chore(deps-dev): bump the python-minor-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #38 · manav8498/Shadow

dependabot · 2026-06-01T06:19:46Z

Bumps the python-minor-patch group with 4 updates in the /python directory: hypothesis, ruff, pytest-asyncio and maturin.

Updates hypothesis from 6.122.1 to 6.155.1

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.9

This release substantially improves our internal distribution for generating integers. This release has the most visible effect on "integers()", but may incidentally improve other strategies which draw integers internally.

Our integers distribution had two problems. First, it had jagged discontinuities at certain values where we switched sampling approaches. Second, it used a different distribution for bounded and unbounded ranges, which resulted in "st.integers()" and "st.integers(-264, 264)" producing very different distributions despite being semantically similar.

We now use a smooth distribution for both "st.integers()" and "st.integers(a, b)", which fixes both of these issues. This should substantially improve our testing power in certain cases.

The only way this release should be user-visible is that it finds more bugs! If this release is user-visible in other ways - for example, because it is slower, or produces a worse distribution in some cases - please open an issue.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.6

This patch adds a shrinking pass that tries natural text

... (truncated)

Commits

4afeada Bump hypothesis version to 6.155.1 and update changelog
1dafffb Merge pull request #4755 from Zac-HD/claude/nice-bardeen-xS6yA
78b2a01 Address review feedback on the overrun-repair branch
ba3a206 Merge pull request #4757 from Zac-HD/cleanups
4f72f64 deflake tests?
4411487 crosshair tests cleanup
b19b02e Bump hypothesis version to 6.155.0 and update changelog
05a605b Merge pull request #4756 from Zac-HD/claude/hopeful-einstein-zhwDO
5690ba9 Bump hypothesis version to 6.154.2 and update changelog
7e91ba0 Merge pull request #4751 from Zac-HD/claude/amazing-brahmagupta-6XQsP
Additional commits viewable in compare view

Updates ruff from 0.8.4 to 0.15.15

Release notes

Sourced from ruff's releases.

0.15.15

Release Notes

Released on 2026-05-28.

Preview features

Fix Markdown closing fence handling (#25310)

[pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

[pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

Avoid redundant TokenValue drops in the lexer (#25300)

Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)

Use ThinVec in AST to shrink Stmt (#25361)

Documentation

Fix line-length example for --config option (#25389)

[flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)

[mccabe] Improve example (C901) (#25287)

[pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)

[refurb] Document FURB192 exception change for empty sequences (#25317)

[ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

Fix formatting of lambdas nested within f-strings (#25398)

Server

Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

Expand semantic syntax errors for invalid walruses (#25415)

Contributors

@chirizxc

@ntBre

@adityasingh2400

@charliermarsh

@fallintoplace

@martin-schlossarek

@MichaReiser

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.15

Released on 2026-05-28.

Preview features

Fix Markdown closing fence handling (#25310)

[pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

[pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

Avoid redundant TokenValue drops in the lexer (#25300)

Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)

Use ThinVec in AST to shrink Stmt (#25361)

Documentation

Fix line-length example for --config option (#25389)

[flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)

[mccabe] Improve example (C901) (#25287)

[pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)

[refurb] Document FURB192 exception change for empty sequences (#25317)

[ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

Fix formatting of lambdas nested within f-strings (#25398)

Server

Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

Expand semantic syntax errors for invalid walruses (#25415)

Contributors

@chirizxc

@ntBre

@adityasingh2400

@charliermarsh

@fallintoplace

@martin-schlossarek

@MichaReiser

@Ruchir28

... (truncated)

Commits

db5aa0a Bump 0.15.15 (#25431)
366fe21 [ty] Improve diagnostics for syntax errors in forward annotations (#25158)
e2e1e64 [ty] Remove excess capacity from more Salsa cached collections (#25411)
1bd77e1 [ty] Use diagnostic message as tie breaker when sorting (#25424)
7e1bc1e Add agent skills for working on ty (#25422)
574e107 Expand semantic syntax errors for invalid walruses (#25415)
4a7ca06 [ty] Display docs for matching parameter when hovering over the name of an ar...
5432709 Refine a few agents instructions (#25423)
3cb09eb [ty] Support typing.TypeForm (#25334)
c8cd59f [ty] Infer class attributes assigned by metaclass initialization (#25342)
Additional commits viewable in compare view

Updates pytest-asyncio from 1.3.0 to 1.4.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.

Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)

Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

Updated minimum supported pytest version to v8.4.0. (#1397)

Fixed

Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)

Notes for Downstream Packagers

Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged on pytest 8.4+.

Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)

Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

... (truncated)

Commits

6e14cd2 chore: Prepare release of v1.4.0.
4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
fc43340 Build(deps): Bump idna from 3.14 to 3.15
762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
82a393c ci: Remove unnecessary debug output.
Additional commits viewable in compare view

Updates maturin from 1.13.1 to 1.13.3

Release notes

Sourced from maturin's releases.

v1.13.3

What's Changed

fix: disable abi3 in pyo3 config for version-specific fallback builds by @trim21 in PyO3/maturin#3180

Full Changelog: PyO3/maturin@v1.13.2...v1.13.3

v1.13.2

What's Changed

fix: resolve test failures in distro packaging environments by @messense in PyO3/maturin#3129

fix: redirect tracing output to stderr to avoid breaking PEP 517 by @chrisburr in PyO3/maturin#3131

fix: skip interpreters with empty output for WSL2 cross-compile by @plusls in PyO3/maturin#3137

fix: set explicit lib_name in pyo3 config for Android abi3 cross-compilation by @messense in PyO3/maturin#3130

chore: add sysconfig/cpython-freebsd-15.0-amd64.txt by @fleetingbytes in PyO3/maturin#3140

fix: two-phase bridge detection for conditional abi3 features by @messense in PyO3/maturin#3144

Treat pyo3 0.29.0+ as having Windows import lib support (raw-dylib) by @messense in PyO3/maturin#3145

Fix bin bindings with external shared library dependencies by @messense in PyO3/maturin#3147

Upgrade MSRV to 1.89.0 by @messense in PyO3/maturin#3149

build(deps): bump rustls-webpki from 0.103.12 to 0.103.13 by @dependabot[bot] in PyO3/maturin#3154

Musllinux oci image by @Joshix-1 in PyO3/maturin#3152

Remove Cirrus CI for FreeBSD by @messense in PyO3/maturin#3156

perf: defer stage_artifact copy-back, finalize via rename when unpatched by @pratyush618 in PyO3/maturin#3155

perf: eliminate stage_artifact double-copy, drop was_patched flag by @messense in PyO3/maturin#3157

Fix release pipeline by @messense in PyO3/maturin#3158

auditwheel: copy unpatched cargo output back before in-place patching by @messense in PyO3/maturin#3159

develop: fail loudly when pip leaves a stale ~ install behind (#1922) by @pratyush618 in PyO3/maturin#3161

Provide a link for the lib.name in Cargo.toml by @Xuanmizhen in PyO3/maturin#3167

Fix duplicated version in changelog by @robsdedude in PyO3/maturin#3171

Switch to actions/attest from attest-build-provenance by @scop in PyO3/maturin#3169

Switch generation to actions/attest action, upgrade to v4 by @scop in PyO3/maturin#3170

fix: avoid duplicate --interpreter panic in PEP 517 backend by @messense in PyO3/maturin#3175

Add trusted publishing options to generate-ci by @messense in PyO3/maturin#3176

fix(sdist): handle symlinked Cargo.toml pointing outside project root by @messense in PyO3/maturin#3178

fix: support pixi-managed virtualenvs in maturin develop by @eyupcanakman in PyO3/maturin#3165

Support PEP 783 pyemscripten_*_wasm32 wheel platform tag by @messense in PyO3/maturin#3163

New Contributors

@chrisburr made their first contribution in PyO3/maturin#3131

@plusls made their first contribution in PyO3/maturin#3137

@Joshix-1 made their first contribution in PyO3/maturin#3152

@pratyush618 made their first contribution in PyO3/maturin#3155

@Xuanmizhen made their first contribution in PyO3/maturin#3167

@scop made their first contribution in PyO3/maturin#3169

@eyupcanakman made their first contribution in PyO3/maturin#3165

Full Changelog: PyO3/maturin@v1.13.1...v1.13.2

Changelog

Sourced from maturin's changelog.

1.13.3

Fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)

1.13.2

Fix: resolve test failures in distro packaging environments (#3129)

Fix: redirect tracing output to stderr to avoid breaking PEP 517 (#3131)

Fix: skip interpreters with empty output for WSL2 cross-compile (#3137)

Fix: set explicit lib_name in pyo3 config for Android abi3 cross-compilation (#3130)

Chore: add sysconfig/cpython-freebsd-15.0-amd64.txt (#3140)

Quote python-version in generated GitHub Actions workflow

Update rustls-webpki

Fix: two-phase bridge detection for conditional abi3 features (#3144)

Update cargo-zigbuild to 0.22.2

Update pyo3 to 0.28.3

Treat pyo3 0.29.0+ as having Windows import lib support (raw-dylib) (#3145)

Fix bin bindings with external shared library dependencies (#3147)

Upgrade MSRV to 1.89.0 (#3149)

Musllinux oci image (#3152)

Remove Cirrus CI for FreeBSD (#3156)

Perf: defer stage_artifact copy-back, finalize via rename when unpatched (#3155)

Perf: eliminate stage_artifact double-copy, drop was_patched flag (#3157)

Fix release pipeline (#3158)

Auditwheel: copy unpatched cargo output back before in-place patching (#3159)

Develop: fail loudly when pip leaves a stale ~ install behind (#1922) (#3161)

Provide a link for the lib.name in Cargo.toml (#3167)

Fix duplicated version in changelog (#3171)

Switch to actions/attest from attest-build-provenance (#3169)

Switch generation to actions/attest action, upgrade to v4 (#3170)

Fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)

Add trusted publishing options to generate-ci (#3176)

Fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)

Stop install cffi for Python 3.8 in Dockerfile

Fix: support pixi-managed virtualenvs in maturin develop (#3165)

Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)

Commits

1f7e752 Release v1.13.3 (#3183)
863c990 fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)
fd70e0d Release v1.13.2
8058c01 Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)
211434c fix: support pixi-managed virtualenvs in maturin develop (#3165)
8a5130d Stop install cffi for Python 3.8 in Dockerfile
4ac4d99 fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)
dd54ac9 Add trusted publishing options to generate-ci (#3176)
e6d39af fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)
02ad7b3 build(deps): bump openssl from 0.10.78 to 0.10.79 (#3173)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 4 updates Bumps the python-minor-patch group with 4 updates in the /python directory: [hypothesis](https://github.com/HypothesisWorks/hypothesis), [ruff](https://github.com/astral-sh/ruff), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) and [maturin](https://github.com/pyo3/maturin). Updates `hypothesis` from 6.122.1 to 6.155.1 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.122.1...v6.155.1) Updates `ruff` from 0.8.4 to 0.15.15 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.8.4...0.15.15) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0) Updates `maturin` from 1.13.1 to 1.13.3 - [Release notes](https://github.com/pyo3/maturin/releases) - [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md) - [Commits](PyO3/maturin@v1.13.1...v1.13.3) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.155.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.15.15 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: maturin dependency-version: 1.13.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-01T06:19:47Z

Labels

The following labels could not be found: area:python, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from manav8498 as a code owner June 1, 2026 06:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the python-minor-patch group across 1 directory with 4 updates#38

chore(deps-dev): bump the python-minor-patch group across 1 directory with 4 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/python-minor-patch-f298205301

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026

Hypothesis for Python - version 6.152.9

Hypothesis for Python - version 6.152.8

Hypothesis for Python - version 6.152.7

previously: SearchStrategy[object]

now: SearchStrategy[str]

Hypothesis for Python - version 6.152.6

0.15.15

Release Notes

Preview features

Bug fixes

Performance

Documentation

Formatter

Server

Other changes

Contributors

0.15.15

Preview features

Bug fixes

Performance

Documentation

Formatter

Server

Other changes

Contributors

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Added

Changed

Fixed

Notes for Downstream Packagers

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

Added

Changed

v1.13.3

What's Changed

v1.13.2

What's Changed

New Contributors

1.13.3

1.13.2

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants