Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Updates the requirements on typing-extensions, pip, poetry-pre-commit-plugin, tm-devices, codespell, mkdocs-ezglossary-plugin, mkdocs-macros-plugin, mkdocs-mermaid2-plugin, packaging, pygments, pymdown-extensions, requests, psutil, pytest, beautifulsoup4, bracex, certifi, charset-normalizer, click, editdistpy, editorconfig, importlib-metadata, inflect, jinja2, jsbeautifier, markdown, markupsafe, mkdocs-autorefs, more-itertools, mypy-extensions, platformdirs, pyyaml-env-tag, setuptools, six, soupsieve, super-collections, termcolor, typeguard, urllib3, watchdog, wcmatch, zipp, coverage[toml], dataproperty, dnspython, exceptiongroup, iniconfig, mbstrdecoder, networkx, pathvalidate, pluggy, pytablewriter, pytz, tabledata, tcolorpy, typepy and typepy[datetime] to permit the latest version.
Updates typing-extensions from 4.12.2 to 4.13.2

Release notes

Sourced from typing-extensions's releases.

4.13.2

  • Fix TypeError when taking the union of typing_extensions.TypeAliasType and a typing.TypeAliasType on Python 3.12 and 3.13. Patch by Joren Hammudoglu.
  • Backport from CPython PR #132160 to avoid having user arguments shadowed in generated __new__ by @typing_extensions.deprecated. Patch by Victorien Plot.

4.13.1

This is a bugfix release fixing two edge cases that appear on old bugfix releases of CPython.

Bugfixes:

  • Fix regression in 4.13.0 on Python 3.10.2 causing a TypeError when using Concatenate. Patch by Daraan.
  • Fix TypeError when using evaluate_forward_ref on Python 3.10.1-2 and 3.9.8-10. Patch by Daraan.

4.13.0

New features:

  • Add typing_extensions.TypeForm from PEP 747. Patch by Jelle Zijlstra.
  • Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649. Patches by Jelle Zijlstra and Alex Waygood.
  • Backport evaluate_forward_ref from CPython PR #119891 to evaluate ForwardRefs. Patch by Daraan, backporting a CPython PR by Jelle Zijlstra.

Bugfixes and changed features:

  • Update PEP 728 implementation to a newer version of the PEP. Patch by Jelle Zijlstra.
  • Copy the coroutine status of functions and methods wrapped with @typing_extensions.deprecated. Patch by Sebastian Rittau.
  • Fix bug where TypeAliasType instances could be subscripted even where they were not generic. Patch by Daraan.
  • Fix bug where a subscripted TypeAliasType instance did not have all attributes of the original TypeAliasType instance on older Python versions. Patch by Daraan and Alex Waygood.
  • Fix bug where subscripted TypeAliasType instances (and some other subscripted objects) had wrong parameters if they were directly subscripted with an Unpack object. Patch by Daraan.
  • Backport to Python 3.10 the ability to substitute ... in generic Callable aliases that have a Concatenate special form as their argument. Patch by Daraan.
  • Extended the Concatenate backport for Python 3.8-3.10 to now accept Ellipsis as an argument. Patch by Daraan.
  • Fix backport of get_type_hints to reflect Python 3.11+ behavior which does not add

... (truncated)

Changelog

Sourced from typing-extensions's changelog.

Release 4.13.2 (April 10, 2025)

  • Fix TypeError when taking the union of typing_extensions.TypeAliasType and a typing.TypeAliasType on Python 3.12 and 3.13. Patch by Joren Hammudoglu.
  • Backport from CPython PR #132160 to avoid having user arguments shadowed in generated __new__ by @typing_extensions.deprecated. Patch by Victorien Plot.

Release 4.13.1 (April 3, 2025)

Bugfixes:

  • Fix regression in 4.13.0 on Python 3.10.2 causing a TypeError when using Concatenate. Patch by Daraan.
  • Fix TypeError when using evaluate_forward_ref on Python 3.10.1-2 and 3.9.8-10. Patch by Daraan.

Release 4.13.0 (March 25, 2025)

No user-facing changes since 4.13.0rc1.

Release 4.13.0rc1 (March 18, 2025)

New features:

  • Add typing_extensions.TypeForm from PEP 747. Patch by Jelle Zijlstra.
  • Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649. Patches by Jelle Zijlstra and Alex Waygood.
  • Backport evaluate_forward_ref from CPython PR #119891 to evaluate ForwardRefs. Patch by Daraan, backporting a CPython PR by Jelle Zijlstra.

Bugfixes and changed features:

  • Update PEP 728 implementation to a newer version of the PEP. Patch by Jelle Zijlstra.
  • Copy the coroutine status of functions and methods wrapped with @typing_extensions.deprecated. Patch by Sebastian Rittau.
  • Fix bug where TypeAliasType instances could be subscripted even where they were not generic. Patch by Daraan.
  • Fix bug where a subscripted TypeAliasType instance did not have all attributes of the original TypeAliasType instance on older Python versions. Patch by Daraan and Alex Waygood.
  • Fix bug where subscripted TypeAliasType instances (and some other subscripted objects) had wrong parameters if they were directly subscripted with an Unpack object. Patch by Daraan.

... (truncated)

Commits
  • 4525e9d Prepare release 4.13.2 (#583)
  • 88a0c20 Do not shadow user arguments in generated __new__ by @deprecated (#581)
  • 281d7b0 Add 3rd party tests for litestar (#578)
  • 8092c39 fix TypeAliasType union with typing.TypeAliasType (#575)
  • 45a8847 Prepare release 4.13.1 (#573)
  • f264e58 Move CI to "ubuntu-latest" (round 2) (#570)
  • 5ce0e69 Fix TypeError with evaluate_forward_ref on some 3.10 and 3.9 versions (#558)
  • 304f5cb Add SQLAlchemy to third-party daily tests (#561)
  • ebe2b94 Fix duplicated keywords for typing._ConcatenateGenericAlias in 3.10.2 (#557)
  • 9f93d6f Add intersphinx links for 3.13 typing features (#550)
  • Additional commits viewable in compare view

Updates pip to 25.0.1

Changelog

Sourced from pip's changelog.

25.0.1 (2025-02-09)

Bug Fixes

  • Fix an unsupported type annotation on Python 3.10 and earlier. ([#13181](https://github.com/pypa/pip/issues/13181) <https://github.com/pypa/pip/issues/13181>_)
  • Fix a regression where truststore would never be used while installing build dependencies. ([#13186](https://github.com/pypa/pip/issues/13186) <https://github.com/pypa/pip/issues/13186>_)

25.0 (2025-01-26)

Deprecations and Removals

  • Deprecate the no-python-version-warning flag as it has long done nothing since Python 2 support was removed in pip 21.0. ([#13154](https://github.com/pypa/pip/issues/13154) <https://github.com/pypa/pip/issues/13154>_)

Features

  • Prefer to display :pep:639 License-Expression in pip show if metadata version is at least 2.4. ([#13112](https://github.com/pypa/pip/issues/13112) <https://github.com/pypa/pip/issues/13112>_)
  • Support :pep:639 License-Expression and License-File metadata fields in JSON output. pip inspect and pip install --report now emit license_expression and license_file fields in the metadata object, if the corresponding fields are present in the installed METADATA file. ([#13134](https://github.com/pypa/pip/issues/13134) <https://github.com/pypa/pip/issues/13134>_)
  • Files in the network cache will inherit the read/write permissions of pip's cache directory (in addition to the current user retaining read/write access). This enables a single cache to be shared among multiple users. ([#11012](https://github.com/pypa/pip/issues/11012) <https://github.com/pypa/pip/issues/11012>_)
  • Return the size, along with the number, of files cleared on pip cache purge and pip cache remove ([#12176](https://github.com/pypa/pip/issues/12176) <https://github.com/pypa/pip/issues/12176>_)
  • Cache python-requires checks while filtering potential installation candidates. ([#13128](https://github.com/pypa/pip/issues/13128) <https://github.com/pypa/pip/issues/13128>_)
  • Optimize package collection by avoiding unnecessary URL parsing and other processing. ([#13132](https://github.com/pypa/pip/issues/13132) <https://github.com/pypa/pip/issues/13132>_)

Bug Fixes

  • Reorder the encoding detection when decoding a requirements file, relying on UTF-8 over the locale encoding by default, matching the documented behaviour. ([#12771](https://github.com/pypa/pip/issues/12771) <https://github.com/pypa/pip/issues/12771>_)
  • The pip version self check is disabled on EXTERNALLY-MANAGED environments. ([#11820](https://github.com/pypa/pip/issues/11820) <https://github.com/pypa/pip/issues/11820>_)
  • Fix a security bug allowing a specially crafted wheel to execute code during installation. ([#13079](https://github.com/pypa/pip/issues/13079) <https://github.com/pypa/pip/issues/13079>_)
  • The inclusion of packaging 24.2 changes how pre-release specifiers with < and > behave. Including a pre-release version with these specifiers now implies accepting pre-releases (e.g., <2.0dev can include 1.0rc1). To avoid implying pre-releases, avoid specifying them (e.g., use <2.0). The exception is !=, which never implies pre-releases. ([#13163](https://github.com/pypa/pip/issues/13163) <https://github.com/pypa/pip/issues/13163>_)
  • The --cert and --client-cert command-line options are now respected while installing build dependencies. Consequently, the private _PIP_STANDALONE_CERT environment variable is no longer used. ([#5502](https://github.com/pypa/pip/issues/5502) <https://github.com/pypa/pip/issues/5502>_)

... (truncated)

Commits
  • bc7c88c Bump for release
  • ebd0a52 Don't pass --cert to build subprocesses unless also given on CLI
  • aea8629 Fix locate_file() type hints for older Pythons
  • e612988 Add build-project.py compatibility note
  • 202344e Update the release process docs
  • dc696c2 Patch out EXTERNALLY-MANAGED for self-check tests (#13179)
  • f47b587 Bump for release
  • 74a7f33 Update AUTHORS.txt
  • a008888 Merge pull request #13171 from pypa/dependabot/github_actions/github-actions-...
  • d265fb7 Merge pull request #13174 from ichard26/changelog
  • Additional commits viewable in compare view

Updates poetry-pre-commit-plugin to 0.2.2

Release notes

Sourced from poetry-pre-commit-plugin's releases.

0.2.2

What's Changed

Full Changelog: vstrimaitis/poetry-pre-commit-plugin@0.2.1...0.2.2

Commits

Updates tm-devices to 3.2.0

Release notes

Sourced from tm-devices's releases.

v3.2.0 (2025-05-07)

Merged Pull Requests

  • feat: Add disable_command_verification config file and environment variable option to enable speeding up automation scripts (#428)
  • python-deps(deps-dev): update ruff requirement from 0.11.7 to 0.11.8 in the python-dependencies group (#422)
  • fix: Ensure VISA timeout is reset after reboot in pi_control (#425)
  • python-deps(deps-dev): bump the python-dependencies group with 2 updates (#416)
  • Add tip in contribution guide pointing users to online docs for better viewing (#419)
  • fix: Fixed the limit[Y] commands on certain models which were being generated incorrectly (#415)
  • gh-actions(deps): bump tektronix/python-package-ci-cd (#412)
  • python-deps(deps-dev): update ruff requirement from 0.11.2 to 0.11.4 in the python-dependencies group (#413)

Added

  • Added a new config option (settable via config file or environment variable) to allow users to disable command verification (primarily affecting the .set_and_check() method) in order to speed up automation scripts that have verified, known good command sequences.

Fixed

  • Fixed a bug in the auto-generated commands for certain models where the limit[Y] commands were incorrectly generated.
  • Ensure the VISA timeout is reset after a VISA device is rebooted.
Changelog

Sourced from tm-devices's changelog.

v3.2.0 (2025-05-07)

Merged Pull Requests

  • feat: Add disable_command_verification config file and environment variable option to enable speeding up automation scripts (#428)
  • python-deps(deps-dev): update ruff requirement from 0.11.7 to 0.11.8 in the python-dependencies group (#422)
  • fix: Ensure VISA timeout is reset after reboot in pi_control (#425)
  • python-deps(deps-dev): bump the python-dependencies group with 2 updates (#416)
  • Add tip in contribution guide pointing users to online docs for better viewing (#419)
  • fix: Fixed the limit[Y] commands on certain models which were being generated incorrectly (#415)
  • gh-actions(deps): bump tektronix/python-package-ci-cd (#412)
  • python-deps(deps-dev): update ruff requirement from 0.11.2 to 0.11.4 in the python-dependencies group (#413)

Added

  • Added a new config option (settable via config file or environment variable) to allow users to disable command verification (primarily affecting the .set_and_check() method) in order to speed up automation scripts that have verified, known good command sequences.

Fixed

  • Fixed a bug in the auto-generated commands for certain models where the limit[Y] commands were incorrectly generated.
  • Ensure the VISA timeout is reset after a VISA device is rebooted.

v3.1.10 (2025-04-04)

Merged Pull Requests

  • Set offset after impedance so that it is properly adjusted (#411)

Fixed

  • Fixed a bug in set_function_properties in the drivers for the internal AFG of the TekScope that could cause the offset value to change after setting impedance.

v3.1.9 (2025-04-03)

Merged Pull Requests

  • fix: Fixed the method of determining the total number of physical channel connectors on the 70kSX scope series (#408)
  • python-deps(deps-dev): update pyright requirement from 1.1.397 to 1.1.398 in the python-dependencies group (#405)
  • python-deps(deps-dev): bump the python-dependencies group with 2 updates (#404)
  • gh-actions(deps): bump tektronix/python-package-ci-cd (#403)

Fixed

  • Fixed the method of determining the total number of physical channel connectors on the 70kSX scope series to properly list all physical channels, even if not all channels can be used simultaneously, as is the case on SX scopes with the Asynchronous Time Interleaving (ATI) feature.

... (truncated)

Commits
  • ca6245e 3.2.0
  • 047ee00 feat: Add disable_command_verification config file and environment variable o...
  • d67db32 python-deps(deps-dev): update ruff requirement from 0.11.7 to 0.11.8 in the p...
  • b5c6349 fix: Ensure VISA timeout is reset after reboot in pi_control (#425)
  • 8b2575c python-deps(deps-dev): bump the python-dependencies group with 2 updates (#421)
  • f63dd48 Add tip in contribution guide pointing users to online docs for better viewin...
  • 8f9e4e1 python-deps(deps-dev): bump the python-dependencies group with 2 updates (#416)
  • 8f3b1a9 fix: Fixed the limit[Y] commands on certain models which were being generat...
  • 2ec887d gh-actions(deps): bump tektronix/python-package-ci-cd (#412)
  • 648f21c python-deps(deps-dev): update ruff requirement from 0.11.2 to 0.11.4 in the p...
  • Additional commits viewable in compare view

Updates codespell from 2.3.0 to 2.4.1

Release notes

Sourced from codespell's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: codespell-project/codespell@v2.4.0...v2.4.1

v2.4.0

What's Changed

... (truncated)

Commits
  • 63c8f83 Revert hep->heap, help, in dictionary_rare.txt from #3461 (#3624)
  • db0100e Run pytest GitHub Action on an ARM processor (#3619)
  • c6bdc1f [pre-commit.ci] autoupdate less frequently
  • 654b3ed Run ruff format
  • 913871e Apply ruff/flake8-pytest-style rule PT006
  • b782f25 Changes for ruff 0.9.1
  • 9c3a652 [pre-commit.ci] pre-commit autoupdate
  • 2626491 Remove socioeconomic entries
  • ec57cff Add spelling correction for denila and variant.
  • 2acfc37 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates mkdocs-ezglossary-plugin from 1.7.1 to 2.0.0

Changelog

Sourced from mkdocs-ezglossary-plugin's changelog.

v2.0.0

| 2025-02-10

  • Fix #24: Show all references in glossary (summary) when ignore_case=true.
  • Fix #25: Fix #25: make template file path relative to mkdocs.yml

!!! Note

This version required major refactorying of the `Glossary` class.
The interface to it changed. You may need to update your custom templates
in order to work.
Commits

Updates mkdocs-macros-plugin from 1.3.7 to 1.3.9

Changelog

Sourced from mkdocs-macros-plugin's changelog.

Changelog: Mkdocs-Macros

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

1.4.0, 2025-09-21

  • Removed: auto-install of missing pluglet (meaningful error message #262)
  • Fixed: error with yaml dumps (#258)
  • Fixed: detection of Jinja2, to allow title rendering (#266)
  • Small improvements to documentation
Commits
  • 86e31f7 Define explicitely python in update_pypi.sh
  • 6b396ec Add info in doc that a module can have relative path (#263)
  • 62daea9 Fix: Fix detection of Jinja2, to allow title rendering (#266)
  • e0ba1ba Test built-in filters (#253)
  • 0bc57e3 Fix imprecision in description of parameters for jinja2 syntax (#252)
  • 4fb7bf6 Change tests: MkDocsPage.find() -> find_text()
  • See full diff in compare view

Updates mkdocs-mermaid2-plugin from 1.2.1 to 1.2.2

Changelog

Sourced from mkdocs-mermaid2-plugin's changelog.

1.2.2, 2025-08-27

  • Fixed: deprecation warning by BeautifulSoup (#119, #120)
Commits
  • 4959ee4 Bump version for fix of #119 (Deprecation warning)
  • 0c12a8b Merge pull request #119 from omarirfa/master
  • fbfcc32 bug: fixing replacewith depreciation
  • 0511d01 Minor updates to the Debug section, for extra_javascript(#111)
  • b6f04e8 Update documentation to clarify extra_javascript as failsafe (#111)
  • See full diff in compare view

Updates packaging from 24.2 to 25.0

Release notes

Sourced from packaging's releases.

25.0

What's Changed

New Contributors

Full Changelog: pypa/packaging@24.2...25.0

Changelog

Sourced from packaging's changelog.

25.0 - 2025-04-19


* PEP 751: Add support for ``extras`` and ``dependency_groups`` markers. (:issue:`885`)
* PEP 738: Add support for Android platform tags. (:issue:`880`)
Commits
  • f585376 Bump for release
  • 600ecea Add changelog entries
  • 3910129 support 'extras' and 'dependency_groups' markers (#888)
  • 8e49b43 Add support for PEP 738 Android tags (#880)
  • e624d8e Bump the github-actions group with 3 updates (#886)
  • 71f38d8 Bump the github-actions group with 2 updates (#878)
  • 9b4922d Bump the github-actions group with 3 updates (#870)
  • 8510bd9 Upgrade to ruff 0.9.1 (#865)
  • 9375ec2 Re-add tests for Unicode file name parsing (#863)
  • 2256ed4 Bump the github-actions group across 1 directory with 2 updates (#864)
  • Additional commits viewable in compare view

Updates pygments from 2.18.0 to 2.19.2

Release notes

Sourced from pygments's releases.

2.19.2

  • Lua: Fix regression introduced in 2.19.0 (#2882, #2839)

2.19.1

  • Updated lexers:

    • Ini: Fix quoted string regression introduced in 2.19.0
    • Lua: Fix a regression introduced in 2.19.0

2.19.0

  • New lexers:

  • Updated lexers:

    • BQN: Various improvements (#2789)
    • C#: Fix number highlighting (#986, #2727), add file keyword (#2726, #2805, #2806), add various other keywords (#2745, #2770)
    • CSS: Add revert (#2766, #2775)
    • Debian control: Add Change-By field (#2757)
    • Elip: Improve punctuation handling (#2651)
    • Igor: Add int (#2801)
    • Ini: Fix quoted strings with embedded comment characters (#2767, #2720)
    • Java: Support functions returning types containing a question mark (#2737)
    • JavaScript: Support private identiiers (#2729, #2671)
    • LLVM: Add splat, improve floating-point number parsing (#2755)
    • Lua: Improve variable detection, add built-in functions (#2829)
    • Macaulay2: Update to 1.24.11 (#2800)
    • PostgreSQL: Add more EXPLAIN keywords (#2785), handle / (#2774)
    • S-Lexer: Fix keywords (#2082, #2750)
    • TransactSQL: Fix single-line comments (#2717)
    • Turtle: Fix triple quoted strings (#2744, #2758)
    • Typst: Various improvements (#2724)
    • Various: Add ^ as an operator to Matlab, Octave and Scilab (#2798)
    • Vyper: Add staticcall and extcall (#2719)
  • Mark file extensions for HTML/XML+Evoque as aliases (#2743)
  • Add a color for Operator.Word to the rrt style (#2709)
  • Fix broken link in the documentation (#2803, #2804)
  • Drop executable bit where not needed (#2781)

... (truncated)

Changelog

Sourced from pygments's changelog.

Version 2.19.2

(released June 21st, 2025)

  • Lua: Fix regression introduced in 2.19.0 (#2882, #2839)

Version 2.19.1

(released January 6th, 2025)

  • Updated lexers:

    • Ini: Fix quoted string regression introduced in 2.19.0
    • Lua: Fix a regression introduced in 2.19.0

Version 2.19.0

(released January 5th, 2025)

Updates the requirements on [typing-extensions](https://github.com/python/typing_extensions), [pip](https://github.com/pypa/pip), [poetry-pre-commit-plugin](https://github.com/vstrimaitis/poetry-pre-commit-plugin), [tm-devices](https://github.com/tektronix/tm_devices), [codespell](https://github.com/codespell-project/codespell), [mkdocs-ezglossary-plugin](https://github.com/realtimeprojects/mkdocs-ezglossary), [mkdocs-macros-plugin](https://github.com/fralau/mkdocs_macros_plugin), [mkdocs-mermaid2-plugin](https://github.com/fralau/mkdocs-mermaid2-plugin), [packaging](https://github.com/pypa/packaging), [pygments](https://github.com/pygments/pygments), [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions), [requests](https://github.com/psf/requests), [psutil](https://github.com/giampaolo/psutil), [pytest](https://github.com/pytest-dev/pytest), [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/), [bracex](https://github.com/facelessuser/bracex), [certifi](https://github.com/certifi/python-certifi), [charset-normalizer](https://github.com/jawah/charset_normalizer), [click](https://github.com/pallets/click), [editdistpy](https://github.com/mammothb/editdistpy), [editorconfig](https://github.com/editorconfig/editorconfig-core-py), [importlib-metadata](https://github.com/python/importlib_metadata), [inflect](https://github.com/jaraco/inflect), [jinja2](https://github.com/pallets/jinja), [jsbeautifier](https://github.com/ghost6991/Jsbeautifier), [markdown](https://github.com/Python-Markdown/markdown), [markupsafe](https://github.com/pallets/markupsafe), [mkdocs-autorefs](https://github.com/mkdocstrings/autorefs), [more-itertools](https://github.com/more-itertools/more-itertools), [mypy-extensions](https://github.com/python/mypy_extensions), [platformdirs](https://github.com/tox-dev/platformdirs), [pyyaml-env-tag](https://github.com/waylan/pyyaml-env-tag), [setuptools](https://github.com/pypa/setuptools), [six](https://github.com/benjaminp/six), [soupsieve](https://github.com/facelessuser/soupsieve), [super-collections](https://github.com/fralau/super-collections), [termcolor](https://github.com/termcolor/termcolor), [typeguard](https://github.com/agronholm/typeguard), [urllib3](https://github.com/urllib3/urllib3), [watchdog](https://github.com/gorakhargosh/watchdog), [wcmatch](https://github.com/facelessuser/wcmatch), [zipp](https://github.com/jaraco/zipp), [coverage[toml]](https://github.com/nedbat/coveragepy), [dataproperty](https://github.com/thombashi/DataProperty), [dnspython](https://github.com/rthalley/dnspython), [exceptiongroup](https://github.com/agronholm/exceptiongroup), [iniconfig](https://github.com/pytest-dev/iniconfig), [mbstrdecoder](https://github.com/thombashi/mbstrdecoder), [networkx](https://github.com/networkx/networkx), [pathvalidate](https://github.com/thombashi/pathvalidate), [pluggy](https://github.com/pytest-dev/pluggy), [pytablewriter](https://github.com/thombashi/pytablewriter), [pytz](https://github.com/stub42/pytz), [tabledata](https://github.com/thombashi/tabledata), [tcolorpy](https://github.com/thombashi/tcolorpy), [typepy](https://github.com/thombashi/typepy) and [typepy[datetime]](https://github.com/thombashi/typepy) to permit the latest version.

Updates `typing-extensions` from 4.12.2 to 4.13.2
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.13.2)

Updates `pip` to 25.0.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@24.0...25.0.1)

Updates `poetry-pre-commit-plugin` to 0.2.2
- [Release notes](https://github.com/vstrimaitis/poetry-pre-commit-plugin/releases)
- [Commits](vstrimaitis/poetry-pre-commit-plugin@0.1.2...0.2.2)

Updates `tm-devices` to 3.2.0
- [Release notes](https://github.com/tektronix/tm_devices/releases)
- [Changelog](https://github.com/tektronix/tm_devices/blob/main/CHANGELOG.md)
- [Commits](tektronix/tm_devices@v2.3.0...v3.2.0)

Updates `codespell` from 2.3.0 to 2.4.1
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.3.0...v2.4.1)

Updates `mkdocs-ezglossary-plugin` from 1.7.1 to 2.0.0
- [Changelog](https://github.com/realtimeprojects/mkdocs-ezglossary/blob/main/docs/releases.md)
- [Commits](realtimeprojects/mkdocs-ezglossary@v1.7.1...v2.0.0)

Updates `mkdocs-macros-plugin` from 1.3.7 to 1.3.9
- [Release notes](https://github.com/fralau/mkdocs_macros_plugin/releases)
- [Changelog](https://github.com/fralau/mkdocs-macros-plugin/blob/master/CHANGELOG.md)
- [Commits](fralau/mkdocs-macros-plugin@v1.3.7...v1.3.9)

Updates `mkdocs-mermaid2-plugin` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/fralau/mkdocs-mermaid2-plugin/releases)
- [Changelog](https://github.com/fralau/mkdocs-mermaid2-plugin/blob/master/CHANGELOG.md)
- [Commits](fralau/mkdocs-mermaid2-plugin@v1.2.1...v1.2.2)

Updates `packaging` from 24.2 to 25.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@24.2...25.0)

Updates `pygments` from 2.18.0 to 2.19.2
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.18.0...2.19.2)

Updates `pymdown-extensions` from 10.12 to 10.15
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@10.12...10.15)

Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `psutil` from 6.1.0 to 7.1.0
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-6.1.0...release-7.1.0)

Updates `pytest` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...8.3.5)

Updates `beautifulsoup4` from 4.12.3 to 4.13.5

Updates `bracex` from 2.5.post1 to 2.6
- [Release notes](https://github.com/facelessuser/bracex/releases)
- [Commits](facelessuser/bracex@2.5.post1...2.6)

Updates `certifi` from 2024.8.30 to 2025.8.3
- [Commits](certifi/python-certifi@2024.08.30...2025.08.03)

Updates `charset-normalizer` from 3.4.0 to 3.4.3
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.3)

Updates `click` from 8.1.7 to 8.1.8
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.7...8.1.8)

Updates `editdistpy` from 0.1.5 to 0.1.6
- [Release notes](https://github.com/mammothb/editdistpy/releases)
- [Changelog](https://github.com/mammothb/editdistpy/blob/master/CHANGELOG.md)
- [Commits](mammothb/editdistpy@v0.1.5...v0.1.6)

Updates `editorconfig` from 0.12.4 to 0.17.1
- [Commits](editorconfig/editorconfig-core-py@v0.12.4...v0.17.1)

Updates `importlib-metadata` from 8.5.0 to 8.7.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.5.0...v8.7.0)

Updates `inflect` from 7.4.0 to 7.5.0
- [Release notes](https://github.com/jaraco/inflect/releases)
- [Changelog](https://github.com/jaraco/inflect/blob/main/NEWS.rst)
- [Commits](jaraco/inflect@v7.4.0...v7.5.0)

Updates `jinja2` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.5...3.1.6)

Updates `jsbeautifier` from 1.15.1 to 1.15.4
- [Commits](https://github.com/ghost6991/Jsbeautifier/commits)

Updates `markdown` from 3.7 to 3.9
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.7...3.9.0)

Updates `markupsafe` from 2.1.5 to 3.0.2
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.1.5...3.0.2)

Updates `mkdocs-autorefs` from 1.2.0 to 1.4.3
- [Release notes](https://github.com/mkdocstrings/autorefs/releases)
- [Changelog](https://github.com/mkdocstrings/autorefs/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/autorefs@1.2.0...1.4.3)

Updates `more-itertools` from 10.5.0 to 10.8.0
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v10.5.0...v10.8.0)

Updates `mypy-extensions` from 1.0.0 to 1.1.0
- [Commits](python/mypy_extensions@1.0.0...1.1.0)

Updates `platformdirs` from 4.3.6 to 4.4.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.3.6...4.4.0)

Updates `pyyaml-env-tag` from 0.1 to 1.1
- [Commits](waylan/pyyaml-env-tag@0.1...1.1)

Updates `setuptools` from 75.3.0 to 80.9.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.3.0...v80.9.0)

Updates `six` from 1.16.0 to 1.17.0
- [Changelog](https://github.com/benjaminp/six/blob/main/CHANGES)
- [Commits](benjaminp/six@1.16.0...1.17.0)

Updates `soupsieve` from 2.6 to 2.8
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.6...2.8)

Updates `super-collections` from 0.5.3 to 0.5.7
- [Commits](fralau/super-collections@v0.5.3...v0.5.7)

Updates `termcolor` from 2.4.0 to 3.1.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@2.4.0...3.1.0)

Updates `typeguard` from 4.4.0 to 4.4.4
- [Release notes](https://github.com/agronholm/typeguard/releases)
- [Changelog](https://github.com/agronholm/typeguard/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/typeguard@4.4.0...4.4.4)

Updates `urllib3` from 2.2.3 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.2.3...2.5.0)

Updates `watchdog` from 4.0.2 to 6.0.0
- [Release notes](https://github.com/gorakhargosh/watchdog/releases)
- [Changelog](https://github.com/gorakhargosh/watchdog/blob/master/changelog.rst)
- [Commits](gorakhargosh/watchdog@v4.0.2...v6.0.0)

Updates `wcmatch` from 10.0 to 10.1
- [Release notes](https://github.com/facelessuser/wcmatch/releases)
- [Commits](facelessuser/wcmatch@10.0...10.1)

Updates `zipp` from 3.20.2 to 3.23.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.20.2...v3.23.0)

Updates `coverage[toml]` from 7.6.1 to 7.10.7
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.6.1...7.10.7)

Updates `dataproperty` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/thombashi/DataProperty/releases)
- [Commits](thombashi/DataProperty@v1.0.1...v1.1.0)

Updates `dnspython` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst)
- [Commits](rthalley/dnspython@v2.6.1...v2.7.0)

Updates `exceptiongroup` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.2.2...1.3.0)

Updates `iniconfig` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.0.0...v2.1.0)

Updates `mbstrdecoder` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/thombashi/mbstrdecoder/releases)
- [Commits](thombashi/mbstrdecoder@v1.1.3...v1.1.4)

Updates `networkx` from 3.1 to 3.2.1
- [Release notes](https://github.com/networkx/networkx/releases)
- [Commits](networkx/networkx@networkx-3.1...networkx-3.2.1)

Updates `pathvalidate` from 3.2.1 to 3.3.1
- [Release notes](https://github.com/thombashi/pathvalidate/releases)
- [Changelog](https://github.com/thombashi/pathvalidate/blob/master/CHANGELOG.md)
- [Commits](thombashi/pathvalidate@v3.2.1...v3.3.1)

Updates `pluggy` from 1.5.0 to 1.6.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.5.0...1.6.0)

Updates `pytablewriter` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/thombashi/pytablewriter/releases)
- [Changelog](https://github.com/thombashi/pytablewriter/blob/master/CHANGELOG.md)
- [Commits](thombashi/pytablewriter@v1.2.0...v1.2.1)

Updates `pytz` from 2024.2 to 2025.2
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2024.2...release_2025.2)

Updates `tabledata` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/thombashi/tabledata/releases)
- [Commits](thombashi/tabledata@v1.3.3...v1.3.4)

Updates `tcolorpy` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/thombashi/tcolorpy/releases)
- [Changelog](https://github.com/thombashi/tcolorpy/blob/master/CHANGELOG.md)
- [Commits](thombashi/tcolorpy@v0.1.6...v0.1.7)

Updates `typepy` from 1.3.2 to 1.3.4
- [Release notes](https://github.com/thombashi/typepy/releases)
- [Commits](thombashi/typepy@v1.3.2...v1.3.4)

Updates `typepy[datetime]` from 1.3.2 to 1.3.4
- [Release notes](https://github.com/thombashi/typepy/releases)
- [Commits](thombashi/typepy@v1.3.2...v1.3.4)

---
updated-dependencies:
- dependency-name: typing-extensions
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pip
  dependency-version: 25.0.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: poetry-pre-commit-plugin
  dependency-version: 0.2.2
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: tm-devices
  dependency-version: 3.2.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: codespell
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mkdocs-ezglossary-plugin
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mkdocs-macros-plugin
  dependency-version: 1.3.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mkdocs-mermaid2-plugin
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: packaging
  dependency-version: '25.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pygments
  dependency-version: 2.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pymdown-extensions
  dependency-version: '10.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: psutil
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 8.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: beautifulsoup4
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: bracex
  dependency-version: '2.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: click
  dependency-version: 8.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: editdistpy
  dependency-version: 0.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: editorconfig
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: importlib-metadata
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: inflect
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: jsbeautifier
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: markdown
  dependency-version: '3.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mkdocs-autorefs
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: more-itertools
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy-extensions
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: platformdirs
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyyaml-env-tag
  dependency-version: '1.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: setuptools
  dependency-version: 80.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: six
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: soupsieve
  dependency-version: '2.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: super-collections
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: termcolor
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: typeguard
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: watchdog
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: wcmatch
  dependency-version: '10.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: zipp
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: coverage[toml]
  dependency-version: 7.10.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: dataproperty
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: dnspython
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: exceptiongroup
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: iniconfig
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mbstrdecoder
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: networkx
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pathvalidate
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pluggy
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytablewriter
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pytz
  dependency-version: '2025.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: tabledata
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: tcolorpy
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: typepy
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: typepy[datetime]
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@github-actions
Copy link

Dependency Review

The following issues were found:
  • ❌ 2 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

docs/requirements.txt

NameVersionVulnerabilitySeverity
setuptools75.3.2setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Writehigh

tests/requirements.txt

NameVersionVulnerabilitySeverity
setuptools75.3.2setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Writehigh
setuptools75.3.2setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Writehigh

License Issues

docs/requirements.txt

PackageVersionLicenseIssue Type
super-collections0.5.7NullUnknown License
mkdocs-macros-plugin1.3.9NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
pip/setuptools 75.3.2 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 6Found 10/15 approved changesets -- score normalized to 6
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1015 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts⚠️ 2binaries present in source code
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/beautifulsoup4 4.13.5 UnknownUnknown
pip/certifi 2025.8.3 🟢 6.4
Details
CheckScoreReason
Maintained🟢 76 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 7
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/charset-normalizer 3.4.3 🟢 8.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 0Found 0/4 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases🟢 84 out of the last 5 releases have a total of 4 signed artifacts.
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
CI-Tests🟢 107 out of 7 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 3project has 1 contributing companies or organizations -- score normalized to 3
pip/click 8.1.8 🟢 7.2
Details
CheckScoreReason
Code-Review🟢 6Found 4/6 approved changesets -- score normalized to 6
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
Signed-Releases🟢 84 out of the last 5 releases have a total of 4 signed artifacts.
Security-Policy🟢 9security policy file detected
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/codespell 2.4.1 🟢 7.1
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/editorconfig 0.17.0 UnknownUnknown
pip/jinja2 3.1.6 🟢 6.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/18 approved changesets -- score normalized to 0
Maintained🟢 108 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
Signed-Releases🟢 104 out of the last 4 releases have a total of 4 signed artifacts.
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 9security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/jsbeautifier 1.15.4 UnknownUnknown
pip/mkdocs-ezglossary-plugin 2.0.0 UnknownUnknown
pip/mkdocs-macros-plugin 1.3.9 UnknownUnknown
pip/mkdocs-mermaid2-plugin 1.2.2 🟢 4
Details
CheckScoreReason
Maintained🟢 53 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 5
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 1Found 3/26 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/mypy-extensions 1.1.0 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 6Found 17/27 approved changesets -- score normalized to 6
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/packaging 25.0 🟢 7.6
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1011 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 4binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
pip/pygments 2.19.2 🟢 6.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Code-Review🟢 6Found 12/18 approved changesets -- score normalized to 6
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
pip/pymdown-extensions 10.15 🟢 4.8
Details
CheckScoreReason
Security-Policy🟢 10security policy file detected
Maintained🟢 106 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 011 existing vulnerabilities detected
pip/requests 2.32.4 🟢 8.4
Details
CheckScoreReason
Maintained🟢 1020 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
pip/six 1.17.0 🟢 4.3
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 3Found 10/30 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/soupsieve 2.7 🟢 5.6
Details
CheckScoreReason
Code-Review⚠️ 1Found 4/27 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/super-collections 0.5.7 UnknownUnknown
pip/typing-extensions 4.13.2 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 9Found 27/30 approved changesets -- score normalized to 9
Maintained🟢 1025 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 46 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/setuptools 75.3.2 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 6Found 10/15 approved changesets -- score normalized to 6
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1015 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts⚠️ 2binaries present in source code
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/beautifulsoup4 4.13.5 UnknownUnknown
pip/certifi 2025.8.3 🟢 6.4
Details
CheckScoreReason
Maintained🟢 76 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 7
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/charset-normalizer 3.4.3 🟢 8.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 0Found 0/4 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases🟢 84 out of the last 5 releases have a total of 4 signed artifacts.
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
CI-Tests🟢 107 out of 7 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 3project has 1 contributing companies or organizations -- score normalized to 3
pip/exceptiongroup 1.3.0 UnknownUnknown
pip/iniconfig 2.1.0 UnknownUnknown
pip/jinja2 3.1.6 🟢 6.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/18 approved changesets -- score normalized to 0
Maintained🟢 108 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
Signed-Releases🟢 104 out of the last 4 releases have a total of 4 signed artifacts.
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 9security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/packaging 25.0 🟢 7.6
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1011 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 4binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
pip/psutil 7.1.0 🟢 5.7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 5/30 approved changesets -- score normalized to 1
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/pytest 8.3.5 🟢 6.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Security-Policy⚠️ 0security policy file not detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 91 existing vulnerabilities detected
pip/pytz 2025.2 🟢 4.6
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review⚠️ 1Found 3/25 approved changesets -- score normalized to 1
Security-Policy🟢 9security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Packaging🟢 10packaging workflow detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/requests 2.32.4 🟢 8.4
Details
CheckScoreReason
Maintained🟢 1020 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 9SAST tool detected but not run on all commits
pip/six 1.17.0 🟢 4.3
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 3Found 10/30 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/soupsieve 2.7 🟢 5.6
Details
CheckScoreReason
Code-Review⚠️ 1Found 4/27 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/typing-extensions 4.13.2 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 9Found 27/30 approved changesets -- score normalized to 9
Maintained🟢 1025 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 46 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • docs/requirements.txt
  • tests/requirements.txt

@codecov
Copy link

codecov bot commented Sep 22, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.72%. Comparing base (ad37893) to head (5342bda).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #101   +/-   ##
=======================================
  Coverage   80.72%   80.72%           
=======================================
  Files           3        3           
  Lines         524      524           
  Branches       94       94           
=======================================
  Hits          423      423           
  Misses         82       82           
  Partials       19       19           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions
Copy link

github-actions bot commented Sep 22, 2025

Test Results (ubuntu)

path passed failed subtotal
tests/test_client.py 61 1 62
tests/test_logging.py 3 3
TOTAL 64 1 65
tests/test_client.py
tekhsi_client = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>
capsys = <_pytest.capture.CaptureFixture object at 0x7ff3b901c5c0>
instrument = True, sum_count = 5, sum_acq_time = 10.0, sum_data_rate = 50.0
expected_output = 'Average Update Rate:0.50, Data Rate:10.00Mbs'

    @pytest.mark.parametrize(
        ("instrument", "sum_count", "sum_acq_time", "sum_data_rate", "expected_output"),
        [
            (True, 5, 10.0, 50.0, "Average Update Rate:0.50, Data Rate:10.00Mbs"),
        ],
    )
    def test_server_connection(
        tekhsi_client: TekHSIConnect,
        capsys: pytest.CaptureFixture[str],
        instrument: bool,
        sum_count: int,
        sum_acq_time: float,
        sum_data_rate: float,
        expected_output: str,
    ) -> None:
        """Test the server connection using the TekHSI client.
    
        Args:
            tekhsi_client: An instance of the TekHSI client to be tested.
            capsys (CaptureFixture): Pytest fixture to capture system output.
            instrument: Whether the instrument is connected.
            sum_count: The sum count.
            sum_acq_time: The sum acquisition time.
            sum_data_rate: The sum data rate.
            expected_output: The expected output message.
        """
        # Set the required attributes
        tekhsi_client._instrument = instrument
        tekhsi_client._sum_count = sum_count
        tekhsi_client._sum_acq_time = sum_acq_time
        tekhsi_client._sum_data_rate = sum_data_rate
    
        # Set the verbose attribute to True
        tekhsi_client.verbose = True
        # Use the context manager to handle connection
>       with tekhsi_client as connection:

capsys     = <_pytest.capture.CaptureFixture object at 0x7ff3b901c5c0>
captured   = CaptureResult(out='2025-09-22 12:50:40.000665 - enter()\n', err='')
connection = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>
expected_output = 'Average Update Rate:0.50, Data Rate:10.00Mbs'
instrument = True
request    = name: "test_client"

response   = status: CONNECTSTATUS_SUCCESS

sum_acq_time = 10.0
sum_count  = 5
sum_data_rate = 50.0
tekhsi_client = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>

tests/test_client.py:58: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:211: in __exit__
    self.close()
        exc_tb     = None
        exc_type   = None
        exc_val    = None
        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:443: in close
    self.force_sequence()
        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:500: in force_sequence
    self.connection.RequestNewSequence(request)
        request    = name: "53095b1c-cde5-41f2-af9c-5589743e42a7"

        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x7ff3b912f710>
.tox/tests/lib/python3.12/site-packages/grpc/_channel.py:1181: in __call__
    return _end_unary_response_blocking(state, call, False, None)
        call       = <grpc._cython.cygrpc.SegregatedCall object at 0x7ff3b90d0240>
        compression = None
        credentials = None
        metadata   = None
        request    = name: "53095b1c-cde5-41f2-af9c-5589743e42a7"

        self       = <grpc._channel._UnaryUnaryMultiCallable object at 0x7ff3b9084fa0>
        state      = <grpc._channel._RPCState object at 0x7ff3b901ca70>
        timeout    = None
        wait_for_ready = None
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

state = <grpc._channel._RPCState object at 0x7ff3b901ca70>
call = <grpc._cython.cygrpc.SegregatedCall object at 0x7ff3b90d0240>
with_call = False, deadline = None

    def _end_unary_response_blocking(
        state: _RPCState,
        call: cygrpc.SegregatedCall,
        with_call: bool,
        deadline: Optional[float],
    ) -> Union[ResponseType, Tuple[ResponseType, grpc.Call]]:
        if state.code is grpc.StatusCode.OK:
            if with_call:
                rendezvous = _MultiThreadedRendezvous(state, call, None, deadline)
                return state.response, rendezvous
            else:
                return state.response
        else:
>           raise _InactiveRpcError(state)  # pytype: disable=not-instantiable
E           grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
E           	status = StatusCode.FAILED_PRECONDITION
E           	details = ""
E           	debug_error_string = "UNKNOWN:Error received from peer ipv6:%5B::1%5D:50312 {grpc_status:9, grpc_message:""}"
E           >

call       = <grpc._cython.cygrpc.SegregatedCall object at 0x7ff3b90d0240>
deadline   = None
state      = <grpc._channel._RPCState object at 0x7ff3b901ca70>
with_call  = False

.tox/tests/lib/python3.12/site-packages/grpc/_channel.py:1009: _InactiveRpcError

Link to workflow run

@github-actions
Copy link

github-actions bot commented Sep 22, 2025

Test Results (windows)

path passed subtotal
tests\test_client.py 62 62
tests\test_logging.py 3 3
TOTAL 65 65

Link to workflow run

@github-actions
Copy link

github-actions bot commented Sep 22, 2025

Test Results (macos)

path passed failed subtotal
tests/test_client.py 61 1 62
tests/test_logging.py 3 3
TOTAL 64 1 65
tests/test_client.py
tekhsi_client = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>
capsys = <_pytest.capture.CaptureFixture object at 0x1105e3aa0>
instrument = True, sum_count = 5, sum_acq_time = 10.0, sum_data_rate = 50.0
expected_output = 'Average Update Rate:0.50, Data Rate:10.00Mbs'

    @pytest.mark.parametrize(
        ("instrument", "sum_count", "sum_acq_time", "sum_data_rate", "expected_output"),
        [
            (True, 5, 10.0, 50.0, "Average Update Rate:0.50, Data Rate:10.00Mbs"),
        ],
    )
    def test_server_connection(
        tekhsi_client: TekHSIConnect,
        capsys: pytest.CaptureFixture[str],
        instrument: bool,
        sum_count: int,
        sum_acq_time: float,
        sum_data_rate: float,
        expected_output: str,
    ) -> None:
        """Test the server connection using the TekHSI client.
    
        Args:
            tekhsi_client: An instance of the TekHSI client to be tested.
            capsys (CaptureFixture): Pytest fixture to capture system output.
            instrument: Whether the instrument is connected.
            sum_count: The sum count.
            sum_acq_time: The sum acquisition time.
            sum_data_rate: The sum data rate.
            expected_output: The expected output message.
        """
        # Set the required attributes
        tekhsi_client._instrument = instrument
        tekhsi_client._sum_count = sum_count
        tekhsi_client._sum_acq_time = sum_acq_time
        tekhsi_client._sum_data_rate = sum_data_rate
    
        # Set the verbose attribute to True
        tekhsi_client.verbose = True
        # Use the context manager to handle connection
>       with tekhsi_client as connection:

capsys     = <_pytest.capture.CaptureFixture object at 0x1105e3aa0>
captured   = CaptureResult(out='2025-09-22 12:50:35.000333 - enter()\n', err='')
connection = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>
expected_output = 'Average Update Rate:0.50, Data Rate:10.00Mbs'
instrument = True
request    = name: "test_client"

response   = status: CONNECTSTATUS_SUCCESS

sum_acq_time = 10.0
sum_count  = 5
sum_data_rate = 50.0
tekhsi_client = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>

tests/test_client.py:58: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:211: in __exit__
    self.close()
        exc_tb     = None
        exc_type   = None
        exc_val    = None
        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:443: in close
    self.force_sequence()
        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>
.tox/tests/lib/python3.12/site-packages/tekhsi/tek_hsi_connect.py:500: in force_sequence
    self.connection.RequestNewSequence(request)
        request    = name: "3c8e2d8a-7858-425f-b400-2b03f6d7bdbb"

        self       = <tekhsi.tek_hsi_connect.TekHSIConnect object at 0x1104d3890>
.tox/tests/lib/python3.12/site-packages/grpc/_channel.py:1181: in __call__
    return _end_unary_response_blocking(state, call, False, None)
        call       = <grpc._cython.cygrpc.SegregatedCall object at 0x1105c6d40>
        compression = None
        credentials = None
        metadata   = None
        request    = name: "3c8e2d8a-7858-425f-b400-2b03f6d7bdbb"

        self       = <grpc._channel._UnaryUnaryMultiCallable object at 0x1105fcd70>
        state      = <grpc._channel._RPCState object at 0x1105e3fb0>
        timeout    = None
        wait_for_ready = None
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

state = <grpc._channel._RPCState object at 0x1105e3fb0>
call = <grpc._cython.cygrpc.SegregatedCall object at 0x1105c6d40>
with_call = False, deadline = None

    def _end_unary_response_blocking(
        state: _RPCState,
        call: cygrpc.SegregatedCall,
        with_call: bool,
        deadline: Optional[float],
    ) -> Union[ResponseType, Tuple[ResponseType, grpc.Call]]:
        if state.code is grpc.StatusCode.OK:
            if with_call:
                rendezvous = _MultiThreadedRendezvous(state, call, None, deadline)
                return state.response, rendezvous
            else:
                return state.response
        else:
>           raise _InactiveRpcError(state)  # pytype: disable=not-instantiable
E           grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
E           	status = StatusCode.FAILED_PRECONDITION
E           	details = ""
E           	debug_error_string = "UNKNOWN:Error received from peer ipv6:%5B::1%5D:50312 {grpc_message:"", grpc_status:9}"
E           >

call       = <grpc._cython.cygrpc.SegregatedCall object at 0x1105c6d40>
deadline   = None
state      = <grpc._channel._RPCState object at 0x1105e3fb0>
with_call  = False

.tox/tests/lib/python3.12/site-packages/grpc/_channel.py:1009: _InactiveRpcError

Link to workflow run

@nfelt14 nfelt14 closed this Sep 22, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 22, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/python-dependencies-4eda498028 branch September 22, 2025 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants