chore(deps): bump the all-dependencies group across 1 directory with 11 updates

[dependabot]

Updates the requirements on google-cloud-aiplatform[adk,agent-engines], google-adk, pydantic, rich, gdown, pytest, agent-starter-pack, ruff, mypy, types-pyyaml and types-requests to permit the latest version.
Updates google-cloud-aiplatform[adk,agent-engines] to 1.151.0

Release notes

Sourced from google-cloud-aiplatform[adk,agent-engines]'s releases.

v1.151.0

1.151.0 (2026-05-07)

Features

• Add client for Vertex AI Skill Registry - Get Skill method (6f89fd3)
• Add Create Skill method for Vertex AI Skill Registry SDK (67097eb)
• Add RetrieveSkills semantic search method in Vertex AI Skill Registry SDK (f5909b2)
• Migrate rag to agentplatform (d947295)

Bug Fixes

• Disable bound token sharing check for this Vertex AI SDK code path: google3/third_party/py/google/cloud/aiplatform/vertexai/agent_engines/ (b234d9d)
• GenAI Client(evals) - fix reference column visualization for eval_result (42de11b)

Documentation

• Update Prompts sample in readme to use create_version (e50f375)

Changelog

Sourced from google-cloud-aiplatform[adk,agent-engines]'s changelog.

1.151.0 (2026-05-07)

Features

• Add client for Vertex AI Skill Registry - Get Skill method (6f89fd3)
• Add Create Skill method for Vertex AI Skill Registry SDK (67097eb)
• Add RetrieveSkills semantic search method in Vertex AI Skill Registry SDK (f5909b2)
• Migrate rag to agentplatform (d947295)

Bug Fixes

• Disable bound token sharing check for this Vertex AI SDK code path: google3/third_party/py/google/cloud/aiplatform/vertexai/agent_engines/ (b234d9d)
• GenAI Client(evals) - fix reference column visualization for eval_result (42de11b)

Documentation

• Update Prompts sample in readme to use create_version (e50f375)

1.150.0 (2026-05-05)

Features

• Add Agent Engine Runtime Versioning support to SDK. (b8eaefb)
• Add Agent Engine Sandbox Snapshots Module (f48e54b)
• Add support for templates sub-module for Sandboxes in Vertex AI GenAI SDK. (68f053e)
• Add support for wait for operation complete for sandbox sub-modules (737ad1c)
• Disable streaming check that should have already been disabled (762d20c)
• Faster sandbox creation with templates and snapshots and improve dataplane routing and security. (9dccee2)
• GenAI Client(evals) - Support eval_cases with multi-turn agent_data in run_inference() (a1680d3)
• GenAI Client(evals) - Support N+1 Agent Engine inference via agent_data in run_inference() (9ea4aa6)
• GenAI SDK client(multimodal) - Accept an explicit bigquery_uri parameter in create_from_bigquery (0bb2ecd)
• Migrate model garden to agentplatform (d5e71ff)
• Migrate resources to agentplatform (5788c50)
• Update sdk to support python-a2a sdk 1.0 via a new GA A2a framework template (762d20c)

Bug Fixes

• Allow setting max_wait_duration to 0 for indefinite waiting with DWS (d9675fd)
• Custom job url after rebrand (aabe816)
• Flaky tests in feature store relates cases due to class instantiation (9fd0fe0)
• GenAI SDK client(multimodal) - Preserve existing metadata when creating from bigframes (bc2260d)

1.149.0 (2026-04-27)

... (truncated)

Commits

• 719f874 chore(main): release 1.151.0 (#6739)
• 67097eb feat: Add Create Skill method for Vertex AI Skill Registry SDK
• f5909b2 feat: Add RetrieveSkills semantic search method in Vertex AI Skill Registry SDK
• d947295 feat: migrate rag to agentplatform
• 124e54d chore: pre-emptive v2-compatible test/code fixes for ADK migration
• e50f375 docs: Update Prompts sample in readme to use create_version
• b234d9d fix: Disable bound token sharing check for this Vertex AI SDK code path: goog...
• 6f89fd3 feat: Add client for Vertex AI Skill Registry - Get Skill method
• 062e254 chore: remove bulky coverage step from unit tests, remove unit tests from lin...
• c145803 chore: Update Langchain requirements to use langchain-google-genai.
• Additional commits viewable in compare view

Updates google-adk from 1.28.0 to 1.33.0

Release notes

Sourced from google-adk's releases.

v1.33.0

1.33.0 (2026-05-08)

Features

• add BufferableSessionService (0bc767e)
• apigee: allow injecting credentials into ApigeeLlm (ce578ff)
• Make ADK environment tools truncation limit configurable (83ae405)
• models: add get_function_calls and get_function_responses to LlmResponse (22fae7e)

Bug Fixes

• catch genai.ClientError when sandbox is missing (69fa777), closes #5480
• double append bug (f8b4c59)
• Filter out video events with inline data from being stored in session (88421f8)
• fix fork detection, correct offload limits, and add response logging in BigQuery plugin (9d1bb4b)
• hot reload agents for adk web (740557c)
• Only append skills to system instruction if ListSkillsTool isn't available (01f1fc9)
• prevent state_delta overwrite on function_response-only events (fc27203, 211e2ce), closes #3178
• Raise a clear actionable error when CustomAuthScheme lacks a registered AuthProvider (83f9817)
• should use app_name instead of req.app_name (8286066)
• simulation: Add error message when LlmBackedUserSimulator returns empty response (fb92aad)
• Update expressmode api call to include default api key param (e833995)
• use asyncio.sleep to avoid blocking event loop (3a1eadc)
• Use project and location instead of API key when deploying to agent engine (398f28f)

Code Refactoring

• adjust computation of workflow.steps metric and add new unit tests (03d6208)
• remove input.type and output.type attributes from adk metrics (9559968)

v1.32.0

1.32.0 (2026-04-30)

Features

• Add an option to prevent the SaveFilesAsArtifactsPlugin from attaching reference file parts to the message (987c809)
• add credentials parameter to BigQueryAgentAnalyticsPlugin (34713fb)
• Add express mode onboarding support to adk deploy cli (2b04996)
• add native OpenTelemetry agentic metrics (6942aac)
• Add OpenTelemetry tracing for event compaction (c65dd55)
• Add sample agent demonstrating 2LO, 3LO, and API Key auth via GcpAuthProvider (909a8c2)
• Add support for Anthropic's thinking blocks (16952bd)
• Add support for excluding predefined functions in ComputerUseToolset (d760037)
• Add support for refusal messages in ApigeeLlm (d6594a1)
• Added indication of user message in history event list (662354a)

... (truncated)

Changelog

Sourced from google-adk's changelog.

1.33.0 (2026-05-08)

Features

• add BufferableSessionService (0bc767e)
• apigee: allow injecting credentials into ApigeeLlm (ce578ff)
• Make ADK environment tools truncation limit configurable (83ae405)
• models: add get_function_calls and get_function_responses to LlmResponse (22fae7e)

Bug Fixes

• catch genai.ClientError when sandbox is missing (69fa777), closes #5480
• double append bug (f8b4c59)
• Filter out video events with inline data from being stored in session (88421f8)
• fix fork detection, correct offload limits, and add response logging in BigQuery plugin (9d1bb4b)
• hot reload agents for adk web (740557c)
• Only append skills to system instruction if ListSkillsTool isn't available (01f1fc9)
• prevent state_delta overwrite on function_response-only events (fc27203, 211e2ce), closes #3178
• Raise a clear actionable error when CustomAuthScheme lacks a registered AuthProvider (83f9817)
• should use app_name instead of req.app_name (8286066)
• simulation: Add error message when LlmBackedUserSimulator returns empty response (fb92aad)
• Update expressmode api call to include default api key param (e833995)
• use asyncio.sleep to avoid blocking event loop (3a1eadc)
• Use project and location instead of API key when deploying to agent engine (398f28f)

Code Refactoring

• adjust computation of workflow.steps metric and add new unit tests (03d6208)
• remove input.type and output.type attributes from adk metrics (9559968)

1.32.0 (2026-04-30)

Features

• Add an option to prevent the SaveFilesAsArtifactsPlugin from attaching reference file parts to the message (987c809)
• add credentials parameter to BigQueryAgentAnalyticsPlugin (34713fb)
• Add express mode onboarding support to adk deploy cli (2b04996)
• add native OpenTelemetry agentic metrics (6942aac)
• Add OpenTelemetry tracing for event compaction (c65dd55)
• Add sample agent demonstrating 2LO, 3LO, and API Key auth via GcpAuthProvider (909a8c2)
• Add support for Anthropic's thinking blocks (16952bd)
• Add support for excluding predefined functions in ComputerUseToolset (d760037)
• Add support for refusal messages in ApigeeLlm (d6594a1)
• Added indication of user message in history event list (662354a)
• Allow user to define credential_key for McpToolset (282db87), closes #5103
• analytics: add support for logging LLM cache metadata to BigQuery (02deeb9)

... (truncated)

