Bump the minor group with 5 updates

[dependabot]

Bumps the minor group with 5 updates:

Package	From	To
cython	3.2.5	3.2.8
prek	0.4.5	0.4.6
mkdocstrings-python	2.0.4	2.0.5
ruff	0.15.17	0.15.20
zensical	0.0.45	0.0.46

Updates cython from 3.2.5 to 3.2.8

Changelog

Sourced from cython's changelog.

3.2.8 (2026-06-30)

Bugs fixed

• Assigning a Python 3.14+ .__annotate__ function to a Cython compiled function no longer evaluates annotations eagerly. Fixes a regression with @functools.wraps() in Cython 3.2.6. Patch by Jelle Zijlstra. (Github issue :issue:7767)

• In freethreading Python, the necessary object keep-alive while executing user code in .__dealloc__() uses a safer scheme. Patch by Yaxing Cai. (Github issue :issue:7769)

• The local function state used by sys.monitoring read from uninitialised memory. (Github issue :issue:7774)

• The .ag_running flag attribute of async generators was always false on big-endian systems.

3.2.6 (2026-06-24)

Bugs fixed

• @functools.wraps() was broken in Py3.14+ for Cython compiled functions. (Github issue :issue:7675)

• A double-free in the t-string code was fixed. (Github issue :issue:7712)

• The - operator declarations for iterators in libcpp.vector we corrected. Patch by Vadim Markovtsev. (Github issue :issue:7717)

• The shared utility code module no longer uses a temporary file path that changed the C code on each generation. (Github issue :issue:7723)

• On 32 bit platforms, cached constants are no longer made immortal during module import. (Github issue :issue:7744)

Other changes

• Binary wheels are now built with -DNDEBUG to discard runtime assertions from CPython's inline functions.

Commits

• fee6fd6 Prepare release of 3.2.8.
• 2feda19 Fix macro usage in Py3.8.
• 21daa4e Prepare release of 3.2.7.
• 6a69c3c Update changelog.
• 60f2bdc Fix dealloc refcount guard resurrecting dying objects on free-threading (...
• 4f47fd3 Update changelog.
• 1e7ea1e Update changelog.
• 410d60c Fix use of uninitialized monitoring fields in generator/coroutine objects (GH...
• e70ca99 Fix cyfunction annotate setter on Python 3.14 (GH-7768)
• 86ba584 Fix access to the ".ag_running" flag of async generators on big-endian systems.
• Additional commits viewable in compare view

Updates prek from 0.4.5 to 0.4.6

Release notes

Sourced from prek's releases.

0.4.6

Release Notes

Released on 2026-07-01.

Enhancements

• Verify managed toolchain downloads before installation (#2229)
• Add PREK_DOCKER_NO_INIT to opt-out Docker --init (#2242)
• Improve subprocess error messages (#2257)
• Split run concurrency knobs: PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES (#2276)

Performance

• Avoid allocating markdown extensions per file (#2245)
• Avoid unchanged config tracking writes (#2247)
• Delay trailing whitespace output buffer (#2244)
• Prefilter VCS permalink lines (#2253)
• Skip unnecessary submodule updates during hook repo clone (#2255)

Documentation

• Document language_version inferring for Python and Go (#2241)

Other changes

• Refactor env var handling (#2277)
• Use serde-saphyr for YAML string quoting (#2228)

Contributors

• @​shaanmajid
• @​j178

Install prek 0.4.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.6/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.6/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.6

Released on 2026-07-01.

Enhancements

• Verify managed toolchain downloads before installation (#2229)
• Add PREK_DOCKER_NO_INIT to opt-out Docker --init (#2242)
• Improve subprocess error messages (#2257)
• Split run concurrency knobs: PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES (#2276)

Performance

• Avoid allocating markdown extensions per file (#2245)
• Avoid unchanged config tracking writes (#2247)
• Delay trailing whitespace output buffer (#2244)
• Prefilter VCS permalink lines (#2253)
• Skip unnecessary submodule updates during hook repo clone (#2255)

Documentation

• Document language_version inferring for Python and Go (#2241)

Other changes

• Refactor env var handling (#2277)
• Use serde-saphyr for YAML string quoting (#2228)

Contributors

• @​shaanmajid
• @​j178

Commits

• 643fba4 Bump version to 0.4.6 (#2280)
• b0f9261 Refactor env var handling (#2277)
• 8494d16 Split run concurrency knobs (#2276)
• f20bbaa Update sample config for .pre-commit-config.yaml (#2275)
• 5485289 Pin pre-commit repos to commit hash (#2274)
• d418ab3 Improve nix shebang parsing (#2271)
• cc261c1 Update actions/checkout action to v7 (#2267)
• 8d2dbba Update Rust crate itertools to 0.15.0 (#2265)
• 51db86c Update Rust crate phf to 0.14.0 (#2266)
• 1aa7d38 Update dependency uv to v0.11.23 (#2262)
• Additional commits viewable in compare view

Updates mkdocstrings-python from 2.0.4 to 2.0.5

Release notes

Sourced from mkdocstrings-python's releases.

2.0.5

2.0.5 - 2026-06-19

Compare with 2.0.4

Bug Fixes

• Allow relative cross-references to work in summaries (abe2888 by Timothée Mazzucotelli). Issue-331
• Always display attribute values as they're written in the source (0334131 by Timothée Mazzucotelli). Issue-311

Changelog

Sourced from mkdocstrings-python's changelog.

2.0.5 - 2026-06-19

Compare with 2.0.4

Bug Fixes

• Allow relative cross-references to work in summaries (abe2888 by Timothée Mazzucotelli). Issue-331
• Always display attribute values as they're written in the source (0334131 by Timothée Mazzucotelli). Issue-311

Commits

• 1670ecb chore: Prepare release 2.0.5
• abe2888 fix: Allow relative cross-references to work in summaries
• 0334131 fix: Always display attribute values as they're written in the source
• 39311c7 docs: Lint docs
• 835a406 chore: Never fail type-checking (maintenance mode)
• See full diff in compare view

Updates ruff from 0.15.17 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

• Allow human-readable names in rule selectors (#25887)
• Emit a warning instead of an error for unknown rule selectors (#26113)
• Match noqa shebang handling in ruff:ignore comments (#26286)
• [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

• Add versioning sections to custom crate READMEs (#26317)
• Update ruff_python_parser README for crates.io (#26315)
• [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

• @​dhruvmanila
• @​MichaReiser
• @​ntBre
• @​trilamsr

Install ruff 0.15.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"

Download ruff 0.15.20

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

• Allow human-readable names in rule selectors (#25887)
• Emit a warning instead of an error for unknown rule selectors (#26113)
• Match noqa shebang handling in ruff:ignore comments (#26286)
• [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

• Add versioning sections to custom crate READMEs (#26317)
• Update ruff_python_parser README for crates.io (#26315)
• [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

• @​dhruvmanila
• @​MichaReiser
• @​ntBre
• @​trilamsr

0.15.19

Released on 2026-06-23.

Preview features

• Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

• Fall back to default settings when editor-only settings are invalid (#26244)
• Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

• [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

• Avoid allocating when parsing single string literals (#26200)
• Avoid reallocating singleton call arguments (#26223)
• Lazily create source files for lint diagnostics (#26226)
• Optimize formatter text width and indentation (#26236)
• Reserve capacity for builtin bindings (#26229)
• Skip repeated-key checks for singleton dictionaries (#26228)
• Use ArrayVec for qualified name segments (#26224)

... (truncated)

Commits

• f82a36b Bump 0.15.20 (#26376)
• af32943 Improve the summarise-ecosystem-results skill (#26378)
• 485ebab Remove RUF076 name from schema (#26371)
• ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
• 572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
• f703f21 Allow human-readable names in rule selectors (#25887)
• 0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
• dbe6e98 [ty] Infer definite equality comparison results (#26337)
• e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
• 6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
• Additional commits viewable in compare view

Updates zensical from 0.0.45 to 0.0.46

Release notes

Sourced from zensical's releases.

0.0.46

Summary

This version improves search result quality and includes several bug fixes and refactorings.

Search excerpts

Search results now include excerpts, making it easier to understand why a result matches. Search remains fully client-side and as fast as before, even for projects with thousands of pages. We still consider search an active area of iteration and expect to further improve it and expose more configuration options over time.

Try it in our documentation!

User interface

The user interface is updated to v0.0.19, which includes several navigation and interaction fixes. Search highlighting now ignores single-character tokens, which avoids noisy matches like highlighting every e for queries such as e-mail. Instant previews now include a hover bridge so moving the cursor from a link to the tooltip no longer drops the popup across the visual gap.

Dependencies were also updated, including TypeScript 6 and SVGO 4 compatibility adjustments. 83 new icons were added, 2 icons were removed, and 19 icons were modified. The Lucide icon set was updated to version v1.21.0.

Validation defaults

The validation options unresolved_references, unresolved_footnotes, unused_definitions, unused_footnotes, shadowed_definitions, and shadowed_footnotes are now disabled by default. These checks remain available when explicitly enabled, but they have proven too unstable in edge cases with the current reference parser. They will eventually be superseded by the higher-fidelity parser that is already used by Zensical Studio and is planned for Open Source release and later integration into Zensical.

Changelog

Bug fixes

• aeb31ad ui – update ui to v0.0.19
• 61b6d05 compat – preserve small tags in generated search index
• edb0878 zensical – search path segment is empty when title is sourced from section index page
• 909f973 compat – don't crash on invalid URLs in HTML (#755)
• e6b55fe compat – strip images from toc labels (#749)
• 0f11c7f – update pyo3 to 0.29.0 to mitigate 2 vulnerabilities

Refactorings

• e4a370f zensical, compat – change several validation defaults to false (#758)

Commits

• c76960e chore: release v0.0.46
• 5533aba Merge pull request #761 from zensical/chore/update-ui
• aeb31ad fix: update ui to v0.0.19
• fb4637c chore: update .mono.toml to account for configuration changes
• 61b6d05 fix: preserve small tags in generated search index
• edb0878 fix: search path segment is empty when title is sourced from section index page
• e4a370f refactor: change several validation defaults to false (#758)
• 909f973 fix: don't crash on invalid URLs in HTML (#755)
• e6b55fe fix: strip images from toc labels (#749)
• 0f11c7f fix: update pyo3 to 0.29.0 to mitigate 2 vulnerabilities
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions