[dependabot]

Bumps the python-dependencies group with 3 updates: pre-commit, pystac[validation] and pytest.

Updates pre-commit from 4.6.1 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

pre-commit v4.6.2

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

4.6.2 - 2026-08-10

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Commits

• 65bb884 v4.7.0
• 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
• 860d07d don't leak GIT_* env into npm install for language: node
• 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
• 9905e88 use contextlib.chdir
• 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
• 2be1701 remove triple-nested withs for 3.14 coverage
• 4c8d22a py311+
• c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
• f49e251 [pre-commit.ci] pre-commit autoupdate
• Additional commits viewable in compare view

Updates pystac[validation] from 1.8.4 to 1.15.2

Release notes

Sourced from pystac[validation]'s releases.

v1.15.2

1.15.2 (2026-07-27)

Bug Fixes

• circular imports for extensions (#1764) (c82570e)

v1.15.1

1.15.1 (2026-06-30)

Bug Fixes

• actually link pystac-core and pystac via release-please (207e38d)
• consolidate core and top-level package in release-please (#1760) (c6a9fbd)
• more release-please flailing (#1762) (bcf1062)
• remove invalid version specifier (#1756) (bc70651)

pystac-core-v1.15.0

No release notes provided.

v1.15.0

1.15.0 (2026-06-25)

Bug Fixes

• persist stac_io when reading items (#1745) (3df1cef)
• urllib3 raise on error status codes (#1739) (34352df)

Miscellaneous Chores

• manually set next versions (64fd083)

pystac-core-v1.15.0-rc.1

Second rc for pystac-core

v1.15.0-rc.1

What's Changed

• fix: dependent version for pystac-core by @​gadomski in stac-utils/pystac#1735

Full Changelog: stac-utils/pystac@pystac-ext-classification-v2.0.0-rc.0...v1.15.0-rc.1

pystac-core-v1.15.0-rc.0

The first pre-release for v1.15.0, which includes the extension package refactor: stac-utils/pystac#1650. See stac-utils/pystac#1725 for the release checklist.

v1.15.0-rc.0

... (truncated)

Changelog

Sourced from pystac[validation]'s changelog.

1.15.2 (2026-07-27)

Bug Fixes

• circular imports for extensions (#1764) (c82570e)

1.15.1 (2026-06-30)

Bug Fixes

• actually link pystac-core and pystac via release-please (207e38d)
• consolidate core and top-level package in release-please (#1760) (c6a9fbd)
• more release-please flailing (#1762) (bcf1062)
• remove invalid version specifier (#1756) (bc70651)

1.15.0 (2026-06-25)

Bug Fixes

• persist stac_io when reading items (#1745) (3df1cef)
• urllib3 raise on error status codes (#1739) (34352df)

Miscellaneous Chores

• manually set next versions (64fd083)

1.14.3 (2026-01-08)

Bug Fixes

• /vsi* paths are always absolute (#1625) (60eef08)
• doc string fixes (#1613) (61c3e14)
• typo nework --> network in test_summaries.py (#1624) (7a5e734)
• use broader iterable type (#1614) (b9422d8)
• use supertype parameter name (#1616) (0d2ec09)

1.14.2 (2025-12-17)

Bug Fixes

• Remove unused pystac.validation import (#1583)
• clone extra_fields for Item (#1601) (6ba7da1)
• make release-please two separate jobs (#1607) (bb6d289)
• Make extent not required for VerticalSpatialDimension (#1596)

... (truncated)

Commits

• af10871 chore(main): release 1.15.2 (#1775)
• 1f8d728 build(deps): bump actions/checkout in the actions-deps group (#1778)
• 70a6405 build(deps): bump setuptools from 82.0.1 to 83.0.0 (#1776)
• 6ec1e30 build(deps): bump soupsieve from 2.8.3 to 2.8.4 (#1766)
• 57b8d50 build(deps): bump mistune from 3.2.1 to 3.3.0 (#1767)
• c171db2 build(deps): bump jupyter-server from 2.18.0 to 2.20.0 (#1770)
• c82570e fix: circular imports for extensions (#1764)
• f0c30cc build(deps): bump cryptography from 46.0.7 to 48.0.1 (#1774)
• a448ffc build(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#1773)
• bb1d200 build(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#1771)
• Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions