Skip to content

Bump the python-dependencies group with 8 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-617f5fe152
Open

Bump the python-dependencies group with 8 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-617f5fe152

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on typer, nox, prek, ruff, mypy, ty, coverage and setuptools to permit the latest version.
Updates typer from 0.26.7 to 0.27.0

Release notes

Sourced from typer's releases.

0.27.0

Breaking Changes

Internal

0.26.8

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

Changelog

Sourced from typer's changelog.

0.27.0 (2026-07-15)

Breaking Changes

Internal

0.26.8 (2026-06-25)

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

Commits

Updates nox from 2026.4.10 to 2026.7.11

Release notes

Sourced from nox's releases.

2026.07.11 🏪

This release drops Python 3.9 and brings a batch of performance improvements, like caching uv detection and interpreter discovery, plus lazy module imports on Python 3.15. Various bugs were fixed as well.

We'd like to thank the following folks who contributed to this release:

Features:

Performance:

Fixes:

Documentation:

Internal changes:

... (truncated)

Changelog

Sourced from nox's changelog.

Changelog

2026.07.11

This release drops Python 3.9 and brings a batch of performance improvements, like caching uv detection and interpreter discovery, plus lazy module imports on Python 3.15. Various bugs were fixed as well.

We'd like to thank the following folks who contributed to this release:

Features:

Performance:

Fixes:

Documentation:

Internal changes:

... (truncated)

Commits
  • 3284968 chore: prepare release 2026.07.11 (#1132)
  • d73f96a ci: add Python 3.15 to the test matrix and classifiers (#1133)
  • 5391985 test: isolate run_nox envdir to fix flaky test_main_requires (#1134)
  • 390d817 feat: add return_code to CommandFailed. (#1129)
  • f1d5210 chore(deps): bump the github-actions group with 2 updates (#1125)
  • 0894b73 chore(deps): bump the pre-commit group with 4 updates (#1126)
  • 9b747ed ci: experimental MSYS2/MinGW test run (#1122)
  • 8a44270 docs: add PyO3 as a user (#1123)
  • 5bd0f83 perf: lazy modules on Python 3.15 (#1115)
  • 982fcfa chore(deps): bump dependency-groups in the pre-commit group (#1121)
  • Additional commits viewable in compare view

Updates prek from 0.4.5 to 0.4.11

Release notes

Sourced from prek's releases.

0.4.11

Release Notes

Released on 2026-07-25.

Highlights

  • This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

  • prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

  • Hook priorities now support reusable aliases:

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]

    This makes parallel scheduling easier to read and maintain.

Enhancements

  • Add deny-pattern and require-pattern builtin hooks (#2359)
  • Support --glob patterns in prek run (#2381)
  • Support reusable aliases for hook priorities (#2331)
  • Implement requirements-txt-fixer as a builtin hook (#2390)
  • Improve user-facing warnings and errors (#2380)
  • Install Node hooks through git url (#2394)

Performance

  • Reduce blocking-pool overhead in file hooks (#2384)
  • Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.11

Released on 2026-07-25.

Highlights

  • This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

  • prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

  • Hook priorities now support reusable aliases:

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]

    This makes parallel scheduling easier to read and maintain.

Enhancements

  • Add deny-pattern and require-pattern builtin hooks (#2359)
  • Support --glob patterns in prek run (#2381)
  • Support reusable aliases for hook priorities (#2331)
  • Implement requirements-txt-fixer as a builtin hook (#2390)
  • Improve user-facing warnings and errors (#2380)
  • Install Node hooks through git url (#2394)

Performance

  • Reduce blocking-pool overhead in file hooks (#2384)
  • Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Commits

Updates ruff from 0.15.19 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    

    • 






... (truncated)





Commits

    

  • a2635fd Bump 0.16.0 (#27136)
    • 

  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
    • 

  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
    • 

  • 17ef711 Stabilize --add-ignore (#27125)
    • 

  • ef912bb Add newly stabilized rules to defaults (#27055)
    • 

  • b30f040 Stabilize new default rules (#27035)
    • 

  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
    • 

  • 87e51e2 Fix format --check spans for syntax errors (#27045)
    • 

  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
    • 

  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
    • 

  • Additional commits viewable in compare view
    • 







Updates mypy from 2.1.0 to 2.3.0



Changelog

Sourced from mypy's changelog.




Mypy Release Notes


Next Release


Packaging changes



Mypy 2.3


We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI).
Mypy is a static type checker for Python. This release includes new features, performance
improvements and bug fixes. You can install it as follows:


python3 -m pip install -U mypy



You can read the full documentation for this release on Read the Docs.


The Upcoming Switch to the New Native Parser


We are planning to enable the new native parser (--native-parser) by
default soon. We recommend that you test the native parser in your projects and report
any issues in the mypy issue tracker.


Mypyc Free-threading Memory Safety


Free-threaded Python builds that don't have the GIL require additional synchronization
primitives or lock-free algorithms to ensure memory safety when there are race conditions
(for example, when a thread reads a list item while another thread writes the same list
item concurrently). This release greatly improves memory safety of free threading.


List operations are now memory-safe on free threaded Python builds, even in the presence of
race conditions. This has some performance cost. For list-heavy workloads, using
librt.vecs.vec instead of list is often significantly faster, but note that vec is not
(and likely won't be) fully memory safe, and the user is expected to avoid race conditions.
The newly introduced librt.threading.Lock helps with this. Using variable-length tuples
can also be more efficient than lists, since tuples are immutable and don't require
expensive synchronization to ensure memory safety.


Instance attribute access is also (mostly) memory safe now on free-threaded builds in
the presence of race conditions. We are planning to fix the remaining unsafe cases in a
future release.


Full list of changes:


    

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
    • 

  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
    • 

  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
    • 

  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
    • 

  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)
    • 






... (truncated)





Commits

    

  • 8aabf84 Drop +dev from version
    • 

  • 4d8ad2a Update changelog for 2.3 release (#21728)
    • 

  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
    • 

  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
    • 

  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
    • 

  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
    • 

  • 24c237d [mypyc] Improve documentation of Final (#21713)
    • 

  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
    • 

  • cbcb51a Narrow for frozendict membership check (#21709)
    • 

  • af2bc0f Sync typeshed (#21707)
    • 

  • Additional commits viewable in compare view
    • 







Updates ty from 0.0.52 to 0.0.63



Release notes

Sourced from ty's releases.




0.0.63


Release Notes


Released on 2026-07-23.


Core type checking


    

  • Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
    • 

  • Allow equality narrowing across non-final classes (#27031)
    • 

  • Allow interpolated string literals to be promoted to str (#27104)
    • 

  • Fix double specialization of generic type aliases (#27058)
    • 

  • Fix intersections of type and TypeForm (#27099)
    • 

  • When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)
    • 



Library support


    

  • Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
    • 

  • Pydantic: Support special underscore parameters in BaseSettings models (#27098)
    • 



Performance


    

  • Avoid exponential narrowing of optional dynamic match subjects (#27100)
    • 

  • Avoid normalizing cached absolute file paths (#26998)
    • 



Contributors



Install ty 0.0.63


Install prebuilt binaries via shell script


curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.sh | sh


Install prebuilt binaries via powershell script


powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.ps1 | iex"


Download ty 0.0.63






File
Platform
Checksum






ty-aarch64-apple-darwin.tar.gz
Apple Silicon macOS
checksum









... (truncated)





Changelog

Sourced from ty's changelog.




0.0.63


Released on 2026-07-23.


Core type checking


    

  • Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
    • 

  • Allow equality narrowing across non-final classes (#27031)
    • 

  • Allow interpolated string literals to be promoted to str (#27104)
    • 

  • Fix double specialization of generic type aliases (#27058)
    • 

  • Fix intersections of type and TypeForm (#27099)
    • 

  • When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)
    • 



Library support


    

  • Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
    • 

  • Pydantic: Support special underscore parameters in BaseSettings models (#27098)
    • 



Performance


    

  • Avoid exponential narrowing of optional dynamic match subjects (#27100)
    • 

  • Avoid normalizing cached absolute file paths (#26998)
    • 



Contributors



0.0.62


Released on 2026-07-21.


Bug fixes


    

  • Guard recursive Protocol and TypedDict relations (#26990)
    • 

  • Prevent stack overflows in recursive type relation checks (#26503)
    • 

  • Recover from cancelled file indexing (#26876)
    • 



Diagnostics


    

  • Avoid editing ignore comments with trailing reasons (#26939)
    • 

  • Prefer innermost inline suppressions (#26940)
    • 

  • Remove unused own-line ignore comments (#27013)
    • 

  • Reuse applicable own-line suppressions in --add-ignore (#26925)
    • 



Configuration


    

  • Respect rules and analysis in PEP 723 script metadata configurations (#26671)
    • 






... (truncated)





Commits






Updates coverage from 7.14.3 to 7.15.2



Release notes

Sourced from coverage's releases.




7.15.2


Version 7.15.2 — 2026-07-15


    

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.
    • 



➡️  PyPI page: coverage 7.15.2.
:arrow_right:  To install: python3 -m pip install coverage==7.15.2


7.15.1


Version 7.15.1 — 2026-07-12


    

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
    • 

  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.
    • 



➡️  PyPI page: coverage 7.15.1.
:arrow_right:  To install: python3 -m pip install coverage==7.15.1


7.15.0


Version 7.15.0 — 2026-07-02


    

  • Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198.
    • 

  • Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen.
    • 

  • When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks.
    • 

  • Fix: with Python 3.10, running with the -I (isolated mode) option didn’t correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to 

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          Bump the python-dependencies group with 8 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          765515c
        
      

    

  

    

      
Updates the requirements on [typer](https://github.com/fastapi/typer), [nox](https://github.com/wntrblm/nox), [prek](https://github.com/j178/prek), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [ty](https://github.com/astral-sh/ty), [coverage](https://github.com/coveragepy/coveragepy) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `typer` from 0.26.7 to 0.27.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.7...0.27.0)

Updates `nox` from 2026.4.10 to 2026.7.11
- [Release notes](https://github.com/wntrblm/nox/releases)
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md)
- [Commits](wntrblm/nox@2026.04.10...2026.07.11)

Updates `prek` from 0.4.5 to 0.4.11
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.5...v0.4.11)

Updates `ruff` from 0.15.19 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.19...0.16.0)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `ty` from 0.0.52 to 0.0.63
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.52...0.0.63)

Updates `coverage` from 7.14.3 to 7.15.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.14.3...7.15.2)

Updates `setuptools` to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v83.0.0)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: nox
  dependency-version: 2026.7.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: prek
  dependency-version: 0.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  python:uv

  Pull requests that update python:uv code

  labels


      Aug 1, 2026

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews





  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    python:uv

  Pull requests that update python:uv code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants