Skip to content

chore(pip): bump the python group across 1 directory with 26 updates - #389

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-b1f86012e8
Open

chore(pip): bump the python group across 1 directory with 26 updates#389
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-b1f86012e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 26 updates in the / directory:

Package From To
astroid 4.0.4 4.1.2
basedpyright 1.35.0 1.39.9
nodejs-wheel-binaries 24.11.1 24.16.0
packaging 25.0 26.3
pytest 9.0.3 9.1.1
bmw-lobster-core 1.0.2 1.0.6
bmw-lobster-tool-codebeamer 1.0.2 1.0.6
bmw-lobster-tool-cpp 1.0.2 1.0.6
bmw-lobster-tool-cpptest 1.0.2 1.0.6
bmw-lobster-tool-gtest 1.0.2 1.0.6
bmw-lobster-tool-json 1.0.2 1.0.6
bmw-lobster-tool-python 1.0.2 1.0.6
bmw-lobster-tool-trlc 1.0.2 1.0.6
certifi 2026.2.25 2026.7.22
charset-normalizer 3.4.7 3.4.9
cvc5 1.3.0 1.3.4
gitpython 3.1.54 3.1.58
idna 3.15 3.18
libcst 1.8.6 1.9.0
markdown 3.10.2 3.10.3
pyvcg 1.0.8 1.0.12
requests 2.33.1 2.34.2
trlc 2.0.5 3.0.0
bazel-runfiles 1.9.0 2.2.0
prompt-toolkit 3.0.52 3.0.53
wcwidth 0.2.14 0.8.2

Updates astroid from 4.0.4 to 4.1.2

Release notes

Sourced from astroid's releases.

v4.1.2

What's New in astroid 4.1.2?

Release date: 2026-03-22

  • Fix crash accessing property fset in generic classes with type annotations. Closes #2996

  • Fix infinite recursion caused by cyclic inference in Constraint.

  • Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

    Closes #2967 Closes pylint-dev/pylint#10821

  • Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

    Closes #2628

  • Fix FunctionModel returning descriptor attributes for builtin functions.

    Closes #2743

  • Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

    Closes #2762

  • Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

    Closes #2764

v4.1.1

What's New in astroid 4.1.1?

Release date: 2026-02-22

  • Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

    Refs #2741

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.1.2?

Release date: 2026-03-22

  • Fix crash accessing property fset in generic classes with type annotations. Closes #2996

  • Fix infinite recursion caused by cyclic inference in Constraint.

  • Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

    Closes #2967 Closes pylint-dev/pylint#10821

  • Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

    Closes #2628

  • Fix FunctionModel returning descriptor attributes for builtin functions.

    Closes #2743

  • Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

    Closes #2762

  • Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

    Closes #2764

What's New in astroid 4.1.1?

Release date: 2026-02-22

  • Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

    Refs #2741

  • Filter Unknown from UnboundMethod and Super special attribute

... (truncated)

Commits
  • 91dac13 Bump astroid to 4.1.2, update changelog (#3011)
  • 796eba8 objectmodel: fix crash analyzing property fset in generic classes with type a...
  • ca814f0 Update CI workflow to include maintenance branch (#2999)
  • 7593877 [Backport maintenance/4.1.x] Fix cyclic inference by constraints (#2998)
  • 3f63f90 Fix builtin functions incorrectly exposing descriptor attributes (#2983)
  • be7479e Fix ValueError in str/repr and error messages with extreme values (#2971)
  • 1c9938d Fix RecursionError in _compute_mro() on circular class hierarchies (#2968)
  • 98938ad [Backport maintenance/4.1.x] Fix DuplicateBasesError crash in dataclass trans...
  • 33fabe0 [Backport maintenance/4.1.x] Fix MemoryError when inferring f-string with lar...
  • f11d7ae Bump astroid to 4.1.1, update changelog
  • Additional commits viewable in compare view

Updates basedpyright from 1.35.0 to 1.39.9

Commits

Updates nodejs-wheel-binaries from 24.11.1 to 24.16.0

Release notes

Sourced from nodejs-wheel-binaries's releases.

v24.16.0

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.15.0...v24.16.0

v24.15.0

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.14.1...v24.15.0

v24.14.1

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.14.0...v24.14.1

v24.14.0

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.13.1...v24.14.0

v24.13.1

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.13.0...v24.13.1

v24.13.0

What's Changed

Full Changelog: njzjz/nodejs-wheel@v24.12.0...v24.13.0

v24.12.0

What's Changed

... (truncated)

Commits
  • 6280f8e chore(deps): update node.js to v24.16.0 (#205)
  • f9539b2 chore(deps): update node.js to v24.15.0 (master) (#200)
  • a0ffbfe chore(deps): update node.js to v24.14.1 (master) (#195)
  • f095d37 chore(deps): update pypa/cibuildwheel action to v3.4 (master) (#193)
  • f648e5d chore(deps): update node.js to v24.14.0 (master) (#188)
  • 37775c9 chore(deps): update github artifact actions (master) (major) (#178)
  • f774b14 chore(deps): update node.js to v24.13.1 (master) (#185)
  • 1d25d9e chore(deps): update node.js to v24.13.0 (master) (#180)
  • a748021 chore(deps): update node.js to v24.12.0 (master) (#176)
  • bb8c25a chore(deps): update actions/checkout action to v6 (master) (#172)
  • See full diff in compare view

Updates packaging from 25.0 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

  • Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
  • PEP 808: accept Metadata-Version: 2.6. (#1194)
  • Add a limit argument to parse_tag() for compressed tag sets. (#1220)
  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
  • Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
  • Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
  • Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

  • Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
  • Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
  • Fix an AttributeError when hashing internally trimmed versions. (#1242)
  • Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

  • Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
  • Normalize requested extra names before comparing or hashing requirements. (#644)
  • Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
  • Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
  • Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
  • Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
  • Keep the parentheses of a nested group when serializing markers. (#1316)
  • Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
  • Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
  • Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
  • Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
  • Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

  • Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
  • Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
  • Reject malformed Description-Content-Type values. (#1329)
  • Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
  • Route multipart email payloads to unparsed instead of asserting. (#1247)
  • Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
  • Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

    

  • Add a public :class:~packaging.ranges.VersionRange API and
    
:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,
    
representing the versions a specifier set accepts as an interval set that
    
supports intersection, union, difference, complement, set relations,
    
membership tests, and filtering.
    
:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back
    
to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.
    
(:pull:1267, :pull:1270, :pull:1298)
    • 

  • PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
    • 

  • Add a limit argument to parse_tag() for compressed tag sets.
    
(:issue:1220)
    • 

  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer
    
source distributions over wheels for selected packages. (:pull:1334)
    • 

  • Add :func:~packaging.tags.pure_python_tags to generate the pure-Python
    
tags for a Python version without touching the running platform.
    
(:pull:1346)
    • 

  • Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,
    
and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the
    
versions two specifier sets accept. (:pull:1313)
    • 



Behavior adaptations:


    

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later.
    
(:pull:1157)
    • 

  • Prefer native linux_* platform tags over manylinux and musllinux
    
tags on Linux. (:issue:160)
    • 



Fixes for versions and specifiers:


    

  • Raise InvalidVersion instead of TypeError when Version is given a
    
non-string. (:pull:1319)
    • 

  • Raise InvalidVersion for non-string pre-release letters passed to
    
Version.from_parts. (:pull:1241)
    • 

  • Fix an AttributeError when hashing internally trimmed versions.
    
(:pull:1242)
    • 

  • Fix SpecifierSet.is_unsatisfiable for post-release boundary
    
intersections. (:pull:1257)
    • 



Fixes for requirements and markers:


    

  • Make Requirement.__hash__ consistent with __eq__ for
    
trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and
    
foo==1.0.0.0), so equal requirements hash equal and deduplicate in
    
sets and dicts. (:pull:1232)
    
</tr></table>

... (truncated)

Commits
  • 929fd4b Bump for release
  • f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
  • f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
  • b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
  • 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
  • 413d006 docs: changelog for 26.3 (#1343)
  • 4eb0753 docs(metadata): explain selective field validation (#1342)
  • 77e9ed4 feat(tags): add pure Python tag generator (#1346)
  • 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
  • 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
  • Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates bmw-lobster-core from 1.0.2 to 1.0.6

Release notes

Sourced from bmw-lobster-core's releases.

Release 1.0.6

Bzlmod

Add this to your MODULE.bazel:

bazel_dep(name = "lobster", version = "1.0.6")

WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "lobster",
sha256 = "6757c48725daf4aab76ce41c6fc0001c5e1d5def3f6b12664794a61c964ef8d3",
strip_prefix = "lobster-1.0.6",
urls = ["https://github.com/bmw-software-engineering/lobster/releases/download/lobster-1.0.6/lobster-1.0.6.tar.gz"],
)

What's Changed

Full Changelog: bmw-software-engineering/lobster@lobster-1.0.5...lobster-1.0.6

Release 1.0.5

  • lobster-python :

    • Added stable Python APIs and API documentation pages.

  • lobster-trlc :

    • Added stable Python APIs and API documentation pages.

Release 1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

... (truncated)

Changelog

Sourced from bmw-lobster-core's changelog.

1.0.6

  • Call Lobster Report via bazel directly instead of using a symlink

1.0.5

  • Added stable Python APIs and API documentation pages for the tools lobster-python and lobster-trlc.

1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

  • trlc bazel dep: update to trlc==3.0.0

  • lobster-rst-report:

    • New tool: Generate reStructuredText traceability reports for inclusion in Sphinx documentation projects.
    • Supports single-page (--out) and multi-page (--out-dir) output modes.
    • Requires the sphinx-design Sphinx extension for dropdown and grid rendering, and sphinx.ext.graphviz for the tracing policy diagram.
    • Includes coverage summary table, tracing policy diagram (Graphviz), issues list, and detailed item cards with cross-references.
    • Codebeamer items are rendered as clickable hyperlinks.
    • Bazel integration via subrule_lobster_rst_report (opt-in).

  • Refactored is_dot_available() into lobster.common.graphviz_utils (shared between lobster-html-report and lobster-rst-report).

  • Fixed wrong links in README.

1.0.3

  • lobster-html-report:

    • [Bazel]: Added a parameter to specify the source root of the html report. Make sure that links to source files work correctly.

  • lobster-pkg:

    • Introduced API function. Added API function for the tool lobster-pkg which takes PkgToolConfig as input and extracts tracing values from package files.

... (truncated)

Commits

Updates bmw-lobster-tool-codebeamer from 1.0.2 to 1.0.6

Release notes

Sourced from bmw-lobster-tool-codebeamer's releases.

Release 1.0.6

Bzlmod

Add this to your MODULE.bazel:

bazel_dep(name = "lobster", version = "1.0.6")

WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "lobster",
sha256 = "6757c48725daf4aab76ce41c6fc0001c5e1d5def3f6b12664794a61c964ef8d3",
strip_prefix = "lobster-1.0.6",
urls = ["https://github.com/bmw-software-engineering/lobster/releases/download/lobster-1.0.6/lobster-1.0.6.tar.gz"],
)

What's Changed

Full Changelog: bmw-software-engineering/lobster@lobster-1.0.5...lobster-1.0.6

Release 1.0.5

  • lobster-python :

    • Added stable Python APIs and API documentation pages.

  • lobster-trlc :

    • Added stable Python APIs and API documentation pages.

Release 1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

... (truncated)

Changelog

Sourced from bmw-lobster-tool-codebeamer's changelog.

1.0.6

  • Call Lobster Report via bazel directly instead of using a symlink

1.0.5

  • Added stable Python APIs and API documentation pages for the tools lobster-python and lobster-trlc.

1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

  • trlc bazel dep: update to trlc==3.0.0

  • lobster-rst-report:

    • New tool: Generate reStructuredText traceability reports for inclusion in Sphinx documentation projects.
    • Supports single-page (--out) and multi-page (--out-dir) output modes.
    • Requires the sphinx-design Sphinx extension for dropdown and grid rendering, and sphinx.ext.graphviz for the tracing policy diagram.
    • Includes coverage summary table, tracing policy diagram (Graphviz), issues list, and detailed item cards with cross-references.
    • Codebeamer items are rendered as clickable hyperlinks.
    • Bazel integration via subrule_lobster_rst_report (opt-in).

  • Refactored is_dot_available() into lobster.common.graphviz_utils (shared between lobster-html-report and lobster-rst-report).

  • Fixed wrong links in README.

1.0.3

  • lobster-html-report:

    • [Bazel]: Added a parameter to specify the source root of the html report. Make sure that links to source files work correctly.

  • lobster-pkg:

    • Introduced API function. Added API function for the tool lobster-pkg which takes PkgToolConfig as input and extracts tracing values from package files.

... (truncated)

Commits

Updates bmw-lobster-tool-cpp from 1.0.2 to 1.0.6

Release notes

Sourced from bmw-lobster-tool-cpp's releases.

Release 1.0.6

Bzlmod

Add this to your MODULE.bazel:

bazel_dep(name = "lobster", version = "1.0.6")

WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "lobster",
sha256 = "6757c48725daf4aab76ce41c6fc0001c5e1d5def3f6b12664794a61c964ef8d3",
strip_prefix = "lobster-1.0.6",
urls = ["https://github.com/bmw-software-engineering/lobster/releases/download/lobster-1.0.6/lobster-1.0.6.tar.gz"],
)

What's Changed

Full Changelog: bmw-software-engineering/lobster@lobster-1.0.5...lobster-1.0.6

Release 1.0.5

  • lobster-python :

    • Added stable Python APIs and API documentation pages.

  • lobster-trlc :

    • Added stable Python APIs and API documentation pages.

Release 1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

... (truncated)

Changelog

Sourced from bmw-lobster-tool-cpp's changelog.

1.0.6

  • Call Lobster Report via bazel directly instead of using a symlink

1.0.5

  • Added stable Python APIs and API documentation pages for the tools lobster-python and lobster-trlc.

1.0.4

  • lobster-gtest:

    • Export all record properties for report generation: Enable GWT Pattern
    • Minimize Bazel Gtest output to stdout during bazel build

  • lobster-codebeamer:

    • Added baseline_id support for cbQL queries. When set, the tool queries items at the specified Codebeamer baseline revision.
    • baseline_id combined with import_tagged or a numeric import_query now raises an error instead of being silently ignored (ISO 26262 TCL3 qualification support).

  • trlc bazel dep: update to trlc==3.0.0

  • lobster-rst-report:

    • New tool: Generate reStructuredText traceability reports for inclusion in Sphinx documentation projects.
    • Supports single-page (--out) and multi-page (--out-dir) output modes.
    • Requires the sphinx-design Sphinx extension for dropdown and grid rendering, and sphinx.ext.graphviz for the tracing policy diagram.
    • Includes coverage summary table, tracing policy diagram (Graphviz), issues list, and detailed item cards with cross-references.
    • Codebeamer items are rendered as clickable hyperlinks.
    • Bazel integration via subrule_lobster_rst_report (opt-in).

  • Refactored is_dot_available() into lobster.common.graphviz_utils (shared between lobster-html-report and lobster-rst-report).

  • Fixed wrong links in README.

1.0.3

  • lobster-html-report:

    • [Bazel]: Added a parameter to specify the source root of the html report. Make sure that links to source files work correctly.

  • lobster-pkg:

    • Introduced API function. Added API function for the tool lobster-pkg which takes PkgToolConfig as input and extracts tracing values from package files.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 3, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-b1f86012e8 branch from c94c22a to c430164 Compare August 10, 2026 01:14
@dependabot
chore(pip): bump the python group across 1 directory with 26 updates
3c4c625 
Bumps the python group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [astroid](https://github.com/pylint-dev/astroid) | `4.0.4` | `4.1.2` |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.35.0` | `1.39.9` |
| [nodejs-wheel-binaries](https://github.com/njzjz/nodejs-wheel) | `24.11.1` | `24.16.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [bmw-lobster-core](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-codebeamer](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-cpp](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-cpptest](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-gtest](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-json](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-python](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [bmw-lobster-tool-trlc](https://github.com/bmw-software-engineering/lobster) | `1.0.2` | `1.0.6` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.7.22` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.7` | `3.4.9` |
| [cvc5](https://github.com/cvc5/cvc5) | `1.3.0` | `1.3.4` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.54` | `3.1.58` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [libcst](https://github.com/Instagram/LibCST) | `1.8.6` | `1.9.0` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.10.2` | `3.10.3` |
| [pyvcg](https://github.com/florianschanda/PyVCG) | `1.0.8` | `1.0.12` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [trlc](https://github.com/bmw-software-engineering/trlc) | `2.0.5` | `3.0.0` |
| [bazel-runfiles](https://github.com/bazel-contrib/rules_python) | `1.9.0` | `2.2.0` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.52` | `3.0.53` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.14` | `0.8.2` |



Updates `astroid` from 4.0.4 to 4.1.2
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v4.0.4...v4.1.2)

Updates `basedpyright` from 1.35.0 to 1.39.9
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.35.0...v1.39.9)

Updates `nodejs-wheel-binaries` from 24.11.1 to 24.16.0
- [Release notes](https://github.com/njzjz/nodejs-wheel/releases)
- [Commits](njzjz/nodejs-wheel@v24.11.1...v24.16.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@25.0...26.3)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `bmw-lobster-core` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-codebeamer` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-cpp` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-cpptest` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-gtest` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-json` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-python` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `bmw-lobster-tool-trlc` from 1.0.2 to 1.0.6
- [Release notes](https://github.com/bmw-software-engineering/lobster/releases)
- [Changelog](https://github.com/bmw-software-engineering/lobster/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/lobster@lobster-1.0.2...lobster-1.0.6)

Updates `certifi` from 2026.2.25 to 2026.7.22
- [Commits](certifi/python-certifi@2026.02.25...2026.07.22)

Updates `charset-normalizer` from 3.4.7 to 3.4.9
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.7...3.4.9)

Updates `cvc5` from 1.3.0 to 1.3.4
- [Release notes](https://github.com/cvc5/cvc5/releases)
- [Changelog](https://github.com/cvc5/cvc5/blob/main/NEWS.md)
- [Commits](cvc5/cvc5@cvc5-1.3.0...cvc5-1.3.4)

Updates `gitpython` from 3.1.54 to 3.1.58
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.54...3.1.58)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.18)

Updates `libcst` from 1.8.6 to 1.9.0
- [Release notes](https://github.com/Instagram/LibCST/releases)
- [Changelog](https://github.com/Instagram/LibCST/blob/main/CHANGELOG.md)
- [Commits](Instagram/LibCST@v1.8.6...v1.9.0)

Updates `markdown` from 3.10.2 to 3.10.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.10.2...3.10.3)

Updates `pyvcg` from 1.0.8 to 1.0.12
- [Release notes](https://github.com/florianschanda/PyVCG/releases)
- [Changelog](https://github.com/florianschanda/PyVCG/blob/main/CHANGELOG.md)
- [Commits](https://github.com/florianschanda/PyVCG/commits)

Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `trlc` from 2.0.5 to 3.0.0
- [Release notes](https://github.com/bmw-software-engineering/trlc/releases)
- [Changelog](https://github.com/bmw-software-engineering/trlc/blob/main/CHANGELOG.md)
- [Commits](bmw-software-engineering/trlc@trlc-2.0.5...trlc-3.0.0)

Updates `bazel-runfiles` from 1.9.0 to 2.2.0
- [Release notes](https://github.com/bazel-contrib/rules_python/releases)
- [Changelog](https://github.com/bazel-contrib/rules_python/blob/main/CHANGELOG.md)
- [Commits](bazel-contrib/rules_python@1.9.0...2.2.0)

Updates `prompt-toolkit` from 3.0.52 to 3.0.53
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.52...3.0.53)

Updates `wcwidth` from 0.2.14 to 0.8.2
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.2.14...0.8.2)

---
updated-dependencies:
- dependency-name: astroid
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: basedpyright
  dependency-version: 1.39.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: bazel-runfiles
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: bmw-lobster-core
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-codebeamer
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-cpp
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-cpptest
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-gtest
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-json
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-python
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: bmw-lobster-tool-trlc
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: charset-normalizer
  dependency-version: 3.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: cvc5
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: gitpython
  dependency-version: 3.1.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: idna
  dependency-version: '3.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: libcst
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: markdown
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: nodejs-wheel-binaries
  dependency-version: 24.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: prompt-toolkit
  dependency-version: 3.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pyvcg
  dependency-version: 1.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: trlc
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: wcwidth
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-b1f86012e8 branch from c430164 to 3c4c625 Compare August 10, 2026 04:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@castler castler Awaiting requested review from castler castler is a code owner
@hoe-jo hoe-jo Awaiting requested review from hoe-jo hoe-jo is a code owner
@LittleHuba LittleHuba Awaiting requested review from LittleHuba LittleHuba is a code owner
@limdor limdor Awaiting requested review from limdor limdor is a code owner
@ramceb ramceb Awaiting requested review from ramceb ramceb is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants