Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: theupdateframework/python-tuf
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: develop@{1day}
Choose a base ref
...
head repository: theupdateframework/python-tuf
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: develop
Choose a head ref
  • 8 commits
  • 6 files changed
  • 2 contributors

Commits on May 5, 2026

  1. build(deps): bump build in the build-and-release-dependencies group

    Bumps the build-and-release-dependencies group with 1 update: [build](https://github.com/pypa/build).
    
    
    Updates `build` from 1.4.3 to 1.4.4
    - [Release notes](https://github.com/pypa/build/releases)
    - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
    - [Commits](pypa/build@1.4.3...1.4.4)
    
    ---
    updated-dependencies:
    - dependency-name: build
      dependency-version: 1.4.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: build-and-release-dependencies
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored May 5, 2026
    Configuration menu
    Copy the full SHA
    4500e99 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump the test-and-lint-dependencies group with 2 updates

    Bumps the test-and-lint-dependencies group with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy).
    
    
    Updates `ruff` from 0.15.10 to 0.15.12
    - [Release notes](https://github.com/astral-sh/ruff/releases)
    - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
    - [Commits](astral-sh/ruff@0.15.10...0.15.12)
    
    Updates `mypy` from 1.20.1 to 1.20.2
    - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
    - [Commits](python/mypy@v1.20.1...v1.20.2)
    
    ---
    updated-dependencies:
    - dependency-name: ruff
      dependency-version: 0.15.12
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: test-and-lint-dependencies
    - dependency-name: mypy
      dependency-version: 1.20.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: test-and-lint-dependencies
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored May 5, 2026
    Configuration menu
    Copy the full SHA
    4883f02 View commit details
    Browse the repository at this point in the history
  3. build(deps): bump cryptography in the dependencies group

    Bumps the dependencies group with 1 update: [cryptography](https://github.com/pyca/cryptography).
    
    
    Updates `cryptography` from 46.0.7 to 47.0.0
    - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
    - [Commits](pyca/cryptography@46.0.7...47.0.0)
    
    ---
    updated-dependencies:
    - dependency-name: cryptography
      dependency-version: 47.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: dependencies
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored May 5, 2026
    Configuration menu
    Copy the full SHA
    4b6e35a View commit details
    Browse the repository at this point in the history

Commits on May 12, 2026

  1. build(deps): bump the action-dependencies group across 1 directory wi…

    …th 2 updates
    
    Bumps the action-dependencies group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action).
    
    
    Updates `github/codeql-action` from 4 to 4.35.3
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@v4...v4.35.3)
    
    Updates `actions/dependency-review-action` from 4 to 4.9.0
    - [Release notes](https://github.com/actions/dependency-review-action/releases)
    - [Commits](actions/dependency-review-action@v4...v4.9.0)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-version: 4.35.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: action-dependencies
    - dependency-name: actions/dependency-review-action
      dependency-version: 4.9.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: action-dependencies
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored May 12, 2026
    Configuration menu
    Copy the full SHA
    6348502 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2026

  1. Merge pull request #2941 from theupdateframework/dependabot/github_ac…

    …tions/action-dependencies-36c9f0f7bd
    
    build(deps): bump the action-dependencies group across 1 directory with 2 updates
    jku authored May 13, 2026
    Configuration menu
    Copy the full SHA
    be4f314 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #2939 from theupdateframework/dependabot/pip/depen…

    …dencies-13be1a88ef
    
    build(deps): bump cryptography from 46.0.7 to 47.0.0 in the dependencies group
    jku authored May 13, 2026
    Configuration menu
    Copy the full SHA
    9d7d1b9 View commit details
    Browse the repository at this point in the history
  3. Merge pull request #2937 from theupdateframework/dependabot/pip/build…

    …-and-release-dependencies-9e3f53043a
    
    build(deps): bump build from 1.4.3 to 1.4.4 in the build-and-release-dependencies group
    jku authored May 13, 2026
    Configuration menu
    Copy the full SHA
    57cc1a7 View commit details
    Browse the repository at this point in the history
  4. Merge pull request #2938 from theupdateframework/dependabot/pip/test-…

    …and-lint-dependencies-a23ce36e0c
    
    build(deps): bump the test-and-lint-dependencies group with 2 updates
    jku authored May 13, 2026
    Configuration menu
    Copy the full SHA
    5c0c36d View commit details
    Browse the repository at this point in the history
Loading