chore(deps): bump the python-patch group with 7 updates by dependabot[bot] · Pull Request #188 · TexasCoding/project-x-py

dependabot · 2026-11-09T20:43:32Z

Bumps the python-patch group with 7 updates:

Package	From	To
pydantic	`2.14.2`	`2.14.3`
cachetools	`7.2.8`	`7.3.0`
ruff	`0.17.3`	`0.17.4`
types-pytz	`2026.5.0.20261006`	`2026.6.0.20261031`
py-spy	`0.4.2`	`0.4.3`
semgrep	`1.183.0`	`1.184.0`
diff-cover	`11.0.0`	`11.0.1`

Updates pydantic from 2.14.2 to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

Build wheels for GraalPy 3.13 by @msimacek in #14136.

The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

Improve schema generation for fixed type handlers by @alexmojaki in #14130

Skip general schema dispatch for builtin scalars by @alexmojaki in #14141

Skip annotation handler setup when annotations are empty by @alexmojaki in #14149

Fix quadratic serialization time with per-index include/exclude on sequences by @Viicos in #14160

Avoid type lookups when checking for None during serialization by @Viicos in #14167

Improve performance of model serialization by @Viicos in #14171

Improve performance of dict serialization by @Viicos in #14172

Improve performance of type inference during serialization by @Viicos in #14173

Avoid cloning the field name when using the default value during validation by @Viicos in #14175

Do not evaluate model_config annotations by @Viicos in #14195

Avoid slow runtime Protocol check when expanding GroupedMetadata annotations by @Viicos in #14196

Use a lightweight @contextmanager implementation internally by @Viicos in #14199

Fixes

Fix various issues about GC tracking in pydantic-core by @Viicos in #13819

Include null in serialization JSON Schema for unless-none field serializers by @Kropiunig in #13848

Fix RecursionError when copying or unpickling models with defer_build by @Viicos in #14115

Remove dead default_factory check in unsupported Field() attribute by @owtaylor in #14129

Disallow non string extra keys during validation by @Viicos in #14135

Fix deeply nested data being reported as a cyclic reference by @Viicos in #14164

New Contributors

@owtaylor made their first contribution in #14129

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

Handle TypeError gracefully during docstring extraction by @Viicos in #13874

Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @Viicos in #13891

Don't apply ser_json_timedelta to all datetime types in serialization inference by @Viicos in #13892

Encode JSON Schema defaults with a consistent configuration by @Viicos in #13893

Propagate init and kw_only=False from Field() to stdlib dataclass fields by @Viicos in #13898

Respect propagated extra config in the JSON Schema of stdlib dataclasses by @Viicos in #13899

Handle OS errors during ZoneInfo validation by @Viicos in #13912

Handle exceptions during Decimal validation by @Viicos in #13940

Rebuild incomplete types during serialization inference by @Viicos in #13922

Reject large exponents in Fraction validation by @Viicos in #13944

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945

New Contributors

@saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

ea492e0 Bump pydantic-core to v2.50.4
4f4a33f Prepare release v2.14.3
dca067b Benchmark TypedDict schema generation across builds
a2d1f6c Skip annotation handler setup when annotations are empty
3ae0a40 Construct builtin scalar union schemas directly
358d36f Skip general schema dispatch for builtin scalars
3cc701a Improve schema generation for fixed type handlers
762db7e Remove redundant None check in union schema generation
c214986 Bump pytest-codspeed to v5.0.4
038ee97 Bump typing-inspection to v0.4.5
Additional commits viewable in compare view

Updates cachetools from 7.2.8 to 7.3.0

Changelog

Sourced from cachetools's changelog.

v7.3.0 (2026-11-05)

Use OrderedDict for defined and faster LFUCache eviction.

Various unit test improvements.

Minor type stub improvements.

Minor documentation improvements.

Commits

7f6228e Update copilot instructions and review.
50c3e71 Release v7.3.0.
0c5e094 Drop "master_doc" from Sphinx config.
eefc753 Minor type stub improvements.
3b38fb5 Various test improvements.
e963102 Fix #461: Use OrderedDict for defined and faster LFUCache eviction.
825bf66 Tests for #451: Forward self keyword arguments in cached methods (#458)
f314dfa Bump actions/setup-python (#453)
8c953ab Fix #451: Forward self keyword arguments in cached methods
ba26e56 Update bug report template.
See full diff in compare view

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

[flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)

[security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

Accept a bare raise before a semicolon (#29761)

Allow match identifiers after a semicolon (#29760)

Fix panic on BOM-prefixed files in diagnostic renderer (#30017)

[flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

Coalesce source slices when formatting attributes (#29841)

Collect return statements with a statement-only visitor (#29911)

[pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)

Format node fields directly when comment handling is unnecessary (#29853)

Reduce formatter source-slice overhead (#29855)

Reuse a callee's qualified name across lint rules (#29916)

Skip invalid string character checks when the source contains none (#29883)

Use a Bloom filter for formatter comment lookups (#29852)

Use a concrete buffer for ordinary writes (#29819)

CLI

Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)

Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

Correct the documented version and src defaults for ruff-action (#29880)

[flake8-bugbear] Make B014 example error out-of-the-box (#29941)

[flake8-no-pep420] Document preview behavior (INP001) (#29764)

[isort] Expand I001 documentation (#29843)

Other changes

[syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

[flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)

[security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

Accept a bare raise before a semicolon (#29761)

Allow match identifiers after a semicolon (#29760)

Fix panic on BOM-prefixed files in diagnostic renderer (#30017)

[flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

Coalesce source slices when formatting attributes (#29841)

Collect return statements with a statement-only visitor (#29911)

[pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)

Format node fields directly when comment handling is unnecessary (#29853)

Reduce formatter source-slice overhead (#29855)

Reuse a callee's qualified name across lint rules (#29916)

Skip invalid string character checks when the source contains none (#29883)

Use a Bloom filter for formatter comment lookups (#29852)

Use a concrete buffer for ordinary writes (#29819)

CLI

Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)

Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

Correct the documented version and src defaults for ruff-action (#29880)

[flake8-bugbear] Make B014 example error out-of-the-box (#29941)

[flake8-no-pep420] Document preview behavior (INP001) (#29764)

[isort] Expand I001 documentation (#29843)

Other changes

[syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits

05cdc36 Bump version to 0.17.4 (#30073)
c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
926ccc8 [ty] Handle output errors when generating shell completions (#29997)
c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
c9150f0 Add project walltime benchmarks for Ruff (#30061)
64989ec [ty] Report invalid module globs once per override pattern (#30031)
367a563 [ty] Fix conditional type and tuple annotations (#29987)
Additional commits viewable in compare view

Updates types-pytz from 2026.5.0.20261006 to 2026.6.0.20261031

Commits

See full diff in compare view

Updates py-spy from 0.4.2 to 0.4.3

Release notes

Sourced from py-spy's releases.

v0.4.3

Changes

🚀 Features

Python 3.15 support @benfred (#878)

Add Windows ARM64 wheels @ndabas (#867)

Format function names with qualname for Python 3.11+ @jake-kramer (#825)

Classify 3.12+ frames by owner and mask stackref tag bits @korniltsev-grafanista (#884)

Use _Py_DebugOffsets to get imports modules address @benfred (#877)

Skip thread-name lookup for outputs that do not use names @jonashaag (#862)

Gate CLI dependencies behind optional cli feature flag @korniltsev-grafanista (#848)

Add thread name lookup tests, lookup again after 1 second if not matched at first @krassowski (#880)

🐛 Bug Fixes

Fix getting thread names and copying PyLongObject on 32-bit arm @benfred (#888)

Minor fixes for python 3.15 @benfred (#886)

Fix line number at compact line table entry boundaries @korniltsev-grafanista (#883)

Fix excessive thread name lookups @tdryer (#790)

fix stack trace fetching on 32-bit cpython 3.14 @HiFiPhile (#856)

fix: don't read target-process bytes as bool @benfred (#876)

Fix image base calculation for PyInstaller MacOS bundles @trisiak (#858)

fix: bound thread and frame walk iterations, not pushed results @korniltsev-grafanista (#874)

fix: decode UCS-4 strings without char transmute UB @r3wretrhy (#875)

fix: avoid colons in default recording filenames @ryanchou1994 (#869)

fix: ignore ECHILD from Child::try_wait() when child was already reaped @sendaoYan (#871)

fix: get_mach_cpu_type do not mutate imutable variable with raw pointers @korniltsev-grafanista (#849)

🧰 Maintenance

Update GHA to use python 3.14 by default @benfred (#901)

Drop unused pull-requests: write from build workflow @korniltsev-grafanista (#893)

Update remoteprocess dependency to 0.5.5 @benfred (#895)

Reduce GHA ci matrix size @benfred (#889)

update remoteprocess/proc-maps dependencies @benfred (#887)

Bump the github-actions group across 1 directory with 2 updates @dependabot[bot] (#864)

Commits

77862e3 Bump version: 0.4.2 → 0.4.3
ed39324 Update GHA to use python 3.14 by default (#901)
353afa6 Update tested python versions (#896)
2aacce5 Drop unused pull-requests: write from build workflow (#893)
ed9ad9a Update tested python versions (#894)
346300a Update remoteprocess dependency to 0.5.5 (#895)
b9b7884 Fix getting thread names and copying PyLongObject on 32-bit arm (#888)
aca7c50 Reduce GHA ci matrix size (#889)
b16d802 update remoteprocess/proc-maps dependencies (#887)
d48b2a7 Add thread name lookup tests, lookup again after 1 second if not matched at f...
Additional commits viewable in compare view

Updates semgrep from 1.183.0 to 1.184.0

Release notes

Sourced from semgrep's releases.

Release v1.184.0

1.184.0 - 2026-11-05

### Added

PHP: Improved virtual call resolution for basic trait composition. (CODE-9176)

Supply Chain: a requirements.txt dependency declared as a version range (litellm>=1.10) or with no version (flask) now produces a finding for every advisory whose affected versions overlap the declared range, in both the Python and native resolvers. Such a finding has no single installed version to confirm, so it needs review. A range line next to a pinned copy of the same package produces no finding of its own, since the pinned copy names the installed version. (SC-4243)

Set SEMGREP_LOG_JSON_FILE to emit structured execution events with scan metadata alongside existing text output. (SMS-3670)

### Changed

Scans are slightly faster. The dataflow analyses build the name of each variable with a plain string join, and no longer with Printf and Format. On 6 open-source repos, the scan time was a median of 3% lower, with identical findings. (dataflow-variable-keys)

go grammar update (v0.25.0):

Go source parsing now supports generic type aliases, preserving type parameters, constraints, and alias semantics. Existing alias patterns can match these declarations; spelling generic parameter lists in rule patterns remains unsupported.

Go correctly parses unnamed map parameters and results in mixed signatures such as ([]string, int, map[int]int, error), allowing function patterns to match those signatures.

Go correctly represents chained indexing such as table[key][next] as nested index expressions, restoring matches for nested-index patterns.

(go-v0.25.0)

### Fixed

Semgrep no longer logs credentials embedded in a proxy URL (for example HTTPS_PROXY=http://user:password@proxy:8080) when it reports the configured proxy settings. (proxy-log-redact-userinfo)

Logs and traces no longer include snippets of the scanned source code when a file fails to parse. Parsing exceptions now report the file, line, column, and the length of the unexpected text instead. Dependency resolution errors for malformed lockfiles are reported the same way. (redact-source-in-telemetry)

pro: Reduced peak memory for large projects (CODE-10136)

Supply Chain: the yarn v1 lockfile parser no longer reports a package named "dependencies" with an empty version when a blank line precedes the dependencies block of an entry, and it now keeps that entry's dependency edges. Entries without a version line are reported as parser errors instead of dependencies with an empty version. (SC-4214)

Gradle module attribution now works for modules whose logical project name does not match their directory (a renamed include or a remapped projectDir in settings.gradle). The resolver's init script reports each project's actual build file, and dependencies are attributed to that file instead of falling back to the root manifest. (SC-4327)

semgrep ci --no-suppress-errors with --allow-local-builds: when dependency resolution fails and the scan exits with code 2, the reason is now also in the errors of the JSON output (one entry per resolver error or lockfile parse error of each failed subproject, or a generic entry if none was reported; resolver errors include the failed command and the end of its output, with common credential shapes such as URL credentials and Authorization headers redacted), not only in the log. Previously the JSON had no error, so pipelines that read it could not tell why the scan failed. (SC-4348)

Changelog

Sourced from semgrep's changelog.

1.184.0 - 2026-11-05

### Added

PHP: Improved virtual call resolution for basic trait composition. (CODE-9176)

Supply Chain: a requirements.txt dependency declared as a version range (litellm>=1.10) or with no version (flask) now produces a finding for every advisory whose affected versions overlap the declared range, in both the Python and native resolvers. Such a finding has no single installed version to confirm, so it needs review. A range line next to a pinned copy of the same package produces no finding of its own, since the pinned copy names the installed version. (SC-4243)

Set SEMGREP_LOG_JSON_FILE to emit structured execution events with scan metadata alongside existing text output. (SMS-3670)

### Changed

Scans are slightly faster. The dataflow analyses build the name of each variable with a plain string join, and no longer with Printf and Format. On 6 open-source repos, the scan time was a median of 3% lower, with identical findings. (dataflow-variable-keys)

go grammar update (v0.25.0):

Go source parsing now supports generic type aliases, preserving type parameters, constraints, and alias semantics. Existing alias patterns can match these declarations; spelling generic parameter lists in rule patterns remains unsupported.

Go correctly parses unnamed map parameters and results in mixed signatures such as ([]string, int, map[int]int, error), allowing function patterns to match those signatures.

Go correctly represents chained indexing such as table[key][next] as nested index expressions, restoring matches for nested-index patterns.

(go-v0.25.0)

### Fixed

Semgrep no longer logs credentials embedded in a proxy URL (for example HTTPS_PROXY=http://user:password@proxy:8080) when it reports the configured proxy settings. (proxy-log-redact-userinfo)

Logs and traces no longer include snippets of the scanned source code when a file fails to parse. Parsing exceptions now report the file, line, column, and the length of the unexpected text instead. Dependency resolution errors for malformed lockfiles are reported the same way. (redact-source-in-telemetry)

pro: Reduced peak memory for large projects (CODE-10136)

Supply Chain: the yarn v1 lockfile parser no longer reports a package named "dependencies" with an empty version when a blank line precedes the dependencies block of an entry, and it now keeps that entry's dependency edges. Entries without a version line are reported as parser errors instead of dependencies with an empty version. (SC-4214)

Gradle module attribution now works for modules whose logical project name does not match their directory (a renamed include or a remapped projectDir in settings.gradle). The resolver's init script reports each project's actual build file, and dependencies are attributed to that file instead of falling back to the root manifest. (SC-4327)

semgrep ci --no-suppress-errors with --allow-local-builds: when dependency resolution fails and the scan exits with code 2, the reason is now also in the errors of the JSON output (one entry per resolver error or lockfile parse error of each failed subproject, or a generic entry if none was reported; resolver errors include the failed command and the end of its output, with common credential shapes such as URL credentials and Authorization headers redacted), not only in the log. Previously the JSON had no error, so pipelines that read it could not tell why the scan failed. (SC-4348)

Commits

ac37d1f chore: release 1.184.0
4efb491 fix(sca): Stop the yarn v1 parser emitting header lines as packages (semgrep/...
2792975 fix(sca): report dependency resolution failures in the JSON output (semgrep/s...
6be6128 fix(dist): skip SCA rules when dumping rule partitions (semgrep/semgrep-propr...
5d363c7semgrep/semgrep-proprietary#7448
47d373d feat(sca): Produce findings for unpinned requirements.txt (semgrep/semgrep-pr...
8769aa4semgrep/semgrep-proprietary#7457
98b4cba fix(pro): unmarshal one SAST at a time when building the interfile dependency...
09e7207 fix: include generated tree-sitter headers in fixtures (semgrep/semgrep-propr...
e4e0563semgrep/semgrep-proprietary#7447
Additional commits viewable in compare view

Updates diff-cover from 11.0.0 to 11.0.1

Release notes

Sourced from diff-cover's releases.

Version 11.0.1

What's Changed

Decode Git-quoted filenames before matching coverage paths by @mayankdhingra02 in Bachmann1234/diff_cover#654

Dependency Bumps

Bump chardet from 7.6.0 to 7.7.0 by @dependabot[bot] in Bachmann1234/diff_cover#653

Bump pylint from 4.0.9 to 4.1.3 by @dependabot[bot] in Bachmann1234/diff_cover#652

Bump pluggy from 1.6.0 to 1.7.0 by @dependabot[bot] in Bachmann1234/diff_cover#651

Bump pytest-mock from 3.16.0 to 3.17.0 by @dependabot[bot] in Bachmann1234/diff_cover#650

Bump flake8 from 7.4.1 to 7.5.0 by @dependabot[bot] in Bachmann1234/diff_cover#649

Bump github/codeql-action from 4.38.2 to 4.39.1 by @dependabot[bot] in Bachmann1234/diff_cover#648

Bump astral-sh/setup-uv from 10.2.0 to 10.3.3 by @dependabot[bot] in Bachmann1234/diff_cover#647

New Contributors

@mayankdhingra02 made their first contribution in Bachmann1234/diff_cover#654

Full Changelog: Bachmann1234/diff_cover@v11.0.0...v11.0.1

Changelog

Sourced from diff-cover's changelog.

11/3/2026 v11.0.1

Count changed and untracked lines in Git-quoted UTF-8 filenames in coverage reports. PR 654

10/22/2026 v11.0.0

Drop python 3.10 as its EOL and add python 3.15 support PR 645

Fix exclude patterns that name a directory (e.g. subdir/*) silently matching nothing; patterns now also match the repo-relative path PR 636 thanks @Eljees

Fix --show-uncovered terminal snippets always being numbered from line 1 PR 637 thanks @Eljees

Split quoted --options values with shlex while keeping backslashes PR 646 thanks @Don-Yin

09/21/2026 v10.6.0

Add minimum-change flag to allow diff cover to pass in in small prs PR 628 thanks @philipp-horstenkamp

Replace poetry with uv PR 631

Unify project formatting/linting To ruff PR 630 thanks @philipp-horstenkamp

8/16/2026 v10.5.1

Improve performance by indexing clover files PR 618 Thanks @Eljees

Fixes unclear error when git is not on path PR 620 Thanks @Eljees

8/08/2026 v10.5.0

Support PHPUnit clover reports PR 617 Thanks @Eljees

8/06/2026 v10.4.2

Honor format option from config file- PR 612 Thanks @Sanjays2402

Accept reports/options in diff_cover_report_quality hookspec- PR 613 Thanks @Sanjays2402

7/23/2026 v10.4.1

Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 PR 611 (bachmann1234)

7/21/2026 v10.4.0

Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @mofr

05/30/2026 v10.3.0

Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @duxiaocheng

Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

... (truncated)

Commits

191a48f Version 11.0.1
2c08ed0 Decode Git-quoted filenames before matching coverage paths (#654)
fd2430b Bump astral-sh/setup-uv from 10.2.0 to 10.3.3 (#647)
f154bb6 Bump github/codeql-action from 4.38.2 to 4.39.1 (#648)
4348aa0 Bump flake8 from 7.4.1 to 7.5.0 (#649)
f5702c6 Bump pytest-mock from 3.16.0 to 3.17.0 (#650)
66e1dfb Bump pluggy from 1.6.0 to 1.7.0 (#651)
d13bcc6 Bump pylint from 4.0.9 to 4.1.3 (#652)
a27a11b Bump chardet from 7.6.0 to 7.7.0 (#653)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `2.14.2` | `2.14.3` | | [cachetools](https://github.com/tkem/cachetools) | `7.2.8` | `7.3.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.17.3` | `0.17.4` | | [types-pytz](https://github.com/python/typeshed) | `2026.5.0.20261006` | `2026.6.0.20261031` | | [py-spy](https://github.com/benfred/py-spy) | `0.4.2` | `0.4.3` | | [semgrep](https://github.com/semgrep/semgrep) | `1.183.0` | `1.184.0` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `11.0.0` | `11.0.1` | Updates `pydantic` from 2.14.2 to 2.14.3 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.14.2...v2.14.3) Updates `cachetools` from 7.2.8 to 7.3.0 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.2.8...v7.3.0) Updates `ruff` from 0.17.3 to 0.17.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.17.3...0.17.4) Updates `types-pytz` from 2026.5.0.20261006 to 2026.6.0.20261031 - [Commits](https://github.com/python/typeshed/commits) Updates `py-spy` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/benfred/py-spy/releases) - [Changelog](https://github.com/benfred/py-spy/blob/master/CHANGELOG.md) - [Commits](benfred/py-spy@v0.4.2...v0.4.3) Updates `semgrep` from 1.183.0 to 1.184.0 - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/v1.184.0/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.183.0...v1.184.0) Updates `diff-cover` from 11.0.0 to 11.0.1 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v11.0.0...v11.0.1) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: cachetools dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: ruff dependency-version: 0.17.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: types-pytz dependency-version: 2026.6.0.20261031 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: py-spy dependency-version: 0.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: semgrep dependency-version: 1.184.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: diff-cover dependency-version: 11.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 9, 2026

TexasCoding merged commit 70b3e70 into main Nov 10, 2026
5 checks passed

Navigation Menu

Repository navigation

chore(deps): bump the python-patch group with 7 updates - #188

chore(deps): bump the python-patch group with 7 updates#188
TexasCoding merged 1 commit into
mainfrom
dependabot/uv/python-patch-8935d76e48

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

Performance

Fixes

New Contributors

v2.14.0 (2026-10-08)

What's Changed

New Features

Changes

Fixes

New Contributors

v7.3.0 (2026-11-05)

0.17.4

Release Notes

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

0.17.4

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

v0.4.3

Changes

🚀 Features

🐛 Bug Fixes

🧰 Maintenance

Release v1.184.0

1.184.0 - 2026-11-05

### Added

### Changed

### Fixed

1.184.0 - 2026-11-05

### Added

### Changed

### Fixed

Version 11.0.1

What's Changed

Dependency Bumps

New Contributors

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant