Skip to content

⬆ bump the python group across 1 directory with 15 updates - #128

Merged
d3vyce merged 1 commit into
mainfrom
dependabot/uv/python-2a7fd653d9
Nov 11, 2026
Merged

d3vyce merged 1 commit into
mainfrom
dependabot/uv/python-2a7fd653d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the python group with 15 updates in the / directory:

Package From To
anyio 4.15.1 4.16.0
fastapi 0.162.0 0.162.2
coverage 7.17.0 7.17.2
zensical 0.0.74 0.1.0
prek 0.5.9 0.5.10
ruff 0.17.3 0.17.4
ty 0.0.95 0.0.99
click 8.5.0 8.5.1
markdown 3.11.2 3.11.3
platformdirs 4.14.2 4.14.5
pydantic 2.14.2 2.14.3
pydantic-core 2.50.2 2.50.4
python-dateutil 3.0.0 4.0.0
typing-inspection 0.4.4 0.4.5
watchdog 7.0.0 7.1.0

Updates anyio from 4.15.1 to 4.16.0

Release notes

Sourced from anyio's releases.

4.16.0

New features

  • Added BlockingPortal.call_async() for asynchronously calling into an event loop with optional abandonment on cancellation (#1342; PR by @​davidbrochart)
  • Added SOCK_SEQPACKET support to connect_unix() and create_unix_listener() (#1349; PR by @​theunkn0wn1)

Other changes

  • Changed UDP sockets on the asyncio backend to make send() wait until the datagram has been passed to the operating system (#1294; PR by @​graingert)

Bug fixes

  • Fixed documentation implying that use_uvloop=True falls back to the standard event loop when uvloop (winloop on Windows) is not installed, and showed how to skip the corresponding pytest backend variant when the dependency is missing (#645; PR by @​GruffElixir)
  • Fixed get_current_task() on the asyncio backend raising an opaque TypeError: cannot create weak reference to 'NoneType' object instead of a clear error when called from a callback scheduled via loop.call_soon_threadsafe() (e.g. from within from_thread.run_sync()), where asyncio.current_task() is legitimately None (#773; PR by @​AmirF194)
  • Fixed CancelScope on the asyncio backend swallowing a native Task.cancel() that was delivered in the same event loop iteration as the scope's own cancellation (such as a move_on_after() deadline expiring), which left the host task with a pending cancellation request that never raised CancelledError (#1214)
  • Fixed UDP socket closing hanging if a datagram send was still in flight (#1237; PR by @​graingert)
  • Fixed concurrent aclose_forcefully() calls on asyncio socket streams returning before the underlying socket was closed (#1273; PR by @​graingert)
  • Fixed aclose() on sockets not checkpointing, and thus failing to raise a cancellation exception when called inside a cancelled scope (affected UNIX socket streams and UNIX datagram sockets on asyncio, and all sockets on Trio) (#1288; PR by @​graingert)
  • Fixed aclose() on asyncio TCP socket listeners not checkpointing, and leaking the listening socket if cancelled while another task was waiting in accept() (#1289; PR by @​graingert)
  • Fixed accept() on asyncio UNIX socket listeners hanging forever, and leaving the listening socket registered with the event loop, when the listener was closed by another task (#1289; PR by @​graingert)
  • Fixed send() on asyncio TCP and UDP sockets returning normally, despite the data being discarded, when the socket was closed by another task (or, for TCP, the connection was lost) while send() was waiting for the operating system to accept the data (#1289; PR by @​graingert)
  • Fixed SocketStream.send() on the asyncio backend handing its data to a paused transport after a previous send() was cancelled (#1299; PR by @​graingert)
  • Fixed sleep() treating a negative delay (including -inf) inconsistently across backends (asyncio returned immediately; Trio raised ValueError) by raising ValueError on all backends (#1306; PR by @​BetterAndBetterII)
  • Fixed create_tcp_listener() occasionally failing with a message like Could not create 2 listeners with a consistent port when an ephemeral port is requested and IPv6 is enabled and the dual-stack path is not available or a specific local host name was given (#1313)
  • Fixed AsyncFile not shielding against cancellation while closing (#1314)
  • Fixed TemporaryDirectory.cleanup() reacting to cancellation prematurely when the host task was already cancelled, causing the actual cleanup operation to be skipped (#1316; PR by @​Yasser-Ameur)
  • Fixed a NaN deadline being accepted on asyncio while Trio raised ValueError, which silently disabled the timeout (fail_after(math.nan) returned instead of raising TimeoutError); CancelScope now rejects it on both backends (#1317; PR by @​dylanpulver)
  • Fixed FileReadStream and FileWriteStream leaving files open when cancelled during context manager exit, including unflushed writes (#1318; PR by @​Kuang-xianxin)
  • Fixed Condition.notify() and Condition.notify_all() failing when the underlying lock was acquired directly rather than through the condition (#1319; PR by @​GruffElixir)
  • Fixed importing AnyIO with loaders that do not provide __file__, such as PyOxidizer, raising TypeError instead of falling back to eager imports (#1322; PR by @​skulitom)
  • Fixed text receive streams silently discarding incomplete characters at end-of-file instead of applying the configured decoding error handler (#1339; PR by @​Aurelucien)
  • Fixed Semaphore(fast_acquire=True) losing its fast-acquire behavior when instantiated outside a running event loop (#1348; PR by @​feiiiiii5)
  • Fixed BlockingPortalProvider permanently failing with an AttributeError on every subsequent use if the first attempt to start its blocking portal failed (#1350; PR by @​Yasser-Ameur)
  • Fixed create_udp_socket() silently ignoring the local_port argument when local_host was omitted, making the socket bind to a random ephemeral port instead of the requested one (#1351; PR by @​januththedev)
  • Fixed worker threads on the asyncio backend never returning to the idle pool (and thus never being reused or pruned) when a to_thread.run_sync() call was cancelled after it had been queued for the worker but before the worker thread had picked it up (#1352; PR by @​Zac-HD)
  • Fixed pytest plugin running Hypothesis async tests only on the first parametrized backend instead of each backend (#1353; PR by @​DYNOSuprovo)
  • Fixed TypeError when subclassing an existing TypedAttributeSet subclass, and this subclass contains type annotations (#1358; PR by @​pasmud)
  • Fixed Lock.locked() (and Condition.locked()) raising NoEventLoopError when the lock was created outside a running event loop (#1362; PR by @​00200200)
  • Fixed connect_tcp() leaking a connected socket when an enclosing cancel scope was cancelled before the connection attempt task group exited (#1364; PR by @​charan-rathore)
  • Fixed create_connected_udp_socket() silently ignoring local_port when local_host was not given: the local address was left unset, so the OS picked an ephemeral port instead of the requested one (#1365; PR by @​feiiiiii5)
  • Fixed BlockingPortalProvider not passing the exception raised in its with block on to the start_blocking_portal() context manager it wraps (#1366; PR by @​feiiiiii5)
  • Fixed anyio.itertools.islice() not consuming the first start items when stop <= start (#1372; PR by @​Rodrigo-Palma)
  • Fixed BufferedByteReceiveStream.receive_exactly() and receive_until() returning buffered data after explicit closure instead of raising ClosedResourceError (#1378; PR by @​kokotatan)
  • Fixed a TLS stream sending records the peer could no longer decrypt after a cancelled send() lost an already-encrypted record; the stream now raises BrokenResourceError on further use instead (#1385; PR by @​Kayvan-Zahiri)
  • Fixed close() on memory object streams not waking up tasks blocked in send() or receive() on the same stream (#1391)
  • Fixed anyio.itertools.product() acquiring and consuming unused input iterables when repeat=0 (#1394; PR by @​sricharanreddycheruku)
  • Fixed SpooledTemporaryFile rolling over to disk on writes when max_size is zero (the default) (#1397; PR by @​fhgffy)
  • Fixed Trio UDP sockets remaining open when initialization failed or was cancelled (#1400; PR by @​adenzhou1350)
  • Fixed SpooledTemporaryFile.rollover() moving the current file position to the end of the file (#1401; PR by @​fhgffy)
  • Fixed cancellation during temporary directory creation leaving the directory behind while its context manager is retained (#1403; PR by @​adenzhou1350)

... (truncated)

Commits
  • 0ddd02d Released version 4.16.0
  • 576892e Fixed certain pending tasks not woken up by the closing of memory object stre...
  • 02ff4f8 Added BlockingPortal.call_async() (#1343)
  • 1af29a4 Moved documentation code snippets into separate, checked files (#1445)
  • f01c041 [pre-commit.ci] pre-commit autoupdate (#1448)
  • 95a0143 Test with blockbuster and uvloop on Python 3.15 too
  • 4d51154 Modernized the memory object stream tests
  • 1e4b448 Fixed the as_connectable() example in the networking docs (#1442)
  • cd21b36 Fixed TypedAttributeSet not collecting annotations from superclasses (#1358)
  • b7f8c68 [pre-commit.ci] pre-commit autoupdate (#1431)
  • Additional commits viewable in compare view

Updates fastapi from 0.162.0 to 0.162.2

Release notes

Sourced from fastapi's releases.

0.162.2

FastAPI includes an official skill that helps coding agents use new features and recommended patterns for your installed version. Install it with uvx library-skills in your project. See Develop with AI.

Docs

Internal

0.162.1

Docs

Translations

Internal

Commits

Updates coverage from 7.17.0 to 7.17.2

Release notes

Sourced from coverage's releases.

7.17.2

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with “attempt to write a readonly database”. These were regressions in 7.17.1. They are fixed, closing issue 2356:
    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.
    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can’t read is now reported like any other unusable data file, and is left in place.

➡️  PyPI page: coverage 7.17.2. :arrow_right:  To install: python3 -m pip install coverage==7.17.2

7.17.1

Version 7.17.1 — 2026-11-03

  • Fix: a one-line class or function body immediately followed by another statement (such as class Foo: ... on its own line) was incorrectly reported as a missing branch when using the sys.monitoring core. This is now fixed, closing issue 2167 and issue 2337.
  • Fix: the HTML report only rewrites a file’s page when the file or its data has changed, but each page also links to the previous and next files. When the set of reported files changed, unchanged pages kept their old links. For example, with skip_covered, a file that became 100% covered had its page deleted, but the pages next to it still linked to it. Now a page is also rewritten when its neighbors change.
  • Fix: --fail-under now uses at least the decimal precision of the threshold for both the comparison and failure message. With precision=0, a total of 0.4 now passes --fail-under=0.3 and fails --fail-under=0.5 with the message “total of 0.4 is less than fail-under=0.5”. Previously, the comparison rounded the total to zero and the message could claim “1 is less than 0”. Closes issue 2295.
  • Fix: the HTML report escaped file names twice, so a name with &, <, or quotes in it was shown with entities like &amp;. Now they are properly escaped only once.
  • Fix: --source=/ measured no files. A file system root can’t be a source directory, so now it is an error. Closes issue 2291.
  • In an abundance of caution, prevent forged SQLite journal files from deleting files they shouldn’t.

➡️  PyPI page: coverage 7.17.1. :arrow_right:  To install: python3 -m pip install coverage==7.17.1

Changelog

Sourced from coverage's changelog.

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with "attempt to write a readonly database". These were regressions in 7.17.1. They are fixed, closing issue 2356_:

    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.

    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can't read is now reported like any other unusable data file, and is left in place.

.. _issue 2356: coveragepy/coveragepy#2356

.. _changes_7-17-1:

Version 7.17.1 — 2026-11-03

  • Fix: a one-line class or function body immediately followed by another statement (such as class Foo: ... on its own line) was incorrectly reported as a missing branch when using the sys.monitoring core. This is now fixed, closing issue 2167_ and issue 2337_.

  • Fix: the HTML report only rewrites a file's page when the file or its data has changed, but each page also links to the previous and next files. When the set of reported files changed, unchanged pages kept their old links. For example, with skip_covered, a file that became 100% covered had its page deleted, but the pages next to it still linked to it. Now a page is also rewritten when its neighbors change.

  • Fix: --fail-under now uses at least the decimal precision of the threshold for both the comparison and failure message. With precision=0, a total of 0.4 now passes --fail-under=0.3 and fails --fail-under=0.5 with the message "total of 0.4 is less than fail-under=0.5". Previously, the comparison rounded the total to zero and the message could claim "1 is less than 0". Closes issue 2295_.

  • Fix: the HTML report escaped file names twice, so a name with &, <, or quotes in it was shown with entities like &amp;. Now they are properly escaped only once.

  • Fix: --source=/ measured no files. A file system root can't be a source directory, so now it is an error. Closes issue 2291_.

... (truncated)

Commits
  • d0d3e1d docs: combine the two 'combine' failure descriptions
  • 33cb85f fix: don't initialize a data file we can only read (#2360)
  • 6e71bac docs: prep for 7.17.2
  • 8273f72 test: fix two tests that failed on the Rocky 8 old_sqlite job
  • ce216fd build: a test environment for old version of SQLite
  • 36e4a18 fix: combine failed on SQLite<3.34.0 #2356
  • d80ed19 build: bump version to 7.17.2
  • 1941ee1 docs: prep for 7.17.1
  • 474bba1 chore: make upgrade
  • 1ab58b3 chore: bump the action-dependencies group with 6 updates (#2355)
  • Additional commits viewable in compare view

Updates zensical from 0.0.74 to 0.1.0

Release notes

Sourced from zensical's releases.

0.1.0

Zensical 0.1.0: one year in, and we're just getting started

Exactly one year ago today, we released the first version of Zensical. Today, Zensical reaches its 0.1.0 milestone.

This release closes the major remaining compatibility gaps with MkDocs, including support for many of its most widely used plugins. You can bring your existing MkDocs project to Zensical and continue using the workflows you're familiar with.

With 0.1.0, Zensical enters beta for the next three months. Thousands of projects already use it, and we expect it to work reliably in production. The beta period gives us time to gather feedback, address remaining issues, and continue refining the APIs and ecosystem. If all goes as expected, we plan to move to stable after those three months.

MkDocs compatibility has been essential to giving existing projects a path forward. It also gives us a foundation for what comes next. Our ambition is to build Zensical into a broader system for technical content: one that helps teams create, maintain, and publish across channels.

Studio brings project understanding into the editor, helping you work with connected content. Spark brings practitioners and organizations closer to our work and gives them a voice in Zensical's direction. Both are optional, and they help sustain the team behind Zensical. Zensical is and will always be free.

Thank you to everyone who has tried Zensical, reported issues, contributed, or shared what they need. This is the beginning of a much longer journey, and we're excited to build what comes next together.

Changelog

Bug fixes

  • 340c3ac – update vulnerable dependencies
  • d6fdf6e zensical, compat – preserve configured and inherited static templates
  • 0d8201a zensical, compat – validate MkDocs-compatible configuration before building
  • 3acbefe zensical, compat – align extra template paths and warnings with MkDocs
  • 1ccc67a zensical, compat – match MkDocs extra script module inference
  • ab99f8f zensical, compat – align approved MkDocs URL configuration and page links
Commits
  • bef53e1 chore: release v0.1.0
  • 535693d chore: prepare for version 0.1.0
  • 340c3ac fix: update vulnerable dependencies
  • d6fdf6e fix: preserve configured and inherited static templates
  • 0d8201a fix: validate MkDocs-compatible configuration before building
  • 8f73a59 test: description are HTML-escaped
  • 3acbefe fix: align extra template paths and warnings with MkDocs
  • 1ccc67a fix: match MkDocs extra script module inference
  • ab99f8f fix: align approved MkDocs URL configuration and page links
  • 5cf99cf chore: correct release workflow checks
  • See full diff in compare view

Updates prek from 0.5.9 to 0.5.10

Release notes

Sourced from prek's releases.

0.5.10

Release Notes

Released on 2026-11-04.

Enhancements

  • Add a builtin replace-pattern hook (#2981)

Bug fixes

  • Avoid downloading Node prereleases by default (#2995)
  • Keep file checks out of rayon's recursive frames (#2999)
  • Skip Node releases without a compatible archive (#2996)

Documentation

  • Add equivalent prek.toml examples throughout the documentation (#2979)

Contributors

Install prek 0.5.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.5.10

File Platform Checksum
prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
prek-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.10

Released on 2026-11-04.

Enhancements

  • Add a builtin replace-pattern hook (#2981)

Bug fixes

  • Avoid downloading Node prereleases by default (#2995)
  • Keep file checks out of rayon's recursive frames (#2999)
  • Skip Node releases without a compatible archive (#2996)

Documentation

  • Add equivalent prek.toml examples throughout the documentation (#2979)

Contributors

Commits

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
  • c9150f0 Add project walltime benchmarks for Ruff (#30061)
  • 64989ec [ty] Report invalid module globs once per override pattern (#30031)
  • 367a563 [ty] Fix conditional type and tuple annotations (#29987)
  • Additional commits viewable in compare view

Updates ty from 0.0.95 to 0.0.99

Release notes

Sourced from ty's releases.

0.0.99

Release Notes

Released on 2026-11-06.

Bug fixes

  • Handle output errors when generating shell completions (#29997)
  • Invalidate aliased conditions across loop iterations (#30074)

LSP server

  • Add support for workspace/willRenameFiles LSP request (#28330)

Other changes

  • Bound comparisons of wide builtin literal unions (#30052)
  • Fix call argument validation for variadic parameters (#30086)
  • Freshen method typevars before owner specialization (#29543)
  • Inform call specializations compatibility through type context (#29932)
  • Keep source place IDs out of the use-def map (#30077)
  • Preserve type structure during typevar freshening (#29803)
  • Preserve typevars when mapping leaves their bounds unchanged (#29547)
  • Preserve unions inferred during fixpoint iteration (#29927)
  • Record lexical place IDs with their uses (#29956)
  • Skip existing release artifacts when retrying mirror uploads (#4937)
  • Skip fixpoint iteration for simple generic calls (#30054)
  • Solve generic call type context through constraint sets (#26680)

Contributors

Install ty 0.0.99

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.99/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.99/ty-installer.ps1 | iex"
</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.99

Released on 2026-11-06.

Bug fixes

  • Handle output errors when generating shell completions (#29997)
  • Invalidate aliased conditions across loop iterations (#30074)

LSP server

  • Add support for workspace/willRenameFiles LSP request (#28330)

Other changes

  • Bound comparisons of wide builtin literal unions (#30052)
  • Fix call argument validation for variadic parameters (#30086)
  • Freshen method typevars before owner specialization (#29543)
  • Inform call specializations compatibility through type context (#29932)
  • Keep source place IDs out of the use-def map (#30077)
  • Preserve type structure during typevar freshening (#29803)
  • Preserve typevars when mapping leaves their bounds unchanged (#29547)
  • Preserve unions inferred during fixpoint iteration (#29927)
  • Record lexical place IDs with their uses (#29956)
  • Skip existing release artifacts when retrying mirror uploads (#4937)
  • Skip fixpoint iteration for simple generic calls (#30054)
  • Solve generic call type context through constraint sets (#26680)

Contributors

0.0.98

Released on 2026-11-05.

Bug fixes

  • Avoid cubic narrowing for enum OR patterns (#30019)
  • Avoid duplicate warnings for unknown rules and override sections (#30028)
  • Fix class-pattern exhaustiveness after class identity checks (#30045)
  • Fix conditional type and tuple annotations (#29987)
  • Prefer active unnamed Conda and Pixi environments (#29974)
  • Preserve baseline matches when a rule is renamed (#30040)
  • Preserve exception types after tuple truthiness checks (#30018)

... (truncated)

Commits

Bumps the python group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.15.1` | `4.16.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.162.0` | `0.162.2` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.17.0` | `7.17.2` |
| [zensical](https://github.com/zensical/zensical) | `0.0.74` | `0.1.0` |
| [prek](https://github.com/j178/prek) | `0.5.9` | `0.5.10` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.3` | `0.17.4` |
| [ty](https://github.com/astral-sh/ty) | `0.0.95` | `0.0.99` |
| [click](https://github.com/pallets/click) | `8.5.0` | `8.5.1` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.11.2` | `3.11.3` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.14.2` | `4.14.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.14.2` | `2.14.3` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.50.2` | `2.50.4` |
| [python-dateutil](https://github.com/dateutil/dateutil) | `3.0.0` | `4.0.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.4` | `0.4.5` |
| [watchdog](https://github.com/gorakhargosh/watchdog) | `7.0.0` | `7.1.0` |



Updates `anyio` from 4.15.1 to 4.16.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.15.1...4.16.0)

Updates `fastapi` from 0.162.0 to 0.162.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.162.0...0.162.2)

Updates `coverage` from 7.17.0 to 7.17.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.17.0...7.17.2)

Updates `zensical` from 0.0.74 to 0.1.0
- [Release notes](https://github.com/zensical/zensical/releases)
- [Commits](zensical/zensical@v0.0.74...v0.1.0)

Updates `prek` from 0.5.9 to 0.5.10
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/main/CHANGELOG.md)
- [Commits](j178/prek@v0.5.9...v0.5.10)

Updates `ruff` from 0.17.3 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.3...0.17.4)

Updates `ty` from 0.0.95 to 0.0.99
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.95...0.0.99)

Updates `click` from 8.5.0 to 8.5.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.5.0...8.5.1)

Updates `markdown` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.11.2...3.11.3)

Updates `platformdirs` from 4.14.2 to 4.14.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.14.2...4.14.5)

Updates `pydantic` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.2...v2.14.3)

Updates `pydantic-core` from 2.50.2 to 2.50.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.50.2...core-v2.50.4)

Updates `python-dateutil` from 3.0.0 to 4.0.0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@3.0.0...4.0.0)

Updates `typing-inspection` from 0.4.4 to 0.4.5
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](pydantic/typing-inspection@v0.4.4...v0.4.5)

Updates `watchdog` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/gorakhargosh/watchdog/releases)
- [Changelog](https://github.com/gorakhargosh/watchdog/blob/master/changelog.rst)
- [Commits](gorakhargosh/watchdog@v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: fastapi
  dependency-version: 0.162.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: coverage
  dependency-version: 7.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: zensical
  dependency-version: 0.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: prek
  dependency-version: 0.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.17.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ty
  dependency-version: 0.0.99
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: click
  dependency-version: 8.5.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: markdown
  dependency-version: 3.11.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: platformdirs
  dependency-version: 4.14.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.14.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pydantic-core
  dependency-version: 2.50.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: python-dateutil
  dependency-version: 4.0.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: typing-inspection
  dependency-version: 0.4.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: watchdog
  dependency-version: 7.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 11, 2026
@codspeed

codspeed Bot commented Nov 11, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 13 untouched benchmarks


Comparing dependabot/uv/python-2a7fd653d9 (af35e1c) with main (eb32e42)

Open in CodSpeed

@d3vyce
d3vyce merged commit 0865634 into main Nov 11, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-2a7fd653d9 branch November 11, 2026 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant