Skip to content
This repository was archived by the owner on Oct 23, 2026. It is now read-only.

Bump the all-dependencies group across 1 directory with 6 updates - #437

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/all-dependencies-9dd4d35579
Closed

Bump the all-dependencies group across 1 directory with 6 updates#437
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/all-dependencies-9dd4d35579

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 6 updates in the / directory:

Package From To
anki 26.8.1 26.9.3
aqt 26.8.1 26.9.3
black 26.5.1 26.10.1
pre-commit 4.6.2 4.7.0
pylint 4.0.8 4.1.3
pytest-env 1.7.1 1.8.1

Updates anki from 26.8.1 to 26.9.3

Release notes

Sourced from anki's releases.

26.09.3

What's Changed

⚠️ Please upgrade to 26.09+ as soon as possible as it includes important security fixes.

Fixes

Documentation

Development

New Contributors

Full Changelog: ankitects/anki@26.09.2...26.09.3

26.09.2

What's Changed

This is a bugfix/security patch for issues reported in 26.09.

⚠️ Please upgrade to 26.09+ as soon as possible as it includes important security fixes.

Notable Changes

  • Fix a startup crash on Windows affecting users who have leftover files from pre-25.07 installations by @​abdnh in ankitects/anki#5605
  • Security: Prevent external links in deck descriptions rendered in the overview/congrats screen from manipulating the page in certain cases when clicked.

Development

... (truncated)

Commits
  • 29bb700 Prepare release 26.09.3
  • ce378f4 Update translations
  • e6fefb2 docs: improve manual translation instructions (#5519)
  • f4c684a fix(ci): fetch PR base branch so SonarCloud diffs only changed files (#5659)
  • 1516af9 fix(installer): add version to root folder (#5662)
  • 029c80a refactor: use col.fsrs_enabled in more places (#5651)
  • f5a8f54 fix: Do not skip scope dialog in MSI installer (#5658)
  • 754ce3a fix: Card modified by stats screen (#5648)
  • 4acb532 fix(ci): track releases in the SonarCloud project version (#5634)
  • 910c92e fix: improve "Please restart to save changes" (#5641)
  • Additional commits viewable in compare view

Updates aqt from 26.8.1 to 26.9.3

Release notes

Sourced from aqt's releases.

26.09.3

What's Changed

⚠️ Please upgrade to 26.09+ as soon as possible as it includes important security fixes.

Fixes

Documentation

Development

New Contributors

Full Changelog: ankitects/anki@26.09.2...26.09.3

26.09.2

What's Changed

This is a bugfix/security patch for issues reported in 26.09.

⚠️ Please upgrade to 26.09+ as soon as possible as it includes important security fixes.

Notable Changes

  • Fix a startup crash on Windows affecting users who have leftover files from pre-25.07 installations by @​abdnh in ankitects/anki#5605
  • Security: Prevent external links in deck descriptions rendered in the overview/congrats screen from manipulating the page in certain cases when clicked.

Development

... (truncated)

Commits
  • 29bb700 Prepare release 26.09.3
  • ce378f4 Update translations
  • e6fefb2 docs: improve manual translation instructions (#5519)
  • f4c684a fix(ci): fetch PR base branch so SonarCloud diffs only changed files (#5659)
  • 1516af9 fix(installer): add version to root folder (#5662)
  • 029c80a refactor: use col.fsrs_enabled in more places (#5651)
  • f5a8f54 fix: Do not skip scope dialog in MSI installer (#5658)
  • 754ce3a fix: Card modified by stats screen (#5648)
  • 4acb532 fix(ci): track releases in the SonarCloud project version (#5634)
  • 910c92e fix: improve "Please restart to save changes" (#5641)
  • Additional commits viewable in compare view

Updates black from 26.5.1 to 26.10.1

Release notes

Sourced from black's releases.

26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

  • Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)
  • Keep repeated lines outside the selected --line-ranges unchanged (#5436)
  • Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)
  • Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)
  • Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)
  • Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)

Preview style

  • Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)
  • Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)
  • Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)
  • Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)
  • Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)
  • Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)
  • Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an earlier bracket split exceeds the line length only due to a trailing comment (#5498)

Configuration

  • Add --cache-dir to configure the cache directory from the command line (#5433)
  • Don't cache a file as formatted after formatting or checking it with --line-ranges,

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

  • Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)
  • Keep repeated lines outside the selected --line-ranges unchanged (#5436)
  • Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)
  • Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)
  • Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)
  • Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)
  • Keep the parentheses around a walrus that is the only item in a set (for example {(x := f())}) when targeting Python 3.9 or older, since Python 3.8 and 3.9.0 can't parse it without them (#5502)

Preview style

  • Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)
  • Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)
  • Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)
  • Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)
  • Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)
  • Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)
  • Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an earlier bracket split exceeds the line length only due to a trailing comment (#5498)

... (truncated)

Commits
  • 258e7db Prepare release 26.10.1 (#5511)
  • ac1f715 Action: validate required-version better (#5510)
  • fe241cc Avoid splitting trailers when earlier bracket split exceeds length due to com...
  • 4fb2897 Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#5500)
  • 6d0f557 Bump actions/download-artifact from 8.0.1 to 8.0.2 (#5501)
  • c45f21d Handle PEP 695 type parameter whitespace in whitespace() (#5504)
  • 8ec61a7 Skip UTF-8 BOM when reading .gitignore (#5497)
  • c9b1148 Fix module docstring last_line_length when docstring ends with newline (#5494)
  • eb88358 Parenthesize expressions with parameter comments in preview (#3113) (#5442)
  • 939fa93 Keep the parentheses around a right-hand side when a dict value's parentheses...
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates pylint from 4.0.8 to 4.1.3

Release notes

Sourced from pylint's releases.

v4.1.3

What's new in Pylint 4.1.3?

Release date: 2026-10-11

False Positives Fixed

  • Fixed a false positive for attribute-defined-outside-init when an attribute is assigned inside the setter of an old-style, non-decorator property(fget, fset) call. The decorator form (@property / @x.setter) was already exempted by the fix for #409; the classic call form was not.

    Closes #3325

  • Fix a false positive for used-before-assignment when a name bound by an earlier target of the same assignment is used by a later target, as in a = b[a] = 0.

    Closes #5955

  • Fix a no-member false positive in a comprehension inside a branch that cannot run, such as if sys.platform == "win32": on Linux. Like the rest of the branch, the comprehension is no longer checked for missing members.

    Closes #7240

  • Fix a false positive for used-before-assignment when a name bound by a tuple or list target of a with item is used by a later item of the same with statement.

    Closes #7545

  • Fix false positives such as not-callable, not-an-iterable, unpacking-non-sequence and no-member on the result of a function whose body is only ..., like @overload and .pyi stubs. Such calls were inferred as returning None. This affected sqlalchemy.func, pydantic.Field, and the torch functions wrapped by _add_docstr, such as torch.linalg.qr.

    Closes #8138 Closes #9218 Closes #9354 Closes #10087

  • Fix a false positive for protected-access when a subclass of a subscripted generic base, such as class Child(Parent[T]), accesses a protected member through that base, such as Parent._foo(self).

    Closes #8600

... (truncated)

Commits
  • e75de10 Bump pylint to 4.1.3, update changelog (#11637)
  • 591f6e2 [Backport maintenance/4.1.x] Fix protected-access false positive through a su...
  • a537920 [Backport maintenance/4.1.x] Ignore discard variable type redefinitions (#11635)
  • 4a8f61c [Backport maintenance/4.1.x] Fix duplicate-code crash when min-similarity-lin...
  • 41fa1c4 [Backport maintenance/4.1.x] [pyreverse] Fix hang/RecursionError with --all-a...
  • a05e2f3 [Backport maintenance/4.1.x] Fix used-before-assignment false positive for ...
  • ea7996b [Backport maintenance/4.1.x] Error when several output formats write to stdou...
  • 479c037 [Backport maintenance/4.1.x] Fix IndexError when Enum init has no argumen...
  • e6aa780 [Backport maintenance/4.1.x] Fix unreachable false positive for raising gener...
  • fc58d0b [Backport maintenance/4.1.x] Fix pyreverse crash on classes with EmptyNode in...
  • Additional commits viewable in compare view

Updates pytest-env from 1.7.1 to 1.8.1

Release notes

Sourced from pytest-env's releases.

1.8.1

  • Respect explicit empty native env_files over INI fallback (#273)

PyPI release

Full Changelog: pytest-dev/pytest-env@1.8.0...1.8.1

1.8.0

  • Document [pytest] env configuration in pytest.toml / .pytest.toml (#262)
  • 👷 ci: pin ubuntu-26.04 and bump dependencies (#268)
  • feat(python): require 3.11 and default to 3.15 (#270)

PyPI release

Full Changelog: pytest-dev/pytest-env@1.7.1...1.8.0

Changelog

Sourced from pytest-env's changelog.

1.8.1 (2026-10-18)

  • Respect explicit empty native env_files over INI fallback (#273)

1.8.0 (2026-10-10)

  • Document [pytest] env configuration in pytest.toml / .pytest.toml (#262)
  • 👷 ci: pin ubuntu-26.04 and bump dependencies (#268)
  • feat(python): require 3.11 and default to 3.15 (#270)
Commits
  • 1fed481 Respect explicit empty native env_files over INI fallback (#273)
  • 87aa836 build(deps): bump the github-actions group with 2 updates (#272)
  • 0a16faa [pre-commit.ci] pre-commit autoupdate (#271)
  • 484cdae feat(python): require 3.11 and default to 3.15 (#270)
  • 5c8b323 [pre-commit.ci] pre-commit autoupdate (#269)
  • 6bfeb12 👷 ci: pin ubuntu-26.04 and bump dependencies (#268)
  • d6ad54f build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-acti...
  • ca0dad2 [pre-commit.ci] pre-commit autoupdate (#266)
  • 0334ce8 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
  • 0cf852c [pre-commit.ci] pre-commit autoupdate (#264)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-dependencies group across 1 directory with 6 updates
4dac645 
Bumps the all-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anki](https://github.com/ankitects/anki) | `26.8.1` | `26.9.3` |
| [aqt](https://github.com/ankitects/anki) | `26.8.1` | `26.9.3` |
| [black](https://github.com/psf/black) | `26.5.1` | `26.10.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `4.0.8` | `4.1.3` |
| [pytest-env](https://github.com/pytest-dev/pytest-env) | `1.7.1` | `1.8.1` |



Updates `anki` from 26.8.1 to 26.9.3
- [Release notes](https://github.com/ankitects/anki/releases)
- [Changelog](https://github.com/ankitects/anki/blob/main/release.just)
- [Commits](ankitects/anki@26.08.1...26.09.3)

Updates `aqt` from 26.8.1 to 26.9.3
- [Release notes](https://github.com/ankitects/anki/releases)
- [Changelog](https://github.com/ankitects/anki/blob/main/release.just)
- [Commits](ankitects/anki@26.08.1...26.09.3)

Updates `black` from 26.5.1 to 26.10.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.5.1...26.10.1)

Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `pylint` from 4.0.8 to 4.1.3
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.8...v4.1.3)

Updates `pytest-env` from 1.7.1 to 1.8.1
- [Release notes](https://github.com/pytest-dev/pytest-env/releases)
- [Changelog](https://github.com/pytest-dev/pytest-env/blob/main/CHANGELOG.md)
- [Commits](pytest-dev/pytest-env@1.7.1...1.8.1)

---
updated-dependencies:
- dependency-name: anki
  dependency-version: 26.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: aqt
  dependency-version: 26.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: black
  dependency-version: 26.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pylint
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest-env
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 23, 2026
@mortii mortii closed this Oct 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@mortii
mortii deleted the dependabot/pip/all-dependencies-9dd4d35579 branch October 23, 2026 10:18
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mortii