Skip to content

deps: update biopython requirement from <1.87,>=1.86 to >=1.86,<1.89 - #26

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/biopython-gte-1.86-and-lt-1.89
Open

deps: update biopython requirement from <1.87,>=1.86 to >=1.86,<1.89#26
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/biopython-gte-1.86-and-lt-1.89

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Updates the requirements on biopython to permit the latest version.

Changelog

Sourced from biopython's changelog.

6 August 2026: Biopython 1.88

This release of Biopython supports Python 3.10, 3.11, 3.12, 3.13, 3.14 and the Python 3.15 release candidate. It has also been tested on PyPy3.10 v7.3.19. Python 3.10 is approaching end of life, our support for it is now deprecated.

The primary driver for this release is a security fix to remove the use of Python's built-in function eval following a report by email from independent security researcher Anand Patil. This demonstrated arbitrary code execution via the Bio.Nexus NEXUS parser.

Additionally, a number of small bugs and typos have been fixed with additions to the test suite and type annotations.

Many thanks to the Biopython developers and community for making this release possible, especially the following contributors:

  • Al Fattah Suyadi (first contribution)
  • Laura Piñero Roig (first contribution)
  • Marcus Campbell (first contribution)
  • Michiel de Hoon
  • Peter Cock

30 March 2026: Biopython 1.87

This release of Biopython supports Python 3.10, 3.11, 3.12, 3.13 and 3.14. It has also been tested on PyPy3.10 v7.3.19.

Migrated from setup.py to pyproject.toml for packaging configuration.

Addressed security issue CVE-2025-68463 in Bio.Entrez.Parser if parsing untrusted files.

Additionally, a number of small bugs and typos have been fixed with additions to the test suite and type annotations.

Many thanks to the Biopython developers and community for making this release possible, especially the following contributors:

  • Manuel Lera-Ramirez
  • Michiel de Hoon
  • Peter Cock
  • Sebastian Pipping
  • Timothy Dennis (first contribution)
  • Ziyan Rao (first contribution)

28 October 2025: Biopython 1.86

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 10, 2026
Updates the requirements on [biopython](https://github.com/biopython/biopython) to permit the latest version.
- [Changelog](https://github.com/biopython/biopython/blob/master/NEWS.rst)
- [Commits](https://github.com/biopython/biopython/commits)

---
updated-dependencies:
- dependency-name: biopython
  dependency-version: '1.88'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/biopython-gte-1.86-and-lt-1.89 branch from fb67d4a to 4030eb8 Compare August 16, 2026 02:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants