chore(deps-dev): bump the development-dependencies group across 1 directory with 4 updates - #102
Conversation
…ectory with 4 updates Bumps the development-dependencies group with 4 updates in the / directory: [coverage](https://github.com/coveragepy/coveragepy), [gitpython](https://github.com/gitpython-developers/GitPython), [pre-commit](https://github.com/pre-commit/pre-commit) and [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release). Updates `coverage` from 7.15.0 to 7.15.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.15.0...7.15.2) Updates `gitpython` from 3.1.50 to 3.1.57 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.50...3.1.57) Updates `pre-commit` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `python-semantic-release` from 10.6.0 to 10.6.1 - [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases) - [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst) - [Commits](python-semantic-release/python-semantic-release@v10.6...v10.6.1) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.15.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: gitpython dependency-version: 3.1.57 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: python-semantic-release dependency-version: 10.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
AssigneesThe following users could not be added as assignees: LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
![ai-coding-guardrails[bot]](https://avatars.githubusercontent.com/in/1202546?s=60&v=4){kind=small}
There was a problem hiding this comment.
Nice work! 😎
I didn't find anything of concern
List of skipped files due to configuration
Risk: 🟢 Low
Risk analysis
This pull request updates development dependencies, which are not part of the production runtime. The primary risk comes from blast_radius and reversibility: while the changes don't affect production systems directly, they touch tools used in CI/CD pipelines (like pre-commit and python-semantic-release) and testing (coverage). Reversibility is low-risk because rolling back is straightforward—just revert the version bumps. Operational risk is minimal since these are patch updates addressing bugs and performance issues. No new code logic is introduced, so test coverage remains unchanged.
Think our bots are missing some context? Add custom requirements or guardrails in our management console
ai-coding-guardrails
Bot
added
the
zenable/risk:low
1 participant
Bumps the development-dependencies group with 4 updates in the / directory: coverage, gitpython, pre-commit and python-semantic-release.
Updates
coveragefrom 7.15.0 to 7.15.2Release notes
Sourced from coverage's releases.
Changelog
Sourced from coverage's changelog.
Commits
50d8659docs: sample HTML for 7.15.2b5eed20docs: prep for 7.15.278cab6efix: reduce memory use during reporting. #2229 (#2231)b4c1fdabuild: bump version to 7.15.2da63beddocs: sample HTML for 7.15.1bc35e64docs: prep for 7.15.1182b010perf: resolve sysmon branch events lazily, one pair at a time (#2221)ee271eeperf: compute multiline maps cheaply in the sysmon core (#2220)1441b96chore: bump the action-dependencies group with 6 updates (#2225)dd80635fix: escape context labels in html report inline script block (#2224)Updates
gitpythonfrom 3.1.50 to 3.1.57Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
ccbd573prepare for new released1a631dMerge pull request #2193 from gitpython-developers/more-unsafe-optionsab33e33Merge pull request #2194 from gitpython-developers/fix-basedpyright52199b3address review comments60dec71Adopt basedpyright with a legacy baseline7a4f5dcBlock unsafe archive additions and bundle URI3af0c25Block unsafe checkout-index and tag file optionsfb5d584Merge pull request #2187 from pick7/codex/remote-progress-return-type951cc44Merge pull request #2188 from pick7/codex/redact-http-extraheader2e5b13fMerge pull request #2189 from pick7/codex/output-stream-timeoutUpdates
pre-commitfrom 4.6.0 to 4.6.1Release notes
Sourced from pre-commit's releases.
Changelog
Sourced from pre-commit's changelog.
Commits
242ce8av4.6.1766e550Merge pull request #3727 from pre-commit/dedupe1558d06Merge pull request #3726 from pre-commit/exists-faster8a1c47aavoid duplicate files in --all-files during conflict2e01c99faster check of rev existing locally as a commit3613bf2Merge pull request #3701 from pre-commit/autoupdate-repos1d811d9Return an error for invalid --repo374d354Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH1e7994fset JULIA_DEPOT_PATHb2b9119Merge pull request #3719 from pre-commit/npm-unknown-optionsUpdates
python-semantic-releasefrom 10.6.0 to 10.6.1Release notes
Sourced from python-semantic-release's releases.
Changelog
Sourced from python-semantic-release's changelog.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions