Skip to content

Bump the all-deps group across 1 directory with 7 updates - #1335

Merged
sliverc merged 1 commit into
mainfrom
dependabot/pip/requirements/all-deps-cba70fd4ce
Oct 9, 2026
Merged

Bump the all-deps group across 1 directory with 7 updates#1335
sliverc merged 1 commit into
mainfrom
dependabot/pip/requirements/all-deps-cba70fd4ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 7 updates in the /requirements directory:

Package From To
black 26.5.1 26.10.0
flake8 7.3.0 7.4.1
flake8-bugbear 25.11.29 26.9.30
isort 9.0.1 9.0.2
django-filter 26.1 26.2
faker 40.37.0 40.41.0
syrupy 6.0.0 6.1.1

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)
  • Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits
  • 4f1883b Prepare release 26.10.0 (#5478)
  • 93e5c82 Do not split a docstring on non-newline characters (#5461)
  • 2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
  • d078e8e Refactor release process to be more automated and use immutable releases (#5296)
  • 6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
  • cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
  • 9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
  • e1c4783 Fix --force-exclude for paths containing .. (#5471)
  • 34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
  • 5fe7881 Fix preview blank lines after a stub method (#5439)
  • Additional commits viewable in compare view

Updates flake8 from 7.3.0 to 7.4.1

Commits

Updates flake8-bugbear from 25.11.29 to 26.9.30

Release notes

Sourced from flake8-bugbear's releases.

26.9.30

  • B008: resolve direct module-level imports and aliases when matching extend-immutable-calls (#252)
  • B015: allow comparisons inside pytest/unittest exception and warning assertion context managers, where an overloaded comparison may intentionally raise (#462).
  • B020: stop flagging names bound inside nested destructuring patterns, like series in for i, (ax, (series, name)) in enumerate(zip(axs, series)); the loop rebinds the top-level targets, not those names (#521)
  • Add Python 3.15 support / CI
  • B913: fix crash on {**d for d in ...} dict unpacking in comprehensions, new in Python 3.15; B035 no longer mistakes the unpacked expression for a static key
  • B018: also report unary and arithmetic operations used as statements, such as a +c * d continuation line that lost its parentheses (#452)
  • B042: don't treat a class named like an exception as one when its only bases are parameterized generics such as ContextManager[T]; a generic base named like an exception, such as MyError[int], now counts (#538)

26.9.9

  • B044: New check for assert <generator_expression>, which is always true (#534)
  • B031: allow reusing a group after assigning list(group) or tuple(group) back to the same name (#395)
  • B028: report warnings.warn calls that pass an explicitly empty skip_file_prefixes tuple (#510)
  • B019: also flag async_lru.alru_cache and check cache decorators on async def methods (#488)
  • B023: don't flag a function whose every reference is a direct call inside the loop body (#468, #380)
  • B020: don't flag for self.a in self.b: rebinding an attribute is not rebinding the base name (#248)
  • B018: handle also useless calls such as isinstance(x, int) without assigning or using the result
  • B031: don't count a store-context reference as a use of the groupby generator, and don't treat references in mutually exclusive if/elif/else branches as multiple uses (#465)
  • B902: don't raise a false positive on a metaclass defined with a dotted base such as abc.ABCMeta or enum.EnumMeta (#411)
  • B913: Add an optional check for unused _ targets in zip() loops (#545)
  • B912: only emit on Python 3.14+ where map() supports strict= (#548)
Commits
  • 219344d Release 26.9.30
  • 7fd9119 Merge pull request #574 from 1678092075/fix/b008-imported-immutable-calls
  • c94cb3e B008: resolve imported immutable calls
  • b81c4e0 Fix B015 false positives in exception assertion contexts (#583)
  • 02aba14 [pre-commit.ci] pre-commit autoupdate (#582)
  • 47de1bb B020: only match top-level bindings of the loop target (#581)
  • d64ab05 Add Python 3.15 support / CI + fix B913 crash on unpack dict comprehensions (...
  • fa5fe9e B018: report useless unary and arithmetic operations (#579)
  • 4c3f7b6 B042: don't count a parameterized generic base as an exception super class (#...
  • 1de11dc Add description of recursion errors handling to 26.9.9 changelog (#577)
  • Additional commits viewable in compare view

Updates isort from 9.0.1 to 9.0.2

Release notes

Sourced from isort's releases.

9.0.2

🪲 Fixes

Other changes

Full Changelog: PyCQA/isort@9.0.1...9.0.2

Commits
  • 9f90561 Core developers revision
  • 4371472 Fix a "security" issue
  • e74b4ba Do some formatting and setting updates
  • 539abb1 Bump the uv group with 15 updates
  • 0482160 Fully type check tests and modernize code
  • bbda474 Bump pypa/cibuildwheel from 4.2.0 to 4.2.1 in the github-actions group
  • 1fd0701 Agent Host changes for agents/dependabot-monthly-updates-uv
  • 6911091 Always split on parsed.line_separator
  • 3808b70 Keep CRLF regression cases beside existing check-mode tests
  • 3202ce8 Preserve CRLF blank lines during float-to-top preprocessing
  • Additional commits viewable in compare view

Updates django-filter from 26.1 to 26.2

Changelog

Sourced from django-filter's changelog.

Version 26.2 (2026-10-03)

  • Added testing against Python 3.15.

  • Dropped support for Python 3.10.

  • LinkWidget will now conditionally escape provided label text.

    Filter choices are under developer control, and applications populating them from user-supplied values, including via AllValuesFilter, must filter those appropriately, as always. Nonetheless, escaping labels by default serves as defense-in-depth hardening. Apply mark_safe() to labels intended to contain HTML.

    Thanks to Sanjeev Kumar for the report.

Commits
  • daddf7b Set date and bump version for 26.2 release.
  • a3593ea Escape LinkWidget values.
  • 29be896 Update testing to add Python 3.15 and drop 3.10.
  • 5128b8f Increase the version upper limit for flit_core to 5
  • See full diff in compare view

Updates faker from 40.37.0 to 40.41.0

Release notes

Sourced from faker's releases.

Release v40.41.0

See CHANGELOG.md.

Release v40.40.0

See CHANGELOG.md.

Release v40.39.0

See CHANGELOG.md.

Release v40.38.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.41.0 - 2026-10-05

  • Fix: update vi_VN address formats, administrative units, and postcodes (#2433). Thanks @​hmtrii.

v40.40.0 - 2026-09-28

v40.39.0 - 2026-09-14

  • Fix: compute Norwegian MOD11 check digit so no_NO iban() passes stdnum validation (#2415). Thanks @​CedricConday.

v40.38.0 - 2026-09-01

Commits
  • 72e2fa4 Bump version: 40.40.0 → 40.41.0
  • 7d844be 📝 Update CHANGELOG.md
  • b8ce41c 💄 Lint code
  • 4d67f5d fix(vi_VN): update address formats, administrative units, and postcodes (#2433)
  • 1879c98 Bump version: 40.39.0 → 40.40.0
  • bfb2b1f 📝 Update CHANGELOG.md
  • 9ce9e29 fix(ro_RO): generate valid CNP birth dates in ssn() (#2431)
  • 975dd2a 💄 Format code
  • f9bb2b5 test: add boundary tests for text(max_nb_chars) (#2439)
  • f36bfaa docs: clarify that text() max_nb_chars is an upper bound (#2438)
  • Additional commits viewable in compare view

Updates syrupy from 6.0.0 to 6.1.1

Release notes

Sourced from syrupy's releases.

v6.1.1

Note: 6.1.0 was skipped due to a CI issue. Use 6.1.1.

Experimental --snapshot-file-lock for pytest-xdist

--snapshot-update under pytest-xdist can race when multiple workers rewrite the same multi-entry amber (.ambr) file, silently dropping snapshots (#1237).

This release adds an experimental opt-in:

  • --snapshot-file-lock — exclusive file lock + atomic replace around amber writes
  • --snapshot-file-lock-timeout — max wait for the lock (default 60s)

Same-machine workers only; not reliable across remote workers / NFS. See #1239.

Callout for pytest-xdist users: please try --snapshot-file-lock with --snapshot-update and open an issue if you hit problems. Locking is expected to become the default in a future minor release.

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.1

Changelog

Sourced from syrupy's changelog.

v6.1.1 (2026-09-13)

What's Changed

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.1

v6.1.0 (2026-09-13)

What's Changed

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.0

Commits
  • 2d251e7 chore(release): 6.1.1 [skip ci]
  • 9b64ec0 chore(release): 6.1.0 [skip ci]
  • 5b4256e fix: opt-in file lock for concurrent amber writes under xdist (#1239)
  • d4cb151 chore(deps): update dependency hypothesis to v6.168.0 (#1238)
  • 16c4cb5 test: add coverage for read_snapshot_data_from_location returning None (#1236)
  • 2e1d3ba chore(deps): update dependency ruff to v0.16.6 (#1235)
  • fcc929d chore(deps): update actions/deploy-pages action to v5.0.1 (#1234)
  • 4f1bad7 chore(deps): update dependency hypothesis to v6.167.1 (#1232)
  • 24eda28 chore(deps): update dependency hypothesis to v6.167.0 (#1231)
  • 0d7e46f chore(deps): update dependency hypothesis to v6.166.0 (#1230)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/requirements/all-deps-cba70fd4ce branch from b115a44 to 9c5a5f7 Compare October 8, 2026 13:16
@sliverc

sliverc commented Oct 9, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump the all-deps group across 1 directory with 7 updates
10202ce 
Bumps the all-deps group with 7 updates in the /requirements directory:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `26.5.1` | `26.10.0` |
| [flake8](https://github.com/pycqa/flake8) | `7.3.0` | `7.4.1` |
| [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) | `25.11.29` | `26.9.30` |
| [isort](https://github.com/PyCQA/isort) | `9.0.1` | `9.0.2` |
| [django-filter](https://github.com/carltongibson/django-filter) | `26.1` | `26.2` |
| [faker](https://github.com/joke2k/faker) | `40.37.0` | `40.41.0` |
| [syrupy](https://github.com/syrupy-project/syrupy) | `6.0.0` | `6.1.1` |



Updates `black` from 26.5.1 to 26.10.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.5.1...26.10.0)

Updates `flake8` from 7.3.0 to 7.4.1
- [Commits](PyCQA/flake8@7.3.0...7.4.1)

Updates `flake8-bugbear` from 25.11.29 to 26.9.30
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](PyCQA/flake8-bugbear@25.11.29...26.9.30)

Updates `isort` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@9.0.1...9.0.2)

Updates `django-filter` from 26.1 to 26.2
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@26.1...26.2)

Updates `faker` from 40.37.0 to 40.41.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.37.0...v40.41.0)

Updates `syrupy` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/syrupy-project/syrupy/releases)
- [Changelog](https://github.com/syrupy-project/syrupy/blob/main/CHANGELOG.md)
- [Commits](syrupy-project/syrupy@v6.0.0...v6.1.1)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 26.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: django-filter
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: faker
  dependency-version: 40.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: flake8
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: flake8-bugbear
  dependency-version: 26.9.30
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-deps
- dependency-name: isort
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: syrupy
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/requirements/all-deps-cba70fd4ce branch from 9c5a5f7 to 10202ce Compare October 9, 2026 06:52
@sliverc
sliverc merged commit 90a4b6d into main Oct 9, 2026
8 checks passed
@sliverc
sliverc deleted the dependabot/pip/requirements/all-deps-cba70fd4ce branch October 9, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sliverc sliverc sliverc approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sliverc