Bump click from 8.4.1 to 8.4.2 by dependabot[bot] · Pull Request #238 · guibranco/progressbar

dependabot · 2026-06-29T11:53:34Z

Bumps click from 8.4.1 to 8.4.2.

Release notes

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508

Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509

A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507

echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534

echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533

Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578

{func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

Changelog

Sourced from click's changelog.

Version 8.4.2

Unreleased

Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508

Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509

A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507

echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534

echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533

Commits

b2e30a1 Release version 8.4.2
7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
bec5928 Fix package_name resolution when top-level module differs from distribution...
916883a Fix tests to not rely on -Wdefault option (#3591)
09195f6 Fix double-bracketing of choices in synopsis (#3578)
1557e26 Check for warning exception with idiomatic context manager
d9ff133 Static typing improvements in click.shell_completion (#3460)
762c97e Fix double-bracketing of choices in synopsis
8929d39 Convert changes to markdown. (#3559)
237be50 Move changes headings down a level.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [click](https://github.com/pallets/click) from 8.4.1 to 8.4.2. - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.1...8.4.2) --- updated-dependencies: - dependency-name: click dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-29T11:53:35Z

Labels

The following labels could not be found: dependencies, pip, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-06-29T11:53:37Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
progressbar	Ready	Preview, Comment	Jun 29, 2026 12:11pm

socket-security · 2026-06-29T11:53:50Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	click@8.4.1 ⏵ 8.4.2	⁺¹

View full report

socket-security · 2026-06-29T11:53:51Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Block		Embedded URLs or IPs: pypi `click` URLs: https://github.com/pallets/click/issues/%s, https://github.com/pallets/click/pull/%s, https://docs.python.org/3/, https://palletsprojects.com/donate, https://pypi.org/project/click/, https://github.com/pallets/click/, https://github.com/pallets/click/issues/, https://discord.gg/pallets, https://docs.python.org/3/library/textwrap.html#textwrap.TextWrapper, https://github.com/python/cpython/blob/main/Lib/textwrap.py, https://peps.python.org/pep-0661/, https://click.palletsprojects.com/en/stable/advanced/#callback-evaluation-order, https://docs.python.org/3/library/os.html#os.environ, https://en.wikipedia.org/wiki/ANSI_color, https://gist.github.com/XVilka/8346728, https://click.palletsprojects.com/, https://github.com/pallets/click/issues/3024#issuecomment-3146199461, https://github.com/pallets/click/pull/2811, https://github.com/pallets/click/issues/3136, https://github.com/pallets/click/issues/3145, https://github.com/pallets/click/issues/3458, https://github.com/pallets/click/pr/3199, https://github.com/pallets/click/issues/3121, https://github.com/pallets/click/issues/2745, https://github.com/pallets/click/pull/3224#issuecomment-3968643305, https://github.com/pallets/click/issues/2790, https://github.com/pallets/click/issues/3298, https://github.com/pallets/click/pull/3030#discussion_r2271571819, https://github.com/pallets/click/pull/3030#pullrequestreview-3106604795, https://github.com/pallets/click/pull/3030#pullrequestreview-3108471552, https://github.com/pallets/click/issues/3024#issuecomment-3146511356, https://github.com/pallets/click/issues/3024#issuecomment-3146480714, https://github.com/pallets/click/issues/2012#issuecomment-892437060, https://github.com/pallets/click/issues/3024#issuecomment-3146508536, https://github.com/pallets/click/issues/2012#issue-946471049, https://github.com/pallets/click/issues/2012, https://github.com/pallets/click/issues/2610, https://github.com/pallets/click/issues/3403, https://github.com/pallets/click/issues/3084, https://github.com/pallets/click/issues/1992, https://github.com/pallets/click/issues/2809, https://github.com/pallets/click/issues/2634, https://github.com/pallets/click/issues/2968, https://github.com/pallets/click/pull/2969, https://click.palletsprojects.com/en/stable/advanced/#command-aliases, https://click.palletsprojects.com/en/stable/options/#yes-parameters, https://click.palletsprojects.com/en/stable/quickstart/#adding-parameters, https://github.com/pallets/click#a-simple-example, https://click.palletsprojects.com/en/stable/options/#callbacks-and-eager-options Location: Package overview From: requirements.txt → `pypi/click@8.4.2` ℹ Read more on: This package \| This alert \| What are URL strings? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/click@8.4.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codacy-production · 2026-06-29T11:54:42Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

guibranco

Automatically approved by gstraccini[bot]

github-actions · 2026-06-29T12:11:27Z

Infisical secrets check: ✅ No secrets leaked!

💻 Scan logs

2026-06-29T12:11:24Z INF scanning for exposed secrets...
12:11PM INF 151 commits scanned.
2026-06-29T12:11:24Z INF scan completed in 24.9ms
2026-06-29T12:11:24Z INF no leaks found

sonarqubecloud · 2026-06-29T12:12:16Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot assigned guibranco Jun 29, 2026

github-actions Bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Jun 29, 2026

vercel Bot deployed to Preview June 29, 2026 11:53 View deployment

guibranco enabled auto-merge (squash) June 29, 2026 11:55

gstraccini Bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Jun 29, 2026

gstraccini Bot approved these changes Jun 29, 2026

View reviewed changes

gstraccini Bot added the 🤖 bot Automated processes or integrations label Jun 29, 2026

guibranco approved these changes Jun 29, 2026

View reviewed changes

Merge branch 'main' into dependabot/pip/click-8.4.2

3dece38

vercel Bot deployed to Preview June 29, 2026 12:02 View deployment

Merge branch 'main' into dependabot/pip/click-8.4.2

94dfa68

vercel Bot deployed to Preview June 29, 2026 12:11 View deployment

guibranco merged commit 7f18be5 into main Jun 29, 2026
17 of 19 checks passed

guibranco deleted the dependabot/pip/click-8.4.2 branch June 29, 2026 12:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump click from 8.4.1 to 8.4.2#238

Bump click from 8.4.1 to 8.4.2#238
guibranco merged 3 commits into
mainfrom
dependabot/pip/click-8.4.2

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

vercel Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Jun 29, 2026

Uh oh!

guibranco left a comment

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

8.4.2

Version 8.4.2

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Labels

Uh oh!

vercel Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codacy-production Bot commented Jun 29, 2026

Up to standards ✅

Uh oh!

guibranco left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Jun 29, 2026 •

edited

Loading

socket-security Bot commented Jun 29, 2026 •

edited

Loading

socket-security Bot commented Jun 29, 2026 •

edited

Loading