Skip to content

core: bump importlib-metadata from 8.6.1 to 8.7.1#19430

Merged
rissson merged 1 commit intomainfrom
dependabot/uv/importlib-metadata-8.7.1
Jan 14, 2026
Merged

core: bump importlib-metadata from 8.6.1 to 8.7.1#19430
rissson merged 1 commit intomainfrom
dependabot/uv/importlib-metadata-8.7.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 14, 2026

Bumps importlib-metadata from 8.6.1 to 8.7.1.

Changelog

Sourced from importlib-metadata's changelog.

v8.7.1

Bugfixes

  • Fixed errors in FastPath under fork-multiprocessing. (#520)
  • Removed cruft from Python 3.8. (#524)

v8.7.0

Features

  • .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

  • Raise consistent ValueError for invalid EntryPoint.value (#518)
Commits
  • 84e9028 Finalize
  • 36ed6f6 Merge pull request #521 from 2xB/fix520
  • f6eee56 Rely on passthrough to designate a wrapper for its side effect.
  • 3c9510b Prefer noop for degenerate behavior.
  • a36bab9 Avoid if block.
  • 8dd2937 Decouple clear_after_fork from lru_cache and then compose.
  • 1da3f45 Add news fragment.
  • a1c25d8 🧎‍♀️ Genuflect to the types.
  • 4e962a8 👹 Feed the hobgoblins (delint).
  • 6a30ab9 Allow initial currsize to be greater than one (as happens when running the te...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 8.6.1 to 8.7.1.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.6.1...v8.7.1)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-version: 8.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 14, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 14, 2026 15:21
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 14, 2026
@codecov
Copy link

codecov bot commented Jan 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.31%. Comparing base (8c217b5) to head (0f00d3f).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #19430      +/-   ##
==========================================
+ Coverage   93.12%   93.31%   +0.19%     
==========================================
  Files         949      949              
  Lines       52422    52422              
==========================================
+ Hits        48816    48916     +100     
+ Misses       3606     3506     -100     
Flag Coverage Δ
conformance 38.77% <ø> (+<0.01%) ⬆️
e2e 44.71% <ø> (+1.32%) ⬆️
integration 23.37% <ø> (-0.06%) ⬇️
unit 91.57% <ø> (+<0.01%) ⬆️
unit-migrate 91.61% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@netlify
Copy link

netlify bot commented Jan 14, 2026

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 0f00d3f
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/6967b473f7c2450008228132
😎 Deploy Preview https://deploy-preview-19430--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@rissson rissson enabled auto-merge (squash) January 14, 2026 15:53
@rissson rissson merged commit 5014dea into main Jan 14, 2026
101 checks passed
@rissson rissson deleted the dependabot/uv/importlib-metadata-8.7.1 branch January 14, 2026 15:59
kensternberg-authentik added a commit that referenced this pull request Jan 14, 2026
* main: (87 commits)
  core: bump importlib-metadata from 8.6.1 to 8.7.1 (#19430)
  core: bump geoip2 from 5.1.0 to 5.2.0 (#19429)
  core: bump debugpy from 1.8.14 to 1.8.19 (#19414)
  core: remove session migration (#14568)
  website/docs: add 2026.2 release notes draft page (#19418)
  core: bump wsproto from 1.2.0 to 1.3.2 (#19417)
  core: bump bpython from 0.25 to 0.26 (#19408)
  core: bump pdoc from 15.0.3 to 16.0.0 (#19413)
  core: bump ruff from 0.11.9 to 0.14.11 (#19410)
  core: bump python-kadmin-rs from 0.6.1 to 0.6.3 (#19416)
  core: bump drf-orjson-renderer from 1.7.3 to 1.8.0 (#19415)
  core: bump black from 25.1.0 to 25.12.0 (#19412)
  core: bump lxml from 6.0.0 to 6.0.2 (#19409)
  core: bump xmlsec from 1.3.16 to 1.3.17 (#19411)
  core: bump library/nginx from `06eb0c8` to `e3a22a7` in /website (#19394)
  core: bump library/node from `03729a7` to `6222695` in /website (#19393)
  website/docs: remove "beta" tag from 2025.12 (#19404)
  website/docs: add import to discord policy (#19397)
  web: bump @types/node from 25.0.7 to 25.0.8 in /web (#19392)
  website/docs: mention dynamic overrides in redirect stage documentation (#19368)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant