Skip to content

Bump the python-dependencies group across 1 directory with 4 updates - #10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-bb98843f08
Open

Bump the python-dependencies group across 1 directory with 4 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-bb98843f08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 4 updates in the / directory: google-auth, lxml, playwright and ruff.

Updates google-auth from 2.55.2 to 2.56.3

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.3

2.56.3 (2026-08-06)

Bug Fixes

  • auth: avoid creating mTLS SSL context for custom async transports (#17825) (fbe33f9), refs #17622
  • auth: only trigger mTLS certificate rotation on mTLS endpoints (#17928) (f7b49ea)
  • auth: properly extract stdout from gnubby webauthn plugin failures (#17885) (744e826)
  • deduplicate x-goog-api-client headers (#17616) (6167e41)
  • oauth2: avoid redundant JWKS network fetches (#17891) (de53298)

Performance Improvements

  • auth: use generator expression in any() to allow short-circuiting (735e565)
  • auth: use generator expression in any() to allow short-circuiting (#17937) (735e565)
Commits
  • 905bfe3 chore: release main (#17832)
  • ad8f93c fix(api-core): use truthiness check in setup_request_id to support proto-plus...
  • 06dd2c0 chore: bump google-api-core to 2.28.0 (#18003)
  • 08f21a6 fix(proto-plus): add context to TypeErrors during message manipulation (#17682)
  • 32fd479 tests(spanner): avoid table name collisions in tests (#18001)
  • 2207ca6 feat: add pandas-gbq capability helper (#17957)
  • 6167e41 fix: deduplicate x-goog-api-client headers (#17616)
  • 71bc622 docs: add connector libraries overview table to package README (#17939)
  • 1b5c48b fix(bigframes): fix field name typos for ai.generate* functions (#17983)
  • f64ada2 fix: avoid retaining routing parameter instances in cache (#17961)
  • Additional commits viewable in compare view

Updates lxml from 6.1.1 to 6.1.2

Changelog

Sourced from lxml's changelog.

6.1.2 (2026-08-18)

  • GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

  • Some minor corrections for error handling cases.

Other changes

  • Built with Cython 3.2.9.
Commits
  • f2874e9 Update release date.
  • 687a295 Build: Exclude Py3.8 from windows-arm builds.
  • acadc56 Build: Remove outdated build target.
  • 59f93eb Build: Split old-Linux and other-Py3.8 builds.
  • 923df83 Build: Fix manylinux2014 build.
  • 975cc83 Build: Fix Px3.8 build setup.
  • 09e5d3e Build: Fix cibuildwheel version.
  • 998cf50 Build: Build Py3.8 wheels only once, not in every build job.
  • 5567037 Build: Exclude Py3.15 from 32bit builds.
  • 904db40 Build: Update cibuildwheel to include Py3.15.
  • Additional commits viewable in compare view

Updates playwright from 1.61.0 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format. Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

page.screenshot(path="homepage.webp", quality=50)

New APIs

  • New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scrolling into view.
  • New locator.wait_for_function() waits until a function called with the matching element returns a truthy value.
  • New apiResponse.timing() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151
Commits
  • 3b7c24c chore: roll Playwright to 1.62.0 (#3161)
  • 1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
  • 8335307 build(deps): bump greenlet from 3.5.3 to 3.5.4 (#3163)
  • 5c71b2b build(deps): bump mypy from 2.1.0 to 2.3.0 (#3150)
  • d0c8d03 build(deps-dev): bump setuptools-scm from 9.2.2 to 10.2.1 (#3151)
  • ca0319c build(deps): bump build from 1.4.4 to 1.5.0 (#3152)
  • 53802fe build(deps): bump requests from 2.33.0 to 2.34.2 (#3153)
  • 9bc998f build(deps): bump actions/setup-python from 6 to 7 in the actions group (#3154)
  • 9a10128 perf: speed up Python stack capture (#3147)
  • c3eff76 fix: show not_ prefix in call log when negative assertions fail (#3033)
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 4 updates in the / directory: [google-auth](https://github.com/googleapis/google-cloud-python), [lxml](https://github.com/lxml/lxml), [playwright](https://github.com/microsoft/playwright-python) and [ruff](https://github.com/astral-sh/ruff).


Updates `google-auth` from 2.55.2 to 2.56.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.2...google-auth-v2.56.3)

Updates `lxml` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.61.0...v1.62.0)

Updates `ruff` from 0.15.21 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.4)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-version: 2.56.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: playwright
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants