Skip to content

build(deps): bump the github-app-minor-patch group in /integrations/github-app with 9 updates - #79

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/integrations/github-app/github-app-minor-patch-dfb3468b8f
Closed

build(deps): bump the github-app-minor-patch group in /integrations/github-app with 9 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/integrations/github-app/github-app-minor-patch-dfb3468b8f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-app-minor-patch group in /integrations/github-app with 9 updates:

Package From To
synapse-channel 0.99.18 0.99.21
build 1.5.1 1.6.0
ruff 0.16.4 0.16.5
coverage 7.15.4 7.16.0
cryptography 50.0.0 50.0.1
filelock 3.32.3 3.32.4
msgpack 1.2.1 1.2.2
nh3 0.3.6 0.3.7
platformdirs 4.11.3 4.11.5

Updates synapse-channel from 0.99.18 to 0.99.21

Release notes

Sourced from synapse-channel's releases.

v0.99.21

Added

  • Add synapse adapters mutation-status, a read-only posture report that keeps provider runtime detection, inspected hook configuration, staged Git-gate readiness, and verified enforcement as separate facts. Its text and JSON output enumerate covered write tools and the remaining custom-tool, MCP, direct-filesystem, crash/timeout, incomplete-interception, and external-effect boundaries without invoking providers or changing configuration.

Changed

  • Document the existing real Ollama CLI and REST participant routes, including the boundary between ollama launch codex model routing and Codex-native mutation hooks. Align Codex mutation-posture residuals with current hook coverage: unified exec_command matches Bash, while later write_stdin calls do not repeat PreToolUse and tools outside the recipe matcher remain unmediated.

Fixed

  • Treat user/terminal-* as a fallback only when no plausible repository project is available, and make agent-tmux inspect the complete visible provider pane before submitting a staged wake. Current Codex composers whose prompt appears above footer rows now receive the matching Enter instead of leaving the routing text pending in the CLI.
  • Make the hosted coverage gate compare at two-decimal precision instead of silently accepting a rounded value below 98%, and install the hash-locked gRPC capability so the existing real loopback, TLS, and mTLS A2A journeys run in CI rather than capability-skip. Hash-lock the Linux SQLCipher capability in the same dev cohort instead of installing it separately without artifact hashes, and build the exact hash-locked TPM 2.0 sdist without an isolated unpinned build environment. Python 3.12 owns the canonical coverage measurement while every supported Python still runs the complete real suite.

Artifact checksums (SHA-256)

d82c68b1e307d3f0f62fbe52022de9731fb5fff55f48cdd065359a2e7717df93  synapse_channel-0.99.21-py3-none-any.whl
de7ddfe85afc40be86e6428267ed4b22d77971169986c9ff895e5e1df7e4078a  synapse_channel-0.99.21.tar.gz
b7a6fdc8bc17d9d0259c061d713b333935bcb22ac1bc02a72d78b0dd2e1a124d  synapse-channel-v0.99.21-sbom.cdx.json

v0.99.20

Fixed

  • Make queued agent-tmux delivery at-most-once after a successful pane paste.

... (truncated)

Changelog

Sourced from synapse-channel's changelog.

[0.99.21] - 2026-08-27

Added

  • Add synapse adapters mutation-status, a read-only posture report that keeps provider runtime detection, inspected hook configuration, staged Git-gate readiness, and verified enforcement as separate facts. Its text and JSON output enumerate covered write tools and the remaining custom-tool, MCP, direct-filesystem, crash/timeout, incomplete-interception, and external-effect boundaries without invoking providers or changing configuration.

Changed

  • Document the existing real Ollama CLI and REST participant routes, including the boundary between ollama launch codex model routing and Codex-native mutation hooks. Align Codex mutation-posture residuals with current hook coverage: unified exec_command matches Bash, while later write_stdin calls do not repeat PreToolUse and tools outside the recipe matcher remain unmediated.

Fixed

  • Treat user/terminal-* as a fallback only when no plausible repository project is available, and make agent-tmux inspect the complete visible provider pane before submitting a staged wake. Current Codex composers whose prompt appears above footer rows now receive the matching Enter instead of leaving the routing text pending in the CLI.
  • Make the hosted coverage gate compare at two-decimal precision instead of silently accepting a rounded value below 98%, and install the hash-locked gRPC capability so the existing real loopback, TLS, and mTLS A2A journeys run in CI rather than capability-skip. Hash-lock the Linux SQLCipher capability in the same dev cohort instead of installing it separately without artifact hashes, and build the exact hash-locked TPM 2.0 sdist without an isolated unpinned build environment. Python 3.12 owns the canonical coverage measurement while every supported Python still runs the complete real suite.

[0.99.20] - 2026-08-26

Fixed

  • Make queued agent-tmux delivery at-most-once after a successful pane paste. The private registry now distinguishes an already staged wake prompt from an unpasted pending wake, so a modal second safety probe can delay Enter without concatenating another routing prompt into the provider composer on each retry.

[0.99.19] - 2026-08-26

Changed

  • Let embedded hubs bind port 0 atomically and report the kernel-assigned

... (truncated)

Commits
  • 623bfec test: cover mutation posture failure surfaces
  • c0c0cd5 ci: hash-lock TPM build capability
  • 0bdc942 ci: hash-lock SQLCipher capability
  • 3fd17ef build: align documented dev capability
  • f491e7e ci: enforce exact coverage gate
  • 20915ee chore(release): prepare v0.99.21
  • 68b1c06 test: close release coverage governance
  • 17e2644 fix: submit project-bound terminal wakes
  • eee0071 docs: align Ollama and Codex hook guidance
  • 0d8b419 feat: report mutation governance posture
  • Additional commits viewable in compare view

Updates build from 1.5.1 to 1.6.0

Release notes

Sourced from build's releases.

1.6.0

What's Changed

New Contributors

Full Changelog: pypa/build@1.5.1...1.6.0

Changelog

Sourced from build's changelog.

#################### 1.6.0 (2026-08-27) ####################

Features

  • Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
  • The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
  • The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
  • Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
  • Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
    • by :user:gaborbernat (:issue:655)
  • Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
  • On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

Bugfixes

  • Drain verbose subprocess output inline instead of using a ThreadPoolExecutor, which silently swallowed logging errors - by :user:henryiii (:issue:1098)
  • Reject a file passed as --env-dir with a clear error instead of a raw FileExistsError - by :user:henryiii (:issue:1100)
  • Emit CLI warnings to stderr instead of stdout, so they no longer corrupt --metadata JSON output on stdout - by :user:ymyzk (:issue:1111)
  • Fix the Windows symlink support probe always returning False due to a stale object interpolated into the destination path - by :user:henryiii (:issue:1118)
  • Fix metadata_path's build-backend fallback returning a nonexistent dist-info path for wheels with a build tag - by :user:henryiii (:issue:1119)
  • Write pip/uv requirements and constraints files with \n instead of os.linesep, avoiding doubled \r\r\n line endings on Windows - by :user:henryiii (:issue:1120)
  • Batch of small robustness fixes: correct macOS release parsing for the minimum pip version, avoid sharing the mutable default build-system table between builders, keep the original error when isolated-environment setup fails early, and raise BuildException for an invalid wheel - by :user:henryiii (:issue:1121)
  • Decide color support independently for stdout and stderr instead of only checking stdout.isatty(), so redirecting one stream no longer disables or leaks ANSI colors on the other - by :user:henryiii (:issue:1123)
  • Pass --dependency-constraints-txt files through to the installer unmodified instead of re-parsing them into a deduplicated set of lines, fixing a case where a hashed requirement (e.g. from pip-compile --generate-hashes) could have its --hash continuation line separated from its requirement line and silently dropped, depending on the interpreter's hash seed - by :user:manfred-kaiser (:issue:1140)

... (truncated)

Commits
  • 7ac9efe chore: prepare for 1.6.0
  • e57e2bf 👷 ci: use app token for releases (#1169)
  • 66438ab pre-commit: bump repositories (#1167)
  • 4ed9658 build(deps): bump the github-actions group with 3 updates (#1166)
  • c76707f 🔧 chore: batch dependency updates weekly on Tuesday (#1165)
  • b317437 Drop a few PyPy-specific test skips (#1164)
  • 561f331 pre-commit: bump repositories (#1163)
  • 9456281 refactor: drop redundant exc_info parameter from backend exception wrapper ...
  • 3e7a445 Use stdlib importlib.metadata for typing (#1162)
  • 9a2e1e9 tests: download integration sources once per run (#1157)
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Commits

Updates coverage from 7.15.4 to 7.16.0

Release notes

Sourced from coverage's releases.

7.16.0

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.
  • The Coverage.switch_context() method now returns the previous context.
  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.
  • Fixes to validation of options and configuration settings:
    • Negative precision settings now always cause useful error messages (pull 2261).
    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).
    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).
    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).
  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️  PyPI page: coverage 7.16.0. :arrow_right:  To install: python3 -m pip install coverage==7.16.0

Changelog

Sourced from coverage's changelog.

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

  • The :meth:.Coverage.switch_context method now returns the previous context.

  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268_.

  • Fixes to validation of options and configuration settings:

    • Negative precision settings now always cause useful error messages (pull 2261_).

    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...: user-defined function raised exception" error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262_).

    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren't strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263_).

    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can't reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with "Can't combine statement coverage data with branch data". Each named concurrency library is now properly considered (pull 2270_).

  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: coveragepy/coveragepy#2261 .. _pull 2262: coveragepy/coveragepy#2262 .. _pull 2263: coveragepy/coveragepy#2263 .. _pull 2265: coveragepy/coveragepy#2265 .. _issue 2266: coveragepy/coveragepy#2266 .. _pull 2268: coveragepy/coveragepy#2268

... (truncated)

Commits
  • 3e9fc16 docs: prep for 7.16.0
  • 38be8d1 build: control check-manifest explicitly
  • 8eb1266 docs(build): no longer commit sample_html
  • 1a8b3fa docs: remove sample_html
  • aeaa79b docs: linklint is now sphinx-linklint
  • d5eaf3f test: a branchless way to re-add extensions
  • 57e52fd docs: adjust CHANGES for #2270
  • b9d304d fix: check for multiprocessing in a --concurrency list (#2270)
  • a6ef928 chore: make upgrade
  • 070461f chore: bump the action-dependencies group with 4 updates (#2271)
  • Additional commits viewable in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

Updates filelock from 3.32.3 to 3.32.4

Release notes

Sourced from filelock's releases.

3.32.4

What's Changed

Full Changelog: tox-dev/filelock@3.32.3...3.32.4

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.5 (2026-08-31)

  • SoftFileLease.token and AsyncSoftFileLease.token now read None after a failed acquisition, so a contender turned away by a live holder no longer reports a token for a claim it never published. :pr:721
  • Document that mode has no setter: unlike poll_interval, timeout, blocking and lifetime, it is fixed at construction and lock.mode = ... raises AttributeError. :pr:716

3.32.4 (2026-08-23)

  • StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705
  • WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705
  • Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

3.32.3 (2026-08-13)

  • The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

3.32.2 (2026-07-29)

  • A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:691

3.32.1 (2026-07-26)

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

... (truncated)

Commits
  • cb493d6 Release 3.32.4
  • fe07a11 escape the hostname every marker publishes (#709)
  • 232732f 🔧 chore: batch dependency updates weekly on Tuesday (#713)
  • 2966eb5 🧪 test(fork): fork once the event loop has closed (#714)
  • 61511eb build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#712)
  • f12a52f build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#711)
  • 54c7b6c [pre-commit.ci] pre-commit autoupdate (#710)
  • 49f8035 🧪 test: cover a reclaimed private record for real (#706)
  • bb16d39 🧪 test: deflake six scheduled-run failures (#704)
  • 13b82a6 🐛 fix: retry transient denials on open and claim read (#705)
  • See full diff in compare view

Updates msgpack from 1.2.1 to 1.2.2

Release notes

Sourced from msgpack's releases.

v1.2.2

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.2.1...v1.2.2

Changelog

Sourced from msgpack's changelog.

1.2.2

Release Date: 2026-08-27

  • Fix the read_size documentation. #700
  • Fix silent truncation when unpacking an out-of-range timestamp with timestamp=3. #701
  • Prevent reentrant calls to Unpacker.feed() while unpacking. #704
  • Improve error handling and reporting in unpacking functions. #707
  • Fix Timestamp.from_datetime() precision for far-future datetimes. #710
  • Fix typos in the documentation. #712
  • Validate the nanoseconds range when unpacking timestamps in the C extension. #716
  • Fix a use-after-free in the unpackb() ExtraData path for non-contiguous input. #722
  • Prevent a buffer overflow when converting Packer's buf_size. #726
  • Translate RecursionError to StackError in the fallback Unpacker.skip(). #727
  • Raise OverflowError when use_single_float=True cannot represent a value. #728
Commits
  • 7381b31 release
  • ee1bd3c release v1.2.2 (#730)
  • 57d28a2 Raise OverflowError when use_single_float cannot represent a value (#728)
  • d374a17 Avoid parallel execution of the recursion-limit nesting test on free-threaded...
  • e94e1dc Validate nanoseconds range when unpacking timestamps in the C extension (#716)
  • 2e4be09 fix: translate RecursionError to StackError in fallback Unpacker.skip() (#727)
  • 9f9bdae Convert Packer's buf_size once (#726)
  • 809bfcd remove unused variable
  • 186d4db Bump pypa/cibuildwheel from 4.1.1 to 4.2.0(#724)
  • ea6b84f Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencie...
  • Additional commits viewable in compare view

Updates nh3 from 0.3.6 to 0.3.7

Release notes

Sourced from nh3's releases.

v0.3.7

What's Changed

New Contributors

Full Changelog: messense/nh3@v0.3.6...v0.3.7

Commits
  • 74f36b8 Bump pyo3 from 0.29.0 to 0.29.2 (#140)
  • 5cb1a16 Update ammonia and bump version to 0.3.7
  • 5bc937a Bump ammonia from 4.1.3 to 4.1.4 (#139)
  • 5816c84 Bump actions/setup-python from 6 to 7 in the github-actions group (#138)
  • 7718812 Bump ammonia from 4.1.2 to 4.1.3 (#137)
  • 567c411 Validate tag_attribute_values conflict with attributes (#135)
  • c23021c Don’t depend on deprecated pyo3/generate-import-lib feature (#136)
  • 0343d0b Bump actions/checkout from 6 to 7 in the github-actions group (#132)
  • 0573fe4 Expose ammonia's id_prefix option via id_prefix kwarg (#134)
  • See full diff in compare view

Updates platformdirs from 4.11.3 to 4.11.5

Release notes

Sourced from platformdirs's releases.

4.11.5

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.11.4...4.11.5

4.11.4

What's Changed

Full Changelog: tox-dev/platformdirs@4.11.3...4.11.4

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.11.5 (2026-08-27)

  • Give :func:~platformdirs.user_preference_dir and :func:~platformdirs.user_preference_path the same arguments as :func:~platformdirs.user_config_dir. Added without arguments in :pr:491, they could only return the unscoped base directory even though the property they wrap appends the app name and version. :pr:531
  • Make :func:~platformdirs.site_applications_path return the first entry when multipath=True, matching :func:~platformdirs.site_data_path. On Unix and macOS it passed the whole $XDG_DATA_DIRS list to :class:~pathlib.Path, giving one unusable path such as /first/applications:/second/applications. :pr:532
  • Give :func:~platformdirs.user_applications_dir, :func:~platformdirs.user_applications_path, :func:~platformdirs.site_applications_dir and :func:~platformdirs.site_applications_path the app arguments. Android scopes both applications directories to the app, so without them the functions could only return the unscoped base directory there. On the two site functions they are keyword-only, keeping multipath first posi...

    Description has been truncated

@dependabot
build(deps): bump the github-app-minor-patch group
01fdcc3 
Bumps the github-app-minor-patch group in /integrations/github-app with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [synapse-channel](https://github.com/anulum/synapse-channel) | `0.99.18` | `0.99.21` |
| [build](https://github.com/pypa/build) | `1.5.1` | `1.6.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.5` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.4` | `7.16.0` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.32.3` | `3.32.4` |
| [msgpack](https://github.com/msgpack/msgpack-python) | `1.2.1` | `1.2.2` |
| [nh3](https://github.com/messense/nh3) | `0.3.6` | `0.3.7` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.3` | `4.11.5` |


Updates `synapse-channel` from 0.99.18 to 0.99.21
- [Release notes](https://github.com/anulum/synapse-channel/releases)
- [Changelog](https://github.com/anulum/synapse-channel/blob/main/CHANGELOG.md)
- [Commits](v0.99.18...v0.99.21)

Updates `build` from 1.5.1 to 1.6.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.1...1.6.0)

Updates `ruff` from 0.16.4 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.5)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `filelock` from 3.32.3 to 3.32.4
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.32.3...3.32.4)

Updates `msgpack` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.2.1...v1.2.2)

Updates `nh3` from 0.3.6 to 0.3.7
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.3.6...v0.3.7)

Updates `platformdirs` from 4.11.3 to 4.11.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.3...4.11.5)

---
updated-dependencies:
- dependency-name: synapse-channel
  dependency-version: 0.99.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: build
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-app-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-app-minor-patch
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: filelock
  dependency-version: 3.32.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: msgpack
  dependency-version: 1.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: nh3
  dependency-version: 0.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
- dependency-name: platformdirs
  dependency-version: 4.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-app-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-app. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added python Pull requests that update python code dependencies Pull requests that update a dependency file labels Aug 31, 2026
@anulum anulum mentioned this pull request Sep 4, 2026
Merged
@anulum

anulum commented Sep 4, 2026

Copy link
Copy Markdown
Owner

Superseded by merged PR #84, which includes this compatible update together with the required security, lockfile, OpenCode acceptance, and workflow-contract fixes. The consolidated head passed all PR checks.

@anulum anulum closed this Sep 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/pip/integrations/github-app/github-app-minor-patch-dfb3468b8f branch September 4, 2026 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@anulum