Skip to content

Bump the python group with 3 updates#241

Merged
Buried-In-Code merged 1 commit intomainfrom
dependabot/uv/python-dfc28c1f91
May 4, 2026
Merged

Bump the python group with 3 updates#241
Buried-In-Code merged 1 commit intomainfrom
dependabot/uv/python-dfc28c1f91

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the python group with 3 updates: ty, zensical and tox.

Updates ty from 0.0.33 to 0.0.34

Release notes

Sourced from ty's releases.

0.0.34

Release Notes

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.34

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

Commits

Updates zensical from 0.0.39 to 0.0.40

Release notes

Sourced from zensical's releases.

0.0.40

Summary

This version adds support for macros, covering the functionality of the mkdocs-macros-plugin. Macros allow you to define custom variables and functions that can be used in your Markdown files, making it easier to manage and reuse content across your documentation.

We've implemented macros support as a Python Markdown extension, since it's essentially a Markdown preprocessor that doesn't need to be aware of the rest of Zensical's rendering process, except for the current page and configuration. The benefit is that it can now also be used in Python docstrings to build API documentation with mkdocstrings.

Changelog

Features

  • 36b5131 compat – exclude macros blocks from link validation
  • f7fe088 compat – support macros plugin

Bug fixes

  • bdc3471 ui – update ui to v0.0.16
  • 4be2374 compat – link validation doesn't catch end of MathJax when \r present (#615)
  • c6cffec compat – link validation exclusions don't catch \r\n line feeds
  • 6efe0a3 compat – link validation exclusions require empty line after code block (#618)
  • 645bbe8 zensical – clear site directory contents instead of removing it (#621)
  • 814d2e9 zensical – link validation yields false positives on Windows (#616)
  • b229bac zensical-servezensical serve returns 404 after suspend (#574)
  • b5492ce compat – shim for mkdocs-glightbox fails when only defaults are set (#611)

Refactorings

  • 91090e9 zensical, compat – combine file watching for extensions
  • b2fdc78 zensical, compat – pass rendering context into preprocessor
Commits
  • bc3e017 chore: release v0.0.40
  • bdc3471 fix: update ui to v0.0.16
  • 36b5131 feature: exclude macros blocks from link validation
  • f7fe088 feature: support macros plugin
  • 91090e9 refactor: combine file watching for extensions
  • 91a9f85 chore: fix import in test file
  • b2fdc78 refactor: pass rendering context into preprocessor
  • c23fb92 chore: setup pytest and initial markdown extension testing
  • 296eb24 Merge pull request #622 from zensical/fix/link-validation-windows
  • e0c6700 chore: set concise output for Ruff
  • Additional commits viewable in compare view

Updates tox from 4.53.0 to 4.53.1

Release notes

Sourced from tox's releases.

v4.53.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.53.0...4.53.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.53.1

  • Hardening pass on user-facing logging and config parsing:

    • Mask secret-looking --key=value flag values in command logs (terminal warnings, .tox/<env>/log/*.log, and Outcome __repr__) using the same keyword regex previously applied to environment variable values.
    • Resolve PEP 723 script paths and reject any that escape tox_root; cap the script read at 5 MiB so a symlink to /dev/zero cannot exhaust memory.
    • Replace eval() of a constructed Literal[...] string in the CLI parser with a direct Literal[tuple(action.choices)] subscript.
    • Pass timeout=30 to urlopen when fetching a remote requirements file so a slow or unresponsive mirror cannot hang tox indefinitely. (:issue:3924)
  • Allow the generated TOML schema to validate array values for deps. (:issue:3929)

  • Correct type annotations for ArgumentParser.parse_args and parse_known_args overrides following typeshed PR [#15613](https://github.com/tox-dev/tox/issues/15613) <https://github.com/python/typeshed/pull/15613>_, which widened the args parameter from Sequence[str] to Iterable[str]. The narrower type in tox's overrides violated the Liskov substitution principle and caused invalid-method-override errors with ty 0.0.33. Also correct the option_spec annotation in docs/tox_conf.py to ClassVar[dict[str, Callable[[str], Any]]] matching the docutils stubs type. (:issue:3932)


v4.53.0 (2026-04-14)


Commits
  • 2b17791 release 4.53.1
  • 86234dd fix: allow deps arrays in TOML schema (#3931)
  • dd305fe 🐛 fix(type): correct argparse override signatures for ty 0.0.33 (#3932)
  • 3aa3cd5 [pre-commit.ci] pre-commit autoupdate
  • 59b6cd2 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#3928)
  • 3765fcd [pre-commit.ci] pre-commit autoupdate (#3927)
  • b76c383 build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#3926)
  • 7b0ad94 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3925)
  • 4dcde44 🐛 fix(security): harden user-facing logs and untrusted inputs (#3924)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 3 updates: [ty](https://github.com/astral-sh/ty), [zensical](https://github.com/zensical/zensical) and [tox](https://github.com/tox-dev/tox).


Updates `ty` from 0.0.33 to 0.0.34
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.33...0.0.34)

Updates `zensical` from 0.0.39 to 0.0.40
- [Release notes](https://github.com/zensical/zensical/releases)
- [Commits](zensical/zensical@v0.0.39...v0.0.40)

Updates `tox` from 4.53.0 to 4.53.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.53.0...4.53.1)

---
updated-dependencies:
- dependency-name: ty
  dependency-version: 0.0.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: zensical
  dependency-version: 0.0.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: tox
  dependency-version: 4.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 4, 2026
@read-the-docs-community
Copy link
Copy Markdown

@Buried-In-Code Buried-In-Code merged commit 716f538 into main May 4, 2026
22 checks passed
@Buried-In-Code Buried-In-Code deleted the dependabot/uv/python-dfc28c1f91 branch May 4, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant