Skip to content

chore(deps): bump the pip group across 1 directory with 3 updates - #4

Merged
JeanExtreme002 merged 1 commit into
mainfrom
dependabot/pip/pip-b5d306a00a
Mar 11, 2026
Merged

chore(deps): bump the pip group across 1 directory with 3 updates#4
JeanExtreme002 merged 1 commit into
mainfrom
dependabot/pip/pip-b5d306a00a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip group with 3 updates in the / directory: pydantic, idna and asyncmy.

Updates pydantic from 1.10 to 1.10.13

Release notes

Sourced from pydantic's releases.

V1.10.13 2023-09-27

What's Changed

Full Changelog: pydantic/pydantic@v1.10.12...v1.10.13

V1.10.12

What's Changed

New Contributors

Full Changelog: pydantic/pydantic@v1.10.11...v1.10.12

V1.10.11

What's Changed

New Contributors

Full Changelog: pydantic/pydantic@v1.10.10...v1.10.11

V1.10.10

What's Changed

New Contributors

Full Changelog: pydantic/pydantic@v1.10.9...v1.10.10

V1.10.9

What's Changed

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.11.10 (2025-10-04)

GitHub release

What's Changed

Fixes

v2.11.9 (2025-09-13)

GitHub release

What's Changed

Fixes

v2.11.8 (2025-09-13)

GitHub release

What's Changed

Fixes

v2.11.7 (2025-06-14)

GitHub release

What's Changed

Fixes

  • Copy FieldInfo instance if necessary during FieldInfo build by @​Viicos in #11898

v2.11.6 (2025-06-13)

GitHub release

What's Changed

Fixes

... (truncated)

Commits

Updates idna from 3.3 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

3.6 (2023-11-25) ++++++++++++++++

  • Fix regression to include tests in source distribution.

3.5 (2023-11-24) ++++++++++++++++

  • Update to Unicode 15.1.0
  • String codec name is now "idna2008" as overriding the system codec "idna" was not working.
  • Fix typing error for codec encoding
  • "setup.cfg" has been added for this release due to some downstream lack of adherence to PEP 517. Should be removed in a future release so please prepare accordingly.
  • Removed reliance on a symlink for the "idna-data" tool to comport with PEP 517 and the Python Packaging User Guide for sdist archives.
  • Added security reporting protocol for project

Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions to this release.

3.4 (2022-09-14) ++++++++++++++++

  • Update to Unicode 15.0.0
  • Migrate to pyproject.toml for build information (PEP 621)
  • Correct another instance where generic exception was raised instead of IDNAError for malformed input
  • Source distribution uses zeroized file ownership for improved reproducibility

Thanks to Seth Michael Larson for contributions to this release.

Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates asyncmy from 0.2.10 to 0.2.11

Release notes

Sourced from asyncmy's releases.

v0.2.11

What's Changed

New Contributors

Full Changelog: long2ice/asyncmy@v0.2.10...v0.2.11

Changelog

Sourced from asyncmy's changelog.

0.2.11

  • Fix 'Connection' object has no attribute '_auth_plugin_name' (#86)
Commits
  • 1fc4d0b fix: update CIBW_SKIP to simplify Python version skipping
  • 3b078d0 chore: bump version to 0.2.11
  • 8c636a0 Merge pull request #133 from Cycloctane/getpass-fix
  • f16628f Merge pull request #104 from Cycloctane/dev2
  • 0f78cfa Catch OSError in getpass
  • 2497b7b Merge pull request #132 from pksadiq/wip/sadiq/fix-auth-plugin-name
  • 1d64a08 docs: update changelog
  • e8af63d fix: 'Connection' object has no attribute '_auth_plugin_name'
  • dbbaaab Merge pull request #128 from waketzheng/use-ruff
  • 3867af1 chore: upgrade deps
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 3 updates in the / directory: [pydantic](https://github.com/pydantic/pydantic), [idna](https://github.com/kjd/idna) and [asyncmy](https://github.com/long2ice/asyncmy).


Updates `pydantic` from 1.10 to 1.10.13
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v1.10.0...v1.10.13)

Updates `idna` from 3.3 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.3...v3.7)

Updates `asyncmy` from 0.2.10 to 0.2.11
- [Release notes](https://github.com/long2ice/asyncmy/releases)
- [Changelog](https://github.com/long2ice/asyncmy/blob/dev/CHANGELOG.md)
- [Commits](long2ice/asyncmy@v0.2.10...v0.2.11)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 1.10.13
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: idna
  dependency-version: '3.7'
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: asyncmy
  dependency-version: 0.2.11
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 10, 2026
@JeanExtreme002
JeanExtreme002 merged commit 4150e71 into main Mar 11, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/pip-b5d306a00a branch March 11, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant