An open index of dependabot pull requests across open source projects.

Bump the pip-deps group across 1 directory with 13 updates

Open
Number: #443
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 11, 2025 at 01:46 PM UTC
(1 day ago)
Updated: September 11, 2025 at 01:47 PM UTC
(1 day ago)
Labels:
dependencies python
Description:

Bumps the pip-deps group with 13 updates in the / directory:

Package From To
requests 2.32.4 2.32.5
ruamel-yaml 0.18.14 0.18.15
pymongo 4.14.0 4.15.0
pytest 8.4.1 8.4.2
cryptography 45.0.6 45.0.7
pytest-mock 3.14.1 3.15.0
wrapt 1.17.2 1.17.3
botocore 1.40.7 1.40.28
boto3 1.40.7 1.40.28
types-pyyaml 6.0.12.20250809 6.0.12.20250822
types-python-dateutil 2.9.0.20250809 2.9.0.20250822
pytest-cov 6.2.1 7.0.0
pytest-rerunfailures 16.0 16.0.1

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates ruamel-yaml from 0.18.14 to 0.18.15

Updates pymongo from 4.14.0 to 4.15.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.15.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574

PyMongo 4.14.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.15.0 (2025/09/10)

PyMongo 4.15 brings a number of changes including:

  • Added :class:~pymongo.encryption_options.TextOpts, :attr:~pymongo.encryption.Algorithm.TEXTPREVIEW, :attr:~pymongo.encryption.QueryType.PREFIXPREVIEW, :attr:~pymongo.encryption.QueryType.SUFFIXPREVIEW, :attr:~pymongo.encryption.QueryType.SUBSTRINGPREVIEW, as part of the experimental Queryable Encryption text queries beta. pymongocrypt>=1.16 is required for text query support.
  • Added :class:bson.decimal128.DecimalEncoder and :class:bson.decimal128.DecimalDecoder to support encoding and decoding of BSON Decimal128 values to decimal.Decimal values using the TypeRegistry API.
  • Added support for Windows arm64 wheels.

Changes in Version 4.14.1 (2025/08/19)

Version 4.14.1 is a bug fix release.

  • Fixed a bug in MongoClient.append_metadata() and AsyncMongoClient.append_metadata() that allowed duplicate DriverInfo.name to be appended to the metadata.

Issues Resolved ...............

See the PyMongo 4.14.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.14.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=45256

Commits
  • 1514e9b Prepare 4.15 release (#2523)
  • 98e9f5e PYTHON-5538 Clean up uv lock file handling (#2522)
  • d7316af PYTHON-5328 CRUD Support in Driver for Prefix/Suffix/Substring Indexes (#2521)
  • 7580309 PYTHON-4928 Convert CSFLE spec tests to unified test format (#2520)
  • 47c5460 Bump pyright from 1.1.404 to 1.1.405 (#2518)
  • b84e1a7 PYTHON-5527 - Unified test typo in 'Expected error' (#2517)
  • c0e0554 PYTHON-5521 - Update TestBsonSizeBatches.test_06_insert_fails_over_16MiB erro...
  • d63edf7 PYTHON-5524 - Fix CSFLE spec test min version checks (#2516)
  • b756bbd Bump the actions group with 2 updates (#2513)
  • b2bba67 Update coverage requirement from <=7.10.5,>=5 to >=5,<=7.10.6 (#2512)
  • Additional commits viewable in compare view

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates cryptography from 45.0.6 to 45.0.7

Changelog

Sourced from cryptography's changelog.

45.0.7 - 2025-09-01


* Added a function to support an upcoming ``pyOpenSSL`` release.

.. _v45-0-6:

Commits

Updates pytest-mock from 3.14.1 to 3.15.0

Release notes

Sourced from pytest-mock's releases.

v3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • #524: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Changelog

Sourced from pytest-mock's changelog.

3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • [#524](https://github.com/pytest-dev/pytest-mock/issues/524) <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Commits

Updates wrapt from 1.17.2 to 1.17.3

Release notes

Sourced from wrapt's releases.

wrapt-1.17.3

See the project page on the Python Package Index at https://pypi.org/project/wrapt/1.17.3/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 1.17.3

Bugs Fixed

  • Reference count was not being incremented on type object for C implementation of the partial callable object proxy when module was initialized. If wrapt was being used in Python sub interpreters which were deleted it could lead to the process crashing.
Commits
  • 99130c0 Build for Windows 11 ARM.
  • 26f5344 Build for Python 3.14.
  • 43dbbe0 Modify artifact upload pattern.
  • e90bd88 Update cibuildwheel version.
  • 58efb76 Update to ubuntu-latest.
  • 800a204 Increment release version.
  • 33b8840 Update obsolete GitHub action.
  • 1c755a1 Rename GitHub workflow file so can build package.
  • ff4981b Fix crash due to lack of reference count.
  • ecbaaa1 Revert "Remove the dependency on pkg_resources and hence setuptools on py...
  • Additional commits viewable in compare view

Updates botocore from 1.40.7 to 1.40.28

Commits

Updates boto3 from 1.40.7 to 1.40.28

Commits
  • 1fc4be9 Merge branch 'release-1.40.28'
  • 68c839b Bumping version to 1.40.28
  • 249bad2 Add changelog entries from botocore
  • 749bb57 Merge branch 'release-1.40.27'
  • eda2e77 Merge branch 'release-1.40.27' into develop
  • f904e9e Bumping version to 1.40.27
  • 578fae4 Add changelog entries from botocore
  • 3a79af3 Bump actions/github-script from 7.0.1 to 8.0.0 (#4610)
  • 428a400 Bump actions/setup-python from 5.6.0 to 6.0.0 (#4611)
  • 448262b Merge branch 'release-1.40.26'
  • Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20250809 to 6.0.12.20250822

Commits

Updates types-python-dateutil from 2.9.0.20250809 to 2.9.0.20250822

Commits

Updates pytest-cov from 6.2.1 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

  • Dropped support for subprocesses measurement.

    It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

    To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

    .. code-block:: ini

    [run] patch = subprocess

    This release also requires at least coverage 7.10.6.

  • Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

  • Removed some not really necessary testing deps like six.

6.3.0 (2025-09-06)

  • Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.
  • Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.
Commits
  • 224d896 Bump version: 6.3.0 → 7.0.0
  • 73424e3 Cleanup the docs a bit.
  • 36f1cc2 Bump pins in template.
  • f299c59 Bump the github-actions group with 2 updates
  • 25f0b2e Update docs/config.rst
  • bb23eac Improve configuration docs
  • a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
  • 82f9993 Update changelog.
  • 211b5cd Fix links.
  • 97aadd7 Update some ci config, reformat and apply some lint fixes.
  • Additional commits viewable in compare view

Updates pytest-rerunfailures from 16.0 to 16.0.1

Changelog

Sourced from pytest-rerunfailures's changelog.

16.0.1 (2025-09-02)

  • Reverted the ability to access error attributes because of an incompatibility with pytest-xdist <https://github.com/pytest-dev/pytest-xdist/issues/843>. Fixes [#302](https://github.com/pytest-dev/pytest-rerunfailures/issues/302) <https://github.com/pytest-dev/pytest-rerunfailures/issues/302>, [#303](https://github.com/pytest-dev/pytest-rerunfailures/issues/303) <https://github.com/pytest-dev/pytest-rerunfailures/issues/303>_.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
boto3
Ecosystem:
pip
Version Change:
1.40.7 → 1.40.28
Update Type:
Patch
Package:
botocore
Ecosystem:
pip
Version Change:
1.40.7 → 1.40.28
Update Type:
Patch
Package:
pytest-mock
Ecosystem:
pip
Version Change:
3.14.1 → 3.15.0
Update Type:
Minor
Package:
pymongo
Ecosystem:
pip
Version Change:
4.14.0 → 4.15.0
Update Type:
Minor
Package:
pytest
Ecosystem:
pip
Version Change:
8.4.1 → 8.4.2
Update Type:
Patch
Ecosystem:
pip
Version Change:
45.0.6 → 45.0.7
Update Type:
Patch
Package:
requests
Ecosystem:
pip
Version Change:
2.32.4 → 2.32.5
Update Type:
Patch
Package:
pytest-cov
Ecosystem:
pip
Version Change:
6.2.1 → 7.0.0
Update Type:
Major
Package:
ruamel-yaml
Ecosystem:
pip
Version Change:
0.18.14 → 0.18.15
Update Type:
Patch
Package:
wrapt
Ecosystem:
pip
Version Change:
1.17.2 → 1.17.3
Update Type:
Patch
Ecosystem:
pip
Version Change:
6.0.12.20250809 → 6.0.12.20250822
Ecosystem:
pip
Version Change:
16.0 → 16.0.1
Ecosystem:
pip
Version Change:
2.9.0.20250809 → 2.9.0.20250822
Technical Details
ID: 7552967
UUID: 3406647060
Node ID: PR_kwDOOLckwc6oCtTP
Host: GitHub
Repository: mongodb/mongodb-kubernetes