Skip to content

GOATS-1208: Bump marshmallow from 3.26.1 to 3.26.2#543

Merged
miguelgomezgomez merged 2 commits intomainfrom
dependabot/uv/marshmallow-3.26.2
Mar 6, 2026
Merged

GOATS-1208: Bump marshmallow from 3.26.1 to 3.26.2#543
miguelgomezgomez merged 2 commits intomainfrom
dependabot/uv/marshmallow-3.26.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 19, 2026

Bumps marshmallow from 3.26.1 to 3.26.2.

Changelog

Sourced from marshmallow's changelog.

3.26.2 (2025-12-19)

Bug fixes:

  • :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.
Commits
  • 1407d51 Merge pull request #2878 from marshmallow-code/3.x-mypy-unreachable
  • b2292f5 Fix mypy errors
  • 8acd211 Merge pull request #2877 from marshmallow-code/3.x-delint
  • b4bcb4a [pre-commit.ci] auto fixes from pre-commit.com hooks
  • b78af7a Delint
  • 2c4451e Merge commit from fork
  • 86d101a Bump version and update changelog
  • 489a8d4 Only deep copy error message collections
  • 6d4a17d Add test coverage for error message modification
  • 0356a3f Merge error store messages without rebuilding collections
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 19, 2026
@miguelgomezgomez miguelgomezgomez force-pushed the dependabot/uv/marshmallow-3.26.2 branch from 731f25b to 02b4e76 Compare March 6, 2026 16:09
Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.26.1 to 3.26.2.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...3.26.2)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-version: 3.26.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.51%. Comparing base (3c89cb9) to head (b6e7c55).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #543   +/-   ##
=======================================
  Coverage   78.51%   78.51%           
=======================================
  Files         311      311           
  Lines       11840    11840           
  Branches      674      674           
=======================================
  Hits         9296     9296           
  Misses       2404     2404           
  Partials      140      140           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@miguelgomezgomez miguelgomezgomez changed the title Bump marshmallow from 3.26.1 to 3.26.2 GOATS-1208: Bump marshmallow from 3.26.1 to 3.26.2 Mar 6, 2026
@miguelgomezgomez miguelgomezgomez merged commit 08d28f8 into main Mar 6, 2026
4 checks passed
@miguelgomezgomez miguelgomezgomez deleted the dependabot/uv/marshmallow-3.26.2 branch March 6, 2026 17:43
miguelgomezgomez added a commit that referenced this pull request Mar 16, 2026
* Bump marshmallow from 3.26.1 to 3.26.2

Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.26.1 to 3.26.2.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...3.26.2)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-version: 3.26.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* GOATS-1208: Update pyproject.toml.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miguel Gómez <[email protected]>
miguelgomezgomez added a commit that referenced this pull request Mar 16, 2026
* Bump marshmallow from 3.26.1 to 3.26.2

Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.26.1 to 3.26.2.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...3.26.2)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-version: 3.26.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* GOATS-1208: Update pyproject.toml.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miguel Gómez <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant