Skip to content

Bump the testing group in /scripts with 2 updates - #649

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/scripts/testing-6c952b403e
Closed

Bump the testing group in /scripts with 2 updates#649
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/scripts/testing-6c952b403e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the testing group in /scripts with 2 updates: certifi and gitpython.

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates gitpython from 3.1.54 to 3.1.56

Release notes

Sourced from gitpython's releases.

3.1.56 - SECURITY

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

3.1.55 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

Commits
  • e3221f1 prepare next release
  • d3e9438 Merge pull request #2184 from gitpython-developers/fix-output-arg
  • 38553b6 fix: reject unsafe output options in Commit.count
  • be5031d Merge pull request #2183 from hugovk/main
  • 8a92182 Stop testing experimental 3.13t
  • 7d5370d Add support for Python 3.15
  • 904aa71 Declare support for Python 3.13-3.14
  • 681c82c prepare release
  • e227e01 Merge pull request #2181 from gitpython-developers/fix-env-var-exfiltration
  • 8634174 fix: prevent environment expansion in remote URLs
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the testing group in /scripts with 2 updates: [certifi](https://github.com/certifi/python-certifi) and [gitpython](https://github.com/gitpython-developers/GitPython).


Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `gitpython` from 3.1.54 to 3.1.56
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.54...3.1.56)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing
- dependency-name: gitpython
  dependency-version: 3.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

Thanks for your pull request!

A maintainer will review this pull request and trigger functional testing by adding the ok-to-test label.

This comment was auto-generated by GitHub Actions.

@komish komish added the ok-to-test Used after code review to run E2E/integration tests. label Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/scripts/testing-6c952b403e branch August 4, 2026 21:01
@github-actions github-actions Bot removed the ok-to-test Used after code review to run E2E/integration tests. label Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant