Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 3 updates - #30

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-3a4db204c5
Open

chore(deps): bump the python-dependencies group across 1 directory with 3 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-3a4db204c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on ollama, gitpython and cryptography to permit the latest version.
Updates ollama to 0.6.3

Release notes

Sourced from ollama's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: ollama/ollama-python@v0.6.2...v0.6.3

Commits
  • 8785556 types/client: relax think type to support model-defined thinking levels (#744)
  • ed18cea feat: add System One API support (#749)
  • b28b1e8 readme: update to use gemma 4 and format (#740)
  • fa85099 types: make Image path extension check case-insensitive (#696)
  • 25b9329 fix: handle multiple tool calls in tools examples (#634)
  • 3c5a26a client: widen sync generate think type to accept string levels (#697)
  • See full diff in compare view

Updates gitpython to 3.2.0

Release notes

Sourced from gitpython's releases.

3.2.0 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.62...3.2.0

Commits
  • 6a7180a prepare for next release, v3.2
  • 25a1a69 Merge pull request #2259 from radhika1314/config-option-line-bound
  • a3e1ea4 Merge pull request #2258 from gitpython-developers/sec-audit
  • 1a2117c fix(remote): validate protocols in rendered transport arguments
  • 2235723 fix(config): bound option-line parsing
  • cc02e45 ci: remove codespell checks and configuration
  • f2dfa9f fix(index): confine staging reads to worktree files
  • d1576c4 fix(tree): validate entry names and record boundaries
  • a75aedf fix(index): validate paths at native index boundaries
  • 428d205 fix(repo): validate rendered archive remote options
  • Additional commits viewable in compare view

Updates cryptography to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.

.. _v50-0-1:


50.0.1 - 2026-08-25

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

50.0.0 - 2026-07-31


* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
32c17a7 
…th 3 updates

Updates the requirements on [ollama](https://github.com/ollama/ollama-python), [gitpython](https://github.com/gitpython-developers/GitPython) and [cryptography](https://github.com/pyca/cryptography) to permit the latest version.

Updates `ollama` to 0.6.3
- [Release notes](https://github.com/ollama/ollama-python/releases)
- [Commits](ollama/ollama-python@v0.6.2...v0.6.3)

Updates `gitpython` to 3.2.0
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.61...3.2.0)

Updates `cryptography` to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

---
updated-dependencies:
- dependency-name: ollama
  dependency-version: 0.6.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: gitpython
  dependency-version: 3.2.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 5, 2026
@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown

♟️ chess-review-bot — PR Game Review

Accuracy: 90.0/100 · 1 files · +3/-3 · 0 Blunder??

File Category Why
requirements.txt Best small, focused, single-file change

chess-review-bot scores diffs, not people. Run chessreview --format text locally for the full report.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants