Deps: Bump the python-packages group with 4 updates #1227

dependabot · 2025-05-12T04:11:41Z

Bumps the python-packages group with 4 updates: exceptiongroup, platformdirs, ruff and snowballstemmer.

Updates exceptiongroup from 1.2.2 to 1.3.0

Release notes

Sourced from exceptiongroup's releases.

1.3.0

Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library

In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @mikenerone)

Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @cfbolz)

Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior (#143)

Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

1.3.0

Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library

In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @mikenerone)

Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @cfbolz)

Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior ([#143](https://github.com/agronholm/exceptiongroup/issues/143) <https://github.com/agronholm/exceptiongroup/issues/143>_)

1.2.2

Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry ([#123](https://github.com/agronholm/exceptiongroup/issues/123) <https://github.com/agronholm/exceptiongroup/issues/123>_)

1.2.1

Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)

Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException

Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)

Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups

Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler

1.1.3

catch() now raises a TypeError if passed an async exception handler instead of just giving a RuntimeWarning about the coroutine never being awaited. (#66, PR by John Litborn)

... (truncated)

Commits

77fba8a Added the release version
5e153aa Revert "Migrated test dependencies to dependency groups"
5000bfe Migrated tox configuration to native TOML
427220d Updated pytest options
4ca264f Migrated test dependencies to dependency groups
163c3a8 Marked test_exceptions_mutate_original_sequence as xfail on pypy3.11
a176574 Always create the exceptions tuple at init and return it from the exceptions ...
550b796 Added BaseExceptionGroup.init, following CPython (#142)
2a84dfd Added typevar defaults to (Base)ExceptionGroup (#147)
fb9133b [pre-commit.ci] pre-commit autoupdate (#145)
Additional commits viewable in compare view

Updates platformdirs from 4.3.7 to 4.3.8

Release notes

Sourced from platformdirs's releases.

4.3.8

What's Changed

Add missing examples and fix order of examples in README by @gene1wood in tox-dev/platformdirs#355

New Contributors

@gene1wood made their first contribution in tox-dev/platformdirs#355

Full Changelog: tox-dev/platformdirs@4.3.7...4.3.8

Commits

22089f1 Add missing examples and fix order of examples in README (#355)
29398b1 [pre-commit.ci] pre-commit autoupdate (#354)
70114b0 [pre-commit.ci] pre-commit autoupdate (#353)
4891611 [pre-commit.ci] pre-commit autoupdate (#351)
707be6f Bump astral-sh/setup-uv from 5 to 6 in the all group (#352)
5519a4f [pre-commit.ci] pre-commit autoupdate (#349)
063275e [pre-commit.ci] pre-commit autoupdate (#346)
39fc384 [pre-commit.ci] pre-commit autoupdate (#345)
See full diff in compare view

Updates ruff from 0.11.8 to 0.11.9

Release notes

Sourced from ruff's releases.

0.11.9

Release Notes

Preview features

Default to latest supported Python version for version-related syntax errors (#17529)

Implement deferred annotations for Python 3.14 (#17658)

[airflow] Fix SQLTableCheckOperator typo (AIR302) (#17946)

[airflow] Remove airflow.utils.dag_parsing_context.get_parsing_context (AIR301) (#17852)

[airflow] Skip attribute check in try catch block (AIR301) (#17790)

[flake8-bandit] Mark tuples of string literals as trusted input in S603 (#17801)

[isort] Check full module path against project root(s) when categorizing first-party imports (#16565)

[ruff] Add new rule in-empty-collection (RUF060) (#16480)

Bug fixes

Fix missing combine call for lint.typing-extensions setting (#17823)

[flake8-async] Fix module name in ASYNC110, ASYNC115, and ASYNC116 fixes (#17774)

[pyupgrade] Add spaces between tokens as necessary to avoid syntax errors in UP018 autofix (#17648)

[refurb] Fix false positive for float and complex numbers in FURB116 (#17661)

[parser] Flag single unparenthesized generator expr with trailing comma in arguments. (#17893)

Documentation

Add instructions on how to upgrade to a newer Rust version (#17928)

Update code of conduct email address (#17875)

Add fix safety sections to PLC2801, PLR1722, and RUF013 (#17825, #17826, #17759)

Add link to check-typed-exception from S110 and S112 (#17786)

Other changes

Allow passing a virtual environment to ruff analyze graph (#17743)

Contributors

@AlexWaygood

@BurntSushi

@Gankra

@Glyphack

@InSyncWithFoo

@LaBatata101

@Lee-W

@MichaReiser

@VascoSch92

@abhijeetbodas2001

@carljm

@charliermarsh

@dcreager

@dhruvmanila

@dylwil3

@ercbot

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.9

Preview features

Default to latest supported Python version for version-related syntax errors (#17529)

Implement deferred annotations for Python 3.14 (#17658)

[airflow] Fix SQLTableCheckOperator typo (AIR302) (#17946)

[airflow] Remove airflow.utils.dag_parsing_context.get_parsing_context (AIR301) (#17852)

[airflow] Skip attribute check in try catch block (AIR301) (#17790)

[flake8-bandit] Mark tuples of string literals as trusted input in S603 (#17801)

[isort] Check full module path against project root(s) when categorizing first-party imports (#16565)

[ruff] Add new rule in-empty-collection (RUF060) (#16480)

Bug fixes

Fix missing combine call for lint.typing-extensions setting (#17823)

[flake8-async] Fix module name in ASYNC110, ASYNC115, and ASYNC116 fixes (#17774)

[pyupgrade] Add spaces between tokens as necessary to avoid syntax errors in UP018 autofix (#17648)

[refurb] Fix false positive for float and complex numbers in FURB116 (#17661)

[parser] Flag single unparenthesized generator expr with trailing comma in arguments. (#17893)

Documentation

Add instructions on how to upgrade to a newer Rust version (#17928)

Update code of conduct email address (#17875)

Add fix safety sections to PLC2801, PLR1722, and RUF013 (#17825, #17826, #17759)

Add link to check-typed-exception from S110 and S112 (#17786)

Other changes

Allow passing a virtual environment to ruff analyze graph (#17743)

Commits

2370297 Bump 0.11.9 (#17986)
a137cb1 [ty] Display "All checks passed!" message in green (#17982)
03a4d56 [ty] Change range of revealed-type diagnostic to be the range of the argume...
642eac4 [ty] Recursive protocols (#17929)
c1b8757 [ty] CLI reference (#17978)
6cd8a49 [ty] Update salsa (#17964)
12ce445 [ty] Document configuration schema (#17950)
f46ed8d [ty] Add --config CLI arg (#17697)
6c177e2 [ty] primer updates (#17903)
3d2485e [ty] fix more ecosystem/fuzzer panics with fixpoint (#17758)
Additional commits viewable in compare view

Updates snowballstemmer from 2.2.0 to 3.0.1

Changelog

Sourced from snowballstemmer's changelog.

Snowball 3.0.1 (2025-05-09)

Python

The init.py in 3.0.0 was incorrectly generated due to a missing build dependency and the list of algorithms was empty. First reported by laymonage. Thanks to Dmitry Shachnev, Henry Schreiner and Adam Turner for diagnosing and fixing. (#229, #230, #231)

Add trove classifiers for Armenian and Yiddish which have now been registered with PyPI. Thanks to Henry Schreiner and Dmitry Shachnev. (#228)

Update documented details of Python 2 support in old versions.

Snowball 3.0.0 (2025-05-08)

Ada

Bug fixes:

Fix invalid Ada code generated for Snowball loop (it was partly Pascal!) None of the stemmers shipped in previous releases triggered this bug, but the Turkish stemmer now does.

The Ada runtime was not tracking the current length of the string but instead used the current limit value or some other substitute, which manifested as various incorrect behaviours for code inside of setlimit.

size was incorrectly returning the difference between the limit and the backwards limit.

lenof or sizeof on a string variable generated Ada code that didn't even compile.

Fix incorrect preconditions on some methods in the runtime.

Fix bug in runtime code used by attach, insert, <- and string variable assignment when a (sub)string was replaced with a larger string. This bug was triggered by code in the Kraaij-Pohlmann Dutch stemmer implementation (which was previously not enabled by default but is now the standard Dutch stemmer).

Fix invalid code generated for insert, <- and string variable assignment. This bug was triggered by code in the Kraaij-Pohlmann Dutch stemmer implementation (which was previously not enabled by default but is now the standard Dutch stemmer).

... (truncated)

Commits

e4b3efb Update for 3.0.1
bbd3319 Protect empty languages dict
298ff9f Update details of Python 2 support in old versions
53fe098 python: Specify correct dependencies for $(python_output_dir)/__init__.py
00a22de Stop excluding classifiers for Armenian and Yiddish
abd9adc Update for 3.0.0
d23d356 Back out incomplete ESM support for 3.0.0
ff42274 Update draft NEWS entry
cd61f01 tamil: remove_tense_suffix signals if ending removed
edfe576 nepali: Reformat amongs to be clearer
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 4 updates: [exceptiongroup](https://github.com/agronholm/exceptiongroup), [platformdirs](https://github.com/tox-dev/platformdirs), [ruff](https://github.com/astral-sh/ruff) and [snowballstemmer](https://github.com/snowballstem/snowball). Updates `exceptiongroup` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/agronholm/exceptiongroup/releases) - [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst) - [Commits](agronholm/exceptiongroup@1.2.2...1.3.0) Updates `platformdirs` from 4.3.7 to 4.3.8 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst) - [Commits](tox-dev/platformdirs@4.3.7...4.3.8) Updates `ruff` from 0.11.8 to 0.11.9 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.8...0.11.9) Updates `snowballstemmer` from 2.2.0 to 3.0.1 - [Changelog](https://github.com/snowballstem/snowball/blob/master/NEWS) - [Commits](snowballstem/snowball@v2.2.0...v3.0.1) --- updated-dependencies: - dependency-name: exceptiongroup dependency-version: 1.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: platformdirs dependency-version: 4.3.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: ruff dependency-version: 0.11.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: snowballstemmer dependency-version: 3.0.1 dependency-type: indirect update-type: version-update:semver-major dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-05-12T04:11:55Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
❌ 1 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA a5725f4.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

poetry.lock

Package	Version	License	Issue Type
ruff	0.11.9	0BSD AND Apache-2.0 AND BSD-3-Clause AND MIT	Incompatible License
exceptiongroup	1.3.0	Null	Unknown License

Allowed Licenses: 0BSD, AGPL-3.0-or-later, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause-Clear, BSD-3-Clause, BSL-1.0, CAL-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-4.0, CC0-1.0, EPL-2.0, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-2.0, GPL-3.0-only, GPL-3.0-or-later, GPL-3.0, ISC, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1, LGPL-3.0-only, LGPL-3.0, LGPL-3.0-or-later, MIT, MIT-CMU, MPL-1.1, MPL-2.0, OFL-1.1, PSF-2.0, Python-2.0, Python-2.0.1, Unicode-DFS-2016, Unlicense, Zlib, ZPL-2.1

OpenSSF Scorecard

Package

Version

Score

Details

pip/exceptiongroup

1.3.0

Unknown

pip/platformdirs

4.3.8

Unknown

pip/ruff

0.11.9

Unknown

pip/snowballstemmer

3.0.1

🟢 4.5

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 1	Found 4/30 approved changesets -- score normalized to 1
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

poetry.lock

github-actions · 2025-05-12T04:12:11Z

Conventional Commits Report

Type	Number
Dependencies	1

🚀 Conventional commits found.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 12, 2025

dependabot bot requested review from a team as code owners May 12, 2025 04:11

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 12, 2025

greenbonebot enabled auto-merge (rebase) May 12, 2025 04:11

a-h-abdelsalam approved these changes May 12, 2025

View reviewed changes

greenbonebot merged commit ee0be49 into main May 12, 2025
24 of 25 checks passed

greenbonebot deleted the dependabot/pip/python-packages-aa39babdc0 branch May 12, 2025 09:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Deps: Bump the python-packages group with 4 updates #1227

Deps: Bump the python-packages group with 4 updates #1227

Uh oh!

dependabot bot commented on behalf of github May 12, 2025

Uh oh!

github-actions bot commented May 12, 2025

Uh oh!

github-actions bot commented May 12, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Deps: Bump the python-packages group with 4 updates #1227

Deps: Bump the python-packages group with 4 updates #1227

Uh oh!

Conversation

dependabot bot commented on behalf of github May 12, 2025

1.3.0

Version history

4.3.8

What's Changed

New Contributors

0.11.9

Release Notes

Preview features

Bug fixes

Documentation

Other changes

Contributors

0.11.9

Preview features

Bug fixes

Documentation

Other changes

Snowball 3.0.1 (2025-05-09)

Python

Snowball 3.0.0 (2025-05-08)

Ada

Uh oh!

github-actions bot commented May 12, 2025

Dependency Review

Snapshot Warnings

License Issues

poetry.lock

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions bot commented May 12, 2025

Conventional Commits Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants