build(python): bump the python-packages group across 1 directory with 21 updates

[dependabot]

Bumps the python-packages group with 21 updates in the / directory:

Package	From	To
pillow	12.1.0	12.2.0
platformdirs	4.5.1	4.9.6
click	8.3.1	8.3.3
cairosvg	2.8.2	2.9.0
docformatter[tomli]	1.7.7	1.7.8
jupyterlab	4.5.2	4.5.6
pre-commit	4.5.1	4.6.0
pylsp-mypy	0.7.0	0.7.1
ruff	0.14.11	0.15.12
sphinx	8.1.3	9.0.4
types-colorama	0.4.15.20250801	0.4.15.20260408
types-docutils	0.22.3.20251115	0.22.3.20260408
types-lxml	2026.1.1	2026.2.16
types-pygments	2.19.0.20251121	2.20.0.20260408
types-pytz	2025.2.0.20251108	2026.1.1.20260408
types-pyyaml	6.0.12.20250915	6.0.12.20260408
types-requests	2.32.4.20260107	2.33.0.20260408
types-setuptools	80.9.0.20251223	82.0.0.20260408
types-six	1.17.0.20251009	1.17.0.20260408
ipython	8.38.0	9.13.0
sphinx-autodoc-typehints	3.0.1	3.6.1

Updates pillow from 12.1.0 to 12.2.0

Release notes

Sourced from pillow's releases.

12.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

• Update 12.2.0 release notes #9522 [@​hugovk]
• Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@​bitplane]
• Update Python versions #9515 [@​radarhere]
• Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@​aclark4life]
• Add release notes for #9394, #9419 and #9456 #9467 [@​radarhere]
• Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@​bitplane]
• Merge PFM documentation into PPM #9434 [@​radarhere]
• Update macOS tested Pillow versions #9431 [@​radarhere]
• Fix CVE number #9430 [@​hugovk]

Dependencies

• Update xz to 5.8.3 #9523 [@​radarhere]
• Update libjpeg-turbo to 3.1.4.1 #9507 [@​radarhere]
• Update libpng to 1.6.56 #9499 [@​radarhere]
• Update freetype to 2.14.3 #9485 [@​radarhere]
• Updated libavif to 1.4.1 #9479 [@​radarhere]
• Updated harfbuzz to 13.2.1 #9461 [@​radarhere]
• Update Ghostscript to 10.7.0 #9469 [@​radarhere]
• Update harfbuzz to 13.0.1 #9453 [@​radarhere]
• Update libavif to 1.4.0 #9460 [@​radarhere]
• Update freetype to 2.14.2 #9449 [@​radarhere]
• Update actions/download-artifact action to v8 #9451 [@renovate[bot]]
• Updated libpng to 1.6.55 #9425 [@​radarhere]

Testing

• Cleanup .spider extension in the same test where it is added #9517 [@​radarhere]
• Run tests in parallel via tox for 3.5x speedup #9516 [@​hugovk]
• Enable colour in CI logs #9486 [@​hugovk]
• Update Ghostscript to 10.7.0 #9469 [@​radarhere]
• Simplify TGA test code #9477 [@​radarhere]
• Update tests to check for ValueError when encoding an empty image #9464 [@​radarhere]
• Upgrade CI from macos-15-intel to macos-26-intel #9454 [@​hugovk]
• Add check-case-conflict hook #9446 [@​radarhere]
• Specify platform when pulling docker image #9440 [@​radarhere]
• GHA: Cache libavif and webp builds for Ubuntu #9437 [@​hugovk]
• Update macOS tested Pillow versions #9431 [@​radarhere]

Other changes

• Check calloc return value #9527 [@​radarhere]
• Check all allocs in the Arrow tree #9488 [@​wiredfool]
• Reject non-numeric elements inside list coords #9526 [@​hugovk]
• Move variable declaration inside define #9525 [@​radarhere]

... (truncated)

Commits

• 3c41c09 12.2.0 version bump
• cdaa29e Check calloc return value (#9527)
• 585b2f5 Check calloc return value
• ecf011e Check all allocs in the Arrow tree (#9488)
• cf6de8c Reject non-numeric elements inside list coords (#9526)
• ffdcede Update 12.2.0 release notes (#9522)
• 7929d77 Added security release notes (#149)
• c4f7aa5 Added security release notes
• 22cdb5f Move variable declaration inside define (#9525)
• fc15b3b Resize tall images vertically first (#9524)
• Additional commits viewable in compare view

Updates platformdirs from 4.5.1 to 4.9.6

Release notes

Sourced from platformdirs's releases.

4.9.6

What's Changed

• 🐛 fix(release): use double quotes for tag variable expansion by @​gaborbernat in tox-dev/platformdirs#477

Full Changelog: tox-dev/platformdirs@4.9.5...4.9.6

4.9.4

What's Changed

• Add permissions to workflows by @​gaborbernat in tox-dev/platformdirs#455
• Move SECURITY.md to .github/SECURITY.md by @​gaborbernat in tox-dev/platformdirs#456
• Standardize .github files to .yaml suffix by @​gaborbernat in tox-dev/platformdirs#458
• 📝 docs: add project logo to documentation by @​gaborbernat in tox-dev/platformdirs#459

Full Changelog: tox-dev/platformdirs@4.9.3...4.9.4

4.9.3

What's Changed

• Fix test failures on BSD for runtime directory defaults by @​Fridayai700 in tox-dev/platformdirs#451
• Respect XDG_CONFIG_HOME in _get_user_dirs_folder by @​bysiber in tox-dev/platformdirs#453
• Add missing _optionally_create_directory in Android user_log_dir and user_runtime_dir by @​bysiber in tox-dev/platformdirs#452

New Contributors

• @​Fridayai700 made their first contribution in tox-dev/platformdirs#451
• @​bysiber made their first contribution in tox-dev/platformdirs#453

Full Changelog: tox-dev/platformdirs@4.9.2...4.9.3

4.9.2

What's Changed

• 📝 docs(platforms): fix RST formatting and TOC hierarchy by @​gaborbernat in tox-dev/platformdirs#447
• 📝 docs: restructure following Diataxis framework by @​gaborbernat in tox-dev/platformdirs#448

Full Changelog: tox-dev/platformdirs@4.9.1...4.9.2

4.9.1

What's Changed

• 📝 docs: enhance README, fix issues, and reorganize platforms.rst by @​gaborbernat in tox-dev/platformdirs#445

... (truncated)

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

---

4.9.6 (2026-04-09)

---

• 🐛 fix(release): use double quotes for tag variable expansion :pr:477

---

4.9.5 (2026-04-06)

---

• 📝 docs(appauthor): clarify None vs False on Windows :pr:476
• Separates implementations of macOS dirs that share a default :pr:473 - by :user:Goddesen
• Remove persist-credentials: false from release job :pr:472
• fix: do not duplicate site dirs in Unix.iter_{config,site}_dirs() when use_site_for_root is active :pr:469 - by :user:viccie30
• 🔧 fix(type): resolve ty 0.0.25 type errors :pr:468
• 🔒 ci(workflows): add zizmor security auditing :pr:467
• 🐛 fix(release): generate docstrfmt-compatible changelog entries :pr:463

---

4.9.4 (2026-03-05)

---

• [pre-commit.ci] pre-commit autoupdate :pr:461 - by :user:pre-commit-ci[bot]
• Update README.md
• 📝 docs: add project logo to documentation :pr:459
• Standardize .github files to .yaml suffix
• build(deps): bump the all group with 2 updates :pr:457 - by :user:dependabot[bot]
• Move SECURITY.md to .github/SECURITY.md
• Add permissions to workflows :pr:455
• Add security policy
• [pre-commit.ci] pre-commit autoupdate :pr:454 - by :user:pre-commit-ci[bot]

---

4.9.2 (2026-02-16)

---

• 📝 docs: restructure following Diataxis framework :pr:448
• 📝 docs(platforms): fix RST formatting and TOC hierarchy :pr:447

---

4.9.1 (2026-02-14)

---

• 📝 docs: enhance README, fix issues, and reorganize platforms.rst :pr:445

... (truncated)

Commits

• 56efd77 Release 4.9.6
• d5d812a 🐛 fix(release): use double quotes for tag variable expansion (#477)
• c2b0cee build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 in the al...
• 7688069 Release 4.9.5
• 104d28b 📝 docs(appauthor): clarify None vs False on Windows (#476)
• 0955048 [pre-commit.ci] pre-commit autoupdate (#475)
• bd3c766 build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 in the all group (#474)
• 749ac3f Separates implementations of macOS dirs that share a default (#473)
• cb88156 Remove persist-credentials: false from release job (#472)
• a501eab [pre-commit.ci] pre-commit autoupdate (#470)
• Additional commits viewable in compare view

Updates click from 8.3.1 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

• Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775
• Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299
• Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238
• Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240
• Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235
• Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151
• Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177
• Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328
• Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239
• Mark make_default_short_help as private API. #3189 #3250
• CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865
• Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248

8.3.2

This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-2 Milestone: https://github.com/pallets/click/milestone/29

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

• Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775
• Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299
• Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238
• Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240
• Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235
• Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151
• Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177
• Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328
• Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239
• Mark make_default_short_help as private API. :issue:3189 :pr:3250
• CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865
• Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248

Version 8.3.2

Released 2026-04-02

• Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. :issue:3084 :pr:3152
• Hide Sentinel.UNSET values as None when using lookup_default(). :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224

... (truncated)

Commits

• c06d2d0 Release 8.3.3
• f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
• bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
• 4a35225 Reduce blast-radius of UNSET in default_map (#3240)
• c07bb93 Merge branch 'stable' into unset-in-default-map
• c7e1ba8 Reorder ParameterSource (#3248)
• 76552ff Show default string in prompt (#3328)
• ac5cec5 Reorder ParameterSource from most to least explicit
• 8c452e0 Merge branch 'stable' into show-default-string-in-prompt
• 8c95c73 Reconcile default value passing and default activation (#3239)
• Additional commits viewable in compare view

Updates cairosvg from 2.8.2 to 2.9.0

Release notes

Sourced from cairosvg's releases.

2.9.0

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

• Drop support of Python 3.9, add support of Python 3.14

Changelog

Sourced from cairosvg's changelog.

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

• Drop support of Python 3.9, add support of Python 3.14

Commits

• fe5cae5 Version 2.9.0
• 6dde868 Abort when more than 100k referenced elements are rendered
• a6b3a98 Cut long line again
• ce8b51d Cut long line
• b7818c9 Clarify unsafe option scope without removing security warning
• See full diff in compare view

Updates docformatter[tomli] from 1.7.7 to 1.7.8

Release notes

Sourced from docformatter[tomli]'s releases.

1.7.8

What Changed

• #335 Match spacing after module docstring between black and --black (@​adamtheturtle)
• #336 fix: handle multiline string in parameter formatting (@​finswimmer)
• #339 fix: add multi-line window creation for section header detection (@​finswimmer)
• #330 fix: resolve several empty line regressions (@​finswimmer)
• #325 Remove external untokenize package. Use tokenize from the Python standard library. (@​tdenewiler)
• #323 fix: issue 321 (@​weibullguy)
• #322 test: add tests to ensure no regression leading to bug in issue 259 (@​weibullguy)
• #318 refactor: split long functions into smaller functions (@​weibullguy)
• #314 fix: update README example (@​weibullguy)

Maintenance

• #320 chore: issue 288 (@​weibullguy)

Changelog

Sourced from docformatter[tomli]'s changelog.

v1.7.8 (2026-04-21)

Full Changelog

Bug Fixes

• fix: multi sentence summary #313 (weibullguy)

Merged pull requests:

• chore(deps-dev): bump pygments from 2.19.2 to 2.20.0 #341 (dependabot[bot])
• chore(deps-dev): bump virtualenv from 20.32.0 to 20.36.1 #337 (dependabot[bot])
• chore(deps-dev): bump urllib3 from 2.5.0 to 2.6.3 #334 (dependabot[bot])
• chore: issue 288 #320 (weibullguy)
• chore: updating dependency and tool versions #319 (weibullguy)
• chore(deps-dev): bump urllib3 from 2.4.0 to 2.5.0 #317 (dependabot[bot])
• chore(deps-dev): bump requests from 2.32.3 to 2.32.4 #316 (dependabot[bot])

Commits

• 0032269 release/v1.7.8 (#342)
• ab715b8 chore: update AUTHORS.rst file with new author(s)
• 4754c77 Match spacing after module docstring between black and --black (#335)
• d08ebe3 chore(deps-dev): bump pygments from 2.19.2 to 2.20.0 (#341)
• 901869d chore(deps-dev): bump urllib3 from 2.5.0 to 2.6.3 (#334)
• 4dfae40 fix: handle multiline string tokens in parameter formatting (#336)
• 7624852 chore(deps-dev): bump virtualenv from 20.32.0 to 20.36.1 (#337)
• 72c0a04 fix: add multi-line window creation for section header detection (#339)
• d9ace1f fix: resolve several empty line regressions (#330)
• 7798699 chore: update AUTHORS.rst file with new author(s)
• Additional commits viewable in compare view

Updates jupyterlab from 4.5.2 to 4.5.6

Release notes

Sourced from jupyterlab's releases.

v4.5.6

4.5.6

(Full Changelog)

Bugs fixed

• Replace scrollback implementation with scroll anchoring outside of full windowing mode #18522 (@​krassowski)
• Harmonize translation wrappers in Python files to use gettext methods #18597 (@​tmetzl)
• Remove unimplemented filebrowser:search command #18593 (@​krassowski)
• Fix status bar focus outlines #18585 (@​IsabelParedes)
• Fix filebrowser:create-new-file context menu selector #18588 (@​jtpio)
• Fix single-character code blocks rendering as empty #18572 (@​soniya-malviy)
• Hide code input in CodeConsole when configured #18554 (@​agriyakhetarpal)

Maintenance and upkeep improvements

• Update benchmark snapshots even if base snapshots require changes #18549 (@​krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​agriyakhetarpal (activity) | @​IsabelParedes (activity) | @​jtpio (activity) | @​krassowski (activity) | @​soniya-malviy (activity) | @​tmetzl (activity)

v4.5.5

4.5.5

(Full Changelog)

Bugs fixed

• Fix theme settings broken in non-English locales #18530 (@​apoorvdarshan)
• Fix comms subshell resource management on disposal and when changing settings #18531 (@​krassowski)
• Upgrade @codemirror/view, fixing slow selection when line wrapping is enabled #18479 (@​krassowski)
• Only turn off overflow anchor when windowing is active #18503 (@​jasongrout)
• Fix table of contents navigation for Markdown files #18411 (@​itsmevichu)

Maintenance and upkeep improvements

• Update to marked 17.0.2 and mermaid 11.12.3 #18532 (@​bollwyvl, @​krassowski)

Contributors to this release

... (truncated)

Commits

• e514705 [ci skip] Publish 4.5.6
• a6dda88 Backport PR #18522 on branch 4.5.x (Replace scrollback implementation with sc...
• 4a28719 Backport PR #18597 on branch 4.5.x (Harmonize translation wrappers in Python ...
• 1714c4a Backport PR #18593 on branch 4.5.x (Remove unimplemented filebrowser:search...
• 3624bbe Backport PR #18585 on branch 4.5.x (Fix status bar focus outlines) (#18590)
• bf99d9d Backport PR #18588 on branch 4.5.x (Fix filebrowser:create-new-file context...
• 5b6dee9 Backport PR #18572 on branch 4.5.x (Fix single-character code blocks renderin...
• da80d67 Backport PR #18554 on branch 4.5.x (Hide code input in CodeConsole when c...
• 5267a8c Backport PR #18549 on branch 4.5.x (Update benchmark snapshots even if base s...
• 72d29f4 [ci skip] Publish 4.5.5
• Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

• pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
  • #3662 PR by @​asottile.

Fixes

• pre-commit hook-impl: --hook-type is required.
  • #3661 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

• pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
  • #3662 PR by @​asottile.

Fixes

• pre-commit hook-impl: --hook-type is required.
  • #3661 PR by @​asottile.

Commits

• f35134b v4.6.0
• 2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
• d7dee32 make --hook-dir optional for hook-impl
• 965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
• 2eacc06 --hook-type is required for hook-impl
• f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
• 054cc5b [pre-commit.ci] pre-commit autoupdate
• 5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
• a5d9114 [pre-commit.ci] pre-commit autoupdate
• 129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
• Additional commits viewable in compare view

Updates pylsp-mypy from 0.7.0 to 0.7.1

Commits

• See full diff in compare view

Updates ruff from 0.14.11 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

• Implement #ruff:file-ignore file-level suppressions (#23599)
• Implement #ruff:ignore logical-line suppressions (#23404)
• Revert preview changes to displayed diagnostic severity in LSP (#24789)
• [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
• [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
• [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

• [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

• Respect default Unix permissions for cache files (#24794)

Documentation

• [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
• [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
• Improve rules table accessibility (#24711)

Contributors

• @​dylwil3
• @​AlexWaygood
• @​woodruffw
• @​avasis-ai
• @​Dev-iL
• @​denyszhak
• @​ShipItAndPray
• @​anishgirianish
• @​augustelalande
• @​amyreese
• @​majiayu000

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

• Implement #ruff:file-ignore file-level suppressions (#23599)
• Implement #ruff:ignore logical-line suppressions (#23404)
• Revert preview changes to displayed diagnostic severity in LSP (#24789)
• [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
• [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
• [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

• [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

• Respect default Unix permissions for cache files (#24794)

Documentation

• [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
• [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
• Improve rules table accessibility (#24711)

Contributors

• @​dylwil3
• @​AlexWaygood
• @​woodruffw
• @​avasis-ai
• @​Dev-iL
• @​denyszhak
• @​ShipItAndPray
• @​anishgirianish
• @​augustelalande
• @​amyreese
• @​majiayu000

0.15.11

Released on 2026-04-16.

Preview features

• [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
• [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
• [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits

• 66f93cf Bump 0.15.12 (#24815)
• 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
• ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
• e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
• 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
• 0fbf2bc Drop deprecated license classifier (#24808)
• 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
• 4f449ae [ty] Add error context for intersection types (#24772)
• 5b4e753 [ty] Add support for goto in literal enum member inlay hint (