Skip to content

build(deps-dev): bump the python group across 1 directory with 9 updates - #76

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-1d9e4678fb
Closed

build(deps-dev): bump the python group across 1 directory with 9 updates#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-1d9e4678fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 9 updates in the / directory:

Package From To
coverage 7.15.3 7.15.4
gitpython 3.1.58 3.1.59
lxml 6.1.1 6.1.2
mypy 2.3.0 2.3.1
numpy 2.5.1 2.5.2
pre-commit 4.6.1 4.6.2
pygithub 2.9.1 2.10.0
pylint 4.0.6 4.0.7
ruff 0.15.21 0.16.4

Updates coverage from 7.15.3 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

  • Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits
  • 4c0e7ff docs: sample HTML for 7.15.4
  • db4cc32 docs: prep for 7.15.4
  • c33085c style: start gradual move to ruff 0.16
  • 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
  • b64d53d build: make 3.15 wheels
  • 53792ab build: show the python version for kits
  • f6b03c7 chore: make upgrade_one package=cibuildwheel
  • d9b660a chore: make upgrade
  • b128a31 docs: oops, move this entry to the correct place
  • a7a2c15 fix: escape filename urls in html report href attributes (#2227)
  • Additional commits viewable in compare view

Updates gitpython from 3.1.58 to 3.1.59

Release notes

Sourced from gitpython's releases.

3.1.59 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Commits
  • 66340d7 prepare changelog prior to release
  • a5e047d Merge pull request #2211 from gitpython-developers/config-sanitize-more
  • ef7568e fix: ignore includes in submodule configuration
  • 4b4e47f fix: preserve multiline config values when writing
  • b473abb Merge pull request #2210 from gitpython-developers/fix-clone-unsafe-option
  • 5ff52cc Merge pull request #2209 from caroescm/fix-index-add-chmod
  • b68afff Block separate git directories during clone
  • 93677a0 fix: index.add() now supports filters (#2021)
  • 9729ed3 Merge pull request #2208 from gitpython-developers/security-fixes
  • ce9d8e8 prepare next release
  • Additional commits viewable in compare view

Updates lxml from 6.1.1 to 6.1.2

Changelog

Sourced from lxml's changelog.

6.1.2 (2026-08-18)

  • GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

  • Some minor corrections for error handling cases.

Other changes

  • Built with Cython 3.2.9.
Commits
  • f2874e9 Update release date.
  • 687a295 Build: Exclude Py3.8 from windows-arm builds.
  • acadc56 Build: Remove outdated build target.
  • 59f93eb Build: Split old-Linux and other-Py3.8 builds.
  • 923df83 Build: Fix manylinux2014 build.
  • 975cc83 Build: Fix Px3.8 build setup.
  • 09e5d3e Build: Fix cibuildwheel version.
  • 998cf50 Build: Build Py3.8 wheels only once, not in every build job.
  • 5567037 Build: Exclude Py3.15 from 32bit builds.
  • 904db40 Build: Update cibuildwheel to include Py3.15.
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Updates numpy from 2.5.1 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhijeetsingh Meena +
  • Charalampos Stratakis
  • Charles Harris
  • Chris Ninham +
  • David Woods
  • Geonho +
  • Gopu Yeshwanth Reddy +
  • Iason Krommydas
  • Ijtihed Kilani
  • Jelle Zijlstra +
  • Joren Hammudoglu
  • Kumar Aditya
  • Mike Boyle
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg

... (truncated)

Commits
  • 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
  • ecf599c Merge pull request #32221 from charris/backport-32151
  • 3c7ac97 Merge pull request #32220 from charris/backport-32205
  • 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
  • 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
  • c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
  • 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
  • d8262bc MAINT: Update cibuildwheel to v4.2.0
  • 988d94d Merge pull request #32158 from charris/backport-32133
  • b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

Improvements

Bug Fixes

Maintenance

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

  • Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)
  • Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

  • Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)
  • Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)
  • Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)
  • Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)
  • Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)
  • Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

  • Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)
  • Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)
  • Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)
  • Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)
  • Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)
  • Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)
  • Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)
  • Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)
  • Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)
  • Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)
  • Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)
  • Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

  • Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)
  • Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)
  • Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)
  • Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)
  • Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)
  • Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)
  • Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)
  • Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)
  • Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits
  • 5cdf6ab Release 2.10.0 (#3560)
  • 33071b3 Fix lazy retrieval of latest tag name (#3487)
  • 4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
  • c63d09e docs: add example for uploading multiple files in a single commit (#3545)
  • 4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
  • 134f38a Allow creating custom property with values_editable_by param (#3548)
  • 5f707d6 Fix WorkflowRun schema suggestion (#3559)
  • 8280929 docs: add exception handling example (#3543)
  • c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
  • 162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
  • Additional commits viewable in compare view

Updates pylint from 4.0.6 to 4.0.7

Commits
  • c6768d3 Bump pylint to 4.0.7, update changelog (#11246)
  • e96ce2b Stop invalid-name from treating TypedDict instances as classes
  • 893294e [Backport maintenance/4.0.x] Fix crash in comparison-with-callable on a proxi...
  • 8cd74d4 Fix a crash on calls unpacking dicts with non-string keys
  • bc618ad Fix too-many-lines being reported at another module's pragma line
  • 3e1ee47 [Backport maintenance/4.0.x] Fix bad-string-format-type false positives for...
  • 7ca8116 [Backport maintenance/4.0.x] Fix useless-parent-delegation false positive o...
  • 14275a1 [Backport maintenance/4.0.x] Fix literal-comparison suggestion corrupting i...
  • a87eaa6 [Backport maintenance/4.0.x] Fix nested-min-max dropping arguments after th...
  • bdd017f [Backport maintenance/4.0.x] Fix too-many-locals counting PEP 695 type para...
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the python group across 1 directory with 9 updates
f0bbb40 
Bumps the python group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.3` | `7.15.4` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.58` | `3.1.59` |
| [lxml](https://github.com/lxml/lxml) | `6.1.1` | `6.1.2` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |
| [numpy](https://github.com/numpy/numpy) | `2.5.1` | `2.5.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [pygithub](https://github.com/pygithub/pygithub) | `2.9.1` | `2.10.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `4.0.6` | `4.0.7` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.16.4` |



Updates `coverage` from 7.15.3 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.3...7.15.4)

Updates `gitpython` from 3.1.58 to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.58...3.1.59)

Updates `lxml` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

Updates `numpy` from 2.5.1 to 2.5.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.1...v2.5.2)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `pygithub` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.9.1...v2.10.0)

Updates `pylint` from 4.0.6 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.6...v4.0.7)

Updates `ruff` from 0.15.21 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.4)

---
updated-dependencies:
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: numpy
  dependency-version: 2.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pygithub
  dependency-version: 2.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pylint
  dependency-version: 4.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 23, 2026
rosterloh added a commit that referenced this pull request Aug 24, 2026
@rosterloh @claude
build(deps-dev): bump the python group with 9 updates
33aba37 
Takes the grouped Dependabot update from #76 onto this branch, since both
touch pyproject.toml and uv.lock and would otherwise conflict:

  coverage   7.15.3 -> 7.15.4    pre-commit 4.6.1   -> 4.6.2
  gitpython  3.1.58 -> 3.1.59    pygithub   2.9.1   -> 2.10.0
  lxml       6.1.1  -> 6.1.2     pylint     4.0.6   -> 4.0.7
  mypy       2.3.0  -> 2.3.1     ruff       0.15.21 -> 0.16.4
  numpy      2.5.1  -> 2.5.2

Constraints edited by hand and re-resolved with `uv lock`, which landed on
the same versions #76 resolved. Nothing excluded; pylink-square>=2.0 stayed
out as the dependabot ignore rule intends (pyocd pins <2.0).

Verified: `mise x -- pytest` 7 passed; `ruff check` clean.

One behaviour change worth knowing: ruff 0.16 formats Python code blocks
inside Markdown, so `ruff format` now sees 79 files where 0.15.21 saw 4
(the repo has exactly 4 .py files; the rest are .claude/skills/*.md) and
would reformat snippets in 6 of them. No CI step runs ruff, and the
pre-commit ruff hooks only receive Python files, so nothing fails - but a
bare `mise run fmt` will now rewrite those docs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 24, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-1d9e4678fb branch August 24, 2026 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants