Skip to content

Update: Bump the python-dependencies group across 1 directory with 6 updates - #39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-de0f722c24
Open

Update: Bump the python-dependencies group across 1 directory with 6 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-de0f722c24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 6 updates in the / directory:

Package From To
pyright 1.1.411 1.1.414
ruff 0.16.5 0.16.7
hypothesis 6.167.0 6.168.0
griffelib 2.2.0 2.3.0
mutmut 3.7.0 3.8.0
anyio 4.14.2 4.15.1

Updates pyright from 1.1.411 to 1.1.414

Commits

Updates ruff from 0.16.5 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates hypothesis from 6.167.0 to 6.168.0

Commits
  • cd434f2 Bump hypothesis version to 6.168.0 and update changelog
  • 3187fb9 Merge pull request #4868 from Zac-HD/claude/hypothesis-datetime-strategy-ajzai0
  • a60dc77 Reduce rate of tricky datetimes
  • 67e5c04 Merge pull request #4875 from HypothesisWorks/create-pull-request/patch
  • ecaed93 Merge remote-tracking branch 'upstream/master' into plait/review-hypothesis-4868
  • 116ef84 Probe backwards for bound windows before the scan range
  • ef17651 Bound the cache of probed timezone transitions
  • 6b35510 Skip transition probing for fixed-offset timezones
  • 26df9dd Simplify clamping of tricky-draw windows
  • 6e9b745 Extract a _draw_ordinary_datetime helper
  • Additional commits viewable in compare view

Updates griffelib from 2.2.0 to 2.3.0

Updates mutmut from 3.7.0 to 3.8.0

Release notes

Sourced from mutmut's releases.

3.8.0

What's Changed

New Contributors

Full Changelog: boxed/mutmut@3.7.0...3.8.0

Changelog

Sourced from mutmut's changelog.

3.8.0


* Fix obsolete test names never being removed from ``mutants/mutmut-stats.json`` (`[#564](https://github.com/boxed/mutmut/issues/564)`)

    

  • 

    Fix # pragma: no mutate block being silently ignored when placed on an else, except, except* or finally header, and on the try line of a try/except* ([#559](https://github.com/boxed/mutmut/issues/559))
    

    • 

  • 

    Fix # pragma: no mutate being silently ignored on match and case headers ([#554](https://github.com/boxed/mutmut/issues/554))
    

    • 

  • 

    Fix mutants being reported as survived when a test uses patch.dict(os.environ, ..., clear=True) ([#511](https://github.com/boxed/mutmut/issues/511), [#552](https://github.com/boxed/mutmut/issues/552))
    

    • 

  • 

    Fix mutate_only_covered_lines mutating code that coverage.py excludes from measurement (# pragma: no cover, exclude_lines, exclude_also) ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix mutations that delete ignored code. Dropping a case from a match, or an argument from a call, is a mutation of the enclosing node, so it used to be made even when the removed lines were themselves ignored ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix methods of decorated classes (for example @dataclass) not being mutated ([#480](https://github.com/boxed/mutmut/issues/480), [#539](https://github.com/boxed/mutmut/issues/539))
    

    • 

  • 

    Fix time measurement including test setup/teardown instead of only the main test run ([#544](https://github.com/boxed/mutmut/issues/544))
    

    • 

  • 

    Fix mutants stopped by the CPU-time limit being reported as killed instead of timed out ([#565](https://github.com/boxed/mutmut/issues/565))
    

    • 

  • 

    Fix mutate_only_covered_lines breaking when the test suite imports a dependency that cannot be initialized twice in one process, which raised for numpy and libyaml, produced misleading type errors for cryptography, and segfaulted for asyncpg. Coverage is now gathered in a separate process, so the modules the coverage run imports are no longer unloaded and re-imported in the main process ([#528](https://github.com/boxed/mutmut/issues/528), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Mutate the condition of ternary expressions ([#196](https://github.com/boxed/mutmut/issues/196), [#546](https://github.com/boxed/mutmut/issues/546))
    

    • 

  • 

    Add a process_isolation config for choosing which process mutant workers are forked from. The new forkserver strategy keeps mutmut's main process free of pytest and your conftest.py, routing every fork through a dedicated fork server process, for test setups that are not fork-safe (gevent, grpc, torch). Tune what it preloads with forkserver_warmup ([#578](https://github.com/boxed/mutmut/issues/578), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Add a badge command that writes a shields.io endpoint file, for publishing the mutation score ([#549](https://github.com/boxed/mutmut/issues/549))
    

    • 

  • 

    Support python3.15 ([#551](https://github.com/boxed/mutmut/issues/551))

Commits
  • 14a7230 Release 3.8.0 (#581)
  • 4ff5d9e Fix obsolete test names never being removed from the stats file (#569)
  • c3a8f4b feat: process isolation and fork-safe test runners (#566)
  • 7f8ba00 misc: update history (#576)
  • 301df52 Fix pragma: no mutate on match/case headers being silently ignored
  • 630e846 fix: delete twice "-24" param and up ruff for tests it
  • b1d1270 ci: pre-commit workflow (#567)
  • 748bfc0 refac: main decomposition (#561)
  • 2f39c84 Honour 'pragma: no mutate block' on else/except/finally arms (#559)
  • e450cfc chore: up mypy to 2.3.1
  • Additional commits viewable in compare view

Updates anyio from 4.14.2 to 4.15.1

Release notes

Sourced from anyio's releases.

4.15.1

  • Implemented a compatibility fix for supporting direct access of anyio.* submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)

4.15.0

  • Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

    • follow_symlinks on exists() (Python 3.12+)
    • follow_symlinks on is_dir() (Python 3.13+)
    • follow_symlinks on is_file() (Python 3.13+)
    • follow_symlinks on owner() (Python 3.13+)
    • follow_symlinks on group() (Python 3.13+)
    • newline on read_text() (Python 3.13+)

    (#1286, #1293; PR by @​jaideeppyne)

  • Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @​Graeme22)

  • Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @​EmmanuelNiyonshuti)

  • Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @​Vizonex)

  • Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @​nightcityblade)

  • Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @​davidbrochart)

  • Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

  • Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @​gschaffner)

  • Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

  • Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @​EmmanuelNiyonshuti)

  • Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @​c-tonneslan)

  • Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @​Graeme22)

  • Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @​gschaffner)

  • Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @​tapetersen)

  • Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @​Sanjays2402)

  • Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @​alloutflo)

  • Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @​matthewfeickert)

  • Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @​hansu650)

  • Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @​zelinewang)

... (truncated)

Commits
  • ffcd154 Bumped up the version
  • 0ecf5ed Added a workaround for third party code accessing unimported submodules (#1309)
  • 9283662 Bumped up the version
  • d137692 Improved the instructions for AI agents
  • 033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
  • 942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
  • b825c3b Fixed pyproject.toml changes not triggering the test suite
  • 9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
  • b05fe6d Fixed wrong type in move_on_after (#1297)
  • 44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Update: Bump the python-dependencies group across 1 directory with 6 …
b238410 
…updates

Bumps the python-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.7` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.167.0` | `6.168.0` |
| griffelib | `2.2.0` | `2.3.0` |
| [mutmut](https://github.com/boxed/mutmut) | `3.7.0` | `3.8.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.14.2` | `4.15.1` |



Updates `pyright` from 1.1.411 to 1.1.414
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414)

Updates `ruff` from 0.16.5 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.5...0.16.7)

Updates `hypothesis` from 6.167.0 to 6.168.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.167.0...v6.168.0)

Updates `griffelib` from 2.2.0 to 2.3.0

Updates `mutmut` from 3.7.0 to 3.8.0
- [Release notes](https://github.com/boxed/mutmut/releases)
- [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst)
- [Commits](boxed/mutmut@3.7.0...3.8.0)

Updates `anyio` from 4.14.2 to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.14.2...4.15.1)

---
updated-dependencies:
- dependency-name: pyright
  dependency-version: 1.1.414
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.168.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: griffelib
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mutmut
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants