Skip to content

🌱 Bump soupsieve from 2.10 to 3.0.3 - #3067

Merged
openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/pip/soupsieve-3.0.3
Oct 26, 2026
Merged

openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/pip/soupsieve-3.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps soupsieve from 2.10 to 3.0.3.

Release notes

Sourced from soupsieve's releases.

3.0.3

  • FIX: When matching with >, the BeautifulSoup object should not count as a parent.
  • FIX: Fix case where relative sibling matching under :has(~) would incorrectly match a sibling that came before the target element.

3.0.2

  • FIX: Python versions less than 3.11.5 have broken possessive quantifiers, so require at least 3.11.5 for Soup Sieve 3.0+. 3.0 and 3.0.1 will be yanked from PyPI to avoid having the 3.0 series installed on Python < 3.11.5 which will cause the library to be broken.

3.0.1

  • FIX: Fix regression related to [attribute!=value] where previously it would match if the attribute was not present and recent changes broke that. Essentially, [attribute!=value] should be the same as :not([attribute=value]).

3.0

  • BREAK: :has(), by default, now behaves according to CSS more strictly, disallowing complex selectors that use combinators and prevents nesting :has() within :has(). This gives a safer, more performant default for Soup Sieve. If in a safe environment, these restrictions can be lifted by passing the new NOSTRICT flag restoring behavior to before 3.0.
  • BREAK: Custom selectors must be provided in order. If one custom selector depends on another custom selector, the custom selector dependency must be defined first in the dictionary. This eliminates recursive processing of custom selectors. Users are encouraged to pre-compile custom selectors via my_selectors = soupsive.CustomSelectors({custm: selector, ...}).
  • NEW: Drop Python 3.10.
  • NEW: Aggressively use possessive quantifiers and atomic groups in CSS pattern parsing to reduce backtracking.
  • NEW: Eliminate recursion within the parser and the matcher.
  • NEW: Expose new parameter max_selectors that can be used to control the maximum allowed selectors in a given input.
  • FIX: A CSS escape that is a surrogate, or past the Unicode range, is U+FFFD. (#307)
Commits
  • 5c8304a Remove debug print statements
  • 07d5656 Fix relative sibling logic under :has(~) (#316)
  • 3012f6d BeautifulSoup object is not a parent (#315)
  • 99445a1 Python < 3.11.5 has broken possessive quantifiers, require >= 3.11.5 (#312)
  • b2cfcf4 Fix regression with inverse attribute matching (#310)
  • e39e4e7 Docs: Remove duplicate words
  • dbfa285 Aggressively reduce backtracking in CSS parsing regex logic (#300)
  • 2e46475 Treat a surrogate CSS escape as U+FFFD (#308)
  • 2523f48 Configure sponsor link
  • 20ebff2 Use custom theme from common location
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated an underlying component version. No user-facing changes are included in this release.

Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.10 to 3.0.3.
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.10...3.0.3)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 26, 2026
@openshift-ci
openshift-ci Bot requested review from fao89 and pedjak October 26, 2026 14:43
@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 9054267f-7e0b-47a6-8f0b-cc8fab454535
Commits

Reviewing files that changed from the base of the PR and between 5e8f274 and 6acee9d.

Files selected for processing: 1
  • requirements.txt

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 7 remain after this review.

Walkthrough

The pinned soupsieve dependency changes from version 2.10 to 3.0.3.

Changes: Dependency Pin

Layer / File(s) Summary
Update the soupsieve pin
requirements.txt
The pinned soupsieve version changes from 2.10 to 3.0.3.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: pedjak

Merge Risk: Minimal · up to 6acee

This is a documentation-tooling dependency bump, and the repository's configured Python runtimes satisfy the new Python 3.11.5 minimum. No concrete merge-blocking risk was found. Anyone building the docs locally with an older python3 would need to upgrade.

Pre-merge checks: Passed 4 · Inconclusive 1

Failed Failed checks: 1 inconclusive

Check name Status Explanation Resolution
Description check Inconclusive The description follows the template's main elements. It has a summary of the bump, release notes, and Dependabot context. It does not contain the template's '# Description' heading or the Reviewer Ch… Add the template's '# Description' section with a short summary and the motivation for the bump. Add the '## Reviewer Checklist' section. Mark each item as done or not applicable, for example by noting that no API documentation or test chan…
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title "Bump soupsieve from 2.10 to 3.0.3" with the 🌱 prefix states the main change: the direct dependency soupsieve is updated from 2.10 to 3.0.3. The changeset is a single-line update to…
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "Bump soupsieve from 2.10 to 3.0.3" with the 🌱 prefix states the main change: the direct dependency soupsieve is updated from 2.10 to 3.0.3. The changeset is a single-line update to requirements.txt, so the title matches it. The prefix follows the template's icon convention for other changes.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The description follows the template's main elements. It has a summary of the bump, release notes, and Dependabot context. It does not contain the template's '# Description' heading or the Reviewer Checklist. The author did not fill in a motivation beyond the automated dependency update, and the checklist items (API Go Documentation, unit tests, commit messages, linked issues) are absent. These items are not clearly applicable to a Dependabot version bump, but the template structure is not followed.

Resolution

Add the template's '# Description' section with a short summary and the motivation for the bump. Add the '## Reviewer Checklist' section. Mark each item as done or not applicable, for example by noting that no API documentation or test changes are needed for this dependency update. Confirm that the existing tests pass with soupsieve 3.0.3, because the release contains breaking changes to :has() and requires Python 3.11.5 or later.

Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@netlify

netlify Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for olmv1 ready!

Name Link
🔨 Latest commit 6acee9d
🔍 Latest deploy log https://app.netlify.com/projects/olmv1/deploys/6adf6720f97d564e2af7471a
😎 Deploy Preview https://deploy-preview-3067--olmv1.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Oct 26, 2026
@openshift-ci

openshift-ci Bot commented Oct 26, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: perdasilva, rashmigottipati

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Oct 26, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit a53c8d3 into main Oct 26, 2026
45 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/soupsieve-3.0.3 branch October 26, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Pull requests that update a dependency file lgtm Indicates that a PR is ready to be merged. python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants