chore(deps): bump click from 8.3.3 to 8.4.1 by dependabot[bot] · Pull Request #458 · QualityUnit/pyworkflow

dependabot · 2026-05-23T12:15:34Z

Bumps click from 8.3.3 to 8.4.1.

Release notes

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484

Zsh completion scripts parse correctly on Windows. #3277 # 3466

Shell completion of Choice Enum values produces a valid completion result. #3015

Fix empty byte-string handling in echo. #3487

Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

ParamType typing improvements. #3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

Parameter typing improvements. #2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

get_parameter_source() is available during eager callbacks and type conversion again. :issue:3458 :issue:3484

Zsh completion scripts parse correctly on Windows. :issue:3277 :pr:3466

Shell completion of Choice Enum values produces a valid completion result. :issue:3015

Fix empty byte-string handling in echo. :issue:3487

Fix closed file error with echo_via_pager. :issue:3449

Version 8.4.0

Released 2026-05-17

:class:ParamType typing improvements. :pr:3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

:class:Parameter typing improvements. :pr:2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

... (truncated)

Commits

6eeb50e release version 8.4.1
67921d5 change log and doc fixes (#3495)
9c41f46 Fix changelog and version admonitions
6cb3477 fix skip condition
5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
becbde5 pager doesn't close std streams
a5f5aa6 Handle empty bytes in echo (#3493)
4d3db84 handle empty bytes in echo
d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
0baa8db Document ctx.params bypass with test and doc
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [click](https://github.com/pallets/click) from 8.3.3 to 8.4.1. - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.3...8.4.1) --- updated-dependencies: - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-23T12:15:34Z

Labels

The following labels could not be found: type:dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

* chore(deps): bump Python dependencies (dependabot batch) Root (pyproject.toml + poetry.lock): - click 8.3.3 -> 8.4.1 (#458) - filelock 3.29.0 -> 3.29.4 (#479) - pydantic 2.13.3 -> 2.13.4 (#422) - aiobotocore 3.6.0 -> 3.7.0 (#414) - aiohttp 3.13.5 -> 3.14.1 (#473) - tornado 6.5.5 -> 6.5.7 (#476) - urllib3 2.6.3 -> 2.7.0 (#429) - idna 3.11 -> 3.18 (#450) - aws-durable-execution-sdk-python 1.4.0 -> 1.5.0 (#464) - redis 7.4.0 -> 8.0.0 (#472, major) - mypy 1.20.2 -> 2.1.0 (#439, major) - ruff 0.15.12 -> 0.15.17 (#480) - black 26.3.1 -> 26.5.1 (#456) - moto 5.2.0 -> 5.2.2 (#478) - pytest-asyncio 1.3.0 -> 1.4.0 (#470) - types-python-dateutil -> 2.9.0.20260518 (#466) - types-pyyaml -> 6.0.12.20260518 (#453) dashboard/backend: idna 3.11 -> 3.18 (#451, transitive) mypy 2.1.0 surfaced two latent type errors in cli/utils/interactive.py; collapsed the two-loop choice conversion into a single isinstance-narrowed loop. Verified: ruff check, ruff format --check, mypy (net-neutral vs the pre-existing AWS-module errors on main), and full pytest suite (971 passed). redis floor kept at >=5.0.0 in optional-dependencies to avoid forcing redis 8 on library consumers; lockfile pins 8.0.0 for dev. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * chore(deps): bump frontend dependencies (dependabot batch) dashboard/frontend (package.json + package-lock.json): - @tabler/icons-react 3.41 -> 3.44.0 (#416) - @tailwindcss/vite 4.2.4 -> 4.3.0 (#426) - tailwindcss 4.2.4 -> 4.3.0 (#413) - @tanstack/react-query 5.100.8 -> 5.100.13 (#454) - @tanstack/react-query-devtools 5.99 -> 5.100.13 (#463) - @tanstack/eslint-plugin-query 5.100.8 -> 5.100.13 (#457) - @tanstack/react-router 1.169.1 -> 1.170.7 (#467) - @tanstack/react-router-devtools 1.166.13 -> 1.167.0 (#446) - @tanstack/router-plugin 1.167.32 -> 1.168.10 (#462) - @uiw/react-codemirror 4.25.9 -> 4.25.10 (#460) - @hookform/resolvers 5.2.2 -> 5.4.0 (#455) - react-hook-form 7.75.0 -> 7.76.1 (#465) - axios 1.16.0 -> 1.16.1 (#437) - date-fns 4.1.0 -> 4.3.0 (#459) - lucide-react 1.14.0 -> 1.16.0 (#443) - react 19.2.5 -> 19.2.6 (#427) - tailwind-merge 3.5.0 -> 3.6.0 (#432) - zod 4.4.2 -> 4.4.3 (#418) - zustand 5.0.12 -> 5.0.13 (#423) - @types/node 25.6.0 -> 25.9.1 (#469) - @vitejs/plugin-react-swc 4.3.0 -> 4.3.1 (#448) - eslint 10.3.0 -> 10.4.0 (#440) - typescript-eslint 8.59.1 -> 8.59.4 (#452) - vite 8.0.10 -> 8.0.16 (#481, supersedes #468) Held back: react-day-picker 9.14.0 -> 10.0.1 (#441) — the v10 major removes the `table` key from its ClassNames type and breaks the build in src/components/ui/calendar.tsx. Left at 9.14.0 pending a calendar migration. Verified: npm run build passes. Frontend lint is unchanged vs main (pre-existing errors, not gated in CI). yarn.lock/pnpm-lock are vestigial (Dockerfile uses `npm ci`) and intentionally left untouched. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * chore(deps): bump codecov/codecov-action from 6 to 7 (#477) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

dependabot · 2026-06-16T10:59:44Z

Looks like click is up-to-date now, so this is no longer needed.

dependabot Bot assigned yasha-dev1 May 23, 2026

yasha-dev1 mentioned this pull request Jun 16, 2026

chore(deps): batch dependabot updates (43 PRs) #483

Merged

dependabot Bot closed this Jun 16, 2026

dependabot Bot deleted the dependabot/pip/click-8.4.1 branch June 16, 2026 10:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump click from 8.3.3 to 8.4.1#458

chore(deps): bump click from 8.3.3 to 8.4.1#458
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/click-8.4.1

dependabot Bot commented on behalf of github May 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.4.1

8.4.0

Version 8.4.1

Version 8.4.0

Uh oh!

dependabot Bot commented on behalf of github May 23, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 23, 2026 •

edited

Loading