8.0.0 - 2026-05-13
Summary
In this major release, several modifications were made to the PTB's workflow templates:
- For automatically resolving vulnerabilities, the
dependency-update.ymlworkflow was
added. For more details, see the Update Dependencies section. - The periodic run which was previously executed in the
ci.ymlhas been moved to its
ownperiodic-validation.ymland will run weekly. This also has been modified to
run theslow-checks.ymlso that more complete linting and coverage information is
sent to Sonar. - With the addition of
periodic-validation.yml, thepr-merge.ymlwas reduced so that
it only executesgh-pages.yml. - The unit tests job has been moved from
checks.ymlto its ownfast-tests.ymlfile. - Workflow extensions were added to
fast-testsandmerge-gate. This allows users to
add customfast-tests-extension.ymlandmerge-gate-extension.ymlfiles. For more
details, check out the Workflow Extensions section. slow-checks.ymlis only maintained by the project (not the PTB). See the Not Maintained by the PTB section.
Features
- #829: Extended removing a job from a workflow to also remove it from the
needsof another job - #825: Created two workflows by splitting up previous ones:
- Moved the periodic jobs in
ci.ymlto its ownperiodic-validation.yml - Moved the unit tests job in
checks.ymlto its ownfast-tests.yml
- Moved the periodic jobs in
- #730: Added workflow extensions to
fast-testsandmerge-gate - #756: Added
dependency-update.ymlto automate resolving vulnerabilities with a generated pull request - #792: Improved
dependency-update.ymldocumentation - #831: Switched
slow-checks.ymlto be provided by the project and not maintained by the PTB and improved output of pydantic validation of.workflow-patcher.yml
Bugfix
- #563: Fixed merge-gate to prevent auto-merges from happening when integration tests failed
Security Issues
This release fixes vulnerabilities by updating dependencies:
| Dependency | Vulnerability | Affected | Fixed in |
|---|---|---|---|
| urllib3 | CVE-2026-44431 | 2.6.3 | 2.7.0 |
| urllib3 | CVE-2026-44432 | 2.6.3 | 2.7.0 |
- #836: Relocked
poetry.lock
Dependency Updates
main
- Updated dependency
coverage:7.13.4to7.14.0 - Updated dependency
importlib-resources:6.5.2to7.1.0 - Updated dependency
mypy:1.19.1to2.1.0 - Updated dependency
nox:2026.2.9to2026.4.10 - Updated dependency
pip-licenses:5.5.1to5.5.5 - Updated dependency
pre-commit:4.5.1to4.6.0 - Updated dependency
pydantic:2.12.5to2.13.4 - Updated dependency
pysonar:1.0.2.1722to1.5.0.4793 - Updated dependency
sphinxcontrib-mermaid:2.0.1to2.0.2 - Updated dependency
typer:0.24.1to0.25.1
dev
- Updated dependency
types-pyyaml:6.0.12.20250915to6.0.12.20260510