Skip to content

chore(deps-dev): bump tomli from 2.3.0 to 2.4.1#1453

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/tomli-2.4.1
Closed

chore(deps-dev): bump tomli from 2.3.0 to 2.4.1#1453
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/tomli-2.4.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps tomli from 2.3.0 to 2.4.1.

Changelog

Sourced from tomli's changelog.

2.4.1

  • Fixed
    • Limit number of parts of a TOML key to address quadratic time complexity

2.4.0

  • Added
    • TOML v1.1.0 compatibility
    • Binary wheels for Windows arm64
Commits
  • c5f4469 Bump version: 2.4.0 → 2.4.1
  • 2bcd262 Add change log for 2.4.1 and 2.3.1
  • e1fdb94 Limit number of parts of a key (#286)
  • c20c491 pre-commit autoupdate
  • 920e20b Update performance benchmark and results
  • 064e492 Merge pull request #280 from hukkin/version-2.4.0
  • a678e6f Bump version: 2.3.0 → 2.4.0
  • b8a1358 Tests: remove now needless "TOML compliance"->"burntsushi" format conversion
  • 4979375 Update GitHub actions
  • f890dd1 Update pre-commit hooks
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 20, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 20, 2026 05:35
@github-actions github-actions Bot enabled auto-merge April 20, 2026 05:35
Bumps [tomli](https://github.com/hukkin/tomli) from 2.3.0 to 2.4.1.
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.3.0...2.4.1)

---
updated-dependencies:
- dependency-name: tomli
  dependency-version: 2.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/tomli-2.4.1 branch from e195021 to 82bd3b3 Compare May 7, 2026 20:28
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 8, 2026

Looks like tomli is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this May 8, 2026
auto-merge was automatically disabled May 8, 2026 18:09

Pull request was closed

@dependabot dependabot Bot deleted the dependabot/pip/tomli-2.4.1 branch May 8, 2026 18:09
pull Bot pushed a commit to TheTechOddBug/msgraph-sdk-python that referenced this pull request May 8, 2026
Combines 12 open dependabot PRs into a single update:

requirements-dev.txt:
- anyio: 4.10.0 -> 4.12.1 (microsoftgraph#1458)
- attrs: 25.3.0 -> 26.1.0 (microsoftgraph#1460)
- azure-core: 1.38.0 -> 1.39.0 (microsoftgraph#1438)
- azure-identity: 1.25.1 -> 1.25.3 (microsoftgraph#1438)
- msal: 1.33.0 -> 1.36.0 (microsoftgraph#1457)
- multidict: 6.7.0 -> 6.7.1 (microsoftgraph#1452)
- PyJWT: 2.12.0 -> 2.12.1 (microsoftgraph#1459)
- tomli: 2.3.0 -> 2.4.1 (microsoftgraph#1453)
- tomlkit: 0.13.3 -> 0.14.0 (microsoftgraph#1454)
- tzdata: 2025.2 -> 2026.1 (microsoftgraph#1455)
- zipp: 3.23.0 -> 3.23.1 (microsoftgraph#1456)

GitHub Actions:
- googleapis/release-please-action: v4 -> v5 (microsoftgraph#1463)
- dependabot/fetch-metadata: v3.0.0 -> v3.1.0 (microsoftgraph#1451)

Note: msal bump to 1.36.0 resolves the dependency conflict that
caused PR microsoftgraph#1438 to fail (azure-identity 1.25.3 requires msal>=1.35.1).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants