github-dependents-info 4.0.0__tar.gz → 4.1.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/PKG-INFO +43 -13
  2. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/README.md +40 -10
  3. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/pyproject.toml +8 -8
  4. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/LICENSE +0 -0
  5. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/github_dependents_info/__init__.py +0 -0
  6. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/github_dependents_info/__main__.py +0 -0
  7. {github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/github_dependents_info/gh_dependents_info.py +0 -0
{github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: github-dependents-info
3
- Version: 4.0.0
3
+ Version: 4.1.0
4
4
  Summary: Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badges.
5
5
  License-Expression: MIT
6
6
  License-File: LICENSE
@@ -17,8 +17,8 @@ Classifier: Programming Language :: Python :: 3.9
17
17
  Requires-Dist: beautifulsoup4 (==4.15.0)
18
18
  Requires-Dist: click (>=8.5,<8.6)
19
19
  Requires-Dist: httpx (>=0.28.1,<0.29.0)
20
- Requires-Dist: idna (>=3.14)
21
- Requires-Dist: pandas (>=3.0.5,<3.1)
20
+ Requires-Dist: idna (>=3.20)
21
+ Requires-Dist: pandas (>=3.1,<3.2)
22
22
  Requires-Dist: rich (>=15,<15.1)
23
23
  Requires-Dist: soupsieve (>=2.8.4)
24
24
  Requires-Dist: typer (>=0.27.1,<0.28)
@@ -38,7 +38,7 @@ Description-Content-Type: text/markdown
38
38
  [![Dependencies Status](https://img.shields.io/badge/dependencies-up%20to%20date-brightgreen.svg)](https://github.com/nvuillam/github-dependents-info/pulls?utf8=%E2%9C%93&q=is%3Apr%20author%3Aapp%2Fdependabot)
39
39
 
40
40
  [![GitHub contributors](https://img.shields.io/github/contributors/nvuillam/github-dependents-info.svg)](https://github.com/nvuillam/github-dependents-info/graphs/contributors/)<!-- gh-dependents-info-used-by-start -->
41
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
41
+ [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=54&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
42
42
  [![GitHub Sponsors](https://img.shields.io/github/sponsors/nvuillam)](https://github.com/sponsors/nvuillam)
43
43
  [![MegaLinter](https://github.com/nvuillam/github-dependents-info/actions/workflows/mega-linter.yml/badge.svg)](https://github.com/nvuillam/github-dependents-info/actions/workflows/mega-linter.yml)
44
44
  [![License](https://img.shields.io/github/license/nvuillam/github-dependents-info)](https://github.com/nvuillam/github-dependents-info/blob/master/LICENSE)
@@ -63,8 +63,7 @@ This package uses GitHub HTML to collect dependents information and can:
63
63
  - Generate summary markdown file
64
64
  - Optionally add an AI-generated usage summary (via `litellm`) when an LLM API key is present
65
65
  - Update existing markdown by inserting **Used by** badge within tags
66
- - `<!-- gh-dependents-info-used-by-start -->
67
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`
66
+ - <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>
68
67
  - Handle multiple repositories packages
69
68
  - Filter results using minimum stars or by repository owner
70
69
  - Keep huge ecosystems manageable with pagination controls (`--max-scraped-pages`, `--pagination/--no-pagination`, `--page-size`)
@@ -269,8 +268,7 @@ _________________
269
268
  | Parameter | Type | Description |
270
269
  |-----------|--------|----------------------------------------------|
271
270
  | --repo | String | Repository. Example: `oxsecurity/megalinter` |
272
- | -b<br/> --badgemarkdownfile | String | _(optional)_ Path to markdown file where to insert/update **Used by** badge <br/> (must contain tags `<!-- gh-dependents-info-used-by-start -->
273
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`) |
271
+ | -b<br/> --badgemarkdownfile | String | _(optional)_ Path to markdown file where to insert/update **Used by** badge <br/> (must contain tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>) |
274
272
  | -s<br/> --sort | String | _(optional)_ Sort order: name (default) or stars |
275
273
  | -x<br/> --minstars | String | _(optional)_ If set, filters repositories to keep only those with more than X stars |
276
274
  | -m<br/> --markdownfile | String | _(optional)_ Output markdown file file |
@@ -293,7 +291,7 @@ Badge tags example (the tool replaces everything between the markers):
293
291
 
294
292
  ```markdown
295
293
  <!-- gh-dependents-info-used-by-start -->
296
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
294
+ [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=54&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
297
295
  ```
298
296
 
299
297
  _________________
@@ -307,8 +305,7 @@ _________________
307
305
 
308
306
  github-dependents-info --repo nvuillam/npm-groovy-lint --json
309
307
 
310
- - Insert/Update **Used by** markdown badge within an existing markdown file containing tags `<!-- gh-dependents-info-used-by-start -->
311
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`
308
+ - Insert/Update **Used by** markdown badge within an existing markdown file containing tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>
312
309
 
313
310
  github-dependents-info --repo nvuillam/npm-groovy-lint --badgemarkdownfile ./README.md
314
311
 
@@ -381,8 +378,7 @@ Create a file **.github/workflows/github-dependents-info.yml** in your repositor
381
378
 
382
379
  If will generate a new Pull Request (or replace the pending one) every time the usage stats will have changed :)
383
380
 
384
- Don't forget to add tags `<!-- gh-dependents-info-used-by-start -->
385
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->` in your **README.md**, at the end of another badge line if you want github-dependents-info to replace its content automatically.
381
+ Don't forget to add tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code> in your **README.md**, at the end of another badge line if you want github-dependents-info to replace its content automatically.
386
382
 
387
383
  ```yaml
388
384
  # GitHub Dependents Info workflow
@@ -433,6 +429,9 @@ jobs:
433
429
  # badgemarkdownfile: README.md
434
430
  # sort: stars
435
431
  # minstars: "0"
432
+ # pagination: "true" # set to "false" to write a single markdown file
433
+ # page-size: "500" # number of repositories per markdown page
434
+ # max-scraped-pages: "0" # max pages to scrape per package (0 = no limit)
436
435
  # llm-summary: "true" # set to "false" to disable AI usage summary
437
436
  # llm-model: "" # optional: override LiteLLM model (example: gpt-4o-mini, gemini-3-flash-preview)
438
437
  # llm-max-repos: "500" # optional: cap repos sent to the summary prompt
@@ -469,6 +468,37 @@ jobs:
469
468
  STEPS_CPR_OUTPUTS_PULL_REQUEST_URL: ${{ steps.cpr.outputs.pull-request-url }}
470
469
  ```
471
470
 
471
+ ### GitHub Action inputs
472
+
473
+ Action inputs are named after the CLI options, without the leading `--`. Boolean CLI flags such as `--no-pagination` become inputs with a `"true"` / `"false"` value.
474
+
475
+ | Input | Description | CLI equivalent | Default |
476
+ |----------------------|--------------------------------------------------------------------------------|--------------------------------------|------------------------------------|
477
+ | `repo` | Owner and name of the repository (required) | `--repo` | _(required)_ |
478
+ | `outputrepo` | Owner and name of the output repository, if different from `repo` | `--outputrepo` | `""` |
479
+ | `markdownfile` | Path of the output markdown file | `--markdownfile` | `"docs/github-dependents-info.md"` |
480
+ | `badgemarkdownfile` | File where badges are replaced (between the `gh-dependents-info-used-by` tags) | `--badgemarkdownfile` | `"README.md"` |
481
+ | `docurl` | Custom URL for the badges hyperlink | `--docurl` | `""` |
482
+ | `markdownbadgecolor` | Color of the generated badges | `--markdownbadgecolor` | `"informational"` |
483
+ | `sort` | Sort criteria: `stars` or `name` | `--sort` | `"stars"` |
484
+ | `minstars` | Minimum number of stars to appear in the results | `--minstars` | `"0"` |
485
+ | `timedelay` | Delay in seconds between GitHub requests | `--timedelay` | `"0.1"` |
486
+ | `csvdirectory` | Directory where CSV progress files are written | `--csvdirectory` | `""` |
487
+ | `mergepackages` | `true` to merge multiple packages into a single result | `--mergepackages` | `"false"` |
488
+ | `json` | `true` to emit JSON output | `--json` | `"false"` |
489
+ | `verbose` | `true` to enable verbose logging | `--verbose` | `"false"` |
490
+ | `overwrite` | `true` to overwrite existing CSV progress files | `--overwrite` | `"false"` |
491
+ | `owner` | Filter dependent repositories by owner | `--owner` | `""` |
492
+ | `max-scraped-pages` | Max pages to scrape per package (`0` = no limit) | `--max-scraped-pages` | `"0"` |
493
+ | `pagination` | `false` to write a single markdown file instead of multiple pages | `--pagination` / `--no-pagination` | `"true"` |
494
+ | `no-pagination` | `true` to disable pagination (same as `pagination: "false"`) | `--no-pagination` | `"false"` |
495
+ | `page-size` | Number of repositories per markdown page when pagination is enabled | `--page-size` | `"500"` |
496
+ | `llm-summary` | `false` to disable the AI usage summary | `--llm-summary` / `--no-llm-summary` | `"true"` |
497
+ | `llm-model` | LiteLLM model for the AI usage summary | `--llm-model` | `""` |
498
+ | `llm-max-repos` | Max dependent repos included in the summary prompt | `--llm-max-repos` | `"500"` |
499
+ | `llm-max-words` | Max words for the generated summary | `--llm-max-words` | `"250"` |
500
+ | `llm-timeout` | Timeout (seconds) for the summary LLM call | `--llm-timeout` | `"120"` |
501
+
472
502
  _________________
473
503
  ## 🛡 License
474
504
 
{github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/README.md RENAMED
@@ -10,7 +10,7 @@
10
10
  [![Dependencies Status](https://img.shields.io/badge/dependencies-up%20to%20date-brightgreen.svg)](https://github.com/nvuillam/github-dependents-info/pulls?utf8=%E2%9C%93&q=is%3Apr%20author%3Aapp%2Fdependabot)
11
11
 
12
12
  [![GitHub contributors](https://img.shields.io/github/contributors/nvuillam/github-dependents-info.svg)](https://github.com/nvuillam/github-dependents-info/graphs/contributors/)<!-- gh-dependents-info-used-by-start -->
13
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
13
+ [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=54&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
14
14
  [![GitHub Sponsors](https://img.shields.io/github/sponsors/nvuillam)](https://github.com/sponsors/nvuillam)
15
15
  [![MegaLinter](https://github.com/nvuillam/github-dependents-info/actions/workflows/mega-linter.yml/badge.svg)](https://github.com/nvuillam/github-dependents-info/actions/workflows/mega-linter.yml)
16
16
  [![License](https://img.shields.io/github/license/nvuillam/github-dependents-info)](https://github.com/nvuillam/github-dependents-info/blob/master/LICENSE)
@@ -35,8 +35,7 @@ This package uses GitHub HTML to collect dependents information and can:
35
35
  - Generate summary markdown file
36
36
  - Optionally add an AI-generated usage summary (via `litellm`) when an LLM API key is present
37
37
  - Update existing markdown by inserting **Used by** badge within tags
38
- - `<!-- gh-dependents-info-used-by-start -->
39
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`
38
+ - <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>
40
39
  - Handle multiple repositories packages
41
40
  - Filter results using minimum stars or by repository owner
42
41
  - Keep huge ecosystems manageable with pagination controls (`--max-scraped-pages`, `--pagination/--no-pagination`, `--page-size`)
@@ -241,8 +240,7 @@ _________________
241
240
  | Parameter | Type | Description |
242
241
  |-----------|--------|----------------------------------------------|
243
242
  | --repo | String | Repository. Example: `oxsecurity/megalinter` |
244
- | -b<br/> --badgemarkdownfile | String | _(optional)_ Path to markdown file where to insert/update **Used by** badge <br/> (must contain tags `<!-- gh-dependents-info-used-by-start -->
245
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`) |
243
+ | -b<br/> --badgemarkdownfile | String | _(optional)_ Path to markdown file where to insert/update **Used by** badge <br/> (must contain tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>) |
246
244
  | -s<br/> --sort | String | _(optional)_ Sort order: name (default) or stars |
247
245
  | -x<br/> --minstars | String | _(optional)_ If set, filters repositories to keep only those with more than X stars |
248
246
  | -m<br/> --markdownfile | String | _(optional)_ Output markdown file file |
@@ -265,7 +263,7 @@ Badge tags example (the tool replaces everything between the markers):
265
263
 
266
264
  ```markdown
267
265
  <!-- gh-dependents-info-used-by-start -->
268
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
266
+ [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=54&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->
269
267
  ```
270
268
 
271
269
  _________________
@@ -279,8 +277,7 @@ _________________
279
277
 
280
278
  github-dependents-info --repo nvuillam/npm-groovy-lint --json
281
279
 
282
- - Insert/Update **Used by** markdown badge within an existing markdown file containing tags `<!-- gh-dependents-info-used-by-start -->
283
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->`
280
+ - Insert/Update **Used by** markdown badge within an existing markdown file containing tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code>
284
281
 
285
282
  github-dependents-info --repo nvuillam/npm-groovy-lint --badgemarkdownfile ./README.md
286
283
 
@@ -353,8 +350,7 @@ Create a file **.github/workflows/github-dependents-info.yml** in your repositor
353
350
 
354
351
  If will generate a new Pull Request (or replace the pending one) every time the usage stats will have changed :)
355
352
 
356
- Don't forget to add tags `<!-- gh-dependents-info-used-by-start -->
357
- [![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=51&color=informational&logo=slickpic)](https://github.com/nvuillam/github-dependents-info/blob/main/docs/github-dependents-info.md)<!-- gh-dependents-info-used-by-end -->` in your **README.md**, at the end of another badge line if you want github-dependents-info to replace its content automatically.
353
+ Don't forget to add tags <code>&lt;!-- gh-dependents-info-used-by-start --&gt;</code> and <code>&lt;!-- gh-dependents-info-used-by-end --&gt;</code> in your **README.md**, at the end of another badge line if you want github-dependents-info to replace its content automatically.
358
354
 
359
355
  ```yaml
360
356
  # GitHub Dependents Info workflow
@@ -405,6 +401,9 @@ jobs:
405
401
  # badgemarkdownfile: README.md
406
402
  # sort: stars
407
403
  # minstars: "0"
404
+ # pagination: "true" # set to "false" to write a single markdown file
405
+ # page-size: "500" # number of repositories per markdown page
406
+ # max-scraped-pages: "0" # max pages to scrape per package (0 = no limit)
408
407
  # llm-summary: "true" # set to "false" to disable AI usage summary
409
408
  # llm-model: "" # optional: override LiteLLM model (example: gpt-4o-mini, gemini-3-flash-preview)
410
409
  # llm-max-repos: "500" # optional: cap repos sent to the summary prompt
@@ -441,6 +440,37 @@ jobs:
441
440
  STEPS_CPR_OUTPUTS_PULL_REQUEST_URL: ${{ steps.cpr.outputs.pull-request-url }}
442
441
  ```
443
442
 
443
+ ### GitHub Action inputs
444
+
445
+ Action inputs are named after the CLI options, without the leading `--`. Boolean CLI flags such as `--no-pagination` become inputs with a `"true"` / `"false"` value.
446
+
447
+ | Input | Description | CLI equivalent | Default |
448
+ |----------------------|--------------------------------------------------------------------------------|--------------------------------------|------------------------------------|
449
+ | `repo` | Owner and name of the repository (required) | `--repo` | _(required)_ |
450
+ | `outputrepo` | Owner and name of the output repository, if different from `repo` | `--outputrepo` | `""` |
451
+ | `markdownfile` | Path of the output markdown file | `--markdownfile` | `"docs/github-dependents-info.md"` |
452
+ | `badgemarkdownfile` | File where badges are replaced (between the `gh-dependents-info-used-by` tags) | `--badgemarkdownfile` | `"README.md"` |
453
+ | `docurl` | Custom URL for the badges hyperlink | `--docurl` | `""` |
454
+ | `markdownbadgecolor` | Color of the generated badges | `--markdownbadgecolor` | `"informational"` |
455
+ | `sort` | Sort criteria: `stars` or `name` | `--sort` | `"stars"` |
456
+ | `minstars` | Minimum number of stars to appear in the results | `--minstars` | `"0"` |
457
+ | `timedelay` | Delay in seconds between GitHub requests | `--timedelay` | `"0.1"` |
458
+ | `csvdirectory` | Directory where CSV progress files are written | `--csvdirectory` | `""` |
459
+ | `mergepackages` | `true` to merge multiple packages into a single result | `--mergepackages` | `"false"` |
460
+ | `json` | `true` to emit JSON output | `--json` | `"false"` |
461
+ | `verbose` | `true` to enable verbose logging | `--verbose` | `"false"` |
462
+ | `overwrite` | `true` to overwrite existing CSV progress files | `--overwrite` | `"false"` |
463
+ | `owner` | Filter dependent repositories by owner | `--owner` | `""` |
464
+ | `max-scraped-pages` | Max pages to scrape per package (`0` = no limit) | `--max-scraped-pages` | `"0"` |
465
+ | `pagination` | `false` to write a single markdown file instead of multiple pages | `--pagination` / `--no-pagination` | `"true"` |
466
+ | `no-pagination` | `true` to disable pagination (same as `pagination: "false"`) | `--no-pagination` | `"false"` |
467
+ | `page-size` | Number of repositories per markdown page when pagination is enabled | `--page-size` | `"500"` |
468
+ | `llm-summary` | `false` to disable the AI usage summary | `--llm-summary` / `--no-llm-summary` | `"true"` |
469
+ | `llm-model` | LiteLLM model for the AI usage summary | `--llm-model` | `""` |
470
+ | `llm-max-repos` | Max dependent repos included in the summary prompt | `--llm-max-repos` | `"500"` |
471
+ | `llm-max-words` | Max words for the generated summary | `--llm-max-words` | `"250"` |
472
+ | `llm-timeout` | Timeout (seconds) for the summary LLM call | `--llm-timeout` | `"120"` |
473
+
444
474
  _________________
445
475
  ## 🛡 License
446
476
 
{github_dependents_info-4.0.0 → github_dependents_info-4.1.0}/pyproject.toml RENAMED
@@ -5,7 +5,7 @@ build-backend = "poetry.core.masonry.api"
5
5
 
6
6
  [project]
7
7
  name = "github-dependents-info"
8
- version = "4.0.0"
8
+ version = "4.1.0"
9
9
  description = "Collect information about dependencies between a github repo and other repositories. Results available in JSON, markdown and badges."
10
10
  readme = "README.md"
11
11
  license = "MIT"
@@ -43,9 +43,9 @@ click = ">=8.5,<8.6"
43
43
  typer = ">=0.27.1,<0.28"
44
44
  rich = ">=15,<15.1"
45
45
  beautifulsoup4 = "4.15.0"
46
- pandas = ">=3.0.5,<3.1"
46
+ pandas = ">=3.1,<3.2"
47
47
  httpx = "^0.28.1"
48
- idna = ">=3.14"
48
+ idna = ">=3.20"
49
49
  soupsieve = ">=2.8.4" # security floor (CVE-2026-49476, CVE-2026-49477), pulled by beautifulsoup4
50
50
 
51
51
  [tool.poetry.group.dev.dependencies]
@@ -60,17 +60,17 @@ pydocstyle = "^6.3.0"
60
60
  pylint = "^4.0.0"
61
61
  pytest = "^9.1.1"
62
62
  pyupgrade = "^3.4.0"
63
- coverage = "^7.3.4"
63
+ coverage = "^7.16.1"
64
64
  anybadge = "^1.16.0" # replaces coverage-badge, which imports pkg_resources (removed in setuptools 82)
65
65
  cryptography = ">=50.0.0"
66
66
  pytest-html = "^4.1.1"
67
67
  pytest-cov = "^7.0.0"
68
68
  marshmallow = ">=4.3.1,<4.4"
69
- authlib = ">=1.7.0"
69
+ authlib = ">=1.8.0"
70
70
  requests = ">=2.34.2"
71
- urllib3 = ">=2.6.3"
72
- filelock = ">=3.20.4"
73
- virtualenv = ">=21.3.0"
71
+ urllib3 = ">=2.8.0"
72
+ filelock = ">=4.0.1"
73
+ virtualenv = ">=21.9.0"
74
74
  nltk = ">=3.10.0"
75
75
  setuptools = ">=83.0.0"
76
76