[dependabot]

Bumps cyclopts from 5.1.1 to 5.4.0.

Release notes

Sourced from cyclopts's releases.

v5.4.0

Features

• App.argfile_prefix reads CLI arguments from files, like argparse's fromfile_prefix_chars. With App(argfile_prefix="@"), a token like @run.args is replaced by the file's lines (one argument per line), and files may reference other files. @​yash-bitla #1043

Bug Fixes

Meta Apps & Combined Short Flags

• An unknown combined short flag is reported whole instead of blaming a meta-app option. #1040
• A meta option inside a combined short token takes all of its values. #1042
• Combined short flags with an = value (e.g. -vn=bob) no longer misbind in meta apps. #1041

Other

• An app run with python -m mypkg is named after the module in help and usage-strings, matching argparse. @​Rahul-cs50 #1053
• Pydantic URL types (HttpUrl, AnyUrl, ...) and other custom-schema types are parsed as a single value instead of recursing forever. #1048
• A CoercionError raised by convert() (e.g. inside a custom converter) can be printed instead of raising AssertionError. @​gal-a #1047
• Shell-completion generation skips Parameter(parse=False) arguments, so an injected dependency whose type is only imported under TYPE_CHECKING no longer raises NameError. @​damvolkov #1045

Maintenance

• The release workflow uses pypi-publish v1.14.3 (addresses a compromised Sigstore CA), and Dependabot now keeps GitHub Actions up to date. #1054
• Dependency and GitHub Actions bumps. #1049, #1050, #1051, #1055, #1056, #1057, #1058

New Contributors

• @​gal-a made their first contribution in #1047
• @​damvolkov made their first contribution in #1045

Full Changelog: BrianPugh/cyclopts@v5.3.3...v5.4.0

v5.3.3

Bug Fixes

• convert NewType nested inside containers and unions to its underlying type by @​Enesuygurs in BrianPugh/cyclopts#1036
• show choices for an enum NewType nested in a container or union by @​BrianPugh in BrianPugh/cyclopts#1038
• complete default-command positionals alongside subcommands in bash/zsh/fish by @​BrianPugh in BrianPugh/cyclopts#1037

New Contributors

• @​Enesuygurs made their first contribution in BrianPugh/cyclopts#1036

Full Changelog: BrianPugh/cyclopts@v5.3.2...v5.3.3

v5.3.2

Bug Fixes

• Fix enum members in a Literal (including Parameter(choices=Literal[...])) being shown as Color.RED in help, completion and errors instead of the name that parses (red) by @​youdie006 in BrianPugh/cyclopts#1033

New Contributors

• @​youdie006 made their first contribution in BrianPugh/cyclopts#1033

Full Changelog: BrianPugh/cyclopts@v5.3.1...v5.3.2

v5.3.1

Bug Fixes

• respect explicit delimiters for path environment values by @​Don-Yin in BrianPugh/cyclopts#1021

... (truncated)

Commits

• 1cfe669 Merge pull request #1057 from BrianPugh/dependabot/github_actions/codecov/cod...
• 0a695f1 Merge pull request #1056 from BrianPugh/dependabot/github_actions/actions/cac...
• 3715e24 Merge pull request #1055 from BrianPugh/dependabot/github_actions/actions/che...
• fb3d162 Merge pull request #1058 from BrianPugh/dependabot/github_actions/astral-sh/s...
• e9ad6d0 Merge pull request #1041 from BrianPugh/fix/meta-combined-short-equals
• c9b0452 chore(deps): bump astral-sh/setup-uv from 5 to 7
• 0f237cd chore(deps): bump codecov/codecov-action from 4 to 7
• 05c585d chore(deps): bump actions/cache from 4 to 6
• 77cfd18 chore(deps): bump actions/checkout from 4 to 7
• 76908fb Merge pull request #1054 from BrianPugh/ci/security-bumps
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)