Skip to content

chore(deps): bump the pip-root-minors-patch group across 1 directory with 21 updates - #261

Merged
SabaTech-dev merged 2 commits into
mainfrom
dependabot/pip/pip-root-minors-patch-30f6d3b1cc
Oct 12, 2026
Merged

chore(deps): bump the pip-root-minors-patch group across 1 directory with 21 updates#261
SabaTech-dev merged 2 commits into
mainfrom
dependabot/pip/pip-root-minors-patch-30f6d3b1cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-root-minors-patch group with 21 updates in the / directory:

Package From To
pytest 9.0.3 9.1.1
allure-pytest 2.13.5 2.16.2
httpx 0.26.0 0.28.1
playwright 1.62.0 1.63.0
selenium 4.16.0 4.50.0
factory-boy 3.3.0 3.3.3
pydantic 2.6.1 2.14.0
pydantic-settings 2.1.0 2.15.0
pyyaml 6.0.1 6.0.3
python-dotenv 1.0.0 1.2.4
pydantic-extra-types 2.6.0 2.11.1
locust 2.46.4 2.46.7
bandit 1.7.6 1.9.4
sqlalchemy 2.0.25 2.1.4
asyncpg 0.29.0 0.32.0
aiosqlite 0.19.0 0.22.1
ruff 0.16.4 0.16.10
types-requests 2.31.0.20240106 2.33.0.20261006
allure-python-commons 2.13.5 2.16.2
pytest-benchmark 5.2.3 5.3.0
alembic 1.13.1 1.20.0

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates allure-pytest from 2.13.5 to 2.16.2

Release notes

Sourced from allure-pytest's releases.

2.16.2

🐞 Bug Fixes

👀 Links

Commits since 2.16.1

2.16.1

👀 Links

Commits since 2.16.0

2.16.0

🚀 New Features

👻 Internal Changes

👀 Links

Commits since 2.15.3

2.15.3

👀 Links

Commits since 2.15.2

2.15.2

  • Set testCaseId for all test results produced by allure_robotframework (via #884) - @​delatrie

👀 Links

Commits since 2.15.1

2.15.1

  • Set testCaseId for all test results produced by allure_behave (via #883) - @​delatrie
  • Add workflow-wide gh actions permissions (via #875) - @​epszaw

... (truncated)

Commits
  • ffff9db CI workflows maintenance (#927)
  • 11926cd fix(pytest-bdd): do not reuse uuid across test runs (#926)
  • 5c72005 Write Allure result files atomically (#924)
  • 871b8dd Fix fixture tests for allure_pytest failing against pytest 9.1 (#916)
  • d420cff Fix ModuleNotFoundError when creating distributions with setup.py (#905)
  • 1de4258 chore(ci): test pytest v9 (#893)
  • 5d75ade New API for global errors and attachments (#904)
  • 63017ae Python linting through ruff (#888)
  • 2031724 Add zip attachment type (#889)
  • 21571c8 Set testCaseId for all test results produced by allure_robotframework (#884)
  • Additional commits viewable in compare view

Updates httpx from 0.26.0 to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

Version 0.28.0

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

Version 0.27.2

0.27.2 (27th August, 2024)

Fixed

  • Reintroduced supposedly-private URLTypes shortcut. (#2673)

Version 0.27.1

0.27.1 (27th August, 2024)

Added

  • Support for zstd content decoding using the python zstandard package is added. Installable using httpx[zstd]. (#3139)

Fixed

  • Improved error messaging for InvalidURL exceptions. (#3250)
  • Fix app type signature in ASGITransport. (#3109)

... (truncated)

Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

0.28.0 (28th November, 2024)

Be aware that the default JSON request bodies now use a more compact representation. This is generally considered a prefered style, tho may require updates to test suites.

The 0.28 release includes a limited set of deprecations...

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

0.27.2 (27th August, 2024)

Fixed

  • Reintroduced supposedly-private URLTypes shortcut. (#2673)

0.27.1 (27th August, 2024)

Added

  • Support for zstd content decoding using the python zstandard package is added. Installable using httpx[zstd]. (#3139)

Fixed

  • Improved error messaging for InvalidURL exceptions. (#3250)
  • Fix app type signature in ASGITransport. (#3109)

0.27.0 (21st February, 2024)

... (truncated)

Commits

Updates playwright from 1.62.0 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🪟 Locate across frames

page.frame_locator() and frame.frame_locator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

# Finds the button in any frame on the page.
page.frame_locator().get_by_role("button").click()

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

page.locator("button").visible.click()

🖼️ Aria and screen snapshots in traces

New aria_snapshots and screen_snapshots options of tracing.start() capture an aria snapshot and a screenshot of the page on every action:

context.tracing.start(snapshots=True, aria_snapshots=True, screen_snapshots=True)

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

Command line

  • playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
  • playwright codegen --http-credentials records against pages behind HTTP authentication.

Announcements

  • ⚠️ Ubuntu 20.04 is not supported anymore.
  • 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

... (truncated)

Commits
  • 8cb967b cherry-pick(#3200): devops(docker): move docker publishing to Azure Pipelines
  • ab18c77 chore: roll Playwright to 1.63.0 (#3198)
  • 0e66a09 devops(pipeline): resolve pip and npm packages from DevDiv_PublicPackages fee...
  • 010a9cc Pin GitHub Actions to full-length commit SHAs (#3176)
  • 154f67c fix(sync): wait for initialize before leaving enter (#3168)
  • 4af2fc6 chore: roll Playwright to 1.62.1 (#3169)
  • 4d2e058 fix(connection): register protocol callback only after successful send (#3167)
  • eab2bca chore(deps): remove unused development dependencies (#3164)
  • See full diff in compare view

Updates selenium from 4.16.0 to 4.50.0

Release notes

Sourced from selenium's releases.

Selenium 4.50.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Commits
  • ca2a966 [build] Prepare for release of selenium-4.50.0 (#18105)
  • 47912e0 [build] publish docs with a rebase instead of serializing on a concurrency group
  • 89f967d [dotnet] [bidi] Align CapabilityResponse type name with spec (#18099)
  • 6d070b5 [dotnet] [bidi] Preserve BiDi additional data in context commands (#18097)
  • 18c9d4e [java] Keep guarded runnables alive when a task throws an Error (#18091)
  • 97caa3f [java] Restore HttpCommandExecutor client and httpClientFactory fields as dep...
  • 1564f3a [build] Automated Browser Version Update (major) (#18096)
  • b63635e [build] ensure the pin for the released Selenium Manager is the one built in ...
  • 1d433a9 [build] verify published packages from the release tag instead of trunk HEAD
  • 531ccc7 [build] grant the release Selenium Manager job the permissions its nested job...
  • Additional commits viewable in compare view

Updates factory-boy from 3.3.0 to 3.3.3

Changelog

Sourced from factory-boy's changelog.

3.3.3 (2025-02-03)

New:

  • Publish type annotations

3.3.2 (2025-02-03)

Bugfix:

  • Fix docs generation

New:

  • Add support for Python 3.13

3.3.1 (2024-08-18)

New:

  • Add support for Django 4.2
  • Add support for Django 5.1
  • Add support for Python 3.12
  • :issue:903: Add basic typing annotations
  • Run the test suite against mongomock instead of an actual MongoDB server

Bugfix:

  • :issue:1031: Do not require :attr:~factory.alchemy.SQLAlchemyOptions.sqlalchemy_session when :attr:~factory.alchemy.SQLAlchemyOptions.sqlalchemy_session_factory is provided.

Removed:

  • Stop advertising and verifying support for Django 3.2, 4.0, 4.1
Commits
  • f82a7bf Preparing release 3.3.3
  • 336b72f Export type annotations
  • aec0b19 Announce support for intermediate Django versions
  • fa397a2 Fix comment, as caught in #1108
  • 8b75576 Back to development: 3.3.3
  • 11a9acf Preparing release 3.3.2
  • c463536 Update Changelog
  • 6f5f6a0 Fix tox.ini config for Django "main"
  • 68cb77c Replace Python 3.8 with 3.13 in testing matrix
  • e007ef7 fixup! Update readthedocs build configuration
  • Additional commits viewable in compare view

Updates pydantic from 2.6.1 to 2.14.0

Release notes

Sourced from pydantic's releases.

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

Full Changelog: pydantic/pydantic@v2.13.0...v2.14.0

v2.14.0b2 2026-09-09

What's Changed

This pre-release adds full support for Python 3.15 specific features, such as support for frozendict, making use of TypeForm and stabilizing the MISSING sentinel type.

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

v2.14.0b2 (2026-09-09)

GitHub release

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 21, 2026
@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown

PR Check Results

✅ Code Formatting: Failed
✅ Linting: Failed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

@github-actions

github-actions Bot commented Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ WARN Trivy Security Scan Results

Severity Count
🔴 CRITICAL 0
🟠 HIGH 47
Total 47

Scans performed:

  • 📁 Filesystem (vulnerabilities, secrets, misconfigurations)
  • 🐳 Backend Docker image
  • 🐳 Frontend Docker image
  • 🏗️ IaC misconfiguration detection

⚠️ HIGH vulnerabilities should be addressed. Review required.

📋 View detailed SARIF reports

Download artifacts from this workflow run for full SARIF reports.
Results are also available in the GitHub Security tab.

Trivy v0.71.0 | aquasecurity/trivy

@dependabot dependabot Bot changed the title chore(deps): bump the pip-root-minors-patch group with 21 updates chore(deps): bump the pip-root-minors-patch group across 1 directory with 21 updates Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-root-minors-patch-30f6d3b1cc branch from 32f20ee to 90f74a2 Compare September 25, 2026 19:27
@github-actions

github-actions Bot commented Sep 25, 2026

Copy link
Copy Markdown

PR Check Results

✅ Code Formatting: Failed
✅ Linting: Failed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-root-minors-patch-30f6d3b1cc branch from 90f74a2 to 431bf46 Compare October 5, 2026 05:17
@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown

PR Check Results

✅ Code Formatting: Failed
✅ Linting: Failed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

@dependabot
chore(deps): bump the pip-root-minors-patch group across 1 directory …
1712a7f 
…with 21 updates

Bumps the pip-root-minors-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [allure-pytest](https://github.com/allure-framework/allure-python) | `2.13.5` | `2.16.2` |
| [httpx](https://github.com/encode/httpx) | `0.26.0` | `0.28.1` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.62.0` | `1.63.0` |
| [selenium](https://github.com/SeleniumHQ/Selenium) | `4.16.0` | `4.50.0` |
| [factory-boy](https://github.com/FactoryBoy/factory_boy) | `3.3.0` | `3.3.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.6.1` | `2.14.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.1.0` | `2.15.0` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.0` | `1.2.4` |
| [pydantic-extra-types](https://github.com/pydantic/pydantic-extra-types) | `2.6.0` | `2.11.1` |
| [locust](https://github.com/locustio/locust) | `2.46.4` | `2.46.7` |
| [bandit](https://github.com/PyCQA/bandit) | `1.7.6` | `1.9.4` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.25` | `2.1.4` |
| [asyncpg](https://github.com/MagicStack/asyncpg) | `0.29.0` | `0.32.0` |
| [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.19.0` | `0.22.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.10` |
| [types-requests](https://github.com/python/typeshed) | `2.31.0.20240106` | `2.33.0.20261006` |
| [allure-python-commons](https://github.com/allure-framework/allure-python) | `2.13.5` | `2.16.2` |
| [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.2.3` | `5.3.0` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.20.0` |



Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `allure-pytest` from 2.13.5 to 2.16.2
- [Release notes](https://github.com/allure-framework/allure-python/releases)
- [Commits](allure-framework/allure-python@2.13.5...2.16.2)

Updates `httpx` from 0.26.0 to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.26.0...0.28.1)

Updates `playwright` from 1.62.0 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.62.0...v1.63.0)

Updates `selenium` from 4.16.0 to 4.50.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.16.0...selenium-4.50.0)

Updates `factory-boy` from 3.3.0 to 3.3.3
- [Changelog](https://github.com/FactoryBoy/factory_boy/blob/master/docs/changelog.rst)
- [Commits](FactoryBoy/factory_boy@3.3.0...3.3.3)

Updates `pydantic` from 2.6.1 to 2.14.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.6.1...v2.14.0)

Updates `pydantic-settings` from 2.1.0 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.1.0...v2.15.0)

Updates `pyyaml` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.1...6.0.3)

Updates `python-dotenv` from 1.0.0 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.4)

Updates `pydantic-extra-types` from 2.6.0 to 2.11.1
- [Release notes](https://github.com/pydantic/pydantic-extra-types/releases)
- [Changelog](https://github.com/pydantic/pydantic-extra-types/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic-extra-types@v2.6.0...v2.11.1)

Updates `locust` from 2.46.4 to 2.46.7
- [Release notes](https://github.com/locustio/locust/releases)
- [Changelog](https://github.com/locustio/locust/blob/master/CHANGELOG.md)
- [Commits](locustio/locust@2.46.4...2.46.7)

Updates `bandit` from 1.7.6 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.6...1.9.4)

Updates `sqlalchemy` from 2.0.25 to 2.1.4
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `asyncpg` from 0.29.0 to 0.32.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.29.0...v0.32.0)

Updates `aiosqlite` from 0.19.0 to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.19.0...v0.22.1)

Updates `ruff` from 0.16.4 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.16.10/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.10)

Updates `types-requests` from 2.31.0.20240106 to 2.33.0.20261006
- [Commits](https://github.com/python/typeshed/commits)

Updates `allure-python-commons` from 2.13.5 to 2.16.2
- [Release notes](https://github.com/allure-framework/allure-python/releases)
- [Commits](allure-framework/allure-python@2.13.5...2.16.2)

Updates `pytest-benchmark` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/ionelmc/pytest-benchmark/releases)
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v5.2.3...v5.3.0)

Updates `alembic` from 1.13.1 to 1.20.0
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

---
updated-dependencies:
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: alembic
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: allure-pytest
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: allure-python-commons
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: factory-boy
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-root-minors-patch
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: locust
  dependency-version: 2.46.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-root-minors-patch
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pydantic-extra-types
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pytest-benchmark
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-root-minors-patch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-root-minors-patch
- dependency-name: selenium
  dependency-version: 4.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
- dependency-name: sqlalchemy
  dependency-version: 2.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-root-minors-patch
- dependency-name: types-requests
  dependency-version: 2.33.0.20260906
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-root-minors-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-root-minors-patch-30f6d3b1cc branch from 431bf46 to 1712a7f Compare October 12, 2026 15:29
@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

PR Check Results

✅ Code Formatting: Failed
✅ Linting: Failed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

Joker
fix(deps): align allure-pytest pin with allure-python-commons 2.16.2 …
38c591a 
…and refresh apt index before redis-tools install

- requirements.txt: allure-pytest 2.13.5 pins allure-python-commons==2.13.5
  exactly, which conflicted with the bumped commons 2.16.2
  (ResolutionImpossible in Security Tests). Aligned to 2.16.2 to match
  pyproject.toml.
- ci-cd.yml: apt-get update before installing redis-tools; runner's
  cached apt index 404s on superseded package versions.
@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

PR Check Results

✅ Code Formatting: Passed
✅ Linting: Passed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🔧 Backend Preview Deployment

App Coolify: qa-framework-backend-pr-261 (6qvqkpxniurhgqgrmbu8w9ye)
Estado: ⚠️ running:unknown
Commit: 2fc8e0fc4770f49d46c65be272535118d4d3c44d
Branch: dependabot/pip/pip-root-minors-patch-30f6d3b1cc

Preview interna (sin FQDN público hasta decisión de proxy — card 52a85645).

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🎨 Frontend Preview Deployment

App Coolify: qa-framework-frontend-pr-261 (hlglbuajwoeutrbmsktutkpj)
Estado: ⚠️ running:unknown
Commit: 2fc8e0fc4770f49d46c65be272535118d4d3c44d
Branch: dependabot/pip/pip-root-minors-patch-30f6d3b1cc

Preview interna (sin FQDN público hasta decisión de proxy — card 52a85645).

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🧹 Single-latest preview policy

Testing completo en verde sobre la preview de PR #261 → previews anteriores eliminadas (apps Coolify + imágenes del registry local). Solo queda viva la más nueva.

@SabaTech-dev

SabaTech-dev commented Oct 12, 2026

Copy link
Copy Markdown
Owner

CI triage (card b50d6539) — fixed on this branch in 38c591a:

  1. Security Tests (pip ResolutionImpossible): dependabot bumped allure-python-commons to 2.16.2 in requirements.txt but left allure-pytest at 2.13.5, which pins allure-python-commons==2.13.5 exactly. Aligned allure-pytest to 2.16.2 (matches pyproject.toml).
  2. Integration Tests (redis-tools 404): apt-get install used the runner's stale apt index and 404'd on a superseded .deb. Added apt-get update before install in ci-cd.yml.

All workflows green on 38c591a: CI/CD Pipeline, Pull Request Checks, PR Deploy to Coolify, OWASP, Trivy. Not merging per card instructions.

@SabaTech-dev
SabaTech-dev merged commit 7003499 into main Oct 12, 2026
40 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/pip-root-minors-patch-30f6d3b1cc branch October 12, 2026 22:43
@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🧹 Preview Cleanup

PR #261 - Merged

✅ Preview apps eliminadas de Coolify (verificado via API): backend + frontend.

Resources freed at 2026-10-12T22:43:42.664Z

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@SabaTech-dev