Skip to content

chore(pip): bump the python group across 1 directory with 6 updates - #829

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/src/python-c067036189
Open

chore(pip): bump the python group across 1 directory with 6 updates#829
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/src/python-c067036189

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 6 updates in the /src directory:

Package From To
basedpyright 1.39.10 1.40.1
bazel-runfiles 2.3.2 2.3.3
pydata-sphinx-theme 0.20.0 0.21.0
sphinx-mounts 0.1.4 0.2.0
sphinx-needs 8.3.1 8.5.0
sphinxcontrib-mermaid 2.1.0 2.1.1

Updates basedpyright from 1.39.10 to 1.40.1

Release notes

Sourced from basedpyright's releases.

v1.40.1 (pyright 1.1.414)

What's Changed

Full Changelog: DetachHead/basedpyright@v1.40.0...v1.40.1

v1.40.0 (pyright 1.1.412)

What's Changed

New Contributors

Full Changelog: DetachHead/basedpyright@v1.39.10...v1.40.0

Commits
  • e7fca69 1.40.1
  • f7b6ad0 add checks when there are multiline indents for doc strings, update (#1882)
  • 1bc4879 fix broken docs links
  • 845bfe1 move and baseline basedpyright errors in new build scripts from upstream
  • a9189ef prettier fix
  • 756bfaa fix build:extension:dev script
  • a7a2efd syncpack fix
  • 5f6749f fix tests
  • bb9b24f fix zizmor errors in new workflows from upstream
  • b8ccd0e fix compile errors from merge
  • Additional commits viewable in compare view

Updates bazel-runfiles from 2.3.2 to 2.3.3

Release notes

Sourced from bazel-runfiles's releases.

2.3.3

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "2.3.3")
python = use_extension("@​rules_python//python/extensions:python.bzl", "python")
python.toolchain(
python_version = "3.13",
)
pip = use_extension("@​rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
hub_name = "pypi",
python_version = "3.13",
requirements_lock = "//:requirements_lock.txt",
)
use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "rules_python",
sha256 = "f700c75859a827a2e3e3ba4c9c0ec2d796e191bf0438ac3fee0b7851d83a3d4c",
strip_prefix = "rules_python-2.3.3",
url = "https://github.com/bazel-contrib/rules_python/releases/download/2.3.3/rules_python-2.3.3.tar.gz",
)
load("@​rules_python//python:repositories.bzl", "py_repositories")
py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

... (truncated)

Changelog

Sourced from bazel-runfiles's changelog.

2.3.3 - 2026-09-04

{#v2-3-3-changed}

Changed

  • (publish): The twine packages are now configured for three major platforms.

{#v2-3-3-fixed}

Fixed

  • (gazelle) Fixed a regression from version 1.8.0 which broke module map generation for old-style namespace packages. (#4135).
  • (zipapp) Fixed handling of {obj}PyRuntimeInfo with files = None so creating zipapp archives does not error.

{#v2-3-2}

Commits

Updates pydata-sphinx-theme from 0.20.0 to 0.21.0

Release notes

Sourced from pydata-sphinx-theme's releases.

v0.21.0

What's Changed

Breaking

None.

Fixes

Improvements

Dependencies

New Contributors

Full Changelog: pydata/pydata-sphinx-theme@v0.20.0...v0.21.0

Commits
  • a52f5c9 Bump 0.20.0 -> 0.21.0 (#2472)
  • dc10572 Prevent "Back to Top" button from being cropped on firefox/android (#2442)
  • a9f2040 Bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#2468)
  • fe3f573 Bump py-cov-action/python-coverage-comment-action from 4.1 to 4.3 (#2467)
  • 3e15d01 fix: don't share sidebars between pages with non-flat output URIs (#2469)
  • c90610d fix: correct typo in source (#2459)
  • 051ac2c Avoid redundant processing when collapse_navigation=False (#2449)
  • ca91fce refactor: drop user-select rule superseded by Sphinx's basic.css (#2464)
  • 2a63b5c Bump js-yaml from 4.2.0 to 4.3.1 (#2463)
  • cbb254b Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#2460)
  • Additional commits viewable in compare view

Updates sphinx-mounts from 0.1.4 to 0.2.0

Release notes

Sourced from sphinx-mounts's releases.

0.2.0

What's Changed

New Contributors

Full Changelog: useblocks/sphinx-mounts@0.1.4...0.2.0

Changelog

Sourced from sphinx-mounts's changelog.

0.2.0

:Released: 2026-08-27

.. note::

Cache invalidation: the extension now declares an env_version, so the first build after upgrading discards its cached build environment and re-reads every document once. No action is required.

It is at 3 rather than 1 because both variant-gating keys — :ref:variant rules <variant-sources> and :ref:if on a mount entry <mount-gating> — change which docnames a project produces, and an environment written before those readers existed describes a document set this version would not have built. The second bump also covers a new field in the pickled shape of the mount-aware project.

  • sphinx-mounts now reads :ref:[[source.variant_sources]] <variant-sources>, the shared ubproject.toml key that decides which files are part of the build for the current build variant. Every rule whose if condition is false excludes its files; a file no false rule matches is unaffected. Rules only ever narrow, and their order does not matter.

    Host files leave through exclude_patterns, and files in a directory mount leave through that mount's own walk, so a rule reaches a bundle without knowing where it is mounted. A gating flip converges on the build where it happened, in both directions, without sphinx-build -E.

    No rule narrows a file-list mount — one declared with files = [...] rather than dir — under any rule spelling, and neither does ubCode's: a file-list mount's entries are an explicit request for named files and bypass pattern matching entirely. Use a directory mount for a bundle whose file set has to be narrowable by a rule.

    That is a statement about rules. A whole-mount if (below) gates a file-list mount exactly as it gates a directory one, in both tools. The two questions have opposite answers; per-file rule gating of a file-list mount stays unsupported.

    A project with no mounts at all can install sphinx-mounts purely for this, to have sphinx-build narrow its document set per variant exactly as ubCode_ does. Before this release the same ubproject.toml gave the two tools different document sets.

    The variant map is computed here rather than depended on: the JSON file named by variant_data_file is deep-merged under the inline [needs.variant_data] table, unconditionally. That is a no-op when Sphinx-Needs has already resolved, supplies the merge it has not performed yet on 8.3.1 and earlier, and is the whole computation when Sphinx-Needs is

... (truncated)

Commits
  • d23451a 🚀 Release v0.2.0 (#40)
  • 16d5854 ✨ Read if on a [[source.mounts]] entry: gate a whole bundle per variant (...
  • b0cc64e ✨ Read [[source.variant_sources]]: sphinx-build narrows its document set pe...
  • 72b5032 📚 Record ubCode's declared divergences in the mapping contract (#31)
  • 3467fee 🐛 Fix incremental attach_to staleness, collision detection and path-check rep...
  • See full diff in compare view

Updates sphinx-needs from 8.3.1 to 8.5.0

Release notes

Sourced from sphinx-needs's releases.

8.5.0

What's Changed

Full Changelog: useblocks/sphinx-needs@8.4.0...8.5.0

8.4.0

What's Changed

... (truncated)

Changelog

Sourced from sphinx-needs's changelog.

8.5.0

:Released: 03.09.2026 :Full Changelog: v8.4.0...v8.5.0 <https://github.com/useblocks/sphinx-needs/compare/8.4.0...8.5.0>__

This release is about charts, and about the tooling behind the project. :ref:needpie and :ref:needbar gain a scope — the same :filter:, :status:, :tags: and :types: options a view directive takes — and accept the cypher option a chart authored for ubCode_ carries, so one document builds in both tools. Schema validation errors now name the keyword that failed and report a $ref at its definition, which changes their text. The bug fixes continue the previous release's theme: a :ref:needuml, :ref:needarch or :ref:needextract input that used to end the build with a traceback, and a malformed :ref:needs_warnings filter, are now located warnings — and, for a project that builds with -W, can turn a green build red until the reported mistake is fixed or suppressed. Under the hood the development toolchain moves to a committed uv.lock, poe tasks and ty; none of that touches the published package.

Improvements ............

  • ✨ :ref:needpie and :ref:needbar now accept the :filter:, :status:, :tags: and :types: options, as the scope a chart is counted over (:pr:1831)

    The four options were rejected on both chart directives with an unknown option error. They now select the needs and parts a chart counts over, once for the whole chart: every content line or grid cell is counted as its own result restricted to that scope, a static value such as 10 is left alone, and a chart that carries none of the four counts over the whole project exactly as it did before.

    A scope holds what the same four options select on a view directive such as :ref:needlist, so a chart and a list written with the same options select the same needs. On :ref:needpie a :filter-func: is handed the needs of the scope, as the same view an unscoped chart hands it, so a scope restricts what such a function counts from, not what it returns. The view gains one public method for that, NeedsAndPartsListView.filter_id_complete, which selects exactly the given needs and parts by id_complete.

    Neither directive gains an empty state it did not have: a pie of only filter lines whose scope selects nothing shows its :filter_warning: text, exactly as it does for filters that match nothing, while a bar chart, which has no such text, draws all zeros.

    This is also the Sphinx-Needs half of a chart authored for ubCode_: the cypher query ubCode reads as a chart's scope is ignored by a Sphinx build, so writing the same scope with these options beside the query makes both tools count over the same needs. See :ref:needpie_scope and :ref:needbar_scope.

  • 👌 :ref:Schema validation <schema_validation> errors now name the failing keyword, and report $ref targets at their definition (changed output) (:pr:1819)

... (truncated)

Commits
  • 6686298 🚀 Release v8.5.0 (#1833)
  • 356d5db 🔧 Replace mypy with ty for type checking (#1830)
  • adc2a0e 🔧 Exempt third-party node classes from the test-suite parent check, so the be...
  • fc6e5d7 ✨ needpie / needbar: filter, status, tags and types scope the chart (#1831)
  • 2ad37c5 ⬆️ Bump pytest-cov from 6.3.0 to 7.1.0 (#1828)
  • 7003296 🔧 Bump actions/setup-python from 5 to 7 (#1824)
  • f52b26a 🔧 Bump cypress-io/github-action from 6 to 7 (#1827)
  • f29fa61 🔧 Bump actions/cache from 4 to 6 (#1811)
  • d164dea 🔧 Bump docker/metadata-action from 5 to 6 (#1826)
  • 0de3cbd 🔧 Bump actions/setup-node from 4 to 7 (#1825)
  • Additional commits viewable in compare view

Updates sphinxcontrib-mermaid from 2.1.0 to 2.1.1

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.1 (July 19, 2026)

  • Preserve source metadata on generated Mermaid caption nodes so Sphinx extracts them into gettext catalogs and applies normal caption translations
  • Pass the existing mermaid image class through the HTML visitor so PNG output can be targeted consistently with CSS
Commits
  • 6e51230 Merge pull request #262 from mgaitan/tkp/211
  • 7c61bb6 Merge pull request #264 from mgaitan/dependabot/github_actions/github-actions...
  • 77bd593 Merge branch 'master' into dependabot/github_actions/github-actions-a934d7c76e
  • d1b8ca8 Merge pull request #265 from mgaitan/tkp/ruff
  • 4ad2812 Fixes for ruff 16
  • 056261d Bump pypa/gh-action-pypi-publish in the github-actions group
  • 015f47a Merge pull request #263 from mgaitan/dependabot/github_actions/github-actions...
  • a8f8b59 Bump the github-actions group with 3 updates
  • e81147d Bump to 2.1.1 and update changelog
  • e267890 Merge pull request #261 from timkpaine/tkp/translate-mermaid-captions
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 15, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 15, 2026
@dependabot
chore(pip): bump the python group across 1 directory with 6 updates
46b70cf 
Bumps the python group with 6 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.10` | `1.40.1` |
| [bazel-runfiles](https://github.com/bazel-contrib/rules_python) | `2.3.2` | `2.3.3` |
| [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.20.0` | `0.21.0` |
| [sphinx-mounts](https://github.com/useblocks/sphinx-mounts) | `0.1.4` | `0.2.0` |
| [sphinx-needs](https://github.com/useblocks/sphinx-needs) | `8.3.1` | `8.5.0` |
| [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) | `2.1.0` | `2.1.1` |



Updates `basedpyright` from 1.39.10 to 1.40.1
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.39.10...v1.40.1)

Updates `bazel-runfiles` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/bazel-contrib/rules_python/releases)
- [Changelog](https://github.com/bazel-contrib/rules_python/blob/main/CHANGELOG.md)
- [Commits](bazel-contrib/rules_python@2.3.2...2.3.3)

Updates `pydata-sphinx-theme` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases)
- [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md)
- [Commits](pydata/pydata-sphinx-theme@v0.20.0...v0.21.0)

Updates `sphinx-mounts` from 0.1.4 to 0.2.0
- [Release notes](https://github.com/useblocks/sphinx-mounts/releases)
- [Changelog](https://github.com/useblocks/sphinx-mounts/blob/main/docs/source/changelog.rst)
- [Commits](useblocks/sphinx-mounts@0.1.4...0.2.0)

Updates `sphinx-needs` from 8.3.1 to 8.5.0
- [Release notes](https://github.com/useblocks/sphinx-needs/releases)
- [Changelog](https://github.com/useblocks/sphinx-needs/blob/8.5.0/docs/changelog.rst)
- [Commits](useblocks/sphinx-needs@8.3.1...8.5.0)

Updates `sphinxcontrib-mermaid` from 2.1.0 to 2.1.1
- [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md)
- [Commits](mgaitan/sphinxcontrib-mermaid@2.1.0...2.1.1)

---
updated-dependencies:
- dependency-name: basedpyright
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: bazel-runfiles
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pydata-sphinx-theme
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sphinx-mounts
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sphinx-needs
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sphinxcontrib-mermaid
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/src/python-c067036189 branch from 9411fe4 to 46b70cf Compare September 18, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AlexanderLanin AlexanderLanin Awaiting requested review from AlexanderLanin AlexanderLanin is a code owner
@MaximilianSoerenPollak MaximilianSoerenPollak Awaiting requested review from MaximilianSoerenPollak MaximilianSoerenPollak is a code owner
@dcalavrezo-qorix dcalavrezo-qorix Awaiting requested review from dcalavrezo-qorix dcalavrezo-qorix is a code owner
@nradakovic nradakovic Awaiting requested review from nradakovic nradakovic is a code owner
@a-zw a-zw Awaiting requested review from a-zw a-zw is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

INF - Infrastructure Community
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants