Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 16, 2025

Bumps the pip-dev-dependencies group with 3 updates: flake8, flake8-bugbear and mypy.

Updates flake8 from 5.0.4 to 7.3.0

Commits

Updates flake8-bugbear from 21.11.29 to 24.12.12

Release notes

Sourced from flake8-bugbear's releases.

24.12.12

  • B012 and B025 now also handle try/except* (#500)
  • Skip B028 if warnings.warn is called with *args or **kwargs (#501)
  • Add B911: itertools.batched without strict= (#502)
  • Readme has anchors per check (they do not seem to render on GitHub tho)

24.10.31

  • B041: New dictionary same key AND value check (#496)
  • B037: Fix typo in error message
  • B024: No longer treats assigned class variables as abstract (#471)
  • Bump required attrs version to 22.2.0

24.8.19

  • B910: implement to suggest using Counter() instead of defaultdict(int) (#489)
  • B901: Do not trigger with explicit Generator return type (#481)
  • B008: add some comments, rename b008_extend_immutable_calls (#476)
  • B040: exception with note added not reraised or used (#477)
  • B039, Add ContextVar with mutable literal or function call as default
  • B040: Add Exception with added note not reraised. (#474)
  • Run tests in Python 3.13
  • Type annotated code (#481 + #483)
  • Replace hash with unsafe_hash (#486)

24.4.26

  • B909: Fix false positive affecting containers of mutables (#469)

24.4.21

  • B950: Add pragma comment to line length ignores (#463)
  • B909: Add more cases to detect + more container mutating functions (#460)

24.2.6

  • B902: Remove decorators named validator and root_validator from B902 checks (#459)
  • B038: Change B038 to B909 and make it optional (#456)

24.1.17

  • B038: Restrict rule to mutation functions only (#453)

24.1.16

  • B036: Fix crash on raise statements raising something other than

24.1.15

  • B038: Add check for mutations of loop iterator (#446)
  • B037: Add check for yielding or returning values in init() (#442)
  • B017: make B017 also apply to BaseException (#439)
  • B036: Add check for except BaseException without re-raising (#438)

23.12.2

  • B018: to detect useless-statements at all levels (#434)
  • B018: Add classname to b018 useless-expression output (#433)
  • B018: Include tuples in b018 useless-statement check (#432)

... (truncated)

Commits
  • 3a14037 Update CHANGES + move to version 24.12.12 to release
  • 761dbe2 Make rstcheck pass again sadly ignoring anchor links
  • 7ee1976 README: Add anchors for rules and config options (#491)
  • b960272 add except* support to B012&B025 (#500)
  • 4fed293 Skip B028 if warnings.warn is called with *args or **kwargs (#501)
  • 994f3dd Add B911: itertools.batched without strict= (#502)
  • 108bba4 Fix README format
  • 72f6116 Update CHANGES + move to version 24.10.31 to release
  • 07a5676 Add scentence really explaining B041
  • 95f8791 Add B041: Duplicate key-value pairs in dictionary literals (#496)
  • Additional commits viewable in compare view

Updates mypy from 1.16.1 to 1.17.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.17

We’ve just uploaded mypy 1.17 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Optionally Check That Match Is Exhaustive

Mypy can now optionally generate an error if a match statement does not match exhaustively, without having to use assert_never(...). Enable this by using --enable-error-code exhaustive-match.

Example:

# mypy: enable-error-code=exhaustive-match
import enum
class Color(enum.Enum):
RED = 1
BLUE = 2
def show_color(val: Color) -> None:
# error: Unhandled case for values of type "Literal[Color.BLUE]"
match val:
case Color.RED:
print("red")

This feature was contributed by Donal Burns (PR 19144).

Further Improvements to Attribute Resolution

This release includes additional improvements to how attribute types and kinds are resolved. These fix many bugs and overall improve consistency.

  • Handle corner case: protocol/class variable/descriptor (Ivan Levkivskyi, PR 19277)
  • Fix a few inconsistencies in protocol/type object interactions (Ivan Levkivskyi, PR 19267)
  • Refactor/unify access to static attributes (Ivan Levkivskyi, PR 19254)
  • Remove inconsistencies in operator handling (Ivan Levkivskyi, PR 19250)
  • Make protocol subtyping more consistent (Ivan Levkivskyi, PR 18943)

... (truncated)

Commits
  • 0260991 Update version string
  • 3901aa2 Updates to 1.17 changelog (#19436)
  • 7d13396 Initial changelog for 1.17 release (#19427)
  • a182dec Combine the revealed types of multiple iteration steps in a more robust manne...
  • ab4fd57 Improve the handling of "iteration dependent" errors and notes in finally cla...
  • 09ba1f6 [mypyc] Fix exception swallowing in async try/finally blocks with await (#19353)
  • 5c65e33 [mypyc] Fix AttributeError in async try/finally with mixed return paths (#19361)
  • 934ec50 Lessen dmypy suggest path limitations for Windows machines (#19337)
  • a4801f9 Type ignore comments erroneously marked as unused by dmypy (#15043)
  • c3bfa0d Handle corner case: protocol vs classvar vs descriptor (#19277)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 16, 2025

Labels

The following labels could not be found: chore. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the pip-dev-dependencies group with 3 updates: [flake8](https://github.com/pycqa/flake8), [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) and [mypy](https://github.com/python/mypy).


Updates `flake8` from 5.0.4 to 7.3.0
- [Commits](PyCQA/flake8@5.0.4...7.3.0)

Updates `flake8-bugbear` from 21.11.29 to 24.12.12
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](PyCQA/flake8-bugbear@21.11.29...24.12.12)

Updates `mypy` from 1.16.1 to 1.17.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip-dev-dependencies
- dependency-name: flake8-bugbear
  dependency-version: 24.12.12
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip-dev-dependencies
- dependency-name: mypy
  dependency-version: 1.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/pip-dev-dependencies-1abdaaa727 branch from 5af6aed to 7176398 Compare July 17, 2025 05:53
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 25, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 25, 2025
@dependabot dependabot bot deleted the dependabot/pip/pip-dev-dependencies-1abdaaa727 branch July 25, 2025 06:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants