chore(deps): bump the actions-minor group across 1 directory with 3 updates by dependabot[bot] · Pull Request #51 · codescan-ai/codescan

dependabot · 2025-10-06T00:14:45Z

Bumps the actions-minor group with 3 updates in the / directory: pygithub, requests and google-generativeai.

Updates pygithub from 2.6.1 to 2.8.1

Release notes

v2.8.1

What's Changed

Bug Fixes

Use default type if known type is not supported by @EnricoMi in PyGithub/PyGithub#3365

Full Changelog: PyGithub/PyGithub@v2.8.0...v2.8.1

v2.8.0

What's Changed

New Features

Add self hosted runner management to Organization by @billnapier in PyGithub/PyGithub#3203

Add support to generate release notes by @mball-agathos in PyGithub/PyGithub#3022

Improvements

Fix connection pooling to improve connection performance by @chriskuehl in PyGithub/PyGithub#3289

Add Repository.get_automated_security_fixes method by @zstyblik in PyGithub/PyGithub#3303

Sync Issue class with API spec by @EnricoMi in PyGithub/PyGithub#3338

Return more union classes like NamedUser | Organization | Enterprise by @EnricoMi in PyGithub/PyGithub#3224

Sync Enterprise class with API spec by @EnricoMi in PyGithub/PyGithub#3342

Sync GitReleaseAsset class with API spec by @EnricoMi in PyGithub/PyGithub#3343

Sync many class with OpenAPI spec by @EnricoMi in PyGithub/PyGithub#3344

Point deprecation warnings to the caller code rather than inner class by @xmo-odoo in PyGithub/PyGithub#3275

Allow for repo strings in all Team repo methods by @EnricoMi in PyGithub/PyGithub#3356

Bug Fixes

Fix API path of Repository.get_git_ref by @csalerno-asml in PyGithub/PyGithub#2992

Rework redirection URL allowance check by @EnricoMi in PyGithub/PyGithub#3329

Fix GitRelease.name, deprecate GitRelease.title by @EnricoMi in PyGithub/PyGithub#3346

Remove "COMMENT" as the default event for create_review by @eddie-santos in PyGithub/PyGithub#3078

Add support for public release assets by @aolieman in PyGithub/PyGithub#3339

Fix GitHub breaking API change of maintainers in Organization.create_team by @interifter in PyGithub/PyGithub#3291

Maintenance

Minor fix to release.yml by @EnricoMi in PyGithub/PyGithub#3201

Reduce test replay data by @EnricoMi in PyGithub/PyGithub#3243

Add check to OpenAPI script to check doc-string verbs by @EnricoMi in PyGithub/PyGithub#3332

Improve apply OpenAPI schemas by @EnricoMi in PyGithub/PyGithub#3333

Add config to OpenAPI script to ignore schemas by @EnricoMi in PyGithub/PyGithub#3334

Add suggest and create method feature to OpenAPI script by @EnricoMi in PyGithub/PyGithub#3318

Fix CI OpenApi apply command by @EnricoMi in PyGithub/PyGithub#3341

Improve OpenAPI scripts by @EnricoMi in PyGithub/PyGithub#3340

Improve OpenAPI CI by @EnricoMi in PyGithub/PyGithub#3347

Rework test framework by @EnricoMi in PyGithub/PyGithub#3271

Some minor fixes to OpenAPI scripts by @EnricoMi in PyGithub/PyGithub#3350

Add manual workflow to fix auto-fixable issues by @EnricoMi in PyGithub/PyGithub#3351

Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in PyGithub/PyGithub#3330

Use default per-page const in PaginatedList by @sam93210 in PyGithub/PyGithub#3039

Bump actions/setup-python from 4 to 5 by @dependabot[bot] in PyGithub/PyGithub#3283

Bump actions/checkout from 3 to 5 by @dependabot[bot] in PyGithub/PyGithub#3348

Various minor OpenAPI scripts fixes by @EnricoMi in PyGithub/PyGithub#3353

Add union class support to OpenAPI script by @EnricoMi in PyGithub/PyGithub#3354

Add github_actions label to Maintenance section by @EnricoMi in PyGithub/PyGithub#3357

Upgrade docformatter pre-commit hook by @EnricoMi in PyGithub/PyGithub#3359

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.8.1 (September 02, 2025)

Bug Fixes ^^^^^^^^^

Use default type if known type is not supported ([#3365](https://github.com/pygithub/pygithub/issues/3365) <https://github.com/PyGithub/PyGithub/pull/3365>) (40506415 <https://github.com/PyGithub/PyGithub/commit/40506415>)

Version 2.8.0 (September 02, 2025)

New Features ^^^^^^^^^^^^

Add self hosted runner management to Organization ([#3203](https://github.com/pygithub/pygithub/issues/3203) <https://github.com/PyGithub/PyGithub/pull/3203>) (4ea1c4e2 <https://github.com/PyGithub/PyGithub/commit/4ea1c4e2>)

Add support to generate release notes ([#3022](https://github.com/pygithub/pygithub/issues/3022) <https://github.com/PyGithub/PyGithub/pull/3022>) (e359b83a <https://github.com/PyGithub/PyGithub/commit/e359b83a>)

Improvements ^^^^^^^^^^^^

Fix connection pooling to improve connection performance ([#3289](https://github.com/pygithub/pygithub/issues/3289) <https://github.com/PyGithub/PyGithub/pull/3289>_)

Add Repository.get_automated_security_fixes method ([#3303](https://github.com/pygithub/pygithub/issues/3303) <https://github.com/PyGithub/PyGithub/pull/3303>) (22048d83 <https://github.com/PyGithub/PyGithub/commit/22048d83>)

Sync Issue class with API spec ([#3338](https://github.com/pygithub/pygithub/issues/3338) <https://github.com/PyGithub/PyGithub/pull/3338>) (62da467a <https://github.com/PyGithub/PyGithub/commit/62da467a>)

Return more union classes like NamedUser | Organization | Enterprise ([#3224](https://github.com/pygithub/pygithub/issues/3224) <https://github.com/PyGithub/PyGithub/pull/3224>) (aea64148 <https://github.com/PyGithub/PyGithub/commit/aea64148>)

Sync Enterprise class with API spec ([#3342](https://github.com/pygithub/pygithub/issues/3342) <https://github.com/PyGithub/PyGithub/pull/3342>) (01bb5ab1 <https://github.com/PyGithub/PyGithub/commit/01bb5ab1>)

Sync GitReleaseAsset class with API spec ([#3343](https://github.com/pygithub/pygithub/issues/3343) <https://github.com/PyGithub/PyGithub/pull/3343>) (74449fed <https://github.com/PyGithub/PyGithub/commit/74449fed>)

Sync many class with OpenAPI spec ([#3344](https://github.com/pygithub/pygithub/issues/3344) <https://github.com/PyGithub/PyGithub/pull/3344>_)

Point deprecation warnings to the caller code rather than inner class ([#3275](https://github.com/pygithub/pygithub/issues/3275) <https://github.com/PyGithub/PyGithub/pull/3275>) (99bb5270 <https://github.com/PyGithub/PyGithub/commit/99bb5270>)

Allow for repo strings in all Team repo methods ([#3356](https://github.com/pygithub/pygithub/issues/3356) <https://github.com/PyGithub/PyGithub/pull/3356>) (3234a21f <https://github.com/PyGithub/PyGithub/commit/3234a21f>)

Bug Fixes ^^^^^^^^^

Fix API path of Repository.get_git_ref ([#2992](https://github.com/pygithub/pygithub/issues/2992) <https://github.com/PyGithub/PyGithub/pull/2992>) (a6965031 <https://github.com/PyGithub/PyGithub/commit/a6965031>)

Rework redirection URL allowance check ([#3329](https://github.com/pygithub/pygithub/issues/3329) <https://github.com/PyGithub/PyGithub/pull/3329>) (065b1319 <https://github.com/PyGithub/PyGithub/commit/065b1319>)

Fix GitRelease.name, deprecate GitRelease.title ([#3346](https://github.com/pygithub/pygithub/issues/3346) <https://github.com/PyGithub/PyGithub/pull/3346>) (fb51957f <https://github.com/PyGithub/PyGithub/commit/fb51957f>)

Remove "COMMENT" as the default event for create_review ([#3078](https://github.com/pygithub/pygithub/issues/3078) <https://github.com/PyGithub/PyGithub/pull/3078>) (8494da5c <https://github.com/PyGithub/PyGithub/commit/8494da5c>)

Add support for public release assets ([#3339](https://github.com/pygithub/pygithub/issues/3339) <https://github.com/PyGithub/PyGithub/pull/3339>) (abad296e <https://github.com/PyGithub/PyGithub/commit/abad296e>)

Fix GitHub breaking API change of maintainers in Organization.create_team ([#3291](https://github.com/pygithub/pygithub/issues/3291) <https://github.com/PyGithub/PyGithub/pull/3291>) (17bc4df4 <https://github.com/PyGithub/PyGithub/commit/17bc4df4>)

Maintenance ^^^^^^^^^^^

Minor fix to release.yml ([#3201](https://github.com/pygithub/pygithub/issues/3201) <https://github.com/PyGithub/PyGithub/pull/3201>) (f1fc6e7c <https://github.com/PyGithub/PyGithub/commit/f1fc6e7c>)

Reduce test replay data ([#3243](https://github.com/pygithub/pygithub/issues/3243) <https://github.com/PyGithub/PyGithub/pull/3243>) (19426454 <https://github.com/PyGithub/PyGithub/commit/19426454>)

Add check to OpenAPI script to check doc-string verbs ([#3332](https://github.com/pygithub/pygithub/issues/3332) <https://github.com/PyGithub/PyGithub/pull/3332>) (3efde77d <https://github.com/PyGithub/PyGithub/commit/3efde77d>)

Improve apply OpenAPI schemas ([#3333](https://github.com/pygithub/pygithub/issues/3333) <https://github.com/PyGithub/PyGithub/pull/3333>) (ec189dd6 <https://github.com/PyGithub/PyGithub/commit/ec189dd6>)

Add config to OpenAPI script to ignore schemas ([#3334](https://github.com/pygithub/pygithub/issues/3334) <https://github.com/PyGithub/PyGithub/pull/3334>) (0478d33b <https://github.com/PyGithub/PyGithub/commit/0478d33b>)

Add suggest and create method feature to OpenAPI script ([#3318](https://github.com/pygithub/pygithub/issues/3318) <https://github.com/PyGithub/PyGithub/pull/3318>_)

Fix CI OpenApi apply command ([#3341](https://github.com/pygithub/pygithub/issues/3341) <https://github.com/PyGithub/PyGithub/pull/3341>) (cdc10a27 <https://github.com/PyGithub/PyGithub/commit/cdc10a27>)

Improve OpenAPI scripts ([#3340](https://github.com/pygithub/pygithub/issues/3340) <https://github.com/PyGithub/PyGithub/pull/3340>) (ad278c5f <https://github.com/PyGithub/PyGithub/commit/ad278c5f>)

Improve OpenAPI CI ([#3347](https://github.com/pygithub/pygithub/issues/3347) <https://github.com/PyGithub/PyGithub/pull/3347>) (8165bbc9 <https://github.com/PyGithub/PyGithub/commit/8165bbc9>)

Rework test framework ([#3271](https://github.com/pygithub/pygithub/issues/3271) <https://github.com/PyGithub/PyGithub/pull/3271>) (1b700187 <https://github.com/PyGithub/PyGithub/commit/1b700187>)

Some minor fixes to OpenAPI scripts ([#3350](https://github.com/pygithub/pygithub/issues/3350) <https://github.com/PyGithub/PyGithub/pull/3350>) (a813a945 <https://github.com/PyGithub/PyGithub/commit/a813a945>)

Add manual workflow to fix auto-fixable issues ([#3351](https://github.com/pygithub/pygithub/issues/3351) <https://github.com/PyGithub/PyGithub/pull/3351>) (0e6317d9 <https://github.com/PyGithub/PyGithub/commit/0e6317d9>)

... (truncated)

Commits

ecd4764 Update changelog
4050641 Use default type if known type is not supported (#3365)
18eeb26 Release 2.8.0 (#3360)
17bc4df Fix GitHub breaking API change of maintainers in Organization.create_team...
6f0d6ef Update docs on development (#3352)
12d8d10 Add warning about Checks API in doc-strings (#3229)
6ec3ca2 Upgrade docformatter pre-commit hook (#3359)
9612e61 Revert get_enterprise breaking change (#3358)
0c31f84 Add github_actions label to Maintenance section (#3357)
3234a21 Allow for repo strings in all Team repo methods (#3356)
Additional commits viewable in compare view

Updates requests from 2.32.3 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS. (#6926)

Dropped support for pypy 3.9 following its end of support. (#6926)

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS.

Dropped support for pypy 3.9 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view

Updates google-generativeai from 0.8.4 to 0.8.5

Release notes

Sourced from google-generativeai's releases.

v0.8.5

What's Changed

Bugfixes

Several bug fixes by @MarkDaoust in google-gemini/deprecated-generative-ai-python#731

Fix broken samples (all samples pass now).

Fix empty GEMINI_API_KEY="" shadowing "GOOGLE_API_KEY".

Fix code broken by pydantic 2.11

Make "models/" optional for embedding models @Surya2k1 in google-gemini/deprecated-generative-ai-python#645

Remove bad test @MarkDaoust in google-gemini/deprecated-generative-ai-python#689

Fixes: #670 #626 by @MarkDaoust in google-gemini/deprecated-generative-ai-python#684

Docs & Examples

Add the migration guide. by @MarkDaoust in google-gemini/deprecated-generative-ai-python#672

Update README.md by @MarkDaoust in google-gemini/deprecated-generative-ai-python#675

Test add snippet tag. by @MarkDaoust in google-gemini/deprecated-generative-ai-python#677

Add info about new SDK to the top of README by @patrickloeber in google-gemini/deprecated-generative-ai-python#673

Fix function_calling.sh example by @python273 in google-gemini/deprecated-generative-ai-python#679

Update GenerationConfig.md to fix typo by @odevop in google-gemini/deprecated-generative-ai-python#668

Update samples to use right API key name by @logankilpatrick in google-gemini/deprecated-generative-ai-python#705

Update README.md by @pcoet in google-gemini/deprecated-generative-ai-python#722

Infrastructure

Add a GitHub Action to manage status: awaiting user response by @amirh in google-gemini/deprecated-generative-ai-python#720

Pin actions to specific SHAs by @markmcd in google-gemini/deprecated-generative-ai-python#719

Bump tj-actions/changed-files from 44 to 46 in /.github/workflows by @dependabot in google-gemini/deprecated-generative-ai-python#721

chore: Update user-input.yml GitHub workflow to trigger on PR comments by @Annhiluc in google-gemini/deprecated-generative-ai-python#723

New Contributors

@Surya2k1 made their first contribution in google-gemini/deprecated-generative-ai-python#645

@patrickloeber made their first contribution in google-gemini/deprecated-generative-ai-python#673

@python273 made their first contribution in google-gemini/deprecated-generative-ai-python#679

@odevop made their first contribution in google-gemini/deprecated-generative-ai-python#668

@amirh made their first contribution in google-gemini/deprecated-generative-ai-python#720

@pcoet made their first contribution in google-gemini/deprecated-generative-ai-python#722

@dependabot made their first contribution in google-gemini/deprecated-generative-ai-python#721

Full Changelog: google-gemini/deprecated-generative-ai-python@v0.8.4...v0.8.5

Commits

f5ac4ed Update version and fix samples for 0.8.5 release (#731)
e179614 chore: Update user-input.yml GitHub workflow to trigger on PR comments (#723)
61867f6 Bump tj-actions/changed-files from 44 to 46 in /.github/workflows (#721)
d66e975 Update README.md (#722)
29f85b8 Update README.md
6bf4571 Pin actions to specific SHAs (#719)
e0fb117 Add a GitHub Action to manage status: awaiting user response (#720)
2c570fb Update samples to use right API key name (#705)
56f2ccf Update GenerationConfig.md to fix typo (#668)
45bd243 Fix function_calling.sh example (#679)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2025-11-17T00:42:30Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

…pdates Bumps the actions-minor group with 3 updates in the / directory: [pygithub](https://github.com/pygithub/pygithub), [requests](https://github.com/psf/requests) and [google-generativeai](https://github.com/google/generative-ai-python). Updates `pygithub` from 2.6.1 to 2.8.1 - [Release notes](https://github.com/pygithub/pygithub/releases) - [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst) - [Commits](PyGithub/PyGithub@v2.6.1...v2.8.1) Updates `requests` from 2.32.3 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.32.5) Updates `google-generativeai` from 0.8.4 to 0.8.5 - [Release notes](https://github.com/google/generative-ai-python/releases) - [Changelog](https://github.com/google-gemini/deprecated-generative-ai-python/blob/main/RELEASE.md) - [Commits](google-gemini/deprecated-generative-ai-python@v0.8.4...v0.8.5) --- updated-dependencies: - dependency-name: pygithub dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor - dependency-name: google-generativeai dependency-version: 0.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 6, 2025

dependabot bot requested a review from CalebAbhulimhen as a code owner October 6, 2025 00:14

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 6, 2025

dependabot bot force-pushed the dependabot/pip/actions-minor-23dbcfac0f branch from bb1318e to d89bbf8 Compare February 9, 2026 00:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the actions-minor group across 1 directory with 3 updates#51

chore(deps): bump the actions-minor group across 1 directory with 3 updates#51
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/actions-minor-23dbcfac0f

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.8.1

What's Changed

Bug Fixes

v2.8.0

What's Changed

New Features

Improvements

Bug Fixes

Maintenance

Version 2.8.1 (September 02, 2025)

Version 2.8.0 (September 02, 2025)

v2.32.5

2.32.5 (2025-08-18)

v2.32.4

2.32.4 (2025-06-10)

2.32.5 (2025-08-18)

2.32.4 (2025-06-10)

v0.8.5

What's Changed

Bugfixes

Docs & Examples

Infrastructure

New Contributors

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading