Bump the uv group across 1 directory with 5 updates by dependabot[bot] · Pull Request #12 · 6AMStuff/streamrip

dependabot · 2026-07-03T11:36:27Z

Bumps the uv group with 5 updates in the / directory:

Package	From	To
mutagen	`1.47.0`	`1.48.1`
anyio	`4.13.0`	`4.14.1`
certifi	`2026.5.20`	`2026.6.17`
ruff	`0.15.17`	`0.15.20`
pytest	`9.0.3`	`9.1.1`

Updates mutagen from 1.47.0 to 1.48.1

Release notes

Sourced from mutagen's releases.

release-1.48.1

https://mutagen.readthedocs.io/en/latest/changelog.html#release-1-48-1

release-1.48.0

https://mutagen.readthedocs.io/en/latest/changelog.html#release-1-48-0

Changelog

Sourced from mutagen's changelog.

1.48.1 - 2026-06-25

Revert: ID3: Fix saving ID3v2 comment fields from COMM:desc:lang tags to fix duplicated COMM frames in some cases. :pr:713

.. _release-1.48.0:

1.48.0 - 2026-06-22

Drop Support for Python 3.7, 3.8 and 3.9 :pr:611 :pr:657 :pr:689

ID3: Add salt attribute to APIC frames to allow multiple APIC frames with identical descriptions :pr:675

ID3: Preserve order of APIC frames relative to each other when saving 🐛436 :pr:676

ID3: Fix reading/writing v1.0 and v1.1 comment/track fields 🐛668 :pr:686

ID3: Fix saving ID3v2 comment fields from COMM:desc:lang tags 🐛660 :pr:709

ID3: Consider size of extended header when reading ID3 data 🐛630 :pr:631

EasyID3: Fix handling of albumartistsort as TSO2 with TXXX:ALBUMARTISTSORT fallback for reading :pr:649

MP3: do not fail on non-ASCII lame header version flags :pr:664

OggOpus: Provide a bitrate property 🐛475 :pr:704

MP4: Fall back to parsing length from mvhd if there is no trak info :pr:682

MP4: Fix chapter timestamp parsing 🐛639 :pr:640

OGG: Fix saving files with trailing null bytes 🐛591 :pr:674

mid3v2: Fix --list-frames-v2.2 option 🐛669 :pr:683

Set __cause__ on MutagenError to preserve exception chain 🐛703 :pr:710

Explicitly define exports with __all__ in mutagen/__init__.py 🐛647 :pr:696

docs: Fix code example for :class:flac.Picture :pr:673

docs: Initial :doc:dev/index with implementation notes for ID3 :pr:633

Switch from poetry to uv for development :pr:687

Changed the default branch from master to main

.. _release-1.47.0:

Commits

452190d release
4a43d97 Revert "id3v1: save comment when COMM frame is stored under its HashKey" (#713)
485f532 release
4d2a92f wavpack: use WavPackHeaderError in tests, avoid re-export import
bdef87c mypy: enable no_implicit_reexport
2e6090b mypy: fix typing errors in the test suite
91d9f9e Updated NEWS
50576eb Merge pull request #649 from antlarr/fix-TSO2
5838d71 Added missing PR link to NEWS
c4ec7c2 Update NEWS with changes pending for next release
Additional commits viewable in compare view

Updates anyio from 4.13.0 to 4.14.1

Release notes

Sourced from anyio's releases.

4.14.1

Fixed teardown of higher-scoped async fixtures failing on asyncio with RuntimeError: Attempted to exit cancel scope in a different task than it was entered in when an async test raise an outcome exception (e.g., pytest.skip(), pytest.xfail(), or pytest.fail()) (#1179; PR by @EmmanuelNiyonshuti)

Fixed CapacityLimiter.total_tokens rejecting a value of 0 when the limiter was instantiated outside of an event loop, contradicting the documented behavior of allowing 0 total tokens (#1183; PR by @nyxst4ck)

4.14.0

Added support for Python 3.15

Added an asynchronous implementation of the itertools module (#998; PR by @11kkw)

Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @nullwiz)

Added support for custom capacity limiters in async path and file I/O functions and classes

Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

Changed TaskGroup.start_soon() to return a TaskHandle

Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @EmmanuelNiyonshuti)

Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @EmmanuelNiyonshuti)

Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @SAY-5)

Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

TaskGroup.start_soon()

TaskGroup.start()

anyio.from_thread.run()

This reverts an earlier change from v3.7.0 which was made in error. (#1153)

Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @gschaffner)

Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

anyio.CancelScope

anyio.CapacityLimiter

anyio.Condition

anyio.Event

anyio.Lock

anyio.ResourceGuard

anyio.Semaphore

Fixed cancellation exception escaping a cancel scope when triggered via check_cancelled() in a worker thread (#1113)

Fixed TaskGroup raising AttributeError instead of a clear error when entered more than once (#1109; PR by @bahtya)

... (truncated)

Commits

149b9e9 Bumped up the version
377518c Bump actions/checkout from 6 to 7 in the github-actions group (#1186)
b42a2f5 [pre-commit.ci] pre-commit autoupdate (#1185)
3ceb6ff Allow 0 tokens in a CapacityLimiter instantiated outside an event loop (#1183)
e10d1db Add missing await to open_file() in file I/O concurrency example (#1182)
1dbc3b6 OutcomeException should not discard test runner_task (#1180)
ffe9133 Bumped up the version
f8b9f01 Fixed asyncio lock waiter deadlocks after cancellation (#1145)
d517ee1 [pre-commit.ci] pre-commit autoupdate (#1176)
550b68e Make anyio.run support Awaitable at runtime on all backends (#1171)
Additional commits viewable in compare view

Updates certifi from 2026.5.20 to 2026.6.17

Commits

d0ac52f 2026.06.17 (#418)
d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
6c183ec fix: update Requests docs link to canonical URL (#415)
36e3568 Bump dessant/lock-threads from 6.0.0 to 6.0.2
See full diff in compare view

Updates ruff from 0.15.17 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

Allow human-readable names in rule selectors (#25887)

Emit a warning instead of an error for unknown rule selectors (#26113)

Match noqa shebang handling in ruff:ignore comments (#26286)

[ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

Add versioning sections to custom crate READMEs (#26317)

Update ruff_python_parser README for crates.io (#26315)

[perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

@dhruvmanila

@MichaReiser

@ntBre

@trilamsr

Install ruff 0.15.20

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"
Download ruff 0.15.20

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ruff-i686-pc-windows-msvc.zip x86 Windows checksum

ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

Allow human-readable names in rule selectors (#25887)

Emit a warning instead of an error for unknown rule selectors (#26113)

Match noqa shebang handling in ruff:ignore comments (#26286)

[ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

Add versioning sections to custom crate READMEs (#26317)

Update ruff_python_parser README for crates.io (#26315)

[perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

@dhruvmanila

@MichaReiser

@ntBre

@trilamsr

0.15.19

Released on 2026-06-23.

Preview features

Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

Fall back to default settings when editor-only settings are invalid (#26244)

Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

[pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

Avoid allocating when parsing single string literals (#26200)

Avoid reallocating singleton call arguments (#26223)

Lazily create source files for lint diagnostics (#26226)

Optimize formatter text width and indentation (#26236)

Reserve capacity for builtin bindings (#26229)

Skip repeated-key checks for singleton dictionaries (#26228)

Use ArrayVec for qualified name segments (#26224)

... (truncated)

Commits

f82a36b Bump 0.15.20 (#26376)
af32943 Improve the summarise-ecosystem-results skill (#26378)
485ebab Remove RUF076 name from schema (#26371)
ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
f703f21 Allow human-readable names in rule selectors (#25887)
0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
dbe6e98 [ty] Infer definite equality comparison results (#26337)
e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mutagen](https://github.com/quodlibet/mutagen) | `1.47.0` | `1.48.1` | | [anyio](https://github.com/agronholm/anyio) | `4.13.0` | `4.14.1` | | [certifi](https://github.com/certifi/python-certifi) | `2026.5.20` | `2026.6.17` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.15.20` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | Updates `mutagen` from 1.47.0 to 1.48.1 - [Release notes](https://github.com/quodlibet/mutagen/releases) - [Changelog](https://github.com/quodlibet/mutagen/blob/main/NEWS) - [Commits](quodlibet/mutagen@release-1.47.0...release-1.48.1) Updates `anyio` from 4.13.0 to 4.14.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.13.0...4.14.1) Updates `certifi` from 2026.5.20 to 2026.6.17 - [Commits](certifi/python-certifi@2026.05.20...2026.06.17) Updates `ruff` from 0.15.17 to 0.15.20 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.17...0.15.20) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) --- updated-dependencies: - dependency-name: mutagen dependency-version: 1.48.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv - dependency-name: anyio dependency-version: 4.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv - dependency-name: certifi dependency-version: 2026.6.17 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv - dependency-name: ruff dependency-version: 0.15.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-07-03T11:43:02Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the uv group across 1 directory with 5 updates#12

Bump the uv group across 1 directory with 5 updates#12
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/uv-eec6f92c2c

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

codacy-production Bot commented Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 3, 2026

release-1.48.1

release-1.48.0

1.48.1 - 2026-06-25

1.48.0 - 2026-06-22

4.14.1

4.14.0

0.15.20

Release Notes

Preview features

Documentation

Contributors

Install ruff 0.15.20

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.15.20

0.15.20

Preview features

Documentation

Contributors

0.15.19

Preview features

Bug fixes

Rule changes

Performance

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

Uh oh!

codacy-production Bot commented Jul 3, 2026

Up to standards ✅

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants