Skip to content

chore(deps-dev): bump python-semantic-release from 10.6.2 to 10.7.0 in the development-dependencies group - #110

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-9eccd592bd
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/development-dependencies-9eccd592bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 1 update: python-semantic-release.

Updates python-semantic-release from 10.6.2 to 10.7.0

Release notes

Sourced from python-semantic-release's releases.

v10.7.0 (2026-09-22)

This release is published under the MIT License.

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

✅ Resolved Issues

  • #1441: feat: add option to signoff commits made by python-semantic-release

  • #1443: feat: extend version_variables to replace vars with python type annotations


Detailed Changes: v10.6.2...v10.7.0


Installable artifacts are available from:

Changelog

Sourced from python-semantic-release's changelog.

v10.7.0 (2026-09-22)

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables, closes [#1443](https://github.com/python-semantic-release/python-semantic-release/issues/1443)_ (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits, closes [#1441](https://github.com/python-semantic-release/python-semantic-release/issues/1441)_ (PR#1492, 3cecbeb)

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

.. _#1441: python-semantic-release/python-semantic-release#1441 .. _#1443: python-semantic-release/python-semantic-release#1443 .. _3cecbeb: python-semantic-release/python-semantic-release@3cecbeb .. _947c57b: python-semantic-release/python-semantic-release@947c57b .. _e4b3bad: python-semantic-release/python-semantic-release@e4b3bad .. _fa87c95: python-semantic-release/python-semantic-release@fa87c95 .. _PR#1485: python-semantic-release/python-semantic-release#1485 .. _PR#1486: python-semantic-release/python-semantic-release#1486 .. _PR#1489: python-semantic-release/python-semantic-release#1489 .. _PR#1492: python-semantic-release/python-semantic-release#1492

.. _changelog-v10.6.2:

Commits
  • b700dbe chore: release v10.7.0
  • 3cecbeb feat(cmd-version): add optional git --signoff to version commits (#1492)
  • 0f4d414 build(deps-dev): expand filelock compatibility range to include v4.0+ (#1...
  • 35f7674 ci(deps): bump docker/build-push-action@v7.3.0 to v7.4.0 (#1495)
  • fa87c95 build(deps): expand click dependency range to include v8.5.* (#1489)
  • 4e78311 test(fixtures): adjust git monorepo creation fixtures to prevent race conditi...
  • 1d56d3a test(cmd-version): refactor imports to new flatdict variant
  • 1c48576 build(deps-test): swap broken flatdict with cj365-flatdict variant
  • f77ed51 ci(deps): bump mikepenz/action-junit-report@v6.4.2 to v6.5.0 (#1484)
  • 086cf14 test(fixtures): adjust git repo creation fixtures to prevent race conditions ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 1 update: [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release).


Updates `python-semantic-release` from 10.6.2 to 10.7.0
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@v10.6.2...v10.7)

---
updated-dependencies:
- dependency-name: python-semantic-release
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: jonzeolla. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@ai-coding-guardrails ai-coding-guardrails Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice work! 😎

I didn't find anything of concern

List of skipped files due to configuration

Risk: 🟢 Low

Did you know we can integrate this feedback directly into 50+ IDEs? Get setup in just one command

@ai-coding-guardrails ai-coding-guardrails Bot added the zenable/risk:low Zenable assessed this PR as LOW risk. label Sep 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

zenable/risk:low Zenable assessed this PR as LOW risk.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant