Conversation
Bumps [flask-marshmallow](https://github.com/marshmallow-code/flask-marshmallow) from 1.3.0 to 1.5.0. - [Release notes](https://github.com/marshmallow-code/flask-marshmallow/releases) - [Changelog](https://github.com/marshmallow-code/flask-marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/flask-marshmallow@1.3.0...1.5.0) --- updated-dependencies: - dependency-name: flask-marshmallow dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [build](https://github.com/pypa/build) from 1.5.0 to 1.6.1. - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.5.0...1.6.1) --- updated-dependencies: - dependency-name: build dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [redis](https://github.com/redis/redis-py) from 8.0.1 to 8.1.0. - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v8.0.1...v8.1.0) --- updated-dependencies: - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…llow-1.5.0 chore(deps): bump flask-marshmallow from 1.3.0 to 1.5.0
chore(deps-dev): bump build from 1.5.0 to 1.6.1
chore(deps): bump redis from 8.0.1 to 8.1.0
Bumps [attrs](https://github.com/python-attrs/attrs) from 25.3.0 to 26.1.0. - [Release notes](https://github.com/python-attrs/attrs/releases) - [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md) - [Commits](python-attrs/attrs@25.3.0...26.1.0) --- updated-dependencies: - dependency-name: attrs dependency-version: 26.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): bump attrs from 25.3.0 to 26.1.0
Fixes upstream bug in UTF-8 validation
Update FIVE_SAFES_PROFILE_VERSION to 0.8.0
use latest image for example compose file
Bumps [zipp](https://github.com/jaraco/zipp) from 3.23.0 to 4.1.0. - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.23.0...v4.1.0) --- updated-dependencies: - dependency-name: zipp dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.8.3 to 2026.7.22. - [Commits](certifi/python-certifi@2025.08.03...2026.07.22) --- updated-dependencies: - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [botocore](https://github.com/boto/botocore) from 1.43.29 to 1.43.97. - [Commits](boto/botocore@1.43.29...1.43.97) --- updated-dependencies: - dependency-name: botocore dependency-version: 1.43.97 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.7.0...2.8.0) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): bump zipp from 3.23.0 to 4.1.0
…7.22 chore(deps): bump certifi from 2025.8.3 to 2026.7.22
chore(deps): bump botocore from 1.43.29 to 1.43.97
chore(deps): bump urllib3 from 2.7.0 to 2.8.0
…rate-validation-service group all dependabot updates into one pr
Bumps the weekly-batch group with 43 updates: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.43.29` | `1.43.97` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [apiflask](https://github.com/apiflask/apiflask) | `3.1.0` | `3.1.2` | | [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` | | [apispec](https://github.com/marshmallow-code/apispec) | `6.8.2` | `6.10.0` | | [billiard](https://github.com/celery/billiard) | `4.2.4` | `4.3.0` | | [cattrs](https://github.com/python-attrs/cattrs) | `25.1.1` | `26.2.0` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.5.1` | | [click](https://github.com/pallets/click) | `8.2.1` | `8.5.0` | | [click-repl](https://github.com/click-contrib/click-repl) | `0.3.0` | `0.4.0` | | [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` | | [idna](https://github.com/kjd/idna) | `3.15` | `3.20` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.0` | `9.0.1` | | [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` | | [marshmallow](https://github.com/marshmallow-code/marshmallow) | `4.1.2` | `4.3.1` | | [owlrl](https://github.com/RDFLib/OWL-RL) | `7.1.4` | `7.6.2` | | [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.8` | `4.11.10` | | [prettytable](https://github.com/prettytable/prettytable) | `3.16.0` | `3.18.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.4` | `2.13.5` | | [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.49.0` | | [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` | | [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.3` | `3.3.2` | | [pyshacl](https://github.com/RDFLib/pySHACL) | `0.30.1` | `0.40.1` | | [rdflib](https://github.com/RDFLib/rdflib) | `7.1.4` | `7.6.0` | | [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` | | [rich-click](https://github.com/ewels/rich-click) | `1.8.9` | `1.9.9` | | [s3transfer](https://github.com/boto/s3transfer) | `0.18.0` | `0.19.2` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.16.0` | | [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` | | [tzdata](https://github.com/python/tzdata) | `2025.2` | `2026.4` | | [tzlocal](https://github.com/regebro/tzlocal) | `5.3.1` | `5.4.4` | | [url-normalize](https://github.com/niksite/url-normalize) | `2.2.1` | `3.0.0` | | [wcwidth](https://github.com/jquast/wcwidth) | `0.2.13` | `0.8.4` | | [webargs](https://github.com/marshmallow-code/webargs) | `8.7.0` | `8.7.1` | | [cffi](https://github.com/python-cffi/cffi) | `2.1.0` | `2.1.1` | | [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` | | [moto](https://github.com/getmoto/moto) | `5.2.2` | `5.2.3` | | [pyproject-hooks](https://github.com/pypa/pyproject-hooks) | `1.2.0` | `1.3.3` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.0` | `9.1.1` | | [responses](https://github.com/getsentry/responses) | `0.26.2` | `0.26.3` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.16.8` | | [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` | Updates `boto3` from 1.43.29 to 1.43.97 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.29...1.43.97) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) Updates `apiflask` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/apiflask/apiflask/releases) - [Changelog](https://github.com/apiflask/apiflask/blob/main/docs/changelog.md) - [Commits](apiflask/apiflask@3.1.0...3.1.2) Updates `annotated-types` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/annotated-types/annotated-types/releases) - [Commits](annotated-types/annotated-types@v0.7.0...v0.8.0) Updates `apispec` from 6.8.2 to 6.10.0 - [Changelog](https://github.com/marshmallow-code/apispec/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/apispec@6.8.2...6.10.0) Updates `billiard` from 4.2.4 to 4.3.0 - [Release notes](https://github.com/celery/billiard/releases) - [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt) - [Commits](celery/billiard@v4.2.4...v4.3.0) Updates `cattrs` from 25.1.1 to 26.2.0 - [Release notes](https://github.com/python-attrs/cattrs/releases) - [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md) - [Commits](python-attrs/cattrs@v25.1.1...v26.2.0) Updates `charset-normalizer` from 3.4.2 to 3.5.1 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.2...3.5.1) Updates `click` from 8.2.1 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.2.1...8.5.0) Updates `click-repl` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/click-contrib/click-repl/releases) - [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst) - [Commits](click-contrib/click-repl@0.3.0...0.4.0) Updates `enum-tools` from 0.12.0 to 0.13.0 - [Release notes](https://github.com/domdfcoding/enum_tools/releases) - [Commits](domdfcoding/enum_tools@v0.12.0...v0.13.0) Updates `idna` from 3.15 to 3.20 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](kjd/idna@v3.15...v3.20) Updates `importlib-metadata` from 9.0.0 to 9.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v9.0.0...v9.0.1) Updates `markdown-it-py` from 3.0.0 to 4.2.0 - [Release notes](https://github.com/executablebooks/markdown-it-py/releases) - [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md) - [Commits](executablebooks/markdown-it-py@v3.0.0...v4.2.0) Updates `marshmallow` from 4.1.2 to 4.3.1 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@4.1.2...4.3.1) Updates `owlrl` from 7.1.4 to 7.6.2 - [Release notes](https://github.com/RDFLib/OWL-RL/releases) - [Changelog](https://github.com/RDFLib/OWL-RL/blob/master/CHANGELOG.md) - [Commits](RDFLib/OWL-RL@7.1.4...v7.6.2) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `platformdirs` from 4.3.8 to 4.11.10 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.3.8...4.11.10) Updates `prettytable` from 3.16.0 to 3.18.0 - [Release notes](https://github.com/prettytable/prettytable/releases) - [Changelog](https://github.com/prettytable/prettytable/blob/main/CHANGELOG.md) - [Commits](prettytable/prettytable@3.16.0...3.18.0) Updates `pydantic` from 2.12.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.4...v2.13.5) Updates `pydantic-core` from 2.41.5 to 2.49.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/commits) Updates `pygments` from 2.20.0 to 2.21.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.20.0...2.21.0) Updates `pyparsing` from 3.2.3 to 3.3.2 - [Release notes](https://github.com/pyparsing/pyparsing/releases) - [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES) - [Commits](pyparsing/pyparsing@3.2.3...3.3.2) Updates `pyshacl` from 0.30.1 to 0.40.1 - [Release notes](https://github.com/RDFLib/pySHACL/releases) - [Changelog](https://github.com/RDFLib/pySHACL/blob/master/CHANGELOG.md) - [Commits](RDFLib/pySHACL@v0.30.1...v0.40.1) Updates `rdflib` from 7.1.4 to 7.6.0 - [Release notes](https://github.com/RDFLib/rdflib/releases) - [Changelog](https://github.com/RDFLib/rdflib/blob/main/CHANGELOG.md) - [Commits](RDFLib/rdflib@7.1.4...7.6.0) Updates `rich` from 13.9.4 to 15.0.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md) - [Commits](Textualize/rich@v13.9.4...v15.0.0) Updates `rich-click` from 1.8.9 to 1.9.9 - [Release notes](https://github.com/ewels/rich-click/releases) - [Changelog](https://github.com/ewels/rich-click/blob/main/CHANGELOG.md) - [Commits](ewels/rich-click@v1.8.9...v1.9.9) Updates `s3transfer` from 0.18.0 to 0.19.2 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.18.0...0.19.2) Updates `typing-extensions` from 4.14.1 to 4.16.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.1...4.16.0) Updates `typing-inspection` from 0.4.2 to 0.4.4 - [Release notes](https://github.com/pydantic/typing-inspection/releases) - [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md) - [Commits](pydantic/typing-inspection@v0.4.2...v0.4.4) Updates `tzdata` from 2025.2 to 2026.4 - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](python/tzdata@2025.2...2026.4) Updates `tzlocal` from 5.3.1 to 5.4.4 - [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt) - [Commits](regebro/tzlocal@5.3.1...5.4.4) Updates `url-normalize` from 2.2.1 to 3.0.0 - [Release notes](https://github.com/niksite/url-normalize/releases) - [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md) - [Commits](niksite/url-normalize@v2.2.1...v3.0.0) Updates `wcwidth` from 0.2.13 to 0.8.4 - [Release notes](https://github.com/jquast/wcwidth/releases) - [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst) - [Commits](jquast/wcwidth@0.2.13...0.8.4) Updates `webargs` from 8.7.0 to 8.7.1 - [Changelog](https://github.com/marshmallow-code/webargs/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/webargs@8.7.0...8.7.1) Updates `cffi` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.1.0...v2.1.1) Updates `cryptography` from 50.0.0 to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.1) Updates `moto` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.2.2...5.2.3) Updates `pyproject-hooks` from 1.2.0 to 1.3.3 - [Changelog](https://github.com/pypa/pyproject-hooks/blob/main/docs/changelog.rst) - [Commits](pypa/pyproject-hooks@v1.2.0...v1.3.3) Updates `pytest` from 9.1.0 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.0...9.1.1) Updates `responses` from 0.26.2 to 0.26.3 - [Release notes](https://github.com/getsentry/responses/releases) - [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES) - [Commits](getsentry/responses@0.26.2...0.26.3) Updates `ruff` from 0.15.17 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.17...0.16.8) Updates `wheel` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.47.0...0.48.0) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.97 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: apiflask dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: annotated-types dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: apispec dependency-version: 6.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: billiard dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: cattrs dependency-version: 26.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: weekly-batch - dependency-name: charset-normalizer dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: click-repl dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: enum-tools dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: idna dependency-version: '3.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: importlib-metadata dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: markdown-it-py dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: weekly-batch - dependency-name: marshmallow dependency-version: 4.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: owlrl dependency-version: 7.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: platformdirs dependency-version: 4.11.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: prettytable dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pydantic-core dependency-version: 2.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pygments dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pyparsing dependency-version: 3.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pyshacl dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: rdflib dependency-version: 7.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: weekly-batch - dependency-name: rich-click dependency-version: 1.9.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: s3transfer dependency-version: 0.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: typing-extensions dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: typing-inspection dependency-version: 0.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: tzdata dependency-version: '2026.4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: weekly-batch - dependency-name: tzlocal dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: url-normalize dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: weekly-batch - dependency-name: wcwidth dependency-version: 0.8.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: webargs dependency-version: 8.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: cffi dependency-version: 2.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: moto dependency-version: 5.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: pyproject-hooks dependency-version: 1.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: responses dependency-version: 0.26.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-batch - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: weekly-batch - dependency-name: wheel dependency-version: 0.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: weekly-batch ... Signed-off-by: dependabot[bot] <support@github.com>
Changes: pydantic-core == 2.46.5 not 2.49.0 (to support pydantic package) rich == 13.9.4 not 15.0.0 enum-tools == 0.12.0 not 0.13.0 async-timeout == 5.0.1 new for redis
…27d97fb880 chore(deps): bump the weekly-batch group with 43 updates
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
Unresolved moderate issues affect reproducible images, dependency regeneration, and advertised RO-Crate 1.3 support.
Get a fresh assessment by requesting another Copilot review.
Review effort: Lite
Findings: 2
Open (2)
What changed in this PR
Updates dependency pins and CI/Docker configuration for newer validator tooling and profile support.
Changes:
- Refreshes runtime and development dependencies.
- Updates CI tooling, Five Safes profile configuration, and Dependabot grouping.
- Changes Compose service images to
latest.
| File | Reviewed changes and findings |
|---|---|
requirements.txt |
Runtime dependency refresh. Moderate (2 votes): --no-index prevents clean dependency regeneration without an offline source. |
requirements-dev.txt |
Development dependency refresh. Moderate (2 votes): --no-index prevents clean dependency regeneration without an offline source. |
pyproject.toml |
Direct dependency updates. Moderate (3 votes): roc-validator==0.11.4 does not provide RO-Crate 1.3 support. |
docker-compose.yml |
Switches service images to latest. Moderate (1 vote each): mutable tags make Flask and worker deployments non-reproducible. |
.github/workflows/test_docker.yml |
Updates integration-test dependencies. |
.github/workflows/lint.yml |
Updates Ruff. |
.github/workflows/build-with-profiles.yml |
Updates the Five Safes profile. Nit (1 vote): documentation still references the older profile version. |
.github/dependabot.yml |
Groups dependency updates. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| "redis==8.1.0", | ||
| "python-dotenv==1.2.3", | ||
| "apiflask==3.1.2", | ||
| "roc-validator==0.11.4", |
| # by the following command: | ||
| # | ||
| # pip-compile --extra=dev --output-file=requirements-dev.txt pyproject.toml | ||
| # pip-compile --extra=dev --no-index --output-file=requirements-dev.txt |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.