build(deps): bump the python-minor group across 1 directory with 5 updates by dependabot[bot] · Pull Request #193 · systemslibrarian/meow-decoder

dependabot · 2026-05-19T10:17:41Z

Bumps the python-minor group with 5 updates in the / directory:

Package	From	To
hypothesis	`6.152.4`	`6.152.8`
coverage	`7.13.5`	`7.14.0`
black	`26.3.1`	`26.5.1`
build	`1.4.4`	`1.5.0`
maturin	`1.13.1`	`1.13.3`

Updates hypothesis from 6.152.4 to 6.152.8

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.6

This patch adds a shrinking pass that tries natural text transformations - unicode decomposition (NFD/NFKD) and case mapping - on individual characters in string choices. Failures involving e.g. ""À" != "À".lower()" will now reliably shrink to ""A"" rather than sometimes getting stuck on the high-codepoint accented form (issue #4725).

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.5

This patch improves the "Phase.explain" phase so that simple cases like "assert n1 == n2" no longer get a misleading "# or any other generated value" comment (issue #4715). Before falling back to random sampling, we now also try borrowing values from each other arg slice with matching shape.

The canonical version of these notes (with links) is on readthedocs.

Commits

ec394ec Bump hypothesis-python version to 6.152.8 and update changelog
70a31fa Merge pull request #4709 from HypothesisWorks/create-pull-request/patch
ab53fc1 drop end-of-life Django 4.2
0f3d80e sort PYTHONS dict in autoupdate output
3cdf0c8 format
b5f5975 address typing changes for mypy 2.0
14f3bd4 Update pinned dependencies
adc8d2d Bump hypothesis-python version to 6.152.7 and update changelog
d66ce67 Merge pull request #4672 from CharString/annotate-filter
df88957 Merge pull request #4727 from hettlage/patch-1
Additional commits viewable in compare view

Updates coverage from 7.13.5 to 7.14.0

Changelog

Sourced from coverage's changelog.

Version 7.14.0 — 2026-05-10

Feature: now when running one of the reporting commands, if there are parallel data files that need combining, they will be implicitly combined before creating the report. There is no option to avoid the combination; let us know if you have a use case that requires it. Thanks, Tim Hatch <pull 2162_>. Closes issue 1781.

Fix: the output from combine was too verbose, listing each file considered. Now it shows a single line with the counts of files combined, files skipped, and files with errors. The -q flag suppresses this line. The old detailed lines are available with the new --debug=combine option.

Fix: running a Python file through a symlink now sets the sys.path correctly, matching regular Python behavior. Fixes issue 2157_.

Fix: Collector.flush_data could fail with "RuntimeError: Set changed size during iteration" when a tracer in another thread added a line to the per-file set that add_lines (or add_arcs) was iterating. The values passed to CoverageData are now snapshotted via dict.copy() and set.copy(), which are atomic under the GIL. Thanks, Alex Vandiver <pull 2165_>_.

Fix: the soft keyword lazy is now bolded in HTML reports.

We are no longer testing eventlet support. Eventlet started issuing stern deprecation warnings that break our tests. Our support code is still there.

.. _issue 1781: coveragepy/coveragepy#1781 .. _issue 2157: coveragepy/coveragepy#2157 .. _pull 2162: coveragepy/coveragepy#2162 .. _pull 2165: coveragepy/coveragepy#2165

.. _changes_7-13-5:

Commits

646351b docs: sample HTML for 7.14.0
39cd015 docs: prep for 7.14.0
649e8aa docs: thanks Alex Vandiver for #2165
8cd392e fix: snapshot data in Collector.flush_data to avoid threading race (#2165)
c48e0ed fix: less output for combining
c2a3a28 docs: explain the change from #2162
1cd47aa fix: implicit combine-during-report now removes the combined data files
2d99fd7 feat: automatically combine coverage in report, thanks Tim Hatch (#2162)
9fbdcdf fix: lazy soft keywords are bolded
5de7d02 build: oops, misplaced quote
Additional commits viewable in compare view

Updates black from 26.3.1 to 26.5.1

Release notes

Sourced from black's releases.

26.5.1

Stable style

Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)

Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

Correct the version in the published executables (#5137)

Documentation

Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

26.5.0

Highlights

Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)

Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)

Add syntactic support for Python 3.15 (#5048)

Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)

Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)

Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)

Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Run CI on 3.15 (#5127)

Output

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.1

Stable style

Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)

Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

Correct the version in the published executables (#5137)

Documentation

Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

Version 26.5.0

Highlights

Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)

Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)

Add syntactic support for Python 3.15 (#5048)

Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)

Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)

Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)

Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Run CI on 3.15 (#5127)

... (truncated)

Commits

87928e6 Prepare release 26.5.1 (#5140)
c970a49 Preserve comments before fmt: skip lines (#5139)
5809338 Preserve inline comments inside annotation subscripts (#5130)
61361b7 docs: add Neovim integration guide and fix http link (#5124)
ebe6018 CI Hotfixes (#5136)
9cbd95f Fix publish binaries again on Windows (#5134)
3dc8e6c Add new changelog (#5132)
6d0fff0 Fix publish binaries workflow (#5133)
d2490e2 Prepare release 26.5.0 (#5131)
2b13ea7 Preserve multiline headers with fmt skip (#5117)
Additional commits viewable in compare view

Updates build from 1.4.4 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

ci: try to improve release docs by @henryiii in pypa/build#1051

feat: drop 3.9, require 3.10+ by @henryiii in pypa/build#1036

chore: tox toml by @henryiii in pypa/build#1033

fix: api should not ignore installed, only CLI by @henryiii in pypa/build#1056

Full Changelog: pypa/build@1.4.4...1.5.0

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

Features

Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes

Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous

:issue:1033

#################### 1.4.4 (2026-04-22) ####################

Bugfixes

Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)

Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)

Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)

Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous

:issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

Features

... (truncated)

Commits

615d04c chore: prepare for 1.5.0
776f702 fix: api should not ignore installed, only CLI (#1056)
42da4c4 pre-commit: bump repositories (#1055)
b445cd2 chore: tox toml (#1033)
c44c143 feat: drop 3.9, require 3.10+ (#1036)
a9bb456 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions group...
cb33511 ci: try to improve release docs (#1051)
See full diff in compare view

Updates maturin from 1.13.1 to 1.13.3

Release notes

Sourced from maturin's releases.

v1.13.3

What's Changed

fix: disable abi3 in pyo3 config for version-specific fallback builds by @trim21 in PyO3/maturin#3180

Full Changelog: PyO3/maturin@v1.13.2...v1.13.3

v1.13.2

What's Changed

fix: resolve test failures in distro packaging environments by @messense in PyO3/maturin#3129

fix: redirect tracing output to stderr to avoid breaking PEP 517 by @chrisburr in PyO3/maturin#3131

fix: skip interpreters with empty output for WSL2 cross-compile by @plusls in PyO3/maturin#3137

fix: set explicit lib_name in pyo3 config for Android abi3 cross-compilation by @messense in PyO3/maturin#3130

chore: add sysconfig/cpython-freebsd-15.0-amd64.txt by @fleetingbytes in PyO3/maturin#3140

fix: two-phase bridge detection for conditional abi3 features by @messense in PyO3/maturin#3144

Treat pyo3 0.29.0+ as having Windows import lib support (raw-dylib) by @messense in PyO3/maturin#3145

Fix bin bindings with external shared library dependencies by @messense in PyO3/maturin#3147

Upgrade MSRV to 1.89.0 by @messense in PyO3/maturin#3149

build(deps): bump rustls-webpki from 0.103.12 to 0.103.13 by @dependabot[bot] in PyO3/maturin#3154

Musllinux oci image by @Joshix-1 in PyO3/maturin#3152

Remove Cirrus CI for FreeBSD by @messense in PyO3/maturin#3156

perf: defer stage_artifact copy-back, finalize via rename when unpatched by @pratyush618 in PyO3/maturin#3155

perf: eliminate stage_artifact double-copy, drop was_patched flag by @messense in PyO3/maturin#3157

Fix release pipeline by @messense in PyO3/maturin#3158

auditwheel: copy unpatched cargo output back before in-place patching by @messense in PyO3/maturin#3159

develop: fail loudly when pip leaves a stale ~ install behind (#1922) by @pratyush618 in PyO3/maturin#3161

Provide a link for the lib.name in Cargo.toml by @Xuanmizhen in PyO3/maturin#3167

Fix duplicated version in changelog by @robsdedude in PyO3/maturin#3171

Switch to actions/attest from attest-build-provenance by @scop in PyO3/maturin#3169

Switch generation to actions/attest action, upgrade to v4 by @scop in PyO3/maturin#3170

fix: avoid duplicate --interpreter panic in PEP 517 backend by @messense in PyO3/maturin#3175

Add trusted publishing options to generate-ci by @messense in PyO3/maturin#3176

fix(sdist): handle symlinked Cargo.toml pointing outside project root by @messense in PyO3/maturin#3178

fix: support pixi-managed virtualenvs in maturin develop by @eyupcanakman in PyO3/maturin#3165

Support PEP 783 pyemscripten_*_wasm32 wheel platform tag by @messense in PyO3/maturin#3163

New Contributors

@chrisburr made their first contribution in PyO3/maturin#3131

@plusls made their first contribution in PyO3/maturin#3137

@Joshix-1 made their first contribution in PyO3/maturin#3152

@pratyush618 made their first contribution in PyO3/maturin#3155

@Xuanmizhen made their first contribution in PyO3/maturin#3167

@scop made their first contribution in PyO3/maturin#3169

@eyupcanakman made their first contribution in PyO3/maturin#3165

Full Changelog: PyO3/maturin@v1.13.1...v1.13.2

Changelog

Sourced from maturin's changelog.

1.13.3

Fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)

1.13.2

Fix: resolve test failures in distro packaging environments (#3129)

Fix: redirect tracing output to stderr to avoid breaking PEP 517 (#3131)

Fix: skip interpreters with empty output for WSL2 cross-compile (#3137)

Fix: set explicit lib_name in pyo3 config for Android abi3 cross-compilation (#3130)

Chore: add sysconfig/cpython-freebsd-15.0-amd64.txt (#3140)

Quote python-version in generated GitHub Actions workflow

Update rustls-webpki

Fix: two-phase bridge detection for conditional abi3 features (#3144)

Update cargo-zigbuild to 0.22.2

Update pyo3 to 0.28.3

Treat pyo3 0.29.0+ as having Windows import lib support (raw-dylib) (#3145)

Fix bin bindings with external shared library dependencies (#3147)

Upgrade MSRV to 1.89.0 (#3149)

Musllinux oci image (#3152)

Remove Cirrus CI for FreeBSD (#3156)

Perf: defer stage_artifact copy-back, finalize via rename when unpatched (#3155)

Perf: eliminate stage_artifact double-copy, drop was_patched flag (#3157)

Fix release pipeline (#3158)

Auditwheel: copy unpatched cargo output back before in-place patching (#3159)

Develop: fail loudly when pip leaves a stale ~ install behind (#1922) (#3161)

Provide a link for the lib.name in Cargo.toml (#3167)

Fix duplicated version in changelog (#3171)

Switch to actions/attest from attest-build-provenance (#3169)

Switch generation to actions/attest action, upgrade to v4 (#3170)

Fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)

Add trusted publishing options to generate-ci (#3176)

Fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)

Stop install cffi for Python 3.8 in Dockerfile

Fix: support pixi-managed virtualenvs in maturin develop (#3165)

Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)

Commits

1f7e752 Release v1.13.3 (#3183)
863c990 fix: disable abi3 in pyo3 config for version-specific fallback builds (#3180)
fd70e0d Release v1.13.2
8058c01 Support PEP 783 pyemscripten_*_wasm32 wheel platform tag (#3163)
211434c fix: support pixi-managed virtualenvs in maturin develop (#3165)
8a5130d Stop install cffi for Python 3.8 in Dockerfile
4ac4d99 fix(sdist): handle symlinked Cargo.toml pointing outside project root (#3178)
dd54ac9 Add trusted publishing options to generate-ci (#3176)
e6d39af fix: avoid duplicate --interpreter panic in PEP 517 backend (#3175)
02ad7b3 build(deps): bump openssl from 0.10.78 to 0.10.79 (#3173)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the python-minor group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.152.4` | `6.152.8` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.13.5` | `7.14.0` | | [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` | | [build](https://github.com/pypa/build) | `1.4.4` | `1.5.0` | | [maturin](https://github.com/pyo3/maturin) | `1.13.1` | `1.13.3` | Updates `hypothesis` from 6.152.4 to 6.152.8 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.152.4...hypothesis-python-6.152.8) Updates `coverage` from 7.13.5 to 7.14.0 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.13.5...7.14.0) Updates `black` from 26.3.1 to 26.5.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.3.1...26.5.1) Updates `build` from 1.4.4 to 1.5.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.4.4...1.5.0) Updates `maturin` from 1.13.1 to 1.13.3 - [Release notes](https://github.com/pyo3/maturin/releases) - [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md) - [Commits](PyO3/maturin@v1.13.1...v1.13.3) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.152.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: coverage dependency-version: 7.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: black dependency-version: 26.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: build dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: maturin dependency-version: 1.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-19T10:17:43Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from systemslibrarian as a code owner May 19, 2026 10:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the python-minor group across 1 directory with 5 updates#193

build(deps): bump the python-minor group across 1 directory with 5 updates#193
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-87a361417f

dependabot Bot commented on behalf of github May 19, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hypothesis for Python - version 6.152.8

Hypothesis for Python - version 6.152.7

previously: SearchStrategy[object]

now: SearchStrategy[str]

Hypothesis for Python - version 6.152.6

Hypothesis for Python - version 6.152.5

Version 7.14.0 — 2026-05-10

26.5.1

Stable style

Packaging

Documentation

26.5.0

Highlights

Stable style

Preview style

Packaging

Output

Version 26.5.1

Stable style

Packaging

Documentation

Version 26.5.0

Highlights

Stable style

Preview style

Packaging

1.5.0

What's Changed

v1.13.3

What's Changed

v1.13.2

What's Changed

New Contributors

1.13.3

1.13.2

Uh oh!

dependabot Bot commented on behalf of github May 19, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 19, 2026 •

edited

Loading