Skip to content

Bump pygments from 2.19.2 to 2.20.0#11

Open
dependabot[bot] wants to merge 10 commits intomainfrom
dependabot/uv/pygments-2.20.0
Open

Bump pygments from 2.19.2 to 2.20.0#11
dependabot[bot] wants to merge 10 commits intomainfrom
dependabot/uv/pygments-2.20.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps pygments from 2.19.2 to 2.20.0.

Release notes

Sourced from pygments's releases.

2.20.0

  • New lexers:

  • Updated lexers:

    • archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)
    • ASN.1: Recognize minus sign and fix range operator (#3014, #3060)
    • C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)
    • ComponentPascal: Fix analyse_text (#3028, #3032)
    • Coq renamed to Rocq (#2883, #2908)
    • Cython: Various improvements (#2932, #2933)
    • Debian control: Improve architecture parsing (#3052)
    • Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)
    • Fennel: Various improvements (#2911)
    • Haskell: Handle escape sequences in character literals (#3069, #1795)
    • Java: Add module keywords (#2955)
    • Lean4: Add operators ]', ]?, ]! (#2946)
    • LESS: Support single-line comments (#3005)
    • LilyPond: Update to 2.25.29 (#2974)
    • LLVM: Support C-style comments (#3023, #2978)
    • Lua(u): Fix catastrophic backtracking (#3047)
    • Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)
    • Mathematica: Various improvements (#2957)
    • meson: Add additional operators (#2919)
    • MySQL: Update keywords (#2970)
    • org-Mode: Support both schedule and deadline (#2899)
    • PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)
    • PostgreSQL: Add more keywords (#2985)
    • protobuf: Fix namespace tokenization (#2929)
    • Python: Add t-string support (#2973, #3009, #3010)
    • Tablegen: Fix infinite loop (#2972, #2940)
    • Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)
    • TOML: Support TOML 1.1.0 (#3026, #3027)
    • Turtle: Allow empty comment lines (#2980)
    • XML: Added .xbrl as file ending (#2890, #2891)
  • Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

  • Various improvements to autopygmentize (#2894)

  • Update onedark style to support more token types (#2977)

  • Update rtt style to support more token types (#2895)

  • Cache entry points to improve performance (#2979)

  • Fix xterm-256 color table (#3043)

  • Fix kwargs dictionary getting mutated on each call (#3044)

Changelog

Sourced from pygments's changelog.

Version 2.20.0

(released March 29th, 2026)

  • New lexers:

  • Updated lexers:

    • archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)
    • ASN.1: Recognize minus sign and fix range operator (#3014, #3060)
    • C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)
    • ComponentPascal: Fix analyse_text (#3028, #3032)
    • Coq renamed to Rocq (#2883, #2908)
    • Cython: Various improvements (#2932, #2933)
    • Debian control: Improve architecture parsing (#3052)
    • Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)
    • Fennel: Various improvements (#2911)
    • Haskell: Handle escape sequences in character literals (#3069, #1795)
    • Java: Add module keywords (#2955)
    • Lean4: Add operators ]', ]?, ]! (#2946)
    • LESS: Support single-line comments (#3005)
    • LilyPond: Update to 2.25.29 (#2974)
    • LLVM: Support C-style comments (#3023, #2978)
    • Lua(u): Fix catastrophic backtracking (#3047)
    • Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)
    • Mathematica: Various improvements (#2957)
    • meson: Add additional operators (#2919)
    • MySQL: Update keywords (#2970)
    • org-Mode: Support both schedule and deadline (#2899)
    • PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)
    • PostgreSQL: Add more keywords (#2985)
    • protobuf: Fix namespace tokenization (#2929)
    • Python: Add t-string support (#2973, #3009, #3010)
    • Tablegen: Fix infinite loop (#2972, #2940)
    • Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)
    • TOML: Support TOML 1.1.0 (#3026, #3027)
    • Turtle: Allow empty comment lines (#2980)
    • XML: Added .xbrl as file ending (#2890, #2891)
  • Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

  • Various improvements to autopygmentize (#2894)

  • Update onedark style to support more token types (#2977)

  • Update rtt style to support more token types (#2895)

  • Cache entry points to improve performance (#2979)

  • Fix xterm-256 color table (#3043)

  • Fix kwargs dictionary getting mutated on each call (#3044)

Commits
  • 708197d Fix underline length.
  • 1d4538a Prepare 2.20 release.
  • 2ceaee4 Update CHANGES.
  • e3a3c54 Fix Haskell lexer: handle escape sequences in character literals (#3069)
  • d7c3453 Merge pull request #3071 from pygments/harden-html-formatter
  • 0f97e7c Harden the HTML formatter against CSS.
  • 9f981b2 Update CHANGES.
  • 1d88915 Update CHANGES.
  • c3d93ad Fix ASN.1 lexer: recognize minus sign and fix range operator (#3060)
  • 4f06bcf fix bad behaving backtracking regex in CommonLispLexer
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

RaghavChamadiya and others added 10 commits March 28, 2026 19:32
* Add open source governance files and clean up tracked files

- CODEOWNERS: @RaghavChamadiya and @swati510 as code owners
- SECURITY.md: vulnerability reporting policy
- CONTRIBUTING.md: setup guide and PR workflow
- Issue and PR templates
- Gitignore local dev scripts, API keys, and internal docs

* Fix security vulnerabilities and restore uv.lock for CI

- Upgrade next-mdx-remote 5.0.0 → 6.0.0 (arbitrary code execution fix)
- Upgrade next 15.5.13 → 15.5.14 (image cache growth fix)
- Fix picomatch, brace-expansion, yaml transitive vulnerabilities
- Pin next to ~15.5.14 to prevent accidental major version jumps
- Re-track uv.lock (needed by CI for reproducible Python installs)

* Restore [project] tables in sub-package pyproject.toml for uv sync

uv sync --all-packages requires a [project] table when package = true.
Added minimal project metadata to core, cli, and server sub-packages.

* Fix ruff lint errors and skip tests for missing optional deps

- Fix all ruff lint violations across packages/ and tests/
- Add pytest.importorskip for anthropic and openai test modules
  so CI passes without optional provider SDKs installed

* Update uv.lock after sub-package pyproject.toml changes

* Disable mypy strict mode in CI until type annotations are cleaned up

Relax mypy config and skip mypy CI step — the codebase has 38 type
annotation issues that need proper fixes. Ruff still catches the
important lint and formatting errors.

* Fix test failures: skip optional SDK tests, fix version assertion

- Add pytest.importorskip for gemini and openai embedder test modules
- Update test_version assertion from 0.1.0 to 0.1.2

* Add ESLint config to prevent next lint interactive prompt on CI
Improvements:
- Adaptive cascade budget: scales 10-50 based on change magnitude
- LLM output validation: cross-checks backtick refs against AST symbols
- Generation report: rich table with token counts, cost estimate, and warnings
- Framework-aware synthetic edges: conftest, Django, FastAPI, Flask patterns
- Doctor --repair: three-store consistency checks with auto-repair

Documentation:
- graph-algorithms-guide.md: full guide to all graph algorithms with math
- architecture-guide.md: complete architecture walkthrough
- deep-dives-guide.md: dead code, decisions, search, webhooks, cascades
- critical-analysis.md: failure analysis, probabilities, and improvements
- Fix ruff lint: remove unused imports, combine nested ifs, rename unused
  loop vars, simplify embedder resolution in doctor --repair
- Apply ruff formatting to all modified files
- Fix test_creates_db_and_state: match actual "init complete" output
- Fix test_mcp_dead_code_and_freshness_flow: use tiers["high"]["findings"]
  to match the actual get_dead_code return shape
- Fix test_gemini_live: skip when google-genai module is not installed
…oard stats

- Fix standalone server.js path for Next.js monorepo builds (packages/web/server.js)
- Add cwd-based lookup so _find_local_web works from pip-installed venvs
- Fix server-side API client to use REPOWISE_API_URL instead of defaulting to port 80
- Replace hardcoded dashboard stats with real data from getRepoStats
- Add .sfdx/ to .gitignore
* Add Claude Code plugin with MCP server, slash commands, and model-invoked skills

Plugin at plugins/claude-code/ provides frictionless Repowise setup via Claude Code:
- Auto-registers MCP server (8 tools) via .mcp.json
- 5 slash commands: /repowise:init, status, update, search, reindex
- 4 model-invoked skills: codebase exploration, pre-modification risk check,
  architectural decisions, dead code cleanup
- /repowise:init handles full setup flow (install, provider selection, indexing)
- Marketplace-ready with plugin.json and marketplace.json

* Update README with Claude Code plugin install path, add plugin developer guide

- Add plugin as the recommended install method in main README
- Add --index-only quick start option
- Link to plugin repo from MCP tools section
- Fix marketplace org reference (repowise-dev, not repowise)
- Add DEVELOPER.md with plugin maintenance and release workflow
- Write .mcp.json at repo root so Claude Code auto-discovers the MCP server
  (with merge semantics to preserve other MCP servers)
- Move CLAUDE.md generation to .claude/CLAUDE.md for Claude Code project config
- Strengthen template language (MUST/ALWAYS/MANDATORY) to compel tool usage
- Update format_setup_instructions to reflect auto-config for Claude Code
- Fix test_init_no_provider: patch GOOGLE_API_KEY and GEMINI_API_KEY env vars
* Auto-configure MCP and write .claude/CLAUDE.md during repowise init

- Write .mcp.json at repo root so Claude Code auto-discovers the MCP server
  (with merge semantics to preserve other MCP servers)
- Move CLAUDE.md generation to .claude/CLAUDE.md for Claude Code project config
- Strengthen template language (MUST/ALWAYS/MANDATORY) to compel tool usage
- Update format_setup_instructions to reflect auto-config for Claude Code
- Fix test_init_no_provider: patch GOOGLE_API_KEY and GEMINI_API_KEY env vars


* graph beautification

---------
* Add Claude Code plugin with MCP server, slash commands, and model-invoked skills

Plugin at plugins/claude-code/ provides frictionless Repowise setup via Claude Code:
- Auto-registers MCP server (8 tools) via .mcp.json
- 5 slash commands: /repowise:init, status, update, search, reindex
- 4 model-invoked skills: codebase exploration, pre-modification risk check,
  architectural decisions, dead code cleanup
- /repowise:init handles full setup flow (install, provider selection, indexing)
- Marketplace-ready with plugin.json and marketplace.json

* Update README with Claude Code plugin install path, add plugin developer guide

- Add plugin as the recommended install method in main README
- Add --index-only quick start option
- Link to plugin repo from MCP tools section
- Fix marketplace org reference (repowise-dev, not repowise)
- Add DEVELOPER.md with plugin maintenance and release workflow
Bumps [pygments](https://github.com/pygments/pygments) from 2.19.2 to 2.20.0.
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.19.2...2.20.0)

---
updated-dependencies:
- dependency-name: pygments
  dependency-version: 2.20.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 30, 2026
@RaghavChamadiya
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 6, 2026

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants