Skip to content

Bump the python-lock group with 26 updates#6

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-lock-1bc9a65b92
Open

Bump the python-lock group with 26 updates#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-lock-1bc9a65b92

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-lock group with 26 updates:

Package From To
ruff 0.15.21 0.15.22
semgrep 1.169.0 1.170.0
anyio 4.14.1 4.14.2
boltons 21.0.0 26.0.0
click 8.1.8 8.4.2
exceptiongroup 1.2.2 1.3.1
filelock 3.29.7 3.30.2
importlib-metadata 8.7.1 9.0.0
jsonschema 4.25.1 4.26.0
mcp 1.23.3 1.28.1
opentelemetry-api 1.37.0 1.44.0
opentelemetry-exporter-otlp-proto-common 1.37.0 1.44.0
opentelemetry-exporter-otlp-proto-http 1.37.0 1.44.0
opentelemetry-instrumentation 0.58b0 0.65b0
opentelemetry-instrumentation-requests 0.58b0 0.65b0
opentelemetry-instrumentation-threading 0.58b0 0.65b0
opentelemetry-proto 1.37.0 1.44.0
opentelemetry-sdk 1.37.0 1.44.0
opentelemetry-semantic-conventions 0.58b0 0.65b0
opentelemetry-util-http 0.58b0 0.65b0
peewee 3.19.0 4.2.4
protobuf 6.33.6 7.35.1
pydantic-core 2.46.4 2.47.0
pywin32 311 312
wcmatch 8.5.2 11.0
wrapt 1.17.3 2.2.2

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates semgrep from 1.169.0 to 1.170.0

Release notes

Sourced from semgrep's releases.

Release v1.170.0

1.170.0 - 2026-07-15

### Added

  • Pro C/C++ scans now skip code inside statically-dead preprocessor branches (for example, #if 0 ... #else ... #endif). Patterns that would otherwise match against intentionally-disabled code no longer report on it. (cpp-if-zero-filter)
  • Restored obackward: semgrep-core and semgrep-core-proprietary once again print a backtrace when receiving a fatal signal (e.g. SIGSEGV) (obackward)
  • semgrep install-semgrep-pro now sends usage metrics so that installation errors can be tracked. Metrics can be disabled with --metrics off or SEMGREP_SEND_METRICS=off. Metrics payloads also now include the method used to install the Semgrep CLI (pip, homebrew, docker, or unknown), detected heuristically. See metrics.md for more details of what exactly is sent. (engine-2858)

### Changed

  • Increased the timeout for dynamic dependency resolution subprocesses from 600 to 900 seconds, giving large projects more time to resolve dependencies before timing out. (SC-3699)
  • Pro C/C++ #if 0 filtering now also handles cases where the directive splits a syntactic unit. For example, a function signature toggle like #if 0 void foo(int i) { #else void foo(uint32_t i) { #endif. (engine-994)

### Fixed

  • Fixed a crash at startup (Fatal error: Failed to allocate signal stack for domain 0) when running Semgrep on systems with musl 1.2.6 (e.g. Alpine 3.24) on recent Intel CPUs whose kernel-reported minimum signal-stack size exceeds musl's build-time SIGSTKSZ (notably AMX-capable Xeons). (ENGINE-2863)

  • Dockerfile: Fixed parse errors on RUN instructions that use heredoc syntax (<<EOF, <<-EOF, quoted delimiters). (LANG-263)

  • metavariable-type now supports fully qualified type names in languages where a qualified name in type position parses as an expression (e.g. Python's types: [a.b.C]) when the metavariable's type is determined by type inference, such as Pro engine cross-file type resolution. (LANG-583)

  • Updated the ocaml-tree-sitter-core dependency to the latest main.

    • Fails loudly on a parser/runtime ABI mismatch
    • Stamps every generated parser.c with the tree-sitter version that produced it.
    • Changed paths where tree-sitter versions are installed (lang-591)
Changelog

Sourced from semgrep's changelog.

1.170.0 - 2026-07-15

### Added

  • Pro C/C++ scans now skip code inside statically-dead preprocessor branches (for example, #if 0 ... #else ... #endif). Patterns that would otherwise match against intentionally-disabled code no longer report on it. (cpp-if-zero-filter)
  • Restored obackward: semgrep-core and semgrep-core-proprietary once again print a backtrace when receiving a fatal signal (e.g. SIGSEGV) (obackward)
  • semgrep install-semgrep-pro now sends usage metrics so that installation errors can be tracked. Metrics can be disabled with --metrics off or SEMGREP_SEND_METRICS=off. Metrics payloads also now include the method used to install the Semgrep CLI (pip, homebrew, docker, or unknown), detected heuristically. See metrics.md for more details of what exactly is sent. (engine-2858)

### Changed

  • Increased the timeout for dynamic dependency resolution subprocesses from 600 to 900 seconds, giving large projects more time to resolve dependencies before timing out. (SC-3699)
  • Pro C/C++ #if 0 filtering now also handles cases where the directive splits a syntactic unit. For example, a function signature toggle like #if 0 void foo(int i) { #else void foo(uint32_t i) { #endif. (engine-994)

### Fixed

  • Fixed a crash at startup (Fatal error: Failed to allocate signal stack for domain 0) when running Semgrep on systems with musl 1.2.6 (e.g. Alpine 3.24) on recent Intel CPUs whose kernel-reported minimum signal-stack size exceeds musl's build-time SIGSTKSZ (notably AMX-capable Xeons). (ENGINE-2863)

  • Dockerfile: Fixed parse errors on RUN instructions that use heredoc syntax (<<EOF, <<-EOF, quoted delimiters). (LANG-263)

  • metavariable-type now supports fully qualified type names in languages where a qualified name in type position parses as an expression (e.g. Python's types: [a.b.C]) when the metavariable's type is determined by type inference, such as Pro engine cross-file type resolution. (LANG-583)

  • Updated the ocaml-tree-sitter-core dependency to the latest main.

    • Fails loudly on a parser/runtime ABI mismatch
    • Stamps every generated parser.c with the tree-sitter version that produced it.
    • Changed paths where tree-sitter versions are installed (lang-591)
Commits
  • bd614ac chore: release 1.170.0
  • f3e8812semgrep/semgrep-proprietary#6571
  • 2615498 fix(cpp, pro): handle #if 0 splits across syntactic units (semgrep/semgrep-...
  • 490e1dc fix: bump OCaml compiler fork for musl signal-stack sizing (ENGINE-2863) (sem...
  • 90d5913 fix: add Gc.compact after an ExceededMemoryLimit exception in Memory_limit to...
  • aa977b9 feat(cpp, pro): prune statically-dead preprocessor #if branches (semgrep/se...
  • c83f9bcsemgrep/semgrep-proprietary#6694
  • 75b3783semgrep/semgrep-proprietary#6702
  • 74b9404 fix: parse Dockerfile RUN instructions with heredoc syntax (semgrep/semgrep-p...
  • 7cbfd85semgrep/semgrep-proprietary#6712
  • Additional commits viewable in compare view

Updates anyio from 4.14.1 to 4.14.2

Release notes

Sourced from anyio's releases.

4.14.2

  • Changed ByteReceiveStream.receive() implementations to raise a ValueError when max_bytes is not a positive integer (#1191)
  • Fixed CapacityLimiter.total_tokens rejecting float("inf") when the limiter was instantiated outside of an event loop. The adapter setter checked for infinity by identity (value is math.inf), so only the exact math.inf singleton was accepted, while every backend setter (using math.isinf()) accepts any positive infinity (#1189; PR by @​greymoth-jp).
  • Fixed to_process.run_sync() deadlocking when the worker function writes enough data to sys.stderr to fill the (undrained) pipe buffer. The worker process now redirects sys.stderr to os.devnull as well, matching the documented behavior
  • Fixed TLSStream.wrap() matching an internationalized (unicode) host name against the peer certificate using IDNA 2003 (via the standard library) instead of IDNA 2008, which could cause the host name to be matched against the wrong certificate (#1208)
  • Fixed anyio.open_process() (and run_process()) ignoring the extra_groups argument, as it mistakenly passed the value of the group argument instead (#1209)
  • Fixed CapacityLimiter.acquire_nowait() and CapacityLimiter.acquire_nowait_on_behalf_of() raising trio.WouldBlock instead of anyio.WouldBlock on the trio backend when there are no tokens available (#1218)
  • Fixed CapacityLimiter on the asyncio backend over-granting tokens (borrowed_tokens exceeding total_tokens and available_tokens going negative) when a non-blocking acquire was made in the window between a token being released and the notified waiter resuming. The freed token is now reserved for the woken waiter right away, so the non-blocking acquire correctly raises WouldBlock (#1170; PR by @​gaoflow)
  • Fixed unnecessary CPU spin when delivering cancellation from CancelScope on asyncio under certain conditions, including improper cancel scope nesting (#1111)
Commits
  • c384f99 Bumped up the version
  • dbba29d Fixed 100% CPU spin on cancel scope misuse (#1217)
  • 6bbc6c3 Fix CapacityLimiter over-granting tokens on asyncio (#1172)
  • 6f82b25 Refactored TestTLSStream.test_receive_invalid_max_bytes() to be less flaky
  • be24b04 Relaxed timeouts to fix test flakiness
  • 8113506 Fix test flakiness caused by slow callback duration logging
  • 1e988b6 Fixed CapacityLimiter raising trio.WouldBlock instead of anyio.WouldBlock (#1...
  • 44713f3 Pin setup-uv to a commit sha across downstream jobs (#1213)
  • f1b7301 Fixed stderr writes in a worker subprocess causing a deadlock (#1207)
  • 212be93 Fix flaky test_tcp_listener_same_port using a hardcoded port (#1206)
  • Additional commits viewable in compare view

Updates boltons from 21.0.0 to 26.0.0

Release notes

Sourced from boltons's releases.

26.0.0

Full Changelog: mahmoud/boltons@25.0.0...26.0.0

25.0.0

(February 2, 2025)

  • Added Python 3.13 support
  • Replace deprecated utcnow()
  • Add fsync to fileutils.atomic_save
  • Add fileutils.rotate_file

24.1.0

(November 1, 2024)

A few enhancements and one subtle bugfix.

Also Python 3.13 is passing tox locally.

24.0.0

Per the RFC in issue #365i339, boltons is now Python 3 only. 3.7+ for now. If you're a Python 2 user, feel free to pin at boltons<24.0.0.

Other minor changes:

  • Added Python 3.12 support (#361i361)
  • Fix [dictutils.OneToOne][dictutils.OneToOne]'s update() behavior with empty iterables

23.0.0

... (truncated)

Changelog

Sourced from boltons's changelog.

26.0.0

(June 19, 2026)

  • Added [funcutils.once][funcutils.once] decorator for one-time function execution
  • Added [strutils.human_readable_list][strutils.human_readable_list] for formatting lists as human-readable strings
  • Extended [iterutils.partition][iterutils.partition] to accept multiple predicates
  • Added cache option to [iterutils.remap][iterutils.remap] and [iterutils.research][iterutils.research]
  • Fixed [iterutils.split][iterutils.split] maxsplit=0 wrapping source object instead of its values
  • Fixed [listutils.BarrelList][listutils.BarrelList] insert() raising IndexError on large negative indices (now clamps like built-in list)
  • Fixed [listutils.BarrelList][listutils.BarrelList] sort() with multiple internal lists
  • Fixed [dictutils.OrderedMultiDict][dictutils.OrderedMultiDict] equality comparison against plain mappings
  • Fixed [strutils.bytes2human][strutils.bytes2human] rollover at exact powers of 1024
  • Fixed [tbutils.ParsedException.from_string][tbutils.ParsedException] IndexError on truncated tracebacks
  • Fixed [tableutils.Table.to_text][tableutils.Table] column sizing
  • Fixed [strutils.html2text][strutils.html2text] handling
  • Added Python 3.14 support

25.0.0

(February 2, 2025)

  • Added Python 3.13 support
  • Replace deprecated utcnow()
  • Add fsync to [fileutils.atomic_save][fileutils.atomic_save]
  • Add [fileutils.rotate_file][fileutils.rotate_file]

24.1.0

(November 1, 2024)

  • Added max_depth parameter to [fileutils.iter_find_files][fileutils.iter_find_files]
  • Added enter parameter to [iterutils.research][iterutils.research] to support traversing custom data types
  • Add optional print tracing for [iterutils.remap][iterutils.remap] for easier debugging
  • Fixed [typeutils.Sentinel][typeutils.make_sentinel] copy behavior to return self
  • Tentative Python 3.13 support (#365i365, #366i366)

24.0.0

Per the RFC in issue #365[i339], boltons is now Python 3 only. 3.7+ for now. If you're a Python 2 user, feel free to pin at boltons<24.0.0.

Other minor changes:

  • Added Python 3.12 support (#361[i361])
  • Fix [dictutils.OneToOne][dictutils.OneToOne]'s update() behavior with empty iterables

... (truncated)

Commits
  • fb46499 boltons version 26.0.0
  • 25e8d6b Match list insert before start in BarrelList
  • 4aa77cd Fix split maxsplit zero handling
  • 3970a80 Add release skill
  • b34c534 Modernize CI: uv/tox-uv, OIDC publish
  • 471dad1 remove unused len(self) call in BarrelList._balance_list
  • c463d16 Fix OrderedMultiDict equality to compare values against plain mappings
  • 766b554 fix(strutils): bytes2human rolls over at exact powers of 1024
  • 8a2a93d fix(tbutils): avoid IndexError in ParsedException.from_string on truncated tr...
  • 80f9eb4 Fix syntax error in MultiReplace example
  • Additional commits viewable in compare view

Updates click from 8.1.8 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
  • Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
  • Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
  • Fix empty byte-string handling in echo. {issue}3487 {pr}3493
  • Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
  • Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

  • {class}ParamType typing improvements. {pr}3371

    • {class}ParamType is now a generic abstract base class,

... (truncated)

Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates exceptiongroup from 1.2.2 to 1.3.1

Release notes

Sourced from exceptiongroup's releases.

1.3.1

  • Fixed AttributeError: 'TracebackException' object has no attribute 'exceptions' when formatting unpickled TBEs from another Python process which did not apply the exceptiongroup patches (#144)

1.3.0

  • Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library
  • In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @​mikenerone)
  • Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @​cfbolz)
  • Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior (#143)
Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

  • Fixed the repr() of exception groups being affected by mutation of the original exception sequence after construction ([#154](https://github.com/agronholm/exceptiongroup/issues/154) <https://github.com/agronholm/exceptiongroup/issues/154>_)

1.3.1

  • Fixed AttributeError: 'TracebackException' object has no attribute 'exceptions' when formatting unpickled TBEs from another Python process which did not apply the exceptiongroup patches ([#144](https://github.com/agronholm/exceptiongroup/issues/144) <https://github.com/agronholm/exceptiongroup/issues/144>_)

1.3.0

  • Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library
  • In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @​mikenerone)
  • Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @​cfbolz)
  • Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior ([#143](https://github.com/agronholm/exceptiongroup/issues/143) <https://github.com/agronholm/exceptiongroup/issues/143>_)

1.2.2

  • Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry ([#123](https://github.com/agronholm/exceptiongroup/issues/123) <https://github.com/agronholm/exceptiongroup/issues/123>_)

1.2.1

  • Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
  • Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
  • Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

  • Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has

... (truncated)

Commits
  • ddddb6f Added the release version
  • 49c5e60 Fixed AttributeError when formatting unpickled TBEs from an unpatched process
  • 1be517f [pre-commit.ci] pre-commit autoupdate (#152)
  • af0ea2f [pre-commit.ci] pre-commit autoupdate (#149)
  • 7c980a8 Removed pin on pyright version
  • ef85336 Fixed typing job not finding Python 3.14
  • 080b3f4 Pinned pyright version to fix typeshed related failure
  • ac66090 Added Python 3.14 to the test matrix
  • a0da94d Fixed test failures on Python 3.14
  • 77fba8a Added the release version
  • Additional commits viewable in compare view

Updates filelock from 3.29.7 to 3.30.2

Release notes

Sourced from filelock's releases.

3.30.2

What's Changed

Full Changelog: tox-dev/filelock@3.30.1...3.30.2

3.30.1

What's Changed

Full Changelog: tox-dev/filelock@3.30.0...3.30.1

3.30.0

What's Changed

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.30.2 (2026-07-16)

  • Stop :class:~filelock.SoftFileLease deleting a live marker whose mode it does not implement. An unrecognized mode now names its owner instead of reading as malformed, so a record written by a newer filelock survives the grace window rather than being evicted after two seconds. :pr:672
  • Stop :class:~filelock.StrictSoftFileLock and :class:~filelock.AsyncStrictSoftFileLock calling themselves a native OS lock when they warn that they ignore lifetime; they now say a strict claim is only ever cleared by force_break(). :pr:672
  • Cover every lock type in the tutorials and how-to guides, with examples drawn from projects that use filelock, and color the mermaid diagrams. Correct the claims that StrictSoftFileLock exposes owner, that :class:~filelock.SoftFileLock evicts a strict sentinel, that :class:~filelock.ReadWriteLock requires a .db extension, and that every log record is DEBUG. :pr:672

3.30.1 (2026-07-16)

  • StrictSoftFileLock and AsyncStrictSoftFileLock no longer abort acquisition when a peer's claim vanishes as an NFSv3 stale filehandle instead of a clean removal; the reader revalidates and skips it, so strict locks hold mutual exclusion across independent NFSv3 client caches. :pr:669
  • SoftFileLease reads a marker whose lease duration is nan or inf as malformed rather than as a valid lease, so such a marker ages out through the grace window instead of raising LeaseSettingsMismatch on every contender. :pr:670

3.30.0 (2026-07-16)

  • Add context_error_policy to surface body and release failures as a :exc:BaseExceptionGroup. :pr:618
  • Add close_error_policy to control an :func:os.close failure after the OS unlock. :pr:619
  • Add :func:~filelock.lock_descriptor and :func:~filelock.unlock_descriptor to lock a caller-owned file descriptor. :pr:620
  • Add fallback_to_soft to fail closed instead of downgrading to :class:~filelock.SoftFileLock on ENOSYS. :pr:622
  • Add preserve_lock_file so native locks keep the lock pathname on release. :pr:624
  • Add an on_acquired hook that runs a callback on the locked descriptor once the lock is held. :pr:625
  • Add StrictSoftFileLock, which treats every marker it did not publish as contention, and SoftFileLease, whose claim expires and whose holder learns through on_compromise when it is lost. SoftFileLock(lifetime=...) now warns and names them. Both publi...

    Description has been truncated

@dependabot
Bump the python-lock group with 26 updates
6defd99 
Bumps the python-lock group with 26 updates:

| Package | From | To |
| --- | --- | --- |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.15.22` |
| [semgrep](https://github.com/semgrep/semgrep) | `1.169.0` | `1.170.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.14.1` | `4.14.2` |
| [boltons](https://github.com/mahmoud/boltons) | `21.0.0` | `26.0.0` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.2.2` | `1.3.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.7` | `3.30.2` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.1` | `4.26.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.23.3` | `1.28.1` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.44.0` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.65b0` |
| [opentelemetry-instrumentation-requests](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.65b0` |
| [opentelemetry-instrumentation-threading](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.65b0` |
| [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.44.0` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.44.0` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.58b0` | `0.65b0` |
| [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.65b0` |
| [peewee](https://github.com/coleifer/peewee) | `3.19.0` | `4.2.4` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.35.1` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.47.0` |
| [pywin32](https://github.com/mhammond/pywin32) | `311` | `312` |
| [wcmatch](https://github.com/facelessuser/wcmatch) | `8.5.2` | `11.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.2.2` |


Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `semgrep` from 1.169.0 to 1.170.0
- [Release notes](https://github.com/semgrep/semgrep/releases)
- [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md)
- [Commits](semgrep/semgrep@v1.169.0...v1.170.0)

Updates `anyio` from 4.14.1 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.14.1...4.14.2)

Updates `boltons` from 21.0.0 to 26.0.0
- [Release notes](https://github.com/mahmoud/boltons/releases)
- [Changelog](https://github.com/mahmoud/boltons/blob/master/CHANGELOG.md)
- [Commits](mahmoud/boltons@21.0.0...26.0.0)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.1.8...8.4.2)

Updates `exceptiongroup` from 1.2.2 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.2.2...1.3.1)

Updates `filelock` from 3.29.7 to 3.30.2
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.7...3.30.2)

Updates `importlib-metadata` from 8.7.1 to 9.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.1...v9.0.0)

Updates `jsonschema` from 4.25.1 to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.1...v4.26.0)

Updates `mcp` from 1.23.3 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.23.3...v1.28.1)

Updates `opentelemetry-api` from 1.37.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.37.0...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-common` from 1.37.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.37.0...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.37.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.37.0...v1.44.0)

Updates `opentelemetry-instrumentation` from 0.58b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-requests` from 0.58b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-threading` from 0.58b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-proto` from 1.37.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.37.0...v1.44.0)

Updates `opentelemetry-sdk` from 1.37.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.37.0...v1.44.0)

Updates `opentelemetry-semantic-conventions` from 0.58b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-util-http` from 0.58b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `peewee` from 3.19.0 to 4.2.4
- [Release notes](https://github.com/coleifer/peewee/releases)
- [Changelog](https://github.com/coleifer/peewee/blob/master/CHANGELOG.md)
- [Commits](coleifer/peewee@3.19.0...4.2.4)

Updates `protobuf` from 6.33.6 to 7.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pydantic-core` from 2.46.4 to 2.47.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pywin32` from 311 to 312
- [Release notes](https://github.com/mhammond/pywin32/releases)
- [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md)
- [Commits](https://github.com/mhammond/pywin32/commits)

Updates `wcmatch` from 8.5.2 to 11.0
- [Release notes](https://github.com/facelessuser/wcmatch/releases)
- [Commits](facelessuser/wcmatch@8.5.2...11.0)

Updates `wrapt` from 1.17.3 to 2.2.2
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@1.17.3...2.2.2)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-lock
- dependency-name: semgrep
  dependency-version: 1.170.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: anyio
  dependency-version: 4.14.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-lock
- dependency-name: boltons
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: exceptiongroup
  dependency-version: 1.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: filelock
  dependency-version: 3.30.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: importlib-metadata
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-api
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-exporter-otlp-proto-common
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: python-lock
- dependency-name: opentelemetry-instrumentation-requests
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: python-lock
- dependency-name: opentelemetry-instrumentation-threading
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: python-lock
- dependency-name: opentelemetry-proto
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-sdk
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: python-lock
- dependency-name: opentelemetry-util-http
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: python-lock
- dependency-name: peewee
  dependency-version: 4.2.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: protobuf
  dependency-version: 7.35.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: pydantic-core
  dependency-version: 2.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-lock
- dependency-name: pywin32
  dependency-version: '312'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: wcmatch
  dependency-version: '11.0'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
- dependency-name: wrapt
  dependency-version: 2.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-lock
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants