Skip to content

build(deps): Bump the python-deps group across 1 directory with 12 updates - #24

Open
dependabot[bot] wants to merge 1 commit into
productionfrom
dependabot/uv/python-deps-f433b4f666
Open

build(deps): Bump the python-deps group across 1 directory with 12 updates#24
dependabot[bot] wants to merge 1 commit into
productionfrom
dependabot/uv/python-deps-f433b4f666

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps the python-deps group with 11 updates in the / directory:

Package From To
flask-cors 6.0.2 6.0.5
python-socketio 5.16.1 5.16.3
tqdm 4.67.3 4.69.0
gevent 26.5.0 26.7.0
rarfile 4.2 4.4
qbittorrent-api 2026.5.1 2026.7.0
apprise 1.10.0 1.12.0
seleniumbase 4.48.2 4.51.6
basedpyright 1.39.5 1.39.9
prek 0.4.1 0.4.10
ruff 0.15.11 0.16.0

Updates flask-cors from 6.0.2 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

Commits
  • 91ebc49 Typing Hotfix: support blueprints in the type system
  • d601665 Add strict MyPy Typing
  • c8e8871 Harden release publishing workflow (#406)
  • e1d4034 Derive package version from git tag via setuptools-scm (#405)
  • See full diff in compare view

Updates python-socketio from 5.16.1 to 5.16.3

Release notes

Sourced from python-socketio's releases.

Release 5.16.3

See CHANGES.md for release notes.

Release 5.16.2

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.16.3 - 2026-06-15

  • Catch all exceptions in redis and rabbitmq client managers #1581 (commit)

Release 5.16.2 - 2026-05-21

Release 5.16.1 - 2026-02-06

  • Use configured JSON module in managers #1549 (commit)
  • Admin UI fixes: remove duplicate tasks, report transport upgrades (commit)
  • Switch to Furo documentation template (commit)
  • Add Python free-threading to CI #1554 (commit)

Release 5.16.0 - 2025-12-24

  • Address deprecation warnings (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 5.15.1 - 2025-12-16

  • Restore support multiple arguments via pubsub emits #1540 (commit)

Release 5.15.0 - 2025-11-22

Release 5.14.3 - 2025-10-29

  • Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
  • Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

  • Restore binary message support in message queue setups #1509 (commit)
  • Fix formatting of client connection error #1507 (commit)
  • Add 3.14 and pypy-3.11 CI tasks (commit)
  • Improve documentation of the BaseManager.get_participants() method (commit)

Release 5.14.1 - 2025-10-02

... (truncated)

Commits
  • 36c550f Release 5.16.3
  • 80bb5c9 Catch all exceptionsin redis and rabbitmq managers (Fixes #1581)
  • 3f1d509 Bump aiohttp from 3.13.4 to 3.14.0 in /examples/server/aiohttp (#1580) #nolog
  • c2918c1 Bump qs and express in /examples/server/javascript (#1579) #nolog
  • e19cb7d Bump qs and express in /examples/client/javascript (#1578) #nolog
  • f616fb1 Bump ws, engine.io, socket.io-adapter and socket.io-client (#1575) #nolog
  • 5f35b0b Bump ws, engine.io, socket.io-adapter and socket.io-client (#1576) #nolog
  • 995f080 Version 5.16.3.dev0
  • 6e2b717 Release 5.16.2
  • cb65829 update python-engineio version
  • Additional commits viewable in compare view

Updates tqdm from 4.67.3 to 4.69.0

Release notes

Sourced from tqdm's releases.

tqdm v4.69.0 stable

  • add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
  • misc minor framework updates
    • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

tqdm v4.68.3 stable

  • utils: delay os.get_terminal_size (#1763 <- #1760)
  • autonotebook: support QtConsole, Spyder, JupyterLite (#1763, #1628, #1559 <- #1283, #1098, #512)
  • minor docs updates
    • fix typo (#1762)
    • use git-fame
  • misc minor framework updates
    • fix & update CI build
    • pre-commit: add docs & metadata generation
    • move tox.ini -> pyproject.toml, move tox-gh-actions -> tox-gh
    • add Python 3.14, drop 3.7 support

tqdm v4.68.2 stable

  • revert accidental change to ascii default (fixes #1760)
    • UnicodeEncodeError: 'charmap' codec can't encode characters in position 6-7: character maps to <undefined> can be fixed by installing tqdm!=4.68.0,!=4.68.1
  • misc docs updates
    • fix links
    • replace stray rst -> md syntax
    • consistent "progress bar" terminology (#1737)
  • tests: fix coverage (fixes #1760)

tqdm v4.68.1 stable

tqdm v4.68.0 stable

  • utils: simplify terminal size detection (#1760)
  • contrib
    • itertools (#1760)
      • add chain, permutations, combinations, combinations_with_replacement, batched
      • add product(repeat=1) keyword argument (#1428)
    • fix discord, telegram error handling
    • fix discord, slack, telegram format for total=None
  • soft-deprecate tqdm.utils.envwrap -> envwrap
  • benchmarks: fix asv
  • misc linting
  • misc framework updates
    • CI: migrate manual job to pre-commit.ci
    • bump workflow actions & pre-commit hooks
Commits
  • 6ab24dc bump version, workflow actions, pre-commit hooks
  • 99615b9 asyncio: add gather(return_exceptions=False) (#1776)
  • 53d096e bump version, merge pull request #1768 from its-Sohan/fix/write-stdout-none
  • 74ff992 fix: prevent tqdm.write from crashing when sys.stdout is none
  • 3757d0d Merge pull requests #1717 and #1767 (fixes #1658)
  • 55156ce fix: apply disp_trim to all format_meter return paths (#1658)
  • 9aff609 bump version, merge pull request #1763 from tqdm/jupyterlite
  • 9872f80 drop date from snap version str to fix pydantic
  • b829334 support QtConsole, Spyder, JupyterLite
  • 6fa4867 delay os.get_terminal_size
  • Additional commits viewable in compare view

Updates gevent from 26.5.0 to 26.7.0

Commits
  • 1ae8449 Preparing release 26.7.0
  • af4fad4 Add note about change in binary wheel building.
  • 894a6e1 gevent/resolver/_addresses.py: Apply suggestion from @​koteshyelamati and move...
  • 4bbfae8 Merge pull request #2190 from gevent/os-close-no-init-hub
  • fbc0ca7 Blanket skip two SSL tests that are highly environment sensitive.
  • bef4cdd Disable 3.15 on windows entirely for now; everything is crashing and I'm pret...
  • 95c5b1e Attempt some CFFI-related workarounds.
  • 2b754a5 cython won't build on windows, must stick to precompiled version. Debugging a...
  • ebcebb0 Track down why 3.15 was initting the hub.
  • dcf4eae Merge pull request #2189 from ddorian/fix-shutdown-atexit-order
  • Additional commits viewable in compare view

Updates rarfile from 4.2 to 4.4

Release notes

Sourced from rarfile's releases.

rarfile v4.4

Security fixes:

  • Skip CRC check for some old subblocks. Previously rarfile tried to calculate header CRC by reading data payload for those, but that could cause excessive allocations.

Fixes:

  • RAR5: Reattempt passwords after trying wrong password when header encryption is used. [#131]
  • Restore fd position in file type detection functions. [#121]

rarfile v4.3

Fixes

  • Disallow extraction outside extraction path, in case of existing symlink. [#114]
  • Disallow creating symlinks to outside of extraction path. [#118]
  • Apply length limit to passwords, so too long password give same result as for unrar.
Changelog

Sourced from rarfile's changelog.

Version 4.4 (2026-07-22)

Security fixes:

  • Skip CRC check for some old subblocks. Previously rarfile tried to calculate header CRC by reading data payload for those, but that could cause excessive allocations.

Fixes:

  • RAR5: Reattempt passwords after trying wrong password when header encryption is used. [[#131](https://github.com/markokr/rarfile/issues/131) <https://github.com/markokr/rarfile/pull/131>_]

  • Restore fd position in file type detection functions. [[#121](https://github.com/markokr/rarfile/issues/121) <https://github.com/markokr/rarfile/pull/121>_]

Version 4.3 (2026-07-08)

Security fixes:

  • Disallow extraction outside extraction path, in case of existing symlink. [[#114](https://github.com/markokr/rarfile/issues/114) <https://github.com/markokr/rarfile/pull/114>_]

  • Disallow creating symlinks to outside of extraction path. [[#118](https://github.com/markokr/rarfile/issues/118) <https://github.com/markokr/rarfile/pull/118>_]

Fixes:

  • Apply length limit to passwords, so too long password give same result as for unrar.
Commits
  • d106d20 Refresh news.rst
  • 8ab9f71 ci: restore CI on push
  • 1b3db89 v4.4
  • c94c969 Skip CRC check for some old subblocks.
  • e2c0d6e Reattempt passwords
  • cc6368e build(deps): bump tox from 4.53.1 to 4.56.1
  • 0b3d453 dependabot: drop unnecessary etc
  • edb967c build(deps): bump actions/checkout from 4 to 7
  • 79bd2e4 build(deps): bump twine from 5.1.1 to 6.2.0
  • 1c0c6a6 build(deps): bump actions/upload-artifact from 4 to 7
  • Additional commits viewable in compare view

Updates qbittorrent-api from 2026.5.1 to 2026.7.0

Release notes

Sourced from qbittorrent-api's releases.

release-2026.7.0

What's Changed

Fixes

Chores

Full Changelog: rmartin16/qbittorrent-api@v2026.6.1...v2026.7.0

release-2026.6.1

What's Changed

New Contributors

Full Changelog: rmartin16/qbittorrent-api@v2026.6.0...v2026.6.1

release-2026.6.0

What's Changed

Features

Fixes

Chores

New Contributors

Full Changelog: rmartin16/qbittorrent-api@v2026.5.3...v2026.6.0

release-2026.5.3

What's Changed

... (truncated)

Changelog

Sourced from qbittorrent-api's changelog.

v2026.7.0 (07 jul 2026)

  • Advertise support for qBittorrent v5.2.3

v2026.6.1 (26 jun 2026)

  • Advertise support for qBittorrent v5.2.2

v2026.6.0 (5 jun 2026)

  • Add support for app/processInfo

v2026.5.3 (30 may 2026)

  • Add support for API key authentication (#620)
  • Minimum Python is now 3.10 (#618)

v2026.5.2 (30 may 2026)

  • Advertise support for qBittorrent v5.2.1
Commits
  • 216d118 bump to v2026.7.0
  • 064b583 advertise support for qbittorrent v5.2.3
  • 658b2a2 Accept float for ratio_limit in set_share_limits (#637)
  • ac66943 Bumped pre-commit hook for ruff-pre-commit from v0.15.15 to v0.15.20 (#635)
  • 1a91d77 use dependency groups to install pre-commit
  • 0aeb27a Bump the uv group with 3 updates (#634)
  • d9fd436 Bump the github-actions group with 4 updates (#633)
  • 5985973 bump to v2026.6.1
  • 89c1206 qBittorrent 5.2.2 support (#632)
  • 491cc30 Bump cryptography from 48.0.0 to 48.0.1 (#631)
  • Additional commits viewable in compare view

Updates apprise from 1.10.0 to 1.12.0

Release notes

Sourced from apprise's releases.

Release v1.12.0

What's Changed

Apprise now supports more than 150 services! HTML -> Markdown Support now built into Apprise. But otherwise this is just a monthly release bundling all of the bugfixes, enhancments and new services that have accumulated since the last. https://appriseit.com under went a few renovations of it's own; new icons; a much improved and more useful URL Builder and and improved the search functionality on Service List section.

📣 New Notification Services:

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

New Contributors

Installation

Apprise is available on PyPI through pip:

# Install Apprise v1.12.0 from PyPI
pip install apprise==1.12.0

Full Changelog: caronc/apprise@v1.11.0...v1.12.0

... (truncated)

Commits

Updates seleniumbase from 4.48.2 to 4.51.6

Release notes

Sourced from seleniumbase's releases.

4.51.6 - CDP Mode: Patch 124

CDP Mode: Patch 124

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.51.5...v4.51.6

4.51.5 - CDP Mode: Patch 123

CDP Mode: Patch 123

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.51.4...v4.51.5

4.51.4 - CDP Mode: Patch 122

CDP Mode: Patch 122

What's Changed

Full Changelog: seleniumbase/SeleniumBase@v4.51.3...v4.51.4

4.51.3 - CDP Mode: Patch 121

CDP Mode: Patch 121

What's Changed

... (truncated)

Commits

Updates basedpyright from 1.39.5 to 1.39.9

Commits

Updates prek from 0.4.1 to 0.4.10

Release notes

Sourced from prek's releases.

0.4.10

Release Notes

Released on 2026-07-16.

Enhancements

  • Add PHP language support (#2314)
  • Add freeze option to update settings (#2323)
  • Add tag filters to update configuration (#2354)
  • Identify 'mts' and 'cts' as TypeScript files (#2209)
  • Publish Alpine Docker images (#2352)
  • Support builtin and meta in try-repo (#2350)

Bug fixes

  • Fix Python discovery order (#2348)
  • Fix Windows progress rendering (#2328)
  • Preserve configured repo values for updates (#2324)
  • Scope synthetic GIT_WORK_TREE to git commands (#2356)

Documentation

  • Expand common workflows guide (#2351)

Contributors

Install prek 0.4.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.10

... (truncated)

Changelog

Sourced from prek's changelog.

Commits

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or ...

    Description has been truncated

…dates

Bumps the python-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.2` | `6.0.5` |
| [python-socketio](https://github.com/miguelgrinberg/python-socketio) | `5.16.1` | `5.16.3` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.67.3` | `4.69.0` |
| [gevent](https://github.com/gevent/gevent) | `26.5.0` | `26.7.0` |
| [rarfile](https://github.com/markokr/rarfile) | `4.2` | `4.4` |
| [qbittorrent-api](https://github.com/rmartin16/qbittorrent-api) | `2026.5.1` | `2026.7.0` |
| [apprise](https://github.com/caronc/apprise) | `1.10.0` | `1.12.0` |
| [seleniumbase](https://github.com/seleniumbase/SeleniumBase) | `4.48.2` | `4.51.6` |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.5` | `1.39.9` |
| [prek](https://github.com/j178/prek) | `0.4.1` | `0.4.10` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.11` | `0.16.0` |



Updates `flask-cors` from 6.0.2 to 6.0.5
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.2...6.0.5)

Updates `python-socketio` from 5.16.1 to 5.16.3
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.16.1...v5.16.3)

Updates `tqdm` from 4.67.3 to 4.69.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.67.3...v4.69.0)

Updates `gevent` from 26.5.0 to 26.7.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@26.5.0...26.7.0)

Updates `rarfile` from 4.2 to 4.4
- [Release notes](https://github.com/markokr/rarfile/releases)
- [Changelog](https://github.com/markokr/rarfile/blob/master/doc/news.rst)
- [Commits](markokr/rarfile@v4.2...v4.4)

Updates `qbittorrent-api` from 2026.5.1 to 2026.7.0
- [Release notes](https://github.com/rmartin16/qbittorrent-api/releases)
- [Changelog](https://github.com/rmartin16/qbittorrent-api/blob/main/CHANGELOG.md)
- [Commits](rmartin16/qbittorrent-api@v2026.5.1...v2026.7.0)

Updates `apprise` from 1.10.0 to 1.12.0
- [Release notes](https://github.com/caronc/apprise/releases)
- [Commits](caronc/apprise@v1.10.0...v1.12.0)

Updates `seleniumbase` from 4.48.2 to 4.51.6
- [Release notes](https://github.com/seleniumbase/SeleniumBase/releases)
- [Changelog](https://github.com/seleniumbase/SeleniumBase/blob/master/CHANGELOG.md)
- [Commits](seleniumbase/SeleniumBase@v4.48.2...v4.51.6)

Updates `basedpyright` from 1.39.5 to 1.39.9
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.39.5...v1.39.9)

Updates `prek` from 0.4.1 to 0.4.10
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.1...v0.4.10)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `ruff` from 0.15.11 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.11...0.16.0)

---
updated-dependencies:
- dependency-name: flask-cors
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: python-socketio
  dependency-version: 5.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: tqdm
  dependency-version: 4.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: gevent
  dependency-version: 26.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: rarfile
  dependency-version: '4.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: qbittorrent-api
  dependency-version: 2026.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: apprise
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: seleniumbase
  dependency-version: 4.51.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: basedpyright
  dependency-version: 1.39.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: prek
  dependency-version: 0.4.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants