Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deps: Bump the python-packages group with 2 updates #501

Merged
merged 1 commit into from
Mar 10, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the python-packages group with 2 updates: pontos and astroid.

Updates pontos from 25.1.0 to 25.3.2

Release notes

Sourced from pontos's releases.

pontos 25.3.2

25.3.2 - 2025-03-07

Changed

  • adding wildcard support to CPE Part; unrequire product, vendor (#1099) 2926d37

pontos 25.3.1

25.3.1 - 2025-03-06

Added

Changed

Dependencies

  • Bump jinja2 from 3.1.5 to 3.1.6 25a2369

pontos 25.3.0

[25.3.0] - 2025-03-03

Added

  • Allow to load changelog from file when creating a release ec97640
  • Allow to set a last release version 060e507
  • Add --last-release-version argument to release create CLI 5d64c6c

Changed

  • Determine git signing key when necessary only 794a235
  • Improve getting last release version for CreateReleaseCommand 357d65f
  • Improve using the project name in CreateReleaseCommand a19718b
  • Allow to pass a git instance to CreateReleaseCommand 2df6ec9
  • Allow to pass git instance for release helper functions 8de5601
  • Don't require terminals for release Commands 9e18386
  • Use sane defaults for CreateReleaseCommand async_run method bb511f5
  • Always use the same git tag prefix ca6dad2
  • Reuse matches in CPE match strings API fa75049

Dependencies

... (truncated)

Commits
  • 859e154 Automatic release to 25.3.2
  • 2926d37 Change: adding wildcard support to CPE Part; unrequire product, vendor (#1099)
  • 9b5f3e4 Automatic adjustments after release [skip ci]
  • 35fb52b Automatic release to 25.3.1
  • 6dee935 Add: Another unit test
  • 1f718d8 Change: Fix docstrings / variable names
  • 4b8a3e5 Change: Fix missing aenter method
  • d924ac8 Change: Add token to CLI interface
  • 336b2aa Add: Unit tests for SourceApi
  • 5834b86 Change: Fix typo
  • Additional commits viewable in compare view

Updates astroid from 3.3.8 to 3.3.9

Release notes

Sourced from astroid's releases.

v3.3.9

What's New in astroid 3.3.9?

Release date: 2025-03-09

Changelog

Sourced from astroid's changelog.

What's New in astroid 3.3.9?

Release date: 2025-03-09

Commits
  • a6ccad5 Bump astroid to 3.3.9, update changelog
  • ec2df97 Add setuptools in order to run 3.12/3.13 tests
  • 74c34fb Bump actions/cache from 4.2.0 to 4.2.2 (#2692)
  • 5512bf2 Update release workflow to use Trusted Publishing (#2696)
  • aad8e68 [Backport maintenance/3.3.x] Fix missing dict (#2685) (#2690)
  • 234be58 Fix RuntimeError caused by analyzing live objects with __getattribute__ or ...
  • 6aeafd5 Bump pylint in pre-commit configuration to 3.2.7
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 2 updates: [pontos](https://github.com/greenbone/pontos) and [astroid](https://github.com/pylint-dev/astroid).


Updates `pontos` from 25.1.0 to 25.3.2
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](greenbone/pontos@v25.1.0...v25.3.2)

Updates `astroid` from 3.3.8 to 3.3.9
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v3.3.8...v3.3.9)

---
updated-dependencies:
- dependency-name: pontos
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: astroid
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner March 10, 2025 04:21
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 10, 2025
@greenbonebot greenbonebot enabled auto-merge (rebase) March 10, 2025 04:21
Copy link

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@y0urself y0urself added the make release To trigger GitHub release action. label Mar 10, 2025
@greenbonebot greenbonebot merged commit 7d429df into main Mar 10, 2025
21 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-f47d20f4ca branch March 10, 2025 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file make release To trigger GitHub release action. python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants