Bump the dependencies group with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
phonenumberslite	8.13.50	8.13.51
pydantic	2.10.1	2.10.2
typer[all]	0.13.1	0.14.0
bandit[toml]	1.7.10	1.8.0
pytest	8.3.3	8.3.4

Updates phonenumberslite from 8.13.50 to 8.13.51

Commits

• 07255b9 Prep for 8.13.51 release
• df96dfa Generated files for metadata
• 5961ba8 Merge metadata changes from upstream 8.13.51
• See full diff in compare view

Updates pydantic from 2.10.1 to 2.10.2

Release notes

Sourced from pydantic's releases.

v2.10.2 2024-11-26

What's Changed

Fixes

• Only evaluate FieldInfo annotations if required during schema building by @​Viicos in #10769
• Do not evaluate annotations for private fields by @​Viicos in #10962
• Support serialization as any for Secret types and Url types by @​sydney-runkle in #10947
• Fix type hint of Field.default to be compatible with Python 3.8 and 3.9 by @​Viicos in #10972
• Add hashing support for URL types by @​sydney-runkle in #10975
• Hide BaseModel.__replace__ definition from type checkers by @​Viicos in 10979

Full Changelog: pydantic/pydantic@v2.10.1...v2.10.2

Changelog

Sourced from pydantic's changelog.

v2.10.2 (2024-11-25)

GitHub release

What's Changed

Fixes

• Only evaluate FieldInfo annotations if required during schema building by @​Viicos in #10769
• Do not evaluate annotations for private fields by @​Viicos in #10962
• Support serialization as any for Secret types and Url types by @​sydney-runkle in #10947
• Fix type hint of Field.default to be compatible with Python 3.8 and 3.9 by @​Viicos in #10972
• Add hashing support for URL types by @​sydney-runkle in #10975
• Hide BaseModel.__replace__ definition from type checkers by @​Viicos in 10979

Commits

• fe32515 Prepare for v2.10.2 release (#10982)
• 226cfaf Hide BaseModel.__replace__ definition from type checkers (#10979)
• 02229a6 hashing support for urls (#10975)
• a9cf39c Fix type hint of Field.default to be compatible with Python 3.8 and 3.9 (#1...
• 869eafd Support serialization as any for Secret types and Url types (#10947)
• 7c0ed72 Do not evaluate annotations for private fields (#10962)
• d6fc7fc Only evaluate FieldInfo annotations if required during schema building (#10...
• See full diff in compare view

Updates typer[all] from 0.13.1 to 0.14.0

Release notes

Sourced from typer[all]'s releases.

0.14.0

Breaking Changes

• 🔥 Remove auto naming of groups added via add_typer based on the group's callback function name. PR #1052 by @​patrick91.

Before, it was supported to infer the name of a command group from the callback function name in the sub-app, so, in this code:

import typer
app = typer.Typer()
users_app = typer.Typer()
app.add_typer(users_app)
@​users_app.callback()
def users():  # <-- This was the inferred command group name
"""
Manage users in the app.
"""
@​users_app.command()
def create(name: str):
print(f"Creating user: {name}")

...the command group would be named users, based on the name of the function def users().

Now you need to set it explicitly:

import typer
app = typer.Typer()
users_app = typer.Typer()
app.add_typer(users_app, name="users")  # <-- Explicitly set the command group name
@​users_app.callback()
def users():
"""
Manage users in the app.
"""
@​users_app.command()
def create(name: str):
</tr></table>

... (truncated)

Changelog

Sourced from typer[all]'s changelog.

0.14.0

Breaking Changes

• 🔥 Remove auto naming of groups added via add_typer based on the group's callback function name. PR #1052 by @​patrick91.

Before, it was supported to infer the name of a command group from the callback function name in the sub-app, so, in this code:

import typer
app = typer.Typer()
users_app = typer.Typer()
app.add_typer(users_app)
@​users_app.callback()
def users():  # <-- This was the inferred command group name
"""
Manage users in the app.
"""
@​users_app.command()
def create(name: str):
print(f"Creating user: {name}")

...the command group would be named users, based on the name of the function def users().

Now you need to set it explicitly:

import typer
app = typer.Typer()
users_app = typer.Typer()
app.add_typer(users_app, name="users")  # <-- Explicitly set the command group name
@​users_app.callback()
def users():
"""
Manage users in the app.
"""
@​users_app.command()
</tr></table>

... (truncated)

Commits

• f5c0b8a 🔖 Release version 0.14.0
• 7015323 📝 Update release notes
• 35bad6a 📝 Update release notes
• 2d1a598 🔥 Remove auto naming of groups added via add_typer based on the group's cal...
• 45cbfcd 📝 Update release notes
• 8af0b48 ⬆ Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.12.2 (#1043)
• 62525f2 📝 Update release notes
• be45e58 ⬆ Bump mkdocs-material from 9.5.44 to 9.5.46 (#1062)
• 740610f 📝 Update release notes
• 5fe79c2 ⬆ Bump ruff from 0.7.4 to 0.8.0 (#1059)
• Additional commits viewable in compare view

Updates bandit[toml] from 1.7.10 to 1.8.0

Release notes

Sourced from bandit[toml]'s releases.

1.8.0

What's Changed

• Bump docker/build-push-action from 6.7.0 to 6.9.0 by @​dependabot in PyCQA/bandit#1178
• Rename doc file to match proper bandit ID by @​ericwb in PyCQA/bandit#1183
• Removal of Python 3.8 support by @​ericwb in PyCQA/bandit#1174
• Add more insecure cryptography cipher algorithms by @​ericwb in PyCQA/bandit#1185
• Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @​dependabot in PyCQA/bandit#1186
• Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @​dependabot in PyCQA/bandit#1187
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1162
• No need to check httpx client without timeout defined by @​ericwb in PyCQA/bandit#1177
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1191
• Mark Python 3.13 as officially supported by @​ericwb in PyCQA/bandit#1192
• Update project urls with added links by @​ericwb in PyCQA/bandit#1193
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in PyCQA/bandit#1196
• Add a JSON to seek funding from the FLOSS/fund by @​ericwb in PyCQA/bandit#1194
• Remove Sentry as a sponsor by @​ericwb in PyCQA/bandit#1198
• Remove more leftover OpenStack references by @​ericwb in PyCQA/bandit#1195

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

Commits

• 8fd258a Remove more leftover OpenStack references (#1195)
• a19b072 Remove Sentry as a sponsor (#1198)
• 48e0258 Add a JSON to seek funding from the FLOSS/fund (#1194)
• 5300a21 [pre-commit.ci] pre-commit autoupdate (#1196)
• 0b249d9 Update project urls with added links (#1193)
• 4be653d Mark Python 3.13 as officially supported (#1192)
• 8e6dc1b [pre-commit.ci] pre-commit autoupdate (#1191)
• 071386b No need to check httpx client without timeout defined (#1177)
• 9b4d480 [pre-commit.ci] pre-commit autoupdate (#1162)
• ddf9b48 Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#1187)
• Additional commits viewable in compare view

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

• #12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

• #12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

• #12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

• #9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

• #10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

• #10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

• #12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

• #12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

• #12497: Fixed two failing pdb-related tests on Python 3.13.

Commits

• 53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
• 98dff36 Prepare release version 8.3.4
• 1b474e2 approx: use exact comparison for bool (#13013)
• b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
• 16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
• be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
• 7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
• c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
• 6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
• 52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions