Skip to content

chore(deps): update dependency click to v8.5.1 - #587

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/click-8.x
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/click-8.x

Conversation

@renovate

@renovate renovate Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Description

Renovate proposes this dependency update under the family preset. The table below lists each package and its version change, and the release notes follow.

Pre-Merge Verification Checklist

The bot ticks nothing; CI runs the repository's required gate on this pull request; items no check decides (3D tests among them) still need a reviewer's look.

  • Local verification passed: make verify-all
  • No new HISS / NASA Power-of-10 infractions (all new/modified functions
    $\le 60$ LOC)
  • 3D Tests included (Positive, Negative, Boundary) for public APIs
  • Agent contexts in sync: standardsctl compile-context --verify
  • Commit messages adhere to Conventional Commits format

This PR contains the following updates:

Package Change Age Confidence
click (changelog) ==8.5.0 → ==8.5.1 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

pallets/click (click)

v8.5.1

Compare Source

Released 2026-11-09

  • Fix copy.deepcopy() and pickle on a Parameter, Option or Command. {pr}3805
  • A KeyboardInterrupt arriving while Command.main() reports an abort or an error,
    or while it exits, no longer escapes as an unhandled traceback. The command still
    exits with the intended code; only the message may be lost. {issue}3802
  • Add {meth}Option.get_help_spec, which returns the option's left help
    column even when the option is hidden. {meth}Option.get_help_record still
    returns None for hidden options, so help screens are unchanged. {pr}3821
  • The Positional arguments help section lists every argument of the command,
    not only the documented ones. An argument with no help gets an empty
    description, the same way an option with no help does. {pr}3860
  • {meth}Argument.get_help_record always returns a tuple. It used to return
    None for an argument with no help. {pr}3860
  • Document which types are inferred from default, and what an unrecognized
    type callable does to a command-line value. {issue}3036 {pr}3808
  • path_type narrows the converted value's type for convert and prompt.
    {issue}3822 {pr}3858
  • {class}Parameter accepts a new help argument and {class}Option and {class}Argument
    inherits it. {meth}Parameter.to_info_dict now reports help for every kind of parameter.
    {pr}3861
  • A command's short help no longer stops at an abbreviation such as vs. or e.g.
    inside the first sentence. A period ends the sentence only when it closes the text
    or the next word does not start in lowercase. {pr}3865
  • With show_envvar=True, an option's error message now prints all variables of an
    envvar sequence instead of the repr of the sequence. {pr}3884
  • An empty envvar, such as [] or "", shows the same help and error message as
    no envvar when show_envvar=True. The help screen used to show [env var: ].
    {pr}3884
  • Align command's deprecated help text to options and arguments: do not translate the
    command's own help text, only the (DEPRECATED) label. {pr}3901

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from lusoris as a code owner November 9, 2026 18:21
@sourcery-ai

sourcery-ai Bot commented Nov 9, 2026

Copy link
Copy Markdown

Sorry @renovate[bot], this account has used its review budget of 2,500,000 diff characters for the last 7 days.

You can request another review in 41 minutes by commenting @sourcery-ai review.

@coderabbitai

coderabbitai Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

Explain Change →

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

Run configuration

Commits

Reviewing files that changed from the base of the PR and between fa91b21 and d74eb5b.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review

No actionable comments were generated in the recent review.

Walkthrough

The Click requirement changed from version 8.5.0 to 8.5.1. Both permitted SHA-256 hashes were updated.

Changes: Click requirement

Layer / File(s) Summary
Update Click requirement
.config/reuse/requirements.txt
The requirement now pins Click 8.5.1 and lists its updated SHA-256 hashes.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related issues

  • Dependency Dashboard Click 8.5.1 update: This change applies the pending update to .config/reuse/requirements.txt.
Merge Risk: Minimal · previous review d606f

The Click update has no identified merge-blocking risk; normal checks remain appropriate.

Architecture risk: Low · up to d606f

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

  • observed — Modified behavior in .config/reuse/requirements.txt: The click pin changes from 8.5.0 to 8.5.1, with both associated SHA-256 hashes updated.
Pre-merge checks: Passed 5

Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely identifies the Click dependency update to version 8.5.1.
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Recent review info

Run configuration

Commits

Reviewing files that changed from the base of the PR and between fc498c8 and d606fe4.

Files selected for processing: 1

  • .config/reuse/requirements.txt

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

✅ No blocking issues noticed

No blocking findings were identified. The requested dependency and hash validation should still be covered by automated checks before merging.

Test suggestions

  • Verify dependency resolution/install succeeds using the updated pinned version and hashes.
  • Verify no unrelated dependency versions or lockfile entries change.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify dependency resolution/install succeeds using the updated pinned version and hashes.
2. Verify no unrelated dependency versions or lockfile entries change.

TIP How was this review? Give us feedback

@renovate
renovate Bot force-pushed the renovate/click-8.x branch 6 times, most recently from 5b1c9d3 to 19ebc8f Compare November 10, 2026 11:18
@sourcery-ai

sourcery-ai Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

Reviewer's Guide

Lock files and vendored code

Update the pinned Click version and package hashes from 8.5.0 to 8.5.1.

  • .config/reuse/requirements.txt L15-17

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@renovate
renovate Bot force-pushed the renovate/click-8.x branch from 19ebc8f to fa91b21 Compare November 10, 2026 18:52
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/click-8.x branch from fa91b21 to d74eb5b Compare November 10, 2026 19:49

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants