build(deps): bump the uv group across 1 directory with 4 updates - #6
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the uv group across 1 directory with 4 updates#6dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the uv group with 4 updates in the / directory: [mcp](https://github.com/modelcontextprotocol/python-sdk), [gitpython](https://github.com/gitpython-developers/GitPython), [pyasn1](https://github.com/pyasn1/pyasn1) and [pypdf](https://github.com/py-pdf/pypdf). Updates `mcp` from 1.26.0 to 1.28.1 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.28.1) Updates `gitpython` from 3.1.50 to 3.1.54 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.50...3.1.54) Updates `pyasn1` from 0.6.3 to 0.6.4 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4) Updates `pypdf` from 6.13.3 to 6.14.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.13.3...6.14.2) --- updated-dependencies: - dependency-name: mcp dependency-version: 1.28.1 dependency-type: direct:production dependency-group: uv - dependency-name: gitpython dependency-version: 3.1.54 dependency-type: indirect dependency-group: uv - dependency-name: pyasn1 dependency-version: 0.6.4 dependency-type: indirect dependency-group: uv - dependency-name: pypdf dependency-version: 6.14.2 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
PR author is in the excluded authors list. |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 4 updates in the / directory: mcp, gitpython, pyasn1 and pypdf.
Updates
mcpfrom 1.26.0 to 1.28.1Release notes
Sourced from mcp's releases.
... (truncated)
Commits
777b8d0[v1.x] Support TransportSecuritySettings in the WebSocket server transport (#...4720467[v1.x] Set Development Status classifier to Production/Stable (#2976)6df3d73[v1.x] Buffer per-request StreamableHTTP streams; store priming event before ...32d3290[v1.x] Pass a list to parametrize in test_docs_examples (pytest 9.1.0 compat)...0dca751[v1.x] Deflake the child process cleanup tests (#2839)52258a9[v1.x] Add a v2 status banner to the README (#2835)b8f4917[v1.x] Deprecate the WebSocket transport and the experimental tasks entry poi...2309e5efix: omit null optional fields from task result payloads (#2809)494eb11[v1.x] Support Python 3.14 (#2769)6213787[v1.x] Scope experimental tasks to the session that created them (#2720)Updates
gitpythonfrom 3.1.50 to 3.1.54Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
e59d9baprepare next releasea4dc70dMerge pull request #2180 from gitpython-developers/single-char-kwarg1d51b89fix: guard diff output optionsffcb535fix: reject unsafe clone templatese8d0fbffix: validate split short-option valuesfaf3c09prepare for security fix6a5eb6aMerge pull request #2176 from gitpython-developers/fix-config-injection1ed1b92fix: validate config section delimiters354eb2fMerge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks9bc287aAddress review feedback about hook resolutionUpdates
pyasn1from 0.6.3 to 0.6.4Release notes
Sourced from pyasn1's releases.
Changelog
Sourced from pyasn1's changelog.
Commits
72e4803Prepare release 0.6.40c19eebPin PyPI publish action to immutable commit (#113)45bdb19Merge commit from fork628e36eMerge commit from forke60c691Merge commit from forkUpdates
pypdffrom 6.13.3 to 6.14.2Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
2266ee8REL: 6.14.25a33a46SEC: Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline images (...1ee4e58REL: 6.14.1ec3b145SEC: Detect end of stream during inline image end marker detection (#3891)c6cd82eROB: Tolerate malformed inline image settings in _read_inline_image (#3889)0ae42baROB: Tolerate malformed page label entries in get_label_from_nums (#3884)50617b5ROB: Tolerate malformed Tm operand count in extract_text (#3877)86e5a82MAINT: Improve readability (#3874)83cb25fDEV: Fix sample files commit06588ecREL: 6.14.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by cubic
Upgrade
mcp,gitpython,pyasn1, andpypdfin the uv group to pull in security fixes and Python 3.14 compatibility. This may emit new deprecation warnings frommcp.Dependencies
mcp1.26.0 → 1.28.1: Adds Python 3.14 support; deprecates WebSocket transport and the experimental tasks API (DeprecationWarning only).gitpython3.1.50 → 3.1.54: Security hardening for unsafe Git options.pyasn10.6.3 → 0.6.4: Fixes multiple CVEs in OID/tag decoding and Real float conversion.pypdf6.13.3 → 6.14.2: Security fixes for inline image parsing and general robustness.Migration
mcpWebSocket transport or experimental tasks, plan to migrate; tests may need to ignore related DeprecationWarnings.Written for commit 8f44e72. Summary will update on new commits.