Skip to content

chore(deps): bump hypothesis from 6.165.10 to 6.167.0 - #1086

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/hypothesis-6.167.0
Open

chore(deps): bump hypothesis from 6.165.10 to 6.167.0#1086
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/hypothesis-6.167.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps hypothesis from 6.165.10 to 6.167.0.

Commits
  • afe5b0b Bump hypothesis version to 6.167.0 and update changelog
  • 06bfa69 Merge pull request #4870 from Zac-HD/claude/status-reason-ideas-dum8wm
  • a0a7dfc Report the failing assume() when .map() gives up
  • d010799 Rename _filter_gave_ups test helper to _get_filter_gave_ups
  • ef98ff9 Fix the type of Bundle transformations
  • 8e36c8f Require passing data to SampledFromStrategy._transform
  • 47f1bc8 Pass location to __with_transform by keyword
  • d7a2dbd Rename filter_call_site to current_filter_call_site
  • 30b5f37 Move rejection_location onto ConjectureData
  • d390084 Access UnsatisfiedAssumption.location directly
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.165.10 to 6.167.0.
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.10...v6.167.0)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-version: 6.167.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 6, 2026
@dependabot
dependabot Bot requested a review from seonghobae as a code owner September 6, 2026 19:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 6, 2026

@cwl-noema-review cwl-noema-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Noema LLM review

Dependency-only bump of hypothesis from 6.165.10 to 6.167.0 with a regenerated lockfile. The direct pin in fuzz/requirements-property.in matches the resolved lock version, and the lockfile changes (removal of colorama and pip, addition of tomli/exceptiongroup, marker simplifications for cffi/pycparser) are consistent with a Python 3.12 universal compile. No source or behavior changes. No security or correctness regressions identified.

Reviewed changed lines

  • fuzz/requirements-property.txt:163 (RIGHT): Lockfile correctly pins hypothesis==6.167.0 with generated hashes, replacing the previous 6.165.10 block. This matches the .in file update and is internally consistent.
  • fuzz/requirements-property.txt:245 (RIGHT): Lockfile resolution for the Python 3.12 target remains coherent: packaging and pluggy are retained, tomli is added via pytest, and the cffi/pycparser marker removals correspond to a universal compile for the declared target. No inconsistent or dangling markers observed.

Adversarial validation

  • fuzz/requirements-property.txt:163 (RIGHT) falsified: The lockfile might not actually pin hypothesis to 6.167.0, or the hashes might be inconsistent with that version. — Line 163 on the RIGHT side explicitly contains 'hypothesis==6.167.0' followed by a large set of sha256 hashes. The old 6.165.10 block is gone, and the direct pin in fuzz/requirements-property.in was bumped to the same version. No conflicting pin exists.
  • fuzz/requirements-property.txt:245 (RIGHT) falsified: The regenerated lockfile may be internally inconsistent or unresolvable for the declared Python 3.12 target, e.g., missing transitive dependencies or illegal markers. — Line 245 and surrounding RIGHT-side lines retain packaging and pluggy under pytest, and later additions list tomli==2.4.1 under pytest, consistent with Python 3.12 resolution. The marker removals for cffi and pycparser are expected for a 3.12 universal compile without PyPy. No marker or dependency references are invalid for the declared target.
  • Residual risk: No blocking issues found. The regenerated lockfile was not executed in CI in this review, so a platform-specific resolution edge case (e.g., non-Python-3.12 or non-universal environment) cannot be fully excluded, but the declared target is Python 3.12 and the lockfile matches the documented compile command.

Findings

  • No blocking findings.
  • Result: APPROVE
  • Head SHA: 429c084d3e3b60fc85c64e8dd2ac89b6fb725401
  • Reviewer credential: noema-review-github-app-refresh
  • Actor: cwl-noema-review[bot]

@seonghobae seonghobae added maintenance priority: medium Normal-priority or P2 work type: maintenance Maintenance, build, dependency, or operational upkeep labels Sep 7, 2026 — with ChatGPT Codex Connector
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance priority: medium Normal-priority or P2 work python Pull requests that update python code type: maintenance Maintenance, build, dependency, or operational upkeep

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant