From 43add70e7dc0b4bdffa09f4a380095eb55b11df1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Jan 2026 09:35:09 +0000 Subject: [PATCH 1/3] Bump the pip group across 1 directory with 4 updates Bumps the pip group with 4 updates in the / directory: [sigstore](https://github.com/sigstore/sigstore-python), [mypy](https://github.com/python/mypy), [pyfakefs](https://github.com/pytest-dev/pyfakefs) and [pytest](https://github.com/pytest-dev/pytest). Updates `sigstore` from 3.6.5 to 4.1.0 - [Release notes](https://github.com/sigstore/sigstore-python/releases) - [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/sigstore-python/compare/v3.6.5...v4.1.0) Updates `mypy` from 1.19.0 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v1.19.0...v1.19.1) Updates `pyfakefs` from 5.10.2 to 6.0.0 - [Release notes](https://github.com/pytest-dev/pyfakefs/releases) - [Changelog](https://github.com/pytest-dev/pyfakefs/blob/main/CHANGES.md) - [Commits](https://github.com/pytest-dev/pyfakefs/compare/v5.10.2...v6.0.0) Updates `pytest` from 8.4.2 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/8.4.2...9.0.2) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pyfakefs dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip ... Signed-off-by: dependabot[bot] --- dev-requirements.txt | 12 ++++++------ mypy-requirements.txt | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/dev-requirements.txt b/dev-requirements.txt index ce5f685c..0687a83d 100644 --- a/dev-requirements.txt +++ b/dev-requirements.txt @@ -540,17 +540,17 @@ propcache==0.2.1 \ # via # aiohttp # yarl -pyfakefs==5.10.2 \ - --hash=sha256:6ff0e84653a71efc6a73f9ee839c3141e3a7cdf4e1fb97666f82ac5b24308d64 \ - --hash=sha256:8ae0e5421e08de4e433853a4609a06a1835f4bc2a3ce13b54f36713a897474ba +pyfakefs==6.0.0 \ + --hash=sha256:059fd0b2174bfeed499ecb0a59bccff557f267cc6d885afc0e5b76e78b6d50da \ + --hash=sha256:44ef5ab0294e7e623b8e56b4f2d8c9468b737d6e8641053063c43033d2c8c180 # via -r dev-requirements.in pygments==2.19.2 \ --hash=sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887 \ --hash=sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b # via pytest -pytest==8.4.2 \ - --hash=sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01 \ - --hash=sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79 +pytest==9.0.2 \ + --hash=sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b \ + --hash=sha256:75186651a92bd89611d1d9fc20f0b4345fd827c41ccd5c299a868a05d70edf11 # via # -r dev-requirements.in # pytest-aiohttp diff --git a/mypy-requirements.txt b/mypy-requirements.txt index 9c7a183d..e66a7b0c 100644 --- a/mypy-requirements.txt +++ b/mypy-requirements.txt @@ -1,10 +1,10 @@ aiohttp==3.13.3 alive_progress>=3.3.0 -mypy==1.19.0 +mypy==1.19.1 pyfakefs pytest pytest-mock python-gnupg # untyped :( -sigstore==3.6.5 +sigstore==4.1.0 types-paramiko types-requests From 8b08f842c5479f8fc1a7836f6e6eff151526c910 Mon Sep 17 00:00:00 2001 From: Ezio Melotti Date: Wed, 7 Jan 2026 12:17:54 +0100 Subject: [PATCH 2/3] Revert sigstore to 3.6.5 --- mypy-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mypy-requirements.txt b/mypy-requirements.txt index e66a7b0c..4800dfe2 100644 --- a/mypy-requirements.txt +++ b/mypy-requirements.txt @@ -5,6 +5,6 @@ pyfakefs pytest pytest-mock python-gnupg # untyped :( -sigstore==4.1.0 +sigstore==3.6.5 types-paramiko types-requests From 433b04a034196a90001e42cde25188fd048d6a6c Mon Sep 17 00:00:00 2001 From: Ezio Melotti Date: Wed, 7 Jan 2026 12:29:14 +0100 Subject: [PATCH 3/3] Sort the arbitrary order from os.listdir Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> --- add_to_pydotorg.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/add_to_pydotorg.py b/add_to_pydotorg.py index 1cd9a1ad..75a9469d 100755 --- a/add_to_pydotorg.py +++ b/add_to_pydotorg.py @@ -271,7 +271,7 @@ def list_files( ) -> Generator[tuple[str, str, str, bool, str], None, None]: """List all of the release's download files.""" reldir = base_version(release) - for rfile in os.listdir(path.join(ftp_root, reldir)): + for rfile in sorted(os.listdir(path.join(ftp_root, reldir))): if not path.isfile(path.join(ftp_root, reldir, rfile)): continue