Skip to content

chore(deps): Bump the python-runtime group across 1 directory with 4 updates - #119

Merged
DoRmAmMu1997 merged 2 commits into
mainfrom
dependabot/pip/python-runtime-8d72c64cb8
Aug 10, 2026
Merged

chore(deps): Bump the python-runtime group across 1 directory with 4 updates#119
DoRmAmMu1997 merged 2 commits into
mainfrom
dependabot/pip/python-runtime-8d72c64cb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-runtime group with 4 updates in the / directory: websockets, ruff, coverage and claude-agent-sdk.

Updates websockets from 17.0 to 17.0.1

Release notes

Sourced from websockets's releases.

17.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • fd3f16c Release version 17.0.1.
  • 3e4634a Remove superfluous "no cover" pragmas.
  • b93ef1e Add tests for the asyncio server.
  • fef04d8 Fix backpressure in the Trio implementation.
  • eb3600c Restore compatibility of serve_forever with uvloop.
  • 8b5e767 Simplify asyncio server implementation.
  • 94f6384 Refactor connection handling outside of Server class.
  • 3826993 Unpin sphinx.
  • 31ec002 Add Trio to requirements for building docs.
  • ff7a7fb Increase timeout for building wheels.
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

Install ruff 0.16.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"

Download ruff 0.16.2

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

Updates coverage from 7.15.2 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

  • Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits
  • 4c0e7ff docs: sample HTML for 7.15.4
  • db4cc32 docs: prep for 7.15.4
  • c33085c style: start gradual move to ruff 0.16
  • 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
  • b64d53d build: make 3.15 wheels
  • 53792ab build: show the python version for kits
  • f6b03c7 chore: make upgrade_one package=cibuildwheel
  • d9b660a chore: make upgrade
  • b128a31 docs: oops, move this entry to the correct place
  • a7a2c15 fix: escape filename urls in html report href attributes (#2227)
  • Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.128 to 0.2.132

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.132

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.224

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.132/

pip install claude-agent-sdk==0.2.132

v0.2.131

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.223

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.131/

pip install claude-agent-sdk==0.2.131

v0.2.130

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.222

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.130/

pip install claude-agent-sdk==0.2.130

v0.2.129

Breaking Changes

  • Skill name validation in ClaudeAgentOptions.skills: Skill names containing parentheses, commas, control characters, wildcards (*, :*), leading /, surrounding whitespace, or surrogate code points now raise ValueError at connect time. skills=["plugin:*"] and skills=["*"] should be replaced with skills="all" or a Skill(...) rule in allowed_tools. Names with leading whitespace or / previously built rules that could never match (silently disabling the skill) and now raise explicitly (#1145)

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.132

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.224

0.2.131

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.223

0.2.130

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.222

0.2.129

Breaking Changes

  • Skill name validation in ClaudeAgentOptions.skills: Skill names containing parentheses, commas, control characters, wildcards (*, :*), leading /, surrounding whitespace, or surrogate code points now raise ValueError at connect time. skills=["plugin:*"] and skills=["*"] should be replaced with skills="all" or a Skill(...) rule in allowed_tools. Names with leading whitespace or / previously built rules that could never match (silently disabling the skill) and now raise explicitly (#1145)

Bug Fixes

  • Validated skill names to prevent --allowedTools injection: Skill names from ClaudeAgentOptions(skills=[...]) were passed unchecked into the CLI's --allowedTools value, which splits on commas and spaces. A crafted name could inject extra permission rules. The transport now validates each name and rejects delimiter-carrying or malformed values (#1145)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.221
Commits
  • 6c754df docs: update changelog for v0.2.132
  • 7d28ac3 chore: release v0.2.132
  • b95e101 chore: bump bundled CLI version to 2.1.224
  • 71142da docs: update changelog for v0.2.131
  • c199707 chore: release v0.2.131
  • 27ef957 chore: bump bundled CLI version to 2.1.223
  • e8238a3 docs: update changelog for v0.2.130
  • 52af923 chore: release v0.2.130
  • 9d97fd1 chore: bump bundled CLI version to 2.1.222
  • 60ecf63 docs: update changelog for v0.2.129
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the python-runtime group across 1 directory with 4 …
b94df98 
…updates

Bumps the python-runtime group with 4 updates in the / directory: [websockets](https://github.com/python-websockets/websockets), [ruff](https://github.com/astral-sh/ruff), [coverage](https://github.com/coveragepy/coveragepy) and [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python).


Updates `websockets` from 17.0 to 17.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@17.0...17.0.1)

Updates `ruff` from 0.16.1 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.2)

Updates `coverage` from 7.15.2 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.2...7.15.4)

Updates `claude-agent-sdk` from 0.2.128 to 0.2.132
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.128...v0.2.132)

---
updated-dependencies:
- dependency-name: websockets
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: ruff
  dependency-version: 0.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.132
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 10, 2026
@DoRmAmMu1997 @claude
test(deps): move the guarded pins to match the python-runtime bump
e96ca76 
Dependabot changed requirements.txt and requirements-ai.txt but not the
two assertions in test_repository_policy.py that pin them, so CI failed
on `websockets==17.0` -- the guard doing exactly its job.

websockets 17.0 -> 17.0.1: the upstream tag-to-tag diff removes
Server.wrap() and reworks the asyncio server, but all of that is
SERVER-side and dhanhq.marketfeed is a client. Its whole surface is
three names -- websockets.connect, websockets.ConnectionClosed and
websockets.protocol.State.CLOSED -- and all three were confirmed present
in 17.0.1. That rules out the import-time "runner fails to start" failure
this pin guards against, but not transport behaviour, which needs a real
socket.

claude-agent-sdk 0.2.128 -> 0.2.132: SL Hunting's transport.

Operator decision: both are active paths (MARKET_DATA_SOURCE=WEBSOCKET,
SL_HUNTING_ENABLED=true) but every strategy is PAPER
(LIVE_TRADING_ENABLED=false), so validation happens on the next run
rather than ahead of the merge -- a bad feed costs a session, not money.
Revert the pin first if the feed does not tick.

ruff 0.16.1 -> 0.16.2 was verified clean against the whole repo in an
isolated venv before this commit. coverage 7.15.2 -> 7.15.4 is dev-only.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@DoRmAmMu1997
DoRmAmMu1997 self-requested a review August 10, 2026 19:48
@DoRmAmMu1997
DoRmAmMu1997 merged commit 2abd0b8 into main Aug 10, 2026
4 checks passed
@DoRmAmMu1997
DoRmAmMu1997 deleted the dependabot/pip/python-runtime-8d72c64cb8 branch August 10, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@DoRmAmMu1997 DoRmAmMu1997 Awaiting requested review from DoRmAmMu1997

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DoRmAmMu1997