Bump the dependencies group in /.config with 7 updates (#4459)

dependabot[bot] · abhikdps · web-flow · commit 5f0671b6d22b · 2025-06-15T07:19:37.000Z
Bumps the dependencies group in /.config with 7 updates: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2025.4.26` | `2025.6.15` | | [coverage](https://github.com/nedbat/coveragepy) | `7.8.2` | `7.9.1` | | [cryptography](https://github.com/pyca/cryptography) | `45.0.3` | `45.0.4` | | [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.4` | | ruamel-yaml | `0.18.13` | `0.18.14` | | [zipp](https://github.com/jaraco/zipp) | `3.22.0` | `3.23.0` | Updates `certifi` from 2025.4.26 to 2025.6.15 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/certifi/python-certifi/commit/e767d5938eddddf804216cec93a55c85129c5f2d"><code>e767d59</code></a> 2025.06.15 (<a href="https://redirect.github.com/certifi/python-certifi/issues/357">#357</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/3e7076557d66b598fcca462e422dc988f09a6802"><code>3e70765</code></a> Bump actions/setup-python from 5.5.0 to 5.6.0</li> <li><a href="https://github.com/certifi/python-certifi/commit/9afd2ff407b8a0638988c952a6636b8dd623af7c"><code>9afd2ff</code></a> Bump actions/download-artifact from 4.2.1 to 4.3.0</li> <li><a href="https://github.com/certifi/python-certifi/commit/d7c816cbc9cf621b3ddc8cd7fa7eda3f36982620"><code>d7c816c</code></a> remove code that's no longer required that 3.7 is our minimum (<a href="https://redirect.github.com/certifi/python-certifi/issues/351">#351</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/189961379209973abd0dd6304297f03e2359e1b9"><code>1899613</code></a> Declare setuptools as the build backend in pyproject.toml (<a href="https://redirect.github.com/certifi/python-certifi/issues/350">#350</a>)</li> <li><a href="https://github.com/certifi/python-certifi/commit/c8741423d67e1025c0bdad5225ded05cf962f207"><code>c874142</code></a> update CI for ubuntu 20.04 deprecation (<a href="https://redirect.github.com/certifi/python-certifi/issues/348">#348</a>)</li> <li>See full diff in <a href="https://github.com/certifi/python-certifi/compare/2025.04.26...2025.06.15">compare view</a></li> </ul> </details> <br /> Updates `coverage` from 7.8.2 to 7.9.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage's changelog</a>.</em></p> <blockquote> <h2>Version 7.9.1 — 2025-06-13</h2> <ul> <li> <p>The &quot;no-ctracer&quot; warning is not issued for Python pre-release versions. Coverage doesn't ship compiled wheels for those versions, so this was far too noisy.</p> </li> <li> <p>On Python 3.14+, the &quot;sysmon&quot; core is now the default if it's supported for your configuration. Plugins and dynamic contexts are still not supported with it.</p> </li> </ul> <p>.. _changes_7-9-0:</p> <h2>Version 7.9.0 — 2025-06-11</h2> <ul> <li> <p>Added a <code>[run] core</code> configuration setting to specify the measurement core, which was previously only available through the COVERAGE_CORE environment variable. Finishes <code>issue 1746</code>_.</p> </li> <li> <p>Fixed incorrect rendering of f-strings with doubled braces, closing <code>issue 1980</code>_.</p> </li> <li> <p>If the C tracer core can't be imported, a warning (&quot;no-ctracer&quot;) is issued with the reason.</p> </li> <li> <p>The C tracer core extension module now conforms to <code>PEP 489</code><em>, closing <code>issue 1977</code></em>. Thanks, <code>Adam Turner &lt;pull 1978_&gt;</code>_.</p> </li> <li> <p>Fixed a &quot;ValueError: min() arg is an empty sequence&quot; error caused by strange empty modules, found by <code>oss-fuzz</code>_.</p> </li> </ul> <p>.. _issue 1746: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1746">nedbat/coveragepy#1746</a> .. _issue 1977: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1977">nedbat/coveragepy#1977</a> .. _pull 1978: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1978">nedbat/coveragepy#1978</a> .. _issue 1980: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1980">nedbat/coveragepy#1980</a> .. _PEP 489: <a href="https://peps.python.org/pep-0489">https://peps.python.org/pep-0489</a> .. _oss-fuzz: <a href="https://google.github.io/oss-fuzz/">https://google.github.io/oss-fuzz/</a></p> <p>.. _changes_7-8-2:</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nedbat/coveragepy/commit/4fa1b717978c2d9e40636a10363b618e152f4c4e"><code>4fa1b71</code></a> docs: sample HTML for 7.9.1</li> <li><a href="https://github.com/nedbat/coveragepy/commit/5cf757b42d1649ccbc74488471ab9270cb7d99f2"><code>5cf757b</code></a> docs: prep for 7.9.1</li> <li><a href="https://github.com/nedbat/coveragepy/commit/bea6204982b75f6a20f5afbf3534bd3776e126dd"><code>bea6204</code></a> fix: better defaulting of core</li> <li><a href="https://github.com/nedbat/coveragepy/commit/7795441563fb0afe9439a857a5e0df50336f73dd"><code>7795441</code></a> fix: fewer warnings, default to sys.monitoring on 3.14+</li> <li><a href="https://github.com/nedbat/coveragepy/commit/18aa07456965c7d26e028aebaf825b96b7638d74"><code>18aa074</code></a> fix: some custom builds don't have <strong>file</strong></li> <li><a href="https://github.com/nedbat/coveragepy/commit/8c5bf659f4b4412685a828c01870cfc9a23186ac"><code>8c5bf65</code></a> chore: make upgrade</li> <li><a href="https://github.com/nedbat/coveragepy/commit/128c4f4e452f08e52fe1d6fbebb8392ae2dc7297"><code>128c4f4</code></a> build: bump version to 7.9.1</li> <li><a href="https://github.com/nedbat/coveragepy/commit/452d86ffa16cd0c1b729c7d206f59bc1010aee94"><code>452d86f</code></a> docs: sample HTML for 7.9.0</li> <li><a href="https://github.com/nedbat/coveragepy/commit/a670927ae6d248f369d54fbe22d9546b6a25c25e"><code>a670927</code></a> docs: prep for 7.9.0</li> <li><a href="https://github.com/nedbat/coveragepy/commit/3b0cb870f6abac8e4a7607094c467a7d766a44f4"><code>3b0cb87</code></a> build: windows 3.14 is fixed</li> <li>Additional commits viewable in <a href="https://github.com/nedbat/coveragepy/compare/7.8.2...7.9.1">compare view</a></li> </ul> </details> <br /> Updates `cryptography` from 45.0.3 to 45.0.4 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p> <blockquote> <p>45.0.4 - 2025-06-09</p> <pre><code> * Fixed decrypting PKCS#8 files encrypted with SHA1-RC4. (This is not considered secure, and is supported only for backwards compatibility.) <p>.. _v45-0-3:<br /> </code></pre></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pyca/cryptography/commit/678c0c59f743e3b301fbd34f1d26112db0cc2216"><code>678c0c5</code></a> prepare for 45.0.4 release (<a href="https://redirect.github.com/pyca/cryptography/issues/13058">#13058</a>)</li> <li>See full diff in <a href="https://github.com/pyca/cryptography/compare/45.0.3...45.0.4">compare view</a></li> </ul> </details> <br /> Updates `requests` from 2.32.3 to 2.32.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/releases">requests's releases</a>.</em></p> <blockquote> <h2>v2.32.4</h2> <h2>2.32.4 (2025-06-10)</h2> <p><strong>Security</strong></p> <ul> <li>CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (<a href="https://redirect.github.com/psf/requests/issues/6965">#6965</a>)</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Numerous documentation improvements</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Added support for pypy 3.11 for Linux and macOS. (<a href="https://redirect.github.com/psf/requests/issues/6926">#6926</a>)</li> <li>Dropped support for pypy 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/6926">#6926</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's changelog</a>.</em></p> <blockquote> <h2>2.32.4 (2025-06-10)</h2> <p><strong>Security</strong></p> <ul> <li>CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Numerous documentation improvements</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Added support for pypy 3.11 for Linux and macOS.</li> <li>Dropped support for pypy 3.9 following its end of support.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/psf/requests/commit/021dc729f0b71a3030cefdbec7fb57a0e80a6cfd"><code>021dc72</code></a> Polish up release tooling for last manual release</li> <li><a href="https://github.com/psf/requests/commit/821770e822a20a21b207b3907ea83878bda1d396"><code>821770e</code></a> Bump version and add release notes for v2.32.4</li> <li><a href="https://github.com/psf/requests/commit/59f8aa2adf1d3d06bcbf7ce6b13743a1639a5401"><code>59f8aa2</code></a> Add netrc file search information to authentication documentation (<a href="https://redirect.github.com/psf/requests/issues/6876">#6876</a>)</li> <li><a href="https://github.com/psf/requests/commit/5b4b64c3467fd7a3c03f91ee641aaa348b6bed3b"><code>5b4b64c</code></a> Add more tests to prevent regression of CVE 2024 47081</li> <li><a href="https://github.com/psf/requests/commit/7bc45877a86192af77645e156eb3744f95b47dae"><code>7bc4587</code></a> Add new test to check netrc auth leak (<a href="https://redirect.github.com/psf/requests/issues/6962">#6962</a>)</li> <li><a href="https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef"><code>96ba401</code></a> Only use hostname to do netrc lookup instead of netloc</li> <li><a href="https://github.com/psf/requests/commit/7341690e842a23cf18ded0abd9229765fa88c4e2"><code>7341690</code></a> Merge pull request <a href="https://redirect.github.com/psf/requests/issues/6951">#6951</a> from tswast/patch-1</li> <li><a href="https://github.com/psf/requests/commit/6716d7c9f29df636643fa2489f98890216525cb0"><code>6716d7c</code></a> remove links</li> <li><a href="https://github.com/psf/requests/commit/a7e1c745dc23c18e836febd672416ed0c5d8d8ae"><code>a7e1c74</code></a> Update docs/conf.py</li> <li><a href="https://github.com/psf/requests/commit/c799b8167a13416833ad3b4f3298261a477e826f"><code>c799b81</code></a> docs: fix dead links to kenreitz.org</li> <li>Additional commits viewable in <a href="https://github.com/psf/requests/compare/v2.32.3...v2.32.4">compare view</a></li> </ul> </details> <br /> Updates `ruamel-yaml` from 0.18.13 to 0.18.14 Updates `zipp` from 3.22.0 to 3.23.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jaraco/zipp/blob/main/NEWS.rst">zipp's changelog</a>.</em></p> <blockquote> <h1>v3.23.0</h1> <h2>Features</h2> <ul> <li>Add a compatibility shim for Python 3.13 and earlier. (<a href="https://redirect.github.com/jaraco/zipp/issues/145">#145</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jaraco/zipp/commit/ccb41118d730036782d809b71773b719c48a680d"><code>ccb4111</code></a> Finalize</li> <li><a href="https://github.com/jaraco/zipp/commit/5b5725d143f7bbcddabd91cfed3a708f24a3ed66"><code>5b5725d</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/zipp/issues/146">#146</a> from jaraco/debt/backport-<a href="https://redirect.github.com/jaraco/zipp/issues/133337">gh-133337</a></li> <li><a href="https://github.com/jaraco/zipp/commit/c1dca821330e29b11d55dde216464656480c6740"><code>c1dca82</code></a> Remove unused dependency.</li> <li><a href="https://github.com/jaraco/zipp/commit/717d770655b041c7b5e94cb89393a62761058582"><code>717d770</code></a> Add a compatibility shim for Python 3.13 and earlier.</li> <li><a href="https://github.com/jaraco/zipp/commit/d860de467a5887a6f09e5b66e4ef51f2e9c516fa"><code>d860de4</code></a> <a href="https://redirect.github.com/jaraco/zipp/issues/133306">gh-133306</a>: Use \z instead of \Z in regular expressions in the stdlib (<a href="https://redirect.github.com/jaraco/zipp/issues/133337">GH-133337</a>)</li> <li>See full diff in <a href="https://github.com/jaraco/zipp/compare/v3.22.0...v3.23.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Abhinav Anand <abanand@redhat.com>
diff --git a/.config/constraints.txt b/.config/constraints.txt
@@ -17,16 +17,16 @@ bracex==2.5.post1         # via wcmatch
 cachetools==6.0.0         # via tox
 cairocffi==1.7.1          # via cairosvg
 cairosvg==2.7.1           # via mkdocs-ansible
-certifi==2025.4.26        # via requests
+certifi==2025.6.15        # via requests
 cffi==1.17.1              # via cairocffi, cryptography, onigurumacffi
 cfgv==3.4.0               # via pre-commit
 chardet==5.2.0            # via tox
 charset-normalizer==3.4.2  # via requests
 click==8.2.1              # via black, click-help-colors, mkdocs, pydoclint, molecule (pyproject.toml)
 click-help-colors==0.9.4  # via molecule (pyproject.toml)
 colorama==0.4.6           # via griffe, mkdocs-material, tox
-coverage==7.8.2           # via molecule (pyproject.toml)
-cryptography==45.0.3      # via ansible-core
+coverage==7.9.1           # via molecule (pyproject.toml)
+cryptography==45.0.4      # via ansible-core
 csscompressor==0.9.5      # via mkdocs-minify-plugin
 cssselect2==0.8.0         # via cairosvg
 defusedxml==0.7.1         # via cairosvg
@@ -107,10 +107,10 @@ python-dateutil==2.9.0.post0  # via ghp-import, mkdocs-macros-plugin
 pyyaml==6.0.2             # via ansible-builder, ansible-compat, ansible-core, ansible-lint, ansible-navigator, ansible-runner, mkdocs, mkdocs-get-deps, mkdocs-macros-plugin, pre-commit, pymdown-extensions, pyyaml-env-tag, yamllint, molecule (pyproject.toml)
 pyyaml-env-tag==1.1       # via mkdocs
 referencing==0.36.2       # via ansible-lint, jsonschema, jsonschema-specifications, types-jsonschema
-requests==2.32.3          # via docker, linkchecker, mkdocs-htmlproofer-plugin, mkdocs-material, molecule (pyproject.toml)
+requests==2.32.4          # via docker, linkchecker, mkdocs-htmlproofer-plugin, mkdocs-material, molecule (pyproject.toml)
 rich==14.0.0              # via enrich, molecule (pyproject.toml)
 rpds-py==0.25.1           # via jsonschema, referencing
-ruamel-yaml==0.18.13      # via ansible-lint
+ruamel-yaml==0.18.14      # via ansible-lint
 ruff==0.11.13             # via molecule (pyproject.toml)
 setuptools==80.9.0        # via pbr
 six==1.17.0               # via python-dateutil
@@ -133,7 +133,7 @@ watchdog==6.0.0           # via mkdocs
 wcmatch==10.0             # via ansible-lint, molecule (pyproject.toml)
 webencodings==0.5.1       # via cssselect2, tinycss2
 yamllint==1.37.1          # via ansible-lint
-zipp==3.22.0              # via importlib-metadata
+zipp==3.23.0              # via importlib-metadata
 
 # The following packages were excluded from the output:
 # ansible-core
