Bump the development-version-updates group with 6 updates by dependabot[bot] · Pull Request #368 · mrlonis/python-open-restaurant-fastapi

dependabot · 2026-06-15T11:31:46Z

Bumps the development-version-updates group with 6 updates:

Package	From	To
pylint	`4.0.5`	`4.0.6`
pytest	`9.0.3`	`9.1.0`
distlib	`0.4.1`	`0.4.3`
filelock	`3.29.1`	`3.29.4`
python-discovery	`1.4.0`	`1.4.2`
virtualenv	`21.4.2`	`21.5.0`

Updates pylint from 4.0.5 to 4.0.6

Commits

8a39635 Bump pylint to 4.0.6, update changelog (#11105)
150f23c [Backport maintenance/4.0.x] Allow digits in ParamSpec and TypeVarTuple names...
8b6251e [Backport maintenance/4.0.x] Fix crash when enum member inference fails (#11093)
d57aadb [Backport maintenance/4.0.x] Fix implicit-str-concat false positive for mix...
d9ea8d9 [Backport maintenance/4.0.x] Fix unnecessary-comprehension suggestion when ...
cb1792a [Backport maintenance/4.0.x] Allow digits in TypeVar names for invalid-name c...
ee2ab9a Handle InferenceError in decorator return analysis
5bb5498 [Backport maintenance/4.0.x] Fix crash in typecheck checker when metaclass ar...
a940533 [Backport maintenance/4.0.x] Fix a crash in consider-using-enumerate for no...
b7a873a [Backport maintenance/4.0.x] Fix crash in deprecated checker for non-string `...
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.0

Release notes

Sourced from pytest's releases.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

Use the node parameter instead for fixture scoping. This enables more robust node-based matching instead of string prefix matching. If you've used nodeid=None, pass node=session instead.

This will be removed in pytest 10.

#14335: The method of configuring hooks using markers, deprecated since pytest 7.2, is now scheduled to be removed in pytest 10. See hook-markers for more details.

#14434: The --pastebin option is now deprecated.

... (truncated)

Commits

b2522cf Prepare release version 9.1.0
368d2fc [refactor] Tighten SetComparisonFunction to Iterator[str] (#14587)
ff77cd8 [refactor] Make base assertion comparisons return an iterator instead of a li...
0d8491a build(deps): Bump actions/stale from 10.2.0 to 10.3.0
4a809d9 Merge pull request #14568 from pytest-dev/register-fixture
5dfa385 Fix recursion traceback test to cover all styles (#14582)
f52ff0c Add pytest.register_fixture
a8ac094 Merge pull request #14567 from pytest-dev/more-visibility-deprecate
e5620cd [pre-commit.ci] pre-commit autoupdate (#14577)
2ce9c6d Merge pull request #14540 from minbang930/fix-14533-doctest-module-fixtures
Additional commits viewable in compare view

Updates distlib from 0.4.1 to 0.4.3

Changelog

Sourced from distlib's changelog.

0.4.3
Released: 2026-06-12


resources

Removed too-restrictive check for escaping resources.



0.4.2
Released: 2026-06-08

locators

Fix URL percent-encoding using space-padding instead of zero-padding. Thanks to Kadir Can Ozden for the patch.

Harden decompression against malicious input. Thanks to tonghuaroot for the patch, which was adapted slightly.

manifest

Use os.lstat in findall to correctly detect symlinked directories. Thanks to Kadir Can Ozden for the patch.

metadata

Improve logic to incorporate newer metadata versions.

resources

Ensure that constructed resource paths don't escape the package. Thanks to tonghuaroot for the patch.

util

Fix #255: Update cache_from_source() for Python 3.15. Thanks to Victor Stinner for the patch.

Check during unarchiving that the destination directory isn't escaped via symlinks. Thanks to tonghuaroot for the patch.

Improved performance of normalize_name using dual replace. Thanks to Hugo van Kemenade for the patch.

wheel

... (truncated)

Commits

3f4a377 Changes for 0.4.3.
5ee19e6 Relax too-strict escaping check for resources.
f0e3d1a Bump version.
06e010d Add upper version limit for setuptools for build, to keep metadata version to...
8b5aa55 Added tag 0.4.2 for changeset 5295c0ceb419
8183ea6 Update change log.
55ca016 Changes for 0.4.2.
7e282ab Update metadata logic to incorporate newer versions.
fa4ea50 Remove non-portable portion of test.
e06a1d5 Further refine tests.
Additional commits viewable in compare view

Updates filelock from 3.29.1 to 3.29.4

Release notes

Sourced from filelock's releases.

3.29.4

What's Changed

verify inode in break_lock_file before unlinking a stale lock by @dxbjavid in tox-dev/filelock#561

keep the read/write heartbeat alive on a transient touch error by @dxbjavid in tox-dev/filelock#562

Full Changelog: tox-dev/filelock@3.29.3...3.29.4

3.29.3

What's Changed

🔧 ci(release): publish to PyPI on tag push by @gaborbernat in tox-dev/filelock#557

validate pid range in _parse_lock_holder by @dxbjavid in tox-dev/filelock#556

🐛 fix(ci): restore release environment on tag job by @gaborbernat in tox-dev/filelock#559

🐛 fix(ci): publish from release.yaml on tag push by @gaborbernat in tox-dev/filelock#560

Full Changelog: tox-dev/filelock@3.29.2...3.29.3

3.29.2

What's Changed

open marker reads non-blocking to refuse attacker-placed fifo by @dxbjavid in tox-dev/filelock#549

🔒 fix(soft): harden stale-lock breaking and self-heal malformed locks by @gaborbernat in tox-dev/filelock#551

check hostname in is_lock_held_by_us by @dxbjavid in tox-dev/filelock#553

Full Changelog: tox-dev/filelock@3.29.1...3.29.2

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

3.29.4 (2026-06-13)

keep the read/write heartbeat alive on a transient touch error :pr:562 - by :user:dxbjavid

verify inode in break_lock_file before unlinking a stale lock :pr:561 - by :user:dxbjavid

3.29.3 (2026-06-10)

🐛 fix(ci): restore release environment on tag job :pr:559

validate pid range in _parse_lock_holder :pr:556 - by :user:dxbjavid

🔧 ci(release): publish to PyPI on tag push :pr:557

build(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 :pr:558 - by :user:dependabot[bot]

3.29.2 (2026-06-10)

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 :pr:555 - by :user:dependabot[bot]

[pre-commit.ci] pre-commit autoupdate :pr:554 - by :user:pre-commit-ci[bot]

check hostname in is_lock_held_by_us :pr:553 - by :user:dxbjavid

🔒 fix(soft): harden stale-lock breaking and self-heal malformed locks :pr:551

open marker reads non-blocking to refuse attacker-placed fifo :pr:549 - by :user:dxbjavid

3.29.1 (2026-06-03)

🐛 fix(soft): refuse to follow symlinks when reading the lock file :pr:548 - by :user:dxbjavid

[pre-commit.ci] pre-commit autoupdate :pr:547 - by :user:pre-commit-ci[bot]

[pre-commit.ci] pre-commit autoupdate :pr:546 - by :user:pre-commit-ci[bot]

chore: improve filelock maintenance path :pr:545 - by :user:lphuc2250gma

chore: improve filelock maintenance path :pr:544 - by :user:lphuc2250gma

chore: improve filelock maintenance path :pr:542 - by :user:lphuc2250gma

docs: clarify per-thread scope of FileLock configuration :pr:543 - by :user:Gares95

[pre-commit.ci] pre-commit autoupdate :pr:541 - by :user:pre-commit-ci[bot]

docs: fix API docs of release() :pr:540 - by :user:MrAnno

[pre-commit.ci] pre-commit autoupdate :pr:539 - by :user:pre-commit-ci[bot]

[pre-commit.ci] pre-commit autoupdate :pr:538 - by :user:pre-commit-ci[bot]

[pre-commit.ci] pre-commit autoupdate :pr:537 - by :user:pre-commit-ci[bot]

build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 :pr:536 - by :user:dependabot[bot]

[pre-commit.ci] pre-commit autoupdate :pr:535 - by :user:pre-commit-ci[bot]

... (truncated)

Commits

f3c11c0 Release 3.29.4
5d663ee keep the read/write heartbeat alive on a transient touch error (#562)
406d0a2 verify inode in break_lock_file before unlinking a stale lock (#561)
85e73d7 🐛 fix(ci): publish from release.yaml on tag push (#560)
f86dcb1 Release 3.29.3
643bdbe 🐛 fix(ci): restore release environment on tag job (#559)
7a8f74a validate pid range in _parse_lock_holder (#556)
d1d49a0 🔧 ci(release): publish to PyPI on tag push (#557)
b37e162 build(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#558)
d9216de Release 3.29.2
Additional commits viewable in compare view

Updates python-discovery from 1.4.0 to 1.4.2

Release notes

Sourced from python-discovery's releases.

v1.4.2

What's Changed

🐛 fix: stop symlink resolution at stdlib landmark and framework builds by @gaborbernat in tox-dev/python-discovery#87

Full Changelog: tox-dev/python-discovery@1.4.1...1.4.2

v1.4.1

What's Changed

🐛 fix: resolve executable-only symlinks in system_executable by @gaborbernat in tox-dev/python-discovery#85

Full Changelog: tox-dev/python-discovery@1.4.0...1.4.1

Changelog

Sourced from python-discovery's changelog.

Bug fixes - 1.4.2

Stop executable symlink resolution once the stdlib landmark is reachable and keep macOS framework builds untouched, matching getpath - Homebrew interpreters no longer get version-pinned Cellar paths recorded and stable aliases such as Debian's /usr/bin/python3 are preserved - by :user:gaborbernat. (:issue:86)

v1.4.1 (2026-06-11)

Bug fixes - 1.4.1

Resolve executable-only symlinks when computing system_executable, mirroring CPython's getpath.realpath python/cpython#115237 symlinked interpreter tree is kept as-is - by :user:gaborbernat. (:issue:84)

v1.4.0 (2026-05-28)

Commits

ca8d938 release 1.4.2
4f6132b 🐛 fix: stop symlink resolution at stdlib landmark and framework builds (#87)
95e6470 release 1.4.1
011f953 🐛 fix: resolve executable-only symlinks in system_executable (#85)
3a761d5 build(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#83)
5d3efc2 [pre-commit.ci] pre-commit autoupdate (#81)
31365ac build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#82)
834a327 [pre-commit.ci] pre-commit autoupdate (#80)
See full diff in compare view

Updates virtualenv from 21.4.2 to 21.5.0

Release notes

Sourced from virtualenv's releases.

21.5.0

What's Changed

Set git identity in upgrade changelog rename step by @gaborbernat in pypa/virtualenv#3169

Upgrade embedded pip/setuptools/wheel by @github-actions[bot] in pypa/virtualenv#3168

✨ feat: drop Python 3.8 support by @gaborbernat in pypa/virtualenv#3170

Full Changelog: pypa/virtualenv@21.4.3...21.5.0

21.4.3

What's Changed

ci: silence avoidable check workflow notices by @gaborbernat in pypa/virtualenv#3154

Upgrade embedded pip/setuptools/wheel by @github-actions[bot] in pypa/virtualenv#3155

Fish activator passes VIRTUAL_ENV through cygpath by @LuNoX in pypa/virtualenv#3161

Stop exporting PS1 in bash activator by @karlhillx in pypa/virtualenv#3162

Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 by @apophizzz in pypa/virtualenv#3167

🐛 fix(discovery): resolve base interpreter executable-only symlinks by @gaborbernat in pypa/virtualenv#3166

New Contributors

@LuNoX made their first contribution in pypa/virtualenv#3161

@karlhillx made their first contribution in pypa/virtualenv#3162

@apophizzz made their first contribution in pypa/virtualenv#3167

Full Changelog: pypa/virtualenv@21.4.2...21.4.3

Changelog

Sourced from virtualenv's changelog.

Features - 21.5.0

Drop support for Python 3.8; virtualenv now requires Python 3.9 or later to run and to create environments. Remove the embedded wheel seed package, which virtualenv bundled only for Python 3.8. The --wheel and --no-wheel options stay as no-ops, but now warn that virtualenv will remove them in a release after 2026-12 - by :user:gaborbernat. (:issue:3170)

Bugfixes - 21.5.0

Upgrade embedded wheels:

Removed wheel of 0.47.0 (:issue:u)

v21.4.3 (2026-06-11)

Bugfixes - 21.4.3

Upgrade embedded wheels:

pip to 26.1.2 from 26.1.1 (:issue:u)

Resolve executable-only symlinks when recording home and base-executable in pyvenv.cfg, mirroring CPython's getpath.realpathpython/cpython#115237 binary locate the base stdlib (for example python-build-standalone); a fully symlinked interpreter tree is kept as-is

by :user:gaborbernat. (:issue:3157)

Stop exporting PS1 from the bash activator so child processes do not inherit shell prompt state. (:issue:3158)

Handle CYGWIN/MSYS/MINGW path conversions in fish activation script - by user::LuNoX. (:issue:3160)

v21.4.2 (2026-05-31)

Commits

90735e0 release 21.5.0
79ce906 ✨ feat: drop Python 3.8 support (#3170)
f1f4d68 Upgrade embedded pip/setuptools/wheel (#3168)
78df6f0 Set git identity in upgrade changelog rename step (#3169)
134b080 release 21.4.3
2a36128 🐛 fix(discovery): resolve base interpreter executable-only symlinks (#3166)
5389c25 Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 (#3167)
0134fee chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#3165)
af1ed9f chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#3164)
1b00ec8 [pre-commit.ci] pre-commit autoupdate (#3163)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-version-updates group with 6 updates: | Package | From | To | | --- | --- | --- | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.5` | `4.0.6` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.0` | | [distlib](https://github.com/pypa/distlib) | `0.4.1` | `0.4.3` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.29.1` | `3.29.4` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.4.0` | `1.4.2` | | [virtualenv](https://github.com/pypa/virtualenv) | `21.4.2` | `21.5.0` | Updates `pylint` from 4.0.5 to 4.0.6 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.5...v4.0.6) Updates `pytest` from 9.0.3 to 9.1.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.0) Updates `distlib` from 0.4.1 to 0.4.3 - [Release notes](https://github.com/pypa/distlib/releases) - [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst) - [Commits](pypa/distlib@0.4.1...0.4.3) Updates `filelock` from 3.29.1 to 3.29.4 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.29.4) Updates `python-discovery` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](tox-dev/python-discovery@1.4.0...1.4.2) Updates `virtualenv` from 21.4.2 to 21.5.0 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.5.0) --- updated-dependencies: - dependency-name: pylint dependency-version: 4.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: pytest dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-version-updates - dependency-name: distlib dependency-version: 0.4.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: filelock dependency-version: 3.29.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: python-discovery dependency-version: 1.4.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: development-version-updates - dependency-name: virtualenv dependency-version: 21.5.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: development-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-06-15T11:32:45Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 15, 2026

github-actions Bot approved these changes Jun 15, 2026

View reviewed changes

github-actions Bot enabled auto-merge June 15, 2026 11:32

github-actions Bot merged commit 03b822a into main Jun 15, 2026
4 checks passed

github-actions Bot deleted the dependabot/pip/development-version-updates-a4a6a93f68 branch June 15, 2026 11:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the development-version-updates group with 6 updates#368

Bump the development-version-updates group with 6 updates#368
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/development-version-updates-a4a6a93f68

dependabot Bot commented on behalf of github Jun 15, 2026

Uh oh!

codacy-production Bot commented Jun 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

3.29.4

What's Changed

3.29.3

What's Changed

3.29.2

What's Changed

v1.4.2

What's Changed

v1.4.1

What's Changed

Bug fixes - 1.4.2

Bug fixes - 1.4.1

21.5.0

What's Changed

21.4.3

What's Changed

New Contributors

Features - 21.5.0

Bugfixes - 21.5.0

Bugfixes - 21.4.3

Uh oh!

codacy-production Bot commented Jun 15, 2026

Up to standards ✅

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants