Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 25, 2025

Bumps kdeldycke/workflows from 4.17.9 to 4.19.1.

Release notes

Sourced from kdeldycke/workflows's releases.

v4.19.0

Changes

  • Check for URL fragments when checking links with Lychee.
  • Fix compilation of rfc3987_syntax data file thanks to Nuitka v2.7.14.
  • Remove local patch of gitignore-parser, rely on v0.1.13 release instead.
  • Add dependency on mdformat-recover-urls to fix URL encoding in Markdown files.
  • Force installation of all dependencies before running Mypy in lint workflow to ensure all typeshed-* packages are present.
  • Cap click to 8.2.x series when installing bump-my-version to avoid incompatible API changes.
  • Skip linting and sponsoring jobs on Dependabot PRs and prepare-release branch.

🐍 Available on PyPi.

v4.18.1

Changes

  • Patch gitignore-parser locally to support Windows paths.

🐍 Available on PyPi.

v4.18.0

Changes

  • Adds --format json option.
  • Remove --format plain option.
  • Returns file paths relative to the current directory whenever we can in gha-utils metadata output.
  • Ignore files matching .gitignore rules in the python_files and doc_files fields of gha-utils metadata output.
  • Force all VSCode JSON files to be formatted in jsonc dialect.
  • Prevent overlapping matching of JSON files by different dialect linters.
  • Share linter's file exclusion list between dialects.
  • Bump hard-coded eslint and eslint/json packages to their latest versions.

🐍 Available on PyPi.

Changelog

Sourced from kdeldycke/workflows's changelog.

4.19.1 (2025-09-25)

  • Bump to Click Extra 6.0.0.

4.19.0 (2025-09-25)

  • Check for URL fragments when checking links with Lychee.
  • Fix compilation of rfc3987_syntax data file thanks to Nuitka v2.7.14.
  • Remove local patch of gitignore-parser, rely on v0.1.13 release instead.
  • Add dependency on mdformat-recover-urls to fix URL encoding in Markdown files.
  • Force installation of all dependencies before running Mypy in lint workflow to ensure all typeshed-* packages are present.
  • Cap click to 8.2.x series when installing bump-my-version to avoid incompatible API changes.
  • Skip linting and sponsoring jobs on Dependabot PRs and prepare-release branch.

4.18.1 (2025-08-18)

  • Patch gitignore-parser locally to support Windows paths.

4.18.0 (2025-08-17)

  • Adds --format json option.
  • Remove --format plain option.
  • Returns file paths relative to the current directory whenever we can in gha-utils metadata output.
  • Ignore files matching .gitignore rules in the python_files and doc_files fields of gha-utils metadata output.
  • Force all VSCode JSON files to be formatted in jsonc dialect.
  • Prevent overlapping matching of JSON files by different dialect linters.
  • Share linter's file exclusion list between dialects.
  • Bump hard-coded eslint and eslint/json packages to their latest versions.
Commits
  • 7a20ab8 [changelog] Release v4.19.1
  • 53657ec Not ready yet.
  • efc172a [autofix] Regenerate dependency graph
  • fb1a984 Use stable version while we ship the next one
  • 2735a9d Use released version of Click Extra
  • 2458179 Sync to latest versions
  • a1f5703 Check that gha-utils CLI can be run as a Python module and with uv run an...
  • 8f8be31 [changelog] Post-release version bump
  • 056419c [changelog] Release v4.19.0
  • a9faadd [autofix] Regenerate dependency graph
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [kdeldycke/workflows](https://github.com/kdeldycke/workflows) from 4.17.9 to 4.19.1.
- [Release notes](https://github.com/kdeldycke/workflows/releases)
- [Changelog](https://github.com/kdeldycke/workflows/blob/main/changelog.md)
- [Commits](kdeldycke/workflows@v4.17.9...v4.19.1)

---
updated-dependencies:
- dependency-name: kdeldycke/workflows
  dependency-version: 4.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
📦 dependencies Update of dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant