Bump the development-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #860 · abey79/vpype

dependabot · 2026-07-21T12:37:15Z

Bumps the development-dependencies group with 8 updates in the / directory:

Package	From	To
coverage	`7.14.1`	`7.15.2`
mypy	`2.1.0`	`2.3.0`
pytest	`9.0.3`	`9.1.1`
ruff	`0.15.15`	`0.16.1`
syrupy	`5.3.1`	`5.5.3`
types-cachetools	`7.0.0.20260518`	`7.0.0.20260713`
types-setuptools	`82.0.0.20260518`	`83.0.0.20260724`
matplotlib	`3.10.9`	`3.11.1`

Updates coverage from 7.14.1 to 7.15.2

Release notes

Sourced from coverage's releases.

7.15.2

Version 7.15.2 — 2026-07-15

Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️ PyPI page: coverage 7.15.2. :arrow_right: To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.

A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.

➡️ PyPI page: coverage 7.15.1. :arrow_right: To install: python3 -m pip install coverage==7.15.1

7.15.0

Version 7.15.0 — 2026-07-02

Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198.

Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen.

When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks.

Fix: with Python 3.10, running with the -I (isolated mode) option didn’t correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin.

➡️ PyPI page: coverage 7.15.0. :arrow_right: To install: python3 -m pip install coverage==7.15.0

7.14.3

Version 7.14.3 — 2026-06-22

Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang.

Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can’t import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade.

➡️ PyPI page: coverage 7.14.3. :arrow_right: To install: python3 -m pip install coverage==7.14.3

7.14.2

Version 7.14.2 — 2026-06-20

Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197.

Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd.

Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don’t really make sense, so now we search for a usable one instead. Fixes issue 2187.

Following the advice of cibuildwheel, we no longer distribute wheels for Python 3.13 free-threaded.

➡️ PyPI page: coverage 7.14.2. :arrow_right: To install: python3 -m pip install coverage==7.14.2

Changelog

Sourced from coverage's changelog.

Version 7.15.2 — 2026-07-15

Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.

.. _issue 2229: coveragepy/coveragepy#2229

.. _changes_7-15-1:

Version 7.15.1 — 2026-07-12

Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.

A number of performance improvements thanks to Paul Kehrer, in pull requests 2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pull 2221_>_.

.. _pull 2213: coveragepy/coveragepy#2213 .. _pull 2214: coveragepy/coveragepy#2214 .. _pull 2215: coveragepy/coveragepy#2215 .. _pull 2216: coveragepy/coveragepy#2216 .. _pull 2218: coveragepy/coveragepy#2218 .. _pull 2220: coveragepy/coveragepy#2220 .. _pull 2221: coveragepy/coveragepy#2221 .. _pull 2224: coveragepy/coveragepy#2224

.. _changes_7-15-0:

Version 7.15.0 — 2026-07-02

Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198_.

Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen <pull 2206_>.

When running your program, coverage now correctly sets

... (truncated)

Commits

50d8659 docs: sample HTML for 7.15.2
b5eed20 docs: prep for 7.15.2
78cab6e fix: reduce memory use during reporting. #2229 (#2231)
b4c1fda build: bump version to 7.15.2
da63bed docs: sample HTML for 7.15.1
bc35e64 docs: prep for 7.15.1
182b010 perf: resolve sysmon branch events lazily, one pair at a time (#2221)
ee271ee perf: compute multiline maps cheaply in the sysmon core (#2220)
1441b96 chore: bump the action-dependencies group with 6 updates (#2225)
dd80635 fix: escape context labels in html report inline script block (#2224)
Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels #119](mypyc/mypy_mypyc-wheels#119)

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)

Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)

Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)

Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)

Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits

8aabf84 Drop +dev from version
4d8ad2a Update changelog for 2.3 release (#21728)
2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
24c237d [mypyc] Improve documentation of Final (#21713)
b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
cbcb51a Narrow for frozendict membership check (#21709)
af2bc0f Sync typeshed (#21707)
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates ruff from 0.15.15 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

@MichaReiser

... (truncated)

Commits

80790b3 Bump 0.16.1 (#27330)
63830f3 [ty] Borrow from constraint set storage less often (#27328)
f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
0d80497 Lint TOML files in the LSP (#26862)
d91586b Update prek dependencies (#27293)
7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
b20daf7 [ty] refactor: add helper function to send partial results (#27249)
4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
7c3e2db [ty] Fix enum class container assignability (#27318)
d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
Additional commits viewable in compare view

Updates syrupy from 5.3.1 to 5.5.3

Release notes

Sourced from syrupy's releases.

v5.5.3

What's Changed

This release has no functional changes. It just fixes an issue where the release tag pointed to the previous commit instead of the commit with the updated pyproject.toml (see syrupy-project/syrupy#1144).

Full Changelog: syrupy-project/syrupy@v5.5.2...v5.5.3

v5.5.2

What's Changed

fix: Fix detecting pytest-xdist when loaded via PYTEST_PLUGINS by @mgorny in syrupy-project/syrupy#1142

New Contributors

@mgorny made their first contribution in syrupy-project/syrupy#1142

Full Changelog: syrupy-project/syrupy@v5.5.1...v5.5.2

v5.5.1

What's Changed

fix: Defer registering pytest-xdist hook pytest_testnodedown to avoid "unknown hook" error by @edgarrmondragon in syrupy-project/syrupy#1140

New Contributors

@edgarrmondragon made their first contribution in syrupy-project/syrupy#1140

Full Changelog: syrupy-project/syrupy@v5.5.0...v5.5.1

v5.5.0

What's Changed

feat: detect unused snapshots under pytest-xdist by @frenck in syrupy-project/syrupy#1132

NOTE: Test suites using pytest-xdist that previously passed due to incomplete snapshot support may now fail if unused snapshots are detected. You can use --snapshot-warn-unused to downgrade unused snapshot detection from an error to a warning though it's not recommended.

Full Changelog: syrupy-project/syrupy@v5.4.0...v5.5.0

v5.4.0

What's Changed

feat: add --snapshot-no-cleanup to keep unused snapshots on update by @frenck in syrupy-project/syrupy#1126

fix: honor boolean operators in -k snapshot selection by @frenck in syrupy-project/syrupy#1127

Full Changelog: syrupy-project/syrupy@v5.3.4...v5.4.0

v5.3.4

What's Changed

perf: drop per-node kwargs dict from the amber serializer by @frenck in syrupy-project/syrupy#1122

perf: give the internal matcher wrapper an explicit signature by @frenck in syrupy-project/syrupy#1121

fix: avoid os.environ mutation for color control by @frenck in syrupy-project/syrupy#1125

Full Changelog: syrupy-project/syrupy@v5.3.3...v5.3.4

... (truncated)

Changelog

Sourced from syrupy's changelog.

v5.5.3 (2026-07-11)

What's Changed

chore(deps): update astral-sh/setup-uv action to v8.3.0 by @renovate[bot] in syrupy-project/syrupy#1143

chore(deps): update astral-sh/setup-uv action to v8.3.1 by @renovate[bot] in syrupy-project/syrupy#1145

chore(deps): update dependency hypothesis to v6.156.2 by @renovate[bot] in syrupy-project/syrupy#1147

chore(deps): update dependency mypy to v2.2.0 by @renovate[bot] in syrupy-project/syrupy#1148

chore(deps): update dependency hypothesis to v6.156.3 by @renovate[bot] in syrupy-project/syrupy#1150

chore: closes #1144 by @noahnu in syrupy-project/syrupy#1146

chore(deps): update astral-sh/setup-uv action to v8.3.2 by @renovate[bot] in syrupy-project/syrupy#1149

Full Changelog: syrupy-project/syrupy@v5.5.2...v5.5.3

v5.5.2 (2026-07-08)

What's Changed

fix: Fix detecting pytest-xdist when loaded via PYTEST_PLUGINS by @mgorny in syrupy-project/syrupy#1142

New Contributors

@mgorny made their first contribution in syrupy-project/syrupy#1142

Full Changelog: syrupy-project/syrupy@v5.5.1...v5.5.2

v5.5.1 (2026-07-06)

What's Changed

fix: Defer registering pytest-xdist hook pytest_testnodedown to avoid "unknown hook" error by @edgarrmondragon in syrupy-project/syrupy#1140

New Contributors

@edgarrmondragon made their first contribution in syrupy-project/syrupy#1140

Full Changelog: syrupy-project/syrupy@v5.5.0...v5.5.1

v5.5.0 (2026-07-06)

What's Changed

feat: detect unused snapshots under pytest-xdist by @frenck in syrupy-project/syrupy#1132

NOTE: Test suites using pytest-xdist that previously passed due to incomplete snapshot support may now fail if unused snapshots are detected. You can use --snapshot-warn-unused to downgrade unused snapshot detection from an error to a warning though it's not recommended.

Full Changelog: syrupy-project/syrupy@v5.4.0...v5.5.0

v5.4.0 (2026-07-01)

What's Changed

feat: add --snapshot-no-cleanup to keep unused snapshots on update by @frenck in syrupy-project/syrupy#1126

fix: honor boolean operators in -k snapshot selection by @frenck in syrupy-project/syrupy#1127

... (truncated)

Commits

3cd3473 chore(release): 5.5.3 [skip ci]
fed7e9f chore(deps): update astral-sh/setup-uv action to v8.3.2 (#1149)
443fc11 chore: closes #1144 (#1146)
56bf157 chore(deps): update dependency hypothesis to v6.156.3 (#1150)
f9c725a chore(deps): update dependency mypy to v2.2.0 (#1148)
3af2ccf chore(deps): update dependency hypothesis to v6.156.2 (#1147)
feaa22c chore(deps): update astral-sh/setup-uv action to v8.3.1 (#1145)
5c59701 chore(deps): update astral-sh/setup-uv action to v8.3.0 (#1143)
1cbf716 chore(release): 5.5.2 [skip ci]
4f83490 fix: Fix detecting pytest-xdist when loaded via PYTEST_PLUGINS (#1142)
Additional commits viewable in compare view

Updates types-cachetools from 7.0.0.20260518 to 7.0.0.20260713

Commits

See full diff in compare view

Updates types-setuptools from 82.0.0.20260518 to 83.0.0.20260724

Commits

See full diff in compare view

Updates matplotlib from 3.10.9 to 3.11.1

Release notes

Sourced from matplotlib's releases.

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

Fix tight layout of multiple subplots with sharey=True

Fix NoNorm cursor formatting for uint8 images

Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)

Fix clipped Axis labels on 3D plots with tight layout

Fix inverted Axis on 3D plots

Fix restoring 'auto' aspect in 3D axes after switching from 'equal'

Fix missing glyphs when subsetting Type 1 fonts in PDF

Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

REL: v3.11.0

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. See the release notes for more information.

REL: v3.11.0rc2

This is the second release candidate for the meso release 3.11.0.

This release candidate fixes some problems with downstream packages, removes some missed deprecations, and corrects some additional minor bugs.

REL: v3.11.0rc1

After an extended development stretch, we are pleased to announce the first release candidate of Matplotlib 3.11.0.

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner. Due to the update to the font rendering stack, we cannot guarantee that text will be bit-for-bit perfect with previous releases, so if you are using Matplotlib for testing, it may be necessary to introduce/raise a tolerance within your tests.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. Final release notes are still being curated, but you may browse the list of new features, API changes, and all issues/pull requests on the milestone.

As a note for downstream packagers, the font libraries have only been tested against the versions bundled with the wheels. It may be possible to expand the range of requirements, or that a requirement is too broad. Please report any issues you have building against external dependencies.

Commits

3c1757a REL: v3.11.1
792c6b5 DOC: Prepare for 3.11.1
aaff9f6 Merge branch 'v3.11.0-doc' into v3.11.x
d4f4527 Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...
6ad4bcf Merge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...
7fb74d3 Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...
c624aec Backport PR #32038: Fix occasional misalignment in reported mouse position (a...
8eda2b7 Backport PR #32037: Bump the actions group with 3 updates
a0e7ae5 Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...
9001323 Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...
Additional commits viewable in compare view

sonarqubecloud · 2026-07-21T13:15:23Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

abey79 · 2026-08-03T06:28:15Z

@dependabot rebase

…ates Bumps the development-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [coverage](https://github.com/coveragepy/coveragepy) | `7.14.1` | `7.15.2` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.15` | `0.16.1` | | [syrupy](https://github.com/syrupy-project/syrupy) | `5.3.1` | `5.5.3` | | [types-cachetools](https://github.com/python/typeshed) | `7.0.0.20260518` | `7.0.0.20260713` | | [types-setuptools](https://github.com/python/typeshed) | `82.0.0.20260518` | `83.0.0.20260724` | | [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.9` | `3.11.1` | Updates `coverage` from 7.14.1 to 7.15.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.14.1...7.15.2) Updates `mypy` from 2.1.0 to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.3.0) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `ruff` from 0.15.15 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.15...0.16.1) Updates `syrupy` from 5.3.1 to 5.5.3 - [Release notes](https://github.com/syrupy-project/syrupy/releases) - [Changelog](https://github.com/syrupy-project/syrupy/blob/main/CHANGELOG.md) - [Commits](syrupy-project/syrupy@v5.3.1...v5.5.3) Updates `types-cachetools` from 7.0.0.20260518 to 7.0.0.20260713 - [Commits](https://github.com/python/typeshed/commits) Updates `types-setuptools` from 82.0.0.20260518 to 83.0.0.20260724 - [Commits](https://github.com/python/typeshed/commits) Updates `matplotlib` from 3.10.9 to 3.11.1 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.10.9...v3.11.1) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.15.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: matplotlib dependency-version: 3.11.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: ruff dependency-version: 0.15.22 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: syrupy dependency-version: 5.5.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: types-cachetools dependency-version: 7.0.0.20260713 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: types-setuptools dependency-version: 83.0.0.20260716 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-01T14:37:55Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 21, 2026

dependabot Bot force-pushed the dependabot/pip/development-dependencies-3e8b0b8375 branch from f9d4ab6 to d63b756 Compare July 21, 2026 13:14

dependabot Bot force-pushed the dependabot/pip/development-dependencies-3e8b0b8375 branch from d63b756 to 5f402fa Compare August 1, 2026 14:36

dependabot Bot force-pushed the dependabot/pip/development-dependencies-3e8b0b8375 branch from 5f402fa to db1ace0 Compare August 3, 2026 06:33

dependabot Bot closed this Sep 1, 2026

dependabot Bot deleted the dependabot/pip/development-dependencies-3e8b0b8375 branch September 1, 2026 14:40

Navigation Menu

Repository navigation

Bump the development-dependencies group across 1 directory with 8 updates - #860

Bump the development-dependencies group across 1 directory with 8 updates#860
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/development-dependencies-3e8b0b8375

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jul 21, 2026

Uh oh!

abey79 commented Aug 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.15.2

Version 7.15.2 — 2026-07-15

7.15.1

Version 7.15.1 — 2026-07-12

7.15.0

Version 7.15.0 — 2026-07-02

7.14.3

Version 7.14.3 — 2026-06-22

7.14.2

Version 7.14.2 — 2026-06-20

Version 7.15.2 — 2026-07-15

Version 7.15.1 — 2026-07-12

Version 7.15.0 — 2026-07-02

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

The Upcoming Switch to the New Native Parser

Mypyc Free-threading Memory Safety

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

0.16.1

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.16.1

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

v5.5.3

What's Changed

v5.5.2

What's Changed

New Contributors

v5.5.1

What's Changed

New Contributors

v5.5.0

What's Changed

v5.4.0

What's Changed

v5.3.4

What's Changed

v5.5.3 (2026-07-11)

What's Changed

v5.5.2 (2026-07-08)

What's Changed

New Contributors

v5.5.1 (2026-07-06)

What's Changed

New Contributors

v5.5.0 (2026-07-06)

What's Changed

v5.4.0 (2026-07-01)

What's Changed

REL: v3.11.1

REL: v3.11.0

REL: v3.11.0rc2

REL: v3.11.0rc1

Uh oh!

sonarqubecloud Bot commented Jul 21, 2026

Quality Gate passed

Uh oh!

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading