Skip to content

Bump the uv-lock-patches group with 3 updates#5445

Merged
neutrinoceros merged 1 commit into
mainfrom
dependabot/uv/uv-lock-patches-58688bb483
May 8, 2026
Merged

Bump the uv-lock-patches group with 3 updates#5445
neutrinoceros merged 1 commit into
mainfrom
dependabot/uv/uv-lock-patches-58688bb483

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the uv-lock-patches group with 3 updates: matplotlib, more-itertools and mypy.

Updates matplotlib from 3.10.8 to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Updates more-itertools from 11.0.1 to 11.0.2

Release notes

Sourced from more-itertools's releases.

Version 11.0.2

  • The changes to the type hints for always_iterable in 11.0.0 have been reverted due to reported problems (thanks to ngoldbaum and rhettinger)
  • zip_equal was removed in 11.0.0. It had been deprecated and raising DeprecationWarning since 2021, but it's removal shoul have been documented in 11.0.0's release notes. We regret the error.
  • running_statistics has been moved from more_itertools.more to more_itertools.recipes. Its docstring was also improved (thanks to mastash3ff and rhettinger)
Commits
  • 247e15b Merge pull request #1150 from more-itertools/version-11.0.2
  • f3eebe1 Note the recipes move
  • 619eaed Merge pull request #1151 from rhettinger/move_running
  • 6294fa6 Move running statistics to recipes
  • ca21d8b Bump version to 11.0.2
  • 6afa2cd Notes for version 11.0.2
  • 1bf1273 Merge pull request #1148 from more-itertools/revert-1107-always_iterable_hints
  • 5d5c163 Merge pull request #1149 from rhettinger/typo
  • 95ce335 Fix typo
  • d619fe0 Revert "Issue 1032: Improve common case typehints for always_iterable"
  • See full diff in compare view

Updates mypy from 1.20.0 to 1.20.2

Changelog

Sourced from mypy's changelog.

Mypy 1.20.2

  • Use WAL with SQLite cache and fix close (Shantanu, PR 21154)
  • Adjust SQLite journal mode (Ivan Levkivskyi, PR 21217)
  • Correctly aggregate narrowing information on parent expressions (Shantanu, PR 21206)
  • Fix regression related to generic callables (Shantanu, PR 21208)
  • Fix regression by avoiding widening types in some contexts (Shantanu, PR 21242)
  • Fix slicing in non-strict optional mode (Shantanu, PR 21282)
  • mypyc: Fix match statement semantics for "or" pattern (Shantanu, PR 21156)
  • mypyc: Fix issue with module dunder attributes (Piotr Sawicki, PR 21275)
  • Initial support for Python 3.15.0a8 (Marc Mueller, PR 21255)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • A5rocks
  • Aaron Wieczorek
  • Adam Turner
  • Ali Hamdan
  • asce
  • BobTheBuidler
  • Brent Westbrook
  • Brian Schubert
  • bzoracler
  • Chris Burroughs
  • Christoph Tyralla
  • Colin Watson
  • Donghoon Nam
  • E. M. Bray
  • Emma Smith
  • Ethan Sarp
  • George Ogden
  • getzze
  • grayjk
  • Gregor Riepl
  • Ivan Levkivskyi
  • James Hilliard
  • James Le Cuirot
  • Jeremy Nimmer
  • Joren Hammudoglu
  • Kai (Kazuya Ito)
  • kaushal trivedi
  • Kevin Kannammalil
  • Lukas Geiger
  • Łukasz Langa
  • Marc Mueller
  • Michael R. Crusoe
  • michaelm-openai
  • Neil Schemenauer
  • Piotr Sawicki

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv-lock-patches group with 3 updates: [matplotlib](https://github.com/matplotlib/matplotlib), [more-itertools](https://github.com/more-itertools/more-itertools) and [mypy](https://github.com/python/mypy).


Updates `matplotlib` from 3.10.8 to 3.10.9
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.8...v3.10.9)

Updates `more-itertools` from 11.0.1 to 11.0.2
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v11.0.1...v11.0.2)

Updates `mypy` from 1.20.0 to 1.20.2
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.0...v1.20.2)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-lock-patches
- dependency-name: more-itertools
  dependency-version: 11.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-lock-patches
- dependency-name: mypy
  dependency-version: 1.20.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-lock-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file infrastructure Related to CI, versioning, websites, organizational issues, etc labels May 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 1, 2026

Labels

The following labels could not be found: python:uv. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from neutrinoceros as a code owner May 1, 2026 06:07
@dependabot dependabot Bot added infrastructure Related to CI, versioning, websites, organizational issues, etc dependencies Pull requests that update a dependency file labels May 1, 2026
@neutrinoceros neutrinoceros enabled auto-merge May 1, 2026 07:25
@neutrinoceros neutrinoceros merged commit a4839cc into main May 8, 2026
19 of 22 checks passed
@dependabot dependabot Bot deleted the dependabot/uv/uv-lock-patches-58688bb483 branch May 8, 2026 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file infrastructure Related to CI, versioning, websites, organizational issues, etc pyhon:uv

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant