Skip to content

Bump the pip-security-updates group across 3 directories with 2 updates - #70660

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/task-sdk/pip-security-updates-c239d66960
Closed

Bump the pip-security-updates group across 3 directories with 2 updates#70660
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/task-sdk/pip-security-updates-c239d66960

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-security-updates group with 1 update in the /airflow-core directory: gitpython.
Bumps the pip-security-updates group with 1 update in the /airflow-ctl directory: datamodel-code-generator.
Bumps the pip-security-updates group with 1 update in the /task-sdk directory: datamodel-code-generator.

Updates gitpython from 3.1.52 to 3.1.54

Release notes

Sourced from gitpython's releases.

3.1.54 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

Commits
  • e59d9ba prepare next release
  • a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
  • 1d51b89 fix: guard diff output options
  • ffcb535 fix: reject unsafe clone templates
  • e8d0fbf fix: validate split short-option values
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • 1ed1b92 fix: validate config section delimiters
  • 354eb2f Merge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks
  • 9bc287a Address review feedback about hook resolution
  • Additional commits viewable in compare view

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Changelog

Sourced from datamodel-code-generator's changelog.

0.64.0 - 2026-06-14

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Commits

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Changelog

Sourced from datamodel-code-generator's changelog.

0.64.0 - 2026-06-14

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

... (truncated)

Commits

Updates datamodel-code-generator from 0.41.0 to 0.64.0

Release notes

Sourced from datamodel-code-generator's releases.

0.64.0

Breaking Changes

Code Generation Changes

  • Self-referencing fields are now quoted with --disable-future-imports - When --disable-future-imports is set (no from __future__ import annotations and no native PEP 649 deferred evaluation on Python < 3.14), self-referencing and forward-referencing field annotations in regular BaseModel classes are now emitted as quoted forward references instead of bare names. Previously such annotations were left unquoted, producing invalid code that raised NameError (Ruff F821) at class-evaluation time. Output for the common case (with from __future__ import annotations or Python 3.14 native deferred annotations) is unchanged. Users who snapshot/golden-file generated output for the --disable-future-imports configuration with self-referencing models will see the annotation change from unquoted to quoted, e.g. children: Optional[List[Node]] → children: Optional[List["Node"]]. (#3387)

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 29, 2026
@potiuk potiuk mentioned this pull request Jul 29, 2026
Merged
1 task
@dependabot
Bump the pip-security-updates group across 3 directories with 2 updates
91ea27b 
Bumps the pip-security-updates group with 1 update in the /airflow-core directory: [gitpython](https://github.com/gitpython-developers/GitPython).
Bumps the pip-security-updates group with 1 update in the /airflow-ctl directory: [datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator).
Bumps the pip-security-updates group with 1 update in the /task-sdk directory: [datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator).


Updates `gitpython` from 3.1.52 to 3.1.54
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.52...3.1.54)

Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)

Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)

Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)

Updates `datamodel-code-generator` from 0.41.0 to 0.64.0
- [Release notes](https://github.com/koxudaxi/datamodel-code-generator/releases)
- [Changelog](https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md)
- [Commits](koxudaxi/datamodel-code-generator@0.41.0...0.64.0)

---
updated-dependencies:
- dependency-name: datamodel-code-generator
  dependency-version: 0.64.0
  dependency-type: direct:development
  dependency-group: pip-security-updates
- dependency-name: datamodel-code-generator
  dependency-version: 0.64.0
  dependency-type: direct:development
  dependency-group: pip-security-updates
- dependency-name: gitpython
  dependency-version: 3.1.54
  dependency-type: direct:development
  dependency-group: pip-security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/task-sdk/pip-security-updates-c239d66960 branch from 40aebd6 to 91ea27b Compare July 29, 2026 16:54
@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 30, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/task-sdk/pip-security-updates-c239d66960 branch July 30, 2026 06:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ashb ashb Awaiting requested review from ashb ashb is a code owner
@kaxil kaxil Awaiting requested review from kaxil kaxil is a code owner
@amoghrajesh amoghrajesh Awaiting requested review from amoghrajesh amoghrajesh is a code owner
@bugraoz93 bugraoz93 Awaiting requested review from bugraoz93 bugraoz93 is a code owner
@potiuk potiuk Awaiting requested review from potiuk potiuk is a code owner
@dheerajturaga dheerajturaga Awaiting requested review from dheerajturaga dheerajturaga is a code owner
@henry3260 henry3260 Awaiting requested review from henry3260 henry3260 is a code owner

Assignees

No one assigned

Labels

area:airflow-ctl area:task-sdk backport-to-airflow-ctl/v0-1-test dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants