Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps the pip-major group with 4 updates in the / directory: marshmallow, okta, types-flask-cors and pytest.

Updates marshmallow from 3.23.1 to 4.1.0

Changelog

Sourced from marshmallow's changelog.

4.1.0 (2025-11-01) ++++++++++++++++++

Other changes:

  • Add __len__ implementation to missing so that it can be used with validate.Length <marshmallow.validate.Length> (:pr:2861). Thanks :user:agentgodzilla for the PR.
  • Drop support for Python 3.9 (:pr:2363).
  • Test against Python 3.14.

4.0.1 (2025-08-28) ++++++++++++++++++

Bug fixes:

  • Fix wildcard import of from marshmallow import * (:pr:2823). Thanks :user:Florian-Laport for the PR.

4.0.0 (2025-04-16)


See :ref:upgrading_4_0 for a guide on updating your code.

Features:

  • Typing: Add types to all Field <marshmallow.fields.Field> constructor kwargs (:issue:2285). Thanks :user:navignaw for the suggestion.
  • DateTime <marshmallow.fields.DateTime>, Date <marshmallow.fields.Date>, Time <marshmallow.fields.Time>, TimeDelta <marshmallow.fields.TimeDelta>, and Enum <marshmallow.fields.Enum> accept their internal value types as valid input (:issue:1415). Thanks :user:bitdancer for the suggestion.
  • @validates <marshmallow.validates> accepts multiple field names (:issue:1960). Backwards-incompatible: Decorated methods now receive data_key as a keyword argument. Thanks :user:dpriskorn for the suggestion and :user:dharani7998 for the PR.

Other changes:

  • Typing: Field <marshmallow.fields.Field> is now a generic type with a type argument for the internal value type.
  • marshmallow.fields.UUID no longer subclasses marshmallow.fields.String.
  • marshmallow.Schema.load no longer silently fails to call schema validators when a generator is passed (:issue:1898). The typing of data is also updated to be more accurate. Thanks :user:ziplokk1 for reporting.
  • Backwards-incompatible: Use datetime.date.fromisoformat, datetime.time.fromisoformat, and datetime.datetime.fromisoformat from the standard library to deserialize dates, times and datetimes (:pr:2078). As a consequence of this change:
    • Time with time offsets are now supported.
    • YYYY-MM-DD is now accepted as a datetime and deserialized as naive 00:00 AM.
    • from_iso_date, from_iso_time and from_iso_datetime are removed from marshmallow.utils.

... (truncated)

Commits
  • 441213d Bump version and update changelog
  • 2b84b56 (fix) missing constant with len validation (#2861)
  • fc87262 Test against Python 3.14 (#2864)
  • 2a5e2e1 Update CHANGELOG
  • d861be7 Merge pull request #2863 from marshmallow-code/drop_python_39
  • 22288b6 Fix ruff issues
  • 1d8fd27 Drop Python 3.9
  • 966caf9 [pre-commit.ci] pre-commit autoupdate
  • feb2244 Merge pull request #2857 from marshmallow-code/disable_RUF043
  • 23ee363 Disable RUF043 in tests: allow metacharacters in match patterns
  • Additional commits viewable in compare view

Updates okta from 2.9.8 to 3.0.0

Release notes

Sourced from okta's releases.

v3.0.0

What's Changed

New Contributors

Full Changelog: okta/okta-sdk-python@v2.9.13...v3.0.0

v2.9.13

What's Changed

Full Changelog: okta/okta-sdk-python@v2.9.12...v2.9.13

v2.9.12

What's Changed

Full Changelog: okta/okta-sdk-python@v2.9.11...v2.9.12

v2.9.11

What's Changed

New Contributors

Full Changelog: okta/okta-sdk-python@v2.9.10...v2.9.11

v2.9.10

What's Changed

New Contributors

Full Changelog: okta/okta-sdk-python@v2.9.9...v2.9.10

... (truncated)

Changelog

Sourced from okta's changelog.

3.0.0

OKTA SDK PYTHON COMPREHENSIVE API MIGRATION REPORT

EXECUTIVE SUMMARY

This summary documents ALL METHOD CHANGES across the complete set of 350 operations between the older resource_clients directory and the newer api directory in the Okta Python SDK.

COMPLETE METHOD MIGRATION MAPPING

1. APPLICATION_CLIENT.PY → MULTIPLE APIs (53 METHODS)

FROM: application_client.py (53 methods) TO: Multiple specialized APIs

CORE APPLICATION METHODS (Retained in application_api.py):

  • list_applicationslist_applications (KEPT)
  • create_applicationcreate_application (KEPT)
  • delete_applicationdelete_application (KEPT)
  • get_applicationget_application (KEPT)
  • activate_applicationactivate_application (KEPT)
  • deactivate_applicationdeactivate_application (KEPT)
  • update_applicationreplace_application (RENAMED)

APPLICATION CONNECTION METHODS (→ application_connections_api.py):

  • get_default_provisioning_connection_for_application → MOVED
  • set_default_provisioning_connection_for_application → MOVED
  • activate_default_provisioning_connection_for_application → MOVED
  • deactivate_default_provisioning_connection_for_application → MOVED

CERTIFICATE/CSR METHODS (REMOVED - No direct equivalent):

  • list_csrs_for_application → REMOVED
  • generate_csr_for_application → REMOVED
  • revoke_csr_from_application → REMOVED
  • get_csr_for_application → REMOVED
  • publish_cer_cert → REMOVED
  • publish_binary_cer_cert → REMOVED
  • publish_der_cert → REMOVED
  • publish_binary_der_cert → REMOVED
  • publish_binary_pem_cert → REMOVED

APPLICATION KEYS METHODS (REMOVED - No direct equivalent):

  • list_application_keys → REMOVED
  • generate_application_key → REMOVED
  • get_application_key → REMOVED
  • clone_application_key → REMOVED

... (truncated)

Commits
  • e9fa5b8 Merge pull request #455 from okta/OKTA-504329
  • 6d85ea5 Merge pull request #451 from okta/OKTA-937866
  • 6c3b63a - Added the new domains to the Okta domain list in the code files mentioned.
  • 8ef9317 Merge pull request #454 from okta/readme-changes
  • fada5bf - Added link for the devforums in the README.md
  • 780ecaa major (sdk): Migrate from Swagger 2.0 to OpenAPI 3.0
  • a423b78 adding dependabot file for python
  • e9764a4 Merge pull request #446 from okta/release-changes-v2.9.13
  • 55fae99 - Release changelog and version changes.
  • f75f82c Merge pull request #445 from okta/OKTA-641384
  • Additional commits viewable in compare view

Updates types-flask-cors from 5.0.0.20240902 to 6.0.0.20250809

Commits

Updates pytest from 8.3.4 to 9.0.0

Release notes

Sourced from pytest's releases.

9.0.0

pytest 9.0.0 (2025-11-05)

New features

  • #1367: Support for subtests has been added.

    subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

    Example:

    def contains_docstring(p: Path) -> bool:
        """Return True if the given Python file contains a top-level docstring."""
        ...
    def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
    for path in Path.cwd().glob("*.py"):
    with subtests.test(path=str(path)):
    assert contains_docstring(path)

    Each assert failure or error is caught by the context manager and reported individually, giving a clear picture of all files that are missing a docstring.

    In addition, unittest.TestCase.subTest is now also supported.

    This feature was originally implemented as a separate plugin in pytest-subtests, but since then has been merged into the core.

    [!NOTE] This feature is experimental and will likely evolve in future releases. By that we mean that we might change how subtests are reported on failure, but the functionality and how to use it are stable.

  • #13743: Added support for native TOML configuration files.

    While pytest, since version 6, supports configuration in pyproject.toml files under [tool.pytest.ini_options], it does so in an "INI compatibility mode", where all configuration values are treated as strings or list of strings. Now, pytest supports the native TOML data model.

    In pyproject.toml, the native TOML configuration is under the [tool.pytest] table.

    # pyproject.toml
    [tool.pytest]
    minversion = "9.0"
    addopts = ["-ra", "-q"]
    testpaths = [
        "tests",
        "integration",
    ]

... (truncated)

Commits
  • f4b0fd2 Prepare release version 9.0.0
  • 52d8e68 Merge pull request #13889 from bluetech/regendoc-restore
  • d6d3e4a doc: fixes for regendoc
  • 7cb3974 doc: restore missing "# content of pytest.toml" regendoc commands
  • 5ae9e47 build(deps): Bump django in /testing/plugins_integration (#13881)
  • adb3658 Merge pull request #13864 from bluetech/config-cleanups-2
  • a28c08e Merge pull request #13875 from bluetech/ci-tweaks
  • a250954 ci: split publish-to-pypi and push-tag jobs
  • ebc152f ci: update setup python's from 3.11 or 3.* to 3.13
  • dfd796f ci: move running update-plugin-list script to tox
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 10, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/pip-major-a887b6b0ba branch from d0861d7 to 015baae Compare November 17, 2025 00:20
Bumps the pip-major group with 4 updates in the / directory: [marshmallow](https://github.com/marshmallow-code/marshmallow), [okta](https://github.com/okta/okta-sdk-python), [types-flask-cors](https://github.com/typeshed-internal/stub_uploader) and [pytest](https://github.com/pytest-dev/pytest).


Updates `marshmallow` from 3.23.1 to 4.1.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.23.1...4.1.0)

Updates `okta` from 2.9.8 to 3.0.0
- [Release notes](https://github.com/okta/okta-sdk-python/releases)
- [Changelog](https://github.com/okta/okta-sdk-python/blob/master/CHANGELOG.md)
- [Commits](okta/okta-sdk-python@v2.9.8...v3.0.0)

Updates `types-flask-cors` from 5.0.0.20240902 to 6.0.0.20250809
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `pytest` from 8.3.4 to 9.0.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...9.0.0)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-major
- dependency-name: okta
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-major
- dependency-name: types-flask-cors
  dependency-version: 6.0.0.20250809
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-major
- dependency-name: pytest
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/pip-major-a887b6b0ba branch from 015baae to 4a9dc86 Compare December 1, 2025 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant