Skip to content

Bump the pip-dependencies group across 1 directory with 7 updates - #492

Merged
chadlwilson merged 1 commit into
masterfrom
dependabot/pip/pip-dependencies-8e8299bd1c
Nov 1, 2026
Merged

Bump the pip-dependencies group across 1 directory with 7 updates#492
chadlwilson merged 1 commit into
masterfrom
dependabot/pip/pip-dependencies-8e8299bd1c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-dependencies group with 7 updates in the / directory:

Package From To
grpcio 1.84.0 1.85.0
grpcio-tools 1.84.0 1.85.0
setuptools 84.1.0 84.2.1
coverage 7.16.2 7.17.0
certifi 2026.10.19 2026.10.23
charset-normalizer 3.5.1 3.5.2
more-itertools 11.1.0 11.2.1

Updates grpcio from 1.84.0 to 1.85.0

Release notes

Sourced from grpcio's releases.

Release v1.85.0

This is release 1.85.0 (googol) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [security] Update gRPC repo roots. (#43717)
  • [experiments] Add map_host_header_to_authority experiment. (#43561)
  • [Security] Add MLKEM1024 as a key exchange option. (#43514)
  • Remove OpenSSL1.0.2 Support. (#43466)
  • [Autosharding-LB][Part-1] Implementing A119. (#43406)
  • [OpenSSL] Add support for OpenSSL 4. (#41932)
  • [A110] Add child channel options. (#43314)

C#

  • [Build] Disambiguate protobuf_version in templates. (#43433)

Python

  • [Python][AIO] Fixed data race in PollerCompletionQueue. (#43429)
  • [Python] Fix SyncServicerContext abort not raising exception. (#43126)
  • [Python] Fixed channelz module leak. (#43196)
  • [Python] Fixed CSDS memory leak. (#43202)
  • [Python] Unpin Cython dependency for source builds. (#43378)

Release v1.85.0-pre1

This is a prerelease of gRPC Core 1.85.0 (googol).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.84.2

This is release gRPC Core 1.84.2 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Python

  • Fixes Denial of service in Health Watch RPC (#43784)

... (truncated)

Commits
  • a83eb27 update g stands for correctly
  • cc92f57 [Release] Bump version to 1.85.0 (on v1.85.x branch) (#43729)
  • 7f3e5d4 [Backport][v1.85.x][security] Update gRPC repo roots. (#43717)
  • 08689a5 [Backport][v1.85.x][CI][macOS] Add retries to git and pip for flaky macOS job...
  • cc11ee7 [Backport][v1.85.x][export] Validate EDS locality priority against number of ...
  • 0e02b12 [Release] Bump version to 1.85.0-pre1 (on v1.85.x branch) (#43591)
  • e124571 [Release] Bump core version to 58.0.0 for upcoming release (#43582)
  • 08455f8 Add warning message for WORKSPACE deprecation (#41934)
  • 268625e fix(combiner): handle transient null final_list.head on ARM64 (#43161)
  • e0e7b19 Revert "[Build] Update envoy api version to 0.0.0-20260901-005c18a (#43585)
  • Additional commits viewable in compare view

Updates grpcio-tools from 1.84.0 to 1.85.0

Release notes

Sourced from grpcio-tools's releases.

Release v1.85.0

This is release 1.85.0 (googol) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [security] Update gRPC repo roots. (#43717)
  • [experiments] Add map_host_header_to_authority experiment. (#43561)
  • [Security] Add MLKEM1024 as a key exchange option. (#43514)
  • Remove OpenSSL1.0.2 Support. (#43466)
  • [Autosharding-LB][Part-1] Implementing A119. (#43406)
  • [OpenSSL] Add support for OpenSSL 4. (#41932)
  • [A110] Add child channel options. (#43314)

C#

  • [Build] Disambiguate protobuf_version in templates. (#43433)

Python

  • [Python][AIO] Fixed data race in PollerCompletionQueue. (#43429)
  • [Python] Fix SyncServicerContext abort not raising exception. (#43126)
  • [Python] Fixed channelz module leak. (#43196)
  • [Python] Fixed CSDS memory leak. (#43202)
  • [Python] Unpin Cython dependency for source builds. (#43378)

Release v1.85.0-pre1

This is a prerelease of gRPC Core 1.85.0 (googol).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.84.2

This is release gRPC Core 1.84.2 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Python

  • Fixes Denial of service in Health Watch RPC (#43784)

... (truncated)

Commits

Updates setuptools from 84.1.0 to 84.2.1

Changelog

Sourced from setuptools's changelog.

v84.2.1

Bugfixes

  • Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
  • Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when Extension.py_limited_api is enabled. These builds now use their version-specific extension suffix instead of using the unsupported .abi3t suffix. (#5363)

Improved Documentation

  • Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0

Features

  • Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
  • Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

  • Use target sysconfig data for stable-ABI extension filenames. (#5351)
Commits

Updates coverage from 7.16.2 to 7.17.0

Release notes

Sourced from coverage's releases.

7.17.0

Version 7.17.0 — 2026-10-22

  • Dropped support for Python 3.10.
  • Binary wheels are now provided for iOS and Android. This allows the use of the optimized C tracer on mobile platforms.
  • Fix: three or more levels of nested with statements could make a with line look like a branch with an exit that can never happen. Using the sys.monitoring core, these phantom branches were reported as partial. Other cores hid the problem but still counted the phantom branches in the total. Closes issue 1987.
  • Fix: a comment or string that merely mentioned if True: or while True: could mark its line as a branch that is known to be partial, so a branch that never ran was reported as taken. These built-in patterns now only match at the start of the statement. Closes issue 2314.
  • Fix: region detection missed functions defined in unusual places, such as else and except clauses. This is now fixed.
  • Fix: recent versions of the lcov tool complain if the same function name appears more than once in a report. Python can have multiple same-named functions in a few ways, for example, getters/setters or conditionally defined functions. These are now disambiguated by adding a @<line number> suffix to the function name. Fixes issue 2335.
  • Fix: The “Can’t combine statement coverage data with branch data” error now names the two data files it couldn’t combine. The error description in the docs now lists common causes and how to find the process that wrote the file.
  • Fix: at coverage totals close to 0 or 100, the XML report could get incorrect line-rate values like 8.333e-05 or 1. This is now fixed, closing issue 2293 and issue 2294.
  • Fix: a parallel data file saved more than once kept the hash of its first save in its file name. Combining could then skip it as a duplicate of another file that had the same data at that point, and delete it, losing the data recorded after the first save. Each save now updates the hash. This had been a problem since 7.13.1. Fixes issue 2338.
  • Fixes for obscure but legal file names:
    • File names (and plugin names) can contain control characters, which are legal in POSIX paths but unsafe in reports: in XML 1.0 they make the document non-well-formed, and in a terminal they act as escape sequences (colors, title/clipboard sequences, cursor moves that forge output). Now the XML report, the text and Markdown summary reports, and coverage debug data replace non-printable characters in names. Printable names are unchanged.
    • A file pattern (from include, omit, or a [paths] alias) containing a newline sent the glob-to-regex translation into an infinite loop, hanging the process. Newlines in patterns are now handled like any other character.
  • Fixes in the implementation of the C tracer:
    • If a plugin’s dynamic_source_filename method raised an exception, lines in that function could be recorded as belonging to a different file. Also fixed some minor memory leaks in the C tracer.
    • The refcount of None was mismanaged during function calls, including comprehensions. This was unlikely to cause an actual problem, but is now fixed. Thanks, Andrew Dalke.
    • The C tracer held borrowed references to dictionary values, which was unsafe on free-threaded Python. Now it takes its own references.
    • An internal error while recording a new file could be reported as a confusing SystemError instead of the actual exception.
  • Performance: the text summary report (coverage report) held on to every file’s parsed source until it finished, so its memory use grew with the size of the project: ten times or more what 7.14 used on large projects. Now it keeps only what it needs to print. Fixes issue 2277.
  • Performance: HTML reports should be about 5% faster to produce.
  • Kept the political banner in the README. Closes issue 2344.

➡️  PyPI page: coverage 7.17.0. :arrow_right:  To install: python3 -m pip install coverage==7.17.0

Changelog

Sourced from coverage's changelog.

Version 7.17.0 — 2026-10-22

  • Dropped support for Python 3.10.

  • Binary wheels are now provided for iOS and Android. This allows the use of the optimized C tracer on mobile platforms.

  • Fix: three or more levels of nested with statements could make a with line look like a branch with an exit that can never happen. Using the sys.monitoring core, these phantom branches were reported as partial. Other cores hid the problem but still counted the phantom branches in the total. Closes issue 1987_.

  • Fix: a comment or string that merely mentioned if True: or while True: could mark its line as a branch that is known to be partial, so a branch that never ran was reported as taken. These built-in patterns now only match at the start of the statement. Closes issue 2314_.

  • Fix: region detection missed functions defined in unusual places, such as else and except clauses. This is now fixed.

  • Fix: recent versions of the lcov tool complain if the same function name appears more than once in a report. Python can have multiple same-named functions in a few ways, for example, getters/setters or conditionally defined functions. These are now disambiguated by adding a @<line number> suffix to the function name. Fixes issue 2335.

  • Fix: The "Can't combine statement coverage data with branch data" error now names the two data files it couldn't combine. The :ref:error description <error_cant_combine> in the docs now lists common causes and how to find the process that wrote the file.

  • Fix: at coverage totals close to 0 or 100, the XML report could get incorrect line-rate values like 8.333e-05 or 1. This is now fixed, closing issue 2293_ and issue 2294_.

  • Fix: a parallel data file saved more than once kept the hash of its first save in its file name. Combining could then skip it as a duplicate of another file that had the same data at that point, and delete it, losing the data recorded after the first save. Each save now updates the hash. This had been a problem since 7.13.1. Fixes issue 2338_.

  • Fixes for obscure but legal file names:

    • File names (and plugin names) can contain control characters, which are legal in POSIX paths but unsafe in reports: in XML 1.0 they make the document non-well-formed, and in a terminal they act as escape sequences (colors, title/clipboard sequences, cursor moves that forge output). Now the XML report, the text and Markdown summary reports, and ``coverage debug

... (truncated)

Commits
  • 393ac71 docs: prep for 7.17.0
  • 14257d3 test: check that 100% files haven't lost coverage
  • db056ac docs: keep the ukraine banner #2344
  • 6033660 fix: update the data file hash when a parallel data file is saved again (#2339)
  • 99024b5 fix: clamp rate in XML report to prevent false 1.0/0.0 rounding and scientifi...
  • ff62a02 refactor: remove unused caching branches
  • 24d0b67 fix: KeyError for a with statement at the end of a finally clause (#2336)
  • 934f5b8 chore: upgrade pip==26.2.2 certifi==2026.10.19
  • f95c980 fix: triply nested with statements don't cause false branch misses #1987
  • 6aaa858 docs: more changelog gardening
  • Additional commits viewable in compare view

Updates certifi from 2026.10.19 to 2026.10.23

Commits

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Commits
  • 935c29a Release 3.5.2 (#805)
  • 9d3238a test: disable traefik in downstream niquests
  • b4c0368 docs: write changelog entry for 3.5.2
  • 717da31 chore: bump version to 3.5.2
  • 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
  • 41e28b6 chore: raise Cython upper bound to 3.3
  • b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
  • f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
  • See full diff in compare view

Updates more-itertools from 11.1.0 to 11.2.1

Release notes

Sourced from more-itertools's releases.

Version 11.2.1

This release includes #1331, a packaging-related change. No module code changed.

Version 11.2.0

Highlights:

  • New random_ordered_range function
  • New subfactorial function
  • Python 3.10 is no longer officially supported
  • Python 3.15 is now officially supported

See the release notes for details.

Commits
  • 4aeb433 Merge pull request #1331 from more-itertools/flit-4-sdist
  • da864da Version 11.2.1: Include additional files in sdist
  • 737c261 Merge pull request #1314 from more-itertools/version-11.2.0
  • 909b703 Bump version to 11.2.0
  • 6ad55cb Swap 310 for 315 in tox
  • 787bcb5 Drop typing_extensions for more.pyi
  • 68a52e0 Update versions.rst
  • be6ecc0 Changelog tweaks
  • 45c65a3 Even more WIP release notes for 11.2.0
  • 56a469c More WIP release ntoes 11.2.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2026
@gaugebot

gaugebot Bot commented Nov 1, 2026

Copy link
Copy Markdown

@dependabot[bot] Thank you for contributing to gauge-python. Your pull request has been labeled as a release candidate 🎉🎉.

Merging this PR will trigger a release.

Please bump up the version as part of this PR.

Instructions to bump the version can found at CONTRIBUTING.md

If the CONTRIBUTING.md file does not exist or does not include instructions about bumping up the version, please looks previous commits in git history to see what changes need to be done.

@chadlwilson

chadlwilson commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
Bump the pip-dependencies group across 1 directory with 7 updates
f580a37 
Bumps the pip-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [grpcio](https://github.com/grpc/grpc) | `1.84.0` | `1.85.0` |
| [grpcio-tools](https://github.com/grpc/grpc) | `1.84.0` | `1.85.0` |
| [setuptools](https://github.com/pypa/setuptools) | `84.1.0` | `84.2.1` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.16.2` | `7.17.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.10.19` | `2026.10.23` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` |
| [more-itertools](https://github.com/more-itertools/more-itertools) | `11.1.0` | `11.2.1` |



Updates `grpcio` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.84.0...v1.85.0)

Updates `grpcio-tools` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.84.0...v1.85.0)

Updates `setuptools` from 84.1.0 to 84.2.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v84.1.0...v84.2.1)

Updates `coverage` from 7.16.2 to 7.17.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.16.2...7.17.0)

Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.19...2026.10.23)

Updates `charset-normalizer` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

Updates `more-itertools` from 11.1.0 to 11.2.1
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v11.1.0...v11.2.1)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: coverage
  dependency-version: 7.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: grpcio
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: grpcio-tools
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: more-itertools
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: setuptools
  dependency-version: 84.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the pip-dependencies group with 7 updates Bump the pip-dependencies group across 1 directory with 7 updates Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-dependencies-8e8299bd1c branch from e469d7a to f580a37 Compare November 1, 2026 17:20
@chadlwilson
chadlwilson merged commit 65ee30a into master Nov 1, 2026
15 checks passed
@chadlwilson
chadlwilson deleted the dependabot/pip/pip-dependencies-8e8299bd1c branch November 1, 2026 17:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code ReleaseCandidate

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chadlwilson