deps: bump the python group with 2 updates by dependabot[bot] · Pull Request #7 · git-ftp/git-ftp-py

dependabot · 2026-09-21T10:16:19Z

Bumps the python group with 2 updates: pycurl and ruff.

Updates pycurl from 7.47.0 to 7.48.0

Release notes

PycURL 7.48.0

Changes in this release:

Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)

Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)

Fix test_redir_protocols_setopt (patch by Scott Talbert)

Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)

Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)

Configure nuget repo access as read-only from PRs (patch by Scott Talbert)

Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)

Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)

Add HTTP/3 support in libcurl wheel (patch by Will Noble)

Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)

Fix abort on non-text string arguments (patch by Jorge Rocamora)

Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)

Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)

Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)

Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)

Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)

Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)

Update the docstring and manifest source lists (patch by Jorge Rocamora)

Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)

Add support for Python 3.15 (patch by Scott Talbert)

Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)

Accept buffer objects for blob options (patch by Jorge Rocamora)

Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)

Reject callback return values that do not fit in an int (patch by Jorge Rocamora)

Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)

Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)

Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)

Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)

Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)

test: silence WSGI test server access logging to stderr (patch by Scott Talbert)

test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)

Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)

Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)

Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Changelog

Sourced from pycurl's changelog.

Version 7.48.0 [requires libcurl-7.19.0 or better] - 2026-09-15

    * Expose more CURLOPT_SSL_OPTIONS (patch by Scott Talbert)
    * Read long description from README.rst instead of duplicating it in setup.py (patch by Scott Talbert)
    * Fix test_redir_protocols_setopt (patch by Scott Talbert)
    * Add CURL_LOCK_DATA_HSTS as a CurlShare option (patch by Scott Talbert)
    * Add libpsl support to vcpkg installs for CI and wheel builds (patch by Scott Talbert)
    * Configure nuget repo access as read-only from PRs (patch by Scott Talbert)
    * Officially change project URL to https://pycurl.github.io/ (patch by Scott Talbert)
    * Replace bare except clauses in examples with specific exception types (patch by Kotesh Kumar Yelamati)
    * Add HTTP/3 support in libcurl wheel (patch by Will Noble)
    * Fix segfault when calling duphandle() on a closed Curl handle (patch by Jorge Rocamora)
    * Fix abort on non-text string arguments (patch by Jorge Rocamora)
    * Fix CurlShare leak when close() detaches attached handles (patch by Jorge Rocamora)
    * Document that views derived from the callback memoryview are not released (patch by Jorge Rocamora)
    * Fix crash when duplicating a handle that uses set_ca_certs() (patch by Jorge Rocamora)
    * Add CurlUrl object wrapping libcurl's URL API, with CURLOPT_CURLU support (patch by Jorge Rocamora)
    * Fix callback exceptions being replaced by SystemError (patch by Jorge Rocamora)
    * Fix test guard silently passing on real libcurl errors (patch by Jorge Rocamora)
    * Update the docstring and manifest source lists (patch by Jorge Rocamora)
    * Refuse pause() from a thread other than the performing one (patch by Jorge Rocamora)
    * Add support for Python 3.15 (patch by Scott Talbert)
    * Refuse integers for blob options instead of crashing (patch by Jorge Rocamora)
    * Accept buffer objects for blob options (patch by Jorge Rocamora)
    * Release all httppost encoded values and unset the form before MIMEPOST (patch by Jorge Rocamora)
    * Reject callback return values that do not fit in an int (patch by Jorge Rocamora)
    * Clear CurlMulti callbacks before deallocating attached handles (patch by Eric Buehl)
    * Serve the test apps from a threaded WSGI server (patch by Jorge Rocamora)
    * Add support for missing CURL options (patch by Khavish Anshudass Bhundoo)
    * Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS options (patch by Khavish Anshudass Bhundoo)
    * Remove unused variable from do_curl_setopt_httppost (patch by Scott Talbert)
    * test: silence WSGI test server access logging to stderr (patch by Scott Talbert)
    * test: pin down oversized mime data_cb error assertions (patch by Scott Talbert)
    * Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels (patch by Scott Talbert)
    * Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg (patch by Scott Talbert)
    * Handle libcurl options deprecated in 8.22.0 (patch by Scott Talbert)

Commits

d05452c Release 7.48.0
7673aeb Skip installing paramiko on Python 3.15 for now
5f60d93 Handle libcurl options deprecated in 8.22.0
0913022 Enable -Werror for the pycurl build in cibuildwheel without affecting vcpkg
5d8ddfc Give vendored OpenSSL a private OPENSSLDIR on Linux manylinux wheels
20dc93b test: pin down oversized mime data_cb error assertions
62aa003 test: silence WSGI test server access logging to stderr
c18288d Remove unused variable from do_curl_setopt_httppost
ef1eae2 Merge pull request #1064 from khavishbhundoo/task/1063-add-tls-options
b2510e5 feat: Add CURLOPT_SSL_EC_CURVES & CURLOPT_SSL_SIGNATURE_ALGORITHMS
Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

[pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)

[pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

Add support for __lazy_modules__ (#28459)

Recognize PEP-728 TypedDict class keywords (#28533)

Recognize quoted types in typing.TypeForm (#28507)

Support conditional assignment to __lazy_modules__ (#28491)

[flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)

[pyupgrade] Make the fix for UP040 always unsafe (#28526)

[pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)

[ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)

[ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

[flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

@VedantMadane

@alzeph

@charliermarsh

@fredrikblau

@ntBre

@zsol

@Aniket-a14

@r-b-1

Install ruff 0.16.8

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

[pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)

[pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

Add support for __lazy_modules__ (#28459)

Recognize PEP-728 TypedDict class keywords (#28533)

Recognize quoted types in typing.TypeForm (#28507)

Support conditional assignment to __lazy_modules__ (#28491)

[flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)

[pyupgrade] Make the fix for UP040 always unsafe (#28526)

[pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)

[ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)

[ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

[flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

@VedantMadane

@alzeph

@charliermarsh

@fredrikblau

@ntBre

@zsol

@Aniket-a14

@r-b-1

Commits

62914c4 Bump version to 0.16.8 (#28648)
c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
94efeaa [ty] Compact reachable binding and declaration histories (#28349)
50020fb [ty] Avoid storing constraint nodes twice (#28375)
446bb68 [ty] Compare bound-method receivers before signatures (#28384)
304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
31131db [ty] Support type[A & B] (#27124)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 2 updates: [pycurl](https://github.com/pycurl/pycurl) and [ruff](https://github.com/astral-sh/ruff). Updates `pycurl` from 7.47.0 to 7.48.0 - [Release notes](https://github.com/pycurl/pycurl/releases) - [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog) - [Commits](pycurl/pycurl@v7.47.0...v7.48.0) Updates `ruff` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.7...0.16.8) --- updated-dependencies: - dependency-name: pycurl dependency-version: 7.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 21, 2026

resmo merged commit 5cfa0d4 into main Sep 21, 2026
8 checks passed

resmo deleted the dependabot/uv/python-154662e84d branch September 21, 2026 14:38

Navigation Menu

deps: bump the python group with 2 updates - #7

deps: bump the python group with 2 updates#7
resmo merged 1 commit into
mainfrom
dependabot/uv/python-154662e84d

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

PycURL 7.48.0

Version 7.48.0 [requires libcurl-7.19.0 or better] - 2026-09-15

0.16.8

Release Notes

Bug fixes

Rule changes

CLI

Configuration

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

0.16.8

Bug fixes

Rule changes

CLI

Configuration

Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant