Bump the dependencies group with 6 updates by dependabot[bot] · Pull Request #313 · safe-global/safe-decoder-service

dependabot · 2026-06-22T14:55:14Z

Bumps the dependencies group with 6 updates:

Package	From	To
redis[hiredis]	`7.4.0`	`7.4.1`
sqladmin[full]	`0.26.0`	`0.27.2`
coverage	`7.14.0`	`7.14.1`
faker	`40.18.0`	`40.23.0`
ipython	`9.13.0`	`9.14.1`
pytest	`9.0.3`	`9.1.0`

Updates redis[hiredis] from 7.4.0 to 7.4.1

Release notes

Sourced from redis[hiredis]'s releases.

7.4.1

Changes

🐛 Bug Fixes

Preserve explicit None for client metadata config (#4081)

🧰 Maintenance

Updating PyJWT dependency. (#4100)

Addressing dependency vulnerabilities and flaky test fixes (source diff)

We'd like to thank all the contributors who worked on this release! @elena-kolevska @vladvildanov @petyaslavova

Commits

f93955c Updating PyJWT dependency. (#4100)
582cc35 Backporting flaky test fixes and dependency vulnerabilities related changes
680abe9 Updating lib version to 7.4.1 and supported Redis server versions in README.md
7c3188b Preserve explicit None for client metadata config (#4081)
See full diff in compare view

Updates sqladmin[full] from 0.26.0 to 0.27.2

Release notes

Sourced from sqladmin[full]'s releases.

0.27.2

What's Changed

fix: render column defaults on the create form by @dhcsousa in smithyhq/sqladmin#1061

fix(base-view): sidebar link falls back to /admin when @expose method is named index by @Vansh-Sharma27 in smithyhq/sqladmin#1062

Preserve list page after editing a record (#1055) by @Vansh-Sharma27 in smithyhq/sqladmin#1063

build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to Bootstrap v5 by @CHC383 in smithyhq/sqladmin#1058

New Contributors

@Vansh-Sharma27 made their first contribution in smithyhq/sqladmin#1062

Full Changelog: smithyhq/sqladmin@0.27.1...0.27.2

0.27.1

Security

Validate the sortBy list-view parameter against column_sortable_list GHSA-ccg5-9c8w-xh6v

ModelView.sort_query() did not check the attacker-controlled sortBy query parameter against the configured column_sortable_list allow-list, so a request could sort by any column of the model (including ones hidden from column_list) and by related-model columns via a dotted path — turning row order into an information-exposure ordering oracle. sortBy is now rejected with HTTP 400 unless it is present in the configured sortable columns.

Full Changelog: smithyhq/sqladmin@0.27.0...0.27.1

0.27.0

What's Changed

fix(list): fix the list view to limit the page width to viewport size by @CHC383 in smithyhq/sqladmin#1056

feat: make admin logo width and height configurable (closes #1045) by @SAY-5 in smithyhq/sqladmin#1052

Docs: add contributing page to documentation site by @vahidzhe in smithyhq/sqladmin#1034

Feature: after_model_change response by @dhcsousa in smithyhq/sqladmin#1030

Create form_details_query by @MaximDementyev in smithyhq/sqladmin#1038

fix: forward kwargs to SessionMiddleware in AuthenticationBackend by @vahidzhe in smithyhq/sqladmin#1036

Fixed overriding form_args in forms.py and widgets.py by @mmzeynalli in smithyhq/sqladmin#1044

New Contributors

@CHC383 made their first contribution in smithyhq/sqladmin#1056

@SAY-5 made their first contribution in smithyhq/sqladmin#1052

@dhcsousa made their first contribution in smithyhq/sqladmin#1030

Full Changelog: smithyhq/sqladmin@0.26.0...0.27.0

Changelog

Sourced from sqladmin[full]'s changelog.

Version 0.27.2: 2026-06-08

Changed

build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to Bootstrap v5 by @CHC383 in #1058

Fixed

fix: render column defaults on the create form by @dhcsousa in #1061

fix(base-view): sidebar link falls back to /admin when @expose method is named index by @Vansh-Sharma27 in #1062

Preserve list page after editing a record (#1055) by @Vansh-Sharma27 in #1063

New Contributors

@Vansh-Sharma27 made their first contribution in #1062

Full Changelog: 0.27.1...0.27.2

Version 0.27.1: 2026-06-05

Security

Fix advisory GHSA-ccg5-9c8w-xh6v: restrict ModelView.sort_query() to the configured column_sortable_list allow-list (self._sort_fields) and reject invalid sortBy values with HTTP 400, preventing attacker-controlled ordering across arbitrary model and related-model columns and avoiding uncaught AttributeError (HTTP 500) by @aminalaee.

Full Changelog: 0.27.0...0.27.1

Version 0.27.0: 2026-05-29

Added

feat: make admin logo width and height configurable (closes #1045) by @SAY-5 in #1052

Feature: after_model_change response by @dhcsousa in #1030

Create form_details_query by @MaximDementyev in #1038

Fixed

fix(list): fix the list view to limit the page width to viewport size by @CHC383 in #1056

fix: forward kwargs to SessionMiddleware in AuthenticationBackend by @vahidzhe in #1036

Fixed overriding form_args in forms.py and widgets.py by @mmzeynalli in #1044

Docs

Docs: add contributing page to documentation site by @vahidzhe in #1034

New Contributors

@CHC383 made their first contribution in #1056

@SAY-5 made their first contribution in #1052

@dhcsousa made their first contribution in #1030

... (truncated)

Commits

d666f7f Release 0.27.2
4aff82e build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to...
5845cbe fix: preserve list page query string after editing a record (#1063)
8a2e8e3 fix(base-view): sidebar link falls back to /admin when @expose method is name...
5c2cda6 fix: render column defaults on the create form (#1061)
2203bc8 Update wtforms requirement from <3.2,>=3.1 to >=3.1,<3.3 (#1067)
be6f35e Bump mypy from 1.19.1 to 2.1.0 (#1066)
65b069a Version 0.27.1 (#1068)
741635f Merge commit from fork
0117498 Bump ruff from 0.15.12 to 0.15.15 (#1065)
Additional commits viewable in compare view

Updates coverage from 7.14.0 to 7.14.1

Changelog

Sourced from coverage's changelog.

Version 7.14.1 — 2026-05-26

Fix: the HTML report used typographic niceties to make file paths more readable by adding a small amount of space around slashes. Those spaces interfered with searching the page for file paths of interest. Now the report uses CSS to accomplish the same visual tweak so that searches with slashes work correctly. Closes issue 2170_.

Add a 3.16 PyPI classifier <hugo-316_>_ since we test on the 3.16 main branch.

.. _issue 2170: coveragepy/coveragepy#2170 .. _hugo-316: https://mastodon.social/@hugovk/116588523571204490

.. _changes_7-14-0:

Commits

64d9b66 docs: correct the date for 7.14.1
6fa7dd4 chore: bump actions/dependency-review-action (#2181)
078afae docs: sample HTML for 7.14.1
cb4f028 docs: prep for 7.14.1
ae2d09f Merge branch 'nedbat/classifire-316-kits'
2c3568b build: declare 3.16 compatibility
faa68f8 chore: bump github/codeql-action in the action-dependencies group (#2173)
eb55fee test: we don't need PyPy < 7.3.22 anymore
ac168fe test: the text summary should show missing
fed4bd2 chore: upgrade virtualenv
Additional commits viewable in compare view

Updates faker from 40.18.0 to 40.23.0

Release notes

Sourced from faker's releases.

Release v40.23.0

See CHANGELOG.md.

Release v40.22.0

See CHANGELOG.md.

Release v40.21.0

See CHANGELOG.md.

Release v40.20.0

See CHANGELOG.md.

Release v40.19.1

See CHANGELOG.md.

Release v40.19.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.23.0 - 2026-06-10

Add French social security numbers with Corsican codes (#2373). Thanks @dancergraham.

Fix typos in docstrings and comments (#2387). Thanks @Labib-Bin-Salam.

v40.22.0 - 2026-06-09

Add mr_IN person, address, and phone_number providers (#2367). Thanks @RedZapdos123.

Fix flaky test_optional by using seed and larger sample size (#2376). Thanks @tejasae-afk.

v40.21.0 - 2026-06-02

Add banks list for en_GB locale (#2363). Thanks @osolomientsev.

v40.20.0 - 2026-06-01

Add pan and gstin generators to en_IN SSN provider (#2357). Thanks @RedZapdos123.

Improve barcode provider test coverage (#2382). Thanks @lphuc2250gma.

Bump liskin/gh-problem-matcher-wrap from 3 to 4 (#2381). Thanks @dependabot[bot].

v40.19.1 - 2026-05-22

Fix shared state mutation in en_IN pincode_in_state (#2369). Thanks @RedZapdos123.

v40.19.0 - 2026-05-22

Add uuid1 and uuid7 providers to misc provider (#2344). Thanks @Krishnachaitanyakc.

Commits

f5fcbb6 Bump version: 40.22.0 → 40.23.0
baaccee 📝 Update CHANGELOG.md
8336b21 💄 Lint code
02bd52b French social security numbers - corsican codes (#2373)
22e7aca Fix typos in docstrings and comments (#2387)
c3a9a5b Bump version: 40.21.0 → 40.22.0
71393c6 📝 Update CHANGELOG.md
77896ac feat(locale): add mr_IN person, address, and phone_number providers (...
dc63614 Fixed flaky test_optional by using seed and larger sample size. (#2376)
8b06111 Bump version: 40.20.0 → 40.21.0
Additional commits viewable in compare view

Updates ipython from 9.13.0 to 9.14.1

Commits

352c35b release 9.14.1
df72b1f Add forward compatibility for pdb.Pdb's mode argument (#15235)
a957d81 Handle pdb.Pdb mode argument and test signature compatibility
3e1c054 ci: add zizmor GitHub Actions security analysis and harden workflows (#15238)
0181ae3 ci: add zizmor GitHub Actions security analysis and harden workflows
fb831cc back to dev
9d1f24b release 9.14.0
d8b9d11 Add IPython 9.14 release notes (#15228)
80cc1b9 Apply suggestions from code review
99feaad Prepare release notes for 9.14
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.0

Release notes

Sourced from pytest's releases.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

Use the node parameter instead for fixture scoping. This enables more robust node-based matching instead of string prefix matching. If you've used nodeid=None, pass node=session instead.

This will be removed in pytest 10.

#14335: The method of configuring hooks using markers, deprecated since pytest 7.2, is now scheduled to be removed in pytest 10. See hook-markers for more details.

#14434: The --pastebin option is now deprecated.

... (truncated)

Commits

b2522cf Prepare release version 9.1.0
368d2fc [refactor] Tighten SetComparisonFunction to Iterator[str] (#14587)
ff77cd8 [refactor] Make base assertion comparisons return an iterator instead of a li...
0d8491a build(deps): Bump actions/stale from 10.2.0 to 10.3.0
4a809d9 Merge pull request #14568 from pytest-dev/register-fixture
5dfa385 Fix recursion traceback test to cover all styles (#14582)
f52ff0c Add pytest.register_fixture
a8ac094 Merge pull request #14567 from pytest-dev/more-visibility-deprecate
e5620cd [pre-commit.ci] pre-commit autoupdate (#14577)
2ce9c6d Merge pull request #14540 from minbang930/fix-14533-doctest-module-fixtures
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [redis[hiredis]](https://github.com/redis/redis-py) | `7.4.0` | `7.4.1` | | [sqladmin[full]](https://github.com/smithyhq/sqladmin) | `0.26.0` | `0.27.2` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.14.0` | `7.14.1` | | [faker](https://github.com/joke2k/faker) | `40.18.0` | `40.23.0` | | [ipython](https://github.com/ipython/ipython) | `9.13.0` | `9.14.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.0` | Updates `redis[hiredis]` from 7.4.0 to 7.4.1 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v7.4.0...v7.4.1) Updates `sqladmin[full]` from 0.26.0 to 0.27.2 - [Release notes](https://github.com/smithyhq/sqladmin/releases) - [Changelog](https://github.com/smithyhq/sqladmin/blob/main/CHANGELOG.md) - [Commits](smithyhq/sqladmin@0.26.0...0.27.2) Updates `coverage` from 7.14.0 to 7.14.1 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.14.0...7.14.1) Updates `faker` from 40.18.0 to 40.23.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v40.18.0...v40.23.0) Updates `ipython` from 9.13.0 to 9.14.1 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.13.0...9.14.1) Updates `pytest` from 9.0.3 to 9.1.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.0) --- updated-dependencies: - dependency-name: redis[hiredis] dependency-version: 7.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sqladmin[full] dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: coverage dependency-version: 7.14.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: faker dependency-version: 40.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ipython dependency-version: 9.14.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pytest dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-29T19:36:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 22, 2026

dependabot Bot requested a review from a team as a code owner June 22, 2026 14:55

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 22, 2026

dependabot Bot mentioned this pull request Jun 22, 2026

Bump faker from 40.13.0 to 40.15.0 #274

Closed

dependabot Bot closed this Jun 29, 2026

dependabot Bot deleted the dependabot/uv/dependencies-d336ab2aa6 branch June 29, 2026 19:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dependencies group with 6 updates#313

Bump the dependencies group with 6 updates#313
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-d336ab2aa6

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.4.1

Changes

🐛 Bug Fixes

🧰 Maintenance

0.27.2

What's Changed

New Contributors

0.27.1

Security

0.27.0

What's Changed

New Contributors

Version 0.27.2: 2026-06-08

Changed

Fixed

New Contributors

Version 0.27.1: 2026-06-05

Security

Version 0.27.0: 2026-05-29

Added

Fixed

Docs

New Contributors

Version 7.14.1 — 2026-05-26

Release v40.23.0

Release v40.22.0

Release v40.21.0

Release v40.20.0

Release v40.19.1

Release v40.19.0

v40.23.0 - 2026-06-10

v40.22.0 - 2026-06-09

v40.21.0 - 2026-06-02

v40.20.0 - 2026-06-01

v40.19.1 - 2026-05-22

v40.19.0 - 2026-05-22

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading