Skip to content

chore(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates#35

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/python-minor-patch-e33c25d40f
Closed

chore(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/python-minor-patch-e33c25d40f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the python-minor-patch group with 3 updates in the /python directory: hypothesis, ruff and maturin.

Updates hypothesis from 6.122.1 to 6.152.7

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.6

This patch adds a shrinking pass that tries natural text transformations - unicode decomposition (NFD/NFKD) and case mapping - on individual characters in string choices. Failures involving e.g. ""À" != "À".lower()" will now reliably shrink to ""A"" rather than sometimes getting stuck on the high-codepoint accented form (issue #4725).

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.5

This patch improves the "Phase.explain" phase so that simple cases like "assert n1 == n2" no longer get a misleading "# or any other generated value" comment (issue #4715). Before falling back to random sampling, we now also try borrowing values from each other arg slice with matching shape.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.4

This patch fixes a rare internal error during "Phase.explain" introduced in version 6.149.0 for certain strategies (issue #4708).

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.3

The "hypothesis-urandom" backend now reads from "/dev/urandom" with buffering disabled, which improves the control of those hooking "/dev/urandom" to change or read Hypothesis's random decisions.

The canonical version of these notes (with links) is on readthedocs.

... (truncated)

Commits
  • adc8d2d Bump hypothesis-python version to 6.152.7 and update changelog
  • d66ce67 Merge pull request #4672 from CharString/annotate-filter
  • df88957 Merge pull request #4727 from hettlage/patch-1
  • 415443c Merge branch 'master' into patch-1
  • bfd0ebf Revert RELEASE.rst to original version
  • 492f818 attempt to de-flake test
  • 55ab356 fix release notes
  • 7fd8e50 simplify type hints
  • c8b952e Merge remote-tracking branch 'upstream/master' into annotate-filter-4672
  • b2e8d89 add tests and release notes
  • Additional commits viewable in compare view

Updates ruff from 0.8.4 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits
  • 66f93cf Bump 0.15.12 (#24815)
  • 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
  • ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
  • e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
  • 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
  • 0fbf2bc Drop deprecated license classifier (#24808)
  • 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
  • 4f449ae [ty] Add error context for intersection types (#24772)
  • 5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
  • e7cc762 [ty] Add error context for TypedDict assignments (#24790)
  • Additional commits viewable in compare view

Updates maturin from 1.13.1 to 1.13.3

Release notes

Sourced from maturin's releases.

v1.13.3

What's Changed

Full Changelog: PyO3/maturin@v1.13.2...v1.13.3

v1.13.2

What's Changed

New Contributors

Full Changelog: PyO3/maturin@v1.13.1...v1.13.2

Changelog

Sourced from maturin's changelog.

1.13.3

  • Fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)

1.13.2

  • Fix: resolve test failures in distro packaging environments (#3129)
  • Fix: redirect tracing output to stderr to avoid breaking PEP 517 (#3131)
  • Fix: skip interpreters with empty output for WSL2 cross-compile (#3137)
  • Fix: set explicit lib_name in pyo3 config for Android abi3 cross-compilation (#3130)
  • Chore: add sysconfig/cpython-freebsd-15.0-amd64.txt (#3140)
  • Quote python-version in generated GitHub Actions workflow
  • Update rustls-webpki
  • Fix: two-phase bridge detection for conditional abi3 features (#3144)
  • Update cargo-zigbuild to 0.22.2
  • Update pyo3 to 0.28.3
  • Treat pyo3 0.29.0+ as having Windows import lib support (raw-dylib) (#3145)
  • Fix bin bindings with external shared library dependencies (#3147)
  • Upgrade MSRV to 1.89.0 (#3149)
  • Musllinux oci image (#3152)
  • Remove Cirrus CI for FreeBSD (#3156)
  • Perf: defer stage_artifact copy-back, finalize via rename when unpatched (#3155)
  • Perf: eliminate stage_artifact double-copy, drop was_patched flag (#3157)
  • Fix release pipeline (#3158)
  • Auditwheel: copy unpatched cargo output back before in-place patching (#3159)
  • Develop: fail loudly when pip leaves a stale ~ install behind (#1922) (#3161)
  • Provide a link for the lib.name in Cargo.toml (#3167)
  • Fix duplicated version in changelog (#3171)
  • Switch to actions/attest from attest-build-provenance (#3169)
  • Switch generation to actions/attest action, upgrade to v4 (#3170)
  • Fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)
  • Add trusted publishing options to generate-ci (#3176)
  • Fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)
  • Stop install cffi for Python 3.8 in Dockerfile
  • Fix: support pixi-managed virtualenvs in maturin develop (#3165)
  • Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)
Commits
  • 1f7e752 Release v1.13.3 (#3183)
  • 863c990 fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)
  • fd70e0d Release v1.13.2
  • 8058c01 Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)
  • 211434c fix: support pixi-managed virtualenvs in maturin develop (#3165)
  • 8a5130d Stop install cffi for Python 3.8 in Dockerfile
  • 4ac4d99 fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)
  • dd54ac9 Add trusted publishing options to generate-ci (#3176)
  • e6d39af fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)
  • 02ad7b3 build(deps): bump openssl from 0.10.78 to 0.10.79 (#3173)
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 11, 2026

Labels

The following labels could not be found: area:python, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from manav8498 as a code owner May 11, 2026 03:39
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-e33c25d40f branch from 5d6ac45 to 75b6be9 Compare May 12, 2026 01:31
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-e33c25d40f branch 5 times, most recently from 9be5e2e to 73fd295 Compare May 13, 2026 20:49
… with 3 updates

Bumps the python-minor-patch group with 3 updates in the /python directory: [hypothesis](https://github.com/HypothesisWorks/hypothesis), [ruff](https://github.com/astral-sh/ruff) and [maturin](https://github.com/pyo3/maturin).


Updates `hypothesis` from 6.122.1 to 6.152.7
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.122.1...hypothesis-python-6.152.7)

Updates `ruff` from 0.8.4 to 0.15.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.4...0.15.12)

Updates `maturin` from 1.13.1 to 1.13.3
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](PyO3/maturin@v1.13.1...v1.13.3)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-version: 6.152.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: maturin
  dependency-version: 1.13.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-e33c25d40f branch from 73fd295 to dc92d26 Compare May 13, 2026 21:37
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jun 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 1, 2026
@dependabot dependabot Bot deleted the dependabot/pip/python/python-minor-patch-e33c25d40f branch June 1, 2026 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants