Skip to content

Bump the dev-dependencies group across 1 directory with 6 updates - #279

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/dev-dependencies-3cf76ef515
Open

Bump the dev-dependencies group across 1 directory with 6 updates#279
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/dev-dependencies-3cf76ef515

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 6 updates in the / directory:

Package From To
pytest-benchmark 5.2.3 5.3.0
hypothesis 6.165.10 6.167.1
ruff 0.16.3 0.16.5
tox 4.60.0 4.61.2
setuptools-scm 10.2.1 10.2.2
abnf-rust 2.8.3 2.9.0

Updates pytest-benchmark from 5.2.3 to 5.3.0

Release notes

Sourced from pytest-benchmark's releases.

v5.3.0

Changelog

Sourced from pytest-benchmark's changelog.

v5.3.0 (2026-08-23)

  • Added --benchmark-precision and --benchmark-confidence: instead of a fixed number of rounds, stop once the mean's relative margin of error falls below the given fraction. Contributed by Aarni Koskela in [#318](https://github.com/ionelmc/pytest-benchmark/issues/318) <https://github.com/ionelmc/pytest-benchmark/pull/318>_.
  • Added compare --between mode. Example: pytest-benchmark compare --between=min 0001 0002. Contributed by Aarni Koskela in [#302](https://github.com/ionelmc/pytest-benchmark/issues/302) <https://github.com/ionelmc/pytest-benchmark/pull/302>_.
  • Modernized the CI/linting and added spellchecking. Contributed by Aarni Koskela in [#304](https://github.com/ionelmc/pytest-benchmark/issues/304) <https://github.com/ionelmc/pytest-benchmark/pull/304>, [#306](https://github.com/ionelmc/pytest-benchmark/issues/306) <https://github.com/ionelmc/pytest-benchmark/pull/306> and [#319](https://github.com/ionelmc/pytest-benchmark/issues/319) <https://github.com/ionelmc/pytest-benchmark/pull/319>_.
  • Defer the xdist auto-disable warning until a benchmark fixture is collected. Contributed by xlyyddy in [#317](https://github.com/ionelmc/pytest-benchmark/issues/317) <https://github.com/ionelmc/pytest-benchmark/pull/317>_ (fixes [#65](https://github.com/ionelmc/pytest-benchmark/issues/65) <https://github.com/ionelmc/pytest-benchmark/issues/65>_).
  • Replaced deprecated argparse.FileType. Contributed by Sophia Castellarin in [#310](https://github.com/ionelmc/pytest-benchmark/issues/310) <https://github.com/ionelmc/pytest-benchmark/pull/310>_.
  • Fixed various spelling/typos. Contributed by Daniel Holth and Hugo van Kemenade in [#297](https://github.com/ionelmc/pytest-benchmark/issues/297) <https://github.com/ionelmc/pytest-benchmark/pull/297>_ and [#299](https://github.com/ionelmc/pytest-benchmark/issues/299) <https://github.com/ionelmc/pytest-benchmark/pull/299>_.
  • Cleaned up various dead code. Contributed by Hugo van Kemenade in [#300](https://github.com/ionelmc/pytest-benchmark/issues/300) <https://github.com/ionelmc/pytest-benchmark/pull/300>_ and [#301](https://github.com/ionelmc/pytest-benchmark/issues/301) <https://github.com/ionelmc/pytest-benchmark/pull/301>_.
  • CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14 and PyPy 3.11.
Commits
  • 07d5196 Bump version: 5.2.3 → 5.3.0
  • accf733 Add some details on #304.
  • 417dd9f Really update the changelog.
  • 898acb3 Update changelog and plan release.
  • 9cc7ef0 Defer xdist warning until benchmark collection (#65)
  • ef48550 Some minor skel updates: test only against latest pytest; bump linting/format...
  • 88eaea9 Add --benchmark-precision for adaptive rounds (opt-in)
  • 3b83d12 Update and freeze GHA actions
  • 4b7662f Fix ruff complaints
  • 26b0113 Remove Taplo lint (unmaintained)
  • Additional commits viewable in compare view

Updates hypothesis from 6.165.10 to 6.167.1

Commits
  • a8dcd74 Bump hypothesis version to 6.167.1 and update changelog
  • c862b6f Merge pull request #4874 from Zac-HD/claude/cu-many-reject-span-discard-yhaidc
  • df39994 Merge pull request #4873 from HypothesisWorks/create-pull-request/patch
  • afe5b0b Bump hypothesis version to 6.167.0 and update changelog
  • 06bfa69 Merge pull request #4870 from Zac-HD/claude/status-reason-ideas-dum8wm
  • 1d0e155 Add return annotation to satisfy mypy's disallow_incomplete_defs
  • a0a7dfc Report the failing assume() when .map() gives up
  • d010799 Rename _filter_gave_ups test helper to _get_filter_gave_ups
  • ef98ff9 Fix the type of Bundle transformations
  • 8e36c8f Require passing data to SampledFromStrategy._transform
  • Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates tox from 4.60.0 to 4.61.2

Release notes

Sourced from tox's releases.

v4.61.2

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.61.1...4.61.2

v4.61.1

What's Changed

Full Changelog: tox-dev/tox@4.61.0...4.61.1

v4.61.0

What's Changed

Full Changelog: tox-dev/tox@4.60.1...4.61.0

v4.60.1

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.61.2

  • tox now expands a generative digit range only where a factor starts, so an environment such as py313-django4-2 keeps its name rather than becoming py313-django4, 3 and 2 - by :user:MohammedAlkindi. (:issue:4053)

Improved documentation - 4.61.2

  • Document how factors work in one place, covering what a factor is, the characters tox accepts in one, the platform and architecture factors that apply to conditions without appearing in a name, and how selecting by factor differs from selecting by name - by :user:gaborbernat. (:issue:4055)
  • Give a reference entry to the configuration keys that had none. interrupt_post_commands runs commands_post after an interrupt, and config_file_path, host_python, home and tox_root_name are constants a configuration can substitute - by :user:gaborbernat. (:issue:4056)

Contributor-facing changes - 4.61.2

  • Declare license metadata per PEP 639, adding license-files and dropping the license classifier in pyproject.toml - by :user:mwtoews. (:issue:4052)

v4.61.1 (2026-08-28)

Bug fixes - 4.61.1

  • Publish a JSON Schema that compiles under SchemaStore's validator again, so editors pick up the configuration keys added since 4.56 - by :user:gaborbernat. (:issue:4051)

Contributor-facing changes - 4.61.1

  • Check tox's JSON Schema with SchemaStore's own validator on every pull request that changes it, and again before the release sync opens a pull request there - by :user:gaborbernat. (:issue:4051)

v4.61.0 (2026-08-28)

Features - 4.61.0

  • A labeled factor group can now declare a default for {factor:label} to fall back on when no factor of that group is active in the environment name. Setting TOX_FACTOR_<label> resolves that label to a given value for a single run - by :user:gaborbernat. (:issue:4045)
  • A factor range now takes a label when you nest it under one, as in factors = [{ py_version = { prefix = "3.", start = 12, stop = 14 } }], which makes {factor:py_version} available for ranges - by :user:gaborbernat.

... (truncated)

Commits
  • 44fc6ac release 4.61.2
  • e28d9cf 📝 docs: name the actor in the factor and schema prose (#4057)
  • c808c2d [pre-commit.ci] pre-commit autoupdate (#4054)
  • 3aa0b69 📝 docs(config): document how factors work (#4055)
  • 12b4270 📝 docs(config): cover the keys that had no reference entry (#4056)
  • f31ebed 🐛 fix(config): stop splitting factor names that look like ranges (#4053)
  • 96e2d71 chore: add license-files, remove licence classifier (PEP 639) (#4052)
  • c8c010a release 4.61.1
  • cd8c1fa 🐛 fix(schema): declare prefix in the labeled factor group's not clause (#4051)
  • aa8f46c release 4.61.0
  • Additional commits viewable in compare view

Updates setuptools-scm from 10.2.1 to 10.2.2

Release notes

Sourced from setuptools-scm's releases.

setuptools-scm v10.2.2

Miscellaneous

  • The pkginfo workdir discovery entry point moved to vcs-versioning; vcs-versioning>=2.3.2 is now required (the workspace pin carries a .dev0 suffix so in-tree builds resolve, matching the existing convention). setuptools_scm._integration._discover.discover_pkginfo remains as a re-export. (#1507)
  • Stop shipping a per-package uv.lock in the sdist. It could not be generated correctly whenever setuptools-scm required an unreleased vcs-versioning, which broke the release proposal workflow. (#1509)
Commits
  • 96956be Merge pull request #1510 from pypa/release/main
  • 374a5e9 Prepare release: setuptools-scm v10.2.2, vcs-versioning v2.3.2
  • 50e9fb0 Merge pull request #1509 from RonnyPfannschmidt/drop-per-package-uv-lock
  • 5b4d4f5 build: stop shipping per-package uv.lock files
  • 313428d Merge pull request #1505 from pypa/dependabot/uv/uv-3c2e6777cb
  • 2f02b22 Merge pull request #1508 from RonnyPfannschmidt/fix-1507-pkginfo-discovery-in...
  • 33bbe3b refactor: rank fallback workdirs by a declared discovery_priority
  • 74c8aad fix: register PKG-INFO discovery in vcs-versioning
  • 353f98e chore(deps-dev): Bump the uv group with 3 updates
  • ffa8d49 Merge pull request #1502 from pypa/release/main
  • Additional commits viewable in compare view

Updates abnf-rust from 2.8.3 to 2.9.0

Changelog

Sourced from abnf-rust's changelog.

2.9.0

  • abnf.grammars.rfc9051's tagged-ext-comp and option-val-comp match something. Both matched nothing at all -- not even the bare astring their own first alternative admits -- because RFC 9051 writes them left-recursively and a recursive-descent parser cannot evaluate that. Longest-match alternation is what made it total: every alternative is tried, so the recursive one is always reached. Rewritten by hoisting the repeated item into its own rule, which says the same thing without the left recursion, and verified identical on both backends (declaresub/abnf#252).

    About twenty rules depended on them, list, esearch-response, mailbox-list and the list-select-* family among them.

  • abnf.grammars.rfc9051's resp-text-code accepts its atom SP text form. The trailing 1*<any TEXT-CHAR except "]"> was left as prose, and a Prose parser always raises -- so the optional group could only ever take its empty branch and that alternative never matched. Nothing rejected the input: resp-text falls through to [text], which admits any TEXT-CHAR, so [MYCODE some text] hello parsed with no resp-text-code in the tree at all. Now spelled out as RESP-TEXT-CODE-CHAR, TEXT-CHAR minus %x5D (declaresub/abnf#245).

    Twelve rules reached that prose, response -- the top-level server response -- among them, so the generated corpus had been skipping all of them; it covers 223 rules now rather than 210. tests/test_grammars.py asserts that no loaded grammar reaches a Prose parser, which is a defect wherever it appears.

  • abnf.grammars.rfc9051 no longer parses IMAP atoms with RFC 5322's rule. The module imported ("atom", rfc5322.Rule("atom")) while also defining atom = 1*ATOM-CHAR itself; imports are applied after the grammar list, so the email rule won. IMAP then accepted ' abc ' and '(comment)abc' -- leading whitespace and an RFC 5322 comment -- and rejected 'a.b', though . is a perfectly good ATOM-CHAR. atom feeds auth-type, charset, flag-extension and others (declaresub/abnf#234).

    Four transcription errors in the same module go with it, since they interact. ATOM-CHAR and TAG-CHAR excluded :, } and ~, none of which are atom-specials. flag-perm had lost the backslash from "\*", so a bare * was accepted -- and \* parsed only by way of the atom import, so fixing either alone would have broken PERMANENTFLAGS responses. TEXT-CHAR and QUOTED-CHAR ran to %xFF, admitting lone invalid UTF-8 bytes, where the RFC defines them over 7-bit CHAR and reaches non-ASCII through UTF8-2/3/4. And mbx-list-extended was a half-rename of the RFC's mbox-list-extended, so that rule could not be looked up by its own name.

    Note the TEXT-CHAR correction has a usage consequence: UTF8-2/3/4 are

... (truncated)

Commits
  • fcab2e1 Merge pull request #270 from declaresub/dependabot/uv/dev-dependencies-5a711c...
  • cca53cd Merge branch 'master' into dependabot/uv/dev-dependencies-5a711c8117
  • 99ad511 Merge pull request #269 from declaresub/ci/codeql-action-v4
  • c61bd4e Bump the dev-dependencies group across 1 directory with 3 updates
  • 7493dc2 Bump github/codeql-action to v4.37.7 in one change
  • 605650b Merge pull request #268 from declaresub/release/2.9.0
  • d4fa065 Prepare the 2.9.0 release
  • 332779b Merge pull request #267 from declaresub/fix/260-empty-literal
  • 8b710d7 Clear the last three review findings: #260, #261, #262
  • f681098 Merge pull request #266 from declaresub/fix/258-first-match-assignment
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 6 updates
252db7a 
Bumps the dev-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.2.3` | `5.3.0` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.10` | `6.167.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.3` | `0.16.5` |
| [tox](https://github.com/tox-dev/tox) | `4.60.0` | `4.61.2` |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `10.2.1` | `10.2.2` |
| [abnf-rust](https://github.com/declaresub/abnf) | `2.8.3` | `2.9.0` |



Updates `pytest-benchmark` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/ionelmc/pytest-benchmark/releases)
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v5.2.3...v5.3.0)

Updates `hypothesis` from 6.165.10 to 6.167.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.10...v6.167.1)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `tox` from 4.60.0 to 4.61.2
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.60.0...4.61.2)

Updates `setuptools-scm` from 10.2.1 to 10.2.2
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@setuptools-scm-v10.2.1...setuptools-scm-v10.2.2)

Updates `abnf-rust` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/declaresub/abnf/releases)
- [Changelog](https://github.com/declaresub/abnf/blob/master/CHANGELOG.md)
- [Commits](v2.8.3...v2.9.0)

---
updated-dependencies:
- dependency-name: pytest-benchmark
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: hypothesis
  dependency-version: 6.167.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tox
  dependency-version: 4.61.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: setuptools-scm
  dependency-version: 10.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: abnf-rust
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from declaresub as a code owner September 9, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@declaresub declaresub Awaiting requested review from declaresub declaresub is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants