Skip to content

pip: bump the all-pip-dependencies group with 3 updates#380

Merged
apop5 merged 1 commit into
mainfrom
dependabot/pip/all-pip-dependencies-554d87431a
Apr 1, 2026
Merged

pip: bump the all-pip-dependencies group with 3 updates#380
apop5 merged 1 commit into
mainfrom
dependabot/pip/all-pip-dependencies-554d87431a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the all-pip-dependencies group with 3 updates: edk2-pytool-library, edk2-pytool-extensions and ruff.

Updates edk2-pytool-library from 0.23.11 to 0.23.12

Release notes

Sourced from edk2-pytool-library's releases.

v0.23.12

What's Changed

Dependency Updates

Full Changelog: tianocore/edk2-pytool-library@v0.23.11...v0.23.12

Commits
  • 1f9255c SourceTable: Filter directories from source file glob results (#797)
  • 9b9fda2 build(deps-dev): bump pytest from 8.4.2 to 9.0.2 (#781)
  • 8c89dbe build(deps-dev): bump mkdocs-gen-files from 0.5.0 to 0.6.0 (#782)
  • 42f96bc build(deps-dev): bump setuptools from 80.9.0 to 82.0.0 (#783)
  • 33a6958 build(deps-dev): bump build from 1.3.0 to 1.4.0 (#784)
  • b50aaa5 build(deps): bump actions/upload-artifact from 6 to 7 (#786)
  • c00de58 build(deps-dev): bump mkdocstrings-python from 1.18.2 to 2.0.1 (#785)
  • ea78c48 build(deps): bump black from 25.1.0 to 25.9.0 (#766)
  • 6005a78 build(deps): bump actions/upload-pages-artifact from 3 to 4 (#767)
  • 012ae4a build(deps): bump github/codeql-action from 3 to 4 (#770)
  • Additional commits viewable in compare view

Updates edk2-pytool-extensions from 0.30.8 to 0.31.0

Release notes

Sourced from edk2-pytool-extensions's releases.

v0.31.0

What's Changed

Dependency Updates

Integration Instructions

Per #1065, users must update any local usage of the cryptography crate to v46.0.5 or greater

Full Changelog: tianocore/edk2-pytool-extensions@v0.30.8...v0.31.0

Commits
  • 34d3253 build(deps): bump actions/upload-artifact from 6 to 7 (#1064)
  • b93fcfc build(deps-dev): bump robotframework from 7.3.2 to 7.4.1 (#1056)
  • 90adf87 build(deps-dev): bump black from 25.9.0 to 26.1.0 (#1057)
  • 8316f58 build(deps-dev): bump pytest from 8.4.2 to 9.0.2 (#1058)
  • 24cf9a2 build(deps-dev): bump mkdocstrings-python from 1.18.2 to 2.0.1 (#1059)
  • a07b2c9 build(deps): bump setuptools from 80.9.0 to 82.0.0 (#1060)
  • ef6ef9e Update cryptography version requirement in pyproject.toml (#1065)
  • See full diff in compare view

Updates ruff from 0.15.7 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Commits
  • c2a8815 Release 0.15.8 (#24217)
  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
  • d812662 Use the release environment in publish-docs (#24214)
  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
  • 34998be [ty] Fix typo in comment (#24211)
  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
pip: bump the all-pip-dependencies group with 3 updates
ec24e00 
Bumps the all-pip-dependencies group with 3 updates: [edk2-pytool-library](https://github.com/tianocore/edk2-pytool-library), [edk2-pytool-extensions](https://github.com/tianocore/edk2-pytool-extensions) and [ruff](https://github.com/astral-sh/ruff).


Updates `edk2-pytool-library` from 0.23.11 to 0.23.12
- [Release notes](https://github.com/tianocore/edk2-pytool-library/releases)
- [Commits](tianocore/edk2-pytool-library@v0.23.11...v0.23.12)

Updates `edk2-pytool-extensions` from 0.30.8 to 0.31.0
- [Release notes](https://github.com/tianocore/edk2-pytool-extensions/releases)
- [Commits](tianocore/edk2-pytool-extensions@v0.30.8...v0.31.0)

Updates `ruff` from 0.15.7 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.7...0.15.8)

---
updated-dependencies:
- dependency-name: edk2-pytool-library
  dependency-version: 0.23.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: edk2-pytool-extensions
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added language:python Pull requests that update Python code type:dependabot Created by dependabot type:dependencies Pull requests that update a dependency file labels Apr 1, 2026
@apop5 apop5 enabled auto-merge (squash) April 1, 2026 14:53
@apop5 apop5 merged commit 80afccf into main Apr 1, 2026
2 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/all-pip-dependencies-554d87431a branch April 1, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Javagedes Javagedes Javagedes approved these changes

@apop5 apop5 apop5 approved these changes

Assignees

No one assigned

Labels

language:python Pull requests that update Python code type:dependabot Created by dependabot type:dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Javagedes @apop5