Skip to content

Bump the python group with 2 updates#3695

Merged
mergify[bot] merged 1 commit into
mainfrom
dependabot/pip/python-8cdc1c67ed
Jun 15, 2026
Merged

Bump the python group with 2 updates#3695
mergify[bot] merged 1 commit into
mainfrom
dependabot/pip/python-8cdc1c67ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Bumps the python group with 2 updates: uv and ruff.

Updates uv from 0.11.19 to 0.11.21

Release notes

Sourced from uv's releases.

0.11.21

Release Notes

Released on 2026-06-11.

Python

  • Add CPython 3.13.14 and 3.14.6 (#19787)

Preview features

  • Add environment.root to uv workspace metadata --sync (#19760)
  • Allow uv upgrade to update a single dependency constraint (#19738)
  • Compute and pass uv workspace metadata payload in ty check (#19763)
  • Make packaged applications the default for uv init (#17841)

Performance

  • Add parallel discovery of Python versions for uv python list (#18684)
  • Avoid normalizing source distribution names twice (#19784)

Bug fixes

  • Improve cache robustness and pruning behavior
    • Allow CI cache pruning without an sdist bucket (#19802)
    • Avoid overflow when reading malformed cache entries (#19799)
    • Preserve cached Python downloads during cache pruning (#19795)
    • Reject running inside the cache (#19659)
  • Fix Python discovery and version request edge cases
    • Avoid panics for Unicode Python version requests (#19797)
    • Fix handling of non-critical errors in uv python list with path requests (#19774)
    • Fix stop-discovery-at regression (#19769)
  • Harden parsing and validation for package metadata, requirements, markers, URLs, and conflict sets
    • Allow trailing commas in version specifiers (#19806)
    • Avoid panics for invalid UTF-8 URL credentials (#19800)
    • Avoid panics for malformed source distribution filenames (#19776)
    • Avoid panics for trailing extra separators (#19779)
    • Avoid stack overflow for recursive requirements path aliases (#19777)
    • Ignore reversed string compatible-release markers (#19782)
    • Reject duplicate entries in conflict sets (#19801)
    • Reject malformed hash options in requirements files (#19783)
    • Reject source distribution filenames without a separator (#19803)
    • Use UTF-8 lengths for requirement errors (#19781)
    • Use UTF-8 lengths for trailing marker errors (#19796)
    • Use byte offsets when peeking over requirements (#19780)
    • Validate GraalPy ABI suffixes (#19805)
  • Improve wheel entry-point error handling and virtual environment activation quoting
    • Propagate errors when reading wheel entry points (#19794)
    • Quote virtual environment activation paths with shell metacharacters (#19798)

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.21

Released on 2026-06-11.

Python

  • Add CPython 3.13.14 and 3.14.6 (#19787)

Preview features

  • Add environment.root to uv workspace metadata --sync (#19760)
  • Allow uv upgrade to update a single dependency constraint (#19738)
  • Compute and pass uv workspace metadata payload in ty check (#19763)
  • Make packaged applications the default for uv init (#17841)

Performance

  • Add parallel discovery of Python versions for uv python list (#18684)
  • Avoid normalizing source distribution names twice (#19784)

Bug fixes

  • Improve cache robustness and pruning behavior
    • Allow CI cache pruning without an sdist bucket (#19802)
    • Avoid overflow when reading malformed cache entries (#19799)
    • Preserve cached Python downloads during cache pruning (#19795)
    • Reject running inside the cache (#19659)
  • Fix Python discovery and version request edge cases
    • Avoid panics for Unicode Python version requests (#19797)
    • Fix handling of non-critical errors in uv python list with path requests (#19774)
    • Fix stop-discovery-at regression (#19769)
  • Harden parsing and validation for package metadata, requirements, markers, URLs, and conflict sets
    • Allow trailing commas in version specifiers (#19806)
    • Avoid panics for invalid UTF-8 URL credentials (#19800)
    • Avoid panics for malformed source distribution filenames (#19776)
    • Avoid panics for trailing extra separators (#19779)
    • Avoid stack overflow for recursive requirements path aliases (#19777)
    • Ignore reversed string compatible-release markers (#19782)
    • Reject duplicate entries in conflict sets (#19801)
    • Reject malformed hash options in requirements files (#19783)
    • Reject source distribution filenames without a separator (#19803)
    • Use UTF-8 lengths for requirement errors (#19781)
    • Use UTF-8 lengths for trailing marker errors (#19796)
    • Use byte offsets when peeking over requirements (#19780)
    • Validate GraalPy ABI suffixes (#19805)
  • Improve wheel entry-point error handling and virtual environment activation quoting
    • Propagate errors when reading wheel entry points (#19794)
    • Quote virtual environment activation paths with shell metacharacters (#19798)

0.11.20

... (truncated)

Commits

Updates ruff from 0.15.16 to 0.15.17

Release notes

Sourced from ruff's releases.

0.15.17

Release Notes

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.17

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Commits
  • 7c645a9 Bump 0.15.17 (#25872)
  • f381eb1 Prioritize human-readable names in CLI output (#25869)
  • b9b4546 Minor workflow simplification (#25870)
  • 1e77ba0 [ty] Move PreformattedBlockScanner to format-agnostic location. (#25856)
  • 6f2b772 [ty] Preserve nominal type of enum.property instances (#25849)
  • be4777c [ty] Fix site-package error when multiple versions of pythons are installed i...
  • 53f6ff7 Allow human-readable names in suppression comments (#25614)
  • 6740325 [ty] Restrict uncached raw signature access (#25866)
  • 970b1bf Auto-update snapshots when syncing typeshed (#25841)
  • 0785793 Fix handling of ignore comments within a disable/enable pair (#25845)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 2 updates: [uv](https://github.com/astral-sh/uv) and [ruff](https://github.com/astral-sh/ruff).


Updates `uv` from 0.11.19 to 0.11.21
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.19...0.11.21)

Updates `ruff` from 0.15.16 to 0.15.17
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.16...0.15.17)

---
updated-dependencies:
- dependency-name: uv
  dependency-version: 0.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.15.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 15, 2026
@mergify mergify Bot merged commit c218b78 into main Jun 15, 2026
33 checks passed
@mergify mergify Bot deleted the dependabot/pip/python-8cdc1c67ed branch June 15, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants