Skip to content

MAINT: Bump the python-deps group across 1 directory with 7 updates - #325

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/requirements/python-deps-8d638454f3
Open

MAINT: Bump the python-deps group across 1 directory with 7 updates#325
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/requirements/python-deps-8d638454f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the python-deps group with 7 updates in the /requirements directory:

Package From To
hypothesis 6.164.0 6.168.1
mypy 2.3.0 2.3.1
pyrefly 1.1.1 1.3.1
numpydoc 1.10.0 1.11.0
ruff 0.16.1 0.16.7
gitpython 3.1.57 3.1.62
delvewheel 1.13.0 1.13.1

Updates hypothesis from 6.164.0 to 6.168.1

Commits
  • 6cee8ce Bump hypothesis version to 6.168.1 and update changelog
  • d97fdf3 Merge pull request #4879 from Liam-DeVoe/more-wheels
  • 37da03c publish wheels for s390x and i686+musl
  • cd434f2 Bump hypothesis version to 6.168.0 and update changelog
  • 3187fb9 Merge pull request #4868 from Zac-HD/claude/hypothesis-datetime-strategy-ajzai0
  • a60dc77 Reduce rate of tricky datetimes
  • 67e5c04 Merge pull request #4875 from HypothesisWorks/create-pull-request/patch
  • ecaed93 Merge remote-tracking branch 'upstream/master' into plait/review-hypothesis-4868
  • 116ef84 Probe backwards for bound windows before the scan range
  • ef17651 Bound the cache of probed timezone transitions
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Updates pyrefly from 1.1.1 to 1.3.1

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.1

Release date: September 14, 2026

Pyrefly v1.3.1 is a patch release with a single bug fix.

🐛 Bug fixes

  • #4909: Fixed a critical issue where Pyrefly would immediately crash on startup with a thread panic when empty or relative base paths were encountered during configuration. The server now safely resolves these paths against the working directory, preventing the crash and allowing normal operation.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.

📦 Upgrade

pip install --upgrade pyrefly==1.3.1

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

  1. pyrefly check --suppress-errors
  2. Run your code formatter of choice
  3. pyrefly check --remove-unused-ignores
  4. Repeat until you achieve a clean formatting run and a clean type check.

This will add # pyrefly: ignore comments to your code, enabling you to silence errors and return to fix them later. This can make the process of upgrading a large codebase much more manageable.

Read more about error suppressions in the Pyrefly documentation.

Pyrefly v1.3.0

Release date: September 10, 2026

Pyrefly v1.3.0 bundles 934 commits from 71 contributors.

🔍Release Highlights

Type Checking

  • New diagnostics and more accurate type inference. Pyrefly now catches invalid literal regular expressions, invalid mock.patch targets, unsupported dataclass_transform arguments, incompatible Protocol.__call__ overrides, and unimplemented abstract methods. Pattern-match exhaustiveness, overload resolution, narrowing, and generic inference are also more accurate.
  • Better support for major Python frameworks. Pyrefly understands same-file Django reverse relationships, checks SQLAlchemy updates against model fields, and recognizes attributes registered on PyTorch modules.

Language Server

... (truncated)

Commits

Updates numpydoc from 1.10.0 to 1.11.0

Commits
  • 9c52969 Prep for release (#707)
  • d33e5fe FIX: resolve attribute cross-links in the class scope first (#706)
  • c127da1 Bump the actions group with 2 updates (#703)
  • c3b2a68 Avoid deprecated Sphinx autodoc options mapping (#701)
  • cc88d1e fix: correct typo in test (#702)
  • 9905ea9 FIX: don't evaluate annotations when collecting signature parameters (Python ...
  • d60e24d Bump actions/checkout from 6 to 7 in the actions group (#698)
  • 47b18be [pre-commit.ci] pre-commit autoupdate (#699)
  • 8d85154 Bump version
  • 37219ab Designate 1.11.0rc0 release
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates gitpython from 3.1.57 to 3.1.62

Release notes

Sourced from gitpython's releases.

3.1.62

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

3.1.61

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

3.1.60 Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

3.1.59 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

3.1.58 - Security and Fixes

What's Changed

... (truncated)

Commits
  • db47516 prepare new release
  • 10ec385 get better commit messages from agents
  • b754897 test: cover subdirectory discovery and pathspec commands in bare-repo worktre...
  • 9ebf8b6 Merge pull request #2227 from nkbeast/fix-config-backslash-continuation
  • a15f791 fix: parse joined config values as a whole
  • 60dd946 fix: ignore continuation markers in config comments
  • 075a664 fix: join backslash line continuations when reading config values
  • 62d1e2f Merge pull request #2226 from gitpython-developers/dependabot/pre_commit/pre-...
  • 23d0e92 build(deps): bump https://github.com/astral-sh/ruff-pre-commit
  • 8a14adc Merge pull request #2225 from gitpython-developers/submodule-path-hardening
  • Additional commits viewable in compare view

Updates delvewheel from 1.13.0 to 1.13.1

Changelog

Sourced from delvewheel's changelog.

1.13.1 (28 August 2026)

  • Improve GitHub Actions security.
  • Ignore invalid PATH entries instead of raising OSError.
  • Fix ValueError when a vendored DLL has a timestamp outside what's supported by the ZIP format.
  • Fix FileNotFoundError on a case-sensitive file system when the wheel extraction directory has a capital letter or when an extension module resides in a package with a capital letter.
  • Fix .py patch when __future__ import is split across multiple lines.
  • Fix argument validation for replace-needed when -change specifies the old DLL name more than once but with different case. Previously, the last -change argument overrode the previous value. Now, an exception is raised.
  • Fix error when repairing a non-x64 wheel with an unrecognized platform tag.
  • Allow surrounding whitespace and empty components within the values specified with --include, --exclude, --no-mangle, --add-path, and --namespace-pkg.
  • Fail fast when --with-mangle is incorrectly specified without --ignore-existing. Previously, the wheel was extracted before an exception was raised. Now, the exception is raised at the beginning during argument validation.
  • Speed up test suite by disabling ZIP compression when testing and by extracting a wheel directly instead of using pip. This halves the runtime for each GitHub Actions CI run.
  • When repairing multiple wheels with a single command, prevent the internal state from repairing one wheel from polluting the state for repairing subsequent wheels. Previously, DLLs excluded based on the targeted Python version for the first wheel were also excluded when repairing subsequent wheels, regardless of the targeted Python versions for the subsequent wheels.
  • Improve performance by reducing redundant calls when searching for DLL dependencies or parsing DLL files.
  • Reduce memory usage by reading files in chunks.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
MAINT: Bump the python-deps group across 1 directory with 7 updates
c747526 
Bumps the python-deps group with 7 updates in the /requirements directory:

| Package | From | To |
| --- | --- | --- |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.164.0` | `6.168.1` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.1.1` | `1.3.1` |
| [numpydoc](https://github.com/numpy/numpydoc) | `1.10.0` | `1.11.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.7` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.57` | `3.1.62` |
| [delvewheel](https://github.com/adang1345/delvewheel) | `1.13.0` | `1.13.1` |



Updates `hypothesis` from 6.164.0 to 6.168.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.164.0...v6.168.1)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

Updates `pyrefly` from 1.1.1 to 1.3.1
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.1.1...1.3.1)

Updates `numpydoc` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/numpy/numpydoc/releases)
- [Changelog](https://github.com/numpy/numpydoc/blob/main/RELEASE.rst)
- [Commits](numpy/numpydoc@v1.10.0...v1.11.0)

Updates `ruff` from 0.16.1 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.7)

Updates `gitpython` from 3.1.57 to 3.1.62
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.57...3.1.62)

Updates `delvewheel` from 1.13.0 to 1.13.1
- [Changelog](https://github.com/adang1345/delvewheel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/adang1345/delvewheel/commits)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-version: 6.168.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pyrefly
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: numpydoc
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: gitpython
  dependency-version: 3.1.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: delvewheel
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

03 - Maintenance

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants