Skip to content

chore(deps): bump the python-dependencies group with 2 updates - #11

Merged
SemTiOne merged 2 commits into
mainfrom
dependabot/pip/python-dependencies-3c785534fa
Jul 27, 2026
Merged

chore(deps): bump the python-dependencies group with 2 updates#11
SemTiOne merged 2 commits into
mainfrom
dependabot/pip/python-dependencies-3c785534fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on gitpython and keyring to permit the latest version.
Updates gitpython to 3.1.57

Release notes

Sourced from gitpython's releases.

3.1.57 - Security and Fixes

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

Commits
  • ccbd573 prepare for new release
  • d1a631d Merge pull request #2193 from gitpython-developers/more-unsafe-options
  • ab33e33 Merge pull request #2194 from gitpython-developers/fix-basedpyright
  • 52199b3 address review comments
  • 60dec71 Adopt basedpyright with a legacy baseline
  • 7a4f5dc Block unsafe archive additions and bundle URI
  • 3af0c25 Block unsafe checkout-index and tag file options
  • fb5d584 Merge pull request #2187 from pick7/codex/remote-progress-return-type
  • 951cc44 Merge pull request #2188 from pick7/codex/redact-http-extraheader
  • 2e5b13f Merge pull request #2189 from pick7/codex/output-stream-timeout
  • Additional commits viewable in compare view

Updates keyring to 25.7.0

Changelog

Sourced from keyring's changelog.

v25.7.0

Features

  • Improved support for KWallet 6. (#728)

Bugfixes

  • Removed cruft from Python 3.8. (#722)

v25.6.0

Features

  • Avoid logging a warning when config does not specify a backend. (#682)

v25.5.0

Features

  • When parsing keyring_path from the config, the home directory is now expanded from ~. (#696)

Bugfixes

  • In get_credential, now returns None when the indicated username is not found. (#698)

v25.4.1

Bugfixes

  • Fixed ValueError for AnonymousCredentials in CLI. (#694)

v25.4.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [gitpython](https://github.com/gitpython-developers/GitPython) and [keyring](https://github.com/jaraco/keyring) to permit the latest version.

Updates `gitpython` to 3.1.57
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.56...3.1.57)

Updates `keyring` to 25.7.0
- [Release notes](https://github.com/jaraco/keyring/releases)
- [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst)
- [Commits](jaraco/keyring@v24.0.0...v25.7.0)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.57
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: keyring
  dependency-version: 25.7.0
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
@github-actions

Copy link
Copy Markdown

♟️ chess-review-bot — PR Game Review

Accuracy: 90.0/100 · 1 files · +2/-2 · 0 Blunder??

File Category Why
requirements.txt Best small, focused, single-file change

chess-review-bot scores diffs, not people. Run chessreview --format text locally for the full report.

@SemTiOne
SemTiOne merged commit ad30a90 into main Jul 27, 2026
12 checks passed
@SemTiOne
SemTiOne deleted the dependabot/pip/python-dependencies-3c785534fa branch July 27, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant