Bump the pip-deps group across 1 directory with 14 updates by dependabot[bot] · Pull Request #29 · American-Soccer-Analysis/mls-roster-profiles

dependabot · 2026-05-01T22:44:44Z

Bumps the pip-deps group with 14 updates in the / directory:

Package	From	To
pydantic	`2.12.5`	`2.13.3`
pandas	`2.3.3`	`3.0.2`
pypdf	`6.4.0`	`6.10.2`
itscalledsoccer	`1.3.3`	`1.3.6`
rapidfuzz	`3.14.3`	`3.14.5`
bandit	`1.9.2`	`1.9.4`
pre-commit	`4.5.0`	`4.6.0`
isort	`7.0.0`	`8.0.1`
docformatter	`1.7.7`	`1.7.8`
ipykernel	`7.1.0`	`7.2.0`
ruff	`0.14.7`	`0.15.12`
pytest-cov	`7.0.0`	`7.1.0`
pytest	`9.0.1`	`9.0.3`
pytest-github-actions-annotate-failures	`0.3.0`	`0.4.0`

Updates pydantic from 2.12.5 to 2.13.3

Release notes

Sourced from pydantic's releases.

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

Packaging

Add zizmor for GitHub Actions workflow linting by @Viicos in #13039

Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @Viicos in #13064

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

Allow default factories of private attributes to take validated model data by @Viicos in #13013

Changes

... (truncated)

Commits

9e9a111 Fix backported test
1ec8c6a Prepare release v2.13.3
fb4f204 Handle AttributeError subclasses with from_attributes
ca3ddd1 Prepare release v2.13.2
000e823 Fix ValidationInfo.field_name missing with model_validate_json()
d45d8be Prepare release 2.13.1
54aca60 Fix ValidationInfo.data missing with model_validate_json()
46bf4fa Fix Pydantic release workflow (#13067)
1b359ed Prepare release v2.13.0 (#13065)
b1bf194 Fix model equality when using runtime extra configuration (#13062)
Additional commits viewable in compare view

Updates pandas from 2.3.3 to 3.0.2

Release notes

Sourced from pandas's releases.

pandas 3.0.2

We are pleased to announce the release of pandas 3.0.2. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

Dedicated string data type by default

Consistent copy/view behaviour with Copy-on-Write (CoW) (a.k.a. getting rid of the SettingWithCopyWarning)

New default resolution for datetime-like data

Initial support for the new pd.col syntax

... (truncated)

Commits

ab90747 RLS: 3.0.2 (#64934)
6f27013 Backport PR #64931 on branch 3.0.x (DOC/BLD: temporary disable upload of docs...
48ddc60 Backport PR #64664 on branch 3.0.x (BUG: DataFrame.sum() crashes on empty Dat...
8774488 [backport 3.0.x] PERF: fix slow python loop in validation for ArrowStringArra...
33af6cc Backport PR #64133 on branch 3.0.x (BUG: str.find returns byte offset instead...
4ef49d8 [backport 3.0.x] BUG: fix convert_dtypes dropping values from sliced mixed-dt...
0668f34 [backport 3.0.x] BUG: Fix HDFStore.put with StringDtype columns and compressi...
23f2f44 [backport 3.0.x] BUG: Suppress unnecessary RuntimeWarning in to_datetime with...
83ba804 Backport PR #64886: BUG: Compute Variance of Complex Numbers Correctly (#64892)
bb5ca1a Backport PR #64386 on branch 3.0.x (BUG: fix sort_index AssertionError with R...
Additional commits viewable in compare view

Updates pypdf from 6.4.0 to 6.10.2

Release notes

Sourced from pypdf's releases.

Version 6.10.2, 2026-04-15

What's new

Security (SEC)

Do not rely on possibly invalid /Size for incremental cloning (#3735) by @stefan6419846

Introduce limits for FlateDecode parameters and image decoding (#3734) by @stefan6419846

Full Changelog

Version 6.10.1, 2026-04-14

What's new

Security (SEC)

Limit the allowed size of xref and object streams (#3733) by @stefan6419846

Robustness (ROB)

Consider strict mode setting for decryption errors (#3731) by @stefan6419846

Documentation (DOC)

Use new parameter names for compress_identical_objects by @stefan6419846

Full Changelog

Version 6.10.0, 2026-04-10

What's new

Security (SEC)

Disallow custom XML entity declarations for XMP metadata (#3724) by @stefan6419846

New Features (ENH)

Skip MD5 key derivation for AES-256 encrypted PDFs (#3694) by @Ygnas

Bug Fixes (BUG)

Use remove_orphans in compress_identical_objects (#3310) by @j-t-1

Fix PdfReadError when xref table contains comments before trailer (#3710) by @rassie

Correctly verify AES padding during decryption (#3699) by @stefan6419846

Fix stale object cache from non-authoritative object streams (#3698) by @astahlman

Fix extract_links pairing when annotations include non-links (#3687) by @ReinerBRO

Documentation (DOC)

Add AI policy (#3717) by @stefan6419846

Full Changelog

Version 6.9.2, 2026-03-23

What's new

Security (SEC)

Avoid infinite loop in read_from_stream for broken files (#3693) by @stefan6419846

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.10.2, 2026-04-15

Security (SEC)

Do not rely on possibly invalid /Size for incremental cloning (#3735)

Introduce limits for FlateDecode parameters and image decoding (#3734)

Full Changelog

Version 6.10.1, 2026-04-14

Security (SEC)

Limit the allowed size of xref and object streams (#3733)

Robustness (ROB)

Consider strict mode setting for decryption errors (#3731)

Documentation (DOC)

Use new parameter names for compress_identical_objects

Full Changelog

Version 6.10.0, 2026-04-10

Security (SEC)

Disallow custom XML entity declarations for XMP metadata (#3724)

New Features (ENH)

Skip MD5 key derivation for AES-256 encrypted PDFs (#3694)

Bug Fixes (BUG)

Use remove_orphans in compress_identical_objects (#3310)

Fix PdfReadError when xref table contains comments before trailer (#3710)

Correctly verify AES padding during decryption (#3699)

Fix stale object cache from non-authoritative object streams (#3698)

Fix extract_links pairing when annotations include non-links (#3687)

Documentation (DOC)

Add AI policy (#3717)

Full Changelog

Version 6.9.2, 2026-03-23

Security (SEC)

Avoid infinite loop in read_from_stream for broken files (#3693)

Robustness (ROB)

Resolve UnboundLocalError for xobjs in _get_image (#3684)

Full Changelog

... (truncated)

Commits

c476b4f REL: 6.10.2
c50a010 SEC: Do not rely on possibly invalid /Size for incremental cloning (#3735)
ac734da SEC: Introduce limits for FlateDecode parameters and image decoding (#3734)
b49e7eb REL: 6.10.1
62338e9 SEC: Limit the allowed size of xref and object streams (#3733)
5dcc0ae DEV: Update pytest-benchmark to 5.2.3
b42e4aa DEV: Update pinned pillow and pytest where possible (#3732)
717446b ROB: Consider strict mode setting for decryption errors (#3731)
9e461d3 DEV: Bump softprops/action-gh-release from 2 to 3 (#3730)
500d09d TST: Update test_embedded_file__basic to use tmp_path fixture (#3726)
Additional commits viewable in compare view

Updates itscalledsoccer from 1.3.3 to 1.3.6

Release notes

Sourced from itscalledsoccer's releases.

v1.3.6

Bug Fixes 🐛

GH-259: Remove legacy typehints by @tyler-richardett in American-Soccer-Analysis/itscalledsoccer#267

fix: initialize vars and use type map for _convert_name_to_id by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#268

fix: fragile kwargs detection by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#269

fix: _get_entity docstring by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#270

fix: DataFrame_ typo by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#271

fix: init variable casing by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#272

GH-254: Fix lazy_load bug by @tyler-richardett in American-Soccer-Analysis/itscalledsoccer#274

chore: bump library version and update template files by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#275

Full Changelog: American-Soccer-Analysis/itscalledsoccer@v1.3.5...v1.3.6

v1.3.5

Bug Fixes 🐛

Raise ValueError instead of SystemExit by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#253

Documentation 📚

fix: activate venv for pages deploy by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#246

Dependencies 📦

chore: drop support for Python 3.9 by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#245

chore(deps): bump the actions group with 4 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#247

chore: update uv.lock by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#248

Drop --locked on uv sync by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#249

chore(deps): bump the actions group with 4 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#251

Full Changelog: American-Soccer-Analysis/itscalledsoccer@v1.3.4...v1.3.5

v1.3.4

Dependencies 📦

chore(deps): bump ghcr.io/hspaans/devcontainer-features/pytest from 1.0.3 to 2.0.0 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#234

chore(deps): bump step-security/harden-runner from 2.12.0 to 2.12.2 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#232

chore(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#231

chore(deps): bump ghcr.io/hspaans/devcontainer-features/pymarkdownlnt from 1.0.0 to 2.0.0 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#233

chore(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#238

chore(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#237

chore: group dependabot PRs by @bgrnwd in American-Soccer-Analysis/itscalledsoccer#235

chore(deps): bump the actions group with 4 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#239

chore(deps): bump the actions group with 7 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#240

chore(deps): bump the actions group with 3 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#241

chore(deps): bump the actions group with 5 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#242

chore(deps): bump the actions group with 5 updates by @dependabot[bot] in American-Soccer-Analysis/itscalledsoccer#243

... (truncated)

Commits

4de31c9 Merge pull request #275 from American-Soccer-Analysis/repo-updates
d49cda9 chore: add 1.3.6 to bug report template
a13434b chore: bump library version and update template files
fe63806 Merge pull request #274 from American-Soccer-Analysis/fix/lazy-load-dataframe...
b48dcbc GH-254: Fix lazy_load bug
082ccc9 Merge pull request #272 from American-Soccer-Analysis/262-dont-use-screaming_...
31f95e1 Merge pull request #271 from American-Soccer-Analysis/265-dataframe_-typo-in-...
565695c Merge pull request #270 from American-Soccer-Analysis/266-unfilled-placeholde...
5f51ca1 Merge pull request #269 from American-Soccer-Analysis/256-fragile-keyword-det...
0d5ca9b fix: init variable casing
Additional commits viewable in compare view

Updates rapidfuzz from 3.14.3 to 3.14.5

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.5

Fixed

fix release ci attempting to upload a pyodide wheel

Release 3.14.4

Added

add risc64 wheels

add support for taskflow 4.0.0

Changed

upgrade to Cython==3.2.4.

Fixed

fix type hints for extractOne when no score_cutoff is provided

Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.5] - 2026-08-07 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix release ci attempting to upload a pyodide wheel
[3.14.4] - 2026-04-06
^^^^^^^^^^^^^^^^^^^^^
Added

add risc64 wheels
add support for taskflow 4.0.0

Changed

* upgrade to ``Cython==3.2.4``.
Fixed
* fix type hints for extractOne when no score_cutoff is provided
[3.14.3] - 2025-11-01

^^^^^^^^^^^^^^^^^^^^^

Fixed



add missing pypy and freethreaded linux wheels

Removed

drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^ Changed

* upgrade to ``Cython==3.1.6``
* enable free threading
[3.14.1] - 2025-09-08
^^^^^^^^^^^^^^^^^^^^^
Fixed
* Fully disable line tracing in release builds
[3.14.0] - 2025-08-27

^^^^^^^^^^^^^^^^^^^^^

Changed

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/edf9f3c2d016c878dae1511301f8b4a501bba871&quot;&gt;&lt;code&gt;edf9f3c&lt;/code&gt;&lt;/a> fix release ci</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/3d8470bf60062dda5c200517f61a8ff43e3e9ef2&quot;&gt;&lt;code&gt;3d8470b&lt;/code&gt;&lt;/a> enable verbose publish</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7fd4ee202b5e3cc9f158f505a33d934a68c14148&quot;&gt;&lt;code&gt;7fd4ee2&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/9691cf1bf985eaf59f6c968f3d7cd8e59054ebaa&quot;&gt;&lt;code&gt;9691cf1&lt;/code&gt;&lt;/a> tag release</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/fd16748843be7d1a4842604fa3429e3943e80e5c&quot;&gt;&lt;code&gt;fd16748&lt;/code&gt;&lt;/a> ci: switch riscv64 from QEMU to native RISE runner</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7f7d58b91a2716eaaec939a72b476ab1bf1ead1b&quot;&gt;&lt;code&gt;7f7d58b&lt;/code&gt;&lt;/a> ci: add riscv64 wheel builds via QEMU</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f4b56942bdbbb99bba556656ea8a0aef1e8c12f0&quot;&gt;&lt;code&gt;f4b5694&lt;/code&gt;&lt;/a> Bump pypa/cibuildwheel from 3.3.1 to 3.4.0 in the github-actions group</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f2873ce9868285eca1d05d8645791d76a2b545fe&quot;&gt;&lt;code&gt;f2873ce&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/4e48509d858454ea994521f90ae8c5d66eb15073&quot;&gt;&lt;code&gt;4e48509&lt;/code&gt;&lt;/a> support Taskflow 4.0.0</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/70480396a66fadabd897407ce289978dec2c13c0&quot;&gt;&lt;code&gt;7048039&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 4 updates</li>

<li>Additional commits viewable in <a href="https://github.com/rapidfuzz/RapidFuzz/compare/v3.14.3...v3.14.5&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates bandit from 1.9.2 to 1.9.4

Release notes
Sourced from bandit's releases.

1.9.4
What's Changed

chore: fixed some typos in comments by @jakob1379 in PyCQA/bandit#1351
Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in PyCQA/bandit#1353
Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in PyCQA/bandit#1357
Fix B613 crash when reading from stdin by @worksbyfriday in PyCQA/bandit#1361
Include filename in nosec 'no failed test' warning by @worksbyfriday in PyCQA/bandit#1363
Fix B615 false positive when revision is set via variable by @worksbyfriday in PyCQA/bandit#1358
Lower version guard in check_ast_node to Python 3.12 by @rcgray in PyCQA/bandit#1355
Fix B106 reporting wrong line number on multiline function calls by @worksbyfriday in PyCQA/bandit#1360

New Contributors

@jakob1379 made their first contribution in PyCQA/bandit#1351
@worksbyfriday made their first contribution in PyCQA/bandit#1361
@rcgray made their first contribution in PyCQA/bandit#1355

Full Changelog: https://github.com/PyCQA/bandit/compare/1.9.3...1.9.4
1.9.3
What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in PyCQA/bandit#1334
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1335
Fix B608 to detect VALUES( without space by @kfess in PyCQA/bandit#1337
Add check for hardcoded passwords in dicts. by @alanverresen in PyCQA/bandit#1338
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1341
Update tox tests for Python 3.10 by @willschlitzer in PyCQA/bandit#1346
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in PyCQA/bandit#1347
Limit B614 to torch.load deserializers by @dibussoc in PyCQA/bandit#1348

New Contributors

@kfess made their first contribution in PyCQA/bandit#1337
@alanverresen made their first contribution in PyCQA/bandit#1338
@willschlitzer made their first contribution in PyCQA/bandit#1346
@dibussoc made their first contribution in PyCQA/bandit#1348

Full Changelog: https://github.com/PyCQA/bandit/compare/1.9.2...1.9.3



Commits

92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
8f2f928 Fix B615 false positive when revision is set via variable (#1358)
e27493f Include filename in nosec 'no failed test' warning (#1363)
b69b336 Fix B613 crash when reading from stdin (#1361)
e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
c0def6c chore: fixed some typos in comments (#1351)
765f00d Limit B614 to torch.load deserializers (#1348)
06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
Additional commits viewable in compare view




Updates pre-commit from 4.5.0 to 4.6.0

Release notes
Sourced from pre-commit's releases.

pre-commit v4.6.0
Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.



Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.



pre-commit v4.5.1
Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.






Changelog
Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21
Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier
usage with git 2.54+ git hooks.

#3662 PR by @asottile.



Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.



4.5.1 - 2025-12-16
Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.






Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view




Updates isort from 7.0.0 to 8.0.1

Release notes
Sourced from isort's releases.

8.0.1
Changes

Fix #2461: Added compression to stdlibs for Python 3.14 in isort/stdlibs/py314.py (#2463) @FinlayTheBerry
Fix unindented comments being corrupted in indented blocks (#2459) @worksbyfriday

8.0.0
Changes

Update CHANGELOG for version 8.0.0 (#2460) @DanielNoord
Fix edge case of __future__ import. (#2458) @skv0zsneg
Fix the Plone profile to be compatible with black (#2457) @ale-rt
typo fix (#2450) @jsta
Remove the setuptools plugin (#2427) @DanielNoord
Turn some warnings into errors in test suite (#2449) @DanielNoord
chore: replace black with ruff in clean.sh (#2448) @joao-faria-dev
feat!: remove old finders flag and legacy finder logic (#2446) @joao-faria-dev
Fix whitespace insensitive check triggering on tabs (#2437) @robsdedude
Fix line separator detection not considering form feed as white space (#2436) @robsdedude
Fix #1964: lines_before_import sometimes ignored (#1965) @robsdedude
Remove reference to 3.9 in README (#2434) @DanielNoord

:rocket: Features

Ensure multiprocessing.Pool is always closed and joined (#2442) @DanielNoord

:construction_worker: Continuous Integration

Simplify CI by putting similar steps into a single action file (#2444) @DanielNoord

:package: Dependencies

Bump actions/checkout from 5 to 6 in the github-actions group (#2451) @dependabot[bot]
Bump astral-sh/setup-uv from 6 to 7 in the github-actions group (#2441) @dependabot[bot]




Changelog
Sourced from isort's changelog.

Changelog
NOTE: isort follows the semver versioning standard.
Find out more about isort's release policy here.
Releases
Unreleased
8.0.0 February 19 2026

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev
Update the plone profile to not clash with black (#2456) @ale-rt

6.1.0 October 1 2025

Add python 3.14 classifier and badge (#2409) @staticdev
Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

6.0.1 Febuary 26 2025

Add OSError handling in find_imports_in_file (#2331) @kobarity

6.0.0 January 27 2025

Remove support for Python 3.8 (#2327) @DanielNoord
Python 3.13 support (#2306) @mayty
Speed up exists_case_sensitive calls (#2264) @correctmost
Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord
Black profile: enable magic comma (#2236) @MrMino
Update line_length and single_line_exclusions in google profile (#2149) @jagapiou
Allow --diff to be used with --jobs (#2302) @mnakama
Fix wemake profile to have correct character limit (#2241) @sobolevn
Fix sort_reexports code mangling (#2283) @Helveg
Fix correct group by package tokenization (#2136) @glasnt

5.13.2 December 13 2023

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72
Confine pre-commit to stages (#2213) @davidculley
Fixed colors extras (#2212) @staticdev

5.13.1 December 11 2023

Fixed integration tests (#2208) @bp72
Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72
Remove optional dependencies without extras (#2207) @staticdev

5.13.0 December 9 2023


... (truncated)


Commits

a333737 Merge pull request #2463 from FinlayTheBerry/issue/2461
878ba7e Added compression to stdlibs for Python 3.14 in isort/stdlibs/py314.py
b5f06a7 Merge pull request #2459 from Fridayai700/fix-unindented-comment-corruption
3459bde Merge pull request #2460 from PyCQA/DanielNoord-patch-1
6e70bb6 Update CHANGELOG for version 8.0.0
fd2514b Fix unindented comments being corrupted in indented blocks
b0f2dab Merge pull request #2458 from skv0zsneg/issue/1882
313797b Fix lint.
7d3a6f5 Add ignore for cyclomatic complexity check.
6b9f895 Remove debug prints.
Additional commits viewable in compare view




Updates docformatter from 1.7.7 to 1.7.8

Release notes
Sourced from docformatter's releases.

1.7.8
What Changed

#335 Match spacing after module docstring between black and --black  (

Bumps the pip-deps group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.3` | | [pandas](https://github.com/pandas-dev/pandas) | `2.3.3` | `3.0.2` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.4.0` | `6.10.2` | | [itscalledsoccer](https://github.com/American-Soccer-Analysis/itscalledsoccer) | `1.3.3` | `1.3.6` | | [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) | `3.14.3` | `3.14.5` | | [bandit](https://github.com/PyCQA/bandit) | `1.9.2` | `1.9.4` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.0` | `4.6.0` | | [isort](https://github.com/PyCQA/isort) | `7.0.0` | `8.0.1` | | [docformatter](https://github.com/PyCQA/docformatter) | `1.7.7` | `1.7.8` | | [ipykernel](https://github.com/ipython/ipykernel) | `7.1.0` | `7.2.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.7` | `0.15.12` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.1` | `9.0.3` | | [pytest-github-actions-annotate-failures](https://github.com/pytest-dev/pytest-github-actions-annotate-failures) | `0.3.0` | `0.4.0` | Updates `pydantic` from 2.12.5 to 2.13.3 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.3) Updates `pandas` from 2.3.3 to 3.0.2 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v2.3.3...v3.0.2) Updates `pypdf` from 6.4.0 to 6.10.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.4.0...6.10.2) Updates `itscalledsoccer` from 1.3.3 to 1.3.6 - [Release notes](https://github.com/American-Soccer-Analysis/itscalledsoccer/releases) - [Commits](American-Soccer-Analysis/itscalledsoccer@v1.3.3...v1.3.6) Updates `rapidfuzz` from 3.14.3 to 3.14.5 - [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases) - [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst) - [Commits](rapidfuzz/RapidFuzz@v3.14.3...v3.14.5) Updates `bandit` from 1.9.2 to 1.9.4 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](PyCQA/bandit@1.9.2...1.9.4) Updates `pre-commit` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.0...v4.6.0) Updates `isort` from 7.0.0 to 8.0.1 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@7.0.0...8.0.1) Updates `docformatter` from 1.7.7 to 1.7.8 - [Release notes](https://github.com/PyCQA/docformatter/releases) - [Changelog](https://github.com/PyCQA/docformatter/blob/master/CHANGELOG.md) - [Commits](PyCQA/docformatter@v1.7.7...v1.7.8) Updates `ipykernel` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/ipython/ipykernel/releases) - [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md) - [Commits](ipython/ipykernel@v7.1.0...v7.2.0) Updates `ruff` from 0.14.7 to 0.15.12 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.7...0.15.12) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `pytest` from 9.0.1 to 9.0.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.1...9.0.3) Updates `pytest-github-actions-annotate-failures` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/pytest-dev/pytest-github-actions-annotate-failures/releases) - [Commits](pytest-dev/pytest-github-actions-annotate-failures@v0.3.0...v0.4.0) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.13.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: pandas dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-deps - dependency-name: pypdf dependency-version: 6.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: itscalledsoccer dependency-version: 1.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: rapidfuzz dependency-version: 3.14.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: bandit dependency-version: 1.9.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: isort dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-deps - dependency-name: docformatter dependency-version: 1.7.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: ipykernel dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: ruff dependency-version: 0.15.12 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: pytest-github-actions-annotate-failures dependency-version: 0.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 1, 2026

dependabot Bot requested a review from tyler-richardett as a code owner May 1, 2026 22:44

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 1, 2026

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

What's Changed

Packaging

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 (2026-04-13)

What's Changed

New Features

Changes

pandas 3.0.2

pandas 3.0.1

pandas 3.0.0

Version 6.10.2, 2026-04-15

What's new

Security (SEC)

Version 6.10.1, 2026-04-14

What's new

Security (SEC)

Robustness (ROB)

Documentation (DOC)

Version 6.10.0, 2026-04-10

What's new

Security (SEC)

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Version 6.9.2, 2026-03-23

What's new

Security (SEC)

Version 6.10.2, 2026-04-15

Security (SEC)

Version 6.10.1, 2026-04-14

Security (SEC)

Robustness (ROB)

Documentation (DOC)

Version 6.10.0, 2026-04-10

Security (SEC)

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Version 6.9.2, 2026-03-23

Security (SEC)

Robustness (ROB)

v1.3.6

Bug Fixes 🐛

v1.3.5

Bug Fixes 🐛

Documentation 📚

Dependencies 📦

v1.3.4

Dependencies 📦

Release 3.14.5

Fixed

Release 3.14.4

Added

Changed

dependabot Bot commented on behalf of github May 1, 2026 •

edited

Loading