build(deps): bump the uv-dependencies group across 1 directory with 7 updates

[dependabot]

Updates the requirements on click, pyinstaller, basedpyright, poethepoet, pre-commit, ruff and uv-build to permit the latest version.
Updates click from 8.3.2 to 8.4.0

Release notes

Sourced from click's releases.

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

• ParamType typing improvements. #3371

  • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
  • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
  • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
  • :class:CompositeParamType and the number-range base are now generic with abstract methods.

• Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

• Parameter typing improvements. #2805

  • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
  • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
  • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

• Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. #2745 #3364

• Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. #2012 #3363

• The error hint now uses Command.get_help_option_names to pick non-shadowed help option names, so Try '... -h' no longer points to a subcommand option that shadows -h. All surviving names are shown (-h/--help). #2790 #3208

• Fix readline functionality on non-Windows platforms. Prompt text is now passed directly to readline instead of being printed separately, allowing proper backspace, line editing, and line wrapping behavior. #2968

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.0

Released 2026-05-17

• :class:ParamType typing improvements. :pr:3371

  • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
  • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
  • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
  • :class:CompositeParamType and the number-range base are now generic with abstract methods.

• Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

• :class:Parameter typing improvements. :pr:2805

  • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
  • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
  • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

• Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

• Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

• The error hint now uses :meth:Command.get_help_option_names to pick non-shadowed help option names, so Try '... -h' no longer points to a subcommand option that shadows -h. All surviving names are shown (-h/--help). :issue:2790 :pr:3208

• Fix readline functionality on non-Windows platforms. Prompt text is now passed directly to readline instead of being printed separately, allowing proper backspace, line editing, and line wrapping behavior. :issue:2968 :pr:2969

• Use :func:os.startfile on Windows to open URLs in :func:open_url, replacing the start built-in which cannot be invoked without shell=True. :issue:3164 :pr:3186

• Fix Fish shell completion errors when option help text contains newlines. :issue:3043 :pr:3126

... (truncated)

Commits

• 41f410f Release 8.4.0
• e3e69e3 Add type annotations for instance attributes in utils (#3422)
• 3bb230d WIP: Fix HelpFormatter.write_usage producing spurious characters (#3434)
• 63274a7 click.get_pager_file: add tests (#1572 followup) (#3405)
• 0551bf5 Fix HelpFormatter.write_usage producing spurious characters
• fc41aa1 Apply class-body annotations to KeepOpenFile for consistency
• b761eda Skip some tests on Windows
• 98302ac Check PAGER usage, color preservation and edge-cases
• dbdae17 Fix documentation
• 1aa2d53 Redesigned tests and get_pager_file branching to be more clear and not set color
• Additional commits viewable in compare view

Updates pyinstaller from 6.19.0 to 6.20.0

Release notes

Sourced from pyinstaller's releases.

v6.20.0

Please see the v6.20.0 section of the changelog for a list of the changes since v6.19.0.

Changelog

Sourced from pyinstaller's changelog.

6.20.0 (2026-04-22)

Bugfix

* (Linux) Fix binary dependency analysis in Termux environment; previously,
  no binary dependencies would be reported due to mismatched ``ldd`` output
  pattern. (:issue:`9402`)
* (Linux) Fix compatibility issues with Termux python 3.13, caused by
  platform being now reported as "android" instead of "linux" (PEP 738).
  (:issue:`9398`)
* (macOS) Fix built-time error when trying to create an .app bundle with
  data collected from a directory that contains symlinked elements.
  (:issue:`9375`)
* Fix the ``forkserver`` spawn mode of ``multiprocessing`` under python
  3.13.13, 3.14.4, and the upcoming 3.15. (:issue:`9423`)
* Remove warning about non-existing ``tclX`` module directory; in some Tcl
  distributions (e.g., Debian-packaged Tcl), this directory is located
  under the main library/data directory, and therefore the stand-alone
  directory neither exists nor needs to be explicitly collected.
  (:issue:`9401`)
Hooks

* Prevent the run-time hook for ``gi.repository.GLib`` from overriding
  the implicit default value of the ``XDG_DATA_DIRS`` environment
  variable (i.e., ``/usr/local/share/:/usr/share/``) when adding the
  frozen application's top-level directory to the list of data directories.
  (:issue:`9422`)
* Update ``gi.repository.Gio`` hook to collect corresponding platform-specific
  typelib (``GioWin32`` or ``GioUnix``), and add hooks for these modules.
  This aims to prevent potential run-time errors, either because the typelib
  is missing, or because it was opportunistically loaded from the run-time
  system and happens to be of incompatible version. (:issue:`9410`)
* Update ``gi.repository.GLib`` hook to collect corresponding platform-specific
  typelib (``GLibWin32`` or ``GLibUnix``), and add hooks for these modules.
  This aims to prevent potential run-time errors, either because the typelib
  is missing, or because it was opportunistically loaded from the run-time
  system and happens to be of incompatible version. (:issue:`9410`)
Bootloader

</code></pre>

<ul>

<li>(Windows) Add new option to the <code>waf</code> build script, <code>--no-cfg</code>,

that allows bootloader to be built without Control Flow Guard (CFG)

enabled. Applicable only when building with MSVC toolchain. (:issue:<code>9352</code>)</li>

</ul>

<!-- raw HTML omitted -->

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/8a6172796b56aa428980c3628663ba08e77ad81e&quot;&gt;&lt;code&gt;8a61727&lt;/code&gt;&lt;/a> Release v6.20.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/151ff76940748960452b3186b6885758d94841dc&quot;&gt;&lt;code&gt;151ff76&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 16 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9431&quot;&gt;#9431&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/4d28a528f8ab8632f7cfa7662fc6fcc45881e741&quot;&gt;&lt;code&gt;4d28a52&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 15 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9429&quot;&gt;#9429&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/881ee26d446a574c9bed14d4e8fd40628c7c1a93&quot;&gt;&lt;code&gt;881ee26&lt;/code&gt;&lt;/a> tests: test_path_encodings: ensure that custom tmp dir exists</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/b42c9421158d9a6069274f1af848549cc527afb7&quot;&gt;&lt;code&gt;b42c942&lt;/code&gt;&lt;/a> tests: test_bundled_shell_script: fix for Termux without /usr symlink</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/afc1b27baac552e985bd3f365eac401db1ca8189&quot;&gt;&lt;code&gt;afc1b27&lt;/code&gt;&lt;/a> ci: termux: use primary mirror and perform initial package upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/1c29fab7926c3ee4d185587f29ea015b41b955b5&quot;&gt;&lt;code&gt;1c29fab&lt;/code&gt;&lt;/a> Fix multiprocessing with forkserver in python 3.13.13 and 3.14.4</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/3eab93a1c006c9fd2e45174d9f54b8a981cc319d&quot;&gt;&lt;code&gt;3eab93a&lt;/code&gt;&lt;/a> ci: have setup-python check for latest version of python</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/929b186d3f451317deac6eae7663ba2e8726f75f&quot;&gt;&lt;code&gt;929b186&lt;/code&gt;&lt;/a> rthook: do not overwrite XDG_DATA_DIRS fallback value (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9422&quot;&gt;#9422&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/722dbd189a7e8e572af6133848e6057aa44e945f&quot;&gt;&lt;code&gt;722dbd1&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 14 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9419&quot;&gt;#9419&lt;/a&gt;)&lt;/li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.19.0...v6.20.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates basedpyright from 1.39.2 to 1.39.5

Commits

a511b78 1.39.5
009e953 fix error attempting to baseline diagnostics from the new `string.templatelib...
9ff9848 fix "Pyright current file" vscode launch config when node isn't installed glo...
b058a64 1.39.4
5e1f1fb Fix: treat  map & filter as not subscriptable at runtime and don't show g...
f9730a8 bump python dependencies
a465682 Update installation docs for PyCharm (#1643)
5f66727 1.39.3
d8741df hopefully fix docs deployment job
See full diff in compare view




Updates poethepoet from 0.44.0 to 0.46.0

Release notes
Sourced from poethepoet's releases.

0.46.0
Enhancements

Experimental Claude Code skill and bump-version task by @​nat-n in nat-n/poethepoet#387
Use AST parser for all templating by @​nat-n in nat-n/poethepoet#386

Fixes

Make uv and poetry executors check for bat files to handle shutdown quirks on windows by @​nat-n in nat-n/poethepoet#385
Strip underscore prefix in documentation for private positional args by @​nat-n in nat-n/poethepoet#383
Use AST for $POE_EXTRA_ARGS detection and cache parsed content by @​nat-n in nat-n/poethepoet#388

Experimental agent skill
This release ships an experimental agent skill that gives AI coding agents contextual knowledge of poe's task API when working in projects that use it. It works with any agent that supports the skills convention and aims to improve agent abilities when it comes to leveraging and authoring poe tasks.
Please try it out and provide feedback!
Two install methods:

Via a built in poe task (similar to how shell completions are installed):

poe _install_skill                          # auto-detects .claude/.codex/.pi/.agents and prompts
poe _install_skill ~/.claude/skills         # explicit path (substitute your agent's dir)
poe _install_skill <skills-dir> --upgrade   # non-interactive upgrade (skips if same/newer)


From github via npx skills

npx skills add https://github.com/nat-n/poethepoet/tree/v0.46.0/poethepoet/skills/poethepoet

Full Changelog: https://github.com/nat-n/poethepoet/compare/v0.45.0...v0.46.0
0.45.0
Enhancements

Add support for forwarding free arguments via $POE_EXTRA_ARGS by @​timrid in nat-n/poethepoet#380

Fixes

Handle cancelled tasks correctly by @​timrid in nat-n/poethepoet#378
Preserve quotes in :+/:- operator arguments (#333) by @​nat-n in nat-n/poethepoet#377
Handle ctrl+c attempt on windows if running bat/cmd scripts by @​NSPC911 in nat-n/poethepoet#382

New Contributors

@​timrid made their first contribution in nat-n/poethepoet#378

Full Changelog: https://github.com/nat-n/poethepoet/compare/v0.44.0...v0.45.0



Commits

23a4c1a feat: experimental Claude Code skill and bump-version task (#387)
a04a215 refactor: use AST for $POE_EXTRA_ARGS detection and cache parsed content (#388)
61d2e34 refactor: use AST parser for all templating (#386)
1bfad47 fix: make uv and poetry executors check for bat files (#385)
35e4a1b fix: Strip underscore prefix in documentation for private positional args (#383)
244cf0b Bump version to 0.45.0
3a6c09a feat: support forwarding free arguments via $POE_EXTRA_ARGS (#380)
a1edcda fix: preserve quotes in :+/:- operator arguments (#333) (#377)
3e60a85 fix: handle cancelled asyncio tasks correctly (#378)
bbdd435 fix: handle ctrl+c attempt on windows if running bat/cmd scripts (#382)
See full diff in compare view




Updates pre-commit from 4.5.1 to 4.6.0

Release notes
Sourced from pre-commit's releases.

pre-commit v4.6.0
Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @​asottile.



Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @​asottile.






Changelog
Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21
Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier
usage with git 2.54+ git hooks.

#3662 PR by @​asottile.



Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @​asottile.






Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view




Updates ruff from 0.15.11 to 0.15.13

Release notes
Sourced from ruff's releases.

0.15.13
Release Notes
Released on 2026-05-14.
Preview features

Add a rule to flag lazy imports that are eagerly evaluated (#25016)
[pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

Fix F811 false positive for class methods (#24933)
Fix setting selection for multi-folder workspace (#24819)
[eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
[flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

Always include panic payload in panic diagnostic message (#24873)
Restrict PYI034 for in-place operations to enclosing class (#24511)
Improve error message for parameters that are declared global (#24902)
Update known stdlib (#25103)

Performance

[isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

Add TOML examples to --config help text (#25013)
Colorize ruff check 'All checks passed' (#25085)

Configuration

Increase max allowed value of line-length setting (#24962)

Documentation

Add D203 to rules that conflict with the formatter (#25044)
Clarify COM819 and formatter interaction (#25045)
Clarify that NotImplemented is a value, not an exception (F901) (#25054)
Update number of lint rules supported (#24942)

Other changes

Simplify the playground's markdown template (#24924)

Contributors


... (truncated)


Changelog
Sourced from ruff's changelog.

0.15.13
Released on 2026-05-14.
Preview features

Add a rule to flag lazy imports that are eagerly evaluated (#25016)
[pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

Fix F811 false positive for class methods (#24933)
Fix setting selection for multi-folder workspace (#24819)
[eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
[flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

Always include panic payload in panic diagnostic message (#24873)
Restrict PYI034 for in-place operations to enclosing class (#24511)
Improve error message for parameters that are declared global (#24902)
Update known stdlib (#25103)

Performance

[isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

Add TOML examples to --config help text (#25013)
Colorize ruff check 'All checks passed' (#25085)

Configuration

Increase max allowed value of line-length setting (#24962)

Documentation

Add D203 to rules that conflict with the formatter (#25044)
Clarify COM819 and formatter interaction (#25045)
Clarify that NotImplemented is a value, not an exception (F901) (#25054)
Update number of lint rules supported (#24942)

Other changes

Simplify the playground's markdown template (#24924)

Contributors

@​MichaReiser



... (truncated)


Commits

2afb467 Bump 0.15.13 (#25157)
3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
2522549 Remove shellcheck from prek (#25154)
7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
828cdb7 [ty] Isolate file-watching test environment (#25151)
89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
Additional commits viewable in compare view




Updates uv-build to 0.11.14

Release notes
Sourced from uv-build's releases.

0.11.14
Release Notes
Released on 2026-05-12.
Enhancements

Add Astral mirror URL override (#19206)
Ignore top_level.txt entries in uninstall that are not valid Python identifiers (#19340)

Bug fixes

Avoid applying .env files in parent process (#19343)
Filter ANSI codes in logging output (#19311)
Fix uv tree showing extra-conditional deps for packages required without extras (#19332)
Respect build options (e.g., --no-build) during lock validation (#19366)

Install uv 0.11.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.14/uv-installer.sh | sh

Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.14/uv-installer.ps1 | iex"

Download uv 0.11.14



File
Platform
Checksum




uv-aarch64-apple-darwin.tar.gz
Apple Silicon macOS
checksum


uv-x86_64-apple-darwin.tar.gz
Intel macOS
checksum


uv-aarch64-pc-windows-msvc.zip
ARM64 Windows
checksum


uv-i686-pc-windows-msvc.zip
x86 Windows
checksum


uv-x86_64-pc-windows-msvc.zip
x64 Windows
checksum


uv-aarch64-unknown-linux-gnu.tar.gz
ARM64 Linux
checksum


uv-i686-unknown-linux-gnu.tar.gz
x86 Linux
checksum


uv-powerpc64le-unknown-linux-gnu.tar.gz
PPC64LE Linux
checksum


uv-riscv64gc-unknown-linux-gnu.tar.gz
RISCV Linux
checksum


uv-s390x-unknown-linux-gnu.tar.gz
S390x Linux
checksum


uv-x86_64-unknown-linux-gnu.tar.gz
x64 Linux
checksum


uv-armv7-unknown-linux-gnueabihf.tar.gz
ARMv7 Linux
checksum


uv-aarch64-unknown-linux-musl.tar.gz
ARM64 MUSL Linux
checksum


uv-i686-unknown-linux-musl.tar.gz
x86 MUSL Linux
checksum


uv-riscv64gc-unknown-linux-musl.tar.gz
RISCV MUSL Linux
checksum





... (truncated)


Changelog
Sourced from uv-build's changelog.

0.11.14
Released on 2026-05-12.
Enhancements

Add Astral mirror URL override (#19206)
Ignore top_level.txt entries in uninstall that are not valid Python identifiers (#19340)

Bug fixes

Avoid applying .env files in parent process (#19343)
Filter ANSI codes in logging output (#19311)
Fix uv tree showing extra-conditional deps for packages required without extras (#19332)
Respect build options (e.g., --no-build) during lock validation (#19366)

0.11.13
Released on 2026-05-10.
Bug fixes

Include data files in editable builds (#19312)
Respect --require-hashes when installing from pylock.toml files (#19334)

Python
Python

Add CPython 3.14.5

0.11.12
Released on 2026-05-08.
Python

Add CPython 3.15.0b1

Enhancements

Add --no-editable support to uv pip install (#19306)
Require git refs in URLs to be percent-encoded (#19320)

Bug fixes

Respect --no-dev over UV_DEV=1 (#19313)
Don't suggest non-existent --no-frozen flag (#19290) (#19294)

Documentation


... (truncated)


Commits

3fdfdc7 Bump version to 0.11.14 (#19377)
634b03f Document uv auth helper for Bazel credential helper use (#19358)
601c2b8 Respect build options (e.g., --no-build) during lock validation (#19366)
7d65903 Add Astral mirror URL override (#19206)
685c32c Ignore top_level.txt entries in uninstall that are not valid Python identif...
374fcaa Fix JUnit upload on Windows runners (#19370)
96b43af Ensure publish to crates.io is idempotent (#19361)
b2bd71a Filter ANSI codes in logging output (#19311)
81e7f8c Update Rust crate junction to v2 (#19353)
9f21ff8 Avoid applying .env files in parent process (#19343)
Additional commits viewable in compare view

[amannocci]

@dependabot rebase