Skip to content

chore(deps): bump the linting group with 3 updates#66

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/linting-2346e10478
Open

chore(deps): bump the linting group with 3 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/linting-2346e10478

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Updates the requirements on yamllint, black and flake8 to permit the latest version.
Updates yamllint to 1.38.0

Changelog

Sourced from yamllint's changelog.

1.38.0 (2026-01-13)

  • Add support for Python 3.14, drop support for Python 3.9
  • Require pathspec ≥ 1.0.0
  • Config: Follow gitignore implementation in yaml-files and ignore
  • Config: Use "mapping" instead of "dict" for user-facing errors
  • Rule indentation: Fix error message for check-multi-line-strings
  • Rule quoted-strings: Add quote-type: consistent
  • Docs: Update the name of BSD ports
  • Docs: Enhance wording of recursive directory lint in README
  • Docs: Add Alpine Linux installation instructions in README

1.37.1 (2025-05-04)

  • Rule comments: tell how many spaces are expected
  • Rule quoted-strings: Fix only-when-needed on multiline with backslash
  • Config: Report if rules is not a dict
  • Fix test_codec_built_in_equivalent() test when run with pytest
  • CI: Fix TestPyPI "dev0" versions for master commits on tags
  • Docs: Add links to GitHub repository and releases
  • Docs: Fix GitLab integration example
  • Docs: Fix GitLab integration link
  • Fix the tests badge link on the README

1.37.0 (2025-03-23)

  • Automatically detect Unicode character encoding of files
  • Publish pushes to master branch to TestPyPI

1.36.2 (2025-03-17)

  • Build: Restore missing documentation and tests in sdist

1.36.1 (2025-03-15)

  • Publish PyPI releases using GitHub Actions workflows

1.36.0 (2025-03-11)

  • Add support for Python 3.13, drop support for Python 3.8
  • Rule key-ordering: add ignored-keys option
  • Rule quoted-strings: fix only-when-needed and escaped special chars
  • Fix TTY-related tests on Python 3.14
  • Docs: fix import of yamllint.config rather than yamllint

... (truncated)

Commits
  • cba56bc yamllint version 1.38.0
  • 9dc506b Require pathspec ≥ 1.0.0 and follow Git's gitignore implementation
  • 73b9c0b Drop support for Python 3.9
  • 22d07ed indentation: Fix error message for check-multi-line-strings
  • cfbfe9b README: Add Alpine Linux installation instructions
  • a3b3bb3 README: Enhance wording of recursive directory lint
  • e3b72f5 quoted-strings: Add missing quote-type: consistent docs
  • e3d54cc quoted-strings: Add quote-type: consistent
  • 0b4ddc8 CI: Update GitHub Actions
  • 866f805 build: Remove license-files from pyproject.toml
  • Additional commits viewable in compare view

Updates black to 26.3.1

Release notes

Sourced from black's releases.

26.3.1

Stable style

  • Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

  • Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

  • Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)
Changelog

Sourced from black's changelog.

Version 26.3.1

Stable style

  • Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

  • Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

  • Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)

Version 26.3.0

Stable style

  • Don't double-decode input, causing non-UTF-8 files to be corrupted (#4964)
  • Fix crash on standalone comment in lambda default arguments (#4993)
  • Preserve parentheses when # type: ignore comments would be merged with other comments on the same line, preventing AST equivalence failures (#4888)

Preview style

  • Fix bug where if guards in case blocks were incorrectly split when the pattern had a trailing comma (#4884)
  • Fix string_processing crashing on unassigned long string literals with trailing commas (one-item tuples) (#4929)
  • Simplify implementation of the power operator "hugging" logic (#4918)

Packaging

  • Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in frozen environments (#4930)

Performance

  • Introduce winloop for windows as an alternative to uvloop (#4996)
  • Remove deprecated function uvloop.install() in favor of uvloop.new_event_loop() (#4996)
  • Rename maybe_install_uvloop function to maybe_use_uvloop to simplify loop installation and creation of either a uvloop/winloop eventloop or default eventloop (#4996)

... (truncated)

Commits

Updates flake8 to 7.3.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [yamllint](https://github.com/adrienverge/yamllint), [black](https://github.com/psf/black) and [flake8](https://github.com/pycqa/flake8) to permit the latest version.

Updates `yamllint` to 1.38.0
- [Release notes](https://github.com/adrienverge/yamllint/releases)
- [Changelog](https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst)
- [Commits](adrienverge/yamllint@v1.33.0...v1.38.0)

Updates `black` to 26.3.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.1a1...26.3.1)

Updates `flake8` to 7.3.0
- [Commits](PyCQA/flake8@6.0.0...7.3.0)

---
updated-dependencies:
- dependency-name: yamllint
  dependency-version: 1.38.0
  dependency-type: direct:production
  dependency-group: linting
- dependency-name: black
  dependency-version: 26.3.1
  dependency-type: direct:development
  dependency-group: linting
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  dependency-group: linting
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the security label Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants