chore(deps): bump the python-minor-patch group with 4 updates by dependabot[bot] · Pull Request #90 · SocketDev/socket-basics

dependabot · 2026-07-22T23:21:37Z

Bumps the python-minor-patch group with 4 updates: tabulate, socketdev, pytest and pytest-cov.

Updates tabulate from 0.9.0 to 0.10.0

Changelog

0.10.0: Add support for Python 3.11, 3.12, 3.13, 3.14. Drop support for Python 3.7, 3.8, 3.9. PRESERVE_STERILITY global is replaced with preserve_sterility function argument. New formatting options: headersglobalalign, headersalign, colglobalalign. New output format: colon_grid (Pandoc grid_tables with alignment) Various bug fixes. Improved error messages.

Commits

3b4cd50 update HOWTOPUBLISH
35ee0f6 update mini-benchmark table
37ac76e restore tabulate.version
37e1ed0 move # nowa: E931 to a different line (flake8)
7bacc90 run pre-commit hooks (black)
1b69704 Remove spurious cast in string interpolation
4d535af Use specific noqa directives
76c3d37 Remove spurious space from error message
13508e7 Unnecessary list call
69f67cd Do not call getattr with a constant value
Additional commits viewable in compare view

Updates socketdev from 3.0.29 to 3.3.0

Release notes

Sourced from socketdev's releases.

v3.3.0

What's Changed

Add transient-error classification to APIFailure by @mtorp in SocketDev/socket-sdk-python#93

Full Changelog: SocketDev/socket-sdk-python@v3.2.1...v3.3.0

v3.2.1

What's Changed

Add sfw aggregator gate to enforce required CI checks by @lelia in SocketDev/socket-sdk-python#89

Full Changelog: SocketDev/socket-sdk-python@v3.2.0...v3.2.1

v3.2.0

What's Changed

Add OTHER category to SocketCategory enum by @lelia in SocketDev/socket-sdk-python#85

ci(deps): bump actions/setup-python from 5.2.0 to 6.2.0 by @dependabot[bot] in SocketDev/socket-sdk-python#86

ci(deps): bump actions/github-script from 7.0.1 to 9.0.0 by @dependabot[bot] in SocketDev/socket-sdk-python#87

chore(deps): bump the python-minor-patch group with 2 updates by @dependabot[bot] in SocketDev/socket-sdk-python#88

Full Changelog: SocketDev/socket-sdk-python@v3.1.2...v3.2.0

v3.1.2

What's Changed

Dependabot hardening + dependency update bundle by @lelia in SocketDev/socket-sdk-python#84

Full Changelog: SocketDev/socket-sdk-python@v3.1.1...v3.1.2

v3.1.1

What's Changed

ci(version-check): require uv.lock sync alongside pyproject changes by @flowstate in SocketDev/socket-sdk-python#82

Fix stale didYouMean props by @flowstate in SocketDev/socket-sdk-python#81

Full Changelog: SocketDev/socket-sdk-python@v3.1.0...v3.1.1

v3.1.0

What's Changed

Support org-scoped batch package endpoint by @lelia in SocketDev/socket-sdk-python#76

Full Changelog: SocketDev/socket-sdk-python@v3.0.33...v3.1.0

v3.0.33

What's Changed

fix: harden GitHub Actions workflows by @reberhardt7 in SocketDev/socket-sdk-python#72

fix: tolerate unknown SocketCategory values in SocketAlert.from_dict by @dc-larsen in SocketDev/socket-sdk-python#79

... (truncated)

Commits

273ee88 Add transient-error classification to APIFailure (#93)
836936c Add sfw aggregator gate to enforce required CI checks (#89)
6beea88 ci(deps): bump actions/github-script from 7.0.1 to 9.0.0 (#87)
7fdb3ac ci(deps): bump actions/setup-python from 5.2.0 to 6.2.0 (#86)
8ffef98 feat: add OTHER category to SocketCategory enum (CE-225) (#85)
64d5b06 chore(deps): bump the python-minor-patch group with 2 updates (#88)
8dfb7a1 Dependabot hardening + dependency update bundle (#84)
be87c34 Fix stale didYouMean props (#81)
8b668fd ci(version-check): require uv.lock sync alongside pyproject changes (#82)
41039a8 Support org-scoped batch package endpoint (#76)
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest-cov from 7.0.0 to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

Improve handling of ResourceWarning from sqlite3.

The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

With this fix one can suppress ResourceWarning from sqlite3 from command line::

pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

Commits

66c8a52 Bump version: 7.0.0 → 7.1.0
f707662 Make the examples use pypy 3.11.
6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
8ebf20b Update changelog.
861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
78c9c4e Only run the 3.9 on older deps.
4849a92 Punctuation.
197c35e Update changelog and hopefully I don't forget to publish release again :))
14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor-patch group with 4 updates: [tabulate](https://github.com/astanin/python-tabulate), [socketdev](https://github.com/SocketDev/socket-sdk-python), [pytest](https://github.com/pytest-dev/pytest) and [pytest-cov](https://github.com/pytest-dev/pytest-cov). Updates `tabulate` from 0.9.0 to 0.10.0 - [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG) - [Commits](astanin/python-tabulate@v0.9.0...v0.10.0) Updates `socketdev` from 3.0.29 to 3.3.0 - [Release notes](https://github.com/SocketDev/socket-sdk-python/releases) - [Commits](SocketDev/socket-sdk-python@v3.0.29...v3.3.0) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) --- updated-dependencies: - dependency-name: tabulate dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: socketdev dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-22T23:21:50Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/pytest@9.0.3 ⏵ 9.1.1	⁺¹
	pypi/socketdev@3.0.29 ⏵ 3.3.0	⁺¹
	pypi/pytest-cov@7.0.0 ⏵ 7.1.0
	pypi/tabulate@0.9.0 ⏵ 0.10.0	⁺¹

View full report

socket-security-staging · 2026-07-22T23:21:59Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/pytest@9.0.3 ⏵ 9.1.1	⁺¹
	pypi/socketdev@3.0.29 ⏵ 3.3.0	⁺¹
	pypi/pytest-cov@7.0.0 ⏵ 7.1.0
	pypi/tabulate@0.9.0 ⏵ 0.10.0	⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 22, 2026

dependabot Bot requested a review from a team as a code owner July 22, 2026 23:21

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 22, 2026

dependabot Bot temporarily deployed to socket-firewall July 22, 2026 23:21 Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the python-minor-patch group with 4 updates#90

chore(deps): bump the python-minor-patch group with 4 updates#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-170340bf10

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

socket-security Bot commented Jul 22, 2026

Uh oh!

socket-security-staging Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

v3.3.0

What's Changed

v3.2.1

What's Changed

v3.2.0

What's Changed

v3.1.2

What's Changed

v3.1.1

What's Changed

v3.1.0

What's Changed

v3.0.33

What's Changed

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

7.1.0 (2026-03-21)

Uh oh!

socket-security Bot commented Jul 22, 2026

Uh oh!

socket-security-staging Bot commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants