Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Oct 20, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot added 3 commits October 20, 2025 11:13
Bumps [iniconfig](https://github.com/pytest-dev/iniconfig) from 2.1.0 to
2.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pytest-dev/iniconfig/releases">iniconfig's
releases</a>.</em></p>
<blockquote>
<h2>Version 2.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add IniConfig.parse() with inline comment stripping and Unicode
whitespace handling by <a
href="https://github.com/RonnyPfannschmidt"><code>@​RonnyPfannschmidt</code></a>
in <a
href="https://github.com/pytest-dev/iniconfig/pull/70">pytest-dev/iniconfig#70</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pytest-dev/iniconfig/compare/v2.2.0...v2.3.0">https://github.com/pytest-dev/iniconfig/compare/v2.2.0...v2.3.0</a></p>
<h2>Version 2.2.0</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG">iniconfig's
changelog</a>.</em></p>
<blockquote>
<h1>2.3.0</h1>
<ul>
<li>add IniConfig.parse() classmethod with strip_inline_comments
parameter (fixes <a
href="https://github.com/pytest-dev/iniconfig/issues/55">#55</a>)
<ul>
<li>by default (strip_inline_comments=True), inline comments are
properly stripped from values</li>
<li>set strip_inline_comments=False to preserve old behavior if
needed</li>
</ul>
</li>
<li>IniConfig() constructor maintains backward compatibility (does not
strip inline comments)</li>
<li>users should migrate to IniConfig.parse() for correct comment
handling</li>
<li>add strip_section_whitespace parameter to IniConfig.parse()
(regarding <a
href="https://github.com/pytest-dev/iniconfig/issues/4">#4</a>)
<ul>
<li>opt-in parameter to strip Unicode whitespace from section names</li>
<li>when True, strips Unicode whitespace (U+00A0, U+2000, U+3000, etc.)
from section names</li>
<li>when False (default), preserves existing behavior for backward
compatibility</li>
</ul>
</li>
<li>clarify Unicode whitespace handling (regarding <a
href="https://github.com/pytest-dev/iniconfig/issues/4">#4</a>)
<ul>
<li>since iniconfig 2.0.0 (Python 3 only), all strings are Unicode by
default</li>
<li>Python 3's str.strip() has handled Unicode whitespace since Python
3.0 (2008)</li>
<li>iniconfig automatically benefits from this in all supported versions
(Python &gt;= 3.10)</li>
<li>key names and values have Unicode whitespace properly stripped using
Python's built-in methods</li>
</ul>
</li>
</ul>
<h1>2.2.0</h1>
<ul>
<li>drop Python 3.8 and 3.9 support (now requires Python &gt;=
3.10)</li>
<li>add Python 3.14 classifier</li>
<li>migrate from hatchling to setuptools 77 with setuptools_scm</li>
<li>adopt PEP 639 license specifiers and PEP 740 build attestations</li>
<li>migrate from black + pyupgrade to ruff</li>
<li>migrate CI to uv and unified test workflow</li>
<li>automate GitHub releases and PyPI publishing via Trusted
Publishing</li>
<li>include tests in sdist</li>
<li>modernize code for Python 3.10+ (remove <strong>future</strong>
annotations, TYPE_CHECKING guards)</li>
<li>rename _ParsedLine to ParsedLine</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/7faed13ae50bad7c5da3f5782f254a8a7736bb84"><code>7faed13</code></a>
Merge pull request <a
href="https://github.com/pytest-dev/iniconfig/issues/70">#70</a>
from RonnyPfannschmidt/comments</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/58c08691bbb86aee8efbf73e37293dd6d65b68b4"><code>58c0869</code></a>
Refactor: Simplify IniConfig constructor and parse() method</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/6d0af4529e4375e49dc871aa3d5ce17fe1791afe"><code>6d0af45</code></a>
Add strip_section_whitespace parameter to address issue <a
href="https://github.com/pytest-dev/iniconfig/issues/4">#4</a></li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/e2d89f5283cbeb4b4ca55fe88b1c353c343b4972"><code>e2d89f5</code></a>
Add IniConfig.parse() classmethod to fix inline comment handling</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/57b7ed9c7a5950f9c57b2cfbe641ff4cc04baf1c"><code>57b7ed9</code></a>
Merge pull request <a
href="https://github.com/pytest-dev/iniconfig/issues/66">#66</a>
from killiandesse/pep639</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/27ac49f56794db397ecb017414663a81e701dfdc"><code>27ac49f</code></a>
Merge pull request <a
href="https://github.com/pytest-dev/iniconfig/issues/69">#69</a>
from RonnyPfannschmidt/limit-attestation</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/3402322097aa7b6eba9a68c96faddc780e04b085"><code>3402322</code></a>
Disable build attestations for PRs from forks</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/27e6a7b4a7b24f7f8a5e5492b071ab16eff36f95"><code>27e6a7b</code></a>
Merge branch 'main' into pep639</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/65228817674f099d48cab0f0974000ea0e3031c1"><code>6522881</code></a>
Merge pull request <a
href="https://github.com/pytest-dev/iniconfig/issues/68">#68</a>
from pytest-dev/fix-build</li>
<li><a
href="https://github.com/pytest-dev/iniconfig/commit/8b2bccb3b6be37c9bf70a4fbe0cda4c92c70355f"><code>8b2bccb</code></a>
Update CHANGELOG and automate releases</li>
<li>Additional commits viewable in <a
href="https://github.com/pytest-dev/iniconfig/compare/v2.1.0...v2.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=iniconfig&package-manager=pip&previous-version=2.1.0&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cython](https://github.com/cython/cython) from 3.1.4 to 3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cython/cython/releases">cython's
releases</a>.</em></p>
<blockquote>
<h1>3.1.5 (2025-10-19)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>Conversion from C++ strings longer than <code>PY_SSIZE_T_MAX</code>
did not validate the length.</p>
</li>
<li>
<p>Some non-Limited API code was incorrectly used in generated header
files.
(Github issue :issue:<code>7157</code>)</p>
</li>
<li>
<p>Optimised unpacking of Python integers in expressions uses a slightly
safer scheme.
(Github issue :issue:<code>7134</code>)</p>
</li>
<li>
<p>Empty return statements were not always reported when tracing.
(Github issue :issue:<code>7022</code>)</p>
</li>
<li>
<p>Value conversion errors when tracing C return statements no longer
fail the trace
but fall back to reporting <code>None</code> returns instead.
(Github issue :issue:<code>6503</code>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cython/cython/blob/master/CHANGES.rst">cython's
changelog</a>.</em></p>
<blockquote>
<h1>3.1.5 (2025-10-20)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>Conversion from C++ strings longer than <code>PY_SSIZE_T_MAX</code>
did not validate the length.</p>
</li>
<li>
<p>Some non-Limited API code was incorrectly used in generated header
files.
(Github issue :issue:<code>7157</code>)</p>
</li>
<li>
<p>Optimised unpacking of Python integers in expressions uses a slightly
safer scheme.
(Github issue :issue:<code>7134</code>)</p>
</li>
<li>
<p>Empty return statements were not always reported when tracing.
(Github issue :issue:<code>7022</code>)</p>
</li>
<li>
<p>Value conversion errors when tracing C return statements no longer
fail the trace
but fall back to reporting <code>None</code> returns instead.
(Github issue :issue:<code>6503</code>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cython/cython/commit/24eb0d558efe0a92ba87bb7ebed45c14ed4a713e"><code>24eb0d5</code></a>
Build: Move release step to separate job to enforce complete releases
and cut...</li>
<li><a
href="https://github.com/cython/cython/commit/2dc58ee83b604fd1d66093026501fc23620c839f"><code>2dc58ee</code></a>
Update changelog.</li>
<li><a
href="https://github.com/cython/cython/commit/5f1fa053f1e77b9eb7c5eaf84a46926fd1f5d072"><code>5f1fa05</code></a>
Fix CI for Python 3.14.0 (<a
href="https://github.com/cython/cython/issues/7197">GH-7197</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/acc3d7c7d88d9fa49e19661121e3ea6fcd4bb356"><code>acc3d7c</code></a>
Adapt some tests to different error messages in Py3.15.</li>
<li><a
href="https://github.com/cython/cython/commit/9143822ee7a24dd336b805e98771c0bcfc1e8590"><code>9143822</code></a>
Replace outdated &quot;codecs.open()&quot; usage with just
&quot;open()&quot;.</li>
<li><a
href="https://github.com/cython/cython/commit/bbe48384586be9c4becda826d8ae8de781fa5d53"><code>bbe4838</code></a>
Prepare release of 3.1.5.</li>
<li><a
href="https://github.com/cython/cython/commit/3bc285ddf68023ac25c542c421ff09171cf88146"><code>3bc285d</code></a>
Upgrade cibuildwheel to latest 3.2.1.</li>
<li><a
href="https://github.com/cython/cython/commit/729dd6c80ed3a0512081c66438699d8245ea87c8"><code>729dd6c</code></a>
Update changelog.</li>
<li><a
href="https://github.com/cython/cython/commit/c4da583e3aef95ebcd4cd0f761d8520413c67c14"><code>c4da583</code></a>
Allow TraceReturnCValue conversion to fail in non-monitoring (<a
href="https://github.com/cython/cython/issues/7064">#7064</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/dd664381c39579b49c81592e3887cce216b40266"><code>dd66438</code></a>
Fix tracing of empty return statements (<a
href="https://github.com/cython/cython/issues/7067">GH-7067</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cython/cython/compare/3.1.4...3.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cython&package-manager=pip&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.12.2 to
2.12.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pydantic/pydantic/releases">pydantic's
releases</a>.</em></p>
<blockquote>
<h2>v2.12.3 2025-10-17</h2>
<h2>v2.12.3 (2025-10-17)</h2>
<h3>What's Changed</h3>
<p>This is the third 2.13 patch release, fixing issues related to the
<code>FieldInfo</code> class, and reverting a change to the supported <a
href="https://docs.pydantic.dev/latest/concepts/validators/#model-validators"><em>after</em>
model validator</a> function signatures.</p>
<ul>
<li>Raise a warning when an invalid after model validator function
signature is raised by <a
href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a
href="https://github.com/pydantic/pydantic/pull/12414">#12414</a>.
Starting in 2.12.0, using class methods for <em>after</em> model
validators raised an error, but the error wasn't raised concistently. We
decided to emit a deprecation warning instead.</li>
<li>Add <a
href="https://docs.pydantic.dev/latest/api/fields/#pydantic.fields.FieldInfo.asdict"><code>FieldInfo.asdict()</code></a>
method, improve documentation around <code>FieldInfo</code> by <a
href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a
href="https://github.com/pydantic/pydantic/pull/12411">#12411</a>.
This also adds back support for mutations on <code>FieldInfo</code>
classes, that are reused as <code>Annotated</code> metadata.
<strong>However</strong>, note that this is still <em>not</em> a
supported pattern. Instead, please refer to the <a
href="https://docs.pydantic.dev/latest/examples/dynamic_models/">added
example</a> in the documentation.</li>
</ul>
<p>The <a
href="https://pydantic.dev/articles/pydantic-v2-12-release#changes">blog
post</a> section on changes was also updated to document the changes
related to <code>serialize_as_any</code>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pydantic/pydantic/compare/v2.12.2...v2.12.3">https://github.com/pydantic/pydantic/compare/v2.12.2...v2.12.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pydantic/pydantic/blob/main/HISTORY.md">pydantic's
changelog</a>.</em></p>
<blockquote>
<h2>v2.12.3 (2025-10-17)</h2>
<p><a
href="https://github.com/pydantic/pydantic/releases/tag/v2.12.3">GitHub
release</a></p>
<h3>What's Changed</h3>
<p>This is the third 2.13 patch release, fixing issues related to the
<code>FieldInfo</code> class, and reverting a change to the supported
<a
href="https://docs.pydantic.dev/latest/concepts/validators/#model-validators"><em>after</em>
model validator</a> function signatures.</p>
<ul>
<li>Raise a warning when an invalid after model validator function
signature is raised by <a
href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a
href="https://github.com/pydantic/pydantic/pull/12414">#12414</a>.
Starting in 2.12.0, using class methods for <em>after</em> model
validators raised an error, but the error wasn't raised concistently. We
decided
to emit a deprecation warning instead.</li>
<li>Add <a
href="https://docs.pydantic.dev/latest/api/fields/#pydantic.fields.FieldInfo.asdict"><code>FieldInfo.asdict()</code></a>
method, improve documentation around <code>FieldInfo</code> by <a
href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a
href="https://github.com/pydantic/pydantic/pull/12411">#12411</a>.
This also add back support for mutations on <code>FieldInfo</code>
classes, that are reused as <code>Annotated</code> metadata.
<strong>However</strong>, note that this is still
<em>not</em> a supported pattern. Instead, please refer to the <a
href="https://docs.pydantic.dev/latest/examples/dynamic_models/">added
example</a> in the documentation.</li>
</ul>
<p>The <a
href="https://pydantic.dev/articles/pydantic-v2-12-release#changes">blog
post</a> section on changes was also updated to document the changes
related to <code>serialize_as_any</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pydantic/pydantic/commit/1a8850d101e67d2744ba8c6286e1172d7cd89d0b"><code>1a8850d</code></a>
Prepare release 2.12.3</li>
<li><a
href="https://github.com/pydantic/pydantic/commit/09dbcf29c73c3fd7fd3ef1edfebe357e807cc9ca"><code>09dbcf2</code></a>
Add <code>FieldInfo.asdict()</code> method, improve documentation around
<code>FieldInfo</code></li>
<li><a
href="https://github.com/pydantic/pydantic/commit/5da43310ec61a7b9b3017b2b9f388e778398a1bc"><code>5da4331</code></a>
Improve documentation about serialize as any behavior</li>
<li><a
href="https://github.com/pydantic/pydantic/commit/9c863245ad3799ab331f33b52e2d7441e9c1191e"><code>9c86324</code></a>
Raise a warning when an invalid after model validator function signature
is r...</li>
<li><a
href="https://github.com/pydantic/pydantic/commit/36a73c6ed53df7f1cad3343bc811e1dd3f52d26f"><code>36a73c6</code></a>
Update <code>pydantic-extra-types</code> dependency to version
<code>&gt;=2.10.6</code></li>
<li>See full diff in <a
href="https://github.com/pydantic/pydantic/compare/v2.12.2...v2.12.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic&package-manager=pip&previous-version=2.12.2&new-version=2.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Oct 20, 2025
@pull pull bot added the ⤵️ pull label Oct 20, 2025
@pull pull bot merged commit 0a840da into sysfce2:master Oct 20, 2025
4 of 5 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants