Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the pip-deps group with 9 updates:

Package From To
ruamel-yaml 0.18.15 0.18.16
cryptography 46.0.2 46.0.3
isort 6.1.0 7.0.0
wrapt 1.17.3 2.0.0
botocore 1.40.51 1.40.60
boto3 1.40.51 1.40.60
python-on-whales 0.78.0 0.79.0
pygithub 2.7.0 2.8.1
flake8-isort 6.1.2 7.0.0

Updates ruamel-yaml from 0.18.15 to 0.18.16

Updates cryptography from 46.0.2 to 46.0.3

Changelog

Sourced from cryptography's changelog.

46.0.3 - 2025-10-15


* Fixed compilation when using LibreSSL 4.2.0.

.. _v46-0-2:

Commits

Updates isort from 6.1.0 to 7.0.0

Release notes

Sourced from isort's releases.

7.0.0

Changes

💥 Breaking Changes

🚀 Features

🪲 Fixes

👷 Continuous Integration

📦 Dependencies

Changelog

Sourced from isort's changelog.

Changelog

NOTE: isort follows the semver versioning standard. Find out more about isort's release policy here.

Commits
  • 0a09c78 Merge pull request #2433 from DanielNoord/python-314
  • 0fee794 Add 3.14 to stdlibds
  • 332a1ad Bump zstandard for 3.14 compat
  • f756e56 Merge pull request #2432 from DanielNoord/ruff-it-up
  • 52f5134 Format with ruff instead of black
  • 012aa69 Merge pull request #2431 from DanielNoord/ruff-it-up
  • 89773db Target 3.10 with ruff
  • 933e382 Merge pull request #2430 from DanielNoord/drop-39
  • 8b6e00c Remove support for Python 3.9
  • b5f9f29 Bump profile plugin to 3.10+ and re-lock
  • Additional commits viewable in compare view

Updates wrapt from 1.17.3 to 2.0.0

Release notes

Sourced from wrapt's releases.

wrapt-2.0.0

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.0.0/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 2.0.0

There have been subtle changes in various corner cases of the behaviour of the ObjectProxy class, which although not expected to cause problems, still has the potential for causing issues if code was for some reason dependent on prior behaviour. All existing code related to Python 2.X has also been removed. Finally it has also been a while since the last significant release. For all these reasons a major version bump is being made.

New Features

  • Added __all__ attribute to wrapt module to expose the public API.

  • The wrapt.PartialCallableObjectProxy class can now be accessed via the alias wrapt.partial, which is a convenience for users who are used to using functools.partial and want to use the wrapt version of it.

  • Type hints have been added to the wrapt module. The type hints are available when using Python 3.10 or later, and can be used with static type checkers such as pylance or mypy. Note that due to limitations in Python's type hinting system, type checking is not always able to be applied or details such as default values may not be available. See the documentation for more details on limitations and workarounds.

  • Added wrapt.BaseObjectProxy class which is the base class for all object proxy classes. This class is either the pure Python or C extension variant of the object proxy depending on whether the C extension is available. This used to be the ObjectProxy class, but has been renamed to BaseObjectProxy to better reflect its role as the foundational class for all object proxies. This variant does though no longer provide a proxy implementation for the __iter__() special method as it was originally a mistake to include it in the ObjectProxy class as its presence could cause issues when the wrapped object is not iterable. A wrapt.ObjectProxy class is still provided but this is now a pure Python subclass of BaseObjectProxy which adds a proxy implementation for the __iter__() special method. This is done for backwards compatibility reasons as ObjectProxy with the __iter__() special method has been part of the public API for a long time.

  • Added wrapt.AutoObjectProxy class which is a pure Python subclass of BaseObjectProxy which overrides the __new__() method to dynamically generate a custom subclass which includes methods for callable, descriptor and iterator protocols, as well as other select special methods. This is done using a dynamically generated subclass as the special methods for these protocols must be defined on the class itself and not on the instance. Because AutoObjectProxy dynamically generates a custom subclass for each instance, it has a notable memory overhead for every instance created, and thus should only be used where you know you will not be needing many instances of it. If you know what additional special methods you need, it is preferable to use BaseObjectProxy directly and add them to a subclass as needed. If you only

... (truncated)

Commits
  • d07059f Merge branch 'release/2.0.0'
  • bf2609e Update Python version in GitHub runner.
  • 0363b82 Update version to 2.0.0 for release.
  • 93ec4aa Update to 2.0.0rc6.
  • 8243dfe Support matrix being immutable.
  • 074d278 Add test for class get item.
  • 407d444 Add test for async context manager.
  • 6035572 Add tests for lazy object proxy.
  • 8005fd9 Must use separate initialized flag for C extension to work.
  • 4584e95 Add tests for auto object proxy.
  • Additional commits viewable in compare view

Updates botocore from 1.40.51 to 1.40.60

Commits
  • 9636e61 Merge branch 'release-1.40.60'
  • a8eeaa0 Bumping version to 1.40.60
  • 8d2dfe8 Update to latest models
  • 8c27884 Merge pull request #3582 from boto/dependabot/github_actions/github/codeql-ac...
  • 33444fc Bump github/codeql-action from 4.30.8 to 4.31.0
  • 665b7c4 Merge branch 'release-1.40.59'
  • 06ac0dc Merge branch 'release-1.40.59' into develop
  • b5d4a03 Bumping version to 1.40.59
  • 3e42da7 Update endpoints model
  • d47eeff Update to latest models
  • Additional commits viewable in compare view

Updates boto3 from 1.40.51 to 1.40.60

Commits
  • da0b18a Merge branch 'release-1.40.60'
  • 54b724b Bumping version to 1.40.60
  • 9dc2aee Add changelog entries from botocore
  • 87655ba Test 3.14-dev to 3.14 (#4647)
  • 0681062 Bump github/codeql-action from 4.30.8 to 4.31.0 (#4649)
  • ba90489 Merge branch 'release-1.40.59'
  • e8ddeb6 Merge branch 'release-1.40.59' into develop
  • c5c73e9 Bumping version to 1.40.59
  • 7194041 Add changelog entries from botocore
  • 52cedfe Merge branch 'release-1.40.58'
  • Additional commits viewable in compare view

Updates python-on-whales from 0.78.0 to 0.79.0

Release notes

Sourced from python-on-whales's releases.

v0.79.0

What's Changed

New Contributors

Thank you for your contributions! This makes me very happy to see new faces!

Full Changelog: gabrieldemarmiesse/python-on-whales@v0.78.0...v0.79.0

Commits
  • 4978524 Bump python-on-whales version to 0.79.0
  • d39aaee Add metadata_file opt-in for buildx builds (#689)
  • b694f85 Improve typing of run by using @overload (#685)
  • 488ab4a [Docs] Enable Syntax Highlighting (#686)
  • 88eae67 feat : Add support for Docker service networks in ComposeService (#683)
  • See full diff in compare view

Updates pygithub from 2.7.0 to 2.8.1

Release notes

Sourced from pygithub's releases.

v2.8.1

What's Changed

Bug Fixes

Full Changelog: PyGithub/PyGithub@v2.8.0...v2.8.1

v2.8.0

What's Changed

New Features

Improvements

Bug Fixes

Maintenance

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.8.1 (September 02, 2025)

Bug Fixes ^^^^^^^^^

  • Use default type if known type is not supported ([#3365](https://github.com/pygithub/pygithub/issues/3365) <https://github.com/PyGithub/PyGithub/pull/3365>) (40506415 <https://github.com/PyGithub/PyGithub/commit/40506415>)

Version 2.8.0 (September 02, 2025)

New Features ^^^^^^^^^^^^

  • Add self hosted runner management to Organization ([#3203](https://github.com/pygithub/pygithub/issues/3203) <https://github.com/PyGithub/PyGithub/pull/3203>) (4ea1c4e2 <https://github.com/PyGithub/PyGithub/commit/4ea1c4e2>)
  • Add support to generate release notes ([#3022](https://github.com/pygithub/pygithub/issues/3022) <https://github.com/PyGithub/PyGithub/pull/3022>) (e359b83a <https://github.com/PyGithub/PyGithub/commit/e359b83a>)

Improvements ^^^^^^^^^^^^

  • Fix connection pooling to improve connection performance ([#3289](https://github.com/pygithub/pygithub/issues/3289) <https://github.com/PyGithub/PyGithub/pull/3289>_)
  • Add Repository.get_automated_security_fixes method ([#3303](https://github.com/pygithub/pygithub/issues/3303) <https://github.com/PyGithub/PyGithub/pull/3303>) (22048d83 <https://github.com/PyGithub/PyGithub/commit/22048d83>)
  • Sync Issue class with API spec ([#3338](https://github.com/pygithub/pygithub/issues/3338) <https://github.com/PyGithub/PyGithub/pull/3338>) (62da467a <https://github.com/PyGithub/PyGithub/commit/62da467a>)
  • Return more union classes like NamedUser | Organization | Enterprise ([#3224](https://github.com/pygithub/pygithub/issues/3224) <https://github.com/PyGithub/PyGithub/pull/3224>) (aea64148 <https://github.com/PyGithub/PyGithub/commit/aea64148>)
  • Sync Enterprise class with API spec ([#3342](https://github.com/pygithub/pygithub/issues/3342) <https://github.com/PyGithub/PyGithub/pull/3342>) (01bb5ab1 <https://github.com/PyGithub/PyGithub/commit/01bb5ab1>)
  • Sync GitReleaseAsset class with API spec ([#3343](https://github.com/pygithub/pygithub/issues/3343) <https://github.com/PyGithub/PyGithub/pull/3343>) (74449fed <https://github.com/PyGithub/PyGithub/commit/74449fed>)
  • Sync many class with OpenAPI spec ([#3344](https://github.com/pygithub/pygithub/issues/3344) <https://github.com/PyGithub/PyGithub/pull/3344>_)
  • Point deprecation warnings to the caller code rather than inner class ([#3275](https://github.com/pygithub/pygithub/issues/3275) <https://github.com/PyGithub/PyGithub/pull/3275>) (99bb5270 <https://github.com/PyGithub/PyGithub/commit/99bb5270>)
  • Allow for repo strings in all Team repo methods ([#3356](https://github.com/pygithub/pygithub/issues/3356) <https://github.com/PyGithub/PyGithub/pull/3356>) (3234a21f <https://github.com/PyGithub/PyGithub/commit/3234a21f>)

Bug Fixes ^^^^^^^^^

  • Fix API path of Repository.get_git_ref ([#2992](https://github.com/pygithub/pygithub/issues/2992) <https://github.com/PyGithub/PyGithub/pull/2992>) (a6965031 <https://github.com/PyGithub/PyGithub/commit/a6965031>)
  • Rework redirection URL allowance check ([#3329](https://github.com/pygithub/pygithub/issues/3329) <https://github.com/PyGithub/PyGithub/pull/3329>) (065b1319 <https://github.com/PyGithub/PyGithub/commit/065b1319>)
  • Fix GitRelease.name, deprecate GitRelease.title ([#3346](https://github.com/pygithub/pygithub/issues/3346) <https://github.com/PyGithub/PyGithub/pull/3346>) (fb51957f <https://github.com/PyGithub/PyGithub/commit/fb51957f>)
  • Remove "COMMENT" as the default event for create_review ([#3078](https://github.com/pygithub/pygithub/issues/3078) <https://github.com/PyGithub/PyGithub/pull/3078>) (8494da5c <https://github.com/PyGithub/PyGithub/commit/8494da5c>)
  • Add support for public release assets ([#3339](https://github.com/pygithub/pygithub/issues/3339) <https://github.com/PyGithub/PyGithub/pull/3339>) (abad296e <https://github.com/PyGithub/PyGithub/commit/abad296e>)
  • Fix GitHub breaking API change of maintainers in Organization.create_team ([#3291](https://github.com/pygithub/pygithub/issues/3291) <https://github.com/PyGithub/PyGithub/pull/3291>) (17bc4df4 <https://github.com/PyGithub/PyGithub/commit/17bc4df4>)

Maintenance ^^^^^^^^^^^

  • Minor fix to release.yml ([#3201](https://github.com/pygithub/pygithub/issues/3201) <https://github.com/PyGithub/PyGithub/pull/3201>) (f1fc6e7c <https://github.com/PyGithub/PyGithub/commit/f1fc6e7c>)
  • Reduce test replay data ([#3243](https://github.com/pygithub/pygithub/issues/3243) <https://github.com/PyGithub/PyGithub/pull/3243>) (19426454 <https://github.com/PyGithub/PyGithub/commit/19426454>)
  • Add check to OpenAPI script to check doc-string verbs ([#3332](https://github.com/pygithub/pygithub/issues/3332) <https://github.com/PyGithub/PyGithub/pull/3332>) (3efde77d <https://github.com/PyGithub/PyGithub/commit/3efde77d>)
  • Improve apply OpenAPI schemas ([#3333](https://github.com/pygithub/pygithub/issues/3333) <https://github.com/PyGithub/PyGithub/pull/3333>) (ec189dd6 <https://github.com/PyGithub/PyGithub/commit/ec189dd6>)
  • Add config to OpenAPI script to ignore schemas ([#3334](https://github.com/pygithub/pygithub/issues/3334) <https://github.com/PyGithub/PyGithub/pull/3334>) (0478d33b <https://github.com/PyGithub/PyGithub/commit/0478d33b>)
  • Add suggest and create method feature to OpenAPI script ([#3318](https://github.com/pygithub/pygithub/issues/3318) <https://github.com/PyGithub/PyGithub/pull/3318>_)
  • Fix CI OpenApi apply command ([#3341](https://github.com/pygithub/pygithub/issues/3341) <https://github.com/PyGithub/PyGithub/pull/3341>) (cdc10a27 <https://github.com/PyGithub/PyGithub/commit/cdc10a27>)
  • Improve OpenAPI scripts ([#3340](https://github.com/pygithub/pygithub/issues/3340) <https://github.com/PyGithub/PyGithub/pull/3340>) (ad278c5f <https://github.com/PyGithub/PyGithub/commit/ad278c5f>)
  • Improve OpenAPI CI ([#3347](https://github.com/pygithub/pygithub/issues/3347) <https://github.com/PyGithub/PyGithub/pull/3347>) (8165bbc9 <https://github.com/PyGithub/PyGithub/commit/8165bbc9>)
  • Rework test framework ([#3271](https://github.com/pygithub/pygithub/issues/3271) <https://github.com/PyGithub/PyGithub/pull/3271>) (1b700187 <https://github.com/PyGithub/PyGithub/commit/1b700187>)
  • Some minor fixes to OpenAPI scripts ([#3350](https://github.com/pygithub/pygithub/issues/3350) <https://github.com/PyGithub/PyGithub/pull/3350>) (a813a945 <https://github.com/PyGithub/PyGithub/commit/a813a945>)
  • Add manual workflow to fix auto-fixable issues ([#3351](https://github.com/pygithub/pygithub/issues/3351) <https://github.com/PyGithub/PyGithub/pull/3351>) (0e6317d9 <https://github.com/PyGithub/PyGithub/commit/0e6317d9>)

... (truncated)

Commits

Updates flake8-isort from 6.1.2 to 7.0.0

Changelog

Sourced from flake8-isort's changelog.

7.0.0 (2025-10-25)

  • Add support for isort 7.0.0. [gforcada]

  • Drop python 3.9 support and add Python 3.14 support. [gforcada]

  • Bump pypy minimum version to 3.10.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file labels Oct 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 27, 2025 23:47
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file labels Oct 27, 2025
@dependabot dependabot bot requested review from lsierant and nammn October 27, 2025 23:47
@github-actions
Copy link

github-actions bot commented Oct 27, 2025

⚠️ (this preview might not be accurate if the PR is not rebased on current master branch)

MCK 1.6.0 Release Notes

New Features

  • MongoDBCommunity: Added support to configure custom cluster domain via newly introduced spec.clusterDomain resource field. If spec.clusterDomain is not set, environment variable CLUSTER_DOMAIN is used as cluster domain. If the environment variable CLUSTER_DOMAIN is also not set, operator falls back to cluster.local as default cluster domain.
  • Helm Chart: Introduced two new helm fields operator.podSecurityContext and operator.securityContext that can be used to configure securityContext for Operator deployment through Helm Chart.
  • MongoDBSearch: Switch to gRPC and mTLS for internal communication
    Since MCK 1.4 the mongod and mongot processess communicated using the MongoDB Wire Protocol and used keyfile authentication. This release switches that to gRPC with mTLS authentication. gRPC will allow for load-balancing search queries against multiple mongot processes in the future, and mTLS decouples the internal cluster authentication mode and credentials among mongod processes from the connection to the mongot process. The Operator will automatically enable gRPC for existing and new workloads, and will enable mTLS authentication if both Database Server and MongoDBSearch resource are configured for TLS.

Bug Fixes

  • Fixed parsing of the customEnvVars Helm value when values contain = characters.
  • ReplicaSet: Blocked disabling TLS and changing member count simultaneously. These operations must now be applied separately to prevent configuration inconsistencies.

Other Changes

  • kubectl-mongodb plugin: cosign, the signing tool that is used to sign kubectl-mongodb plugin binaries, has been updated to version 3.0.2. With this change, released binaries will be bundled with .bundle files containing both signature and certificate information. For more information on how to verify signatures using new cosign version please refer to -> https://github.com/sigstore/cosign/blob/v3.0.2/doc/cosign_verify-blob.md

Bumps the pip-deps group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| ruamel-yaml | `0.18.15` | `0.18.16` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.2` | `46.0.3` |
| [isort](https://github.com/PyCQA/isort) | `6.1.0` | `7.0.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.0.0` |
| [botocore](https://github.com/boto/botocore) | `1.40.51` | `1.40.60` |
| [boto3](https://github.com/boto/boto3) | `1.40.51` | `1.40.60` |
| [python-on-whales](https://github.com/gabrieldemarmiesse/python-on-whales) | `0.78.0` | `0.79.0` |
| [pygithub](https://github.com/pygithub/pygithub) | `2.7.0` | `2.8.1` |
| [flake8-isort](https://github.com/gforcada/flake8-isort) | `6.1.2` | `7.0.0` |


Updates `ruamel-yaml` from 0.18.15 to 0.18.16

Updates `cryptography` from 46.0.2 to 46.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.2...46.0.3)

Updates `isort` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.1.0...7.0.0)

Updates `wrapt` from 1.17.3 to 2.0.0
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@1.17.3...2.0.0)

Updates `botocore` from 1.40.51 to 1.40.60
- [Commits](boto/botocore@1.40.51...1.40.60)

Updates `boto3` from 1.40.51 to 1.40.60
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.51...1.40.60)

Updates `python-on-whales` from 0.78.0 to 0.79.0
- [Release notes](https://github.com/gabrieldemarmiesse/python-on-whales/releases)
- [Commits](gabrieldemarmiesse/python-on-whales@v0.78.0...v0.79.0)

Updates `pygithub` from 2.7.0 to 2.8.1
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.7.0...v2.8.1)

Updates `flake8-isort` from 6.1.2 to 7.0.0
- [Changelog](https://github.com/gforcada/flake8-isort/blob/main/CHANGES.rst)
- [Commits](gforcada/flake8-isort@6.1.2...7.0.0)

---
updated-dependencies:
- dependency-name: ruamel-yaml
  dependency-version: 0.18.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: cryptography
  dependency-version: 46.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: isort
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: wrapt
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: botocore
  dependency-version: 1.40.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.40.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: python-on-whales
  dependency-version: 0.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: pygithub
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: flake8-isort
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/pip-deps-48da371a50 branch from c562fed to 910f807 Compare November 3, 2025 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant