Skip to content

build(deps): bump the minor group across 1 directory with 8 updates#400

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/main/minor-7fb2a60df5
Closed

build(deps): bump the minor group across 1 directory with 8 updates#400
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/main/minor-7fb2a60df5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025 •
edited
Loading

Bumps the minor group with 8 updates in the / directory:

Package From To
python-dotenv 1.1.1 1.2.1
componentize-py 0.17.2 0.19.3
typer 0.15.4 0.20.0
ruff 0.9.10 0.14.7
mypy 1.18.2 1.19.0
pre-commit 4.3.0 4.5.0
pydoclint 0.6.11 0.8.3
pyright 1.1.406 1.1.407

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits
  • eaf2a91 Do not remove .coverage file
  • 8716196 Bump version: 1.2.0 → 1.2.1
  • b87807f Update changelog
  • 3af77d3 Support reading .env from FIFOs (Unix) (#586)
  • 467ee22 Fix test failures after moving config to pyproject.toml
  • 76999e7 Move more config pyproject.toml
  • 222ce2c Update to use trusted publisher on pypi
  • 8ed4f79 Update docs requirements
  • 5bf8822 Bump version: 1.1.1 → 1.2.0
  • 1fe11cc upadate changelog
  • Additional commits viewable in compare view

Updates componentize-py from 0.17.2 to 0.19.3

Commits

Updates typer from 0.15.4 to 0.20.0

Release notes

Sourced from typer's releases.

0.20.0

Features

Upgrades

Internal

0.19.2

Fixes

  • 🐛 Fix list convertor with an empty list default factory . PR #1350 by @​svlandeg.

Refactors

Internal

0.19.1

Note: this is the last version to support Python 3.7, going forward Typer will require Python 3.8+. And soon Python 3.8 will also be dropped as Python 3.8 reached it's end of life almost a year ago.

Fixes

  • 🐛 Ensure that Optional[list] values work correctly with callbacks. PR #1018 by @​solesensei.

0.19.0

... (truncated)

Changelog

Sourced from typer's changelog.

0.20.0

Features

Upgrades

Internal

0.19.2

Fixes

  • 🐛 Fix list convertor with an empty list default factory . PR #1350 by @​svlandeg.

Refactors

Internal

0.19.1

Note: this is the last version to support Python 3.7, going forward Typer will require Python 3.8+. And soon Python 3.8 will also be dropped as Python 3.8 reached it's end of life almost a year ago.

Fixes

... (truncated)

Commits
  • 1b74bfe 🔖 Release version 0.20.0
  • e9ee0e7 📝 Update release notes
  • f6718b8 ✨ Enable command suggestions on typo by default (#1371)
  • ffbaed5 📝 Update release notes
  • 9e4764d ⬆️ Add support for Python 3.14 (#1372)
  • a06eb77 📝 Update release notes
  • 6cd1a9e 👷 Add nightly workflow to run tests against CPython main branch (#1374)
  • 9f38ada 📝 Update release notes
  • e0ca377 ⬆ Bump mkdocs-material from 9.6.21 to 9.6.22 (#1377)
  • dc2fd89 📝 Update release notes
  • Additional commits viewable in compare view

Updates ruff from 0.9.10 to 0.14.7

Release notes

Sourced from ruff's releases.

0.14.7

Release Notes

Released on 2025-11-28.

Preview features

  • [flake8-bandit] Handle string literal bindings in suspicious-url-open-usage (S310) (#21469)
  • [pylint] Fix PLR1708 false positives on nested functions (#21177)
  • [pylint] Fix suppression for empty dict without tuple key annotation (PLE1141) (#21290)
  • [ruff] Add rule RUF066 to detect unnecessary class properties (#21535)
  • [ruff] Catch more dummy variable uses (RUF052) (#19799)

Bug fixes

  • [server] Set severity for non-rule diagnostics (#21559)
  • [flake8-implicit-str-concat] Avoid invalid fix in (ISC003) (#21517)
  • [parser] Fix panic when parsing IPython escape command expressions (#21480)

CLI

  • Show partial fixability indicator in statistics output (#21513)

Contributors

Install ruff 0.14.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.7/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.14.7/ruff-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.7

Released on 2025-11-28.

Preview features

  • [flake8-bandit] Handle string literal bindings in suspicious-url-open-usage (S310) (#21469)
  • [pylint] Fix PLR1708 false positives on nested functions (#21177)
  • [pylint] Fix suppression for empty dict without tuple key annotation (PLE1141) (#21290)
  • [ruff] Add rule RUF066 to detect unnecessary class properties (#21535)
  • [ruff] Catch more dummy variable uses (RUF052) (#19799)

Bug fixes

  • [server] Set severity for non-rule diagnostics (#21559)
  • [flake8-implicit-str-concat] Avoid invalid fix in (ISC003) (#21517)
  • [parser] Fix panic when parsing IPython escape command expressions (#21480)

CLI

  • Show partial fixability indicator in statistics output (#21513)

Contributors

0.14.6

Released on 2025-11-21.

Preview features

  • [flake8-bandit] Support new PySNMP API paths (S508, S509) (#21374)

Bug fixes

  • Adjust own-line comment placement between branches (#21185)
  • Avoid syntax error when formatting attribute expressions with outer parentheses, parenthesized value, and trailing comment on value (#20418)
  • Fix panic when formatting comments in unary expressions (#21501)
  • Respect fmt: skip for compound statements on a single line (#20633)
  • [refurb] Fix FURB103 autofix (#21454)

... (truncated)

Commits

Updates mypy from 1.18.2 to 1.19.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy no longer supports running with Python 3.9, which has reached end-of-life. When running mypy with Python 3.10+, it is still possible to type check code that needs to support Python 3.9 with the --python-version 3.9 argument. Support for this will be dropped in the first half of 2026!

Contributed by Marc Mueller (PR 20156).

Mypy 1.19

We’ve just uploaded mypy 1.19.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.9 Support Ending Soon

This is the last mypy feature release that supports Python 3.9, which reached end of life in October 2025.

Performance Improvements

  • Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR 20053)
  • Speed up type aliases (Ivan Levkivskyi, PR 19810)

Fixed‑Format Cache Improvements

Mypy uses a cache by default to speed up incremental runs by reusing partial results from earlier runs. Mypy 1.18 added a new binary fixed-format cache representation as an experimental feature. The feature is no longer experimental, and we are planning to enable it by default in a future mypy release (possibly 1.20), since it's faster and uses less space than the original, JSON-based cache format. Use --fixed-format-cache to enable the fixed-format cache.

Mypy now has an extra dependency on the librt PyPI package, as it's needed for cache serialization and deserialization.

Mypy ships with a tool to convert fixed-format cache files to the old JSON format. Example of how to use this:

$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff

... (truncated)

Commits

Updates pre-commit from 4.3.0 to 4.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

Changelog

Sourced from pre-commit's changelog.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

Commits
  • 1af6c8f v4.5.0
  • 3358a3b Merge pull request #3585 from pre-commit/hazmat
  • bdf6879 add pre-commit hazmat
  • e436690 Merge pull request #3584 from pre-commit/exitstack
  • 8d34f95 use ExitStack instead of start + stop
  • 9c7ea88 Merge pull request #3583 from pre-commit/forward-compat-map-manifest
  • 844dacc add forward-compat error message
  • 6a1d543 Merge pull request #3582 from pre-commit/move-gc-back
  • 66278a9 move logic for gc back to commands.gc
  • 1b32c50 Merge pull request #3579 from pre-commit/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates pydoclint from 0.6.11 to 0.8.3

Release notes

Sourced from pydoclint's releases.

0.8.3

What's Changed

Full Changelog: jsh9/pydoclint@0.8.2...0.8.3

0.8.2

What's Changed

Full Changelog: jsh9/pydoclint@0.8.1...0.8.2

0.8.1

What's Changed

Full Changelog: jsh9/pydoclint@0.8.0...0.8.1

0.8.0

What's Changed

Full Changelog: jsh9/pydoclint@0.7.6...0.8.0

0.7.6

What's Changed

Full Changelog: jsh9/pydoclint@0.7.5...0.7.6

0.7.5

What's Changed

New Contributors

Full Changelog: jsh9/pydoclint@0.7.4...0.7.5

0.7.4

What's Changed

... (truncated)

Changelog

Sourced from pydoclint's changelog.

[0.8.3] - 2025-11-26

  • Added
    • A new config option --omit-stars-when-documenting-varargs (shortform: -oswdv) so docstrings may describe varargs without the leading * characters (jsh9/pydoclint#268)
  • Fixed
    • A bug where --auto-regenerate-baseline removes entries of files that have not yet been fixed (jsh9/pydoclint#274)
  • Full diff

[0.8.2] - 2025-11-21

  • Added
    • Ability to partially match violation codes in inline noqa in the native mode (which flake8 already supports)
  • Fixed
    • A bug: when there are more than one __init__() in a class (overloaded), the first __init__() is incorrectly recognized as the "right" one. (The last __init__() should be considered the right one.)
  • Full diff

[0.8.1] - 2025-11-03

  • Changed
    • The logic to detect docstring style mismatches, fixing a false positive case where non-Sphinx style docstrings are detected as Sphinx style (because there are some rST keywords in them)
  • Full diff

[0.8.0] - 2025-11-03

  • Added
    • New functionality: pydoclint native mode can parse "noqa" comments and thus users can suppress violations in the native mode.
  • Full diff

[0.7.6] - 2025-10-26

  • Changed
    • Updated linter and auto-formatter configurations
    • Made a lot of changes to fix code style; some logic was also updated per the suggestions of linters
  • Full diff

... (truncated)

Commits
  • 98bb10c Add config option to allow omitting stars in varargs (#277)
  • c37407d Fix baseline renegeration bug (#276)
  • 3386cd2 Fix baseline renegeration bug (#275)
  • 8c10818 Fix how multiple init() are recognized (#273)
  • 51435e3 Add ability to partially match violation codes (#272)
  • e361239 Change logic to detect docstring style mismatch (#271)
  • bf4c402 Add hyperlink
  • a758527 Update --check-style-mismatch explanations in config_options.md
  • e8ffd89 Add inline violation suppression for native mode (#270)
  • 0a9ad0c Refresh linters & formatters (#269)
  • Additional commits viewable in compare view

Updates pyright from 1.1.406 to 1.1.407

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor group across 1 directory with 8 updates
70413e5 
Bumps the minor group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` |
| [componentize-py](https://github.com/bytecodealliance/componentize-py) | `0.17.2` | `0.19.3` |
| [typer](https://github.com/fastapi/typer) | `0.15.4` | `0.20.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.9.10` | `0.14.7` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.0` |
| [pydoclint](https://github.com/jsh9/pydoclint) | `0.6.11` | `0.8.3` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.406` | `1.1.407` |



Updates `python-dotenv` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1)

Updates `componentize-py` from 0.17.2 to 0.19.3
- [Release notes](https://github.com/bytecodealliance/componentize-py/releases)
- [Commits](https://github.com/bytecodealliance/componentize-py/commits)

Updates `typer` from 0.15.4 to 0.20.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.15.4...0.20.0)

Updates `ruff` from 0.9.10 to 0.14.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.9.10...0.14.7)

Updates `mypy` from 1.18.2 to 1.19.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.18.2...v1.19.0)

Updates `pre-commit` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.0)

Updates `pydoclint` from 0.6.11 to 0.8.3
- [Release notes](https://github.com/jsh9/pydoclint/releases)
- [Changelog](https://github.com/jsh9/pydoclint/blob/main/CHANGELOG.md)
- [Commits](jsh9/pydoclint@0.6.11...0.8.3)

Updates `pyright` from 1.1.406 to 1.1.407
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.406...v1.1.407)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: componentize-py
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: typer
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: ruff
  dependency-version: 0.14.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: mypy
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pre-commit
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pydoclint
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: pyright
  dependency-version: 1.1.407
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 1, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Dec 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 8, 2025
@dependabot dependabot bot deleted the dependabot/uv/main/minor-7fb2a60df5 branch December 8, 2025 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants