chore(deps): bump the pip-root-majors group across 1 directory with 6 updates - #194
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the pip-root-majors group across 1 directory with 6 updates#194dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
PR Check Results✅ Code Formatting: Passed |
|
| Severity | Count |
|---|---|
| 🔴 CRITICAL | 0 |
| 🟠 HIGH | 46 |
| Total | 46 |
Scans performed:
- 📁 Filesystem (vulnerabilities, secrets, misconfigurations)
- 🐳 Backend Docker image
- 🐳 Frontend Docker image
- 🏗️ IaC misconfiguration detection
📋 View detailed SARIF reports
Download artifacts from this workflow run for full SARIF reports.
Results are also available in the GitHub Security tab.
Trivy v0.71.0 | aquasecurity/trivy
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/pip/pip-root-majors-f35502a022
branch
from
August 28, 2026 21:21
a22a72a to
95ab134
Compare
PR Check Results✅ Code Formatting: Passed |
dependabot
Bot
force-pushed
the
dependabot/pip/pip-root-majors-f35502a022
branch
from
August 28, 2026 23:49
95ab134 to
25dc1f9
Compare
PR Check Results✅ Code Formatting: Passed |
… updates Bumps the pip-root-majors group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [faker](https://github.com/joke2k/faker) | `23.2.0` | `40.38.0` | | [redis](https://github.com/redis/redis-py) | `5.0.1` | `8.1.0` | | [psutil](https://github.com/giampaolo/psutil) | `5.9.8` | `7.2.2` | | [mypy](https://github.com/python/mypy) | `1.8.0` | `2.3.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `3.6.0` | `4.6.2` | | [isort](https://github.com/PyCQA/isort) | `5.13.2` | `9.0.1` | Updates `faker` from 23.2.0 to 40.38.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v23.2.0...v40.38.0) Updates `redis` from 5.0.1 to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.1...v8.1.0) Updates `psutil` from 5.9.8 to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v5.9.8...v7.2.2) Updates `mypy` from 1.8.0 to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.8.0...v2.3.1) Updates `pre-commit` from 3.6.0 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.6.0...v4.6.2) Updates `isort` from 5.13.2 to 9.0.1 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@5.13.2...9.0.1) --- updated-dependencies: - dependency-name: faker dependency-version: 40.37.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: isort dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-root-majors ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/pip-root-majors-f35502a022
branch
from
September 7, 2026 05:15
25dc1f9 to
cae930f
Compare
PR Check Results✅ Code Formatting: Passed |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the pip-root-majors group with 6 updates in the / directory:
23.2.040.38.05.0.18.1.05.9.87.2.21.8.02.3.13.6.04.6.25.13.29.0.1Updates
fakerfrom 23.2.0 to 40.38.0Release notes
Sourced from faker's releases.
... (truncated)
Changelog
Sourced from faker's changelog.
... (truncated)
Commits
59a6872Bump version: 40.37.0 → 40.38.02407c71📝 Update CHANGELOG.mdf6a8427💄 Format codece50bdeAdd step to check for existing issues or PRs4ca9116Addsi_LK(Sinhala, Sri Lanka) person provider (#2430)c5a0093mention pull request template in contributing doc4a464c8Bump version: 40.36.0 → 40.37.0f33e820📝 Update CHANGELOG.md74efb07fix(en_IE): generate structurally valid Irish IBANs (#2411)d80d125add Pillow as an optional dependency (#2442)Updates
redisfrom 5.0.1 to 8.1.0Release notes
Sourced from redis's releases.
... (truncated)
Commits
e013126Testing with 8.10 GA (#4227)059d1e9Fixed TS.NRANGE commands to correctly apply aggregators (#4225)d486a0aFix FIELDNAME alias dropping first character of un-prefixed fields (#4224)fb93104feat: add client-side HIMPORT fieldset support for standalone and cluster cli...9197609Fix lat/lon swap in search querystring geo() helper (#4223)14714a0fix: Fixed double decoding issue with unquote() (#4222)227280aUpdate lib version to 8.1.088d16d0Decode ACL LOG string values on the default RESP3 legacy callback (#4201)599fd75feat: add FT.ALIASLIST support (#4198)71e275etest: add VectorField RERANK serialization tests for sync and async search (#...Updates
psutilfrom 5.9.8 to 7.2.2Changelog
Sourced from psutil's changelog.
... (truncated)
Commits
9eea97dPre-release938ac64Rm sphinxcontrib.googleanalytics; override layout.html9dcbb7eAdd sphinxcontrib-googleanalytics to requirements.txt76eaf9aTry to add google analytics to docde1cafaUpdate doc mentioning Process.wait() internal detailsbb30943Refact can_use_pidfd_open() and can_use_kqueue()a571717#2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)8b98c3ePre-release700b7e6[macOS] fix potential leaks in error paths (#2707)7cc7923Windows / cmdline(): be more defensive in free()ing in case of errorUpdates
mypyfrom 1.8.0 to 2.3.1Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
d642c44Bump version to 2.3.1a392429[mypyc] Fix crash on double yielding Iterators (#21826)4843e77[mypyc] Fixdefault_factoryfor inherited dataclass (#21785)14f5df9[mypyc] Clear coroutine env on coroutine completion (#21734)6dfa06dFix crash when unpacking return value from overload (#21830)a385746Bump version to 2.3.1+dev8aabf84Drop +dev from version4d8ad2aUpdate changelog for 2.3 release (#21728)2c21546[mypyc] Update documentation of race conditions under free threading (#21726)a9f62a3[mypyc] Make attribute access memory safe on free-threaded builds (#21705)Updates
pre-commitfrom 3.6.0 to 4.6.2Release notes
Sourced from pre-commit's releases.
... (truncated)
Changelog
Sourced from pre-commit's changelog.
... (truncated)
Commits
9767b6cv4.6.242ee3ffMerge pull request #3743 from pre-commit/npm-build-scripts-11-x3056619fixlanguage: nodefor hooks with build scripts and npm 11.x242ce8av4.6.1766e550Merge pull request #3727 from pre-commit/dedupe1558d06Merge pull request #3726 from pre-commit/exists-faster8a1c47aavoid duplicate files in --all-files during conflict2e01c99faster check of rev existing locally as a commit3613bf2Merge pull request #3701 from pre-commit/autoupdate-repos1d811d9Return an error for invalid --repoUpdates
isortfrom 5.13.2 to 9.0.1Release notes
Sourced from isort's releases.
... (truncated)
Changelog
Sourced from isort's changelog.
... (truncated)
Commits
131f4adFix review typing and import order in CLI invocation test9491900Test python -m isort invocation directlyf0a2dcaFix python -m isort by excluding main from mypyc037c2b2Add changelog entries for last releases727d119Name the predicate and drive the prefix test off STRING_PREFIXESdec76bcFix multiline docstring stylecb179dbKeep add_imports below a prefixed module docstring7542f76test: distinguish pylint disable-next comments9f56767Fix pylint disable-next comments at top of imports0cba6f6Delete .cruft.json