An open index of dependabot pull requests across open source projects.

Bump the pip-version-updates group across 1 directory with 3 updates

Merged
Number: #3289
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 3
Created: September 22, 2025 at 10:38 AM UTC
(11 days ago)
Updated: September 30, 2025 at 07:04 PM UTC
(3 days ago)
Merged: September 30, 2025 at 07:04 PM UTC
(3 days ago)
by Weltraumschaf
Time to Close: 8 days
Labels:
dependencies python
Assignees:
Weltraumschaf
Description:

Bumps the pip-version-updates group with 3 updates in the /scanners/git-repo-scanner/scanner directory: pygithub, python-gitlab and pytz.

Updates pygithub from 1.54.1 to 2.8.1

Release notes

Sourced from pygithub's releases.

v2.8.1

What's Changed

Bug Fixes

Full Changelog: https://github.com/PyGithub/PyGithub/compare/v2.8.0...v2.8.1

v2.8.0

What's Changed

New Features

Improvements

Bug Fixes

Maintenance

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.8.1 (September 02, 2025)

Bug Fixes ^^^^^^^^^

  • Use default type if known type is not supported ([#3365](https://github.com/pygithub/pygithub/issues/3365) <https://github.com/PyGithub/PyGithub/pull/3365>) (40506415 <https://github.com/PyGithub/PyGithub/commit/40506415>)

Version 2.8.0 (September 02, 2025)

New Features ^^^^^^^^^^^^

  • Add self hosted runner management to Organization ([#3203](https://github.com/pygithub/pygithub/issues/3203) <https://github.com/PyGithub/PyGithub/pull/3203>) (4ea1c4e2 <https://github.com/PyGithub/PyGithub/commit/4ea1c4e2>)
  • Add support to generate release notes ([#3022](https://github.com/pygithub/pygithub/issues/3022) <https://github.com/PyGithub/PyGithub/pull/3022>) (e359b83a <https://github.com/PyGithub/PyGithub/commit/e359b83a>)

Improvements ^^^^^^^^^^^^

  • Fix connection pooling to improve connection performance ([#3289](https://github.com/pygithub/pygithub/issues/3289) <https://github.com/PyGithub/PyGithub/pull/3289>_)
  • Add Repository.get_automated_security_fixes method ([#3303](https://github.com/pygithub/pygithub/issues/3303) <https://github.com/PyGithub/PyGithub/pull/3303>) (22048d83 <https://github.com/PyGithub/PyGithub/commit/22048d83>)
  • Sync Issue class with API spec ([#3338](https://github.com/pygithub/pygithub/issues/3338) <https://github.com/PyGithub/PyGithub/pull/3338>) (62da467a <https://github.com/PyGithub/PyGithub/commit/62da467a>)
  • Return more union classes like NamedUser | Organization | Enterprise ([#3224](https://github.com/pygithub/pygithub/issues/3224) <https://github.com/PyGithub/PyGithub/pull/3224>) (aea64148 <https://github.com/PyGithub/PyGithub/commit/aea64148>)
  • Sync Enterprise class with API spec ([#3342](https://github.com/pygithub/pygithub/issues/3342) <https://github.com/PyGithub/PyGithub/pull/3342>) (01bb5ab1 <https://github.com/PyGithub/PyGithub/commit/01bb5ab1>)
  • Sync GitReleaseAsset class with API spec ([#3343](https://github.com/pygithub/pygithub/issues/3343) <https://github.com/PyGithub/PyGithub/pull/3343>) (74449fed <https://github.com/PyGithub/PyGithub/commit/74449fed>)
  • Sync many class with OpenAPI spec ([#3344](https://github.com/pygithub/pygithub/issues/3344) <https://github.com/PyGithub/PyGithub/pull/3344>_)
  • Point deprecation warnings to the caller code rather than inner class ([#3275](https://github.com/pygithub/pygithub/issues/3275) <https://github.com/PyGithub/PyGithub/pull/3275>) (99bb5270 <https://github.com/PyGithub/PyGithub/commit/99bb5270>)
  • Allow for repo strings in all Team repo methods ([#3356](https://github.com/pygithub/pygithub/issues/3356) <https://github.com/PyGithub/PyGithub/pull/3356>) (3234a21f <https://github.com/PyGithub/PyGithub/commit/3234a21f>)

Bug Fixes ^^^^^^^^^

  • Fix API path of Repository.get_git_ref ([#2992](https://github.com/pygithub/pygithub/issues/2992) <https://github.com/PyGithub/PyGithub/pull/2992>) (a6965031 <https://github.com/PyGithub/PyGithub/commit/a6965031>)
  • Rework redirection URL allowance check ([#3329](https://github.com/pygithub/pygithub/issues/3329) <https://github.com/PyGithub/PyGithub/pull/3329>) (065b1319 <https://github.com/PyGithub/PyGithub/commit/065b1319>)
  • Fix GitRelease.name, deprecate GitRelease.title ([#3346](https://github.com/pygithub/pygithub/issues/3346) <https://github.com/PyGithub/PyGithub/pull/3346>) (fb51957f <https://github.com/PyGithub/PyGithub/commit/fb51957f>)
  • Remove "COMMENT" as the default event for create_review ([#3078](https://github.com/pygithub/pygithub/issues/3078) <https://github.com/PyGithub/PyGithub/pull/3078>) (8494da5c <https://github.com/PyGithub/PyGithub/commit/8494da5c>)
  • Add support for public release assets ([#3339](https://github.com/pygithub/pygithub/issues/3339) <https://github.com/PyGithub/PyGithub/pull/3339>) (abad296e <https://github.com/PyGithub/PyGithub/commit/abad296e>)
  • Fix GitHub breaking API change of maintainers in Organization.create_team ([#3291](https://github.com/pygithub/pygithub/issues/3291) <https://github.com/PyGithub/PyGithub/pull/3291>) (17bc4df4 <https://github.com/PyGithub/PyGithub/commit/17bc4df4>)

Maintenance ^^^^^^^^^^^

  • Minor fix to release.yml ([#3201](https://github.com/pygithub/pygithub/issues/3201) <https://github.com/PyGithub/PyGithub/pull/3201>) (f1fc6e7c <https://github.com/PyGithub/PyGithub/commit/f1fc6e7c>)
  • Reduce test replay data ([#3243](https://github.com/pygithub/pygithub/issues/3243) <https://github.com/PyGithub/PyGithub/pull/3243>) (19426454 <https://github.com/PyGithub/PyGithub/commit/19426454>)
  • Add check to OpenAPI script to check doc-string verbs ([#3332](https://github.com/pygithub/pygithub/issues/3332) <https://github.com/PyGithub/PyGithub/pull/3332>) (3efde77d <https://github.com/PyGithub/PyGithub/commit/3efde77d>)
  • Improve apply OpenAPI schemas ([#3333](https://github.com/pygithub/pygithub/issues/3333) <https://github.com/PyGithub/PyGithub/pull/3333>) (ec189dd6 <https://github.com/PyGithub/PyGithub/commit/ec189dd6>)
  • Add config to OpenAPI script to ignore schemas ([#3334](https://github.com/pygithub/pygithub/issues/3334) <https://github.com/PyGithub/PyGithub/pull/3334>) (0478d33b <https://github.com/PyGithub/PyGithub/commit/0478d33b>)
  • Add suggest and create method feature to OpenAPI script ([#3318](https://github.com/pygithub/pygithub/issues/3318) <https://github.com/PyGithub/PyGithub/pull/3318>_)
  • Fix CI OpenApi apply command ([#3341](https://github.com/pygithub/pygithub/issues/3341) <https://github.com/PyGithub/PyGithub/pull/3341>) (cdc10a27 <https://github.com/PyGithub/PyGithub/commit/cdc10a27>)
  • Improve OpenAPI scripts ([#3340](https://github.com/pygithub/pygithub/issues/3340) <https://github.com/PyGithub/PyGithub/pull/3340>) (ad278c5f <https://github.com/PyGithub/PyGithub/commit/ad278c5f>)
  • Improve OpenAPI CI ([#3347](https://github.com/pygithub/pygithub/issues/3347) <https://github.com/PyGithub/PyGithub/pull/3347>) (8165bbc9 <https://github.com/PyGithub/PyGithub/commit/8165bbc9>)
  • Rework test framework ([#3271](https://github.com/pygithub/pygithub/issues/3271) <https://github.com/PyGithub/PyGithub/pull/3271>) (1b700187 <https://github.com/PyGithub/PyGithub/commit/1b700187>)
  • Some minor fixes to OpenAPI scripts ([#3350](https://github.com/pygithub/pygithub/issues/3350) <https://github.com/PyGithub/PyGithub/pull/3350>) (a813a945 <https://github.com/PyGithub/PyGithub/commit/a813a945>)
  • Add manual workflow to fix auto-fixable issues ([#3351](https://github.com/pygithub/pygithub/issues/3351) <https://github.com/PyGithub/PyGithub/pull/3351>) (0e6317d9 <https://github.com/PyGithub/PyGithub/commit/0e6317d9>)

... (truncated)

Commits

Updates python-gitlab from 2.6.0 to 6.3.0

Release notes

Sourced from python-gitlab's releases.

v6.3.0 (2025-08-28)

This release is published under the LGPL-3.0-or-later License.

Chores

  • deps: Update actions/checkout action to v5 (36629a4)

  • deps: Update actions/download-artifact action to v5 (397cf39)

  • deps: Update all non-major dependencies (d40d5d2)

  • deps: Update all non-major dependencies (2fce144)

  • deps: Update all non-major dependencies (2dd2e8e)

  • deps: Update all non-major dependencies (bf7a60a)

  • deps: Update all non-major dependencies (18c946f)

Features

  • Add sync method to force remote mirror updates (f3c6678)

  • api: Add missing ProjectJob list filters (5fe0e71)

  • api: Add missing ProjectPackageManager list filters (b1696be)

  • users: Implement support for 'admins' in administrators 'list' (aaed51c)


Detailed Changes: v6.2.0...v6.3.0

v6.2.0 (2025-07-28)

This release is published under the LGPL-3.0-or-later License.

Build System

  • release: Use correct python-semantic-release/publish-action (2f20634)

Chores

  • deps: Update all non-major dependencies (3b8fbf4)

  • deps: Update all non-major dependencies (be25c16)

  • deps: Update all non-major dependencies (9c095bd)

... (truncated)

Changelog

Sourced from python-gitlab's changelog.

CHANGELOG

v5.6.0 (2025-01-28)

Features

  • group: Add support for group level MR approval rules (304bdd0)

v5.5.0 (2025-01-28)

Chores

  • Add deprecation warning for mirror_pull functions (7f6fd5c)

  • Relax typing constraints for response action (f430078)

  • tests: Catch deprecation warnings (0c1af08)

Documentation

  • Add usage of pull mirror (9b374b2)

  • Remove old pull mirror implementation (9e18672)

Features

  • functional: Add pull mirror test (3b31ade)

  • projects: Add pull mirror class (2411bff)

  • unit: Add pull mirror tests (5c11203)

v5.4.0 (2025-01-28)

Bug Fixes

  • api: Make type ignores more specific where possible (e3cb806)

... (truncated)

Commits
  • a7ef3b4 chore: release v6.3.0
  • d40d5d2 chore(deps): update all non-major dependencies
  • 36629a4 chore(deps): update actions/checkout action to v5
  • 2fce144 chore(deps): update all non-major dependencies
  • aaed51c feat(users): implement support for 'admins' in administrators 'list'
  • 397cf39 chore(deps): update actions/download-artifact action to v5
  • 2dd2e8e chore(deps): update all non-major dependencies
  • 5fe0e71 feat(api): add missing ProjectJob list filters
  • b1696be feat(api): add missing ProjectPackageManager list filters
  • f3c6678 feat: add sync method to force remote mirror updates
  • Additional commits viewable in compare view

Updates pytz from 2021.1 to 2025.2

Commits
  • 82e0891 Bump version numbers to 2024.2 (2024b)
  • 277b33c IANA 2025b
  • 07d8e91 Squashed 'tz/' changes from a8e2fcd87b..a84610f010
  • 00ad7f1 Bump version numbers to 2025.1 / 2025a
  • 7abdc14 Squashed 'tz/' changes from 6903dde39e..5ad5cfba5b
  • f3a8f38 IANA 2025a
  • 3944f75 Bump version numbers to 2024.2 / 2024b
  • 382ca0c Squashed 'tz/' changes from 380c07cef..923e54bae
  • 640c9bd IANA 2024b
  • 96a1e88 Stop testing unavailable and EOL Python 3.5
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+3
Deletions:
-3
Package Dependencies
Package:
pygithub
Ecosystem:
pip
Version Change:
1.54.1 → 2.8.1
Update Type:
Major
Package:
pytz
Ecosystem:
pip
Version Change:
2021.1 → 2025.2
Ecosystem:
pip
Version Change:
2.6.0 → 6.3.0
Update Type:
Major
Technical Details
ID: 8873500
UUID: 2848877845
Node ID: PR_kwDOBM-Q_c6pzm0V
Host: GitHub
Repository: secureCodeBox/secureCodeBox
Merge State: Unknown