Skip to content

Bump the python-dependencies group across 1 directory with 5 updates - #19

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b520bd98bd
Open

Bump the python-dependencies group across 1 directory with 5 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b520bd98bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 5 updates in the / directory:

Package From To
nox 2026.4.10 2026.8.17
prek 0.4.5 0.4.14
ruff 0.15.20 0.16.4
mypy 2.1.0 2.3.1
ty 0.0.55 0.0.74

Updates nox from 2026.4.10 to 2026.8.17

Release notes

Sourced from nox's releases.

2026.08.17 🪟

This is a small follow-up release to better support running the parallel mode on legacy windows.

We'd like to thank the following folks who contributed to this release:

Fixes:

Internal changes:

2026.08.10 🔀

This release can run sessions in parallel with --parallel/-j (experimental for now, report any bugs!). Requires session opt-in, or use --allow-parallel. Interpreter discovery now uses the python-discovery package, which should be better at finding Python and supports version specifier sets. Using this, script mode reads requires-python. Many bugs were fixed, mostly in Python version handling, conda version specifiers, and option precedence. Unrecognized global options are now an error.

We'd like to thank the following folks who contributed to this release:

Features:

Fixes:

... (truncated)

Changelog

Sourced from nox's changelog.

Changelog

2026.08.17

This is a small follow-up release to better support running the parallel mode on legacy windows.

We'd like to thank the following folks who contributed to this release:

Fixes:

Internal changes:

2026.08.10

This release can run sessions in parallel with --parallel/-j (experimental for now, report any bugs!). Requires session opt-in, or use --allow-parallel. Interpreter discovery now uses the python-discovery package, which should be better at finding Python and supports version specifier sets. Using this, script mode reads requires-python. Many bugs were fixed, mostly in Python version handling, conda version specifiers, and option precedence. Unrecognized global options are now an error.

We'd like to thank the following folks who contributed to this release:

Features:

... (truncated)

Commits
  • a976d7e docs: prepare 2026.08.17 release notes (#1168)
  • ade83de chore: tighten mypy and pytest config (#1167)
  • c699c47 fix: support legacy encodings in parallel reporter (#1160)
  • f85d050 chore(deps): bump pre-commit hooks, hold pyproject-fmt at 2.26.0 (#1163)
  • 4b9d946 chore(deps): bump the github-actions group with 2 updates (#1162)
  • 57f9e10 docs: prepare 2026.08.10 release notes (#1156)
  • c7134d4 fix: isolate script mode from inherited PYTHONPATH (#1157)
  • aad0ea8 fix: require virtualenv 21+ on Python 3.15 (#1158)
  • 00c9566 fix: conda version constraints on Windows (#1146)
  • 1d6b258 fix: drop stale type ignores for argcomplete 3.7.2 (#1155)
  • Additional commits viewable in compare view

Updates prek from 0.4.5 to 0.4.14

Release notes

Sourced from prek's releases.

0.4.14

Release Notes

Released on 2026-08-17.

Enhancements

  • Support check-yaml unsafe mode (#2546)

Performance

  • Reuse allocations in common filters (#2548)

Bug fixes

  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)

Contributors

Install prek 0.4.14

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.14

File Platform Checksum
prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
prek-x86_64-apple-darwin.tar.gz Intel macOS checksum
prek-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.14

Released on 2026-08-17.

Enhancements

  • Support check-yaml unsafe mode (#2546)

Performance

  • Reuse allocations in common filters (#2548)

Bug fixes

  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)

Contributors

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

... (truncated)

Commits

Updates ruff from 0.15.20 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates mypy from 2.1.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits
  • d642c44 Bump version to 2.3.1
  • a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
  • 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
  • 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
  • 6dfa06d Fix crash when unpacking return value from overload (#21830)
  • a385746 Bump version to 2.3.1+dev
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • Additional commits viewable in compare view

Updates ty from 0.0.55 to 0.0.74

Release notes

Sourced from ty's releases.

0.0.74

Release Notes

Released on 2026-08-22.

Bug fixes

  • Avoid duplicate bindings in multi-target assignments (#27938)
  • Avoid panic on unpacked kwargs in string annotations (#27963)
  • Fix stack overflow in recursive TypedDict dictionary compatibility (#27951)
  • Handle assignment expressions in string annotations (#27921)
  • Handle dynamic classes in string annotations (#27883)
  • Preserve string annotation context in lambda defaults and TypedDict types (#27914)
  • Skip invalid subscript arguments in string annotations (#27917)
  • Skip invalid subscript operands in string annotations (#27882)

LSP server

  • Add untrustedWorkspace option to the LSP (#27828)
  • Add executable discovery to the server command (#27806)
  • Handle file-valued workspace folders from Zed (#27836)
  • Skip scripts with an invalid PEP 723 configuration (#27505)
  • Support pull diagnostics for notebook cells (#27778)

Documentation

  • Update mypy/pyright comparison table (#4165)

Diagnostics

  • Add an opt-in unsound-assignment rule for variables (#27874)
  • Fix variadic signature display (#27869)
  • Highlight declarations in invalid-assignment diagnostics (#27872)
  • Improve LiteralString suggestions in string annotations (#27931)
  • Use invalid-type-form for non-generic class annotations (#27889)

Core type checking

  • Add bounded constraint solution projections (#27949)
  • Fix invariant gradual tuple materialization ranges (#27946)
  • Guard recursive constructor bindings by receiver (#27958)
  • Preserve all alternatives in bounded intersections (#27898)
  • Preserve keyword safety for unpacked callables (#27517)
  • Preserve source protocol members and classify finite aliases (#27772)
  • Preserve type-variable order when reloading constraints (#27904)
  • Propagate narrowing through statically known branches (#27752)
  • Recognize ABC metaclass methods on protocols (#27897)
  • Support __slots__ (#27730)

Performance

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.74

Released on 2026-08-22.

Bug fixes

  • Avoid duplicate bindings in multi-target assignments (#27938)
  • Avoid panic on unpacked kwargs in string annotations (#27963)
  • Fix stack overflow in recursive TypedDict dictionary compatibility (#27951)
  • Handle assignment expressions in string annotations (#27921)
  • Handle dynamic classes in string annotations (#27883)
  • Preserve string annotation context in lambda defaults and TypedDict types (#27914)
  • Skip invalid subscript arguments in string annotations (#27917)
  • Skip invalid subscript operands in string annotations (#27882)

LSP server

  • Add untrustedWorkspace option to the LSP (#27828)
  • Add executable discovery to the server command (#27806)
  • Handle file-valued workspace folders from Zed (#27836)
  • Skip scripts with an invalid PEP 723 configuration (#27505)
  • Support pull diagnostics for notebook cells (#27778)

Documentation

  • Update mypy/pyright comparison table (#4165)

Diagnostics

  • Add an opt-in unsound-assignment rule for variables (#27874)
  • Fix variadic signature display (#27869)
  • Highlight declarations in invalid-assignment diagnostics (#27872)
  • Improve LiteralString suggestions in string annotations (#27931)
  • Use invalid-type-form for non-generic class annotations (#27889)

Core type checking

  • Add bounded constraint solution projections (#27949)
  • Fix invariant gradual tuple materialization ranges (#27946)
  • Guard recursive constructor bindings by receiver (#27958)
  • Preserve all alternatives in bounded intersections (#27898)
  • Preserve keyword safety for unpacked callables (#27517)
  • Preserve source protocol members and classify finite aliases (#27772)
  • Preserve type-variable order when reloading constraints (#27904)
  • Propagate narrowing through statically known branches (#27752)
  • Recognize ABC metaclass methods on protocols (#27897)
  • Support __slots__ (#27730)

Performance

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from shenanigansd as a code owner August 1, 2026 20:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026
@dependabot
Bump the python-dependencies group across 1 directory with 5 updates
9e4643a 
Bumps the python-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nox](https://github.com/wntrblm/nox) | `2026.4.10` | `2026.8.17` |
| [prek](https://github.com/j178/prek) | `0.4.5` | `0.4.14` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.4` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.1` |
| [ty](https://github.com/astral-sh/ty) | `0.0.55` | `0.0.74` |



Updates `nox` from 2026.4.10 to 2026.8.17
- [Release notes](https://github.com/wntrblm/nox/releases)
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md)
- [Commits](wntrblm/nox@2026.04.10...2026.08.17)

Updates `prek` from 0.4.5 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.5...v0.4.14)

Updates `ruff` from 0.15.20 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.4)

Updates `mypy` from 2.1.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.1)

Updates `ty` from 0.0.55 to 0.0.74
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.55...0.0.74)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: nox
  dependency-version: 2026.7.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: prek
  dependency-version: 0.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the python-dependencies group with 5 updates Bump the python-dependencies group across 1 directory with 5 updates Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-b520bd98bd branch from 093c389 to 9e4643a Compare September 1, 2026 20:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@shenanigansd shenanigansd Awaiting requested review from shenanigansd shenanigansd is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants