Bump the dependencies group with 3 updates #127

dependabot · 2025-01-27T12:18:45Z

Bumps the dependencies group with 3 updates: pre-commit, conan and ansys-sphinx-theme.

Updates pre-commit from 3.6.1 to 4.1.0

Release notes

pre-commit v4.1.0

Features

Add language: julia.

#3348 PR by @fredrikekre.

#2689 issue @jmuchovej.

Fixes

Disable automatic toolchain switching for language: golang.

#3304 PR by @AleksaC.

#3300 issue by @AleksaC.

#3149 issue by @nijel.

Fix language: r installation when initiated by RStudio.

#3389 PR by @lorenzwalthert.

#3385 issue by @lorenzwalthert.

pre-commit v4.0.1

Fixes

Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.

#3324 PR by @asottile.

pre-commit-ci/issues#234 issue by @lorenzwalthert.

pre-commit v4.0.0

Features

Improve pre-commit migrate-config to handle more yaml formats.

#3301 PR by @asottile.

Handle stages deprecation in pre-commit migrate-config.

#3302 PR by @asottile.

#2732 issue by @asottile.

Upgrade ruby-build.

#3199 PR by @ThisGuyCodes.

Add "sensible regex" warnings to repo: meta.

#3311 PR by @asottile.

Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).

#3312 PR by @asottile.

#3313 PR by @asottile.

#3315 PR by @asottile.

#2732 issue by @asottile.

Migrating

language: python_venv has been removed -- use language: python instead.

#3320 PR by @asottile.

#2734 issue by @asottile.

pre-commit v3.8.0

Features

Implement health checks for language: r so environments are recreated if the system version of R changes.

#3206 issue by @lorenzwalthert.

#3265 PR by @lorenzwalthert.

... (truncated)

Changelog

Sourced from pre-commit's changelog.

4.1.0 - 2025-01-20

Features

Add language: julia.

#3348 PR by @fredrikekre.

#2689 issue @jmuchovej.

Fixes

Disable automatic toolchain switching for language: golang.

#3304 PR by @AleksaC.

#3300 issue by @AleksaC.

#3149 issue by @nijel.

Fix language: r installation when initiated by RStudio.

#3389 PR by @lorenzwalthert.

#3385 issue by @lorenzwalthert.

4.0.1 - 2024-10-08

Fixes

Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.

#3324 PR by @asottile.

pre-commit-ci/issues#234 issue by @lorenzwalthert.

4.0.0 - 2024-10-05

Features

Improve pre-commit migrate-config to handle more yaml formats.

#3301 PR by @asottile.

Handle stages deprecation in pre-commit migrate-config.

#3302 PR by @asottile.

#2732 issue by @asottile.

Upgrade ruby-build.

#3199 PR by @ThisGuyCodes.

Add "sensible regex" warnings to repo: meta.

#3311 PR by @asottile.

Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).

#3312 PR by @asottile.

#3313 PR by @asottile.

#3315 PR by @asottile.

#2732 issue by @asottile.

Migrating

language: python_venv has been removed -- use language: python instead.

#3320 PR by @asottile.

... (truncated)

Commits

b152e92 v4.1.0
c3125a4 Merge pull request #3389 from lorenzwalthert/dev-always-unset-renv
c2c061c fix: ensure env patch is applied for vanilla emulation
cd429db Merge pull request #3382 from pre-commit/pre-commit-ci-update-config
9b9f8e2 [pre-commit.ci] pre-commit autoupdate
86300a4 Merge pull request #3376 from pre-commit/r-gone
77edad8 install r on ubuntu runners
18b3939 Merge pull request #3375 from pre-commit/dotnet-tests-ubuntu-latest
31cb945 Merge pull request #3374 from pre-commit/docker-image-tests-ubuntu-22-not-pre...
28c3d81 update .net tests to use .net 8
Additional commits viewable in compare view

Updates conan from 2.8.1 to 2.11.0

Release notes

Sourced from conan's releases.

2.11.0 (18-Dec-2024)

Feature: Only warn on frozen conan v1 remote if enabled. (conan-io/conan#17482)

Feature: AutotoolsToolchain uses user's variables when Android cross-compilation at first. (conan-io/conan#17470). Docs: 📃

Feature: AutotoolsToolchain checks if Android cross-compilation paths exist. (conan-io/conan#17470). Docs: 📃

Feature: Adding the Conan cache "profiles" folder to the jinja2 search path, so profiles can be included/imported from jinja syntax even for parent and sibling folders. (conan-io/conan#17432). Docs: 📃

Feature: Updated tools.env.virtualenv:powershell conf to allow specifying the PowerShell executable (e.g., powershell.exe or pwsh) and passing additional arguments. (conan-io/conan#17416). Docs: 📃

Feature: Deprecate use of tools.env.virtualenv:powershell=True/False. (conan-io/conan#17416). Docs: 📃

Fix: Do not show powershell deprecation message if value is None. (conan-io/conan#17500)

Fix: Fix LocalAPI definition of editables when calling editable_add. (conan-io/conan#17498)

Fix: Clarify debug message in CMakeDeps. (conan-io/conan#17453)

Fix: Added explicitly allow_empty = True to glob() function in BazelDeps (bazel 8.x compatible). (conan-io/conan#17444)

Fix: Fix broken cpp_info.location deduction due to unsanitized regex. (conan-io/conan#17430)

Fix: Trusting the real path coming from a symlink is a good one. (conan-io/conan#17421)

Fix: Fix user/channel when searching patterns in a local-recipes-index. (conan-io/conan#17408)

Fix: Add warning for empty version ranges. (conan-io/conan#17405)

Bugfix: Fix bogus duplication of component properties (conan-io/conan#17503)

Bugfix: Fix running commands in powershell with single quotes. (conan-io/conan#17487)

Bugfix: Fix issues with unsetting some types of confs. (conan-io/conan#17445)

2.10.3 (18-Dec-2024)

Bugfix: Integrate Conan 2.9.3 missing fix conan-io/conan#17338 (conan-io/conan#17496)

2.10.2 (10-Dec-2024)

Fix: Solve performance issue in large graphs computing the "skip" binaries. (conan-io/conan#17436)

2.10.1 (04-Dec-2024)

Bugfix: Fix [replace_requires] for replacements of same reference name. (conan-io/conan#17409)

2.10.0 (03-Dec-2024)

Feature: Add --force option to conan remote auth to force authentication even for remotes that have anonymous access enabled. (conan-io/conan#17377). Docs: 📃

Feature: Add --output option to conan new command. (conan-io/conan#17359)

Feature: Let the new CMakeDeps always define components and check them with find_package( COMPONENTS), listening to new property cmake_components. (conan-io/conan#17302)

Feature: Allow tools.microsoft.msbuild:max_cpu_count=0 to use /m to use all available cores. (conan-io/conan#17301). Docs: 📃

Feature: define * as default argument if no args specified for conan list. (conan-io/conan#17300). Docs: 📃

Feature: Improved auto deduce location function. (conan-io/conan#17296)

Feature: BazelDeps using the new deduce_location mechanism to find the libraries. (conan-io/conan#17296)

Feature: Initial conan workspace initial proposal to manage local set of editables. Introduced only as a dev/maintainers feature, behind an environment variable. (conan-io/conan#17272). Docs: 📃

Feature: Allow --settings in conan config install-pkg to create and install different configurations in different platforms. (conan-io/conan#17217). Docs: 📃

Feature: Add network to configfile for Docker runners. (conan-io/conan#17069). Docs: 📃

Fix: Fix help message for PowerShell conf. (conan-io/conan#17389). Docs: 📃

Fix: Fixed an error that occurred when using conan.tools.scm.Git.fetch_commit() in a subfolder. (conan-io/conan#17369)

Fix: Adding a "risk" warning for options conflicts, so users can do warn-as-error to raise when they happen. (conan-io/conan#17366)

Fix: New CMakeDeps generator allow fooConfig.cmake for in-package files besides foo-config.cmake. (conan-io/conan#17330)

Fix: Add a warning for editable dependencies when building in the cache. (conan-io/conan#17325)

Fix: Raise ConanException if source patch does not exist in export_conandata_patches. (conan-io/conan#17294)

Fix: Improve the UX for CONAN_LOG_LEVEL env-var incorrect values. (conan-io/conan#17280)

Fix: Meson aligns with other build systems considering x86_64->x86 as cross building. (conan-io/conan#17266)

Fix: Avoid colorama bug crashing for large outputs. (conan-io/conan#17259)

Fix: Fix arch for docker runner tests. (conan-io/conan#17069). Docs: 📃

Bugfix: Add correct flags when compiler=clang and compiler_executables={"c": "clang-cl"} to not inject incorrect flags when cross-building from Linux to Windows. (conan-io/conan#17387)

... (truncated)

Commits

15d015c Conan 2.11.0
bd20ea2 fix run with nested quotes (#17487)
cd7f0be Don't use a reference for new component properties lists when merging (#17503)
5fbf896 Fix powershell warning (#17500)
586f983 [AutotoolsToolchain] Improve Android cross-compilation UX (#17470)
e997512 refactor test usage of ConanAPI (#17494)
c914779 fix LocalAPI editables (#17498)
5d61faf Only warn on frozen conan v1 remote if enabled (#17482)
fcb2bc0 Merge branch 'release/2.10' into develop2
5f9cbe7 fix missing is_test fix of 2.9.3 (#17496)
Additional commits viewable in compare view

Updates ansys-sphinx-theme from 1.1.6 to 1.2.6

Commits

21918b4 release: v1.2.6
f03dd30 fix: LICENSES
8926bd3 chore: updating CHANGELOG for v1.2.5
d2b67dc release: v1.2.5
f727a18 chore(deps): update pydata-sphinx-theme requirement from <0.16,>=0.15.4 to >=...
63e5519 chore: updating CHANGELOG for v1.2.4
9fcf9f0 release: v1.2.4
9b8a28d fix: impose upper version for the pydata-sphinx-theme (#603)
ddda1e7 chore: updating CHANGELOG for v1.2.3
acdfd53 release: v1.2.3
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [pre-commit](https://github.com/pre-commit/pre-commit), [conan](https://github.com/conan-io/conan) and [ansys-sphinx-theme](https://github.com/ansys/ansys-sphinx-theme). Updates `pre-commit` from 3.6.1 to 4.1.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.6.1...v4.1.0) Updates `conan` from 2.8.1 to 2.11.0 - [Release notes](https://github.com/conan-io/conan/releases) - [Commits](conan-io/conan@2.8.1...2.11.0) Updates `ansys-sphinx-theme` from 1.1.6 to 1.2.6 - [Release notes](https://github.com/ansys/ansys-sphinx-theme/releases) - [Commits](ansys/ansys-sphinx-theme@v1.1.6...v1.2.6) --- updated-dependencies: - dependency-name: pre-commit dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: conan dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ansys-sphinx-theme dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

wiz-inc-572fc38784 · 2025-01-27T12:18:58Z

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	2 7 1
Sensitive Data
Secrets
IaC Misconfigurations

Total	2 7 1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

dependabot · 2025-02-03T11:26:38Z

Superseded by #128.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 27, 2025

dependabot bot closed this Feb 3, 2025

dependabot bot deleted the dependabot/pip/dependencies-35318431f6 branch February 3, 2025 11:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 3 updates #127

Bump the dependencies group with 3 updates #127

dependabot bot commented on behalf of github Jan 27, 2025 •

edited

Loading

wiz-inc-572fc38784 bot commented Jan 27, 2025

dependabot bot commented on behalf of github Feb 3, 2025

Bump the dependencies group with 3 updates #127

Bump the dependencies group with 3 updates #127

Conversation

dependabot bot commented on behalf of github Jan 27, 2025 • edited Loading

pre-commit v4.1.0

Features

Fixes

pre-commit v4.0.1

Fixes

pre-commit v4.0.0

Features

Migrating

pre-commit v3.8.0

Features

4.1.0 - 2025-01-20

Features

Fixes

4.0.1 - 2024-10-08

Fixes

4.0.0 - 2024-10-05

Features

Migrating

2.11.0 (18-Dec-2024)

2.10.3 (18-Dec-2024)

2.10.2 (10-Dec-2024)

2.10.1 (04-Dec-2024)

2.10.0 (03-Dec-2024)

wiz-inc-572fc38784 bot commented Jan 27, 2025

Wiz Scan Summary

dependabot bot commented on behalf of github Feb 3, 2025

dependabot bot commented on behalf of github Jan 27, 2025 •

edited

Loading