Skip to content

chore(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates#24

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python/python-minor-patch-ccd585f344
Closed

chore(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates#24
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python/python-minor-patch-ccd585f344

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the python-minor-patch group with 3 updates in the /python directory: hypothesis, mypy and ruff.

Updates hypothesis from 6.122.1 to 6.152.4

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.4

This patch fixes a rare internal error during "Phase.explain" introduced in version 6.149.0 for certain strategies (issue #4708).

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.3

The "hypothesis-urandom" backend now reads from "/dev/urandom" with buffering disabled, which improves the control of those hooking "/dev/urandom" to change or read Hypothesis's random decisions.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.2

This release further improves printing of generated values, building on the changes in version 6.151.11.

Principle changes:

  • In many cases where we would have printed a complex expression producing a value, we now print the repr (or a pretty-printed version of it).

  • Additionally, in some cases where we would print a complex expression that involved a lambda, we are now able to simplify that expression into a more readable one.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.1

Improve some internal type hints.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.0

Hypothesis generally recommends that the ".hypothesis" directory not be checked into version control. As a result, Hypothesis now automatically creates a ".gitignore" with "*" in the ".hypothesis" directory, which excludes it from being tracked by git.

If you do want to check ".hypothesis" into git, you can remove the ".gitignore" file. Hypothesis will not re-create it unless the entire ".hypothesis" directory is removed.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.151.14

This patch fixes our "from_regex()" type annotations so that "from_regex(..., alphabet=None)" is accepted.

... (truncated)

Commits
  • 84f92dc Bump hypothesis-python version to 6.152.4 and update changelog
  • c6814df Merge pull request #4717 from HypothesisWorks/DRMacIver/issue4708
  • 82e9446 Address PR review feedback
  • c77d7e7 Merge pull request #4719 from Liam-DeVoe/fix-mobile-word-wrapping
  • 609de04 Bump hypothesis-python version to 6.152.3 and update changelog
  • 902f1ba Merge pull request #4720 from Liam-DeVoe/urandom-disable-buffering
  • da81118 claude: open /dev/urandom with buffering=0 in URandomProvider
  • 4d6a7f0 fix footnote overflow on mobile
  • 80fada3 Merge pull request #4714 from HypothesisWorks/DRMacIver/uv
  • 4b554b0 Fix AssertionError in Shrinker.explain() for unstable span labels
  • Additional commits viewable in compare view

Updates mypy from 1.14.0 to 1.20.2

Changelog

Sourced from mypy's changelog.

Mypy 1.20.2

  • Use WAL with SQLite cache and fix close (Shantanu, PR 21154)
  • Adjust SQLite journal mode (Ivan Levkivskyi, PR 21217)
  • Correctly aggregate narrowing information on parent expressions (Shantanu, PR 21206)
  • Fix regression related to generic callables (Shantanu, PR 21208)
  • Fix regression by avoiding widening types in some contexts (Shantanu, PR 21242)
  • Fix slicing in non-strict optional mode (Shantanu, PR 21282)
  • mypyc: Fix match statement semantics for "or" pattern (Shantanu, PR 21156)
  • mypyc: Fix issue with module dunder attributes (Piotr Sawicki, PR 21275)
  • Initial support for Python 3.15.0a8 (Marc Mueller, PR 21255)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • A5rocks
  • Aaron Wieczorek
  • Adam Turner
  • Ali Hamdan
  • asce
  • BobTheBuidler
  • Brent Westbrook
  • Brian Schubert
  • bzoracler
  • Chris Burroughs
  • Christoph Tyralla
  • Colin Watson
  • Donghoon Nam
  • E. M. Bray
  • Emma Smith
  • Ethan Sarp
  • George Ogden
  • getzze
  • grayjk
  • Gregor Riepl
  • Ivan Levkivskyi
  • James Hilliard
  • James Le Cuirot
  • Jeremy Nimmer
  • Joren Hammudoglu
  • Kai (Kazuya Ito)
  • kaushal trivedi
  • Kevin Kannammalil
  • Lukas Geiger
  • Łukasz Langa
  • Marc Mueller
  • Michael R. Crusoe
  • michaelm-openai
  • Neil Schemenauer
  • Piotr Sawicki

... (truncated)

Commits

Updates ruff from 0.8.4 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits
  • 66f93cf Bump 0.15.12 (#24815)
  • 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
  • ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
  • e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
  • 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
  • 0fbf2bc Drop deprecated license classifier (#24808)
  • 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
  • 4f449ae [ty] Add error context for intersection types (#24772)
  • 5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
  • e7cc762 [ty] Add error context for TypedDict assignments (#24790)
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: area:python, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from manav8498 as a code owner April 27, 2026 03:31
@dependabot dependabot Bot changed the title chore(deps-dev): bump the python-minor-patch group in /python with 3 updates build(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates Apr 27, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch 4 times, most recently from d8ba8df to 0e5420f Compare April 28, 2026 00:27
@dependabot dependabot Bot changed the title build(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates chore(deps-dev): bump the python-minor-patch group across 1 directory with 3 updates Apr 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch 5 times, most recently from 4985572 to a9ed089 Compare April 29, 2026 03:54
@manav8498 manav8498 force-pushed the main branch 4 times, most recently from 48187e3 to ae70c9e Compare April 29, 2026 16:08
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch 4 times, most recently from 3c09de8 to 4a8c151 Compare May 3, 2026 05:23
@manav8498
Copy link
Copy Markdown
Owner

@dependabot rebase

… with 3 updates

Bumps the python-minor-patch group with 3 updates in the /python
directory: [hypothesis](https://github.com/HypothesisWorks/hypothesis),
[mypy](https://github.com/python/mypy) and
[ruff](https://github.com/astral-sh/ruff).

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch from 4a8c151 to 9aa2daa Compare May 5, 2026 07:17
manav8498 added a commit that referenced this pull request May 5, 2026
* softprops/action-gh-release@v2 → v3 (closes #19)
* actions/deploy-pages@v4 → v5 (closes #20)

Both are single-line workflow-only changes that don't affect PR
CI (release.yml fires on tag push; docs.yml on main push). The
dependabot PRs were blocked on the DCO check because dependabot's
commits aren't signed; landing the same change as a signed
maintainer commit clears that without requiring per-PR rebase.

Skipping the higher-risk PRs for the v3.1.0 launch:
  * #18 dtolnay/rust-toolchain 1.95.0→1.100.0 (cargo-test
    failures need investigation)
  * #21 actions/download-artifact v4→v8 (4-major-version jump)
  * #22 actions/upload-artifact v4→v7 (3-major-version jump)
  * #24 hypothesis/mypy/ruff dev-dep group (ruff 0.15 surfaces
    new lint rules; bundle for a follow-up)
  * #31 rust crate minor patches (low-risk, defer to post-launch)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: manav8498 <manavpatel91570@gmail.com>
@manav8498
Copy link
Copy Markdown
Owner

Deferred to post-v3.1.0 follow-up. Tracking summary in 9728a49 commit message — needs more careful review than a launch-day merge can give it.

manav8498 added a commit that referenced this pull request May 5, 2026
* softprops/action-gh-release@v2 → v3 (closes #19)
* actions/deploy-pages@v4 → v5 (closes #20)

Both are single-line workflow-only changes that don't affect PR
CI (release.yml fires on tag push; docs.yml on main push). The
dependabot PRs were blocked on the DCO check because dependabot's
commits aren't signed; landing the same change as a signed
maintainer commit clears that without requiring per-PR rebase.

Skipping the higher-risk PRs for the v3.1.0 launch:
  * #18 dtolnay/rust-toolchain 1.95.0→1.100.0 (cargo-test
    failures need investigation)
  * #21 actions/download-artifact v4→v8 (4-major-version jump)
  * #22 actions/upload-artifact v4→v7 (3-major-version jump)
  * #24 hypothesis/mypy/ruff dev-dep group (ruff 0.15 surfaces
    new lint rules; bundle for a follow-up)
  * #31 rust crate minor patches (low-risk, defer to post-launch)

Signed-off-by: manav8498 <manavpatel91570@gmail.com>
@manav8498 manav8498 force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch from 9aa2daa to b303da4 Compare May 5, 2026 23:45
@manav8498 manav8498 force-pushed the dependabot/pip/python/python-minor-patch-ccd585f344 branch from b303da4 to 5ba0bf3 Compare May 5, 2026 23:59
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 11, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 11, 2026
@dependabot dependabot Bot deleted the dependabot/pip/python/python-minor-patch-ccd585f344 branch May 11, 2026 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant