Skip to content

Bump the "dependencies" group with 2 updates across multiple ecosystems - #102

Merged
freakboy3742 merged 2 commits into
mainfrom
dependabot/dependencies-ecb8d07a84
Nov 2, 2026
Merged

Bump the "dependencies" group with 2 updates across multiple ecosystems#102
freakboy3742 merged 2 commits into
mainfrom
dependabot/dependencies-ecb8d07a84

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates in the / directory: astral-sh/setup-uv and actions/upload-artifact.

Updates astral-sh/setup-uv from 10.0.1 to 10.3.2

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

... (truncated)

Commits
  • 07a047e chore: update known checksums for 0.13.5 (#1103)
  • e1b8536 docs: update version references to v10.3.1 (#1102)
  • 18d369b chore(deps): roll up Dependabot updates (#1101)
  • 4ad2329 chore: update known checksums for 0.13.4 (#1099)
  • 4bc6759 chore: update known checksums for 0.13.2/0.13.3 (#1098)
  • c97f06e fix: preserve cache error class names in save-cache bundle (#1093)
  • 8ca4be0 chore: update known checksums for 0.13.1 (#1094)
  • b627d85 docs: cache-dependency-glob matches relative to the working directory (#1092)
  • f8c8897 Verify npm dependency signatures before builds (#1027)
  • f64d32b docs: update version references to v10.3.0 (#1090)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Bumps the dependencies group with 5 updates in the / directory:

Package From To
pre-commit 4.6.2 4.7.0
setuptools-scm 10.2.1 10.3.4
towncrier 25.8.0 26.9.0
tox-uv 1.36.0 1.37.0
setuptools 84.0.0 84.2.1

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates setuptools-scm from 10.2.1 to 10.3.4

Release notes

Sourced from setuptools-scm's releases.

setuptools-scm v10.3.4

Fixed

  • Ship the tracked files of projects whose pyproject.toml sits in a subdirectory of the checkout. root defaults to the project directory, so version inference correctly finds no SCM there and answers from SETUPTOOLS_SCM_PRETEND_VERSION or fallback_version -- but that says nothing about which files git tracks, and the sdist and wheel came out with none of them. This was the 10.3.0 regression fixed in 10.3.3, surviving in the subdirectory layout.

    File discovery now follows the checkout the project sits in, independently of the root that scopes versioning, and records scm_file_list.json in the egg-info as a root-level project already did. (#1543)

  • Require vcs-versioning>=2.5.0. The subdirectory file-discovery fix (#1543) imports discover_file_workdir, which no earlier release has, while the declared floor still named 2.4.0 -- an install against a published vcs-versioning raised ImportError during the build. (#1546)

setuptools-scm v10.3.3

Fixed

  • Keep file discovery working when the version is pretended. SETUPTOOLS_SCM_PRETEND_VERSION and its scoped _FOR_<DIST> form made version inference return before discovering a workdir, and the egg_info mixin read the absent workdir as "searched, found no checkout" -- the signal it acts on by suppressing the setuptools.file_finders chain. Every SCM-tracked file that setuptools' own package discovery does not find was then dropped from the sdist and the wheel, silently, since the build succeeded and the version was correct.

    A pretended version still skips discovery, because most builds only want a version and probing for a checkout nobody asks about costs subprocesses for nothing. What no longer happens is passing that off as an answer: "nobody looked yet" is now distinct from "looked and found nothing", and the workdir is discovered on demand the first time a consumer needs a file list.

    scm_file_list.json is now written to the egg-info for pretended builds as well. It describes which files the checkout tracks, which a pretended version says nothing about. scm_version.json stays absent there, because a pretended version must not be recorded as what the SCM said. (#1540)

setuptools-scm v10.3.2

Fixed

  • Stop the command mixins from reordering a project's own build_py, egg_info or bdist_wheel MRO. ScmVersionFileMixin and friends inherited from the corresponding setuptools command, so wrapping a project class built on a disjoint hierarchy -- distutils.command.build_py, or the standalone wheel package's bdist_wheel -- placed setuptools' command ahead of the project's class. setuptools.build_py.run() does not delegate any further, so the project's

... (truncated)

Commits
  • b27f597 Merge pull request #1545 from pypa/release/main
  • aa18322 Prepare release: setuptools-scm v10.3.4, vcs-versioning v2.5.0
  • e40176e Merge pull request #1551 from RonnyPfannschmidt/fix/version-missing-accepts-tool
  • 873d4b3 fix(vcs-versioning): accept tool= in _version_missing again
  • 5173a1e Merge pull request #1546 from RonnyPfannschmidt/fix/dependency-floor-runs-the...
  • cbcd429 fix(deps): require vcs-versioning>=2.5.0.dev0
  • 5f95612 ci(dependency-floor): run the testsuite, not just the imports
  • e377730 Merge pull request #1544 from RonnyPfannschmidt/fix/file-discovery-follows-th...
  • 98fa24d fix(file-discovery): follow the checkout, not the versioning root
  • 41edffe Merge pull request #1538 from pypa/release/main
  • Additional commits viewable in compare view

Updates towncrier from 25.8.0 to 26.9.0

Release notes

Sourced from towncrier's releases.

Towncrier 26.9.0

Features

  • towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)
  • Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)
  • The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

  • towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

  • [#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_

Towncrier 26.9.0rc1

Features

  • towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)
  • Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)
  • The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

  • towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

  • [#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_
Changelog

Sourced from towncrier's changelog.

towncrier 26.9.0 (2026-09-04)

No significant changes since the previous release candidate.

Features

  • towncrier build now support setting the date via the SOURCE_DATE_EPOCH specification. This adds support for Reproducible Builds. ([#746](https://github.com/twisted/towncrier/issues/746) <https://github.com/twisted/towncrier/issues/746>_)
  • Wrapped line length can now be configured by setting wrap to an integer value greater than 0, using 79 by default if set to true. ([#464](https://github.com/twisted/towncrier/issues/464) <https://github.com/twisted/towncrier/issues/464>_)
  • The towncrier create command line tool now has the --sub-issue option that is used when creating multiple fragments for the same issue number. ([#714](https://github.com/twisted/towncrier/issues/714) <https://github.com/twisted/towncrier/issues/714>_)

Bugfixes

  • towncrier create now rejects fragment names whose issue identifier contains .. ([#733](https://github.com/twisted/towncrier/issues/733) <https://github.com/twisted/towncrier/issues/733>_)

Misc

  • [#719](https://github.com/twisted/towncrier/issues/719) <https://github.com/twisted/towncrier/issues/719>, [#729](https://github.com/twisted/towncrier/issues/729) <https://github.com/twisted/towncrier/issues/729>, [#736](https://github.com/twisted/towncrier/issues/736) <https://github.com/twisted/towncrier/issues/736>, [#741](https://github.com/twisted/towncrier/issues/741) <https://github.com/twisted/towncrier/issues/741>, [#747](https://github.com/twisted/towncrier/issues/747) <https://github.com/twisted/towncrier/issues/747>_
Commits
  • 12e95a9 Prepare final release.
  • 7f5ef06 Initial commit.
  • 1598380 #746 Reproducible build source date epoch (#749)
  • b2df9f8 Merge branch 'trunk' into 746-reproducible-build-source-date-epoch
  • dc07055 Update release for single line.
  • 1e46459 docs: Clarify the defaults for build timestamp values.
  • 803dbc5 Specify the precedence order for computing the build date.
  • 434bf70 Show an example of 'SOURCE_DATE_EPOCH' in the Tutorial.
  • 48f8b3d Document the 'SOURCE_DATE_EPOCH' behaviour for towncrier build.
  • 9f899f5 Document the user-facing change in a Towncrier news fragment.
  • Additional commits viewable in compare view

Updates tox-uv from 1.36.0 to 1.37.0

Release notes

Sourced from tox-uv's releases.

1.37.0

Features

Changes

🐍 PyPI: tox-uv

📜 Full Changelog

1.36.1

Bug fixes

  • Honor VIRTUALENV_SYSTEM_SITE_PACKAGES when choosing the default for system_site_packages (#376) by @​glaziermag.
  • Align the installer with tox 4.59 API changes (#366) by @​gaborbernat.

New Contributors

🐍 PyPI: tox-uv

📜 Full Changelog

Changelog

Sourced from tox-uv's changelog.

1.37.0 (2026-10-10)

Added

Changes

1.36.1 (2026-09-29)

Fixed

  • Honor VIRTUALENV_SYSTEM_SITE_PACKAGES when choosing the default for system_site_packages (#376) by @​glaziermag.
  • Align the installer with tox 4.59 API changes (#366) by @​gaborbernat.

Commits
  • 808fc71 feat(python): require 3.11 and default to 3.15 (#383)
  • 4ba64cf ci: build release packages in parallel (#382)
  • 22305ed [pre-commit.ci] pre-commit autoupdate (#381)
  • f5a8233 👷 ci: pin ubuntu-26.04 and bump dependencies (#380)
  • 0cfb305 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-acti...
  • 64ca6b5 [pre-commit.ci] pre-commit autoupdate (#378)
  • 8f4da88 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
  • 5f772db 🐛 fix(venv): honor VIRTUALENV_SYSTEM_SITE_PACKAGES for the system_site_packag...
  • b1dddaf [pre-commit.ci] pre-commit autoupdate (#375)
  • 915d957 [pre-commit.ci] pre-commit autoupdate (#374)
  • Additional commits viewable in compare view

Updates setuptools from 84.0.0 to 84.2.1

Changelog

Sourced from setuptools's changelog.

v84.2.1

Bugfixes

  • Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
  • Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when Extension.py_limited_api is enabled. These builds now use their version-specific extension suffix instead of using the unsupported .abi3t suffix. (#5363)

Improved Documentation

  • Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0

Features

  • Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
  • Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

  • Use target sysconfig data for stable-ABI extension filenames. (#5351)

v84.1.0

Features

  • setuptools.archive_util now raises the new UnsafeMember exception when an archive member would be extracted outside of the extraction directory, where previously such a member was silently skipped. Aborting makes a malicious or malformed archive visible to the caller instead of yielding a quietly incomplete extraction, and matches the behavior of the standard

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 2 updates
d3f884e 
Bumps the dependencies group with 2 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `astral-sh/setup-uv` from 10.0.1 to 10.3.2
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...07a047e)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)
Bump the dependencies group across 1 directory with 5 updates

Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `10.2.1` | `10.3.4` |
| [towncrier](https://github.com/twisted/towncrier) | `25.8.0` | `26.9.0` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.36.0` | `1.37.0` |
| [setuptools](https://github.com/pypa/setuptools) | `84.0.0` | `84.2.1` |



Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `setuptools-scm` from 10.2.1 to 10.3.4
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@setuptools-scm-v10.2.1...setuptools-scm-v10.3.4)

Updates `towncrier` from 25.8.0 to 26.9.0
- [Release notes](https://github.com/twisted/towncrier/releases)
- [Changelog](https://github.com/twisted/towncrier/blob/trunk/NEWS.rst)
- [Commits](twisted/towncrier@25.8.0...26.9.0)

Updates `tox-uv` from 1.36.0 to 1.37.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Changelog](https://github.com/tox-dev/tox-uv/blob/main/CHANGELOG.md)
- [Commits](tox-dev/tox-uv@1.36.0...1.37.0)

Updates `setuptools` from 84.0.0 to 84.2.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v84.0.0...v84.2.1)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: setuptools-scm
  dependency-version: 10.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: towncrier
  dependency-version: 26.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: tox-uv
  dependency-version: 1.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: setuptools
  dependency-version: 84.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2026
@freakboy3742
freakboy3742 merged commit d41d4d9 into main Nov 2, 2026
8 checks passed
@freakboy3742
freakboy3742 deleted the dependabot/dependencies-ecb8d07a84 branch November 2, 2026 06:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@freakboy3742 freakboy3742 freakboy3742 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@freakboy3742