Skip to content

build(deps-dev): Bump the "dev-only" group with 1 update across multiple ecosystems - #4479

Merged
rickeylev merged 3 commits into
mainfrom
dependabot/dev_only-18d237e3ff
Nov 12, 2026
Merged

build(deps-dev): Bump the "dev-only" group with 1 update across multiple ecosystems#4479
rickeylev merged 3 commits into
mainfrom
dependabot/dev_only-18d237e3ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-only group with 1 update in the /examples/wheel directory: pypiserver.
Bumps the dev-only group with 1 update in the /tests/integration/unified_pypi directory: colorama.
Bumps the dev-only group with 1 update in the /tests/multi_pypi/alpha directory: more-itertools.
Bumps the dev-only group with 1 update in the /tests/multi_pypi/beta directory: more-itertools.

Updates pypiserver from 2.4.2 to 2.4.3

Release notes

Sourced from pypiserver's releases.

v2.4.3

[!NOTE] A few maintenance updates and fixes. Thanks to all who helped improving the repo these times!

Summary:

Core focus:

  1. important version updates
  2. bug fixes in version lookup
  3. update in documentation

What's Changed

New Contributors

Full Changelog: pypiserver/pypiserver@v2.4.2...v2.4.3

Changelog

Sourced from pypiserver's changelog.

2.4.3 (2026-11-08)

  • deedae4 FIX: fix: passing formatting flags in CI
  • 4885eea FIX: fix: normalize project names in find_version for remove_pkg (#735)
  • af839b9 MAINT: Docs: update ad-hoc authentication example to use roots (#734)
  • 57eb6a6 MAINT: chore: Bump certifi from 2026.2.25 to 2026.10.19 (#738)
  • 37dc266 MAINT: chore: Bump setuptools from 80.10.2 to 84.1.0 (#739)
  • 69f750c MAINT: chore: Bump urllib3 from 2.7.0 to 2.8.0 (#737)
Commits
  • 14d1e99 chore(ver): bump 2.4.2-->2.4.3
  • 7ebc668 chore(auto-release-candidate-2026-11-08) (#742)
  • deedae4 fix: passing formatting flags in CI
  • 4885eea fix: normalize project names in find_version for remove_pkg (#735)
  • af839b9 Docs: update ad-hoc authentication example to use roots (#734)
  • 57eb6a6 chore: Bump certifi from 2026.2.25 to 2026.10.19 (#738)
  • 37dc266 chore: Bump setuptools from 80.10.2 to 84.1.0 (#739)
  • 69f750c chore: Bump urllib3 from 2.7.0 to 2.8.0 (#737)
  • See full diff in compare view

Updates colorama from 0.4.5 to 0.4.6

Changelog

Sourced from colorama's changelog.

0.4.6 Current release

  • tartley/colorama#139 Add alternative to 'init()', called 'just_fix_windows_console'. This fixes many longstanding problems with 'init', such as working incorrectly on modern Windows terminals, and wonkiness when init gets called multiple times. The intention is that it just makes all Windows terminals treat ANSI the same way as other terminals do. Many thanks the njsmith for fixing our messes.
  • tartley/colorama#352 Support Windows 10's ANSI/VT console. This didn't exist when Colorama was created, and avoiding us causing havok there is long overdue. Thanks to segeviner for the initial approach, and to njsmith for getting it merged.
  • tartley/colorama#338 Internal overhaul of package metadata declaration, which abolishes our use of the now heavily discouraged setuptools (and hence setup.py, setup.cfg and MANIFEST.in), in favor of hatchling (and hence pyproject.toml), generously contributed by ofek (author of hatchling). This includes dropping support Python3.5 and 3.6, which are EOL, and were already dropped from setuptools, so this should not affect our users.
  • tartley/colorama#353 Attention to detail award to LqdBcnAtWork for a spelling fix in demo06
Commits
  • 3de9f01 bump version 0.4.6
  • a45949b Format the CHANGELOG bullet list, no content change
  • f55f72e comment need for a fix after recent MP broke it
  • cb83041 fix test-release after recent MPs broke it
  • 832f14c README tweaks
  • 54b89c3 Bump version to 0.4.6rc1
  • 7991d34 'make bootstrap' uses system python3, not pinned v3.8
  • 0ae5ef2 CHANGELOG updates for upcoming 0.4.6 release
  • 52f4cfd Tweak ordering of release checklist
  • ab64cfa Merge pull request #353 from LqdBcnAtWork/patch-1
  • Additional commits viewable in compare view

Updates more-itertools from 9.1.0 to 11.2.1

Release notes

Sourced from more-itertools's releases.

Version 11.2.1

This release includes #1331, a packaging-related change. No module code changed.

Version 11.2.0

Highlights:

  • New random_ordered_range function
  • New subfactorial function
  • Python 3.10 is no longer officially supported
  • Python 3.15 is now officially supported

See the release notes for details.

Version 11.1.0

Changes:

  • numeric_range was updated to fix its handling of empty ranges (thanks to rhettinger)
  • peekable was updated to fix typing issues (thanks to DORI2001, powellnorma, Pandede, m9810223, and rhettinger)
  • islice_extended was optimized for memory usage and speed (thanks to ben42code, rhettinger, and pochmann)
  • serialize now supports the generator methods throw, send, and close (thanks to rhettinger)
  • seekable now supports implements __getitem__ for cached elements (thanks to SAY-5, jenstroeger, and JamesParrott)

Version 11.0.2

  • The changes to the type hints for always_iterable in 11.0.0 have been reverted due to reported problems (thanks to ngoldbaum and rhettinger)
  • zip_equal was removed in 11.0.0. It had been deprecated and raising DeprecationWarning since 2021, but it's removal shoul have been documented in 11.0.0's release notes. We regret the error.
  • running_statistics has been moved from more_itertools.more to more_itertools.recipes. Its docstring was also improved (thanks to mastash3ff and rhettinger)

Version 11.0.1

This release restores pairwise, which was mistakenly removed in 11.0.0 instead of being deprecated. It is now marked as deprecated and will be removed in a future major release. Use itertools.pairwise as a replacement.

Version 11.0.0

Potentially breaking changes

  • Python 3.9 support was dropped, since it went EOL on 2025-10-31
  • callback_iter is deprecated. It will be removed in a future major release.
  • iequals no longer returns True when called with ([], [ANY]) (thanks to rhettinger and pochmann3)
  • The pred argument for locate and replace must now be able to handle a variable number of arguments. See their docstrings for details. (thanks to veeceey, james-wasson, and pochmann3)
  • unique_everseen now raises TypeError when input elements are not hashable. The silent fallback mechanism for unhashable inputs has been removed. (thanks to rhettinger and karlicoss)
  • windowed now raises ValueError when given a window size of 0 (thanks to rhettinger and brevzin)
  • Parameter names for flatten, iter_except, repeatfunc, prepend, transpose, and sum_of_squares have been changed. Code that uses these functions will need to be updated if it uses keywords for positional arguments. (thanks to rhettinger)

New functions

  • concurrent_tee: similar to tee, but with guaranteed threading semantics (thanks to rhettinger)
  • random_derangement: returns a random derangement of elements from an iterable (thanks to rhettinger)
  • running_mean: yields the mean of values in an iterable, or in a sliding

... (truncated)

Commits
  • 4aeb433 Merge pull request #1331 from more-itertools/flit-4-sdist
  • da864da Version 11.2.1: Include additional files in sdist
  • 737c261 Merge pull request #1314 from more-itertools/version-11.2.0
  • 909b703 Bump version to 11.2.0
  • 6ad55cb Swap 310 for 315 in tox
  • 787bcb5 Drop typing_extensions for more.pyi
  • 68a52e0 Update versions.rst
  • be6ecc0 Changelog tweaks
  • 45c65a3 Even more WIP release notes for 11.2.0
  • 56a469c More WIP release ntoes 11.2.0
  • Additional commits viewable in compare view

Updates more-itertools from 9.0.0 to 11.2.1

Release notes

Sourced from more-itertools's releases.

Version 11.2.1

This release includes #1331, a packaging-related change. No module code changed.

Version 11.2.0

Highlights:

  • New random_ordered_range function
  • New subfactorial function
  • Python 3.10 is no longer officially supported
  • Python 3.15 is now officially supported

See the release notes for details.

Version 11.1.0

Changes:

  • numeric_range was updated to fix its handling of empty ranges (thanks to rhettinger)
  • peekable was updated to fix typing issues (thanks to DORI2001, powellnorma, Pandede, m9810223, and rhettinger)
  • islice_extended was optimized for memory usage and speed (thanks to ben42code, rhettinger, and pochmann)
  • serialize now supports the generator methods throw, send, and close (thanks to rhettinger)
  • seekable now supports implements __getitem__ for cached elements (thanks to SAY-5, jenstroeger, and JamesParrott)

Version 11.0.2

  • The changes to the type hints for always_iterable in 11.0.0 have been reverted due to reported problems (thanks to ngoldbaum and rhettinger)
  • zip_equal was removed in 11.0.0. It had been deprecated and raising DeprecationWarning since 2021, but it's removal shoul have been documented in 11.0.0's release notes. We regret the error.
  • running_statistics has been moved from more_itertools.more to more_itertools.recipes. Its docstring was also improved (thanks to mastash3ff and rhettinger)

Version 11.0.1

This release restores pairwise, which was mistakenly removed in 11.0.0 instead of being deprecated. It is now marked as deprecated and will be removed in a future major release. Use itertools.pairwise as a replacement.

Version 11.0.0

Potentially breaking changes

  • Python 3.9 support was dropped, since it went EOL on 2025-10-31
  • callback_iter is deprecated. It will be removed in a future major release.
  • iequals no longer returns True when called with ([], [ANY]) (thanks to rhettinger and pochmann3)
  • The pred argument for locate and replace must now be able to handle a variable number of arguments. See their docstrings for details. (thanks to veeceey, james-wasson, and pochmann3)
  • unique_everseen now raises TypeError when input elements are not hashable. The silent fallback mechanism for unhashable inputs has been removed. (thanks to rhettinger and karlicoss)
  • windowed now raises ValueError when given a window size of 0 (thanks to rhettinger and brevzin)
  • Parameter names for flatten, iter_except, repeatfunc, prepend, transpose, and sum_of_squares have been changed. Code that uses these functions will need to be updated if it uses keywords for positional arguments. (thanks to rhettinger)

New functions

  • concurrent_tee: similar to tee, but with guaranteed threading semantics (thanks to rhettinger)
  • random_derangement: returns a random derangement of elements from an iterable (thanks to rhettinger)
  • running_mean: yields the mean of values in an iterable, or in a sliding

... (truncated)

Commits
  • 4aeb433 Merge pull request #1331 from more-itertools/flit-4-sdist
  • da864da Version 11.2.1: Include additional files in sdist
  • 737c261 Merge pull request #1314 from more-itertools/version-11.2.0
  • 909b703 Bump version to 11.2.0
  • 6ad55cb Swap 310 for 315 in tox
  • 787bcb5 Drop typing_extensions for more.pyi
  • 68a52e0 Update versions.rst
  • be6ecc0 Changelog tweaks
  • 45c65a3 Even more WIP release notes for 11.2.0
  • 56a469c More WIP release ntoes 11.2.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): Bump the dev-only group across 4 directories with 3 …
e736020 
…updates

Bumps the dev-only group with 1 update in the /examples/wheel directory: [pypiserver](https://github.com/pypiserver/pypiserver).
Bumps the dev-only group with 1 update in the /tests/integration/unified_pypi directory: [colorama](https://github.com/tartley/colorama).
Bumps the dev-only group with 1 update in the /tests/multi_pypi/alpha directory: [more-itertools](https://github.com/more-itertools/more-itertools).
Bumps the dev-only group with 1 update in the /tests/multi_pypi/beta directory: [more-itertools](https://github.com/more-itertools/more-itertools).


Updates `pypiserver` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/pypiserver/pypiserver/releases)
- [Changelog](https://github.com/pypiserver/pypiserver/blob/main/CHANGES.rst)
- [Commits](pypiserver/pypiserver@v2.4.2...v2.4.3)

Updates `colorama` from 0.4.5 to 0.4.6
- [Changelog](https://github.com/tartley/colorama/blob/master/CHANGELOG.rst)
- [Commits](tartley/colorama@0.4.5...0.4.6)

Updates `more-itertools` from 9.1.0 to 11.2.1
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v9.1.0...v11.2.1)

Updates `more-itertools` from 9.0.0 to 11.2.1
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v9.1.0...v11.2.1)

---
updated-dependencies:
- dependency-name: pypiserver
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-only
- dependency-name: colorama
  dependency-version: 0.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-only
- dependency-name: more-itertools
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-only
- dependency-name: more-itertools
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dev-only
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 11, 2026
@rickeylev
build(deps-dev): keep distinct multi-hub fixture versions and exclude…
94cfa48 
… secondary hubs

Dependabot's weekly version scan bumps all manifests to the single
newest PyPI release, collapsing the distinct versions needed by the
`multi_pypi` and `unified_pypi` cross-hub isolation tests.

Upgrade `multi_pypi/alpha` and `multi_pypi/beta` to `11.2.1` and
`11.2.0` (updating their version assertions), retain `colorama==0.4.5`
in `unified_pypi/requirements_b*.txt` alongside `0.4.6` in
`requirements_a.txt`, and exclude those secondary fixture paths in
`.github/dependabot.yml`.
@rickeylev
rickeylev enabled auto-merge November 12, 2026 04:29
@rickeylev
fix(dependabot): remove leading slashes from exclude-paths
cd897e9 
Dependabot requires `exclude-paths` entries to be relative to the
repository root without a leading `/`.
@rickeylev
rickeylev added this pull request to the merge queue Nov 12, 2026
Merged via the queue into main with commit b089d17 Nov 12, 2026
21 checks passed
@rickeylev
rickeylev deleted the dependabot/dev_only-18d237e3ff branch November 12, 2026 04:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rickeylev rickeylev rickeylev approved these changes
@aignas aignas Awaiting requested review from aignas aignas is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rickeylev