Deps: Bump the python-packages group across 1 directory with 7 updates by dependabot[bot] · Pull Request #338 · greenbone/greenbone-feed-sync

dependabot · 2026-03-02T04:09:42Z

Bumps the python-packages group with 7 updates in the / directory:

Package	From	To
rich	`14.3.2`	`14.3.3`
pontos	`25.8.1`	`26.2.0`
autohooks	`25.11.0`	`26.2.0`
certifi	`2026.1.4`	`2026.2.25`
coverage	`7.13.2`	`7.13.4`
librt	`0.7.8`	`0.8.1`
ruff	`0.14.14`	`0.15.4`

Updates rich from 14.3.2 to 14.3.3

Release notes

Sourced from rich's releases.

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Changelog

Sourced from rich's changelog.

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Commits

ce01188 Merge pull request #4008 from Textualize/bump1433
14a47c9 bump
f54bfe0 Merge pull request #4007 from Textualize/copilot/sub-pr-4006
7338cb9 Merge pull request #4006 from Textualize/fix-grapheme-stuck
905b397 Update tests/test_cells.py
b031dca Update tests/test_cells.py
f07a3fc Add regression tests for VS16 after zero-width chars in split_graphemes
b618ccc spelling
378c34b Initial plan
87e7ca2 refinements, and tests
Additional commits viewable in compare view

Updates pontos from 25.8.1 to 26.2.0

Release notes

Sourced from pontos's releases.

pontos 26.2.0

[26.2.0] - 2026-02-20

Added

Add --project-type to release create and all version CLI commands a6ff904e

add test a5d5d0f7

Bug Fixes

Add or Update detect-hidden-unicode.yml 4e995a14

fix linting 823399a1

fix error 2fcf4ada

fix errors 88d2a2b7

formatting 1c2a48e0

fix linting a9b74c9b

fix linting 9c28e94b

Dependencies

Bump the python-packages group with 2 updates e6ee003d

Bump ruff from 0.14.14 to 0.15.0 in the python-packages group 9e2ece33

Bump the python-packages group with 4 updates f15e15d9

Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group 43f5f9ae

Bump the python-packages group with 5 updates 51838e2c

Bump the python-packages group with 4 updates 60b8e915

Bump the python-packages group with 4 updates a7b75e65

Bump urllib3 from 2.6.2 to 2.6.3 7d7eaf82

Bump the python-packages group with 2 updates b6433dd5

Bump librt from 0.7.4 to 0.7.5 in the python-packages group c15f3cb1

Bump the python-packages group with 7 updates bb9ad208

Bump actions/upload-artifact in the actions group 0e79c666

Bump the python-packages group with 2 updates 4361aeb1

Bump actions/checkout from 6.0.0 to 6.0.1 in the actions group 7c9fea85

Bump the python-packages group with 3 updates c6dac7a3

Bump the python-packages group with 4 updates 9ecb7ee9

Bump actions/checkout from 5.0.0 to 6.0.0 in the actions group 2ba4bf91

Bump the python-packages group with 3 updates bce90a24

Bump the python-packages group with 3 updates 0f929fd1

Bump the python-packages group with 3 updates e0bf5947

Bump actions/upload-artifact in the actions group 770ddc90

Bump the python-packages group with 3 updates ec1f62c3

Bump ruff from 0.14.1 to 0.14.2 in the python-packages group 7bc68fc0

Bump the python-packages group with 5 updates 6bea2e02

Bump the python-packages group with 4 updates 48ec5950

Bump ossf/scorecard-action in the actions group 86a2faa0

Bump the python-packages group with 3 updates a2d17964

Bump the python-packages group across 1 directory with 11 updates e8850f23

Bump the python-packages group with 3 updates a046f472

Bump pypa/gh-action-pypi-publish in the actions group ccb073b8

Bump ruff from 0.11.13 to 0.12.12 in the python-packages group d99e8f00

Bump the python-packages group with 4 updates 6d36a9e9

Bump the actions group with 2 updates 01c1f450

... (truncated)

Commits

ff7b80e Automatic release to 26.2.0
a6ff904 Add: Add --project-type to release create and all version CLI commands
e6ee003 Deps: Bump the python-packages group with 2 updates
9e2ece3 Deps: Bump ruff from 0.14.14 to 0.15.0 in the python-packages group
f15e15d Deps: Bump the python-packages group with 4 updates
43f5f9a Deps: Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group
51838e2 Deps: Bump the python-packages group with 5 updates
60b8e91 Deps: Bump the python-packages group with 4 updates
e9eb455 Fix Add or Update detect-hidden-unicode.yml (#1177)
a7b75e6 Deps: Bump the python-packages group with 4 updates
Additional commits viewable in compare view

Updates autohooks from 25.11.0 to 26.2.0

Release notes

Sourced from autohooks's releases.

autohooks 26.2.0

26.2.0 - 2026-02-25

Added

Unit tests for uv mode fe57e13

Support for uv 329294f

Changed

Make ruff & black happy 2c1bd9d

Update documentation 37739c4

Dependencies

Bump the dependencies group across 1 directory with 4 updates edf8288

Bump ruff from 0.14.14 to 0.15.0 in the dependencies group ed561e2

Bump the dependencies group across 1 directory with 7 updates 9ccd4f2

Bump the dependencies group with 4 updates 83af4d2

Bump the dependencies group across 1 directory with 4 updates 8c2c3cd

Bump urllib3 from 2.6.2 to 2.6.3 cc2fac6

Bump the dependencies group with 2 updates 690bed5

Bump librt from 0.7.4 to 0.7.5 in the dependencies group b1ad308

Bump the dependencies group with 6 updates 307e261

Bump the dependencies group with 2 updates 59f09ca

Bump actions/checkout from 5 to 6 in the dependencies group 5b0c306

Bump the dependencies group across 1 directory with 5 updates 1e257b0

Bump the dependencies group across 1 directory with 4 updates 2b8fbb7

Commits

00c9ab4 Automatic release to 26.2.0
2c1bd9d Change: Make ruff & black happy
37739c4 Change: Update documentation
fe57e13 Add: Unit tests for uv mode
329294f Add: Support for uv
edf8288 Deps: Bump the dependencies group across 1 directory with 4 updates
ed561e2 Deps: Bump ruff from 0.14.14 to 0.15.0 in the dependencies group
9ccd4f2 Deps: Bump the dependencies group across 1 directory with 7 updates
83af4d2 Deps: Bump the dependencies group with 4 updates
8c2c3cd Deps: Bump the dependencies group across 1 directory with 4 updates
Additional commits viewable in compare view

Updates certifi from 2026.1.4 to 2026.2.25

Commits

8571a4b 2026.02.25 (#395)
6f7de00 Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#390)
a1de59b Bump actions/checkout from 6.0.1 to 6.0.2 (#391)
7f5ade5 Bump actions/setup-python from 6.1.0 to 6.2.0 (#392)
See full diff in compare view

Updates coverage from 7.13.2 to 7.13.4

Changelog

Sourced from coverage's changelog.

Version 7.13.4 — 2026-02-09

Fix: the third-party code fix in 7.13.3 required examining the parent directories where coverage was run. In the unusual situation that one of the parent directories is unreadable, a PermissionError would occur, as described in issue 2129_. This is now fixed.

Fix: in test suites that change sys.path, coverage.py could fail with "RuntimeError: Set changed size during iteration" as described and fixed in pull 2130_. Thanks, Noah Fatsi.

We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: coveragepy/coveragepy#2121 .. _issue 2129: coveragepy/coveragepy#2129 .. _pull 2130: coveragepy/coveragepy#2130

.. _changes_7-13-3:

Version 7.13.3 — 2026-02-03

Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

.. _issue 2082: coveragepy/coveragepy#2082

.. _changes_7-13-2:

Commits

4f78d57 build: no need to publish status.json
f8616ff docs: sample HTML for 7.13.4
fcf8c68 docs: prep for 7.13.4
189ecfd docs: thanks Pankhudi Jain for ppc64le wheels #2121
58aade0 build: add support for ppc64le architecture (#2121)
8ea42c8 chore: bump actions/attest-build-provenance (#2131)
c09595f docs: Janine put a lot of effort into debugging issue #2128
8ee1760 docs: Greg wrote a great issue: #2129
76ba043 docs: thanks, Noah Fatsi
371fcc5 fix: set fixed paths_list in TreeMatcher init (#2130)
Additional commits viewable in compare view

Updates librt from 0.7.8 to 0.8.1

Commits

e9c167e Sync mypy
26eb1d2 Bump version to 0.8.0; add tests for base64
588d6c6 Sync mypy: base64 is non-experimental now
80dcab7 feat: Build wheel for riscv64 (#31)
See full diff in compare view

Updates ruff from 0.14.14 to 0.15.4

Release notes

Sourced from ruff's releases.

0.15.4

Release Notes

Released on 2026-02-26.

This is a follow-up release to 0.15.3 that resolves a panic when the new rule PLR1712 was enabled with any rule that analyzes definitions, such as many of the ANN or D rules.

Bug fixes

Fix panic on access to definitions after analyzing definitions (#23588)

[pyflakes] Suppress false positive in F821 for names used before del in stub files (#23550)

Documentation

Clarify first-party import detection in Ruff (#23591)

Fix incorrect import-heading example (#23568)

Contributors

@stakeswky

@ntBre

@thejcannon

@GeObts

Install ruff 0.15.4

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.15.4/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.15.4/ruff-installer.ps1 | iex"
Download ruff 0.15.4

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ruff-i686-pc-windows-msvc.zip x86 Windows checksum

ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.4

Released on 2026-02-26.

This is a follow-up release to 0.15.3 that resolves a panic when the new rule PLR1712 was enabled with any rule that analyzes definitions, such as many of the ANN or D rules.

Bug fixes

Fix panic on access to definitions after analyzing definitions (#23588)

[pyflakes] Suppress false positive in F821 for names used before del in stub files (#23550)

Documentation

Clarify first-party import detection in Ruff (#23591)

Fix incorrect import-heading example (#23568)

Contributors

@stakeswky

@ntBre

@thejcannon

@GeObts

0.15.3

Released on 2026-02-26.

Preview features
Drop explicit support for .qmd file extension (#23572)

This can now be enabled instead by setting the extension option:
# ruff.toml
extension = { qmd = "markdown" }
pyproject.toml
[tool.ruff]
extension = { qmd = "markdown" }
Include configured extensions in file discovery (#23400)

[flake8-bandit] Allow suspicious imports in TYPE_CHECKING blocks (S401-S415) (#23441)

[flake8-bugbear] Allow B901 in pytest hook wrappers (#21931)

[flake8-import-conventions] Add missing conventions from upstream (ICN001, ICN002) (#21373)

... (truncated)

Commits

f14edd8 Bump 0.15.4 (#23595)
fd09d37 Fix panic on access to definitions after analyzing definitions (#23588)
81d655f [pyflakes] suppress false positive in F821 for names used before del in...
625b4f5 [ruff] docs: Clarify first-party import detection in Ruff (#23591)
60facfa one word typo fix in a while_loop.md test case (#23589)
fbb9fa7 docs: fix incorrect import-heading example (#23568)
5bc49a9 Increase the ruleset size to 16 bits (#23586)
a62ba8c [ty] Fix overloaded callable assignability for unary Callable targets (#23277)
e5f2f36 Bump 0.15.3 (#23585)
0e19fc9 [ty] defer calculating conjunctions in narrowing constraints (#23552)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rich](https://github.com/Textualize/rich) | `14.3.2` | `14.3.3` | | [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.2.0` | | [autohooks](https://github.com/greenbone/autohooks) | `25.11.0` | `26.2.0` | | [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.2.25` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.13.2` | `7.13.4` | | [librt](https://github.com/mypyc/librt) | `0.7.8` | `0.8.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.14` | `0.15.4` | Updates `rich` from 14.3.2 to 14.3.3 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.2...v14.3.3) Updates `pontos` from 25.8.1 to 26.2.0 - [Release notes](https://github.com/greenbone/pontos/releases) - [Commits](greenbone/pontos@v25.8.1...v26.2.0) Updates `autohooks` from 25.11.0 to 26.2.0 - [Release notes](https://github.com/greenbone/autohooks/releases) - [Commits](greenbone/autohooks@v25.11.0...v26.2.0) Updates `certifi` from 2026.1.4 to 2026.2.25 - [Commits](certifi/python-certifi@2026.01.04...2026.02.25) Updates `coverage` from 7.13.2 to 7.13.4 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.13.2...7.13.4) Updates `librt` from 0.7.8 to 0.8.1 - [Commits](mypyc/librt@v0.7.8...v0.8.1) Updates `ruff` from 0.14.14 to 0.15.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.14...0.15.4) --- updated-dependencies: - dependency-name: rich dependency-version: 14.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pontos dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: autohooks dependency-version: 26.2.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: python-packages - dependency-name: certifi dependency-version: 2026.2.25 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: coverage dependency-version: 7.13.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: librt dependency-version: 0.8.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.15.4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-02T04:10:11Z

Conventional Commits Report

Type	Number
Dependencies	1

🚀 Conventional commits found.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 2, 2026

dependabot Bot requested review from a team as code owners March 2, 2026 04:09

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 2, 2026

greenbonebot enabled auto-merge (rebase) March 2, 2026 04:09

bjoernricks previously approved these changes Mar 2, 2026

View reviewed changes

Update formatting to satisfy ruff

72975a2

bjoernricks dismissed their stale review via 72975a2 March 2, 2026 12:48

bjoernricks approved these changes Mar 2, 2026

View reviewed changes

greenbonebot merged commit 60b4ef4 into main Mar 2, 2026
20 checks passed

greenbonebot deleted the dependabot/pip/python-packages-bdbf74a32b branch March 2, 2026 12:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deps: Bump the python-packages group across 1 directory with 7 updates#338

Deps: Bump the python-packages group across 1 directory with 7 updates#338
greenbonebot merged 2 commits into
mainfrom
dependabot/pip/python-packages-bdbf74a32b

dependabot Bot commented on behalf of github Mar 2, 2026

Uh oh!

github-actions Bot commented Mar 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum

Conversation

dependabot Bot commented on behalf of github Mar 2, 2026

The infinite Release

[14.3.3] - 2026-02-19

Fixed

[14.3.3] - 2026-02-19

Fixed

pontos 26.2.0

[26.2.0] - 2026-02-20

Added

Bug Fixes

Dependencies

autohooks 26.2.0

26.2.0 - 2026-02-25

Added

Changed

Dependencies

Version 7.13.4 — 2026-02-09

Version 7.13.3 — 2026-02-03

0.15.4

Release Notes

Bug fixes

Documentation

Contributors

Install ruff 0.15.4

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.15.4

0.15.4

Bug fixes

Documentation

Contributors

0.15.3

Preview features

Uh oh!

github-actions Bot commented Mar 2, 2026

Conventional Commits Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants