Skip to content

build(deps): bump the runtime group with 4 updates - #48

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/runtime-5474aefdc4
Open

build(deps): bump the runtime group with 4 updates#48
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/runtime-5474aefdc4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on cryptography, loguru, typer and pydantic to permit the latest version.
Updates cryptography to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:


50.0.0 - 2026-07-31

  • SECURITY ISSUE: :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der and its PEM and S/MIME variants no longer expose distinguishable errors or timing when unwrapping a RecipientInfo's encryptedKey, which could act as a Bleichenbacher oracle for callers that decrypt untrusted messages. A random key is now substituted on failure, as described in :rfc:3218. Credit to @​X1AOxiang for reporting the issue. CVE-2026-69247
  • Deprecated Diffie-Hellman key exchange over finite fields (FFDH). Everything FFDH is deprecated, including the types in cryptography.hazmat.primitives.asymmetric.dh and loading FFDH keys or parameters with the key loading APIs. Users should migrate to a more modern key exchange algorithm.
  • Added xof() class methods to :class:~cryptography.hazmat.primitives.hashes.SHAKE128 and :class:~cryptography.hazmat.primitives.hashes.SHAKE256 for constructing algorithm instances configured for use with :class:~cryptography.hazmat.primitives.hashes.XOFHash.
  • The :mod:X.509 verification <cryptography.x509.verification> APIs are now considered stable and are subject to our API stability policy.
  • Added the :doc:/cobblestone recipe, an implementation of the Cobblestone-128 and Cobblestone-256 instantiations of the C2SP chunked-encryption specification <https://c2sp.org/chunked-encryption>_ for streaming authenticated encryption of large messages.
  • Parsing a Signed Certificate Timestamp list now rejects encodings that carry trailing bytes after the list or after an individual SCT, instead of silently ignoring them.
  • Added support for using :class:~cryptography.x509.Name as a field type in the :doc:/hazmat/asn1/index module.
  • Loading a public key or an EC private key now rejects DER where the subjectPublicKey (or EC publicKey) BIT STRING declares a non-zero number of unused bits, instead of silently ignoring it.
  • Parsing a CRL entry's InvalidityDate extension now rejects a GeneralizedTime that carries fractional seconds or another non-DER form, matching the strict encoding already required for every other X.509 time field.
  • :func:~cryptography.x509.ocsp.load_der_ocsp_request and :func:~cryptography.x509.ocsp.load_der_ocsp_response now reject a request or response whose version field is not v1, the only version defined by RFC 6960, matching the version validation already performed when loading

... (truncated)

Commits

Updates loguru to 0.7.3

Release notes

Sourced from loguru's releases.

0.7.3

  • Fix Cython incompatibility caused by the absence of underlying stack frames, which resulted in a ValueError during logging (#88).
  • Fix possible RuntimeError when removing all handlers with logger.remove() due to thread-safety issue (#1183, thanks @​jeremyk).
  • Fix diagnose=True option of exception formatting not working as expected with Python 3.13 (#1235, thanks @​etianen).
  • Fix non-standard level names not fully compatible with logging.Formatter() (#1231, thanks @​yechielb2000).
  • Fix inability to display a literal "\" immediately before color markups (#988).
  • Fix possible infinite recursion when an exception is raised from a __repr__ method decorated with logger.catch() (#1044).
  • Improve performance of datetime formatting while logging messages (#1201, thanks @​trim21).
  • Reduce startup time in the presence of installed but unused IPython third-party library (#1001, thanks @​zakstucke).
Changelog

Sourced from loguru's changelog.

0.7.3_ (2024-12-06)

  • Fix Cython incompatibility caused by the absence of underlying stack frames, which resulted in a ValueError during logging ([#88](https://github.com/Delgan/loguru/issues/88) <https://github.com/Delgan/loguru/issues/88>_).
  • Fix possible RuntimeError when removing all handlers with logger.remove() due to thread-safety issue ([#1183](https://github.com/Delgan/loguru/issues/1183) <https://github.com/Delgan/loguru/issues/1183>, thanks @jeremyk <https://github.com/jeremyk>).
  • Fix diagnose=True option of exception formatting not working as expected with Python 3.13 ([#1235](https://github.com/Delgan/loguru/issues/1235) <https://github.com/Delgan/loguru/issues/1235>, thanks @etianen <https://github.com/etianen>).
  • Fix non-standard level names not fully compatible with logging.Formatter() ([#1231](https://github.com/Delgan/loguru/issues/1231) <https://github.com/Delgan/loguru/issues/1231>, thanks @yechielb2000 <https://github.com/yechielb2000>).
  • Fix inability to display a literal "\" immediately before color markups ([#988](https://github.com/Delgan/loguru/issues/988) <https://github.com/Delgan/loguru/issues/988>_).
  • Fix possible infinite recursion when an exception is raised from a __repr__ method decorated with logger.catch() ([#1044](https://github.com/Delgan/loguru/issues/1044) <https://github.com/Delgan/loguru/issues/1044>_).
  • Improve performance of datetime formatting while logging messages ([#1201](https://github.com/Delgan/loguru/issues/1201) <https://github.com/Delgan/loguru/issues/1201>, thanks @trim21 <https://github.com/trim21>).
  • Reduce startup time in the presence of installed but unused IPython third-party library ([#1001](https://github.com/Delgan/loguru/issues/1001) <https://github.com/Delgan/loguru/issues/1001>, thanks @zakstucke <https://github.com/zakstucke>).

0.7.2_ (2023-09-11)

  • Add support for formatting of ExceptionGroup errors ([#805](https://github.com/Delgan/loguru/issues/805) <https://github.com/Delgan/loguru/issues/805>_).
  • Fix possible RuntimeError when using multiprocessing.set_start_method() after importing the logger ([#974](https://github.com/Delgan/loguru/issues/974) <https://github.com/Delgan/loguru/issues/974>_).
  • Fix formatting of possible __notes__ attached to an Exception ([#980](https://github.com/Delgan/loguru/issues/980) <https://github.com/Delgan/loguru/issues/980>_).

0.7.1_ (2023-09-04)

  • Add a new context optional argument to logger.add() specifying multiprocessing context (like "spawn" or "fork") to be used internally instead of the default one ([#851](https://github.com/Delgan/loguru/issues/851) <https://github.com/Delgan/loguru/issues/851>_).
  • Add support for true colors on Windows using ANSI/VT console when available ([#934](https://github.com/Delgan/loguru/issues/934) <https://github.com/Delgan/loguru/issues/934>, thanks @tunaflsh <https://github.com/tunaflsh>).
  • Fix possible deadlock when calling logger.complete() with concurrent logging of an asynchronous sink ([#906](https://github.com/Delgan/loguru/issues/906) <https://github.com/Delgan/loguru/issues/906>_).
  • Fix file possibly rotating too early or too late when re-starting an application around midnight ([#894](https://github.com/Delgan/loguru/issues/894) <https://github.com/Delgan/loguru/issues/894>_).
  • Fix inverted "<hide>" and "<strike>" color tags ([#943](https://github.com/Delgan/loguru/issues/943) <https://github.com/Delgan/loguru/pull/943>, thanks @tunaflsh <https://github.com/tunaflsh>).
  • Fix possible untraceable errors raised when logging non-unpicklable Exception instances while using enqueue=True ([#329](https://github.com/Delgan/loguru/issues/329) <https://github.com/Delgan/loguru/issues/329>_).
  • Fix possible errors raised when logging non-picklable Exception instances while using enqueue=True ([#342](https://github.com/Delgan/loguru/issues/342) <https://github.com/Delgan/loguru/issues/342>, thanks @ncoudene <https://github.com/ncoudene>).
  • Fix missing seconds and microseconds when formatting timezone offset that requires such accuracy ([#961](https://github.com/Delgan/loguru/issues/961) <https://github.com/Delgan/loguru/issues/961>_).
  • Raise ValueError if an attempt to use nanosecond precision for time formatting is detected ([#855](https://github.com/Delgan/loguru/issues/855) <https://github.com/Delgan/loguru/issues/855>_).

0.7.0_ (2023-04-10)

  • Update InterceptHandler recipe to make it compatible with Python 3.11 ([#654](https://github.com/Delgan/loguru/issues/654) <https://github.com/Delgan/loguru/issues/654>_).
  • Add a new watch optional argument to file sinks in order to automatically re-create possibly deleted or changed file ([#471](https://github.com/Delgan/loguru/issues/471) <https://github.com/Delgan/loguru/issues/471>_).
  • Make patch() calls cumulative instead of overriding the possibly existing patching function ([#462](https://github.com/Delgan/loguru/issues/462) <https://github.com/Delgan/loguru/issues/462>_).
  • Make sinks added with enqueue=True and catch=False still process logged messages in case of internal exception ([#833](https://github.com/Delgan/loguru/issues/833) <https://github.com/Delgan/loguru/issues/833>_).
  • Avoid possible deadlocks caused by re-using the logger inside a sink, a signal handler or a __del__ method. Since the logger is not re-entrant, such misuse will be detected and will now generate a RuntimeError ([#712](https://github.com/Delgan/loguru/issues/712) <https://github.com/Delgan/loguru/issues/712>, thanks @jacksmith15 <https://github.com/jacksmith15>).
  • Fix file sink rotation using an aware datetime.time for which the timezone was ignored ([#697](https://github.com/Delgan/loguru/issues/697) <https://github.com/Delgan/loguru/issues/697>_).
  • Fix logs colorization not automatically enabled for Jupyter Notebook and Google Colab ([#494](https://github.com/Delgan/loguru/issues/494) <https://github.com/Delgan/loguru/issues/494>_).
  • Fix logs colorization not automatically enabled for Github Actions and others CI platforms ([#604](https://github.com/Delgan/loguru/issues/604) <https://github.com/Delgan/loguru/issues/604>_).
  • Fix logger.complete() possibly hanging forever when enqueue=True and catch=False if internal thread killed due to Exception raised by sink ([#647](https://github.com/Delgan/loguru/issues/647) <https://github.com/Delgan/loguru/issues/647>_).
  • Fix incompatibility with freezegun library used to simulate time ([#600](https://github.com/Delgan/loguru/issues/600) <https://github.com/Delgan/loguru/issues/600>_).
  • Raise exception if logger.catch() is used to wrap a class instead of a function to avoid unexpected behavior ([#623](https://github.com/Delgan/loguru/issues/623) <https://github.com/Delgan/loguru/issues/623>_).

... (truncated)

Commits
  • ae3bfd1 Bump version to 0.7.3
  • ccca356 Replace "notifiers" (seems unmaintained) with "apprise" in docs (#1251)
  • a372814 Configure "trusted publishing" in Github workflow
  • 633016d Use tox to define the "release" command
  • ef12cbb Convert README from RST to MD (fix PyPI packaging)
  • cb3314a Add Github action to verify packaging
  • 6161a13 Complete the "Troubleshooting" docs with more examples
  • 7f5001f Simplify the example of dynamic handler level
  • 2e0cd7b Move "Introduction to logging" docs to a new section
  • 72b93d1 Correct outdated instructions for reporting a vulnerability
  • Additional commits viewable in compare view

Updates typer to 0.27.2

Release notes

Sourced from typer's releases.

0.27.2

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

Changelog

Sourced from typer's changelog.

0.27.2 (2026-08-28)

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

... (truncated)

Commits

Updates pydantic to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

... (truncated)

Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the runtime group with 4 updates
ca86daa 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography), [loguru](https://github.com/Delgan/loguru), [typer](https://github.com/fastapi/typer) and [pydantic](https://github.com/pydantic/pydantic) to permit the latest version.

Updates `cryptography` to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@41.0.0...50.0.1)

Updates `loguru` to 0.7.3
- [Release notes](https://github.com/Delgan/loguru/releases)
- [Changelog](https://github.com/Delgan/loguru/blob/master/CHANGELOG.rst)
- [Commits](Delgan/loguru@0.7.0...0.7.3)

Updates `typer` to 0.27.2
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.12.0...0.27.2)

Updates `pydantic` to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.0...v2.13.5)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: loguru
  dependency-version: 0.7.3
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: typer
  dependency-version: 0.27.2
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  dependency-group: runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026
@dependabot
dependabot Bot requested a review from sachncs as a code owner September 14, 2026 08:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sachncs sachncs Awaiting requested review from sachncs sachncs is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants