Bump the python-packages group with 8 updates by dependabot[bot] · Pull Request #423 · MTSWebServices/syncmaster

dependabot · 2026-09-17T05:18:26Z

Bumps the python-packages group with 8 updates:

Package	From	To
psycopg2-binary	`2.9.12`	`2.9.13`
alembic	`1.19.2`	`1.20.0`
pyjwt	`2.13.0`	`2.14.0`
coverage	`7.16.0`	`7.16.1`
prek	`0.5.2`	`0.5.3`
ruff	`0.16.6`	`0.16.7`
mkdocs-towncrier	`0.1.5`	`0.1.6`
towncrier	`25.8.0`	`26.9.0`

Updates psycopg2-binary from 2.9.12 to 2.9.13

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.15 (:ticket:[#1848](https://github.com/psycopg/psycopg2/issues/1848)).

Fix parsing of malformed bytea input.

Fix parsing of malformed int64 input in arrays (:ticket:[#1847](https://github.com/psycopg/psycopg2/issues/1847)).

Add a pyproject.toml file to declare a PEP 517 build backend (:ticket:[#1788](https://github.com/psycopg/psycopg2/issues/1788)).

Drop support for Python 3.9.

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8

... (truncated)

Commits

f650e7a chore: bump to release 2.9.13
368c8a1 chore!: drop support for Python 3.9
9b39e65 chore: drop scaleway build support
2ca7041 fix: fix handling of PostgreSQL 18 exceptions
5385c02 Build CPython 3.15 wheels
1d32e1f ci: only attempt triggering documentation refresh when pushing on main repo
433e7b7 chore: add pyproject.toml file to declare a PEP 517 build backend
8fb80bc fix: fix parsing of malformed int64 input in arrays
f98014a fix: fix parsing of malformed bytea input
822b79c chore: bump dependencies in binary package
Additional commits viewable in compare view

Updates alembic from 1.19.2 to 1.20.0

Release notes

Sourced from alembic's releases.

1.20.0

Released: September 11, 2026

usecase

[usecase] [batch] Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any ~sqlalchemy.schema.CheckConstraint in Operations.batch_alter_table.table_args is taken to indicate that the case has been accommodated, and no warning is emitted.

References: #1846

[usecase] [autogenerate] Autogenerate now renders a warning comment above any rendered Operations.drop_constraint() directive for which the constraint name is None, as is the case when a constraint that has no name in the model is dropped, most typically within the downgrade() function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.

References: #916

bug

[bug] [batch] Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with ~sqlalchemy.types.Boolean.create_constraint set to True, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.

References: #1768

[bug] [batch] Fixed bug in batch mode where a CHECK constraint generated by a type such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.

... (truncated)

Commits

See full diff in compare view

Updates pyjwt from 2.13.0 to 2.14.0

Release notes

Sourced from pyjwt's releases.

PyJWT 2.14.0

See the 2.14.0 changelog for the complete release details and related security advisories.

Changelog

Sourced from pyjwt's changelog.

`v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__

Security


- Harden HMAC key validation against public-key material supplied as JWK,
  JWKS, array, encoded, BOM-prefixed, DER, or PEM input. See
  `GHSA-r6x4-923q-g947 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947>`__,
  `GHSA-ffc3-869f-jxw9 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9>`__,
  `GHSA-p4g4-x82p-q773 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773>`__,
  and `GHSA-w2cx-738m-mc7w <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w>`__.
- Reject automatic redirects when ``PyJWKClient`` fetches a JWKS, preventing
  redirected destinations from being treated as trusted key sources. See
  `GHSA-9v7f-9g4p-ffgj <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj>`__.
- Limit repeated JWKS refreshes caused by unknown key IDs while preserving
  normal key-rotation behavior. See
  `GHSA-2gx3-rcp4-g85q <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q>`__.
- Handle deeply nested and malformed JWS/JWK input without uncaught recursion
  errors or whole-set parsing failures. See
  `GHSA-8wjv-2p76-3863 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863>`__
  and `GHSA-w6j9-cwv2-h6wq <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq>`__.
- Enforce compact JWS encoding rules during decoding. See
  `GHSA-hxm8-2xgr-2p9m <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m>`__.
- Reject detached-payload arguments for attached JWS inputs. Thanks to `@xclow3n
  <https://github.com/xclow3n>`__ for reporting this behavior; fixed in commit
  `37b54877 <https://github.com/jpadilla/pyjwt/commit/37b54877bf7bea67e8149130e96929e3ec798122>`__.
Fixed

- Apply HMAC key validation consistently when keys are loaded through
  ``PyJWK`` and ``PyJWKClient``. See
  `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
- Reject empty HMAC keys when represented as JWKs.
  See `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
Fixed



Raise the documented PyJWTError subclass instead of leaking a

TypeError when the exp, nbf, or iat claim decodes to a

non-numeric, non-string value such as a list, dict, or null.

Commits

c6fe464 release: prepare v2.14.0
f541302 style: apply Ruff formatting
801cd12 fix: reject public JWK container HMAC keys
af8181c fix: reject empty HMAC keys from JWKs
ba4853a Throttle repeated PyJWKClient refreshes
2798504 fix: reject DER public keys as HMAC secrets
8b4e233 fix: reject loader-accepted PEM variants
1f8180a fix: format JWS tests
cff1ac5 Fix redirect handler return annotation
0a795b8 Reject redirects in PyJWKClient fetches
Additional commits viewable in compare view

Updates coverage from 7.16.0 to 7.16.1

Release notes

Sourced from coverage's releases.

7.16.1

Version 7.16.1 — 2026-09-13

Fix: when the body of an irrefutable case (like case _:) is entirely excluded, the case line is now excluded too, just as an excluded else: body removes the else: line. Previously the case line was left behind and reported as missing. Closes issue 1563 with pull 2269.

Fix: using CoverageData.update() twice on an in-memory database would fail, as described in issue 2279. This is now fixed.

➡️ PyPI page: coverage 7.16.1. :arrow_right: To install: python3 -m pip install coverage==7.16.1

Changelog

Sourced from coverage's changelog.

Version 7.16.1 — 2026-09-13

Fix: when the body of an irrefutable case (like case _:) is entirely excluded, the case line is now excluded too, just as an excluded else: body removes the else: line. Previously the case line was left behind and reported as missing. Closes issue 1563_ with pull 2269_.

Fix: using :meth:.CoverageData.update twice on an in-memory database would fail, as described in issue 2279_. This is now fixed.

.. _issue 1563: coveragepy/coveragepy#1563 .. _pull 2269: coveragepy/coveragepy#2269 .. _issue 2279: coveragepy/coveragepy#2279

.. _changes_7-16-0:

Commits

ccbb992 docs: prep for 7.16.1
0697ccc chore: make upgrade
12f3595 chore: bump docker/setup-qemu-action in the action-dependencies group (#2280)
35b58d3 fix: CoverageData.update() can be called twice on an in-memory database. #2279
92e1ce9 chore: bump the action-dependencies group with 4 updates (#2278)
bf07310 build: quote var expansion (actionlint SC2086)
3c434f5 quality: use shellcheck-py to get shellcheck in GitHub CI
632f397 build: use .txt instead of .pip, even though it's a stupid extension
ffc6a4a test: only run diff-cover on pull requests
33553b3 fix: exclude the case line when an irrefutable case body is excluded (#2269)
Additional commits viewable in compare view

Updates prek from 0.5.2 to 0.5.3

Release notes

Sourced from prek's releases.

0.5.3

Release Notes

Released on 2026-09-13.

Enhancements

Add PEP 740 attestations for PyPI releases (#2705)

Add a check-jsonc builtin hook (#2682)

Allow disabling automatic uv installation (#2702)

Bug fixes

Fix Julia additional dependency specifiers (#2703)

Update granit-parser to fix YAML flow indentation (#2707)

Contributors

@clbarnes

@j178

@tisonkun

Install prek 0.5.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.5.3

File Platform Checksum

prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

prek-x86_64-apple-darwin.tar.gz Intel macOS checksum

prek-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

prek-x86_64-pc-windows-msvc.zip x64 Windows checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.3

Released on 2026-09-13.

Enhancements

Add PEP 740 attestations for PyPI releases (#2705)

Add a check-jsonc builtin hook (#2682)

Allow disabling automatic uv installation (#2702)

Bug fixes

Fix Julia additional dependency specifiers (#2703)

Update granit-parser to fix YAML flow indentation (#2707)

Contributors

@clbarnes

@j178

@tisonkun

Commits

b7eb602 Bump version to 0.5.3 (#2708)
4644f81 Update granit-parser to fix YAML flow indentation (#2707)
87f2ea4 Use self-repository syntax in CI workflows
f39abae Add PEP 740 attestations for PyPI releases (#2705)
f4924dc Allow disabling automatic uv installation (#2702)
156c0ce Fix Julia additional dependency specifiers (#2703)
c3ede77 Add a check-jsonc builtin hook (#2682)
c0b9749 Verify checksums for PyPI/mirror wheel installs (#2688)
fbe5c66 Update prek hooks (#2690)
4687a2c Fix check-hooks-apply for builtin Windows filename checks
Additional commits viewable in compare view

Updates ruff from 0.16.6 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

@nightt5879

... (truncated)

Commits

b5dba86 Bump version to 0.16.7 (#28496)
5992d05 Install rustfmt before linting releases (#28495)
1713a1f ensure prepare release changes pass prek (#28488)
18cdbb4 use scoped token for release workflow (#28484)
c3813a5 add a workflow for preparing releases (#28486)
00948c0 Remove the "Who’s Using Ruff?" list (#28455)
86a2eba [pyupgrade] Stop recommending removed typing.no_type_check_decorator (`UP...
609e184 Stop defining __cached__ for Python 3.15 (#28476)
859ff2f [ty] Track symlinked directory status in listings (#28482)
77f6538 Use paid GitHub-hosted runners for Linux (#28478)
Additional commits viewable in compare view

Updates mkdocs-towncrier from 0.1.5 to 0.1.6

Release notes

Sourced from mkdocs-towncrier's releases.

0.1.6

What's Changed

Bump actions/checkout from 4 to 5 by @dependabot[bot] in davfsa/mkdocs-towncrier#3

Bump actions/setup-python from 5 to 6 by @dependabot[bot] in davfsa/mkdocs-towncrier#4

fix typo on readme installation by @dunossauro in davfsa/mkdocs-towncrier#5

Bump actions/checkout from 5 to 6 by @dependabot[bot] in davfsa/mkdocs-towncrier#6

Bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in davfsa/mkdocs-towncrier#7

Update towncrier requirement from <26.0.0,>=24.7.0 to >=24.7.0,<27.0.0 by @dependabot[bot] in davfsa/mkdocs-towncrier#10

Bump actions/setup-python from 6 to 7 by @dependabot[bot] in davfsa/mkdocs-towncrier#9

Bump actions/checkout from 6 to 7 by @dependabot[bot] in davfsa/mkdocs-towncrier#8

chore: bump version to 0.1.6 by @davfsa in davfsa/mkdocs-towncrier#11

New Contributors

@dunossauro made their first contribution in davfsa/mkdocs-towncrier#5

Full Changelog: davfsa/mkdocs-towncrier@0.1.5...0.1.6

Commits

0fd9b17 chore: bump version to 0.1.6 (#11)
76bcf99 Bump actions/checkout from 6 to 7 (#8)
4af254e Bump actions/setup-python from 6 to 7 (#9)
f482dab Update towncrier requirement from <26.0.0,>=24.7.0 to >=24.7.0,<27.0.0 (#10)
c311bed Bump softprops/action-gh-release from 2 to 3 (#7)
aee1fa8 Bump actions/checkout from 5 to 6 (#6)
d805d41 fix typo on readme installation (#5)
a9217d9 Bump actions/setup-python from 5 to 6 (#4)
d884535 Bump actions/checkout from 4 to 5 (#3)
See full diff in compare view

Updates towncrier from 25.8.0 to 26.9.0

Release notes

Sourced from towncrier's releases.

Towncrier 26.9.0

Features

towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)

Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)

The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

[#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_

Towncrier 26.9.0rc1

Features

towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)

Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)

The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

[#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_

Changelog

Sourced from towncrier's changelog.

towncrier 26.9.0 (2026-09-04)

No significant changes since the previous release candidate.

Features

towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)

Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)

The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

[#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_

Commits

12e95a9 Prepare final release.
7f5ef06 Initial commit.
1598380 #746 Reproducible build source date epoch (#749)
b2df9f8 Merge branch 'trunk' into 746-reproducible-build-source-date-epoch
dc07055 Update release for single line.
1e46459 docs: Clarify the defaults for build timestamp values.
803dbc5 Specify the precedence order for computing the build date.
434bf70 Show an example of 'SOURCE_DATE_EPOCH' in the Tutorial.
48f8b3d Document the 'SOURCE_DATE_EPOCH' behaviour for towncrier build.
9f899f5 Document the user-facing change in a Towncrier news fragment.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 8 updates: | Package | From | To | | --- | --- | --- | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.12` | `2.9.13` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.19.2` | `1.20.0` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.13.0` | `2.14.0` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.16.0` | `7.16.1` | | [prek](https://github.com/j178/prek) | `0.5.2` | `0.5.3` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.6` | `0.16.7` | | [mkdocs-towncrier](https://github.com/davfsa/mkdocs-towncrier) | `0.1.5` | `0.1.6` | | [towncrier](https://github.com/twisted/towncrier) | `25.8.0` | `26.9.0` | Updates `psycopg2-binary` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `alembic` from 1.19.2 to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `pyjwt` from 2.13.0 to 2.14.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.13.0...2.14.0) Updates `coverage` from 7.16.0 to 7.16.1 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.16.0...7.16.1) Updates `prek` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/j178/prek/releases) - [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md) - [Commits](j178/prek@v0.5.2...v0.5.3) Updates `ruff` from 0.16.6 to 0.16.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.6...0.16.7) Updates `mkdocs-towncrier` from 0.1.5 to 0.1.6 - [Release notes](https://github.com/davfsa/mkdocs-towncrier/releases) - [Commits](davfsa/mkdocs-towncrier@0.1.5...0.1.6) Updates `towncrier` from 25.8.0 to 26.9.0 - [Release notes](https://github.com/twisted/towncrier/releases) - [Changelog](https://github.com/twisted/towncrier/blob/trunk/NEWS.rst) - [Commits](twisted/towncrier@25.8.0...26.9.0) --- updated-dependencies: - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pyjwt dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: coverage dependency-version: 7.16.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: prek dependency-version: 0.5.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: mkdocs-towncrier dependency-version: 0.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: towncrier dependency-version: 26.9.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-17T05:29:49Z

Coverage Report •

File	Stmts	Miss	Branch	BrPart	Cover	Missing
TOTAL	5403	659	838	177	87%

report-only-changed-files is enabled. No changed files were found in the coverage report :)

dependabot Bot added the type:dependency Dependency-related changes label Sep 17, 2026

MTSOnGithub enabled auto-merge (rebase) September 17, 2026 05:19

MTSOnGithub approved these changes Sep 17, 2026

View reviewed changes

MTSOnGithub merged commit ee5acaa into develop Sep 17, 2026
25 of 26 checks passed

MTSOnGithub deleted the dependabot/uv/python-packages-cd8e20cc2c branch September 17, 2026 05:29

Navigation Menu

Bump the python-packages group with 8 updates - #423

Bump the python-packages group with 8 updates#423
MTSOnGithub merged 1 commit into
developfrom
dependabot/uv/python-packages-cd8e20cc2c

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Uh oh!

github-actions Bot commented Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
prek-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
prek-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
prek-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
prek-x86_64-pc-windows-msvc.zip	x64 Windows	checksum

Conversation

dependabot Bot commented on behalf of github Sep 17, 2026

Current release

1.20.0

usecase

bug

PyJWT 2.14.0

v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>__

7.16.1

Version 7.16.1 — 2026-09-13

Version 7.16.1 — 2026-09-13

0.5.3

Release Notes

Enhancements

Bug fixes

Contributors

Install prek 0.5.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Install prebuilt binaries via Homebrew

Download prek 0.5.3

0.5.3

Enhancements

Bug fixes

Contributors

0.16.7

Release Notes

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

0.16.7

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

0.1.6

What's Changed

New Contributors

Towncrier 26.9.0

Features

Bugfixes

Misc

Towncrier 26.9.0rc1

Features

Bugfixes

Misc

towncrier 26.9.0 (2026-09-04)

Features

Bugfixes

Misc

Uh oh!

Uh oh!

github-actions Bot commented Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__