Repository navigation
build(deps): bump referencing from 0.36.2 to 0.37.0 - #180
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [referencing](https://github.com/python-jsonschema/referencing) from 0.36.2 to 0.37.0. - [Release notes](https://github.com/python-jsonschema/referencing/releases) - [Changelog](https://github.com/python-jsonschema/referencing/blob/main/docs/changes.rst) - [Commits](python-jsonschema/referencing@v0.36.2...v0.37.0) --- updated-dependencies: - dependency-name: referencing dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
chrisdlangton
left a comment
chrisdlangton
left a comment
There was a problem hiding this comment.
referencing 0.36.2 to 0.37.0, minor release; works with the pinned attrs and rpds-py. Adds typing-extensions on Python < 3.13. Squash note: these four bumps touch the same lines of requirements.txt, so they cannot be squashed in order without conflicts. I applied each requirements.in bump in turn and regenerated requirements.txt with uv pip compile --python-version 3.11 --generate-hashes requirements.in, merging in the order #177, #178, #179, #180. This differs from the dependabot file in two ways: typing-extensions 4.16.0 is included (referencing needs it on Python < 3.13 and requires-python is >=3.11, so main's file was missing it) and the typing-extensions wheel hash that dependabot listed twice appears once. Verified the final file with uv pip install --require-hashes -r requirements.txt on Python 3.13 and 3.11, uv pip check, and pytest on the package (59 passed, 5 xfailed, same as main).
| jsonschema-specifications==2025.4.1 | ||
| pyyaml==6.0.2 | ||
| referencing==0.36.2 | ||
| referencing==0.37.0 |
There was a problem hiding this comment.
referencing 0.37.0 works with the pinned attrs and rpds-py; adds typing-extensions on Python < 3.13.
|
Squash-merged to main as a0ccf47 (signed, authored by chris@vulnetix.com). requirements.txt was regenerated, see the review. |
Bumps referencing from 0.36.2 to 0.37.0.
Release notes
Sourced from referencing's releases.
Changelog
Sourced from referencing's changelog.
Commits
944ed5aStyle.6382532Prepare the CHANGELOG for v0.37.91b4bf5Drop support for 3.9, which is near EOL.0c14d46Update requirements.2928df5Add the 3.14 classifier.3ce7f9aMerge pull request #270 from cclauss/patch-1b6fc425ci: Add Python 3.14 and 3.14t to the testing9d1efc5Merge pull request #265 from python-jsonschema/pre-commit-ci-update-config1513a51Merge pull request #268 from python-jsonschema/dependabot/submodules/suite-79...8ebb38fMerge pull request #269 from python-jsonschema/dependabot/github_actions/astr...You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)