Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 4 updates - #223

Merged
github-actions[bot] merged 1 commit into
devfrom
dependabot/uv/python-dependencies-0e3c6c5a40
Aug 30, 2026
Merged

github-actions[bot] merged 1 commit into
devfrom
dependabot/uv/python-dependencies-0e3c6c5a40

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 4 updates in the / directory: gitpython, pygithub, ruff and mypy.

Updates gitpython from 3.1.59 to 3.1.60

Release notes

Sourced from gitpython's releases.

3.1.60 Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

Commits
  • 56636c3 prepare new release
  • c7cf4d1 fix: prefer .git during repository discovery
  • d160fb4 Merge pull request #2217 from gitpython-developers/fix-advisory
  • 09f2cf3 fix: require opt-in for no-index diffs
  • f44c1fb Merge pull request #2215 from gitpython-developers/various-fixes
  • 751473a fix: parse actor identities without regular expressions
  • 4b9afe9 Merge pull request #2213 from gitpython-developers/config-sanitizer-follow-up
  • 9a92677 fix: decode quoted diff paths in one pass
  • eefa7e4 Preserve Git config value semantics
  • 52a6cba Merge pull request #2212 from gitpython-developers/next-release
  • See full diff in compare view

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

Improvements

Bug Fixes

Maintenance

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

  • Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)
  • Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

  • Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)
  • Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)
  • Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)
  • Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)
  • Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)
  • Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

  • Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)
  • Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)
  • Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)
  • Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)
  • Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)
  • Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)
  • Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)
  • Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)
  • Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)
  • Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)
  • Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)
  • Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

  • Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)
  • Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)
  • Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)
  • Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)
  • Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)
  • Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)
  • Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)
  • Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)
  • Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits
  • 5cdf6ab Release 2.10.0 (#3560)
  • 33071b3 Fix lazy retrieval of latest tag name (#3487)
  • 4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
  • c63d09e docs: add example for uploading multiple files in a single commit (#3545)
  • 4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
  • 134f38a Allow creating custom property with values_editable_by param (#3548)
  • 5f707d6 Fix WorkflowRun schema suggestion (#3559)
  • 8280929 docs: add exception handling example (#3543)
  • c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
  • 162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
  • Additional commits viewable in compare view

Updates ruff from 0.16.2 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 4 updates

Bumps the python-dependencies group with 4 updates in the / directory: [gitpython](https://github.com/gitpython-developers/GitPython), [pygithub](https://github.com/pygithub/pygithub), [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy).


Updates `gitpython` from 3.1.59 to 3.1.60
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.59...3.1.60)

Updates `pygithub` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.9.1...v2.10.0)

Updates `ruff` from 0.16.2 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.4)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pygithub
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 30, 2026
@github-actions
github-actions Bot enabled auto-merge (rebase) August 30, 2026 10:56
@github-actions
github-actions Bot merged commit ae7b53e into dev Aug 30, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-0e3c6c5a40 branch August 30, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant