Bump the dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #316 · safe-global/safe-decoder-service

dependabot · 2026-06-29T19:36:45Z

Bumps the dependencies group with 5 updates in the / directory:

Package	From	To
sqladmin[full]	`0.26.0`	`0.27.2`
coverage	`7.14.0`	`7.14.2`
faker	`40.18.0`	`40.23.0`
ipython	`9.13.0`	`9.14.1`
pytest	`9.0.3`	`9.1.1`

Updates sqladmin[full] from 0.26.0 to 0.27.2

Release notes

Sourced from sqladmin[full]'s releases.

0.27.2

What's Changed

fix: render column defaults on the create form by @dhcsousa in smithyhq/sqladmin#1061

fix(base-view): sidebar link falls back to /admin when @expose method is named index by @Vansh-Sharma27 in smithyhq/sqladmin#1062

Preserve list page after editing a record (#1055) by @Vansh-Sharma27 in smithyhq/sqladmin#1063

build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to Bootstrap v5 by @CHC383 in smithyhq/sqladmin#1058

New Contributors

@Vansh-Sharma27 made their first contribution in smithyhq/sqladmin#1062

Full Changelog: smithyhq/sqladmin@0.27.1...0.27.2

0.27.1

Security

Validate the sortBy list-view parameter against column_sortable_list GHSA-ccg5-9c8w-xh6v

ModelView.sort_query() did not check the attacker-controlled sortBy query parameter against the configured column_sortable_list allow-list, so a request could sort by any column of the model (including ones hidden from column_list) and by related-model columns via a dotted path — turning row order into an information-exposure ordering oracle. sortBy is now rejected with HTTP 400 unless it is present in the configured sortable columns.

Full Changelog: smithyhq/sqladmin@0.27.0...0.27.1

0.27.0

What's Changed

fix(list): fix the list view to limit the page width to viewport size by @CHC383 in smithyhq/sqladmin#1056

feat: make admin logo width and height configurable (closes #1045) by @SAY-5 in smithyhq/sqladmin#1052

Docs: add contributing page to documentation site by @vahidzhe in smithyhq/sqladmin#1034

Feature: after_model_change response by @dhcsousa in smithyhq/sqladmin#1030

Create form_details_query by @MaximDementyev in smithyhq/sqladmin#1038

fix: forward kwargs to SessionMiddleware in AuthenticationBackend by @vahidzhe in smithyhq/sqladmin#1036

Fixed overriding form_args in forms.py and widgets.py by @mmzeynalli in smithyhq/sqladmin#1044

New Contributors

@CHC383 made their first contribution in smithyhq/sqladmin#1056

@SAY-5 made their first contribution in smithyhq/sqladmin#1052

@dhcsousa made their first contribution in smithyhq/sqladmin#1030

Full Changelog: smithyhq/sqladmin@0.26.0...0.27.0

Changelog

Sourced from sqladmin[full]'s changelog.

Version 0.27.2: 2026-06-08

Changed

build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to Bootstrap v5 by @CHC383 in #1058

Fixed

fix: render column defaults on the create form by @dhcsousa in #1061

fix(base-view): sidebar link falls back to /admin when @expose method is named index by @Vansh-Sharma27 in #1062

Preserve list page after editing a record (#1055) by @Vansh-Sharma27 in #1063

New Contributors

@Vansh-Sharma27 made their first contribution in #1062

Full Changelog: 0.27.1...0.27.2

Version 0.27.1: 2026-06-05

Security

Fix advisory GHSA-ccg5-9c8w-xh6v: restrict ModelView.sort_query() to the configured column_sortable_list allow-list (self._sort_fields) and reject invalid sortBy values with HTTP 400, preventing attacker-controlled ordering across arbitrary model and related-model columns and avoiding uncaught AttributeError (HTTP 500) by @aminalaee.

Full Changelog: 0.27.0...0.27.1

Version 0.27.0: 2026-05-29

Added

feat: make admin logo width and height configurable (closes #1045) by @SAY-5 in #1052

Feature: after_model_change response by @dhcsousa in #1030

Create form_details_query by @MaximDementyev in #1038

Fixed

fix(list): fix the list view to limit the page width to viewport size by @CHC383 in #1056

fix: forward kwargs to SessionMiddleware in AuthenticationBackend by @vahidzhe in #1036

Fixed overriding form_args in forms.py and widgets.py by @mmzeynalli in #1044

Docs

Docs: add contributing page to documentation site by @vahidzhe in #1034

New Contributors

@CHC383 made their first contribution in #1056

@SAY-5 made their first contribution in #1052

@dhcsousa made their first contribution in #1030

... (truncated)

Commits

d666f7f Release 0.27.2
4aff82e build(deps): update to tabler v1.4.0, tabler-icons css v3.44.0 and migrate to...
5845cbe fix: preserve list page query string after editing a record (#1063)
8a2e8e3 fix(base-view): sidebar link falls back to /admin when @expose method is name...
5c2cda6 fix: render column defaults on the create form (#1061)
2203bc8 Update wtforms requirement from <3.2,>=3.1 to >=3.1,<3.3 (#1067)
be6f35e Bump mypy from 1.19.1 to 2.1.0 (#1066)
65b069a Version 0.27.1 (#1068)
741635f Merge commit from fork
0117498 Bump ruff from 0.15.12 to 0.15.15 (#1065)
Additional commits viewable in compare view

Updates coverage from 7.14.0 to 7.14.2

Changelog

Sourced from coverage's changelog.

Version 7.14.2 — 2026-06-20

Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

Version 7.14.1 — 2026-05-26

Fix: the HTML report used typographic niceties to make file paths more readable by adding a small amount of space around slashes. Those spaces interfered with searching the page for file paths of interest. Now the report uses CSS to accomplish the same visual tweak so that searches with slashes work correctly. Closes issue 2170_.

Add a 3.16 PyPI classifier <hugo-316_>_ since we test on the 3.16 main branch.

.. _issue 2170: coveragepy/coveragepy#2170 .. _hugo-316: https://mastodon.social/@hugovk/116588523571204490

.. _changes_7-14-0:

Commits

153f932 docs: sample HTML for 7.14.2
311bc67 docs: prep for 7.14.2
7f314be docs: thanks, Matthew Lloyd #2193
f960696 Fix: close SQLite connections from terminated threads (#2192) (#2193)
2429615 docs: fix a changelog entry
ced7f8a build: cibuildwheel 4.0.0 no longer has this enable option
30a567c chore: make upgrade
27c11f1 fix: write messages to stderr. #2197
bdbe01f chore: bump the action-dependencies group with 3 updates (#2191)
dc2fd3b chore: bump the action-dependencies group with 2 updates (#2188)
Additional commits viewable in compare view

Updates faker from 40.18.0 to 40.23.0

Release notes

Sourced from faker's releases.

Release v40.23.0

See CHANGELOG.md.

Release v40.22.0

See CHANGELOG.md.

Release v40.21.0

See CHANGELOG.md.

Release v40.20.0

See CHANGELOG.md.

Release v40.19.1

See CHANGELOG.md.

Release v40.19.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.23.0 - 2026-06-10

Add French social security numbers with Corsican codes (#2373). Thanks @dancergraham.

Fix typos in docstrings and comments (#2387). Thanks @Labib-Bin-Salam.

v40.22.0 - 2026-06-09

Add mr_IN person, address, and phone_number providers (#2367). Thanks @RedZapdos123.

Fix flaky test_optional by using seed and larger sample size (#2376). Thanks @tejasae-afk.

v40.21.0 - 2026-06-02

Add banks list for en_GB locale (#2363). Thanks @osolomientsev.

v40.20.0 - 2026-06-01

Add pan and gstin generators to en_IN SSN provider (#2357). Thanks @RedZapdos123.

Improve barcode provider test coverage (#2382). Thanks @lphuc2250gma.

Bump liskin/gh-problem-matcher-wrap from 3 to 4 (#2381). Thanks @dependabot[bot].

v40.19.1 - 2026-05-22

Fix shared state mutation in en_IN pincode_in_state (#2369). Thanks @RedZapdos123.

v40.19.0 - 2026-05-22

Add uuid1 and uuid7 providers to misc provider (#2344). Thanks @Krishnachaitanyakc.

Commits

f5fcbb6 Bump version: 40.22.0 → 40.23.0
baaccee 📝 Update CHANGELOG.md
8336b21 💄 Lint code
02bd52b French social security numbers - corsican codes (#2373)
22e7aca Fix typos in docstrings and comments (#2387)
c3a9a5b Bump version: 40.21.0 → 40.22.0
71393c6 📝 Update CHANGELOG.md
77896ac feat(locale): add mr_IN person, address, and phone_number providers (...
dc63614 Fixed flaky test_optional by using seed and larger sample size. (#2376)
8b06111 Bump version: 40.20.0 → 40.21.0
Additional commits viewable in compare view

Updates ipython from 9.13.0 to 9.14.1

Commits

352c35b release 9.14.1
df72b1f Add forward compatibility for pdb.Pdb's mode argument (#15235)
a957d81 Handle pdb.Pdb mode argument and test signature compatibility
3e1c054 ci: add zizmor GitHub Actions security analysis and harden workflows (#15238)
0181ae3 ci: add zizmor GitHub Actions security analysis and harden workflows
fb831cc back to dev
9d1f24b release 9.14.0
d8b9d11 Add IPython 9.14 release notes (#15228)
80cc1b9 Apply suggestions from code review
99feaad Prepare release notes for 9.14
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sqladmin[full]](https://github.com/smithyhq/sqladmin) | `0.26.0` | `0.27.2` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.14.0` | `7.14.2` | | [faker](https://github.com/joke2k/faker) | `40.18.0` | `40.23.0` | | [ipython](https://github.com/ipython/ipython) | `9.13.0` | `9.14.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | Updates `sqladmin[full]` from 0.26.0 to 0.27.2 - [Release notes](https://github.com/smithyhq/sqladmin/releases) - [Changelog](https://github.com/smithyhq/sqladmin/blob/main/CHANGELOG.md) - [Commits](smithyhq/sqladmin@0.26.0...0.27.2) Updates `coverage` from 7.14.0 to 7.14.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.14.0...7.14.2) Updates `faker` from 40.18.0 to 40.23.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v40.18.0...v40.23.0) Updates `ipython` from 9.13.0 to 9.14.1 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.13.0...9.14.1) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) --- updated-dependencies: - dependency-name: sqladmin[full] dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: coverage dependency-version: 7.14.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: faker dependency-version: 40.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ipython dependency-version: 9.14.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 29, 2026

dependabot Bot requested a review from a team as a code owner June 29, 2026 19:36

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dependencies group across 1 directory with 5 updates#316

Bump the dependencies group across 1 directory with 5 updates#316
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-aab6f62eee

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

0.27.2

What's Changed

New Contributors

0.27.1

Security

0.27.0

What's Changed

New Contributors

Version 0.27.2: 2026-06-08

Changed

Fixed

New Contributors

Version 0.27.1: 2026-06-05

Security

Version 0.27.0: 2026-05-29

Added

Fixed

Docs

New Contributors

Version 7.14.2 — 2026-06-20

Version 7.14.1 — 2026-05-26

Release v40.23.0

Release v40.22.0

Release v40.21.0

Release v40.20.0

Release v40.19.1

Release v40.19.0

v40.23.0 - 2026-06-10

v40.22.0 - 2026-06-09

v40.21.0 - 2026-06-02

v40.20.0 - 2026-06-01

v40.19.1 - 2026-05-22

v40.19.0 - 2026-05-22

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants