Skip to content

pip: bump edk2-pytool-library to 0.23.17, edk2-pytool-extensions to 0.31.2, ruff to 0.16.8, cryptography to 50.0.1 - #473

Merged
Aaron (apop5) merged 1 commit into
mainfrom
dependabot/pip/all-pip-dependencies-7241b6d412
Oct 2, 2026
Merged

pip: bump edk2-pytool-library to 0.23.17, edk2-pytool-extensions to 0.31.2, ruff to 0.16.8, cryptography to 50.0.1#473
Aaron (apop5) merged 1 commit into
mainfrom
dependabot/pip/all-pip-dependencies-7241b6d412

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-pip-dependencies group with 4 updates: edk2-pytool-library, edk2-pytool-extensions, ruff and cryptography.

Updates edk2-pytool-library from 0.23.16 to 0.23.17

Release notes

Sourced from edk2-pytool-library's releases.

v0.23.17

What's Changed

New Contributors

Full Changelog: tianocore/edk2-pytool-library@v0.23.16...v0.23.17

Commits
  • a7b40f1 fmp_capsule_header: bugfix counts (#831)
  • 45c4697 Update EDK2Path class to handle os.PathLike objects correctly for Python 3.14...
  • e9e0893 dsc_parser: Restore TargetFilePath after nested !include (#829)
  • See full diff in compare view

Updates edk2-pytool-extensions from 0.31.1 to 0.31.2

Release notes

Sourced from edk2-pytool-extensions's releases.

v0.31.2

What's Changed

Full Changelog: tianocore/edk2-pytool-extensions@v0.31.1...v0.31.2

Commits

Updates ruff from 0.16.4 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
pip: bump the all-pip-dependencies group with 4 updates
20c96c4 
Bumps the all-pip-dependencies group with 4 updates: [edk2-pytool-library](https://github.com/tianocore/edk2-pytool-library), [edk2-pytool-extensions](https://github.com/tianocore/edk2-pytool-extensions), [ruff](https://github.com/astral-sh/ruff) and [cryptography](https://github.com/pyca/cryptography).


Updates `edk2-pytool-library` from 0.23.16 to 0.23.17
- [Release notes](https://github.com/tianocore/edk2-pytool-library/releases)
- [Commits](tianocore/edk2-pytool-library@v0.23.16...v0.23.17)

Updates `edk2-pytool-extensions` from 0.31.1 to 0.31.2
- [Release notes](https://github.com/tianocore/edk2-pytool-extensions/releases)
- [Commits](tianocore/edk2-pytool-extensions@v0.31.1...v0.31.2)

Updates `ruff` from 0.16.4 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.8)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

---
updated-dependencies:
- dependency-name: edk2-pytool-library
  dependency-version: 0.23.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: edk2-pytool-extensions
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added language:python Pull requests that update Python code type:dependabot Created by dependabot type:dependencies Pull requests that update a dependency file labels Oct 1, 2026
@apop5 Aaron (apop5) changed the title pip: bump the all-pip-dependencies group with 4 updates pip: bump edk2-pytool-library to 0.23.17, edk2-pytool-extensions to 0.31.2, ruff to 0.16.8, cryptography to 50.0.1 Oct 1, 2026
@apop5
Aaron (apop5) enabled auto-merge (squash) October 1, 2026 16:07
@apop5
Aaron (apop5) merged commit 9b3f8df into main Oct 2, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/all-pip-dependencies-7241b6d412 branch October 2, 2026 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Flickdm Doug Flick (Flickdm) Flickdm approved these changes
@apop5 Aaron (apop5) apop5 approved these changes

Assignees

No one assigned

Labels

language:python Pull requests that update Python code type:dependabot Created by dependabot type:dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Flickdm @apop5