Skip to content

build(deps): bump bump-my-version from 1.2.4 to 1.3.0#2963

Open
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/pip/bump-my-version-1.3.0
Open

build(deps): bump bump-my-version from 1.2.4 to 1.3.0#2963
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/pip/bump-my-version-1.3.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps bump-my-version from 1.2.4 to 1.3.0.

Release notes

Sourced from bump-my-version's releases.

1.3.0

Compare the full difference.

Fixes

  • Refactor hook script execution to handle platform-specific argument parsing; update typing imports. a46b63d

New

  • Add allow_shell_hooks option for safe hook execution; improve shell syntax handling. 036ee1a

    • Introduce allow_shell_hooks configuration to control shell metacharacters in hooks.
    • Change default behavior to disallow shell syntax (shell=False) unless explicitly enabled.
    • Add regex detection for shell syntax and migrate affected hooks.
    • Update tests and fixtures to cover new functionality.
    • Enhance documentation with migration guidance and best practices.

Other

  • Standardize formatting, spacing, and indentation across documentation and templates for consistency. 1b9eb42

  • Modularize CLI commands into individual files: bump, replace, show, show-bump, and sample-config; add corresponding tests and shared options file. c35c431

  • Make --regex option nullable; add tests for precedence between CLI flags and config. c78bbef

Updates

  • Update pre-commit, improve is_subpath logic, and enhance documentation. 919c66b

    • Update ruff-pre-commit to v0.15.1 in pre-commit config.
    • Refine is_subpath logic to handle edge cases and add path resolution.
    • Add security test cases for path traversal in test_is_subpath.
    • Extend AGENTS.md with pytest execution instructions.

1.2.7

Compare the full difference.

Fixes

  • Refactor movable tag logic to delete remote tags before pushing; update tests and documentation. a0d9580

Other

1.2.6

Compare the full difference.

Fixes

... (truncated)

Changelog

Sourced from bump-my-version's changelog.

1.3.0 (2026-03-22)

Compare the full difference.

Fixes

  • Refactor hook script execution to handle platform-specific argument parsing; update typing imports. a46b63d

New

  • Add allow_shell_hooks option for safe hook execution; improve shell syntax handling. 036ee1a

    • Introduce allow_shell_hooks configuration to control shell metacharacters in hooks.
    • Change default behavior to disallow shell syntax (shell=False) unless explicitly enabled.
    • Add regex detection for shell syntax and migrate affected hooks.
    • Update tests and fixtures to cover new functionality.
    • Enhance documentation with migration guidance and best practices.

Other

  • Standardize formatting, spacing, and indentation across documentation and templates for consistency. 1b9eb42

  • Modularize CLI commands into individual files: bump, replace, show, show-bump, and sample-config; add corresponding tests and shared options file. c35c431

  • Make --regex option nullable; add tests for precedence between CLI flags and config. c78bbef

Updates

  • Update pre-commit, improve is_subpath logic, and enhance documentation. 919c66b

    • Update ruff-pre-commit to v0.15.1 in pre-commit config.
    • Refine is_subpath logic to handle edge cases and add path resolution.
    • Add security test cases for path traversal in test_is_subpath.
    • Extend AGENTS.md with pytest execution instructions.

1.2.7 (2026-02-14)

Compare the full difference.

Fixes

  • Refactor movable tag logic to delete remote tags before pushing; update tests and documentation. a0d9580

Other

1.2.6 (2025-12-29)

... (truncated)

Commits
  • e6ecdc3 Version updated from 1.2.7 to 1.3.0
  • 28bc844 Merge pull request #400 from callowayproject/fix-is-subpath
  • 1b9eb42 Standardize formatting, spacing, and indentation across documentation and tem...
  • a46b63d Refactor hook script execution to handle platform-specific argument parsing; ...
  • c35c431 Modularize CLI commands into individual files: bump, replace, show, `sh...
  • c78bbef Make --regex option nullable; add tests for precedence between CLI flags an...
  • 036ee1a Add allow_shell_hooks option for safe hook execution; improve shell syntax ...
  • 919c66b Update pre-commit, improve is_subpath logic, and enhance documentation
  • 0bbbb5d Version updated from 1.2.6 to 1.2.7
  • d2cd3c8 Merge pull request #397 from callowayproject/396-change-moveable-tags
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [bump-my-version](https://github.com/callowayproject/bump-my-version) from 1.2.4 to 1.3.0.
- [Release notes](https://github.com/callowayproject/bump-my-version/releases)
- [Changelog](https://github.com/callowayproject/bump-my-version/blob/master/CHANGELOG.md)
- [Commits](callowayproject/bump-my-version@1.2.4...v1.3)

---
updated-dependencies:
- dependency-name: bump-my-version
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants