Skip to content

Bump the dev-dependencies group across 1 directory with 4 updates - #276

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/dev-dependencies-b2d541c53e
Closed

Bump the dev-dependencies group across 1 directory with 4 updates#276
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/dev-dependencies-b2d541c53e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates in the / directory: pytest-benchmark, ruff, tox and abnf-rust.

Updates pytest-benchmark from 5.2.3 to 5.3.0

Release notes

Sourced from pytest-benchmark's releases.

v5.3.0

Changelog

Sourced from pytest-benchmark's changelog.

v5.3.0 (2026-08-23)

  • Added --benchmark-precision and --benchmark-confidence: instead of a fixed number of rounds, stop once the mean's relative margin of error falls below the given fraction. Contributed by Aarni Koskela in [#318](https://github.com/ionelmc/pytest-benchmark/issues/318) <https://github.com/ionelmc/pytest-benchmark/pull/318>_.
  • Added compare --between mode. Example: pytest-benchmark compare --between=min 0001 0002. Contributed by Aarni Koskela in [#302](https://github.com/ionelmc/pytest-benchmark/issues/302) <https://github.com/ionelmc/pytest-benchmark/pull/302>_.
  • Modernized the CI/linting and added spellchecking. Contributed by Aarni Koskela in [#304](https://github.com/ionelmc/pytest-benchmark/issues/304) <https://github.com/ionelmc/pytest-benchmark/pull/304>, [#306](https://github.com/ionelmc/pytest-benchmark/issues/306) <https://github.com/ionelmc/pytest-benchmark/pull/306> and [#319](https://github.com/ionelmc/pytest-benchmark/issues/319) <https://github.com/ionelmc/pytest-benchmark/pull/319>_.
  • Defer the xdist auto-disable warning until a benchmark fixture is collected. Contributed by xlyyddy in [#317](https://github.com/ionelmc/pytest-benchmark/issues/317) <https://github.com/ionelmc/pytest-benchmark/pull/317>_ (fixes [#65](https://github.com/ionelmc/pytest-benchmark/issues/65) <https://github.com/ionelmc/pytest-benchmark/issues/65>_).
  • Replaced deprecated argparse.FileType. Contributed by Sophia Castellarin in [#310](https://github.com/ionelmc/pytest-benchmark/issues/310) <https://github.com/ionelmc/pytest-benchmark/pull/310>_.
  • Fixed various spelling/typos. Contributed by Daniel Holth and Hugo van Kemenade in [#297](https://github.com/ionelmc/pytest-benchmark/issues/297) <https://github.com/ionelmc/pytest-benchmark/pull/297>_ and [#299](https://github.com/ionelmc/pytest-benchmark/issues/299) <https://github.com/ionelmc/pytest-benchmark/pull/299>_.
  • Cleaned up various dead code. Contributed by Hugo van Kemenade in [#300](https://github.com/ionelmc/pytest-benchmark/issues/300) <https://github.com/ionelmc/pytest-benchmark/pull/300>_ and [#301](https://github.com/ionelmc/pytest-benchmark/issues/301) <https://github.com/ionelmc/pytest-benchmark/pull/301>_.
  • CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14 and PyPy 3.11.
Commits
  • 07d5196 Bump version: 5.2.3 → 5.3.0
  • accf733 Add some details on #304.
  • 417dd9f Really update the changelog.
  • 898acb3 Update changelog and plan release.
  • 9cc7ef0 Defer xdist warning until benchmark collection (#65)
  • ef48550 Some minor skel updates: test only against latest pytest; bump linting/format...
  • 88eaea9 Add --benchmark-precision for adaptive rounds (opt-in)
  • 3b83d12 Update and freeze GHA actions
  • 4b7662f Fix ruff complaints
  • 26b0113 Remove Taplo lint (unmaintained)
  • Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates tox from 4.60.0 to 4.60.1

Release notes

Sourced from tox's releases.

v4.60.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.60.0...4.60.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.60.1

  • Report a malformed tox.ini or setup.cfg as a handled error during config discovery instead of raising an unhandled :class:configparser.Error traceback - by :user:VXNCXNX (:issue:4027)
  • Report an invalid value in the ini [tox] core section (such as min_version, requires or env_list) as a handled error instead of an unhandled traceback, matching the existing TOML loader behavior - by :user:VXNCXNX (:issue:4028)
  • Report an invalid --skip-env/TOX_SKIP_ENV regular expression as a handled error instead of raising an unhandled re.error traceback - by :user:VXNCXNX (:issue:4029)
  • Keep ; inside values read from a set_env environment file (file|.env). Environment file lines are plain KEY=VALUE pairs and were incorrectly parsed with the PEP-508 marker splitter, which truncated values such as DATABASE_URL=postgresql://host/db?opt=1;sslmode=require at the first semicolon - by :user:VXNCXNX (:issue:4030)
  • Report a handled configuration error instead of leaking a traceback when the selected configuration file exists but cannot be read - by :user:SirHegel. (:issue:4031)
  • Report an empty install_command or list_dependencies_command in a TOML configuration as a handled error instead of an unhandled traceback - by :user:dylanpulver (:issue:4041)

Contributor-facing changes - 4.60.1

  • Pre-seed the setuptools wheel image alongside pip before the test session and give integration tests a 240s budget on Windows, so pytest-timeout no longer kills Windows CI workers - by :user:gaborbernat. (:issue:4026)

v4.60.0 (2026-08-13)

Commits
  • e91ca3b release 4.60.1
  • 59e984f Report an empty TOML command value as a handled error (#4041)
  • fcb513e [pre-commit.ci] pre-commit autoupdate (#4040)
  • e753137 Report a bad ini core value as a handled error (#4028)
  • 79a45b4 🔧 chore: batch dependency updates weekly on Tuesday (#4038)
  • e388aeb 🔧 chore: drop the now-unused ty ignore directive (#4039)
  • 76baa0a docs: drop the claim that tox -e py skips tests with missing dependencies (#4...
  • 0250664 build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#4037)
  • 8527c61 fix: report an invalid --skip-env regex as a handled error (#4029)
  • fb859dc fix: a semicolon truncates a value read from a set_env file (#4030)
  • Additional commits viewable in compare view

Updates abnf-rust from 2.8.3 to 2.9.0

Changelog

Sourced from abnf-rust's changelog.

2.9.0

  • abnf.grammars.rfc9051's tagged-ext-comp and option-val-comp match something. Both matched nothing at all -- not even the bare astring their own first alternative admits -- because RFC 9051 writes them left-recursively and a recursive-descent parser cannot evaluate that. Longest-match alternation is what made it total: every alternative is tried, so the recursive one is always reached. Rewritten by hoisting the repeated item into its own rule, which says the same thing without the left recursion, and verified identical on both backends (declaresub/abnf#252).

    About twenty rules depended on them, list, esearch-response, mailbox-list and the list-select-* family among them.

  • abnf.grammars.rfc9051's resp-text-code accepts its atom SP text form. The trailing 1*<any TEXT-CHAR except "]"> was left as prose, and a Prose parser always raises -- so the optional group could only ever take its empty branch and that alternative never matched. Nothing rejected the input: resp-text falls through to [text], which admits any TEXT-CHAR, so [MYCODE some text] hello parsed with no resp-text-code in the tree at all. Now spelled out as RESP-TEXT-CODE-CHAR, TEXT-CHAR minus %x5D (declaresub/abnf#245).

    Twelve rules reached that prose, response -- the top-level server response -- among them, so the generated corpus had been skipping all of them; it covers 223 rules now rather than 210. tests/test_grammars.py asserts that no loaded grammar reaches a Prose parser, which is a defect wherever it appears.

  • abnf.grammars.rfc9051 no longer parses IMAP atoms with RFC 5322's rule. The module imported ("atom", rfc5322.Rule("atom")) while also defining atom = 1*ATOM-CHAR itself; imports are applied after the grammar list, so the email rule won. IMAP then accepted ' abc ' and '(comment)abc' -- leading whitespace and an RFC 5322 comment -- and rejected 'a.b', though . is a perfectly good ATOM-CHAR. atom feeds auth-type, charset, flag-extension and others (declaresub/abnf#234).

    Four transcription errors in the same module go with it, since they interact. ATOM-CHAR and TAG-CHAR excluded :, } and ~, none of which are atom-specials. flag-perm had lost the backslash from "\*", so a bare * was accepted -- and \* parsed only by way of the atom import, so fixing either alone would have broken PERMANENTFLAGS responses. TEXT-CHAR and QUOTED-CHAR ran to %xFF, admitting lone invalid UTF-8 bytes, where the RFC defines them over 7-bit CHAR and reaches non-ASCII through UTF8-2/3/4. And mbx-list-extended was a half-rename of the RFC's mbox-list-extended, so that rule could not be looked up by its own name.

    Note the TEXT-CHAR correction has a usage consequence: UTF8-2/3/4 are

... (truncated)

Commits
  • fcab2e1 Merge pull request #270 from declaresub/dependabot/uv/dev-dependencies-5a711c...
  • cca53cd Merge branch 'master' into dependabot/uv/dev-dependencies-5a711c8117
  • 99ad511 Merge pull request #269 from declaresub/ci/codeql-action-v4
  • c61bd4e Bump the dev-dependencies group across 1 directory with 3 updates
  • 7493dc2 Bump github/codeql-action to v4.37.7 in one change
  • 605650b Merge pull request #268 from declaresub/release/2.9.0
  • d4fa065 Prepare the 2.9.0 release
  • 332779b Merge pull request #267 from declaresub/fix/260-empty-literal
  • 8b710d7 Clear the last three review findings: #260, #261, #262
  • f681098 Merge pull request #266 from declaresub/fix/258-first-match-assignment
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 4 updates
3b3b350 
Bumps the dev-dependencies group with 4 updates in the / directory: [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark), [ruff](https://github.com/astral-sh/ruff), [tox](https://github.com/tox-dev/tox) and [abnf-rust](https://github.com/declaresub/abnf).


Updates `pytest-benchmark` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/ionelmc/pytest-benchmark/releases)
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v5.2.3...v5.3.0)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `tox` from 4.60.0 to 4.60.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.60.0...4.60.1)

Updates `abnf-rust` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/declaresub/abnf/releases)
- [Changelog](https://github.com/declaresub/abnf/blob/master/CHANGELOG.md)
- [Commits](v2.8.3...v2.9.0)

---
updated-dependencies:
- dependency-name: pytest-benchmark
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tox
  dependency-version: 4.60.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: abnf-rust
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 4, 2026
@dependabot
dependabot Bot requested a review from declaresub as a code owner September 4, 2026 08:08
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 7, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/dev-dependencies-b2d541c53e branch September 7, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@declaresub declaresub Awaiting requested review from declaresub declaresub is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants