dependabot[bot] opened a new pull request, #210: URL: https://github.com/apache/solr-site/pull/210
Bumps [pip-tools](https://github.com/jazzband/pip-tools) from 7.5.3 to 7.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jazzband/pip-tools/releases";>pip-tools's releases</a>.</em></p> <blockquote> <h2>v7.6.0</h2> <p><em>2026-07-13</em></p> <h3>Features</h3> <ul> <li> <p>The <code>--help</code> output for <code>pip-compile</code> and <code>pip-sync</code> commands has been extended to include usage examples -- by <a href="https://github.com/Dzhud";><code>@Dzhud</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/1142";>#1142</a></p> </li> <li> <p>Added <code>--uploaded-prior-to</code> as a passthrough option for <code>pip-compile</code>, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by <a href="https://github.com/miettal";><code>@miettal</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2288";>#2288</a></p> </li> <li> <p><code>pip-tools</code> is now compatible with <code>pip</code> 26.1 -- <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2379";>#2379</a></p> </li> </ul> <h3>Improved documentation</h3> <ul> <li> <p>Fixed the contents sidebar for the index doc -- by <a href="https://github.com/sirosen";><code>@sirosen</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2169";>#2169</a></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by <a href="https://github.com/sirosen";><code>@sirosen</code></a>.</p> <p>Thanks to <a href="https://github.com/0cjs";><code>@0cjs</code></a>, <a href="https://github.com/gpshead";><code>@gpshead</code></a>, mr-<a href="https://github.com/c";><code>@c</code></a>, <a href="https://github.com/samdoran";><code>@samdoran</code></a>, <a href="https://github.com/webknjaz";><code>@webknjaz</code></a>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2318";>#2318</a></p> </li> <li> <p><code>pip-tools</code>' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.</p> <p>-- by <a href="https://github.com/sirosen";><code>@sirosen</code></a></p> </li> </ul> <h3>Contributor-facing changes</h3> <ul> <li> <p>CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by <a href="https://github.com/sirosen";><code>@sirosen</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2079";>#2079</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2132";>#2132</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2348";>#2348</a></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by <a href="https://github.com/sirosen";><code>@sirosen</code></a>.</p> <p>Thanks to <a href="https://github.com/0cjs";><code>@0cjs</code></a>, <a href="https://github.com/gpshead";><code>@gpshead</code></a>, mr-<a href="https://github.com/c";><code>@c</code></a>, <a href="https://github.com/samdoran";><code>@samdoran</code></a>, <a href="https://github.com/webknjaz";><code>@webknjaz</code></a>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2278";>#2278</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2318";>#2318</a></p> </li> <li> <p>Started running {pypi}<code>zizmor</code> as a part of CI pipelines to improve security of how we configure GitHub Actions CI/CD -- by <a href="https://github.com/webknjaz";><code>@webknjaz</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2327";>#2327</a></p> </li> <li> <p>pip-tools docs now support GitHub Flavored Markdown admonition blocks -- by <a href="https://github.com/webknjaz";><code>@webknjaz</code></a>.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md";>pip-tools's changelog</a>.</em></p> <blockquote> <h2>v7.6.0</h2> <p><em>2026-07-13</em></p> <h3>Features</h3> <ul> <li> <p>The <code>--help</code> output for <code>pip-compile</code> and <code>pip-sync</code> commands has been extended to include usage examples -- by {user}<code>Dzhud</code>.</p> <p><em>PRs and issues:</em> {issue}<code>1142</code></p> </li> <li> <p>Added <code>--uploaded-prior-to</code> as a passthrough option for <code>pip-compile</code>, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by {user}<code>miettal</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2288</code></p> </li> <li> <p><code>pip-tools</code> is now compatible with <code>pip</code> 26.1 -- {user}<code>gaborbernat</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2379</code></p> </li> </ul> <h3>Improved documentation</h3> <ul> <li> <p>Fixed the contents sidebar for the index doc -- by {user}<code>sirosen</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2169</code></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by {user}<code>sirosen</code>.</p> <p>Thanks to {user}<code>0cjs</code>, {user}<code>gpshead</code>, {user}<code>mr-c</code>, {user}<code>samdoran</code>, {user}<code>webknjaz</code>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> {issue}<code>2318</code></p> </li> <li> <p><code>pip-tools</code>' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.</p> <p>-- by {user}<code>sirosen</code></p> </li> </ul> <h3>Contributor-facing changes</h3> <ul> <li> <p>CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by {user}<code>sirosen</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2079</code>, {issue}<code>2132</code>, {issue}<code>2348</code></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jazzband/pip-tools/commit/27f6a968be04fa60c0873d9025bd5e1824e09082";><code>27f6a96</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2420";>#2420</a> from sirosen/release/v7.6.0</li> <li><a href="https://github.com/jazzband/pip-tools/commit/cbe77f06a778a6ccf5cf338f8e0a62fe7b9847c0";><code>cbe77f0</code></a> Apply suggestions from code review</li> <li><a href="https://github.com/jazzband/pip-tools/commit/015146e1a114a5b6aee00f1c8d3a23db7f5898b0";><code>015146e</code></a> Update changelog for version 7.6.0</li> <li><a href="https://github.com/jazzband/pip-tools/commit/9a2d2c12a798d1986807a718e2ab0c92f1f9f81c";><code>9a2d2c1</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2414";>#2414</a> from jazzband/pre-commit-ci-update-config</li> <li><a href="https://github.com/jazzband/pip-tools/commit/fc3f877b89c27a89adce4e60d2ed224bae34caff";><code>fc3f877</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2418";>#2418</a> from jazzband/dependabot/pip/docs/soupsieve-2.8.4</li> <li><a href="https://github.com/jazzband/pip-tools/commit/5247a6bd4ee11e6b88c026b887a52e18a30ae36e";><code>5247a6b</code></a> [pre-commit.ci] pre-commit autoupdate</li> <li><a href="https://github.com/jazzband/pip-tools/commit/3d1faf6ad56d649d04930199e6b94110cf7341af";><code>3d1faf6</code></a> Bump soupsieve from 2.8.3 to 2.8.4 in /docs</li> <li><a href="https://github.com/jazzband/pip-tools/commit/57637dbf08aeefe88fec7786bcd07cf111f9f662";><code>57637db</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2419";>#2419</a> from sirosen/fix-test-failure</li> <li><a href="https://github.com/jazzband/pip-tools/commit/4695c37c231d27065688119a658e9c97ff04efc0";><code>4695c37</code></a> Fix the <code>fake_with_deps</code> test package</li> <li><a href="https://github.com/jazzband/pip-tools/commit/24f4230b0fc9c964100b73f81599b0cc4eaff79a";><code>24f4230</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2413";>#2413</a> from webknjaz/maintenance/nested-zizmor-gha-workflow...</li> <li>Additional commits viewable in <a href="https://github.com/jazzband/pip-tools/compare/v7.5.3...v7.6.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
