Bump the python-packages group with 8 updates #41

dependabot · 2025-05-01T22:20:20Z

Bumps the python-packages group with 8 updates:

Package	From	To
certifi	`2025.1.31`	`2025.4.26`
google-auth	`2.38.0`	`2.39.0`
jsonschema-specifications	`2024.10.1`	`2025.4.1`
mitogen	`0.3.22`	`0.3.23`
mypy-extensions	`1.0.0`	`1.1.0`
packaging	`24.2`	`25.0`
rsa	`4.9`	`4.9.1`
urllib3	`2.3.0`	`2.4.0`

Updates certifi from 2025.1.31 to 2025.4.26

Commits

275c9eb 2025.04.26 (#347)
3788331 Bump actions/setup-python from 5.4.0 to 5.5.0 (#346)
9d1f1b7 Bump actions/download-artifact from 4.1.9 to 4.2.1 (#344)
96b97a5 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#343)
c054ed3 Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#342)
44547fc Bump actions/download-artifact from 4.1.8 to 4.1.9 (#341)
5ea5124 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#340)
2f142b7 Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#339)
80d2ebd Bump actions/setup-python from 5.3.0 to 5.4.0 (#337)
See full diff in compare view

Updates google-auth from 2.38.0 to 2.39.0

Release notes

Sourced from google-auth's releases.

v2.39.0

2.39.0 (2025-04-14)

Features

Adds GA support for X.509 workload identity federation (#1695) (7495960)

Bug Fixes

Add impersonated SA via local ADC support for fetch_id_token (#1740) (f249764)

Add missing packaging dependency for feature requiring urllib3 (#1732) (221f4a8)

Add request timeout for MDS requests (#1699) (9f7d3fa)

Explicitly declare support for Python 3.13 (#1741) (6fd04d5)

Changelog

Sourced from google-auth's changelog.

2.39.0 (2025-04-14)

Features

Adds GA support for X.509 workload identity federation (#1695) (7495960)

Bug Fixes

Add impersonated SA via local ADC support for fetch_id_token (#1740) (f249764)

Add missing packaging dependency for feature requiring urllib3 (#1732) (221f4a8)

Add request timeout for MDS requests (#1699) (9f7d3fa)

Explicitly declare support for Python 3.13 (#1741) (6fd04d5)

Commits

ee1c7d3 chore(main): release 2.39.0 (#1705)
f1ef5d4 chore: update secret for tests (#1749)
f249764 fix: add impersonated SA via local ADC support for fetch_id_token (#1740)
6fd04d5 fix: explicitly declare support for Python 3.13 (#1741)
83d2e0f chore: Allow googleapis-auth and aion-sdk to approve samples/ (#1746)
f89188a chore(python): update templated files (#1709)
a8f806e chore: add testing requirements extra (#1707)
59e0b38 chore: update secret for tests (#1742)
221f4a8 fix: add missing packaging dependency for feature requiring urllib3 (#1732)
9f7d3fa fix: add request timeout for MDS requests (#1699)
Additional commits viewable in compare view

Updates jsonschema-specifications from 2024.10.1 to 2025.4.1

Release notes

Sourced from jsonschema-specifications's releases.

v2025.4.1

What's Changed

Add SPDX license identifier by @cdce8p in python-jsonschema/jsonschema-specifications#93

New Contributors

@cdce8p made their first contribution in python-jsonschema/jsonschema-specifications#93

Full Changelog: python-jsonschema/jsonschema-specifications@v2024.10.1...v2025.4.1

Commits

e3b0c79 Merge pull request #92 from python-jsonschema/pre-commit-ci-update-config
7baf069 Merge pull request #93 from cdce8p/main
de30014 Add SPDX license identifier
26b9687 [pre-commit.ci] pre-commit autoupdate
a8d179a Merge pull request #91 from python-jsonschema/pre-commit-ci-update-config
9d19c46 [pre-commit.ci] pre-commit autoupdate
865ee26 Merge pull request #90 from python-jsonschema/pre-commit-ci-update-config
89e5dbe [pre-commit.ci] pre-commit autoupdate
4f5a550 Merge pull request #89 from python-jsonschema/pre-commit-ci-update-config
9289b54 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates mitogen from 0.3.22 to 0.3.23

Release notes

Sourced from mitogen's releases.

v0.3.23

What's Changed

mitogen: cfmakeraw() cleanups by @moreati in mitogen-hq/mitogen#1244

packaging: Avoid ast module, requires Python = 2.6 by @moreati in mitogen-hq/mitogen#1245

CI: Test user creation tidy up by @moreati in mitogen-hq/mitogen#1246

CI: ci_lib cleanup by @moreati in mitogen-hq/mitogen#1247

CI: Mark and use 2021 test containers by @moreati in mitogen-hq/mitogen#1252

CI: Upgrade Linux runner to Ubuntu 22.04 & 24.04 by @moreati in mitogen-hq/mitogen#1257

packaging: Fix InvalidVersion in release versions

Full Changelog: mitogen-hq/mitogen@v0.3.22...v0.3.23

Changelog

Sourced from mitogen's changelog.

v0.3.23 (2025-04-28)

:gh:issue:1121 :mod:mitogen: Log skipped :py:mod:termios attributes

:gh:issue:1238 packaging: Avoid :py:mod:ast, requires Python = 2.6

:gh:issue:1118 CI: Statically specify test usernames and group names

:gh:issue:1118 CI: Don't copy SSH private key to temporary dir

:gh:issue:1118 CI: Don't share temporary directory between test groupings

:gh:issue:1256 CI: Upgrade Github jobs from Ubuntu 20.04 to 22.04 & 24.04

:gh:issue:1263 packaging: Fix InvalidVersion in release versions

Commits

0eb7ee2 Merge pull request #1262 from moreati/release-v0.3.24
9e02175 Merge commit '8e25944' into release-v0.3.24
8e25944 Prepare v0.3.23
4a75648 packaging: Fix InvalidVersion in release versions
fa28024 Merge pull request #1257 from moreati/issue1256
27b4b77 CI: Upgrade Github jobs from Ubuntu 20.04 to 22.04 & 24.04
1f73756 ci: Remove vestigial Python 2.7 support in macOS Github jobs
9b17f28 ci: Label Github jobs by OS/distribution & Tox environment
b130cd9 Merge pull request #1252 from moreati/issue1118-update-containers
fdbd1a8 ci: Configure package managers using a role
Additional commits viewable in compare view

Updates mypy-extensions from 1.0.0 to 1.1.0

Commits

70d9435 remove dev from version
8d272bb Switch build-backend to flit_core + use License-Expression for project metada...
1b46102 Bump dev version to 1.1.0-dev (#57)
400534f Deprecate mypy_extensions.NoReturn (#56)
23fbfa5 Update flake8 to 7.1.1 (#54)
9ddbb08 Cleanup tests (#55)
6d9c7b7 Move metadata to pyproject + drop Python 3.7 (#53)
812066c [pre-commit.ci] pre-commit autoupdate (#49)
9dd6d98 Add support for Python 3.12 (#48)
e0c6670 Deprecate mypy_extensions.TypedDict (#47)
Additional commits viewable in compare view

Updates packaging from 24.2 to 25.0

Release notes

Sourced from packaging's releases.

25.0

What's Changed

Re-add a test for Unicode file name parsing by @Siddhesh-Agarwal in pypa/packaging#863

Upgrade to ruff 0.9.1 by @DimitriPapadopoulos in pypa/packaging#865

Add support for PEP 738 Android tags by @mhsmith in pypa/packaging#880

feat(markers): support 'extras' and 'dependency_groups' markers by @frostming in pypa/packaging#888

New Contributors

@Siddhesh-Agarwal made their first contribution in pypa/packaging#863

@mhsmith made their first contribution in pypa/packaging#880

@frostming made their first contribution in pypa/packaging#888

Full Changelog: pypa/packaging@24.2...25.0

Changelog

Sourced from packaging's changelog.

25.0 - 2025-04-19


* PEP 751: Add support for ``extras`` and ``dependency_groups`` markers. (:issue:`885`)
* PEP 738: Add support for Android platform tags. (:issue:`880`)

Commits

f585376 Bump for release
600ecea Add changelog entries
3910129 support 'extras' and 'dependency_groups' markers (#888)
8e49b43 Add support for PEP 738 Android tags (#880)
e624d8e Bump the github-actions group with 3 updates (#886)
71f38d8 Bump the github-actions group with 2 updates (#878)
9b4922d Bump the github-actions group with 3 updates (#870)
8510bd9 Upgrade to ruff 0.9.1 (#865)
9375ec2 Re-add tests for Unicode file name parsing (#863)
2256ed4 Bump the github-actions group across 1 directory with 2 updates (#864)
Additional commits viewable in compare view

Updates rsa from 4.9 to 4.9.1

Changelog

Sourced from rsa's changelog.

Python-RSA changelog

Version 4.10 - in development

Drop support for Python 3.6 (#209) and declare support for 3.11 (#208).

Upgrade pytest dependency to fix a security issue.

Upgrade pytest-cov as well, for good measure.

Upgrade MyPy (#211).

Commits

See full diff in compare view

Updates urllib3 from 2.3.0 to 2.4.0

Release notes

Sourced from urllib3's releases.

2.4.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522)

Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567)

Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571)

Bugfixes

Fixed a bug with partial reads of streaming data in Emscripten. (#3555)

Misc

Switched to uv for installing development dependecies. (#3550)

Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566)

Changelog

Sourced from urllib3's changelog.

2.4.0 (2025-04-10)

Features

Applied PEP 639 by specifying the license fields in pyproject.toml. ([#3522](https://github.com/urllib3/urllib3/issues/3522) <https://github.com/urllib3/urllib3/issues/3522>__)

Updated exceptions to save and restore more properties during the pickle/serialization process. ([#3567](https://github.com/urllib3/urllib3/issues/3567) <https://github.com/urllib3/urllib3/issues/3567>__)

Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. ([#3571](https://github.com/urllib3/urllib3/issues/3571) <https://github.com/urllib3/urllib3/issues/3571>__)

Bugfixes

Fixed a bug with partial reads of streaming data in Emscripten. ([#3555](https://github.com/urllib3/urllib3/issues/3555) <https://github.com/urllib3/urllib3/issues/3555>__)

Misc

Switched to uv for installing development dependecies. ([#3550](https://github.com/urllib3/urllib3/issues/3550) <https://github.com/urllib3/urllib3/issues/3550>__)

Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. ([#3566](https://github.com/urllib3/urllib3/issues/3566) <https://github.com/urllib3/urllib3/issues/3566>__)

Commits

a5ff7ac Release 2.4.0
a135db2 Upgrade memray and coverage to fix macOS tests (#3589)
8f40e71 Upgrade the publishing action to get correct licensing info on PyPI (#3585)
3ff4e49 Add a link to the 2024 annual report (#3586)
75709c1 Set verify flags in create_urllib3_context (#3577)
5c8f82a Bump astral-sh/setup-uv from 5.3.0 to 5.4.1 (#3580)
42e90d8 Bump actions/setup-python from 5.4.0 to 5.5.0 (#3579)
3e8f2db Stop using Ubuntu 20.04 and 22.04 in CI (#3570)
e29db82 Update exceptions to have more of their attributes pickled (#3572)
f8a0c43 Add PyPy 3.11 to CI
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 8 updates: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.4.26` | | [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.38.0` | `2.39.0` | | [jsonschema-specifications](https://github.com/python-jsonschema/jsonschema-specifications) | `2024.10.1` | `2025.4.1` | | [mitogen](https://github.com/mitogen-hq/mitogen) | `0.3.22` | `0.3.23` | | [mypy-extensions](https://github.com/python/mypy_extensions) | `1.0.0` | `1.1.0` | | [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` | | [rsa](https://github.com/sybrenstuvel/python-rsa) | `4.9` | `4.9.1` | | [urllib3](https://github.com/urllib3/urllib3) | `2.3.0` | `2.4.0` | Updates `certifi` from 2025.1.31 to 2025.4.26 - [Commits](certifi/python-certifi@2025.01.31...2025.04.26) Updates `google-auth` from 2.38.0 to 2.39.0 - [Release notes](https://github.com/googleapis/google-auth-library-python/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python@v2.38.0...v2.39.0) Updates `jsonschema-specifications` from 2024.10.1 to 2025.4.1 - [Release notes](https://github.com/python-jsonschema/jsonschema-specifications/releases) - [Commits](python-jsonschema/jsonschema-specifications@v2024.10.1...v2025.4.1) Updates `mitogen` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/mitogen-hq/mitogen/releases) - [Changelog](https://github.com/mitogen-hq/mitogen/blob/master/docs/changelog.rst) - [Commits](mitogen-hq/mitogen@v0.3.22...v0.3.23) Updates `mypy-extensions` from 1.0.0 to 1.1.0 - [Commits](python/mypy_extensions@1.0.0...1.1.0) Updates `packaging` from 24.2 to 25.0 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@24.2...25.0) Updates `rsa` from 4.9 to 4.9.1 - [Changelog](https://github.com/sybrenstuvel/python-rsa/blob/main/CHANGELOG.md) - [Commits](https://github.com/sybrenstuvel/python-rsa/commits) Updates `urllib3` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.3.0...2.4.0) --- updated-dependencies: - dependency-name: certifi dependency-version: 2025.4.26 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: google-auth dependency-version: 2.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: jsonschema-specifications dependency-version: 2025.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: mitogen dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: mypy-extensions dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: packaging dependency-version: '25.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: rsa dependency-version: 4.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: urllib3 dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 1, 2025

korowa approved these changes May 2, 2025

View reviewed changes

korowa merged commit 853d107 into main May 2, 2025
6 checks passed

korowa deleted the dependabot/pip/python-packages-19cbd71f1b branch May 2, 2025 12:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the python-packages group with 8 updates #41

Bump the python-packages group with 8 updates #41

Uh oh!

dependabot bot commented on behalf of github May 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the python-packages group with 8 updates #41

Bump the python-packages group with 8 updates #41

Uh oh!

Conversation

dependabot bot commented on behalf of github May 1, 2025

v2.39.0

2.39.0 (2025-04-14)

Features

Bug Fixes

2.39.0 (2025-04-14)

Features

Bug Fixes

v2025.4.1

What's Changed

New Contributors

v0.3.23

What's Changed

v0.3.23 (2025-04-28)

25.0

What's Changed

New Contributors

Python-RSA changelog

Version 4.10 - in development

2.4.0

🚀 urllib3 is fundraising for HTTP/2 support

Features

Bugfixes

Misc

2.4.0 (2025-04-10)

Features

Bugfixes

Misc

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants