From ed53639ec6a690bbcc0948b1bd8f9e92f8e63de2 Mon Sep 17 00:00:00 2001 From: "kleinanzeigen-bot-tu[bot]" <100048303+kleinanzeigen-bot-tu[bot]@users.noreply.github.com> Date: Wed, 3 Dec 2025 07:41:58 +0100 Subject: [PATCH] chore: Update Python dependencies (#702) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ✔ Update pip-audit 2.9.0 -> 2.10.0 successful ✔ Update cyclonedx-python-lib 9.1.0 -> 11.5.0 successful Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- pdm.lock | 47 ++++++++++++++++++++++++----------------------- 1 file changed, 24 insertions(+), 23 deletions(-) diff --git a/pdm.lock b/pdm.lock index 1dbf1c8..bb3ce76 100644 --- a/pdm.lock +++ b/pdm.lock @@ -486,19 +486,20 @@ files = [ [[package]] name = "cyclonedx-python-lib" -version = "9.1.0" -requires_python = "<4.0,>=3.8" +version = "11.5.0" +requires_python = "<4.0,>=3.9" summary = "Python library for CycloneDX" groups = ["dev"] dependencies = [ "license-expression<31,>=30", "packageurl-python<2,>=0.11", - "py-serializable<3.0.0,>=2.0.0", + "py-serializable<3.0.0,>=2.1.0", "sortedcontainers<3.0.0,>=2.4.0", + "typing-extensions<5.0,>=4.6; python_version < \"3.13\"", ] files = [ - {file = "cyclonedx_python_lib-9.1.0-py3-none-any.whl", hash = "sha256:55693fca8edaecc3363b24af14e82cc6e659eb1e8353e58b587c42652ce0fb52"}, - {file = "cyclonedx_python_lib-9.1.0.tar.gz", hash = "sha256:86935f2c88a7b47a529b93c724dbd3e903bc573f6f8bd977628a7ca1b5dadea1"}, + {file = "cyclonedx_python_lib-11.5.0-py3-none-any.whl", hash = "sha256:5cca5b444421d39a83b45fcab24ed3e90cafaca97b89fc45cb10d2516bd2d79d"}, + {file = "cyclonedx_python_lib-11.5.0.tar.gz", hash = "sha256:175819663ae5a3c9930462ebcbddd6abb3ad5f237e12a503dbd0af320a9c5b96"}, ] [[package]] @@ -1058,24 +1059,25 @@ files = [ [[package]] name = "pip-audit" -version = "2.9.0" -requires_python = ">=3.9" +version = "2.10.0" +requires_python = ">=3.10" summary = "A tool for scanning Python environments for known vulnerabilities" groups = ["dev"] dependencies = [ "CacheControl[filecache]>=0.13.0", - "cyclonedx-python-lib<10,>=5", + "cyclonedx-python-lib<12,>=5", "packaging>=23.0.0", "pip-api>=0.0.28", "pip-requirements-parser>=32.0.0", "platformdirs>=4.2.0", "requests>=2.31.0", "rich>=12.4", - "toml>=0.10", + "tomli-w>=1.2.0", + "tomli>=2.2.1", ] files = [ - {file = "pip_audit-2.9.0-py3-none-any.whl", hash = "sha256:348b16e60895749a0839875d7cc27ebd692e1584ebe5d5cb145941c8e25a80bd"}, - {file = "pip_audit-2.9.0.tar.gz", hash = "sha256:0b998410b58339d7a231e5aa004326a294e4c7c6295289cdc9d5e1ef07b1f44d"}, + {file = "pip_audit-2.10.0-py3-none-any.whl", hash = "sha256:16e02093872fac97580303f0848fa3ad64f7ecf600736ea7835a2b24de49613f"}, + {file = "pip_audit-2.10.0.tar.gz", hash = "sha256:427ea5bf61d1d06b98b1ae29b7feacc00288a2eced52c9c58ceed5253ef6c2a4"}, ] [[package]] @@ -1667,24 +1669,12 @@ files = [ {file = "sortedcontainers-2.4.0.tar.gz", hash = "sha256:25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88"}, ] -[[package]] -name = "toml" -version = "0.10.2" -requires_python = ">=2.6, !=3.0.*, !=3.1.*, !=3.2.*" -summary = "Python Library for Tom's Obvious, Minimal Language" -groups = ["dev"] -files = [ - {file = "toml-0.10.2-py2.py3-none-any.whl", hash = "sha256:806143ae5bfb6a3c6e736a764057db0e6a0e05e338b5630894a5f779cabb4f9b"}, - {file = "toml-0.10.2.tar.gz", hash = "sha256:b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f"}, -] - [[package]] name = "tomli" version = "2.3.0" requires_python = ">=3.8" summary = "A lil' TOML parser" groups = ["dev"] -marker = "python_version < \"3.11\"" files = [ {file = "tomli-2.3.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:88bd15eb972f3664f5ed4b57c1634a97153b4bac4479dcb6a495f41921eb7f45"}, {file = "tomli-2.3.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:883b1c0d6398a6a9d29b508c331fa56adbcdff647f6ace4dfca0f50e90dfd0ba"}, @@ -1730,6 +1720,17 @@ files = [ {file = "tomli-2.3.0.tar.gz", hash = "sha256:64be704a875d2a59753d80ee8a533c3fe183e3f06807ff7dc2232938ccb01549"}, ] +[[package]] +name = "tomli-w" +version = "1.2.0" +requires_python = ">=3.9" +summary = "A lil' TOML writer" +groups = ["dev"] +files = [ + {file = "tomli_w-1.2.0-py3-none-any.whl", hash = "sha256:188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90"}, + {file = "tomli_w-1.2.0.tar.gz", hash = "sha256:2dd14fac5a47c27be9cd4c976af5a12d87fb1f0b4512f81d69cce3b35ae25021"}, +] + [[package]] name = "typer" version = "0.20.0"