From acc02f783b15f3a03e026a54a87917ac5330bcdc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 19:00:14 +0000 Subject: [PATCH] build(deps): bump the semgrep group in /.github with 21 updates Bumps the semgrep group in /.github with 21 updates: | Package | From | To | | --- | --- | --- | | [boltons](https://github.com/mahmoud/boltons) | `21.0.0` | `26.2.0` | | [click](https://github.com/pallets/click) | `8.4.2` | `8.5.0` | | [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.2.2` | `1.3.1` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.1` | | [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.1` | `4.26.0` | | [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.29.0` | `2.3.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.45.1` | | [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.45.1` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.45.1` | | [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.66b1` | | [opentelemetry-instrumentation-requests](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.66b1` | | [opentelemetry-instrumentation-threading](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.66b1` | | [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.45.1` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.37.0` | `1.45.1` | | [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.58b0` | `0.66b1` | | [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.58b0` | `0.66b1` | | [peewee](https://github.com/coleifer/peewee) | `3.19.0` | `4.5.3` | | [protobuf](https://developers.google.com/protocol-buffers/) | `6.33.6` | `7.36.2` | | [tomli](https://github.com/hukkin/tomli) | `2.4.1` | `2.5.0` | | [wcmatch](https://github.com/facelessuser/wcmatch) | `8.5.2` | `11.0.1` | | [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.5.0` | Updates `boltons` from 21.0.0 to 26.2.0 - [Release notes](https://github.com/mahmoud/boltons/releases) - [Changelog](https://github.com/mahmoud/boltons/blob/master/CHANGELOG.md) - [Commits](https://github.com/mahmoud/boltons/compare/21.0.0...26.2.0) Updates `click` from 8.4.2 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](https://github.com/pallets/click/compare/8.4.2...8.5.0) Updates `exceptiongroup` from 1.2.2 to 1.3.1 - [Release notes](https://github.com/agronholm/exceptiongroup/releases) - [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst) - [Commits](https://github.com/agronholm/exceptiongroup/compare/1.2.2...1.3.1) Updates `importlib-metadata` from 8.7.1 to 9.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](https://github.com/python/importlib_metadata/compare/v8.7.1...v9.0.1) Updates `jsonschema` from 4.25.1 to 4.26.0 - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](https://github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0) Updates `mcp` from 1.29.0 to 2.3.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.29.0...v2.3.0) Updates `opentelemetry-api` from 1.37.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.37.0...v1.45.1) Updates `opentelemetry-exporter-otlp-proto-common` from 1.37.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.37.0...v1.45.1) Updates `opentelemetry-exporter-otlp-proto-http` from 1.37.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.37.0...v1.45.1) Updates `opentelemetry-instrumentation` from 0.58b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-requests` from 0.58b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-threading` from 0.58b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-proto` from 1.37.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.37.0...v1.45.1) Updates `opentelemetry-sdk` from 1.37.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.37.0...v1.45.1) Updates `opentelemetry-semantic-conventions` from 0.58b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `opentelemetry-util-http` from 0.58b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `peewee` from 3.19.0 to 4.5.3 - [Release notes](https://github.com/coleifer/peewee/releases) - [Changelog](https://github.com/coleifer/peewee/blob/master/CHANGELOG.md) - [Commits](https://github.com/coleifer/peewee/compare/3.19.0...4.5.3) Updates `protobuf` from 6.33.6 to 7.36.2 Updates `tomli` from 2.4.1 to 2.5.0 - [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md) - [Commits](https://github.com/hukkin/tomli/compare/2.4.1...2.5.0) Updates `wcmatch` from 8.5.2 to 11.0.1 - [Release notes](https://github.com/facelessuser/wcmatch/releases) - [Commits](https://github.com/facelessuser/wcmatch/compare/8.5.2...11.0.1) Updates `wrapt` from 1.17.3 to 2.5.0 - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](https://github.com/GrahamDumpleton/wrapt/compare/1.17.3...2.5.0) --- updated-dependencies: - dependency-name: boltons dependency-version: 26.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: exceptiongroup dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: importlib-metadata dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: jsonschema dependency-version: 4.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: mcp dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: opentelemetry-api dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: opentelemetry-exporter-otlp-proto-common dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: opentelemetry-instrumentation dependency-version: 0.66b1 dependency-type: direct:production dependency-group: semgrep - dependency-name: opentelemetry-instrumentation-requests dependency-version: 0.66b1 dependency-type: direct:production dependency-group: semgrep - dependency-name: opentelemetry-instrumentation-threading dependency-version: 0.66b1 dependency-type: direct:production dependency-group: semgrep - dependency-name: opentelemetry-proto dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: opentelemetry-sdk dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: opentelemetry-semantic-conventions dependency-version: 0.66b1 dependency-type: direct:production dependency-group: semgrep - dependency-name: opentelemetry-util-http dependency-version: 0.66b1 dependency-type: direct:production dependency-group: semgrep - dependency-name: peewee dependency-version: 4.5.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: protobuf dependency-version: 7.36.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: tomli dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep - dependency-name: wcmatch dependency-version: 11.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep - dependency-name: wrapt dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: semgrep ... Signed-off-by: dependabot[bot] --- .github/requirements-semgrep.txt | 42 ++++++++++++++++---------------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt index 13b968be..dc7a58c5 100644 --- a/.github/requirements-semgrep.txt +++ b/.github/requirements-semgrep.txt @@ -36,16 +36,16 @@ annotated-types==0.8.0 anyio==4.15.1 attrs==26.1.0 -boltons==21.0.0 +boltons==26.2.0 bracex==3.1 certifi==2026.7.22 cffi==2.1.1 charset-normalizer==3.5.2 -click==8.4.2 +click==8.5.0 click-option-group==0.5.9 colorama==0.4.6 cryptography==50.0.2 -exceptiongroup==1.2.2 +exceptiongroup==1.3.1 face==26.0.1 glom==25.12.0 googleapis-common-protos==1.75.5 @@ -54,25 +54,25 @@ httpcore==1.0.9 httpx==0.28.1 httpx-sse==0.4.3 idna==3.20 -importlib_metadata==8.7.1 -jsonschema==4.25.1 +importlib_metadata==9.0.1 +jsonschema==4.26.0 jsonschema-specifications==2025.9.1 markdown-it-py==4.2.0 -mcp==1.29.0 +mcp==2.3.0 mdurl==0.1.2 -opentelemetry-api==1.37.0 -opentelemetry-exporter-otlp-proto-common==1.37.0 -opentelemetry-exporter-otlp-proto-http==1.37.0 -opentelemetry-instrumentation==0.58b0 -opentelemetry-instrumentation-requests==0.58b0 -opentelemetry-instrumentation-threading==0.58b0 -opentelemetry-proto==1.37.0 -opentelemetry-sdk==1.37.0 -opentelemetry-semantic-conventions==0.58b0 -opentelemetry-util-http==0.58b0 +opentelemetry-api==1.45.1 +opentelemetry-exporter-otlp-proto-common==1.45.1 +opentelemetry-exporter-otlp-proto-http==1.45.1 +opentelemetry-instrumentation==0.66b1 +opentelemetry-instrumentation-requests==0.66b1 +opentelemetry-instrumentation-threading==0.66b1 +opentelemetry-proto==1.45.1 +opentelemetry-sdk==1.45.1 +opentelemetry-semantic-conventions==0.66b1 +opentelemetry-util-http==0.66b1 packaging==26.3 -peewee==3.19.0 -protobuf==6.33.6 +peewee==4.5.3 +protobuf==7.36.2 pycparser==3.11 pydantic==2.14.1 pydantic-settings==2.16.0 @@ -91,11 +91,11 @@ semantic-version==2.10.0 semgrep==1.180.0 sse-starlette==3.5.0 starlette==1.8.0 -tomli==2.4.1 +tomli==2.5.0 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uvicorn==0.54.0 -wcmatch==8.5.2 -wrapt==1.17.3 +wcmatch==11.0.1 +wrapt==2.5.0 zipp==4.1.1