René's URL Explorer Experiment


Title: Bump the pip group across 2 directories with 2 updates by dependabot[bot] · Pull Request #22005 · github/codeql · GitHub

Open Graph Title: Bump the pip group across 2 directories with 2 updates by dependabot[bot] · Pull Request #22005 · github/codeql

X Title: Bump the pip group across 2 directories with 2 updates by dependabot[bot] · Pull Request #22005 · github/codeql

Description: WarningDependabot will stop supporting python v3.9! Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14. Bumps the pip group with 1 update in the /misc/codegen directory: pytest. Bumps the pip group with 1 update in the /python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC directory: pymongo. Updates pytest from 8.3.5 to 9.0.3 Release notes Sourced from pytest's releases. 9.0.3 pytest 9.0.3 (2026-04-07) Bug fixes #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them. #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed. Previously this resulted in an internal assertion failure during plugin loading. Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p. #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True. #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed. #14343: Fixed use of insecure temporary directory (CVE-2025-71176). Improved documentation #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example. #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function . #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after. #14255: TOML integer log levels must be quoted: Updating reference documentation. Contributor-facing changes #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface. -- by aleguy02 9.0.2 pytest 9.0.2 (2025-12-06) Bug fixes #13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators. You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future. Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled. #13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string. #13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10. ... (truncated) Commits a7d58d7 Prepare release version 9.0.3 089d981 Merge pull request #14366 from bluetech/revert-14193-backport 8127eaf Revert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)" 99a7e60 Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd... ddee02a Merge pull request #14343 from bluetech/cve-2025-71176-simple 74eac69 doc: Update training info (#14298) (#14301) f92dee7 Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62... 7ee58ac Merge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d... 37da870 Merge pull request #14259 from mitre88/patch-4 (#14268) c34bfa3 Add explanation for string context diffs (#14257) (#14266) Additional commits viewable in compare view Updates pymongo from 3.9 to 4.6.3 Release notes Sourced from pymongo's releases. PyMongo 4.6.3 Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348 PyMongo 4.6.2 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404 PyMongo 4.6.1 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-1-released/255752 PyMongo 4.6.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-0-released/251866 PyMongo 4.5.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-5-0-released/240662 PyMongo 4.4.1 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-4-1-released/235045 PyMongo 4.4.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-4-released/232211 PyMongo 4.4.0b0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-4-0b0-release/210471 PyMongo 4.3.3 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-3-3-release/200145 PyMongo 4.3.2 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-3-2-released/194266 PyMongo 4.2.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-2-0-released/176012 PyMongo 4.2.0b0 Release notes: https://www.mongodb.com/community/forums/t/python-driver-4-2-0-beta-available/168488 PyMongo 4.1.1 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-1-1-released/157895 PyMongo 4.1.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-1-0-released/156029 PyMongo 4.0.2 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-2-released/150457 PyMongo 4.0.1 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-1-released/135979 PyMongo 4.0 Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-released/134677 ... (truncated) Changelog Sourced from pymongo's changelog. Changes in Version 4.6.3 (2024/03/27) PyMongo 4.6.3 fixes the following bug: Fixed a potential memory access violation when decoding invalid bson. Issues Resolved ............... See the PyMongo 4.6.3 release notes in JIRA_ for the list of resolved issues in this release. .. _PyMongo 4.6.3 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=38360 Changes in Version 4.6.2 (2024/02/21) PyMongo 4.6.2 fixes the following bug: Fixed a bug appearing in Python 3.12 where "RuntimeError: can't create new thread at interpreter shutdown" could be written to stderr when a MongoClient's thread starts as the python interpreter is shutting down. Issues Resolved ............... See the PyMongo 4.6.2 release notes in JIRA_ for the list of resolved issues in this release. .. _PyMongo 4.6.2 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37906 Changes in Version 4.6.1 (2023/11/29) PyMongo 4.6.1 fixes the following bug: Ensure retryable read OperationFailure errors re-raise exception when 0 or NoneType error code is provided. Issues Resolved ............... See the PyMongo 4.6.1 release notes in JIRA_ for the list of resolved issues in this release. .. _PyMongo 4.6.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37138 Changes in Version 4.6.0 (2023/11/01) PyMongo 4.6 brings a number of improvements including: ... (truncated) Commits 8da192f BUMP 4.6.3 56b6b6d PYTHON-4305 Fix bson size check (#1564) 449d0f3 BUMP to 4.6.3.dev0 e04576d DEVPROD-3871 Use teardown_task when there is one function/command (#1533) cf1c6a1 PYTHON-4219 Prep for 4.6.2 Release (#1530) d29b2b7 PYTHON-4147 [v4.6]: Silence noisy thread.start() RuntimeError at shutdown (#1... 0477b9b PYTHON-4077 [v4.6]: Ensure there is a MacOS wheel for Python 3.7 (#1527) ecad17d BUMP 4.6.2.dev0 485e0a5 BUMP 4.6.1 995365c PYTHON-4038 [v4.6]: Ensure retryable read OperationFailures re-raise except... Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore will remove all of the ignore conditions of the specified dependency @dependabot unignore will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Open Graph Description: WarningDependabot will stop supporting python v3.9! Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14. Bumps the pip group with 1 update in the /misc/code...

X Description: WarningDependabot will stop supporting python v3.9! Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14. Bumps the pip group with 1 update in the /misc/code...

Opengraph URL: https://github.com/github/codeql/pull/22005

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:c17c4128-9e51-d0d9-9edf-d0bad000a9ca
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idB5CA:3EE845:515951E:7142DD5:6A4F781E
html-safe-nonce8778c4241994638f7f5b4de70ec8ce2cc3c2d2c20b7515ba87cb79aae7ee225b
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCNUNBOjNFRTg0NTo1MTU5NTFFOjcxNDJERDU6NkE0Rjc4MUUiLCJ2aXNpdG9yX2lkIjoiMzc0NjE3MDk3MDk5OTU4NDc5OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacefc02b356fbe5f52b7e77a217e227486b23a8368ceb51e28591d3389fc38c26e
hovercard-subject-tagpull_request:3890524649
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/22005/files
twitter:imagehttps://avatars.githubusercontent.com/in/29110?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/in/29110?s=400&v=4
og:image:altWarningDependabot will stop supporting python v3.9! Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14. Bumps the pip group with 1 update in the /misc/code...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Noneb92d11c0aa4a77d54ef4af1078b6a15fb5a70a215b30c4ecf28889d5a8e656d9
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release4b249b445842943ed31549e027f57a8ade9881ed
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/22005/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F22005%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F22005%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/22005/files
Reloadhttps://github.com/github/codeql/pull/22005/files
Reloadhttps://github.com/github/codeql/pull/22005/files
Please reload this pagehttps://github.com/github/codeql/pull/22005/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 988 https://github.com/github/codeql/issues
Pull requests 423 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
geoffw0https://github.com/geoffw0
mainhttps://github.com/github/codeql/tree/main
dependabot/pip/misc/codegen/pip-02f7ad5a4bhttps://github.com/github/codeql/tree/dependabot/pip/misc/codegen/pip-02f7ad5a4b
Conversation 2 https://github.com/github/codeql/pull/22005
Findings https://github.com/github/codeql/pull/22005/findings
Commits 2 https://github.com/github/codeql/pull/22005/commits
Checks 15 https://github.com/github/codeql/pull/22005/checks
Files changed 2 https://github.com/github/codeql/pull/22005/files
Bump the pip group across 2 directories with 2 updates https://github.com/github/codeql/pull/22005/files#top
Show all changes 2 commits https://github.com/github/codeql/pull/22005/files
880011c Bump the pip group across 2 directories with 2 updates dependabot[bot] Jun 18, 2026 https://github.com/github/codeql/pull/22005/commits/880011ce1317f6329520c318290c9dc1895e244c
117a0bb Copilot fix for missing module pygments - regenerating the lockfile f… geoffw0 Jul 7, 2026 https://github.com/github/codeql/pull/22005/commits/117a0bb87e5efaa4c9aa2ae0258af9c2a9ed3dad
Clear filters https://github.com/github/codeql/pull/22005/files
Please reload this pagehttps://github.com/github/codeql/pull/22005/files
Please reload this pagehttps://github.com/github/codeql/pull/22005/files
requirements_lock.txt https://github.com/github/codeql/pull/22005/files#diff-85f0f2ee8495632420b8758f7700a935915ea440f75cd1f56e51927d16566df4
requirements.txt https://github.com/github/codeql/pull/22005/files#diff-d6b1abe80b3805bf76b84bffbf6898bbc89e42a396b04d2d87bc0b4231852f8e
https://github.com/github/codeql/blob/main/CODEOWNERS#L29
misc/codegen/requirements_lock.txthttps://github.com/github/codeql/pull/22005/files#diff-85f0f2ee8495632420b8758f7700a935915ea440f75cd1f56e51927d16566df4
View file https://github.com/github/codeql/blob/117a0bb87e5efaa4c9aa2ae0258af9c2a9ed3dad/misc/codegen/requirements_lock.txt
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/22005/{{ revealButtonHref }}
https://github.com/github/codeql/pull/22005/files#diff-85f0f2ee8495632420b8758f7700a935915ea440f75cd1f56e51927d16566df4
https://github.com/github/codeql/pull/22005/files#diff-85f0f2ee8495632420b8758f7700a935915ea440f75cd1f56e51927d16566df4
https://github.com/github/codeql/blob/main/CODEOWNERS#L19
python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC/requirements.txthttps://github.com/github/codeql/pull/22005/files#diff-d6b1abe80b3805bf76b84bffbf6898bbc89e42a396b04d2d87bc0b4231852f8e
View file https://github.com/github/codeql/blob/117a0bb87e5efaa4c9aa2ae0258af9c2a9ed3dad/python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/PoC/requirements.txt
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/22005/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/22005/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.