Skip to content

build(deps): bump the python-dependencies group across 1 directory with 6 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d7d43f2cff
Closed

build(deps): bump the python-dependencies group across 1 directory with 6 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d7d43f2cff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Updates the requirements on typer, pypdf, pypdfform, pyhanko[image-support], hypothesis and ruff to permit the latest version.
Updates typer from 0.27.0 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates pypdf from 6.14.2 to 6.15.0

Release notes

Sourced from pypdf's releases.

Version 6.15.0, 2026-08-06

What's new

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901) by @​PJBrs
  • Allow keeping original PDF header in non-incremental clone mode (#3918) by @​pctablet505
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @​PJBrs
  • Add actions base class (#3552) by @​j-t-1

Bug Fixes (BUG)

Documentation (DOC)

Maintenance (MAINT)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.15.0, 2026-08-06

Security (SEC)

  • Improve performance of read_until_whitespace (#3947)
  • Limit CID width range and width count when loading fonts (#3946)
  • Limit token length for ToUnicode entries (#3944)

Deprecations (DEP)

  • Deprecate previously missed inline_images setter as well (#3897)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901)
  • Allow keeping original PDF header in non-incremental clone mode (#3918)
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831)
  • Add actions base class (#3552)

Bug Fixes (BUG)

  • Expand low-bit samples for images without a filter (#3938)
  • Decode low-bit DeviceRGB images as RGB instead of palette (#3929)
  • Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937)

Documentation (DOC)

  • Image and attachment filenames are unsanitized (#3942)

Maintenance (MAINT)

  • Update charset mappings (#3935)

Full Changelog

Commits
  • 7f226a2 REL: 6.15.0
  • 4959848 SEC: Improve performance of read_until_whitespace (#3947)
  • 51cb6ac SEC: Limit CID width range and width count when loading fonts (#3946)
  • afba808 SEC: Limit token length for ToUnicode entries (#3944)
  • aa2f37d DOC: Image and attachment filenames are unsanitized (#3942)
  • 760ba28 DOC: Further clarify security policy
  • 55bd85c BUG: Expand low-bit samples for images without a filter (#3938)
  • 4807cb4 ROB: Tolerate malformed /FontBBox when building font descriptors (#3895)
  • ce9320b DEV: Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#3941)
  • 8b6f6fd ENH: Add ActualText tag when we produce RTL appearance stream (#3901)
  • Additional commits viewable in compare view

Updates pypdfform from 5.5.2 to 5.5.4

Release notes

Sourced from pypdfform's releases.

v5.5.4

What's Changed

Full Changelog: chinapandaman/PyPDFForm@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: chinapandaman/PyPDFForm@v5.5.2...v5.5.3

Commits
  • cdb12f0 [skip ci]: v5.5.3 => v5.5.4
  • f4e5ea7 Merge pull request #2031 from chinapandaman/PPF-2030
  • 0dcef5a PPF-2030: bump the size to 8 across the board
  • 5cb0a3c PPF-2030: should reduce memory usage
  • 925d186 Merge pull request #2029 from chinapandaman/PPF-2028
  • 5fd65b8 PPF-2028: more DRY
  • 56952ca Merge pull request #2027 from chinapandaman/PPF-2026
  • cc6e697 PPF-2026: be more specific about Any hints
  • c349f12 [skip ci]: v5.5.2 => v5.5.3
  • 5ea21db Merge pull request #2025 from chinapandaman/PPF-2024
  • Additional commits viewable in compare view

Updates pyhanko[image-support] to 0.36.2

Release notes

Sourced from pyhanko[image-support]'s releases.

pyhanko 0.36.2 beta

The release artifacts have been published to PyPI. Documentation is available on ReadTheDocs.

Change log

The release notes for the 0.36.2 release are available on the Release History page

Changelog

Sourced from pyhanko[image-support]'s changelog.

0.36.2

Release date: 2026-07-27

Bugs fixed

  • Prevent new signature fields from reusing old signature objects during difference analysis.

.. _release-0.36.1:

0.36.1

Release date: 2026-07-26

No functional changes, this release adopts the new :ref:attestation strategy <release-authenticity>.

.. _release-0.36.0:

0.36.0

Release date: 2026-07-25

Dependency changes

  • Bump the minimal signxml version to 5.1.0 (in the [etsi] group) to accommodate its point-in-time validation API.
  • Relax upper bound for uharfbuzz to <0.56.0.
  • Drop the direct dependency on pyyaml, which was no longer used.

New features and enhancements

Signing ^^^^^^^

  • Support signing with ML-DSA through the PKCS#11 signer.

... (truncated)

Commits
  • 0945f9b pyHanko 0.36.2 release
  • 1f31537 Prevent new sig fields from reusing old sigs
  • 39d3b74 Rename is_ref_available -> is_ref_unassignable
  • 8eaffab Artifact authenticity docs restructuring
  • dae7ec6 Add provenance data fetching to attestation script
  • aa81b12 Joint release with new attestations
  • a2a050a Additionally drop unnecessary download step
  • 405e412 Split off publish-github-release
  • 92a3ad5 Switch to GitHub attestations for provenance
  • 04711cf Typos in docstring
  • Additional commits viewable in compare view

Updates hypothesis from 6.161.2 to 6.165.2

Commits
  • deb4d49 Bump hypothesis version to 6.165.2 and update changelog
  • a9eff28 Merge pull request #4842 from HypothesisWorks/claude/invert-everything
  • c555e58 Cover the remaining _invert error paths in tests
  • f9882a3 Apply review feedback: type ValueHole.value as object, polish docs and tests
  • 8dca9e1 Restructure timezones() so its draws can be re-encoded
  • 7e309df Invert dictionaries, unique lists with tuple_suffixes, and fixed_dictionaries
  • 77ca292 Implement _invert for most remaining strategy combinators
  • 5b20755 Bump hypothesis version to 6.165.1 and update changelog
  • b4f2e92 Merge pull request #4806 from HypothesisWorks/claude/widening-shrinks
  • 9431e20 Apply suggestions from code review
  • Additional commits viewable in compare view

Updates ruff from 0.16.0 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits
  • 80790b3 Bump 0.16.1 (#27330)
  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
  • 0d80497 Lint TOML files in the LSP (#26862)
  • d91586b Update prek dependencies (#27293)
  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
  • 7c3e2db [ty] Fix enum class container assignability (#27318)
  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 6 updates

Updates the requirements on [typer](https://github.com/fastapi/typer), [pypdf](https://github.com/py-pdf/pypdf), [pypdfform](https://github.com/chinapandaman/PyPDFForm), [pyhanko[image-support]](https://github.com/MatthiasValvekens/pyHanko), [hypothesis](https://github.com/HypothesisWorks/hypothesis) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.

Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.0...0.27.1)

Updates `pypdf` from 6.14.2 to 6.15.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.14.2...6.15.0)

Updates `pypdfform` from 5.5.2 to 5.5.4
- [Release notes](https://github.com/chinapandaman/PyPDFForm/releases)
- [Commits](chinapandaman/PyPDFForm@v5.5.2...v5.5.4)

Updates `pyhanko[image-support]` to 0.36.2
- [Release notes](https://github.com/MatthiasValvekens/pyHanko/releases)
- [Changelog](https://github.com/MatthiasValvekens/pyHanko/blob/master/docs/changelog.rst)
- [Commits](MatthiasValvekens/pyHanko@v0.35.2...v0.36.2)

Updates `hypothesis` from 6.161.2 to 6.165.2
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.161.2...v6.165.2)

Updates `ruff` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.0...0.16.1)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pypdf
  dependency-version: 6.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pypdfform
  dependency-version: 5.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyhanko[image-support]
  dependency-version: 0.36.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.165.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from evrenverse as a code owner August 10, 2026 01:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 12, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-d7d43f2cff branch August 12, 2026 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants