Skip to content

Bump the python-dependencies group with 7 updates - #1010

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/python-dependencies-e57e7d7bd0
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/python-dependencies-e57e7d7bd0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 7 updates:

Package From To
coverage 7.17.0 7.17.2
uv 0.13.6 0.13.7
filelock 4.2.6 4.2.9
mypy-extensions 1.1.0 1.2.0
platformdirs 4.14.3 4.14.5
python-discovery 1.9.0 1.9.4
virtualenv 21.15.2 21.15.5

Updates coverage from 7.17.0 to 7.17.2

Release notes

Sourced from coverage's releases.

7.17.2

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with “attempt to write a readonly database”. These were regressions in 7.17.1. They are fixed, closing issue 2356:
    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.
    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can’t read is now reported like any other unusable data file, and is left in place.

➡️  PyPI page: coverage 7.17.2. :arrow_right:  To install: python3 -m pip install coverage==7.17.2

7.17.1

Version 7.17.1 — 2026-11-03

  • Fix: a one-line class or function body immediately followed by another statement (such as class Foo: ... on its own line) was incorrectly reported as a missing branch when using the sys.monitoring core. This is now fixed, closing issue 2167 and issue 2337.
  • Fix: the HTML report only rewrites a file’s page when the file or its data has changed, but each page also links to the previous and next files. When the set of reported files changed, unchanged pages kept their old links. For example, with skip_covered, a file that became 100% covered had its page deleted, but the pages next to it still linked to it. Now a page is also rewritten when its neighbors change.
  • Fix: --fail-under now uses at least the decimal precision of the threshold for both the comparison and failure message. With precision=0, a total of 0.4 now passes --fail-under=0.3 and fails --fail-under=0.5 with the message “total of 0.4 is less than fail-under=0.5”. Previously, the comparison rounded the total to zero and the message could claim “1 is less than 0”. Closes issue 2295.
  • Fix: the HTML report escaped file names twice, so a name with &, <, or quotes in it was shown with entities like &amp;. Now they are properly escaped only once.
  • Fix: --source=/ measured no files. A file system root can’t be a source directory, so now it is an error. Closes issue 2291.
  • In an abundance of caution, prevent forged SQLite journal files from deleting files they shouldn’t.

➡️  PyPI page: coverage 7.17.1. :arrow_right:  To install: python3 -m pip install coverage==7.17.1

Changelog

Sourced from coverage's changelog.

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with "attempt to write a readonly database". These were regressions in 7.17.1. They are fixed, closing issue 2356_:

    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.

    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can't read is now reported like any other unusable data file, and is left in place.

.. _issue 2356: coveragepy/coveragepy#2356

.. _changes_7-17-1:

Version 7.17.1 — 2026-11-03

  • Fix: a one-line class or function body immediately followed by another statement (such as class Foo: ... on its own line) was incorrectly reported as a missing branch when using the sys.monitoring core. This is now fixed, closing issue 2167_ and issue 2337_.

  • Fix: the HTML report only rewrites a file's page when the file or its data has changed, but each page also links to the previous and next files. When the set of reported files changed, unchanged pages kept their old links. For example, with skip_covered, a file that became 100% covered had its page deleted, but the pages next to it still linked to it. Now a page is also rewritten when its neighbors change.

  • Fix: --fail-under now uses at least the decimal precision of the threshold for both the comparison and failure message. With precision=0, a total of 0.4 now passes --fail-under=0.3 and fails --fail-under=0.5 with the message "total of 0.4 is less than fail-under=0.5". Previously, the comparison rounded the total to zero and the message could claim "1 is less than 0". Closes issue 2295_.

  • Fix: the HTML report escaped file names twice, so a name with &, <, or quotes in it was shown with entities like &amp;. Now they are properly escaped only once.

  • Fix: --source=/ measured no files. A file system root can't be a source directory, so now it is an error. Closes issue 2291_.

... (truncated)

Commits
  • d0d3e1d docs: combine the two 'combine' failure descriptions
  • 33cb85f fix: don't initialize a data file we can only read (#2360)
  • 6e71bac docs: prep for 7.17.2
  • 8273f72 test: fix two tests that failed on the Rocky 8 old_sqlite job
  • ce216fd build: a test environment for old version of SQLite
  • 36e4a18 fix: combine failed on SQLite<3.34.0 #2356
  • d80ed19 build: bump version to 7.17.2
  • 1941ee1 docs: prep for 7.17.1
  • 474bba1 chore: make upgrade
  • 1ab58b3 chore: bump the action-dependencies group with 6 updates (#2355)
  • Additional commits viewable in compare view

Updates uv from 0.13.6 to 0.13.7

Release notes

Sourced from uv's releases.

0.13.7

Release Notes

Released on 2026-11-03.

Preview features

  • Add --output-version to uv workspace metadata for requesting a specific schema version (#22958)
  • Report aliased OSV records as a single vulnerability in uv audit (#22990)

Bug fixes

  • Treat workspace member paths added by uv init or uv add as literals instead of glob patterns (#23008)
  • Prevent uv's Windows trampolines from closing handles they did not inherit (#22977)
  • Allow uvx to run tools with CPython builds whose versions contain local identifiers (#23013)
  • Generate valid module names when uv init creates packaged projects whose names start with a digit (#23022)
  • Preserve comments around existing inline dependency groups when uv add updates a group (#23017)
  • Allow uv remove with an empty inline tool.uv.sources table (#23012)

Documentation

  • Correct the cache-keys inline table example (#22984)

Install uv 0.13.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.ps1 | iex"

Download uv 0.13.7

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.13.7

Released on 2026-11-03.

Preview features

  • Add --output-version to uv workspace metadata for requesting a specific schema version (#22958)
  • Report aliased OSV records as a single vulnerability in uv audit (#22990)

Bug fixes

  • Treat workspace member paths added by uv init or uv add as literals instead of glob patterns (#23008)
  • Prevent uv's Windows trampolines from closing handles they did not inherit (#22977)
  • Allow uvx to run tools with CPython builds whose versions contain local identifiers (#23013)
  • Generate valid module names when uv init creates packaged projects whose names start with a digit (#23022)
  • Preserve comments around existing inline dependency groups when uv add updates a group (#23017)
  • Allow uv remove with an empty inline tool.uv.sources table (#23012)

Documentation

  • Correct the cache-keys inline table example (#22984)
Commits

Updates filelock from 4.2.6 to 4.2.9

Release notes

Sourced from filelock's releases.

4.2.9

Bug fixes

  • ReadWriteLock, SoftReadWriteLock and their async wrappers now raise TypeError for a blocking that is not a bool, in the constructor and on acquire, as FileLock already does. Before, blocking=0 waited out the full timeout on a contended ReadWriteLock while blocking=False failed at once, and a truthy value such as "false" turned a single attempt into a blocking wait (#908) by @​abhishekcpp007 and @​gaborbernat.

New Contributors

🐍 PyPI release

📜 Full Changelog

4.2.8

Documentation

  • Clarify the platform-specific locking primitive and range used by descriptor locks, and correct the guidance on interoperating with byte-range lock protocols such as conda's repodata lock (#905) by @​boyfeiyu.

New Contributors

🐍 PyPI release

📜 Full Changelog

4.2.7

Bug fixes

  • A SoftFileLease reclaims a dead holder's lease marker even when that holder published another lease_duration. It used to raise LeaseSettingsMismatch on every attempt instead, so after a holder crashed and its peers restarted with a changed duration the lock stayed wedged until force_break(). A live holder with another duration still raises (#900) by @​dxbjavid and @​gaborbernat.

PyPI release

Full Changelog

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-2-9:


4.2.9 (2026-11-04)


.. _release-4-2-9-fixed:

Fixed

  • :class:~filelock.ReadWriteLock, :class:~filelock.SoftReadWriteLock and their async wrappers now raise :class:TypeError for a blocking that is not a :class:bool, in the constructor and on acquire, as :class:~filelock.FileLock already does. Before, blocking=0 waited out the full timeout on a contended :class:~filelock.ReadWriteLock while blocking=False failed at once, and a truthy value such as "false" turned a single attempt into a blocking wait (:pr:908) by :user:abhishekcpp007 and :user:gaborbernat.

.. _release-4-2-8:


4.2.8 (2026-11-04)


.. _release-4-2-8-documentation:

Documentation

  • Clarify the platform-specific locking primitive and range used by descriptor locks, and correct the guidance on interoperating with byte-range lock protocols such as conda's repodata lock (:pr:905) by :user:boyfeiyu.

.. _release-4-2-7:


4.2.7 (2026-11-02)


.. _release-4-2-7-fixed:

Fixed

... (truncated)

Commits
  • 8803429 release 4.2.9
  • 030c5e2 🐛 fix(rw): reject a non-bool blocking (#908)
  • 90760d8 release 4.2.8
  • 19af0ad 👷 ci: adopt shared check, CodeQL and release workflows (#907)
  • 2ac1e92 📝 docs(descriptor): clarify native lock protocol compatibility (#905)
  • 6223054 build(deps): refresh project lock (#906)
  • bee5ab3 🔧 build(deps): refresh CI and docs tools (#904)
  • 825f3b5 👷 ci(scorecard): publish OpenSSF results (#903)
  • e386afb 🔧 build(deps): use release-creator 4.4 (#902)
  • 4257ca7 👷 ci(news): stop cancelling the news check (#901)
  • Additional commits viewable in compare view

Updates mypy-extensions from 1.1.0 to 1.2.0

Commits
  • 35af63f Change version to 1.2.0 (drop -dev)
  • ef995d3 Add i8, u64, u32 and u16 native integer types (#78)
  • c03837c Drop support for Python 3.8 and 3.9, officially support 3.14 and 3.15 (#79)
  • a6221ad Permit building with flit core 4 (#76)
  • 9fc7fe0 Bump version for development (#62)
  • See full diff in compare view

Updates platformdirs from 4.14.3 to 4.14.5

Release notes

Sourced from platformdirs's releases.

4.14.5

Bug fixes

  • Resolve the temporary user_runtime_dir fallback to /runtime-<uid> instead of //runtime-<uid> when the temporary directory is / (#687) by @​darrenhuai and @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

4.14.4

🐍 PyPI release

📜 Full Changelog

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-14-5:


4.14.5 (2026-11-04)


.. _release-4-14-5-fixed:

Fixed

  • Resolve the temporary :func:~platformdirs.user_runtime_dir fallback to /runtime-<uid> instead of //runtime-<uid> when the temporary directory is / (:pr:687) by :user:darrenhuai and :user:gaborbernat.

.. _release-4-14-4:


4.14.4 (2026-11-04)


.. _release-4-14-3:


4.14.3 (2026-11-01)


.. _release-4-14-3-fixed:

Fixed

  • Preserve trailing whitespace in absolute XDG directory values instead of resolving a different directory (:pr:679) by :user:mikegit123git and :user:gaborbernat.

.. _release-4-14-2:


4.14.2 (2026-10-31)


.. _release-4-14-2-fixed:

... (truncated)

Commits
  • 6a7d284 release 4.14.5
  • c9ad21d 🐛 fix(unix): avoid // in the runtime fallback when the temp dir is / (#687)
  • cf51ebd release 4.14.4
  • 573a192 👷 ci: adopt shared workflows and dependency hygiene (#685)
  • 9008466 build(deps): refresh project lock (#684)
  • 246e9ad Bump the "dependencies" group with 2 updates across multiple ecosystems (#683)
  • d4064eb 👷 ci(scorecard): publish OpenSSF results (#682)
  • f9323b0 🔧 build(deps): use release-creator 4.4 (#681)
  • eb0cce8 👷 ci(news): stop cancelling the news check (#680)
  • See full diff in compare view

Updates python-discovery from 1.9.0 to 1.9.4

Release notes

Sourced from python-discovery's releases.

v1.9.4

🐍 PyPI release

📜 Full Changelog

v1.9.2

Bug fixes

  • Match literal interpreter names against the executable found on PATH, including symlink names (#220) by @​gaborbernat. (#188)
  • Preserve a virtual environment selected through try_first_with instead of returning its base interpreter (#218) by @​gaborbernat. (#191)
  • Skip interpreter candidates that return JSON without usable interpreter metadata and continue searching (#231) by @​gaborbernat. (#197)
  • Reject format widths in interpreter sysconfig paths before they allocate oversized strings (#229) by @​gaborbernat. (#199)
  • Check the interpreter's reported implementation when a spec names a known implementation, regardless of its filename on PATH (#233) by @​gaborbernat. (#201)
  • Write interpreter cache entries as compact JSON to keep their size proportional to the interpreter response (#237) by @​gaborbernat. (#204)
  • Prevent an earlier virtual-environment lookup from reporting an executable under the wrong Python version (#215) by @​gaborbernat.
  • Retry interpreter discovery without the cache when cache access fails (#216) by @​gaborbernat.
  • Exclude prereleases of the final version named by an exclusive upper bound, such as <3.12.0 rejecting 3.12.0rc1 (#217) by @​gaborbernat.
  • Stop repeated interpreter queries when a virtual environment reports the same base prefix with different path spellings (#219) by @​gaborbernat.
  • Limit candidate stdout and stderr during interpreter queries so a noisy candidate cannot exhaust the caller's memory (#223) by @​gaborbernat.
  • Find uv-managed patch releases when a version specifier names only their major and minor version (#227) by @​gaborbernat.
  • Handle interpreter paths containing non-UTF-8 filesystem bytes when using DiskCache (#230) by @​gaborbernat.
  • Preserve interpreter-provided values when answer keys match computed properties during cache serialization (#234) by @​gaborbernat.
  • Return after an interpreter query times out without leaving pipe readers blocked by a child process (#228) by @​gaborbernat.
  • Use the supplied environment for base-interpreter probes when resolving a virtual environment (#225) by @​gaborbernat.

Security

  • When an explicit env mapping omits HOME or USERPROFILE, uv-managed interpreter discovery no longer searches the process home directory (#236) by @​gaborbernat. (#200)
  • Skip relative PATH entries, including the working-directory entry in the Windows default search path, when discovering interpreters (#235) by @​gaborbernat. (#202)
  • Validate pyenv, mise and asdf version names before using them as directory names. A version file can no longer direct python-discovery's resolver to a binary outside the version manager's installation directory (#205) by @​gaborbernat.
  • When imported from an archive, python-discovery now extracts its interpreter probe into a private temporary directory. This prevents the probe from importing modules supplied in the shared temp directory (#206) by @​gaborbernat.
  • Bare interpreter names now search PATH without probing a matching file in the working directory. Use ./name when the working directory contains the intended interpreter (#207) by @​gaborbernat.
  • Tcl/Tk library detection no longer executes Tk startup profile files from the home or working directory (#208) by @​gaborbernat.
  • Discovery skips .python-version files over 4096 characters during shim resolution, limiting memory use and allowing a parent or global version to apply (#209) by @​gaborbernat.
  • Discovery uses the profile default for empty or relative APPDATA and skips relative profile paths when finding uv-managed Pythons (#210) by @​gaborbernat.
  • Tcl/Tk library detection no longer opens an X display, so an unresponsive display cannot block interpreter discovery. It can also find the Tk library on headless systems (#211) by @​gaborbernat.
  • Skip PEP 514 registry entries with relative or non-string executable paths and continue interpreter discovery (#212) by @​gaborbernat.
  • Skip untrusted disk cache directories and entries on POSIX, and replace cache files without following links (#213) by @​gaborbernat.
  • Place POSIX cache locks in a restricted directory and preserve group sharing under a group-permissive umask (#214) by @​gaborbernat.
  • Interpreter discovery no longer reuses pyenv shim results across projects. A version choice in one checkout cannot leave an unsupported-version verdict that blocks discovery in another project (#232) by @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

v1.9.1

... (truncated)

Changelog

Sourced from python-discovery's changelog.

################# Release History #################

.. towncrier-draft-entries::

.. towncrier release notes start

.. _release-1-9-5:


v1.9.5 (2026-11-06)


.. _release-1-9-5-fixed:

Fixed

  • :func:~python_discovery.iter_interpreters with no key no longer probes PATH directories or subdirectories named like Python executables as interpreters (:pr:247) by :user:qodelicious and :user:gaborbernat.
  • PythonSpec.satisfies now checks a version specifier at the precision it was written with, so 3.11 no longer satisfies >=3.13. The Windows registry pre-filter skips mismatched releases and interrogates candidates whose prerelease status is unknown (:pr:246) by :user:qodelicious and :user:gaborbernat.

.. _release-1-9-4:


v1.9.4 (2026-11-04)


.. _release-1-9-3:


v1.9.3 (2026-11-03)


.. _release-1-9-3-fixed:

Fixed

  • Reject generic Python executables when a requested implementation is unavailable (:pr:239) by :user:gaborbernat. (:issue:238)

.. _release-1-9-2:


v1.9.2 (2026-11-03)


... (truncated)

Commits
  • ef0c777 release 1.9.4
  • 97eea85 release 1.9.3
  • 674ca4e 🐛 fix(discovery): reject unrelated Python (#239)
  • 7188a23 release 1.9.2
  • e3f2e93 🐛 fix(query): reject malformed candidates (#231)
  • 8befe13 🐛 fix(py-info): reject sysconfig format widths (#229)
  • 8548640 🐛 fix(cache): hash filesystem path bytes (#230)
  • c943204 🐛 fix(cache): keep shim results out of shared cache (#232)
  • 000d2b5 🐛 fix(py_info): preserve supplied JSON keys (#234)
  • 2ab6e7a 🐛 fix(discovery): skip relative PATH entries (#235)
  • Additional commits viewable in compare view

Updates virtualenv from 21.15.2 to 21.15.5

Release notes

Sourced from virtualenv's releases.

21.15.5

🐍 PyPI release

📜 Full Changelog

21.15.4

Bug fixes

🐍 PyPI release

📜 Full Changelog

21.15.3

Bug fixes

  • Add the environment's lib/pkgconfig to PKG_CONFIG_PATH when activating from xonsh, and restore the previous value or unset it again on deactivate, as the other activators already do (#3505) by @​darrenhuai and @​gaborbernat.
  • Read virtualenv.ini values without interpolation, as environment variables and command line flags already are. A value holding a %, such as prompt = 50% done, was ignored without any message. %% and %(name)s are now kept as written, so write a single % (#3501) by @​darrenhuai and @​gaborbernat.
  • Reject a destination that already exists but is not a directory, such as /dev/null, a FIFO or a socket, or that sits inside one, with a usage error instead of a NotADirectoryError once creation has started. A regular file now gets the same is not a directory message instead of is a file (#3504) by @​darrenhuai and @​gaborbernat.
  • Set TCL_LIBRARY and TK_LIBRARY to the interpreter's Tcl/Tk paths in activate.nu, as the other activators do. Nushell activation used to leave both variables as they were (#3502) by @​darrenhuai and @​gaborbernat.
  • Show the environment name in the zsh prompt when KSH_ARRAYS is set at activation. Since 21.14.13 the prompt read an empty psvar entry under that option and showed () instead of the name (#3506) by @​PDGGK and @​gaborbernat.
  • Treat an empty or blank VIRTUALENV_OVERRIDE_APP_DATA and an empty VIRTUALENV_CONFIG_FILE as unset, as virtualenv already does for its option variables. An empty app-data override, or on Windows one made of spaces, made the current directory the cache, so --reset-app-data deleted it, and an empty config file path logged an error on every run (#3503) by @​darrenhuai and @​gaborbernat.

New Contributors

🐍 PyPI release

📜 Full Changelog

Changelog

Sourced from virtualenv's changelog.

################# Release History #################

.. towncrier-draft-entries:: [UNRELEASED DRAFT]

.. towncrier release notes start

.. _release-21-15-6:


21.15.6 (2026-11-06)


.. _release-21-15-6-fixed:

Fixed

  • Clear inherited PYTHONHOME during PowerShell, Nushell, and programmatic activation so child interpreters use the environment's standard library. Preserve empty values when Bash and fish deactivate (:pr:3517) by :user:gaborbernat.
  • Remove empty PATH entries during programmatic activation, including entries in an otherwise nonempty value. On POSIX, an empty entry searches the current directory (:pr:3513) by :user:qodelicious and :user:gaborbernat.
  • Unset PYTHONHOME during C shell activation and restore its original value on deactivation. An inherited value could previously prevent the environment's Python interpreter from starting (:pr:3514) by :user:abhishekcpp007 and :user:gaborbernat.

.. _release-21-15-5:


21.15.5 (2026-11-04)


.. _release-21-15-4:


21.15.4 (2026-11-04)


.. _release-21-15-4-fixed:

Fixed

  • Upgrade embedded wheels: pip to 26.3 from 26.2.2 (:pr:3508) by :user:gaborbernat.

.. _release-21-15-3:


... (truncated)

Commits
  • 9d8386c release 21.15.5
  • 9e5d0fd 👷 ci: adopt shared upgrade PR, CodeQL and release notes (#3510)
  • 4d9ec5c release 21.15.4
  • 1c88eb9 🐛 fix(upgrade): emit prose changelog fragment (#3509)
  • 84a0f4e Upgrade embedded pip/setuptools/wheel and CI test tools (#3508)
  • bb6ad72 build(deps): refresh release tool lock (#3507)
  • 12741f6 release 21.15.3
  • c28879e 🐛 fix(xonsh): prepend lib/pkgconfig to PKG_CONFIG_PATH (#3505)
  • 6d790dc 🐛 fix(bash): show the zsh prompt name under KSH_ARRAYS (#3506)
  • 586c6a2 🐛 fix(create): reject a destination that is not a directory (#3504)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.17.0` | `7.17.2` |
| [uv](https://github.com/astral-sh/uv) | `0.13.6` | `0.13.7` |
| [filelock](https://github.com/tox-dev/filelock) | `4.2.6` | `4.2.9` |
| [mypy-extensions](https://github.com/python/mypy_extensions) | `1.1.0` | `1.2.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.14.3` | `4.14.5` |
| [python-discovery](https://github.com/tox-dev/python-discovery) | `1.9.0` | `1.9.4` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.15.2` | `21.15.5` |


Updates `coverage` from 7.17.0 to 7.17.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.17.0...7.17.2)

Updates `uv` from 0.13.6 to 0.13.7
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.13.6...0.13.7)

Updates `filelock` from 4.2.6 to 4.2.9
- [Release notes](https://github.com/tox-dev/filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@4.2.6...4.2.9)

Updates `mypy-extensions` from 1.1.0 to 1.2.0
- [Commits](python/mypy_extensions@1.1.0...1.2.0)

Updates `platformdirs` from 4.14.3 to 4.14.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.14.3...4.14.5)

Updates `python-discovery` from 1.9.0 to 1.9.4
- [Release notes](https://github.com/tox-dev/python-discovery/releases)
- [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst)
- [Commits](tox-dev/python-discovery@1.9.0...1.9.4)

Updates `virtualenv` from 21.15.2 to 21.15.5
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.15.2...21.15.5)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: uv
  dependency-version: 0.13.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: filelock
  dependency-version: 4.2.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mypy-extensions
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: platformdirs
  dependency-version: 4.14.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: python-discovery
  dependency-version: 1.9.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: virtualenv
  dependency-version: 21.15.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 8, 2026
@codecov

codecov Bot commented Nov 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.48%. Comparing base (2da1a5b) to head (25e252d).

Additional details and impacted files
@@           Coverage Diff           @@
##              dev    #1010   +/-   ##
=======================================
  Coverage   97.48%   97.48%           
=======================================
  Files          61       61           
  Lines       10870    10870           
=======================================
  Hits        10597    10597           
  Misses        273      273           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants