Skip to content

chore(deps): bump the uv group across 1 directory with 4 updates - #632

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/uv-1562bc59dd
Open

chore(deps): bump the uv group across 1 directory with 4 updates#632
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/uv-1562bc59dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv group with 4 updates in the / directory: cachetools, coverage, pip-tools and faker.

Updates cachetools from 7.1.5 to 7.1.7

Changelog

Sourced from cachetools's changelog.

v7.1.7 (2026-08-01)

  • Improve Cache.__setitem__ behavior when replacing an existing cache item with a larger value.

  • Update CI environment.

v7.1.6 (2026-07-24)

  • Minor style improvements to keep ruff happy.
Commits
  • 01af8e5 Release v7.1.7.
  • ccaa8c8 Minor stylistic improvements.
  • c65b625 Prepare v7.1.7.
  • 89a5928 Bump actions/setup-python from 6.3.0 to 7.0.0 (#411)
  • 39b31bc Fix #405: Fix Cache.setitem over-evicting when growing an existing key
  • 16e8889 Bump actions/checkout from 7.0.0 to 7.0.1 (#410)
  • 13bb86a Minor style improvements to keep ruff happy.
  • e2250be Fix RTD version handling.
  • See full diff in compare view

Updates coverage from 7.15.2 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

  • Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits
  • 4c0e7ff docs: sample HTML for 7.15.4
  • db4cc32 docs: prep for 7.15.4
  • c33085c style: start gradual move to ruff 0.16
  • 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
  • b64d53d build: make 3.15 wheels
  • 53792ab build: show the python version for kits
  • f6b03c7 chore: make upgrade_one package=cibuildwheel
  • d9b660a chore: make upgrade
  • b128a31 docs: oops, move this entry to the correct place
  • a7a2c15 fix: escape filename urls in html report href attributes (#2227)
  • Additional commits viewable in compare view

Updates pip-tools from 7.6.0 to 7.6.1

Release notes

Sourced from pip-tools's releases.

v7.6.1

Bug fixes

  • Fixed handling of index URLs ending in /simple/ by improving URL normalization logic. These URLs would previously make pip-compile fail to use the PyPI JSON API.

    -- by @​sirosen

    PRs and issues: #1669

  • Added a missing dependency on typing-extensions for Python 3.9 and 3.10 -- by @​sirosen.

    PRs and issues: #2424

Features

Improved documentation

  • pip-tools documentation now features a how-to section, featuring initial docs which cover controlling output file headers and configuring completion -- by @​sirosen.

Contributor-facing changes

  • Fixed CI triggers so that release tags won't create spurious failing runs -- by @​sirosen.

    PRs and issues: #2421

  • Refactored the bug report template for better reporting -- by @​psthindal.

Changelog

Sourced from pip-tools's changelog.

v7.6.1

2026-08-11

Bug fixes

  • Fixed handling of index URLs ending in /simple/ by improving URL normalization logic. These URLs would previously make pip-compile fail to use the PyPI JSON API.

    -- by {user}sirosen

    PRs and issues: {issue}1669

  • Added a missing dependency on {pypi}typing-extensions for Python 3.9 and 3.10 -- by {user}sirosen.

    PRs and issues: {issue}2424

Features

  • pip-tools is now compatible with pip version 26.2 -- by {user}sirosen.

    PRs and issues: {issue}2436, {issue}2437

Improved documentation

  • pip-tools documentation now features a how-to section, featuring initial docs which cover controlling output file headers and configuring completion -- by {user}sirosen.

Contributor-facing changes

  • Fixed CI triggers so that release tags won't create spurious failing runs -- by {user}sirosen.

    PRs and issues: {issue}2421

  • Refactored the bug report template for better reporting -- by {user}psthindal.

Commits
  • 5bc5ded Merge pull request #2448 from sirosen/release/v7.6.1
  • bde325c Update changelog for v7.6.1
  • 2f62a44 Merge pull request #2438 from sirosen/support-pip-26-2
  • a371119 Slightly modify exc_types var name, per review
  • b62ac68 Merge pull request #2447 from jazzband/pre-commit-ci-update-config
  • 041bf6f Update tests/unit/_internal/pip_api/test_package_finder.py
  • 9f5d1f3 Improve internal names and docs for pip_api
  • d50abd7 [pre-commit.ci] pre-commit autoupdate
  • e8703da Fix a test which improperly formulated file URIs
  • f467ee5 Bump pipsupported version + add changelog
  • Additional commits viewable in compare view

Updates faker from 8.5.1 to 40.36.0

Release notes

Sourced from faker's releases.

Release v40.36.0

See CHANGELOG.md.

Release v40.35.0

See CHANGELOG.md.

Release v40.34.0

See CHANGELOG.md.

Release v40.33.2

See CHANGELOG.md.

Release v40.33.1

See CHANGELOG.md.

Release v40.33.0

See CHANGELOG.md.

Release v40.32.0

See CHANGELOG.md.

Release v40.31.0

See CHANGELOG.md.

Release v40.30.0

See CHANGELOG.md.

Release v40.29.0

See CHANGELOG.md.

Release v40.28.1

See CHANGELOG.md.

Release v40.28.0

See CHANGELOG.md.

Release v40.27.0

See CHANGELOG.md.

Release v40.26.0

See CHANGELOG.md.

Release v40.25.0

See CHANGELOG.md.

Release v40.24.1

See CHANGELOG.md.

Release v40.24.0

See CHANGELOG.md.

... (truncated)

Changelog

Sourced from faker's changelog.

v40.36.0 - 2026-07-24

  • Fix: correct uk_UA bban_format to 6 digits + 19 letters so iban() generates valid Ukrainian IBANs (#2417). Thanks @​CedricConday.

v40.35.0 - 2026-07-22

  • Fix: add correct bban_format so ru_RU iban() generates valid Russian IBANs (#2416). Thanks @​CedricConday.

v40.34.0 - 2026-07-22

  • Fix: correct BBAN length so da_DK iban() generates valid Danish IBANs (#2409). Thanks @​CedricConday.

v40.33.2 - 2026-07-22

  • Validate positive=True against a non-positive max_value in pydecimal (#2428). Thanks @​Sreekant13.

v40.33.1 - 2026-07-22

  • Make uuid1() and uuid7() reproducible under a fixed seed (#2427). Thanks @​vidigoat.

v40.33.0 - 2026-07-22

  • Add alphanumeric CNPJ support for pt_BR via flag (#2402). Thanks @​moohbr.

v40.32.0 - 2026-07-20

v40.31.0 - 2026-07-14

  • Fix: correct BBAN length so pt_BR iban() generates valid Brazilian IBANs (#2410). Thanks @​CedricConday.

v40.30.0 - 2026-07-14

v40.29.0 - 2026-07-14

v40.28.1 - 2026-07-01

v40.28.0 - 2026-07-01

v40.27.0 - 2026-06-30

... (truncated)

Commits
  • 62d5a6a Bump version: 40.35.0 → 40.36.0
  • 09c254a 📝 Update CHANGELOG.md
  • ce45ebd fix(uk_UA): correct bban_format to 6 digits + 19 letters so iban() is valid (...
  • 8ad78a6 Merge pull request #2434 from joke2k/joke2k-security-md
  • ce3d3b1 Add SECURITY.md to the manifest file
  • ac535cf Revise security policy for clarity and updates
  • 4b7d4d7 💄 Lint code
  • 2e83f45 Bump version: 40.34.0 → 40.35.0
  • b1caba1 📝 Update CHANGELOG.md
  • 706aaca 💄 Lint code
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the uv group across 1 directory with 4 updates
2dee578 
Bumps the uv group with 4 updates in the / directory: [cachetools](https://github.com/tkem/cachetools), [coverage](https://github.com/coveragepy/coveragepy), [pip-tools](https://github.com/jazzband/pip-tools) and [faker](https://github.com/joke2k/faker).


Updates `cachetools` from 7.1.5 to 7.1.7
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.5...v7.1.7)

Updates `coverage` from 7.15.2 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.2...7.15.4)

Updates `pip-tools` from 7.6.0 to 7.6.1
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@v7.6.0...v7.6.1)

Updates `faker` from 8.5.1 to 40.36.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v8.5.1...v40.36.0)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 7.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pip-tools
  dependency-version: 7.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: faker
  dependency-version: 40.36.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants