Bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #9 · keysafe-cloud/KSC-Tools

dependabot · 2026-08-01T12:37:07Z

Bumps the dependencies group with 5 updates:

Package	From	To
pre-commit	`4.6.0`	`4.6.1`
ruff	`0.15.21`	`0.16.0`
ty	`0.0.59`	`0.0.64`
certifi	`2026.6.17`	`2026.7.22`
charset-normalizer	`3.4.7`	`3.4.9`

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Commits

242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
1d811d9 Return an error for invalid --repo
374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
1e7994f set JULIA_DEPOT_PATH
b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:
❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted
See the CLI help or documentation for the full list of supported formats.
The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

... (truncated)

Commits

a2635fd Bump 0.16.0 (#27136)
3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
17ef711 Stabilize --add-ignore (#27125)
ef912bb Add newly stabilized rules to defaults (#27055)
b30f040 Stabilize new default rules (#27035)
bcd70c5 Exclude Markdown files from format-dev runs (#27052)
87e51e2 Fix format --check spans for syntax errors (#27045)
afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
Additional commits viewable in compare view

Updates ty from 0.0.59 to 0.0.64

Release notes

Sourced from ty's releases.

0.0.64

Release Notes

Released on 2026-07-27.

Bug fixes

Fix identity narrowing for NewTypes (#26439)

Make reachability analysis idempotent (#27163)

LSP server

Fix ParamSpec declaration hover and type navigation (#27183)

Implement LSP textDocument/implementation request (#25410)

Introduce shared primitives for parsing backticks in docstrings (#26928)

Render NumPy docstrings as structured Markdown (#25925)

CLI

Add --exclude-scripts and --include-scripts (#27169)

Discover uv workspace roots (#25551)

Diagnostics

Add a lint rule for combined abstract and final decorators (#26932)

Change --add-ignore to add space after the colon for ty: ignore (#27120)

Fix missing-override-decorator suggestion before Python 3.12 (#27166)

Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

Allow unresolved unused venv home paths (#27162)

Simplify script metadata query (#27121)

Core type checking

Decorate only overload implementation signatures (#27147)

Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)

Improve identity comparison inference for singleton types (#27126)

Improve tuple membership and rich comparison inference (#27164)

Model walrus bindings from comprehensions (#26466)

Narrow tagged unions using identity comparisons (#27130)

Preserve Self in __new__ calls (#27003)

Preserve receiver constraints when binding overloaded methods (#27038)

Support generic manual PEP 695 type aliases (#27083)

Treat bivariance as covariant (#24319)

Performance

Avoid cycles when resolving ModuleType globals (#27182)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.64

Released on 2026-07-27.

Bug fixes

Fix identity narrowing for NewTypes (#26439)

Make reachability analysis idempotent (#27163)

LSP server

Fix ParamSpec declaration hover and type navigation (#27183)

Implement LSP textDocument/implementation request (#25410)

Introduce shared primitives for parsing backticks in docstrings (#26928)

Render NumPy docstrings as structured Markdown (#25925)

CLI

Add --exclude-scripts and --include-scripts (#27169)

Discover uv workspace roots (#25551)

Diagnostics

Add a lint rule for combined abstract and final decorators (#26932)

Change --add-ignore to add space after the colon for ty: ignore (#27120)

Fix missing-override-decorator suggestion before Python 3.12 (#27166)

Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

Allow unresolved unused venv home paths (#27162)

Simplify script metadata query (#27121)

Core type checking

Decorate only overload implementation signatures (#27147)

Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)

Improve identity comparison inference for singleton types (#27126)

Improve tuple membership and rich comparison inference (#27164)

Model walrus bindings from comprehensions (#26466)

Narrow tagged unions using identity comparisons (#27130)

Preserve Self in __new__ calls (#27003)

Preserve receiver constraints when binding overloaded methods (#27038)

Support generic manual PEP 695 type aliases (#27083)

Treat bivariance as covariant (#24319)

Performance

Avoid cycles when resolving ModuleType globals (#27182)

Avoid expanding optional enum comparisons (#27105)

... (truncated)

Commits

5e64a13 Bump version to 0.0.64 (#4097)
46f4915 Bump version to 0.0.63 (#4071)
df75992 Bump version to 0.0.62 (#4057)
48dd1fd Update prek dependencies (#4059)
f53a95e Update astral-sh/setup-uv action to v9 (#4060)
17d1791 Update dependency prek to v0.4.9 (#4058)
eb7e7ba Update documentation on mypy/pyright --strict parity, and achieving maximum...
56b2c24 Update changelog for 0.0.61 (#4028)
4c865c8 Bump version to 0.0.61 (#4027)
ae554ec Bump version to 0.0.60 (#4008)
Additional commits viewable in compare view

Updates certifi from 2026.6.17 to 2026.7.22

Commits

f4bc676 2026.07.22 (#428)
4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
474e6fc Include tests in the source distribution (#424)
a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
See full diff in compare view

Updates charset-normalizer from 3.4.7 to 3.4.9

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)

Unnecessary json import at runtime (#753)

Inverse capitalization not seen by noise detector (#731)

Changed

No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.

Micro-optimizations in our noise / coherence measurements.

No longer using regex search by default for our preemptive charset mark algorithm.

Raised upperbound of setuptools to v83.

Raised upperbound of mypy(c) to v2.1.

Removed

Redundant UTF7 BOM marker (#730)

Changelog

Sourced from charset-normalizer's changelog.

3.4.9 (2026-07-07)

Fixed

Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)

Unnecessary json import at runtime (#753)

Inverse capitalization not seen by noise detector (#731)

Changed

No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.

Micro-optimizations in our noise / coherence measurements.

No longer using regex search by default for our preemptive charset mark algorithm.

Raised upperbound of setuptools to v83.

Raised upperbound of mypy(c) to v2.1.

Removed

Redundant UTF7 BOM marker (#730)

Commits

cc68407 Merge pull request #772 from jawah/fix-regression-fallback-path
152b923 chore: release 3.4.9
2bc2607 fix: unicodedecodeerror in fallback path
be252d7 chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#767)
71c7bdd chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 (#768)
aeea391 chore(deps): bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#758)
a6f8feb Merge pull request #770 from jawah/unblock-ci
528e16c chore: add osv-scanner.toml
5993498 chore: ast_serialize musl missing prebuilt riscv,s390x,ppc64le
aa2ddd8 Release 3.4.8 (#766)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.16.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.59` | `0.0.64` | | [certifi](https://github.com/certifi/python-certifi) | `2026.6.17` | `2026.7.22` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.7` | `3.4.9` | Updates `pre-commit` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `ruff` from 0.15.21 to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.16.0) Updates `ty` from 0.0.59 to 0.0.64 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.59...0.0.64) Updates `certifi` from 2026.6.17 to 2026.7.22 - [Commits](certifi/python-certifi@2026.06.17...2026.07.22) Updates `charset-normalizer` from 3.4.7 to 3.4.9 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.7...3.4.9) --- updated-dependencies: - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ty dependency-version: 0.0.64 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: charset-normalizer dependency-version: 3.4.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026

mdxs merged commit 50073c2 into master Aug 3, 2026
1 check passed

mdxs deleted the dependabot/uv/dependencies-da448ee492 branch August 3, 2026 10:18

Navigation Menu

Uh oh!

Bump the dependencies group with 5 updates - #9

Bump the dependencies group with 5 updates#9
mdxs merged 1 commit into
masterfrom
dependabot/uv/dependencies-da448ee492

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

pre-commit v4.6.1

Fixes

4.6.1 - 2026-07-21

Fixes

0.16.0

Release Notes

Breaking changes

0.16.0

Breaking changes

0.0.64

Release Notes

Bug fixes

LSP server

CLI

Diagnostics

Configuration

Core type checking

Performance

0.0.64

Bug fixes

LSP server

CLI

Diagnostics

Configuration

Core type checking

Performance

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

Changed

Removed

3.4.9 (2026-07-07)

Fixed

3.4.8 (2026-07-06)

Fixed

Changed

Removed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant