Skip to content

📦 deps: bump the uv group across 1 directory with 10 updates - #9

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/uv-9402062555
Closed

📦 deps: bump the uv group across 1 directory with 10 updates#9
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/uv-9402062555

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2025

Copy link
Copy Markdown

Bumps the uv group with 10 updates in the / directory:

Package From To
joserfc 1.2.2 1.3.2
sqlalchemy[mypy] 2.0.42 2.0.43
alembic[tz] 1.16.4 1.16.5
pytest 8.4.1 8.4.2
pytest-mock 3.14.1 3.15.0
freezegun 1.5.4 1.5.5
pre-commit 4.2.0 4.3.0
greenlet 3.2.3 3.2.4
ruff 0.12.7 0.12.12
cryptography 45.0.5 45.0.7

Updates joserfc from 1.2.2 to 1.3.2

Release notes

Sourced from joserfc's releases.

1.3.2

   🐞 Bug Fixes

    View changes on GitHub

1.3.1

   🐞 Bug Fixes

    View changes on GitHub

1.3.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Changelog

Sourced from joserfc's changelog.

1.3.2

Released on September 4, 2025

  • Returns the first key when multiple keys found in a key set.
  • Validate if a "crit" header is supported in the registry.

1.3.1

Released on August 27, 2025

  • Fix jws.deserialize_json and jwe.decrypt_json, preventing unprotected header overwriting protected header.

1.3.0

Released on August 25, 2025

  • Exporting all algorithms in joserfc.jwa module.
  • Allow reusing JWTClaimsRegistry instance, via :issue:68.
  • Added claim attribute on claim errors, via :issue:69.
  • Added JWSRegistry.guess_alg method, via :issue:49.

Breaking changes:

  • Remove Python 3.8 support.
  • Rename JWS and JWE Algorithm model class names to prevent name conflicts.
Commits
  • 408c865 chore: release 1.3.2
  • d96a71b docs: update migration guide
  • 7008512 fix: check header in crit is supported
  • 4183e3f chore(deps): bump SonarSource/sonarqube-scan-action (#70)
  • 0c3caaf fix(jwk): return the first key when multiple keys found in key set
  • d6f0d8a docs: update security policy
  • 830c647 chore: release 1.3.1
  • faf2076 tests: adding types for tests
  • 2831990 fix: prevent unprotected header overwriting protected header
  • 56f2333 docs: update translations
  • Additional commits viewable in compare view

Updates sqlalchemy[mypy] from 2.0.42 to 2.0.43

Release notes

Sourced from sqlalchemy[mypy]'s releases.

2.0.43

Released: August 11, 2025

orm

  • [orm] [bug] Fixed issue where using the post_update feature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had an Column.onupdate callable or a version id generator used by orm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.

    References: #12748

  • [orm] [bug] Fixed issue where _orm.mapped_column.use_existing_column parameter in _orm.mapped_column() would not work when the _orm.mapped_column() is used inside of an Annotated type alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.

    References: #12787

  • [orm] [bug] Improved the implementation of the _orm.selectin_polymorphic() inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the _orm.selectinload() relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.

    References: #12790

engine

  • [engine] [usecase] Added new parameter create_engine.skip_autocommit_rollback which provides for a per-dialect feature of preventing the DBAPI .rollback() from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the .rollback() call remains prohibitive even if autocommit mode is set.

    References: #12784

postgresql

... (truncated)

Commits

Updates alembic[tz] from 1.16.4 to 1.16.5

Release notes

Sourced from alembic[tz]'s releases.

1.16.5

Released: August 27, 2025

bug

  • [bug] [mysql] Fixed Python-side autogenerate rendering of index expressions in MySQL dialect by aligning it with SQLAlchemy's MySQL index expression rules. Pull request courtesy david-fed.

    References: #1492

  • [bug] [config] Fixed issue where new pyproject.toml config would fail to parse the integer value used for the truncate_slug_length parameter. Pull request courtesy Luís Henrique Allebrandt Schunemann.

    References: #1709

Commits

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates pytest-mock from 3.14.1 to 3.15.0

Release notes

Sourced from pytest-mock's releases.

v3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • #524: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Changelog

Sourced from pytest-mock's changelog.

3.15.0

2025-09-04

  • Python 3.8 (EOL) is no longer supported.
  • [#524](https://github.com/pytest-dev/pytest-mock/issues/524) <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.
Commits

Updates freezegun from 1.5.4 to 1.5.5

Changelog

Sourced from freezegun's changelog.

1.5.5

  • Allow parametrized arguments called 'func' (Broken in 1.5.4)
Commits

Updates pre-commit from 4.2.0 to 4.3.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.3.0

Features

Changelog

Sourced from pre-commit's changelog.

4.3.0 - 2025-08-09

Features

Commits
  • b74a22d v4.3.0
  • cc899de Merge pull request #3507 from bc-lee/dart-fix
  • 2a0bcea Downgrade Dart SDK version installed in the CI
  • f1cc7a4 Make Dart pre-commit hook compatible with the latest Dart SDKs
  • 72a3b71 Merge pull request #3504 from pre-commit/pre-commit-ci-update-config
  • c8925a4 [pre-commit.ci] pre-commit autoupdate
  • a5fe6c5 Merge pull request #3496 from ericphanson/eph/jl-startup
  • 6f1f433 Julia language: skip startup.jl file
  • c681721 Merge pull request #3499 from pre-commit/pre-commit-ci-update-config
  • 4fd4537 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates greenlet from 3.2.3 to 3.2.4

Changelog

Sourced from greenlet's changelog.

3.2.4 (2025-08-07)

.. note::

The 3.2.x series will be the last to support Python 3.9.

  • Various small build/test changes for less common configurations (e.g., building CPython with assertions enabled but NOT debugging), contributed by Michał Górny. Note that while greenlet will BUILD in a free-threaded Python, it will cause the GIL to be allocated and used, and memory may leak. Also note that these configurations are not tested by this project's CI.
  • Fix an assertion error on debug builds of Python 3.14 when using the experimental JIT. See :issue:460 <https://github.com/python-greenlet/greenlet/issues/460>_.
Commits
  • 65f8da8 Preparing release 3.2.4
  • b2c6559 Update CHANGES for release.
  • b2aa1aa Merge pull request #462 from python-greenlet/issue460
  • a1990d8 Python3.14/JIT: Save and restore the PyThreadState current_executor object.
  • 68af251 Py3.14 w/JIT: Fix leakchecks.
  • 74a65bd Various free-threaded fixes; bump tested Python version.
  • e3e2953 Merge pull request #459 from mgorny/py314-debug-build-failure
  • bdb5f44 Merge pull request #456 from mgorny/setuptools-test-dep
  • b288f43 Merge pull request #457 from mgorny/fix-assert-test-skips
  • 739cc55 Fix py312+ crash test skips to correctly check for assertions
  • Additional commits viewable in compare view

Updates ruff from 0.12.7 to 0.12.12

Release notes

Sourced from ruff's releases.

0.12.12

Release Notes

Preview features

  • Show fixes by default (#19919)
  • [airflow] Convert DatasetOrTimeSchedule(datasets=...) to AssetOrTimeSchedule(assets=...) (AIR311) (#20202)
  • [airflow] Improve the AIR002 error message (#20173)
  • [airflow] Move airflow.operators.postgres_operator.Mapping from AIR302 to AIR301 (#20172)
  • [flake8-async] Implement blocking-input rule (ASYNC250) (#20122)
  • [flake8-use-pathlib] Make PTH119 and PTH120 fixes unsafe because they can change behavior (#20118)
  • [pylint] Add U+061C to PLE2502 (#20106)
  • [ruff] Fix false negative for empty f-strings in deque calls (RUF037) (#20109)

Bug fixes

  • Less confidently mark f-strings as empty when inferring truthiness (#20152)
  • [fastapi] Fix false positive for paths with spaces around parameters (FAST003) (#20077)
  • [flake8-comprehensions] Skip C417 when lambda contains yield/yield from (#20201)
  • [perflint] Handle tuples in dictionary comprehensions (PERF403) (#19934)

Rule changes

  • [pycodestyle] Preserve return type annotation for ParamSpec (E731) (#20108)

Documentation

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.12

Preview features

  • Show fixes by default (#19919)
  • [airflow] Convert DatasetOrTimeSchedule(datasets=...) to AssetOrTimeSchedule(assets=...) (AIR311) (#20202)
  • [airflow] Improve the AIR002 error message (#20173)
  • [airflow] Move airflow.operators.postgres_operator.Mapping from AIR302 to AIR301 (#20172)
  • [flake8-async] Implement blocking-input rule (ASYNC250) (#20122)
  • [flake8-use-pathlib] Make PTH119 and PTH120 fixes unsafe because they can change behavior (#20118)
  • [pylint] Add U+061C to PLE2502 (#20106)
  • [ruff] Fix false negative for empty f-strings in deque calls (RUF037) (#20109)

Bug fixes

  • Less confidently mark f-strings as empty when inferring truthiness (#20152)
  • [fastapi] Fix false positive for paths with spaces around parameters (FAST003) (#20077)
  • [flake8-comprehensions] Skip C417 when lambda contains yield/yield from (#20201)
  • [perflint] Handle tuples in dictionary comprehensions (PERF403) (#19934)

Rule changes

  • [pycodestyle] Preserve return type annotation for ParamSpec (E731) (#20108)

Documentation

0.12.11

Preview features

  • [airflow] Extend AIR311 and AIR312 rules (#20082)
  • [airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) (#20081)
  • [flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) (#20091)
  • [flake8-logging-format] Add auto-fix for f-string logging calls (G004) (#19303)
  • [flake8-use-pathlib] Add autofix for PTH211 (#20009)
  • [flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior (#20100)

Bug fixes

  • [pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) (#20048)
  • [pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) (#20115)
  • [ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) (#20032)
  • [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#19647)

Rule changes

  • [ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) (#20045)

... (truncated)

Commits
  • c6516e9 Bump 0.12.12 (#20242)
  • 1aaa084 [ty] More tests for TypedDict (#20205)
  • b49aa35 Split LICENSE addendum by derivation type (#20222)
  • 1e34f3f [ty] Fix small test typo (#20220)
  • 77b2cee [ty] Add functions for revealing assignability/subtyping constraints (#20217)
  • 200349c [flake8-comprehensions] Skip C417 when lambda contains yield/`yield fro...
  • 0d4f7dd [ty] Treat __new__ as a static method (#20212)
  • cb1ba0d Expose Indentation in ruff_python_codegen (#20216)
  • cda376a [ty]eliminate definitely-impossible types from union in equality narrowing (#...
  • b14fc96 Update Rust crate tracing-subscriber to v0.3.20 (#20162)
  • Additional commits viewable in compare view

Updates cryptography from 45.0.5 to 45.0.7

Changelog

Sourced from cryptography's changelog.

45.0.7 - 2025-09-01


* Added a function to support an upcoming ``pyOpenSSL`` release.

.. _v45-0-6:

45.0.6 - 2025-08-05

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.2.

.. _v45-0-5:

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [joserfc](https://github.com/authlib/joserfc) | `1.2.2` | `1.3.2` |
| [sqlalchemy[mypy]](https://github.com/sqlalchemy/sqlalchemy) | `2.0.42` | `2.0.43` |
| [alembic[tz]](https://github.com/sqlalchemy/alembic) | `1.16.4` | `1.16.5` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `8.4.2` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.1` | `3.15.0` |
| [freezegun](https://github.com/spulec/freezegun) | `1.5.4` | `1.5.5` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.2.3` | `3.2.4` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.7` | `0.12.12` |
| [cryptography](https://github.com/pyca/cryptography) | `45.0.5` | `45.0.7` |



Updates `joserfc` from 1.2.2 to 1.3.2
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](authlib/joserfc@1.2.2...1.3.2)

Updates `sqlalchemy[mypy]` from 2.0.42 to 2.0.43
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `alembic[tz]` from 1.16.4 to 1.16.5
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `pytest` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...8.4.2)

Updates `pytest-mock` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.14.1...v3.15.0)

Updates `freezegun` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/spulec/freezegun/releases)
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](spulec/freezegun@1.5.4...1.5.5)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

Updates `greenlet` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.2.3...3.2.4)

Updates `ruff` from 0.12.7 to 0.12.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.7...0.12.12)

Updates `cryptography` from 45.0.5 to 45.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@45.0.5...45.0.7)

---
updated-dependencies:
- dependency-name: joserfc
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: sqlalchemy[mypy]
  dependency-version: 2.0.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: alembic[tz]
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pytest-mock
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: freezegun
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: greenlet
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: ruff
  dependency-version: 0.12.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: cryptography
  dependency-version: 45.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 5, 2025
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2025

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 12, 2025
@dependabot
dependabot Bot deleted the dependabot/uv/uv-9402062555 branch September 12, 2025 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants