Skip to content

Bump the major group across 1 directory with 5 updates - #261

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/major-30b857b728
Open

Bump the major group across 1 directory with 5 updates#261
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/major-30b857b728

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the major group with 5 updates in the / directory:

Package From To
markupsafe 2.0.1 3.0.3
pre-commit 3.5.0 4.6.1
pytz 2025.1 2026.3.post1
sqlfluff 3.5.0 4.2.2
sqlfluff-templater-dbt 3.5.0 4.2.2

Updates markupsafe from 2.0.1 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505

3.0.2

This is the MarkupSafe 3.0.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.2/ Changes: https://markupsafe.palletsprojects.com/en/stable/changes/#version-3-0-2 Milestone: https://github.com/pallets/markupsafe/milestone/14?closed=1

  • Fix compatibility when __str__ returns a str subclass. #472
  • Build requires setuptools >= 70.1. #475

3.0.1

This is the MarkupSafe 3.0.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.1/ Changes: https://markupsafe.palletsprojects.com/en/stable/changes/#version-3-0-1 Milestone: https://github.com/pallets/markupsafe/milestone/13?closed=1

  • Address compiler warnings that became errors in GCC 14. #466
  • Fix compatibility with proxy objects. #467

3.0.0

This is the MarkupSafe 3.0.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. The 3.0.x branch is now the supported fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/MarkupSafe/3.0.0/ Changes: https://markupsafe.palletsprojects.com/en/stable/changes/#version-3-0-0 Milestone: https://github.com/pallets/markupsafe/milestone/10?closed=1

  • Support Python 3.13 and its experimental free-threaded build. #461
  • Drop support for Python 3.7 and 3.8.
  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. #348
  • Change distutils imports to setuptools. #399
  • Use deferred evaluation of annotations. #400
  • Update signatures for Markup methods to match str signatures. Use positional-only arguments. #400
  • Some str methods on Markup no longer escape their argument: strip, lstrip, rstrip, removeprefix, removesuffix, partition, and rpartition; replace only escapes its new argument. These methods are conceptually linked to search methods such as in, find, and index, which already do not escape their argument. #401
  • The __version__ attribute is deprecated. Use feature detection, or importlib.metadata.version("markupsafe"), instead. #402
  • Speed up escaping plain strings by 40%. #434
  • Simplify speedups implementation. #437

... (truncated)

Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505

Version 3.0.2

Released 2024-10-18

  • Fix compatibility when __str__ returns a str subclass. :issue:472
  • Build requires setuptools >= 70.1. :issue:475

Version 3.0.1

Released 2024-10-08

  • Address compiler warnings that became errors in GCC 14. :issue:466
  • Fix compatibility with proxy objects. :issue:467

Version 3.0.0

Released 2024-10-07

  • Support Python 3.13 and its experimental free-threaded build. :pr:461
  • Drop support for Python 3.7 and 3.8.
  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. :pr:348
  • Change distutils imports to setuptools. :pr:399
  • Use deferred evaluation of annotations. :pr:400
  • Update signatures for Markup methods to match str signatures. Use positional-only arguments. :pr:400
  • Some str methods on Markup no longer escape their argument: strip, lstrip, rstrip, removeprefix, removesuffix, partition, and rpartition; replace only escapes its new argument. These methods are conceptually linked to search methods such as in, find, and index, which already do not escape their argument.

... (truncated)

Commits

Updates pre-commit from 3.5.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

... (truncated)

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

... (truncated)

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates pytz from 2025.1 to 2026.3.post1

Commits
  • 661bca9 Bump version numbers to 2026.3.post1 for python2 fix
  • 1e31a16 Log python version running tests, force python2
  • b3ca7c3 Unix line endings
  • b55039a Replace non-ASCII character in comment to fix build with Python 2
  • 5420ee2 Replace non-ASCII character in comment
  • 2c139e8 Merge branch 'fix/localize-overflow-at-datetime-extremes' of https://github.c...
  • c843864 Run zdump tests quietly
  • 518500c Reduce noise when collecting zdump info dumps
  • 081f935 Merge branch 'kytta-fix-dst' into 2026c
  • 8c9d69b Merge branch 'master' into 2026c
  • Additional commits viewable in compare view

Updates sqlfluff from 3.5.0 to 4.2.2

Release notes

Sourced from sqlfluff's releases.

[4.2.2] - 2026-06-04

Highlights

This patch release brings a broad set of parser fixes and dialect enhancements across T-SQL, PostgreSQL, MariaDB/MySQL, Snowflake, Athena, Materialize, and other dialects. T-SQL receives several improvements around privileges, labels, DROP CREDENTIAL, DROP SEQUENCE IF EXISTS, and reference handling for CONTAINSTABLE, while MariaDB/MySQL support is expanded for trigger, partitioning, system versioning, charset/collation, and ALTER TABLE syntax.

There are also rule and templater fixes, including a new Postgres-specific CV13 rule to prefer CREATE INDEX CONCURRENTLY, fewer ST11 false positives for LEFT SEMI and LEFT ANTI joins, and dbt templater support for the DBT_TARGET and DBT_TARGET_PATH environment variables. Performance is also improved by deferring parse-tree serialisation in logging calls.

Alongside the user-facing fixes, this release adds beta docs deployment, versioned documentation publishing, and support for building multiple Docker images. It also includes first-time contributions from twelve new contributors. Thank you all for your contributions. 🏆

What’s Changed

New Contributors

... (truncated)

Changelog

Sourced from sqlfluff's changelog.

[4.2.2] - 2026-06-04

Highlights

This patch release brings a broad set of parser fixes and dialect enhancements across T-SQL, PostgreSQL, MariaDB/MySQL, Snowflake, Athena, Materialize, and other dialects. T-SQL receives several improvements around privileges, labels, DROP CREDENTIAL, DROP SEQUENCE IF EXISTS, and reference handling for CONTAINSTABLE, while MariaDB/MySQL support is expanded for trigger, partitioning, system versioning, charset/collation, and ALTER TABLE syntax.

There are also rule and templater fixes, including a new Postgres-specific CV13 rule to prefer CREATE INDEX CONCURRENTLY, fewer ST11 false positives for LEFT SEMI and LEFT ANTI joins, and dbt templater support for the DBT_TARGET and DBT_TARGET_PATH environment variables. Performance is also improved by deferring parse-tree serialisation in logging calls.

Alongside the user-facing fixes, this release adds beta docs deployment, versioned documentation publishing, and support for building multiple Docker images. It also includes first-time contributions from twelve new contributors. Thank you all for your contributions. 🏆

What’s Changed

... (truncated)

Commits
  • 1c2ec52 Prep version 4.2.2 (#7909)
  • f9fce5c Add beta docs deployment and versioned publishing (#7912)
  • 2b05ce0 perf: defer parse-tree serialisation in logging calls (#7911)
  • facb9b0 Fix typo: 'the the' -> 'the' in test comment (#7908)
  • 8f6b6d3 Support T-SQL DROP CREDENTIAL (#7904)
  • 0ace3fd fix(dbt-templater): honor DBT_TARGET / DBT_TARGET_PATH env vars (#7900)
  • b6cd5e1 fix(mariadb): support CREATE OR REPLACE TRIGGER syntax (#7897)
  • 29b12d4 fix(postgres): parse \crosstabview after WITH compound statement (CTE) (#7895)
  • e4dff15 Add support for various T-SQL privileges (#7894)
  • 20125ba fix(tsql): parse label following SELECT without semicolon (#7867)
  • Additional commits viewable in compare view

Updates sqlfluff-templater-dbt from 3.5.0 to 4.2.2

Release notes

Sourced from sqlfluff-templater-dbt's releases.

[4.2.2] - 2026-06-04

Highlights

This patch release brings a broad set of parser fixes and dialect enhancements across T-SQL, PostgreSQL, MariaDB/MySQL, Snowflake, Athena, Materialize, and other dialects. T-SQL receives several improvements around privileges, labels, DROP CREDENTIAL, DROP SEQUENCE IF EXISTS, and reference handling for CONTAINSTABLE, while MariaDB/MySQL support is expanded for trigger, partitioning, system versioning, charset/collation, and ALTER TABLE syntax.

There are also rule and templater fixes, including a new Postgres-specific CV13 rule to prefer CREATE INDEX CONCURRENTLY, fewer ST11 false positives for LEFT SEMI and LEFT ANTI joins, and dbt templater support for the DBT_TARGET and DBT_TARGET_PATH environment variables. Performance is also improved by deferring parse-tree serialisation in logging calls.

Alongside the user-facing fixes, this release adds beta docs deployment, versioned documentation publishing, and support for building multiple Docker images. It also includes first-time contributions from twelve new contributors. Thank you all for your contributions. 🏆

What’s Changed

New Contributors

... (truncated)

Changelog

Sourced from sqlfluff-templater-dbt's changelog.

[4.2.2] - 2026-06-04

Highlights

This patch release brings a broad set of parser fixes and dialect enhancements across T-SQL, PostgreSQL, MariaDB/MySQL, Snowflake, Athena, Materialize, and other dialects. T-SQL receives several improvements around privileges, labels, DROP CREDENTIAL, DROP SEQUENCE IF EXISTS, and reference handling for CONTAINSTABLE, while MariaDB/MySQL support is expanded for trigger, partitioning, system versioning, charset/collation, and ALTER TABLE syntax.

There are also rule and templater fixes, including a new Postgres-specific CV13 rule to prefer CREATE INDEX CONCURRENTLY, fewer ST11 false positives for LEFT SEMI and LEFT ANTI joins, and dbt templater support for the DBT_TARGET and DBT_TARGET_PATH environment variables. Performance is also improved by deferring parse-tree serialisation in logging calls.

Alongside the user-facing fixes, this release adds beta docs deployment, versioned documentation publishing, and support for building multiple Docker images. It also includes first-time contributions from twelve new contributors. Thank you all for your contributions. 🏆

What’s Changed

... (truncated)

Commits
  • 1c2ec52 Prep version 4.2.2 (#7909)
  • f9fce5c Add beta docs deployment and versioned publishing (#7912)
  • 2b05ce0 perf: defer parse-tree serialisation in logging calls (#7911)
  • facb9b0 Fix typo: 'the the' -> 'the' in test comment (#7908)
  • 8f6b6d3 Support T-SQL DROP CREDENTIAL (#7904)
  • 0ace3fd fix(dbt-templater): honor DBT_TARGET / DBT_TARGET_PATH env vars (#7900)
  • b6cd5e1 fix(mariadb): support CREATE OR REPLACE TRIGGER syntax (#7897)
  • 29b12d4 fix(postgres): parse \crosstabview after WITH compound statement (CTE) (#7895)
  • e4dff15 Add support for various T-SQL privileges (#7894)
  • 20125ba fix(tsql): parse label following SELECT without semicolon (#7867)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner May 17, 2026 02:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 17, 2026
@socket-security

socket-security Bot commented May 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedpre-commit@​3.5.0 ⏵ 4.6.193100100100100
Updatedsqlfluff@​3.5.0 ⏵ 4.2.299 +1100 +22100100100
Updatedpytz@​2025.1 ⏵ 2026.3.post1100 +1100100100100
Updatedsqlfluff-templater-dbt@​3.5.0 ⏵ 4.2.2100100100100100
Updatedmarkupsafe@​2.0.1 ⏵ 3.0.3100 +1100100100100

View full report

@dependabot dependabot Bot changed the title Bump the major group with 5 updates Bump the major group across 1 directory with 5 updates May 31, 2026
Copilot AI review requested due to automatic review settings May 31, 2026 02:19
@dependabot
dependabot Bot force-pushed the dependabot/pip/major-30b857b728 branch from 6a08483 to 0cb517d Compare May 31, 2026 02:19
Copilot AI reviewed May 31, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@dependabot
dependabot Bot force-pushed the dependabot/pip/major-30b857b728 branch from 0cb517d to 62eb901 Compare June 7, 2026 02:06
@dependabot
dependabot Bot force-pushed the dependabot/pip/major-30b857b728 branch 2 times, most recently from 05869b8 to 06053a8 Compare June 21, 2026 02:07
@dependabot
dependabot Bot force-pushed the dependabot/pip/major-30b857b728 branch from 06053a8 to b2eacc1 Compare July 19, 2026 02:08
@dependabot
Bump the major group across 1 directory with 5 updates
1af9954 
Bumps the major group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [markupsafe](https://github.com/pallets/markupsafe) | `2.0.1` | `3.0.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `3.5.0` | `4.6.1` |
| [pytz](https://github.com/stub42/pytz) | `2025.1` | `2026.3.post1` |
| [sqlfluff](https://github.com/sqlfluff/sqlfluff) | `3.5.0` | `4.2.2` |
| [sqlfluff-templater-dbt](https://github.com/sqlfluff/sqlfluff) | `3.5.0` | `4.2.2` |



Updates `markupsafe` from 2.0.1 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.0.1...3.0.3)

Updates `pre-commit` from 3.5.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v3.5.0...v4.6.1)

Updates `pytz` from 2025.1 to 2026.3.post1
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2025.1...release_2026.3.post1)

Updates `sqlfluff` from 3.5.0 to 4.2.2
- [Release notes](https://github.com/sqlfluff/sqlfluff/releases)
- [Changelog](https://github.com/sqlfluff/sqlfluff/blob/main/CHANGELOG.md)
- [Commits](sqlfluff/sqlfluff@3.5.0...4.2.2)

Updates `sqlfluff-templater-dbt` from 3.5.0 to 4.2.2
- [Release notes](https://github.com/sqlfluff/sqlfluff/releases)
- [Changelog](https://github.com/sqlfluff/sqlfluff/blob/main/CHANGELOG.md)
- [Commits](sqlfluff/sqlfluff@3.5.0...4.2.2)

---
updated-dependencies:
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: pytz
  dependency-version: '2026.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: sqlfluff
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: sqlfluff-templater-dbt
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/major-30b857b728 branch from b2eacc1 to 1af9954 Compare July 26, 2026 02:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant