Skip to content

Bump the python-deps group across 1 directory with 6 updates#900

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-deps-9328ed156a
Open

Bump the python-deps group across 1 directory with 6 updates#900
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-deps-9328ed156a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026

Bumps the python-deps group with 5 updates in the / directory:

Package From To
authlib 1.6.9 1.7.0
seleniumbase 4.47.9 4.48.2
basedpyright 1.39.0 1.39.3
prek 0.3.8 0.3.10
ruff 0.15.10 0.15.11

Updates authlib from 1.6.9 to 1.7.0

Release notes

Sourced from authlib's releases.

v1.7.0

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.6.10...v1.7.0

v1.6.11

Full Changelog: authlib/authlib@v1.6.10...v1.6.11

  • Fix CSRF issue with starlette client

v1.6.10

Full Changelog: authlib/authlib@v1.6.9...v1.6.10

  • Fix redirecting to unvalidated redirect_uri on UnsupportedResponseTypeError.
Commits
  • 5d2e603 chore: release 1.7.0
  • 767f08b fix: CSRF issue with starlette client
  • e9aaef3 Merge pull request #877 from authlib/merge/1.6
  • 3c8ec9a Merge branch 'main' into merge/1.6
  • ef09aeb chore: release 1.6.10
  • 3be0846 fix: redirecting to unvalidated redirect_uri on UnsupportedResponseTypeError
  • 4cf6f97 Merge pull request #876 from guillett/patch-1
  • 23f67b4 Update README.md docs.authlib.org/en/latest => docs.authlib.org/en/stable
  • 1040163 chore: prek autoupdate
  • 491209f Merge pull request #875 from azmeuk/doc
  • Additional commits viewable in compare view

Updates seleniumbase from 4.47.9 to 4.48.2

Release notes

Sourced from seleniumbase's releases.

Fix unzip in powershell

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.48.1...v4.48.2

4.48.1 - Browser config updates

Browser config updates

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.48.0...v4.48.1

4.48.0 - Selenium and CDP updates

Selenium and CDP updates

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.47.9...v4.48.0

Commits
  • a9605ae Merge pull request #4330 from seleniumbase/fix-unzip-in-powershell
  • 3a38776 Version 4.48.2
  • b0518dc Refresh Python dependencies
  • 2bc7763 Fix unzip in powershell for paths that contain spaces
  • a0aceea Merge pull request #4323 from seleniumbase/browser-config-updates
  • 9dc951b Version 4.48.1
  • 77ea8fc Refresh Python dependencies
  • bfb94e2 Update default config for Chrome and Edge
  • a381c35 Update documentation in migration examples
  • 377c3d2 Merge pull request #4319 from seleniumbase/selenium-and-cdp-updates
  • Additional commits viewable in compare view

Updates basedpyright from 1.39.0 to 1.39.3

Commits
  • 5f66727 1.39.3
  • d8741df hopefully fix docs deployment job
  • ceb200c 1.39.2
  • eb7a92c try to fix browser-basedpyright being published with nothing in it
  • dec5306 update package-lock.json
  • 6db43de 1.39.1
  • 335e486 fix failing tests from merge
  • bbe71b6 delete newly added github action from upstream that we don't use
  • 8f22618 update prettierignore
  • ff1f5a4 fix compile errors from merge
  • Additional commits viewable in compare view

Updates prek from 0.3.8 to 0.3.10

Release notes

Sourced from prek's releases.

0.3.10

Release Notes

Released on 2026-04-21.

Enhancements

  • Disallow rev for non-remote repos in schema (#1964)
  • Hide up-to-date output in non-verbose mode (#1942)
  • Improve merge conflict marker detection (#1937)
  • Keep finished hooks visible (#1967)
  • Preserve frozen comment spacing in auto-update (#1945)
  • Reimplement @j178/prek npm package (#1973)

Bug fixes

  • Prefer stable Rust toolchains (#1974)

Documentation

  • Add SKILL.md for prek (#1950)
  • Document gh skill install j178/prek prek to install prek skill for agents (#1951)
  • Improve compatibility and migration docs (#1940)

Other changes

  • Sync latest identify tags (#1947)

Contributors

Install prek 0.3.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.10

Released on 2026-04-21.

Enhancements

  • Disallow rev for non-remote repos in schema (#1964)
  • Hide up-to-date output in non-verbose mode (#1942)
  • Improve merge conflict marker detection (#1937)
  • Keep finished hooks visible (#1967)
  • Preserve frozen comment spacing in auto-update (#1945)
  • Reimplement @j178/prek npm package (#1973)

Bug fixes

  • Prefer stable Rust toolchains (#1974)

Documentation

  • Add SKILL.md for prek (#1950)
  • Document gh skill install j178/prek prek to install prek skill for agents (#1951)
  • Improve compatibility and migration docs (#1940)

Other changes

  • Sync latest identify tags (#1947)

Contributors

0.3.9

Released on 2026-04-13.

Highlight

prek auto-update is now stricter about pinned revisions and more useful in CI. It now keeps rev and # frozen: comments in sync, can detect impostor commits when validating pinned SHAs, and lets you use prek auto-update --check to fail on both available updates and frozen-ref mismatches without rewriting the config.

Examples:

$ prek auto-update
# updates revs and repairs stale `# frozen:` comments
</tr></table> 

... (truncated)

Commits

Updates pytest from 9.0.2 to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

Updates ruff from 0.15.10 to 0.15.11

Release notes

Sourced from ruff's releases.

0.15.11

Release Notes

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

Bug fixes

  • [flake8-async] Omit overridden methods for ASYNC109 (#24648)

Documentation

  • [flake8-async] Add override mention to ASYNC109 docs (#24666)
  • Update Neovim config examples to use vim.lsp.config (#24577)

Contributors

Install ruff 0.15.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.11/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.11/ruff-installer.ps1 | iex"

Download ruff 0.15.11

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

Bug fixes

  • [flake8-async] Omit overridden methods for ASYNC109 (#24648)

Documentation

  • [flake8-async] Add override mention to ASYNC109 docs (#24666)
  • Update Neovim config examples to use vim.lsp.config (#24577)

Contributors

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/python-deps-9328ed156a branch from 3fa4db9 to a6160ee Compare April 23, 2026 20:01
Bumps the python-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [authlib](https://github.com/authlib/authlib) | `1.6.9` | `1.7.0` |
| [seleniumbase](https://github.com/seleniumbase/SeleniumBase) | `4.47.9` | `4.48.2` |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.0` | `1.39.3` |
| [prek](https://github.com/j178/prek) | `0.3.8` | `0.3.10` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.10` | `0.15.11` |



Updates `authlib` from 1.6.9 to 1.7.0
- [Release notes](https://github.com/authlib/authlib/releases)
- [Commits](authlib/authlib@v1.6.9...v1.7.0)

Updates `seleniumbase` from 4.47.9 to 4.48.2
- [Release notes](https://github.com/seleniumbase/SeleniumBase/releases)
- [Changelog](https://github.com/seleniumbase/SeleniumBase/blob/master/CHANGELOG.md)
- [Commits](seleniumbase/SeleniumBase@v4.47.9...v4.48.2)

Updates `basedpyright` from 1.39.0 to 1.39.3
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.39.0...v1.39.3)

Updates `prek` from 0.3.8 to 0.3.10
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.8...v0.3.10)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `ruff` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.11)

---
updated-dependencies:
- dependency-name: authlib
  dependency-version: 1.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: basedpyright
  dependency-version: 1.39.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: prek
  dependency-version: 0.3.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: seleniumbase
  dependency-version: 4.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the python-deps group with 6 updates Bump the python-deps group across 1 directory with 6 updates Apr 24, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/python-deps-9328ed156a branch from a6160ee to 21150ad Compare April 24, 2026 05:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants