Bump the pip group across 1 directory with 2 updates #244

dependabot · 2025-11-28T04:16:31Z

Bumps the pip group with 2 updates in the / directory: homeassistant and brotli.

Updates homeassistant from 2025.8.3 to 2025.10.2

Release notes

Sourced from homeassistant's releases.

2025.10.2

Prevent reloading the ZHA integration while adapter firmware is being updated ([@puddly] - #152626) ([zha docs]) ([homeassistant_hardware docs])

Wallbox fix Rate Limit issue for multiple chargers ([@hesselonline] - #153074) ([wallbox docs])

Fix power device classes for system bridge ([@timmo001] - #153201) ([system_bridge docs])

Bump PyCync to 0.4.1 ([@Kinachi249] - #153401) ([cync docs]) (dependency)

Updated VRM client and accounted for missing forecasts ([@AndyTempel] - #153464) ([victron_remote_monitoring docs]) (dependency)

Bump python-roborock to 2.50.2 ([@Lash-L] - #153561) ([roborock docs]) (dependency)

Bump aioamazondevices to 6.2.8 ([@chemelli74] - #153592) ([alexa_devices docs]) (dependency)

Switch Roborock to v4 of the code login api ([@Lash-L] - #153593) ([roborock docs])

Fix MQTT Lock state reset to unknown when a reset payload is received ([@jbouwh] - #153647) ([mqtt docs])

Gemini: Use default model instead of recommended where applicable ([@Shulyaka] - #153676) ([google_generative_ai_conversation docs])

Fix ViCare pressure sensors missing unit of measurement ([@CFenner] - #153691) ([vicare docs])

Bump pyvesync to 3.1.0 ([@cdnninja] - #153693) ([vesync docs]) (dependency)

Modbus Fix message_wait_milliseconds is no longer applied ([@peetersch] - #153709) ([modbus docs])

Bump opower to 0.15.6 ([@tronikos] - #153714) ([opower docs]) (dependency)

Version bump pydaikin to 2.17.0 ([@fredrike] - #153718) ([daikin docs]) (dependency)

Version bump pydaikin to 2.17.1 ([@fredrike] - #153726) ([daikin docs]) (dependency)

Fix missing google_assistant_sdk.send_text_command ([@tronikos] - #153735) ([google_assistant_sdk docs])

Bump airOS to 0.5.5 using formdata for v6 firmware ([@CoMPaTech] - #153736) ([airos docs]) (dependency)

Align Shelly presencezone entity to the new API/firmware ([@bieniu] - #153737) ([shelly docs])

Synology DSM: Don't reinitialize API during configuration ([@oyvindwe] - #153739) ([synology_dsm docs])

Upgrade python-melcloud to 0.1.2 ([@Sander0542] - #153742) ([melcloud docs]) (dependency)

Fix sensors availability check for Alexa Devices ([@chemelli74] - #153743) ([alexa_devices docs])

Bump aioamazondevices to 6.2.9 ([@chemelli74] - #153756) ([alexa_devices docs])

Remove stale entities from Alexa Devices ([@chemelli74] - #153759) ([alexa_devices docs])

vesync correct fan set modes ([@cdnninja] - #153761) ([vesync docs])

Handle ESPHome discoveries with uninitialized Z-Wave antennas ([@balloob] - #153790) ([zwave_js docs])

Fix Tuya cover position when only control is available ([@epenet] - #153803) ([tuya docs])

Bump pySmartThings to 3.3.1 ([@joostlek] - #153826) ([smartthings docs]) (dependency)

Catch update exception in AirGradient ([@joostlek] - #153828) ([airgradient docs])

Add motion presets to SmartThings AC ([@joostlek] - #153830) ([smartthings docs])

Fix delay_on and auto_off with multiple triggers ([@Petro31] - #153839) ([template docs])

Fix PIN validation for Comelit SimpleHome ([@chemelli74] - #153840) ([comelit docs])

Bump aiocomelit to 1.1.1 ([@chemelli74] - #153843) ([comelit docs]) (dependency)

Limit SimpliSafe websocket connection attempts during startup ([@bachya] - #153853) ([simplisafe docs])

Handle timeout errors gracefully in Nord Pool services ([@gjohansson-ST] - #153856) ([nordpool docs])

Add plate_count for Miele KM7575 ([@derytive] - #153868) ([miele docs])

Fix restore cover state for Comelit SimpleHome ([@chemelli74] - #153887) ([comelit docs])

fix typo in icon assignment of AccuWeather integration ([@CFenner] - #153890) ([accuweather docs])

Add missing translation string for Satel Integra subentry type ([@Tommatheussen] - #153905) ([satel_integra docs])

Do not auto-set up ZHA zeroconf discoveries during onboarding ([@TheJulianJES] - #153914) ([zha docs])

sharkiq dependency bump to 1.4.2 ([@Freebien] - #153931) ([sharkiq docs]) (dependency)

Fix HA hardware configuration message for Thread without HAOS ([@TheJulianJES] - #153933) ([homeassistant_hardware docs])

Adjust OTBR config entry name for ZBT-2 ([@TheJulianJES] - #153940) ([otbr docs])

Bump pylamarzocco to 2.1.2 ([@zweckj] - #153950) ([lamarzocco docs]) (dependency)

Bump holidays to 0.82 ([@gjohansson-ST] - #153952) ([workday docs]) ([holiday docs]) (dependency)

Fix update interval for AccuWeather hourly forecast ([@bieniu] - #153957) ([accuweather docs])

Bump env-canada to 0.11.3 ([@michaeldavie] - #153967) ([environment_canada docs])

Fix empty llm api list in chat log ([@arturpragacz] - #153996) ([conversation docs])

Don't mark ZHA coordinator as via_device with itself ([@joostlek] - #154004) ([zha docs])

... (truncated)

Commits

40d7f2a 2025.10.2 (#154181)
13b717e Fix shelly remove orphaned entities (#154182)
5fcfd3a Bump version to 2025.10.2
324a7b5 Fix Shelly RPC cover update when the device is not initialized (#154159)
491ae8f Bump deebot-client to 15.1.0 (#154154)
2592478 IOmeter bump version v0.2.0 (#154150)
caeda0e Update frontend to 20251001.2 (#154143)
df35c53 Add missing entity category and icons for smlight integration (#154131)
f93b9e0 Z-Wave: ESPHome discovery to update all options (#154113)
48a3372 Fix for multiple Lyrion Music Server on a single Home Assistant server for Sq...
Additional commits viewable in compare view

Updates brotli from 1.1.0 to 1.2.0

Release notes

Sourced from brotli's releases.

v1.2.0

SECURITY

python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

decoder / encoder: added static initialization to reduce binary size

python: allow limiting decoder output (see SECURITY section)

CLI: brcat alias; allow decoding concatenated brotli streams

kt: pure Kotlin decoder

cgo: support "raw" dictionaries

build: Bazel modules

Removed

java: dropped finalize() for native entities

Fixed

java: in compress pass correct length to native encoder

Improved

build: install man pages

build: updated / fixed / refined Bazel buildfiles

encoder: faster encoding

cgo: link via pkg-config

python: modernize extension / allow multi-phase module initialization

Changed

decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

v1.2.0 RC2

What's Changed (compared to RC1)

pick changes from Debian patch by @copybara-service[bot] in google/brotli#1349

pick changes from Alpine patch by @copybara-service[bot] in google/brotli#1348

pick VCPKG patches by @copybara-service[bot] in google/brotli#1350

fix copy-paste in Java decoder by @copybara-service[bot] in google/brotli#1357

v1.2.0 RC1

IMPORTANT: though this is a pre-release for v1.2.0, it is expected that some changes will be added before release; most notably concerning build files: patches applied by Alpine, Debian, Conan, VCPKG will be partially/fully integrated.

SECURITY

python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

decoder / encoder: added static initialization to reduce binary size

python: allow limiting decoder output (see SECURITY section)

... (truncated)

Changelog

Sourced from brotli's changelog.

[1.2.0] - 2025-10-27

SECURITY

python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

decoder / encoder: added static initialization to reduce binary size

python: allow limiting decoder output (see SECURITY section)

CLI: brcat alias; allow decoding concatenated brotli streams

kt: pure Kotlin decoder

cgo: support "raw" dictionaries

build: Bazel modules

Removed

java: dropped finalize() for native entities

Fixed

java: in compress pass correct length to native encoder

Improved

build: install man pages

build: updated / fixed / refined Bazel buildfiles

encoder: faster encoding

cgo: link via pkg-config

python: modernize extension / allow multi-phase module initialization

Changed

decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

Commits

028fb5a release v1.2.0
390de5b build and test csharp decoder
3499acb regenerate go/kt/js/ts
8ca2312 fix release workflow
ee771da fix copy-paste in Java decoder
42aee32 try to fix release workflow
392c06b redesign release resource uploading
1964cdb ramp up all GH actions plugins
61605b1 pick VCPKG patches
4b0f27b pick changes from Alpine patch
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 2 updates in the / directory: [homeassistant](https://github.com/home-assistant/core) and [brotli](https://github.com/google/brotli). Updates `homeassistant` from 2025.8.3 to 2025.10.2 - [Release notes](https://github.com/home-assistant/core/releases) - [Commits](home-assistant/core@2025.8.3...2025.10.2) Updates `brotli` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/google/brotli/releases) - [Changelog](https://github.com/google/brotli/blob/master/CHANGELOG.md) - [Commits](google/brotli@go/cbrotli/v1.1.0...v1.2.0) --- updated-dependencies: - dependency-name: homeassistant dependency-version: 2025.10.2 dependency-type: direct:production dependency-group: pip - dependency-name: brotli dependency-version: 1.2.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-11-28T04:22:33Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 28, 2025

dependabot bot closed this Nov 28, 2025

dependabot bot deleted the dependabot/pip/pip-a0b16f465b branch November 28, 2025 04:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the pip group across 1 directory with 2 updates #244

Bump the pip group across 1 directory with 2 updates #244

Uh oh!

dependabot bot commented on behalf of github Nov 28, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the pip group across 1 directory with 2 updates #244

Bump the pip group across 1 directory with 2 updates #244

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2025.10.2

v1.2.0

SECURITY

Added

Removed

Fixed

Improved

Changed

v1.2.0 RC2

What's Changed (compared to RC1)

v1.2.0 RC1

SECURITY

Added

[1.2.0] - 2025-10-27

SECURITY

Added

Removed

Fixed

Improved

Changed

Uh oh!

dependabot bot commented on behalf of github Nov 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 28, 2025 •

edited

Loading