An open index of dependabot pull requests across open source projects.

Bump the pip-deps group across 1 directory with 12 updates

Closed
Number: #427
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 2
Created: September 08, 2025 at 11:22 PM UTC
(22 days ago)
Updated: September 11, 2025 at 01:45 PM UTC
(20 days ago)
Closed: September 11, 2025 at 01:45 PM UTC
(20 days ago)
Time to Close: 3 days
Labels:
dependencies python
Description:

Bumps the pip-deps group with 12 updates in the / directory:

Package From To
requests 2.32.4 2.32.5
ruamel-yaml 0.18.14 0.18.15
pymongo 4.14.0 4.14.1
pytest 8.4.1 8.4.2
cryptography 45.0.6 45.0.7
pytest-mock 3.14.1 3.15.0
wrapt 1.17.2 1.17.3
botocore 1.40.7 1.40.26
boto3 1.40.7 1.40.26
types-pyyaml 6.0.12.20250809 6.0.12.20250822
types-python-dateutil 2.9.0.20250809 2.9.0.20250822
pytest-cov 6.2.1 6.3.0

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates ruamel-yaml from 0.18.14 to 0.18.15

Updates pymongo from 4.14.0 to 4.14.1

Release notes

Sourced from pymongo's releases.

PyMongo 4.14.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.14.1 (2025/08/19)

Version 4.14.1 is a bug fix release.

  • Fixed a bug in MongoClient.append_metadata() and AsyncMongoClient.append_metadata() that allowed duplicate DriverInfo.name to be appended to the metadata.

Issues Resolved ...............

See the PyMongo 4.14.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.14.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=45256

Commits
  • 0d2a4b4 Prep for 4.14.1 release (#2495)
  • 550d234 PYTHON-5503 Use uv to install just in GitHub Actions (#2490) [v4.14] (#2493)
  • d98049c PYTHON-5502 [v4.14] Fix handling of c extensions in Azure and GCP VMs (#2487)
  • f66ec0f PYTHON-5492 Fix handling of MaxTimeMS message (#2484) [v4.14] (#2485)
  • 6611bec PYTHON-5493 [v4.14] Add a patch for the log order difference (#2482)
  • 7692bd6 PYTHON-5488 append_metadata should not add duplicates (#2461) [v4.14] (#2483)
  • aa0b920 PYTHON-5492 Fix handling of MaxTimeMSExpired responses (#2477) [v4.14] (#2479)
  • 1c48016 PYTHON-5349 Use drivers-evergreen-tools to start servers in GitHub Actions (#...
  • 7055ad1 PYTHON-5492 Mark test as flaky (#2472) [v4.14] (#2475)
  • e80f4f4 PYTHON-5491 Skip non-idempotent dropIndex tests (#2467) [v4.14] (#2468)
  • Additional commits viewable in compare view

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates cryptography from 45.0.6 to 45.0.7

Changelog

Sourced from cryptography's changelog.

45.0.7 - 2025-09-01


* Added a function to support an upcoming ``pyOpenSSL`` release.

.. _v45-0-6:

Commits

Updates pytest-mock from 3.14.1 to 3.15.0

Release notes

Sourced from pytest-mock's releases.

v3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • #524: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Changelog

Sourced from pytest-mock's changelog.

3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • [#524](https://github.com/pytest-dev/pytest-mock/issues/524) <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Commits

Updates wrapt from 1.17.2 to 1.17.3

Release notes

Sourced from wrapt's releases.

wrapt-1.17.3

See the project page on the Python Package Index at https://pypi.org/project/wrapt/1.17.3/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 1.17.3

Bugs Fixed

  • Reference count was not being incremented on type object for C implementation of the partial callable object proxy when module was initialized. If wrapt was being used in Python sub interpreters which were deleted it could lead to the process crashing.
Commits
  • 99130c0 Build for Windows 11 ARM.
  • 26f5344 Build for Python 3.14.
  • 43dbbe0 Modify artifact upload pattern.
  • e90bd88 Update cibuildwheel version.
  • 58efb76 Update to ubuntu-latest.
  • 800a204 Increment release version.
  • 33b8840 Update obsolete GitHub action.
  • 1c755a1 Rename GitHub workflow file so can build package.
  • ff4981b Fix crash due to lack of reference count.
  • ecbaaa1 Revert "Remove the dependency on pkg_resources and hence setuptools on py...
  • Additional commits viewable in compare view

Updates botocore from 1.40.7 to 1.40.26

Commits
  • 9e8135a Merge branch 'release-1.40.26'
  • 8be01be Bumping version to 1.40.26
  • e93e5ce Update endpoints model
  • fd64af0 Update to latest models
  • bf1a4d1 Merge pull request #3559 from boto/dependabot/github_actions/actions/setup-py...
  • d8d7344 Merge pull request #3558 from boto/dependabot/github_actions/github/codeql-ac...
  • c8e8b56 Bump actions/setup-python from 5.6.0 to 6.0.0
  • 075bad3 Bump github/codeql-action from 3.29.0 to 3.30.1
  • 27db68b Merge branch 'release-1.40.25'
  • 29a96fe Merge branch 'release-1.40.25' into develop
  • Additional commits viewable in compare view

Updates boto3 from 1.40.7 to 1.40.26

Commits
  • 448262b Merge branch 'release-1.40.26'
  • 78b64ed Bumping version to 1.40.26
  • 85d6d1c Add changelog entries from botocore
  • c1c6044 Merge branch 'release-1.40.25'
  • 332640a Merge branch 'release-1.40.25' into develop
  • faf7045 Bumping version to 1.40.25
  • 041cf03 Add changelog entries from botocore
  • d3129b6 Merge branch 'release-1.40.24'
  • f196479 Merge branch 'release-1.40.24' into develop
  • c503159 Bumping version to 1.40.24
  • Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20250809 to 6.0.12.20250822

Commits

Updates types-python-dateutil from 2.9.0.20250809 to 2.9.0.20250822

Commits

Updates pytest-cov from 6.2.1 to 6.3.0

Changelog

Sourced from pytest-cov's changelog.

6.3.0 (2025-09-06)

  • Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.
  • Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.
Commits
  • a69d1ab Bump version: 6.2.1 → 6.3.0
  • 475bf32 Update changelog.
  • 3834009 Add GitHub Actions example and fix example to not break with default markdown...
  • 0824728 Small phrasing adustments in Markdown docs
  • 474c1f4 Move markdown dest files check to StoreReport for earlier error and parser.er...
  • 7b21833 Default markdown-append to coverage.md and raise warning if both markdown opt...
  • 3a15312 Fix usage of Path.open() to write/append to files
  • 4b79449 Change output file cov-append.md in md-append example
  • 40e9e8e Add docs and update AUTHORS.rst
  • f5ca33a Add tests for markdown and markdown-append
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+12
Deletions:
-12
Package Dependencies
Package:
boto3
Ecosystem:
pip
Version Change:
1.40.7 → 1.40.26
Update Type:
Patch
Package:
botocore
Ecosystem:
pip
Version Change:
1.40.7 → 1.40.26
Update Type:
Patch
Package:
pytest-mock
Ecosystem:
pip
Version Change:
3.14.1 → 3.15.0
Update Type:
Minor
Package:
pymongo
Ecosystem:
pip
Version Change:
4.14.0 → 4.14.1
Update Type:
Patch
Package:
pytest
Ecosystem:
pip
Version Change:
8.4.1 → 8.4.2
Update Type:
Patch
Ecosystem:
pip
Version Change:
45.0.6 → 45.0.7
Update Type:
Patch
Package:
requests
Ecosystem:
pip
Version Change:
2.32.4 → 2.32.5
Update Type:
Patch
Package:
pytest-cov
Ecosystem:
pip
Version Change:
6.2.1 → 6.3.0
Update Type:
Minor
Package:
ruamel-yaml
Ecosystem:
pip
Version Change:
0.18.14 → 0.18.15
Update Type:
Patch
Package:
wrapt
Ecosystem:
pip
Version Change:
1.17.2 → 1.17.3
Update Type:
Patch
Ecosystem:
pip
Version Change:
6.0.12.20250809 → 6.0.12.20250822
Ecosystem:
pip
Version Change:
2.9.0.20250809 → 2.9.0.20250822
Technical Details
ID: 7552933
UUID: 2809877964
Node ID: PR_kwDOOLckwc6ne1XM
Host: GitHub
Repository: mongodb/mongodb-kubernetes
Mergeable: Yes
Merge State: Unstable