 3.19.18 to 3.19.19

Release notes

Sourced from translate-toolkit's releases.

3.19.19

Released on 1 September 2026

This release contains improvements and bug fixes.

Changes

Formats and Converters

  • Apple Stringsdict
    • Keep direct single-variable format references with their plural units
  • Qt QM
    • Reject malformed messages with invalid lengths
  • XML-based formats
    • Honor inherited xml:space attributes to preserve significant whitespace

Other

  • Correct right-to-left detection for script-specific and previously missing language codes
  • Report missing stopword files correctly in poterminology
  • Improve type annotations for translation checks and JSON storage
  • Improve the document translation guide
  • Update development tooling and CI dependencies

Contributors

This release was made possible by the following contributors:

Dylan Pulver, Gersona, Kit Cox, Michal Čihař, Volker Braun

Commits
  • 0bd72d0 chore: release 3.19.19
  • 4f76d78 docs: Improve wording in document translation use case guide (#6531)
  • b5f6e8f fix(lang): correct RTL detection for script-specific and missing codes
  • 3d51a9b fix(xml): honor inherited xml:space
  • 717aa0c chore(deps): update dependency ty to v0.0.77
  • 3f6d614 chore(deps): update dependency ty to v0.0.76
  • cc403b4 extend annotation with DumpArgsType.cls (#6548)
  • fda1d3b chore(deps): update dependency prek to v0.5.0
  • 746c87d chore(deps): update dependency pylint to v4.0.8
  • 7127d5a chore(deps): update pre-commit hook crate-ci/typos to v1.50.0
  • Additional commits viewable in compare view

Updates wlc from 2.1.1 to 2.2.0

Release notes

Sourced from wlc's releases.

2.2.0

What's Changed

Changes and improvements

Dependency updates

... (truncated)

Changelog

Sourced from wlc's changelog.

2.2.0

  • Released on 1st September 2026.
  • Hardened authentication by disabling automatic netrc credentials, rejecting credentials embedded in URLs, and redacting credentials from HTTP failure logs.
  • Scoped insecure HTTP and TLS exceptions to explicitly trusted origins and prevented project configuration from enabling them.
  • Hardened downloads against symbolic links, non-regular files, and destination replacement races.
  • Escaped control characters in structured CSV fields and improved handling of non-text output values.
  • Added a threat model and clarified configuration discovery and precedence.
  • Updated development dependencies, CI actions, and Docker base images.
Commits
  • f189c8e chore: release 2.2.0
  • ef9bfc1 docs: simplify readme
  • 466659f docs: add threat model
  • 1e63ad9 test: exercise raw controls in structured CSV
  • 9e8d0ba fix: escape structured CSV cells
  • 204ceb7 fix: redact credentials from request failure logs
  • 7495fd5 fix: reject credentials embedded in URLs
  • 506ffbd chore(deps): update docker/setup-qemu-action action to v4.3.0
  • 172ed5e fix: gracefully handle non-text values
  • ed4ab0b docs: add repository contributor guidelines
  • Additional commits viewable in compare view

Bumps the dependencies group with 3 updates: https://github.com/astral-sh/ruff-pre-commit, https://github.com/rvben/rumdl-pre-commit and https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/astral-sh/ruff-pre-commit from v0.16.5 to 0.16.6

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

Commits

Updates https://github.com/rvben/rumdl-pre-commit from v0.2.62 to 0.2.67

Release notes

Sourced from https://github.com/rvben/rumdl-pre-commit's releases.

v0.2.67

See: https://github.com/rvben/rumdl/releases/tag/v0.2.67

v0.2.66

See: https://github.com/rvben/rumdl/releases/tag/v0.2.66

v0.2.65

See: https://github.com/rvben/rumdl/releases/tag/v0.2.65

v0.2.64

See: https://github.com/rvben/rumdl/releases/tag/v0.2.64

v0.2.63

See: https://github.com/rvben/rumdl/releases/tag/v0.2.63

Commits

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.29.0 to 1.30.0

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.30.0

Sponsorship is appreciated!

New Features 🌈🔗

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would reject a .pre-commit-config.yml input containing a prek-specific builtin section (#2259)

  • Fixed a bug where the unpinned-uses audit would fail to honor ignore comments within the same step scope (#2289)

  • Fixed a bug where zizmor would reject a dependabot.yml containing a goproxy-server registry definition (#2300)

  • Fixed a bug where zizmor would reject pre-commit configurations containing prek-specific glob patterns in files or exclude (#2308)

... (truncated)

Commits
  • cef8b83 Mirror: 1.30.0
  • 2e74fc1 Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group (#61)
  • 7bb2343 Bump zizmorcore/zizmor-action in the github-actions group (#58)
  • 950796f chore: replace pre-commit checks with zizmor-action (#57)
  • a5dde09 chore: freeze pin commit hooks, bump usage of own hook (#56)
  • a21d6cd Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 in the github-actions group (#55)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [mkdocstrings-python](https://github.com/mkdocstrings/python) | `2.0.7` | `2.0.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.6` |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `10.2.1` | `10.2.3` |
| [translate-toolkit](https://github.com/translate/translate) | `3.19.18` | `3.19.19` |
| [wlc](https://github.com/WeblateOrg/wlc) | `2.1.1` | `2.2.0` |


Updates `mkdocstrings-python` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/mkdocstrings/python/releases)
- [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/python@2.0.7...2.0.8)

Updates `ruff` from 0.16.5 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.5...0.16.6)

Updates `setuptools-scm` from 10.2.1 to 10.2.3
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@setuptools-scm-v10.2.1...setuptools-scm-v10.2.3)

Updates `translate-toolkit` from 3.19.18 to 3.19.19
- [Release notes](https://github.com/translate/translate/releases)
- [Changelog](https://github.com/translate/translate/blob/master/docs/history.rst)
- [Commits](translate/translate@3.19.18...3.19.19)

Updates `wlc` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/WeblateOrg/wlc/releases)
- [Changelog](https://github.com/WeblateOrg/wlc/blob/main/CHANGES.md)
- [Commits](WeblateOrg/wlc@2.1.1...2.2.0)
Bump the dependencies group with 3 updates

Bumps the dependencies group with 3 updates: [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit), [https://github.com/rvben/rumdl-pre-commit](https://github.com/rvben/rumdl-pre-commit) and [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit).


Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.16.5 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.16.5...v0.16.6)

Updates `https://github.com/rvben/rumdl-pre-commit` from v0.2.62 to 0.2.67
- [Release notes](https://github.com/rvben/rumdl-pre-commit/releases)
- [Commits](rvben/rumdl-pre-commit@v0.2.62...v0.2.67)

Updates `https://github.com/zizmorcore/zizmor-pre-commit` from v1.29.0 to 1.30.0
- [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.29.0...v1.30.0)

---
updated-dependencies:
- dependency-name: mkdocstrings-python
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: setuptools-scm
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: translate-toolkit
  dependency-version: 3.19.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wlc
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.6
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: https://github.com/rvben/rumdl-pre-commit
  dependency-version: 0.2.67
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: https://github.com/zizmorcore/zizmor-pre-commit
  dependency-version: 1.30.0
  dependency-type: direct:production
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 13, 2026
@kattni
kattni merged commit 2d788de into main Sep 14, 2026
5 checks passed
@kattni
kattni deleted the dependabot/dependencies-4873f0d54c branch September 14, 2026 01:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant