Skip to content

Bump exasol/python-toolbox from 10 to 12 - #990

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/exasol/python-toolbox-12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/exasol/python-toolbox-12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps exasol/python-toolbox from 10 to 12.

Release notes

Sourced from exasol/python-toolbox's releases.

12.0.0 - 2026-10-26

Summary

This major release removes support for Python 3.10 and adds Nox sessions for validating and installing packaged agent skills. It also extends those sessions to support multiple skills and updates the GitHub Actions environment to Ubuntu 26.04.

Bugfixes

  • #965: Added additional parameters to format:fix tools to run with the minimum Python version
  • #983: Deduplicated vulnerable dependencies in Nox session release:prepare

Security Issues

This release fixes vulnerabilities by updating dependencies:

Dependency Vulnerability Affected Fixed in
black CVE-2026-114134 26.5.1 26.10.1
certifi PYSEC-2026-4320 2026.7.22 2026.10.19
filelock CVE-2026-112907 3.32.6 4.2.1
filelock CVE-2026-112913 3.32.6 4.2.1
filelock CVE-2026-112940 3.32.6 4.2.1
urllib3 PYSEC-2026-4175 2.7.0 2.8.0
urllib3 PYSEC-2026-4176 2.7.0 2.8.0
urllib3 PYSEC-2026-4177 2.7.0 2.8.0
virtualenv CVE-2026-113714 21.7.9 21.14.9
virtualenv CVE-2026-113715 21.7.9 21.14.9
virtualenv CVE-2026-113717 21.7.9 21.14.9
virtualenv CVE-2026-113718 21.7.9 21.14.9
virtualenv CVE-2026-113720 21.7.9 21.14.9
virtualenv CVE-2026-113722 21.7.9 21.14.9
virtualenv CVE-2026-113723 21.7.9 21.14.9
virtualenv CVE-2026-113725 21.7.9 21.14.7
virtualenv CVE-2026-113726 21.7.9 21.14.4
virtualenv CVE-2026-113732 21.7.9 21.14.2
virtualenv CVE-2026-113776 21.7.9 21.14.2
virtualenv PYSEC-2026-4011 21.7.9 21.7.12
virtualenv PYSEC-2026-4012 21.7.9 21.7.11
virtualenv PYSEC-2026-4013 21.7.9 21.7.13
virtualenv PYSEC-2026-4014 21.7.9 21.7.12

Features

  • #940: Added shared validation for packaged agent skills and the skills:check Nox session.
  • #938: Added the skills:install Nox session for installing the packaged PTB agent skill.
  • #942: Added api-contract-audit skill for identifying mismatches between type annotations, docstrings, and runtime behavior
  • #963: Extended packaged skill checks and installation to support multiple skills.
  • #978: Updated template doc/conf.py

... (truncated)

Commits
  • 1e3556e Prepare release 12.0.0 (#986)
  • db9c27b Deduplicate updated vulnerable dependencies (#985)
  • 4334577 Refactoring/965 remove python 3.10 support update ubuntu and default dbs (#980)
  • 724e53b #978: Updated template doc/conf.py (#979)
  • 8d889fc Added empty line to GitHub workflow template build-and-publish.yml (#977)
  • fd53f47 Refactor skill installation helpers (#968)
  • 4fedb91 Adapted skills:check and skills:install and added reusable tests (#966)
  • 63d7be8 Switch to slackapi/slack-github-action (#973)
  • c426557 Refactoring/924 remove lint dependencies (#971)
  • f371d57 Updated poetry.lock (#970)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [exasol/python-toolbox](https://github.com/exasol/python-toolbox) from 10 to 12.
- [Release notes](https://github.com/exasol/python-toolbox/releases)
- [Commits](v10...v12)

---
updated-dependencies:
- dependency-name: exasol/python-toolbox
  dependency-version: '12'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Change in dependencies github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026

This branch is waiting to be deployed

1 waiting deployment
manual-approval — a77bf7cb Waiting Nov 2, 2026 by dependabot[bot] via Merge Gate / Extension / Approve Running Slow Tests? #2893
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Change in dependencies github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants