Skip to content

build(jupyter): bump the uv-deps group across 1 directory with 9 updates - #176

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/cogstack-jupyter-hub/uv-deps-2a00c1effa
Open

build(jupyter): bump the uv-deps group across 1 directory with 9 updates#176
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/cogstack-jupyter-hub/uv-deps-2a00c1effa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-deps group with 9 updates in the /apps/cogstack-jupyter-hub directory:

Package From To
cogstack-es[os] 0.2.0 0.3.0
virtualenv 21.13.0 21.14.11
py7zr 1.1.3 1.1.4
isort 9.0.1 9.0.2
simplejson 4.1.2 4.2.0
pymssql 2.4.2 2.4.4
jsonpickle 4.1.2 4.1.4
neo4j 6.3.1 6.4.1
ruff 0.16.9 0.17.1

Updates cogstack-es[os] from 0.2.0 to 0.3.0

Release notes

Sourced from cogstack-es[os]'s releases.

MedCAT den v0.3.0

Minor release.

Most notably difference is the addition of additional API to the den.

What's Changed

Full Changelog: CogStack/cogstack-nlp@medcat-den/v0.2.1...medcat-den/v0.3.0

cogstack-es/v0.3.0

Minor release to allow better data streaming.

What's Changed

Full Changelog: CogStack/cogstack-nlp@cogstack-es/v0.2.0...cogstack-es/v0.3.0

Commits
  • 09cb9ebCogStack/MedCAT2#46
  • 9e83d31CogStack/MedCAT2#62
  • 3b71d2cCogStack/MedCAT2#64
  • ecfc507 Fix test regarding installed dependencies - use lower case dep names (CogStac...
  • cf5cfb1CogStack/MedCAT2#60
  • d3d8a5eCogStack/MedCAT2#59
  • 31cfc78CogStack/MedCAT2#58
  • 62ad0e1CogStack/MedCAT2#57
  • 5967e99CogStack/MedCAT2#56
  • 9f28e8d Avoid resetting subnames upon model load - it is unnecessary (CogStack/MedCAT...
  • Additional commits viewable in compare view

Updates virtualenv from 21.13.0 to 21.14.11

Release notes

Sourced from virtualenv's releases.

21.14.11

Bugfixes - 21.14.11

  • Search all directories supplied by repeated --extra-search-dir options instead of keeping only the last group. (#3440)
  • On Windows, the app data is now migrated into the nested cache directory instead of the migration failing with a warning on every run. (#3441)

PyPI release

Full Changelog: pypa/virtualenv@21.14.10...21.14.11

21.14.10

Bugfixes - 21.14.10

  • Always copy seed packages when app-data is temporary, including when symlink seeding is enabled through an environment variable or configuration file. Seeded packages remain available after temporary cache cleanup. (#3437)

PyPI release

Full Changelog: pypa/virtualenv@21.14.9...21.14.10

21.14.9

Bugfixes - 21.14.9

  • Parse VIRTUALENV_PERIODIC_UPDATE_INSECURE as a boolean, so 0, false, no and off keep certificate verification enabled. (#3398)

  • Reject destinations whose resolved path contains the platform's PATH separator, including separators inherited from the working directory or a directory symlink. (#3399)

  • Preserve an existing pyvenv.cfg when a prompt or configuration value cannot be encoded as UTF-8, instead of leaving the file empty after a failed environment creation. The file now ends its lines with LF on every platform.

    Debug logs show each configuration line as a Python string literal, so control characters are visible. (#3400)

  • Skip writing a .venv redirect when the environment name contains a line boundary. The environment is still created, and any existing redirect remains unchanged. (#3401)

  • Preserve non-ASCII values in activate_this.py when applications read the script with a legacy text encoding before executing it. (#3402)

  • Reject malformed seed versions and requirements ending in archive suffixes before starting pip, with an error identifying the invalid value instead of a misleading download or local-file error. (#3403)

  • Allow a literal percent sign as a csh prompt and preserve carets in tcsh prompt display instead of interpreting them as control-character notation.

    Separate csh history and prompt escapes from preceding non-ASCII text in legacy locales. (#3404)

  • Report an error when an existing pyvenv.cfg is not a regular file, instead of trying to read or write directories, pipes, or devices as configuration files. (#3405)

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.14.11

  • Search all directories supplied by repeated --extra-search-dir options instead of keeping only the last group. (:issue:3440)
  • On Windows, the app data is now migrated into the nested cache directory instead of the migration failing with a warning on every run. (:issue:3441)

v21.14.10 (2026-10-17)

Bugfixes - 21.14.10

  • Always copy seed packages when app-data is temporary, including when symlink seeding is enabled through an environment variable or configuration file. Seeded packages remain available after temporary cache cleanup. (:issue:3437)

v21.14.9 (2026-10-17)

Bugfixes - 21.14.9

  • Parse VIRTUALENV_PERIODIC_UPDATE_INSECURE as a boolean, so 0, false, no and off keep certificate verification enabled. (:issue:3398)

  • Reject destinations whose resolved path contains the platform's PATH separator, including separators inherited from the working directory or a directory symlink. (:issue:3399)

  • Preserve an existing pyvenv.cfg when a prompt or configuration value cannot be encoded as UTF-8, instead of leaving the file empty after a failed environment creation. The file now ends its lines with LF on every platform.

    Debug logs show each configuration line as a Python string literal, so control characters are visible. (:issue:3400)

  • Skip writing a .venv redirect when the environment name contains a line boundary. The environment is still created, and any existing redirect remains unchanged. (:issue:3401)

  • Preserve non-ASCII values in activate_this.py when applications read the script with a legacy text encoding before executing it. (:issue:3402)

  • Reject malformed seed versions and requirements ending in archive suffixes before starting pip, with an error identifying the invalid value instead of a misleading download or local-file error. (:issue:3403)

  • Allow a literal percent sign as a csh prompt and preserve carets in tcsh prompt display instead of interpreting them as control-character notation.

    Separate csh history and prompt escapes from preceding non-ASCII text in legacy locales. (:issue:3404)

  • Report an error when an existing pyvenv.cfg is not a regular file, instead of trying to read or write directories, pipes, or devices as configuration files. (:issue:3405)

  • Preserve percent-containing paths during batch reactivation and show dollar signs literally in command prompts. Skip batch scripts for paths containing line boundaries, and remove stale batch scripts for unsupported paths even when only other activators are selected. (:issue:3406)

... (truncated)

Commits

Updates py7zr from 1.1.3 to 1.1.4

Release notes

Sourced from py7zr's releases.

Fix multiple Vulnerbilities and bugs

Changelog

Sourced from py7zr's changelog.

v1.1.4_

Security

  • Fix arbitrary file write above the extraction directory via a symlink chain (incomplete fix of CVE-2026-23879, GHSA-jwx8-hv8g-gjjq).
    • canonical_path() cancelled .. lexically before any symlink was resolved, so link/.. was treated as the directory holding link instead of the parent of its target. A chain of symlink members extracted from the same archive could therefore redirect a later write an archive-chosen number of levels above the extraction directory, while the member name still reduced to something apparently inside it.
    • Containment is now decided on the real path: symlink components are followed first and .. is normalized only afterwards. This also covers symlink targets, which may legitimately contain .. and so cannot be rejected by name.
    • Archive member names containing a .. component are now rejected outright.
  • Fix memory exhaustion when opening a crafted archive header (GHSA-6pr6-cqpq-x889).
  • Fix extraction hang on a crafted COPY stream (GHSA-v999-q5cj-95jg).

Users are encouraged to upgrade. Details will be published in the corresponding security advisories.

Fixed

  • Raise PasswordRequired when an archive is opened in write or append mode with a crypto filter (e.g. FILTER_CRYPTO_AES256_SHA256) but no password, instead of failing later with an AttributeError. The check also covers direct use of SevenZipCompressor. (#723, #739)
  • Limit concurrent extraction workers for non-solid archives to os.cpu_count(), instead of starting one thread or process per folder. When the limit is reached, the oldest task is joined before a new one starts. (#630, #740)
  • Fix AttributeError in archiveinfo() for archives with no compressed content, such as an empty archive or one containing only empty files or directories. _get_method_names(), _is_solid() and archiveinfo() now handle header.main_streams being None. (#665, #741)
  • Fix intermittent false negatives in the relative-path check on Windows. Path.resolve() may or may not return the extended-length prefix (\\?\), and when only one of the compared paths had it, the relative_to check always failed. The prefix is now stripped before comparison. (#714, #743)
  • Fix io.UnsupportedOperation in extract() and extractall() when a WriterFactory returns a non-seekable handle, such as one from zipfile.ZipFile.open. The unnecessary seek(0) after decompression is removed, and MemIO.close() now rewinds only

... (truncated)

Commits
  • c717d21 Release version 1.1.4 to fix multiple vulnerabilities and bugs
  • c51e4f6 Merge commit from fork
  • f4204fa Merge commit from fork
  • 5c78459 Merge commit from fork
  • 23610d1 fix: raise Bad7zFile when decompression makes no progress
  • f3e4862 fix: enhance path sanitization and symlink resolution to prevent directory tr...
  • e41864c docs: update SECURITY.rst with threat model, hardening measures, and regressi...
  • 8ff8a30 docs: add guidelines for writing and organizing security regression tests
  • 0a3c81e tests: add malformed header tests into test_badheaders.py and enhance coverage
  • 3e37932 feat: add boundary checks for truncated reads in read_byte, read_uint64, ...
  • Additional commits viewable in compare view

Updates isort from 9.0.1 to 9.0.2

Release notes

Sourced from isort's releases.

9.0.2

🪲 Fixes

Other changes

Full Changelog: PyCQA/isort@9.0.1...9.0.2

Commits
  • 9f90561 Core developers revision
  • 4371472 Fix a "security" issue
  • e74b4ba Do some formatting and setting updates
  • 539abb1 Bump the uv group with 15 updates
  • 0482160 Fully type check tests and modernize code
  • bbda474 Bump pypa/cibuildwheel from 4.2.0 to 4.2.1 in the github-actions group
  • 1fd0701 Agent Host changes for agents/dependabot-monthly-updates-uv
  • 6911091 Always split on parsed.line_separator
  • 3808b70 Keep CRLF regression cases beside existing check-mode tests
  • 3202ce8 Preserve CRLF blank lines during float-to-top preprocessing
  • Additional commits viewable in compare view

Updates simplejson from 4.1.2 to 4.2.0

Release notes

Sourced from simplejson's releases.

v4.2.0

What's Changed

New Contributors

Full Changelog: simplejson/simplejson@v4.1.2...v4.2.0

Changelog

Sourced from simplejson's changelog.

Version 4.2.0 released 2026-10-02

  • Start building wheels for Python 3.15 and drop Python 3.8 support via upgrade to cibuildwheel v4.2.0 simplejson/simplejson#385
  • Build and test riscv64 Linux wheels on native RISE runners simplejson/simplejson#389
  • The C scanner now reports the same error message as the pure Python decoder for an invalid first key in an object simplejson/simplejson#388
  • int_as_string_bitcount now supports thresholds of 64 bits and above (including 128-bit integers) in both the C and pure Python encoders; the C encoder previously rejected them simplejson/simplejson#387
  • Circular references introduced through for_json() or _asdict() now raise ValueError("Circular reference detected") instead of recursing without bound simplejson/simplejson#390
  • CI now tests Python 3.15 (including free-threaded 3.15t), PyPy 3.12, CPython 3.14.8 debug builds, and uses current GitHub Actions and cibuildwheel v4.2.1 simplejson/simplejson#386

Version 4.1.2 released 2026-08-26

Version 4.1.1 released 2026-04-24

  • The build_wheels_py27 CI job now also builds Python 2.7 wheels for Windows AMD64 and Windows x86, joining the existing Py2.7 manylinux1 / manylinux2010 x86_64 wheels. This unblocks offline / --no-index installs on Py2.7-on-Windows (the original reporter's case), which previously had no matching binary wheel on PyPI, fell through to the sdist, and failed on the PEP 517 isolated-build step complaining that setuptools>=42 was not in the wheelhouse. simplejson/simplejson#377

Version 4.1.0 released 2026-04-22

  • The C extension now accelerates encoding when indent= is set.

... (truncated)

Commits
  • 0ace7d1 Prep for v4.2.0 - Update CHANGES and build matrix (#386)
  • c3edf28 ci: build and test riscv64 wheels (#389)
  • 41f8017 Check circular references introduced by custom JSON methods (#390)
  • 48e7c3b Support large integer stringification thresholds in both encoders (#387)
  • 50cadb6 Use the first-key error message in the C scanner (#388)
  • fbc057f Start building CPython 3.15 wheels (#385)
  • See full diff in compare view

Updates pymssql from 2.4.2 to 2.4.4

Release notes

Sourced from pymssql's releases.

pymssql 2.0 greenish

Experimental support for greening for gevent, etc.

Changelog

Sourced from pymssql's changelog.

Version 2.4.4 - 2026-10-09 - Mikhail Terekhov

General

  • Fixed unicode encoding problem #854 & #1000·thanks to maprangnaveya

Version 2.4.3 - 2026-10-05 - Mikhail Terekhov

General

  • Render Decimal parameters without scientific notation PR #1019·thanks to aminghadersohi
  • Apply FreeTDS encryption level per connection (closes #924)
Commits
  • 4977d62 Update ChangeLog.rst
  • 7a19871 Install gnu-libconv-dev when building wheels on Github for musllinux to fix e...
  • b16dedd Install glibc-gconv-extra when building wheels on Github to fix encoding issu...
  • a5b2558 Update ChangeLog.rst
  • 296ec49 fix(connection): apply FreeTDS encryption level per connection
  • e89da42 Render Decimal parameters without scientific notation
  • See full diff in compare view

Updates jsonpickle from 4.1.2 to 4.1.4

Changelog

Sourced from jsonpickle's changelog.

v4.1.4

* Fix broken build from source on 4.1.3. ([#638](https://github.com/jsonpickle/jsonpickle/issues/638))

v4.1.3

* Add deprecation warnings for the pending removal of the ``backend``, ``max_iter``, and
  ``v1_decode`` arguments, as well as the new behavior of 5.0.0 in not registering the
  yaml backend by default.
Commits

Updates neo4j from 6.3.1 to 6.4.1

Release notes

Sourced from neo4j's releases.

Neo4j Python Driver 6.4.1

https://github.com/neo4j/neo4j-python-driver/wiki/6.x-changelog#641

Neo4j Python Driver 6.4.0

https://github.com/neo4j/neo4j-python-driver/wiki/6.x-changelog#640

Changelog

Sourced from neo4j's changelog.

Neo4j Driver Change Log (breaking/major changes only)

See also https://github.com/neo4j/neo4j-python-driver/wiki for a full changelog.

NEXT RELEASE

  • No breaking or major changes.

Version 6.4

  • Python 3.15 support added.
  • Deprecate configuring drivers with URIs containing a path (e.g. neo4://example.com/some/path) or fragment (e.g. neo4://example.com#some-fragment).
    This information is currently being ignored anyway. This deprecation will be turned into an exception in a future version.

Version 6.2 - 6.3

  • No breaking or major changes.

Version 6.1

  • Python 3.14 support added.

Version 6.0

  • Python 3.7, 3.8, and 3.9 support has been dropped.
  • Remove deprecated package alias neo4j-driver. Use pip install neo4j instead.
  • Remove setup.py. Please use a recent enough packaging/build tool that supports pyproject.toml
  • Remove deprecated modules:
    • neo4j.conf
    • neo4j.data
    • neo4j.meta
    • neo4j.packstream
    • neo4j.routing
    • neo4j.time.arithmetic
    • neo4j.time.clock_implementation
    • neo4j.time.hydration
    • neo4j.time.metaclasses
    • neo4j.work
    • neo4j.work.query
    • neo4j.work.summary
  • Remove deprecated exports from neo4j:
    • log, Config, PoolConfig, SessionConfig, WorkspaceConfig (internal - no replacement)
    • SummaryNotificationPosition (use SummaryInputPosition instead)
  • api.Version has been removed as it's unused now.
    ServerInfo.protocol_version now is a tuple[int, int] insteadof a api.Version. This should be drop-in replacement is most cases:
    • Version was a sup-type of tuple[int, int]
    • ServerInfo.protocol_version was already documented and typed as tuple[int, int]
    • Version's additional methods were undocumented and shouldn't have been used

... (truncated)

Commits

Updates ruff from 0.16.9 to 0.17.1

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

  • [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

  • Fix dedent with multiple leading comments (#29382)
  • [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
  • [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
  • [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

  • Treat more collections and weakref containers as mutable (#29213)

Documentation

  • [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

Install ruff 0.17.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"

Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

  • [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

  • Fix dedent with multiple leading comments (#29382)
  • [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
  • [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
  • [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

  • Treat more collections and weakref containers as mutable (#29213)

Documentation

  • [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

  • Update the default and latest Python versions for 3.15 (#28792)

    Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15

... (truncated)

Commits
  • 4683270 Bump version to 0.17.1 (#29420)
  • 3514027 [ty] Update typing conformance suite pin (#29417)
  • 8294556 Update referenced PR security-review workflow (#29237)
  • d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
  • 9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
  • 83a3afc Fix dedent with multiple leading comments (#29382)
  • b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
  • d01678e [ty] Clarify object attribute write-contract rationale (#29384)
  • 355b42a [ty] Avoid writable override contracts from object (#29373)
  • e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(jupyter): bump the uv-deps group across 1 directory with 9 updates
4820f61 
Bumps the uv-deps group with 9 updates in the /apps/cogstack-jupyter-hub directory:

| Package | From | To |
| --- | --- | --- |
| [cogstack-es[os]](https://github.com/CogStack/cogstack-nlp) | `0.2.0` | `0.3.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.13.0` | `21.14.11` |
| [py7zr](https://github.com/miurahr/py7zr) | `1.1.3` | `1.1.4` |
| [isort](https://github.com/PyCQA/isort) | `9.0.1` | `9.0.2` |
| [simplejson](https://github.com/simplejson/simplejson) | `4.1.2` | `4.2.0` |
| [pymssql](https://github.com/pymssql/pymssql) | `2.4.2` | `2.4.4` |
| [jsonpickle](https://github.com/jsonpickle/jsonpickle) | `4.1.2` | `4.1.4` |
| [neo4j](https://github.com/neo4j/neo4j-python-driver) | `6.3.1` | `6.4.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.17.1` |



Updates `cogstack-es[os]` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/CogStack/cogstack-nlp/releases)
- [Commits](CogStack/cogstack-nlp@MedCAT2/v0.2.0...MedCAT2/v0.3.0)

Updates `virtualenv` from 21.13.0 to 21.14.11
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.13.0...21.14.11)

Updates `py7zr` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/miurahr/py7zr/releases)
- [Changelog](https://github.com/miurahr/py7zr/blob/master/docs/Changelog.rst)
- [Commits](miurahr/py7zr@v1.1.3...v1.1.4)

Updates `isort` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@9.0.1...9.0.2)

Updates `simplejson` from 4.1.2 to 4.2.0
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/main/CHANGES.txt)
- [Commits](simplejson/simplejson@v4.1.2...v4.2.0)

Updates `pymssql` from 2.4.2 to 2.4.4
- [Release notes](https://github.com/pymssql/pymssql/releases)
- [Changelog](https://github.com/pymssql/pymssql/blob/master/ChangeLog.rst)
- [Commits](pymssql/pymssql@v2.4.2...v2.4.4)

Updates `jsonpickle` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/jsonpickle/jsonpickle/releases)
- [Changelog](https://github.com/jsonpickle/jsonpickle/blob/v4.1.4/CHANGES.rst)
- [Commits](jsonpickle/jsonpickle@v4.1.2...v4.1.4)

Updates `neo4j` from 6.3.1 to 6.4.1
- [Release notes](https://github.com/neo4j/neo4j-python-driver/releases)
- [Changelog](https://github.com/neo4j/neo4j-python-driver/blob/6.x/CHANGELOG.md)
- [Commits](neo4j/neo4j-python-driver@6.3.1...6.4.1)

Updates `ruff` from 0.16.9 to 0.17.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.17.1)

---
updated-dependencies:
- dependency-name: cogstack-es[os]
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-deps
- dependency-name: virtualenv
  dependency-version: 21.14.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-deps
- dependency-name: py7zr
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-deps
- dependency-name: isort
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-deps
- dependency-name: simplejson
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-deps
- dependency-name: pymssql
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-deps
- dependency-name: jsonpickle
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-deps
- dependency-name: neo4j
  dependency-version: 6.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-deps
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants