Skip to content

chore(deps): bump the all-dependencies group with 8 updates#670

Merged
gijzelaerr merged 1 commit intomasterfrom
dependabot/uv/all-dependencies-a23c0835c5
Apr 7, 2026
Merged

chore(deps): bump the all-dependencies group with 8 updates#670
gijzelaerr merged 1 commit intomasterfrom
dependabot/uv/all-dependencies-a23c0835c5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the all-dependencies group with 8 updates:

Package From To
hypothesis 6.151.10 6.151.11
mypy 1.19.1 1.20.0
types-setuptools 82.0.0.20260210 82.0.0.20260402
ruff 0.15.8 0.15.9
tox 4.51.0 4.52.0
tox-uv 1.33.4 1.34.0
uv 0.11.2 0.11.3
click 8.3.1 8.3.2

Updates hypothesis from 6.151.10 to 6.151.11

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.151.11

This patch improves printing of primitive values generated from complex strategies, particularly for "from_regex()". Previously, these would often be printed as function calls desctribing how to construct them. Now they will always be printed as a literal value.

The canonical version of these notes (with links) is on readthedocs.

Commits
  • 86de995 Bump hypothesis-python version to 6.151.11 and update changelog
  • c6e779c Merge pull request #4692 from HypothesisWorks/DRMacIver/odd-re-printing
  • 460491f Add tests for .map() printing primitives as repr
  • 1909e8a Fix isinstance with None and lint violation
  • 684e150 Force primitive values to always be printed as repr
  • See full diff in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits
  • 770d3ca Remove +dev from version
  • 4738ffa Changelog updates for 1.20 (#21109)
  • b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
  • 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
  • c482596 --allow-redefinition-new is no longer experimental (#21110)
  • c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
  • b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
  • 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
  • 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
  • bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
  • Additional commits viewable in compare view

Updates types-setuptools from 82.0.0.20260210 to 82.0.0.20260402

Commits

Updates ruff from 0.15.8 to 0.15.9

Release notes

Sourced from ruff's releases.

0.15.9

Release Notes

Released on 2026-04-02.

Preview features

  • [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)
  • [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

  • [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)
  • [flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)
  • [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)
  • [pyupgrade] Fix UP008 nested class matching (#24273)
  • [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • [ruff] RUF072: skip formfeeds on dedent (#24308)
  • [ruff] Avoid re-using symbol in RUF024 fix (#24316)
  • [ruff] Parenthesize expression in RUF050 fix (#24234)
  • Disallow starred expressions as values of starred expressions (#24280)

Rule changes

  • [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)
  • [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)
  • [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)
  • [pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)
  • [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

  • Add nested-string-quote-style formatting option (#24312)

Documentation

  • [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)
  • [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

  • Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.9

Released on 2026-04-02.

Preview features

  • [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)
  • [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

  • [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)
  • [flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)
  • [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)
  • [pyupgrade] Fix UP008 nested class matching (#24273)
  • [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • [ruff] RUF072: skip formfeeds on dedent (#24308)
  • [ruff] Avoid re-using symbol in RUF024 fix (#24316)
  • [ruff] Parenthesize expression in RUF050 fix (#24234)
  • Disallow starred expressions as values of starred expressions (#24280)

Rule changes

  • [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)
  • [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)
  • [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)
  • [pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)
  • [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

  • Add nested-string-quote-style formatting option (#24312)

Documentation

  • [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)
  • [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

  • Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

... (truncated)

Commits
  • 724ccc1 Bump 0.15.9 (#24369)
  • 96d9e09 [ty] Move the deferred submodule inside infer/builder (#24368)
  • 130da28 [ty] Infer the extra_items keyword argument to class-based TypedDicts as an...
  • a617c54 [ty] Validate type qualifiers in functional TypedDict fields and the `extra_i...
  • d851708 [ty] Improve robustness of various type-qualifier-related checks (#24251)
  • aecb587 Only run the release-gate on workflow dispatch (#24366)
  • b889571 [ty] Use infer_type_expression for parsing parameter annotations and return...
  • 3286a62 Add a "release-gate" step to the release workflow (#24365)
  • 5f88756 Disallow starred expressions as values of starred expressions (#24280)
  • 5c59f8a [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • Additional commits viewable in compare view

Updates tox from 4.51.0 to 4.52.0

Release notes

Sourced from tox's releases.

v4.52.0

What's Changed

Full Changelog: tox-dev/tox@4.51.0...4.52.0

Changelog

Sourced from tox's changelog.

Features - 4.52.0

  • Add virtualenv-pep-723 runner that reads dependencies and Python version from :PEP:723 inline script metadata — no need to duplicate them in tox config - by :user:gaborbernat. (:issue:3897)
  • Support escaped dots (\.) in -x/--override keys, allowing overrides to target environments with dots in their names such as py3.14 - by :user:gaborbernat. (:issue:3910)

Bug fixes - 4.52.0

  • Auto-generate the manpage from the CLI argparse parser at wheel build time, fixing broken section headers and documenting all commands and options - by :user:gaborbernat. (:issue:3878)

Miscellaneous internal changes - 4.52.0

  • Remove unsupported --remote flag from gh repo fork in the update-schemastore workflow, as recent versions of gh no longer accept it - by :user:rahuldevikar. (:issue:3908)

v4.51.0 (2026-03-27)

Commits
  • d83d577 release 4.52.0
  • da0f890 ✨ feat(runner): add PEP 723 inline script metadata support (#3912)
  • b232d2d 🐛 fix(docs): auto-generate manpage from CLI parser (#3911)
  • 84958f7 [pre-commit.ci] pre-commit autoupdate (#3909)
  • 15d9ac0 ✨ feat(config): support escaped dots in -x override keys (#3910)
  • 0eda3a2 remove unsupported --remote flag from gh repo fork (#3908)
  • See full diff in compare view

Updates tox-uv from 1.33.4 to 1.34.0

Release notes

Sourced from tox-uv's releases.

1.34.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.33.4...1.34.0

Commits

Updates uv from 0.11.2 to 0.11.3

Release notes

Sourced from uv's releases.

0.11.3

Release Notes

Released on 2026-04-01.

Enhancements

  • Add progress bar for hashing phase in uv publish (#18752)
  • Add support for ROCm 7.2 (#18730)
  • Emit abi3t tags for every abi3 version (#18777)
  • Expand uv workspace metadata with dependency information from the lock (#18356)
  • Implement support for PEP 803 (#18767)
  • Pretty-print platform in built wheel errors (#18738)
  • Publish installers to /installers/uv/latest on the mirror (#18725)
  • Show free-threaded Python in built-wheel errors (#18740)

Preview features

  • Add --ignore and --ignore-until-fixed to uv audit (#18737)

Bug fixes

  • Bump simple API cache (#18797)
  • Don't drop blake2b hashes (#18794)
  • Handle broken range request implementations (#18780)
  • Remove powerpc64-unknown-linux-gnu from release build targets (#18800)
  • Respect dependency metadata overrides in uv pip check (#18742)
  • Support debug CPython ABI tags in environment compatibility (#18739)

Documentation

  • Document false opt-out for exclude-newer-package (#18768, #18803)

Install uv 0.11.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.3/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.3/uv-installer.ps1 | iex"

Download uv 0.11.3

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.3

Released on 2026-04-01.

Enhancements

  • Add progress bar for hashing phase in uv publish (#18752)
  • Add support for ROCm 7.2 (#18730)
  • Emit abi3t tags for every abi3 version (#18777)
  • Expand uv workspace metadata with dependency information from the lock (#18356)
  • Implement support for PEP 803 (#18767)
  • Pretty-print platform in built wheel errors (#18738)
  • Publish installers to /installers/uv/latest on the mirror (#18725)
  • Show free-threaded Python in built-wheel errors (#18740)

Preview features

  • Add --ignore and --ignore-until-fixed to uv audit (#18737)

Bug fixes

  • Bump simple API cache (#18797)
  • Don't drop blake2b hashes (#18794)
  • Handle broken range request implementations (#18780)
  • Remove powerpc64-unknown-linux-gnu from release build targets (#18800)
  • Respect dependency metadata overrides in uv pip check (#18742)
  • Support debug CPython ABI tags in environment compatibility (#18739)

Documentation

  • Document false opt-out for exclude-newer-package (#18768, #18803)
Commits

Updates click from 8.3.1 to 8.3.2

Release notes

Sourced from click's releases.

8.3.2

This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-2 Milestone: https://github.com/pallets/click/milestone/29

  • Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. #3084 #3152
  • Hide Sentinel.UNSET values as None when using lookup_default(). #3136 #3199 #3202 #3209 #3212 #3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer. #824 #2991 #2993 #3110 #3139 #3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering logging interaction, multi-threaded safety, and sequential invocation isolation. Add high-iteration stress tests behind a stress marker with a dedicated CI job. #3139
  • Fix callable flag_value being instantiated when used as a default via default=True. #3121 #3201 #3213 #3225
Changelog

Sourced from click's changelog.

Version 8.3.2

Released 2026-04-02

  • Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. :issue:3084 :pr:3152
  • Hide Sentinel.UNSET values as None when using lookup_default(). :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer. :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering logging interaction, multi-threaded safety, and sequential invocation isolation. Add high-iteration stress tests behind a stress marker with a dedicated CI job. :pr:3139
  • Fix callable flag_value being instantiated when used as a default via default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all-dependencies group with 8 updates
64fa012 
Bumps the all-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.10` | `6.151.11` |
| [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` |
| [types-setuptools](https://github.com/python/typeshed) | `82.0.0.20260210` | `82.0.0.20260402` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.8` | `0.15.9` |
| [tox](https://github.com/tox-dev/tox) | `4.51.0` | `4.52.0` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.33.4` | `1.34.0` |
| [uv](https://github.com/astral-sh/uv) | `0.11.2` | `0.11.3` |
| [click](https://github.com/pallets/click) | `8.3.1` | `8.3.2` |


Updates `hypothesis` from 6.151.10 to 6.151.11
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.10...hypothesis-python-6.151.11)

Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v1.20.0)

Updates `types-setuptools` from 82.0.0.20260210 to 82.0.0.20260402
- [Commits](https://github.com/python/typeshed/commits)

Updates `ruff` from 0.15.8 to 0.15.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.8...0.15.9)

Updates `tox` from 4.51.0 to 4.52.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.51.0...4.52.0)

Updates `tox-uv` from 1.33.4 to 1.34.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.33.4...1.34.0)

Updates `uv` from 0.11.2 to 0.11.3
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.2...0.11.3)

Updates `click` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.1...8.3.2)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-version: 6.151.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: mypy
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: types-setuptools
  dependency-version: 82.0.0.20260402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ruff
  dependency-version: 0.15.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: tox
  dependency-version: 4.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tox-uv
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: uv
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: click
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 6, 2026
@gijzelaerr gijzelaerr merged commit 029d2ce into master Apr 7, 2026
36 checks passed
@dependabot dependabot bot deleted the dependabot/uv/all-dependencies-a23c0835c5 branch April 7, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gijzelaerr gijzelaerr gijzelaerr approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gijzelaerr