build(deps): bump python-dotenv from 1.2.2 to 1.2.3 in /mauverse-api by dependabot[bot] · Pull Request #35 · decoder-dev/mauverse

dependabot · 2026-09-01T07:57:47Z

Bumps python-dotenv from 1.2.2 to 1.2.3.

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
f7b18d9 fix: round-trip backslashes through set_key (#680)
751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bring key university website sections into MAUverse: student and applicant guides, library/events shortcuts, international news, branch campuses, support forms, and privacy links in settings. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Add science and international guides, digital services hub, native events calendar from RSS, admission contacts/requisites, applicant and calendar news feeds, campus transport/panorama actions, and fix schedule room/teacher filter selection. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Suppress CA1822 on contacts RelayCommand handlers so Android Release builds with warnaserror, and add the 1.8.7 release record. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Strip toolchain ad-hoc signatures when packaging the unsigned IPA so ios-release-unsigned can complete under Xcode 26 device builds. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

The MAUI publish folder stays empty with CreatePackage=false; package the ios-arm64 .app instead and keep ad-hoc signature stripping for CI artifacts. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Restore MauverseIOS, replace the MAUI iPhone CI job with the XcodeGen/SwiftUI unsigned build, and align Android/iOS marketing versions to 1.12.0. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Release 1.12.0: portal parity + native SwiftUI iOS

Document the merged main commit, CI run, GitHub Release URL, and unsigned AAB/IPA SHA-256 values for the 1.12.0 engineering release. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: record v1.12.0 release artifacts

Add guides, digital hub, events calendar, applicant/calendar news filters, contacts/requisites, campus branches with route/panorama, settings university links, and exclusive schedule teacher/room chips. Bump iOS to 1.12.1 (30). Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Align the official campus link with Android and replace an unavailable symbol; bump in-app browser user agent to 1.12.1. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

iOS 1.12.1: portal parity with Android

Document the merged main commit, CI run, GitHub Release URL, and unsigned AAB/IPA SHA-256 values for the 1.12.1 iOS portal parity release. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: record v1.12.1 release artifacts

Point 1.12.0/1.12.1 docs at the rewritten main commit SHAs attributed to decoder-dev. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: update release SHAs after author rewrite

Decode   and related entities in RSS titles, and dial local Murmansk 6-digit PBX numbers as +7 8152 … with parenthetical codes as ;ext= extensions instead of concatenating digits. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Fix news   and Murmansk phone extensions (1.12.2)

PR #21 is on main; GitHub Actions is blocked by the account spending limit, so AAB/IPA checksums will be filled after a green CI run. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Suppress the analyzer the same way as university contacts so warnaserror Release CI can produce the 1.12.2 AAB. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Release 1.12.2: CA1822 fix + release record

Fill SHA-256 checksums and CI run URL for the published GitHub Release after green Android/iOS artifact builds. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

…cord-010d docs: record published v1.12.2 release artifacts

Android: fix StateContainer CanStateChange, news filter/error copy, HTML decode in news details, subgroup cancel path, teacher tap-to-search, schedule tab rename, friendlier login labels, certificate DOB, null guards. iOS: stop using Moodle group id as schedule UID, wire native certificate form, configurable API base URL, tab-switching quick actions, retry cards, ru date chips, softer jargon, phone/mailto contact fixes. Docs: UX_AUDIT_1.12.3 schemes + ANDROID_SIGNING engineering keystore flow. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

1.12.3: UX audit fixes (Android + iOS) + Android signing setup

Fill SHA-256 checksums and CI URL for GitHub Release v1.12.3. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

…cord-010d docs: record published v1.12.3 release artifacts

--- updated-dependencies: - dependency-name: CommunityToolkit.Maui dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major ...

--- updated-dependencies: - dependency-name: Microsoft.Maui.Controls dependency-version: 10.0.90 dependency-type: direct:production update-type: version-update:semver-patch ...

--- updated-dependencies: - dependency-name: SQLitePCLRaw.bundle_e_sqlite3 dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Bumps [babel](https://github.com/python-babel/babel) from 2.17.0 to 2.18.0. - [Release notes](https://github.com/python-babel/babel/releases) - [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst) - [Commits](python-babel/babel@v2.17.0...v2.18.0) --- updated-dependencies: - dependency-name: babel dependency-version: 2.18.0 dependency-type: direct:production update-type: version-update:semver-minor ...

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.139.0 to 0.141.1. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.141.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor ...

Bumps [pydantic-settings](https://github.com/pydantic/pydantic-settings) from 2.14.2 to 2.15.0. - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0) --- updated-dependencies: - dependency-name: pydantic-settings dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor ...

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.12.2 to 0.16.2. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.2...0.16.2) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.2 dependency-type: direct:development update-type: version-update:semver-minor ...

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.51.0 to 0.52.1. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.51.0...0.52.1) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.52.1 dependency-type: direct:production update-type: version-update:semver-minor ...

Point 1.12.0–1.12.4 release records at rewritten main commit SHAs attributed to decoder-dev after consolidating branches. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Replace cursor/ branch naming in audit notes and refresh 1.12.x release commit SHAs after rewriting authors to decoder-dev. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Add autocomplete hints when entering a study group in profile on Android (MAUI) and iOS, backed by /get_groups and cached schedule groups. Fix null-safe subgroup handling in profile/login flows and tighten get_subgroups API matching to exact group codes instead of broad LIKE. Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Prepare v1.12.5 unsigned Android/iOS release with group input hints, subgroup lookup fixes, and release record. Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Introduce shared layout metrics (22 pt horizontal inset, 12 pt grid gutter, 108 pt tab clearance) and apply them to Services and all tab root screens. Align Android service cards with iOS structure including subtitles and arrow-up-right affordance. Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

- Increase pageHorizontal 22→28 and pageTop 14→20 on iOS and Android - Unify all tab views to mauTabPageContent / LayoutMetrics constants - Standardize card padding, section spacing, and grid gutters - Add MaxContentWidth to Schedule/News; fix Profile width 620→760 - Bump v1.12.5 build to 36 Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

- iOS: unify Schedule title via pageTitle; Profile action row/divider alignment - iOS: match quick-access card min-height to Services grid; hide Profile nav bar - Android: fix DateButton edge inset, notification/news card padding and spacing - Android: unify filter chips, schedule list padding, profile grid gutters - Bump v1.12.5 build to 37 Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

decoder-dev added 30 commits August 2, 2026 17:56

Prepare 1.8.7 release candidate and fix Android CA1822

14f1550

Suppress CA1822 on contacts RelayCommand handlers so Android Release builds with warnaserror, and add the 1.8.7 release record. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Fix iOS CI unsigned packaging for ad-hoc signatures

3dbedb8

Strip toolchain ad-hoc signatures when packaging the unsigned IPA so ios-release-unsigned can complete under Xcode 26 device builds. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Fix iOS CI packaging to locate RID .app bundle

50b7d27

The MAUI publish folder stays empty with CreatePackage=false; package the ios-arm64 .app instead and keep ad-hoc signature stripping for CI artifacts. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Ship native SwiftUI iOS client for 1.12.0 release

a4b5f66

Restore MauverseIOS, replace the MAUI iPhone CI job with the XcodeGen/SwiftUI unsigned build, and align Android/iOS marketing versions to 1.12.0. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Release 1.12.0: portal parity + native SwiftUI iOS (#16)

132d1e5

Release 1.12.0: portal parity + native SwiftUI iOS

Record published v1.12.0 release commit and artifact checksums

e824c8e

Document the merged main commit, CI run, GitHub Release URL, and unsigned AAB/IPA SHA-256 values for the 1.12.0 engineering release. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: record v1.12.0 release artifacts (#17)

3e8ad8e

docs: record v1.12.0 release artifacts

Fix campus navigator URL and SF Symbol for iOS portal guides

5962d41

Align the official campus link with Android and replace an unavailable symbol; bump in-app browser user agent to 1.12.1. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Bump in-app browser user agent to MAUverse 1.12.1

440da30

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

iOS 1.12.1: portal parity with Android (#18)

fae343f

iOS 1.12.1: portal parity with Android

Record published v1.12.1 release commit and artifact checksums

f8e9a12

Document the merged main commit, CI run, GitHub Release URL, and unsigned AAB/IPA SHA-256 values for the 1.12.1 iOS portal parity release. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: record v1.12.1 release artifacts (#19)

f2c463b

docs: record v1.12.1 release artifacts

Update release records after author history rewrite

d9a1068

Point 1.12.0/1.12.1 docs at the rewritten main commit SHAs attributed to decoder-dev. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: update release SHAs after author rewrite (#20)

85f26b4

docs: update release SHAs after author rewrite

ci: retrigger checks for release 1.12.2

fa3df88

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Merge pull request #21 from decoder-dev/decoder-dev/fix-news-phone-010d

246222f

Fix news   and Murmansk phone extensions (1.12.2)

docs: add 1.12.2 release record (artifacts pending CI)

107e006

PR #21 is on main; GitHub Actions is blocked by the account spending limit, so AAB/IPA checksums will be filled after a green CI run. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

ci: trigger 1.12.2 release artifact build

698ae07

Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

fix Android CA1822 on department CallAsync for Release build

5bb6025

Suppress the analyzer the same way as university contacts so warnaserror Release CI can produce the 1.12.2 AAB. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Merge pull request #22 from decoder-dev/decoder-dev/release-1.12.2-010d

50e1909

Release 1.12.2: CA1822 fix + release record

docs: record published v1.12.2 release artifacts

c5a4012

Fill SHA-256 checksums and CI run URL for the published GitHub Release after green Android/iOS artifact builds. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Merge pull request #23 from decoder-dev/decoder-dev/release-1.12.2-re…

fe82dd1

…cord-010d docs: record published v1.12.2 release artifacts

Merge pull request #24 from decoder-dev/decoder-dev/ux-audit-fixes-010d

40ac91b

1.12.3: UX audit fixes (Android + iOS) + Android signing setup

docs: record published v1.12.3 release artifacts

f058039

Fill SHA-256 checksums and CI URL for GitHub Release v1.12.3. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

Merge pull request #25 from decoder-dev/decoder-dev/release-1.12.3-re…

b2390f2

…cord-010d docs: record published v1.12.3 release artifacts

decoder-dev and others added 24 commits August 26, 2026 10:53

Bump CommunityToolkit.Maui from 14.2.2 to 15.0.0

8dc0280

--- updated-dependencies: - dependency-name: CommunityToolkit.Maui dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major ...

Bump Microsoft.Maui.Controls from 10.0.80 to 10.0.90

0b185b5

--- updated-dependencies: - dependency-name: Microsoft.Maui.Controls dependency-version: 10.0.90 dependency-type: direct:production update-type: version-update:semver-patch ...

docs: update release SHAs after author rewrite

ee5fa81

Point 1.12.0–1.12.4 release records at rewritten main commit SHAs attributed to decoder-dev after consolidating branches. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

docs: rename Cursor refs to decoder-dev

84a336b

Replace cursor/ branch naming in audit notes and refresh 1.12.x release commit SHAs after rewriting authors to decoder-dev. Co-authored-by: decoder-dev <decoder-dev@users.noreply.github.com>

release: bump to 1.12.5 and fix CI ruff import

17f6f98

Prepare v1.12.5 unsigned Android/iOS release with group input hints, subgroup lookup fixes, and release record. Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

docs: record published v1.12.5 release artifacts

3b2b094

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

docs: mark v1.12.5 GitHub release published

41577b1

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

fix(android): use Thickness static for service section margin

90d66f1

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

fix(android): add SectionBlockMargin thickness helper

62c7a63

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

chore(release): bump v1.12.5 build to 35 for layout spacing rerecord

097505f

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

docs: record v1.12.5 rerecord artifacts (build 35, layout spacing)

bb164ec

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

docs: record v1.12.5 build 36 with 28pt tab margins

28772b0

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

docs: record v1.12.5 build 37 visual bug fixes

00de96c

Co-authored-by: D3C0Y <decoder-dev@users.noreply.github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 1, 2026

cursor Bot force-pushed the main branch from 77fd902 to 0139279 Compare September 1, 2026 08:35

cursor Bot deleted the dependabot/pip/mauverse-api/python-dotenv-1.2.3 branch September 1, 2026 08:41

Navigation Menu

Repository navigation

build(deps): bump python-dotenv from 1.2.2 to 1.2.3 in /mauverse-api - #35

build(deps): bump python-dotenv from 1.2.2 to 1.2.3 in /mauverse-api#35
dependabot[bot] wants to merge 66 commits into
mainfrom
dependabot/pip/mauverse-api/python-dotenv-1.2.3

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.3

Fixed

[1.2.3] - 2026-08-16

Fixed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading