Skip to content

Bump the "dependencies" group with 2 updates across multiple ecosystems#220

Merged
freakboy3742 merged 1 commit intomainfrom
dependabot/dependencies-5e6f2cef24
Mar 1, 2026
Merged

Bump the "dependencies" group with 2 updates across multiple ecosystems#220
freakboy3742 merged 1 commit intomainfrom
dependabot/dependencies-5e6f2cef24

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps the dependencies group with 1 update: j178/prek-action.

Updates j178/prek-action from 1.1.0 to 1.1.1

Release notes

Sourced from j178/prek-action's releases.

v1.1.1

What's Changed

New Contributors

Full Changelog: j178/prek-action@v1.1.0...v1.1.1

Commits

Bumps the dependencies group with 4 updates: prek, coverage, tox-uv and setuptools.

Updates prek from 0.3.1 to 0.3.4

Release notes

Sourced from prek's releases.

0.3.4

Release Notes

Released on 2026-02-28.

Enhancements

  • Allow pass_filenames to accept a positive integer (#1698)
  • Install and compile gems in parallel (#1674)
  • Sync identify file-type mappings with pre-commit identify (#1660)
  • Use --locked for Rust cargo install commands (#1661)
  • Add PREK_MAX_CONCURRENCY environment variable for configuring maximum concurrency (#1697)
  • Add PREK_LOG_TRUNCATE_LIMIT environment variable for configuring log truncation (#1679)
  • Add support for python -m prek (#1686)

Bug fixes

  • Skip invalid Rust toolchains instead of failing (#1699)

Performance

  • Bitset-based TagSet refactor: precompute tag masks and speed up hook type filtering (#1665)

Documentation

  • Document winget install j178.Prek (#1670)

Contributors

Install prek 0.3.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.4/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.4/prek-installer.ps1 | iex"
</tr></table>

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.4

Released on 2026-02-28.

Enhancements

  • Allow pass_filenames to accept a positive integer (#1698)
  • Install and compile gems in parallel (#1674)
  • Sync identify file-type mappings with pre-commit identify (#1660)
  • Use --locked for Rust cargo install commands (#1661)
  • Add PREK_MAX_CONCURRENCY environment variable for configuring maximum concurrency (#1697)
  • Add PREK_LOG_TRUNCATE_LIMIT environment variable for configuring log truncation (#1679)
  • Add support for python -m prek (#1686)

Bug fixes

  • Skip invalid Rust toolchains instead of failing (#1699)

Performance

  • Bitset-based TagSet refactor: precompute tag masks and speed up hook type filtering (#1665)

Documentation

  • Document winget install j178.Prek (#1670)

Contributors

0.3.3

Released on 2026-02-15.

Enhancements

  • Read Python version specifier from hook repo pyproject.toml (#1596)
  • Add #:schema directives to generated prek.toml (#1597)
  • Add prek util list-builtins command (#1600)
  • Expand install source detection to mise, uv tool, pipx, and asdf (#1605, #1607)
  • Add progress bar to cache clean and show removal summary (#1616)
  • Make yaml-to-toml CONFIG argument optional (#1593)
  • prek uninstall removes legacy scripts too (#1622)

... (truncated)

Commits

Updates coverage from 7.13.2 to 7.13.4

Changelog

Sourced from coverage's changelog.

Version 7.13.4 — 2026-02-09

  • Fix: the third-party code fix in 7.13.3 required examining the parent directories where coverage was run. In the unusual situation that one of the parent directories is unreadable, a PermissionError would occur, as described in issue 2129_. This is now fixed.

  • Fix: in test suites that change sys.path, coverage.py could fail with "RuntimeError: Set changed size during iteration" as described and fixed in pull 2130_. Thanks, Noah Fatsi.

  • We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: coveragepy/coveragepy#2121 .. _issue 2129: coveragepy/coveragepy#2129 .. _pull 2130: coveragepy/coveragepy#2130

.. _changes_7-13-3:

Version 7.13.3 — 2026-02-03

  • Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

.. _issue 2082: coveragepy/coveragepy#2082

.. _changes_7-13-2:

Commits

Updates tox-uv from 1.29.0 to 1.33.0

Release notes

Sourced from tox-uv's releases.

1.33.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.32.1...1.33.0

1.32.1

What's Changed

Full Changelog: tox-dev/tox-uv@1.32.0...1.32.1

1.32.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.31.0...1.32.0

1.31.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.30.0...1.31.0

1.30.0

What's Changed

... (truncated)

Commits
  • 223e5e3 fix: set venv prompt to be proj_dir[env_name] (#298)
  • 37d0abe 📝 docs(meta): inject root README into tox-uv at build time (#297)
  • 7d6ec78 ✨ feat(packaging): add monorepo with bare and meta packages (#296)
  • 79c6c70 ♻️ refactor(runner): delegate setup orchestration to parent class (#295)
  • e03d8a0 🐛 fix(runner): combine deps and dependency groups for uv_resolution (#294)
  • e871445 ✨ feat(lock): add only_groups config for uv sync (#293)
  • c9a78a1 🐛 fix(lock): use bundled uv binary for uv sync (#292)
  • 045e338 🐛 fix(venv): resolve relative workdir paths against tox_root (#291)
  • 32dc0c9 🐛 fix(lock-runner): honour setupdir for pyproject.toml (#290)
  • 5181bfd 🐛 fix(installer): handle list-type uv sources (#289)
  • Additional commits viewable in compare view

Updates setuptools from 80.10.2 to 82.0.0

Changelog

Sourced from setuptools's changelog.

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)
Commits
  • 03f3615 Bump version: 81.0.0 → 82.0.0
  • 530d114 Merge pull request #5007 from pypa/feature/remove-more-pkg_resources
  • 11efe9f Merge branch 'maint/75.3'
  • 118f129 Bump version: 75.3.3 → 75.3.4
  • 90561ff Merge pull request #5150 from UladzimirTrehubenka/backport_cve_47273
  • 4595034 Add news fragment.
  • fc00800 Merge pull request #5171 from cclauss/ruff-v0.15.0
  • 127e561 Remove tests reliant on pkg_resources, rather than xfailing them.
  • 64bc21e Reference the superseding libraries.
  • cf1ff45 Merge branch 'main' into debt/pbr-without-pkg_resources
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump j178/prek-action from 1.1.0 to 1.1.1 in the dependencies group
47383e4 
Bumps the dependencies group with 1 update: [j178/prek-action](https://github.com/j178/prek-action).


Updates `j178/prek-action` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/j178/prek-action/releases)
- [Commits](j178/prek-action@v1.1.0...v1.1.1)
Bump the dependencies group with 4 updates

Bumps the dependencies group with 4 updates: [prek](https://github.com/j178/prek), [coverage](https://github.com/coveragepy/coveragepy), [tox-uv](https://github.com/tox-dev/tox-uv) and [setuptools](https://github.com/pypa/setuptools).


Updates `prek` from 0.3.1 to 0.3.4
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.1...v0.3.4)

Updates `coverage` from 7.13.2 to 7.13.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.2...7.13.4)

Updates `tox-uv` from 1.29.0 to 1.33.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.29.0...1.33.0)

Updates `setuptools` from 80.10.2 to 82.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v80.10.2...v82.0.0)

---
updated-dependencies:
- dependency-name: j178/prek-action
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prek
  dependency-version: 0.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tox-uv
  dependency-version: 1.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: setuptools
  dependency-version: 82.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 1, 2026
@freakboy3742 freakboy3742 merged commit 60ada9b into main Mar 1, 2026
15 checks passed
@freakboy3742 freakboy3742 deleted the dependabot/dependencies-5e6f2cef24 branch March 1, 2026 22:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@freakboy3742 freakboy3742 freakboy3742 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@freakboy3742