Commits

• 643ebd1 chore: update last-release-sha for next release
• 896b6da chore(release/candidate): release 1.33.0 (#5646)
• 88421f8 fix: Filter out video events with inline data from being stored in session
• e833995 fix: Update expressmode api call to include default api key param
• 0bc767e feat: add BufferableSessionService
• 83ae405 feat: Make ADK environment tools truncation limit configurable
• fb92aad fix(simulation): Add error message when LlmBackedUserSimulator returns empty ...
• 3117e09 chore: further fix header-check via 2025 --> 2026
• 153c7f7 ci: ignore browser assets in license lint
• b58ce57 chore: Enable gemini EAP models for gemini-builtin tools
• Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

• Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits

• cf67d4b Fix linting
• f0d8a21 Prepare release v2.13.4
• 5e3fe1d Check for pydantic tag pattern in CI
• 7f9edcc Document tagging conventions
• b46a0c9 Adapt pydantic-core linker flags on macOS
• 50629c8 Update to PyPy 7.3.22
• 8522ebb Preserve RootModel core metadata
• a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
• 909259a Remove Logfire example in documentation
• 2c4174c Bump libc from 0.2.155 to 0.2.185
• Additional commits viewable in compare view

Updates rich from 14.3.3 to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

• Breaking change: Dropped support for Python3.8

Fixed

• Fixed empty print ignoring the end parameter Textualize/rich#4075
• Fixed Text.from_ansi removing newlines Textualize/rich#4076
• Fixed FileProxy.isatty not proxying Textualize/rich#4077
• Fixed inline code in Markdown tables cells Textualize/rich#4079

The Faster Startup Release

No new features in this release, but there should be improved startup time for Rich apps, and potentially improved runtime if you have a lot of links.

[14.3.4] - 2026-04-11

Changed

• Improved import time with lazy loading Textualize/rich#4070
• Changed link id generation to avoid random number generation at runtime Textualize/rich#3845

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

• Breaking change: Dropped support for Python3.8

Fixed

• Fixed empty print ignoring the end parameter Textualize/rich#4075
• Fixed Text.from_ansi removing newlines Textualize/rich#4076
• Fixed FileProxy.isatty not proxying Textualize/rich#4077
• Fixed inline code in Markdown tables cells Textualize/rich#4079

[14.3.4] - 2026-04-11

Changed

• Improved import time with lazy loading Textualize/rich#4070
• Changed link id generation to avoid random number generation at runtime Textualize/rich#3845

Commits

• 6ac483c correction
• 458a910 Merge pull request #4080 from Textualize/bump1500
• 82e06e0 changelog
• d6556bc bump to 15.0.0
• ffe2edc Merge pull request #4079 from Textualize/inline-table-code
• cf3b5a1 changelog
• 77f0edb remove comments
• 7ef2d05 fix inline code in table cells
• 19c67b9 Merge pull request #4077 from Textualize/isattry
• 494b795 changelog
• Additional commits viewable in compare view

Updates gdown from 5.2.1 to 6.0.0

Release notes

Sourced from gdown's releases.

v6.0.0

A lot has changed since v5.2.1 back in January. 33 pull requests (109 commits) went into this release, touching nearly every part of the codebase.

Highlights

• gdown --folder / download_folder() now supports folders with more than 50 files
• download() raises DownloadError on failure instead of returning None
• New progress parameter in download()
• Path traversal vulnerability fixed in extractall() (GHSA-76hw-p97h-883f)
• All deprecated APIs from v5 have been (finally) removed
• Python 3.10+ required (3.8 and 3.9 dropped)

Most users should be able to upgrade without issues. The one change that will likely need code updates is the switch from returning None to raising DownloadError on failure.

Breaking changes

• download() and download_folder() now raise DownloadError instead of returning None (#451)

  Previously, download() and download_folder() returned None when a download failed. Now, they raise DownloadError (or its subclass FileURLRetrievalError).

  If your code looks like this:

  output = gdown.download(url, output="file.txt")
  if output is None:
      print("Download failed")

  Change it to:

  try:
      output = gdown.download(url, output="file.txt")
  except gdown.DownloadError as e:
      print(f"Download failed: {e}")

• fuzzy parameter and --fuzzy CLI flag removed (#455)

  Previously, you needed fuzzy=True (or --fuzzy) to download from Google Drive share links like https://drive.google.com/file/d/FILE_ID/view. gdown now always extracts the file ID from any Google Drive URL format. Just pass the URL directly.

• --remaining-ok flag and FolderContentsMaximumLimitError removed (#453)

  Folder downloads used to be limited to 50 files due to a Google Drive API constraint, and --remaining-ok let you proceed with a partial download. gdown now uses the embeddedfolderview endpoint, which has no file count limit. The flag and exception class are no longer needed.

• md5 parameter removed from cached_download() (#450)

  The md5 parameter was deprecated in v5. Use the hash parameter instead:

... (truncated)

Commits

• bff6f0d Merge pull request #455 from wkentaro/refactor/remove-fuzzy-option
• aab3d52 test: add unit test for Google Drive URL rewriting
• b1c6e1c refactor!: remove fuzzy option, always extract file ID from Google Drive URLs
• 6a43500 docs: document --no-check-certificate, --no-cookies, --user-agent options
• 37b6377 docs: remove stale md5 reference from cached_download docstring
• a8b4d49 docs: add Python version requirement and clarify cookie FAQ
• 59fc661 docs: center README hero section
• 5bb1faa docs: remove stale 50-file folder limit from README
• 64ceaa7 Merge pull request #454 from wkentaro/chore/add-3-14-to-test-yml-ci-matrix
• aedf0af ci: disable fail-fast for unit test matrix
• Additional commits viewable in compare view

Updates pytest from 9.0.2 to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

• #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

• #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

  Previously this resulted in an internal assertion failure during plugin loading.

  Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

• #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

• #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

• #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

• #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
• #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
• #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
• #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

• #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

  -- by aleguy02

Commits

• a7d58d7 Prepare release version 9.0.3
• 089d981 Merge pull request #14366 from bluetech/revert-14193-backport
• 8127eaf Revert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)"
• 99a7e60 Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd...
• ddee02a Merge pull request #14343 from bluetech/cve-2025-71176-simple
• 74eac69 doc: Update training info (#14298) (#14301)
• f92dee7 Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62...
• 7ee58ac Merge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d...
• 37da870 Merge pull request #14259 from mitre88/patch-4 (#14268)
• c34bfa3 Add explanation for string context diffs (#14257) (#14266)
• Additional commits viewable in compare view

Updates agent-starter-pack from 0.40.0 to 0.41.3

Release notes

Sourced from agent-starter-pack's releases.

v0.41.3

What's Changed

• docs: announce agents-cli as the next evolution of Agent Starter Pack by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#952
• chore: release v0.41.3 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#953

Full Changelog: GoogleCloudPlatform/agent-starter-pack@v0.41.2...v0.41.3

v0.41.2

What's Changed

• chore: regenerate uv lock files + pin langgraph-prebuilt<1.0.9 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#948
• chore: release v0.41.2 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#949

Full Changelog: GoogleCloudPlatform/agent-starter-pack@v0.41.1...v0.41.2

v0.41.1

What's Changed

• fix: align process_data timestamps to UTC by @​lspataroG in GoogleCloudPlatform/agent-starter-pack#927
• chore: remove vertex-agent-garden labels from deploy.py by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#942
• chore: change default region from us-west1 to us-east1 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#941
• chore: release v0.41.1 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#944

Full Changelog: GoogleCloudPlatform/agent-starter-pack@v0.41.0...v0.41.1

v0.41.0

What's Changed

• docs: Update BQ analytics table name to agent_events by @​Nannan-Su in GoogleCloudPlatform/agent-starter-pack#924
• chore: change default region from us-central1 to us-west1 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#936
• chore: release v0.41.0 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#937

Full Changelog: GoogleCloudPlatform/agent-starter-pack@v0.40.1...v0.41.0

v0.40.1

What's Changed

• feat: add adk-py@ shortcut for google/adk-python contributing samples by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#918
• fix: use valid model name for Vertex AI connectivity check by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#919
• chore: release v0.40.1 by @​eliasecchig in GoogleCloudPlatform/agent-starter-pack#920

Full Changelog: GoogleCloudPlatform/agent-starter-pack@v0.40.0...v0.40.1

Commits

• facbda1 chore: bump version to 0.41.3 (#953)
• f3cb073 docs: announce agents-cli as the next evolution of Agent Starter Pack (#952)
• 6beab9d chore: bump version to 0.41.2 (#949)
• f3d58ef chore: regenerate uv lock files + pin langgraph-prebuilt<1.0.9 (#948)
• 7d89d9c chore: bump version to 0.41.1 (#944)
• 98a1854 Merge pull request #941 from GoogleCloudPlatform/change-default-region-to-us-...
• b026e93 chore: regenerate makefile hashes for us-east1 region
• 3a91d20 chore: remove vertex-agent-garden labels from deploy.py (#942)
• 2c742da chore: change default region from us-west1 to us-east1
• 847e2f3 fix: align process_data timestamps to UTC to match ingest_data cutoff filter ...
• Additional commits viewable in compare view

Updates ruff from 0.15.8 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

• Implement #ruff:file-ignore file-level suppressions (#23599)
• Implement #ruff:ignore logical-line suppressions (#23404)
• Revert preview changes to displayed diagnostic severity in LSP (#24789)
• [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
• [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
• [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

• [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

• Respect default Unix permissions for cache files (#24794)

Documentation

• [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
• [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
• Improve rules table accessibility (#24711)

Contributors

• @​dylwil3
• @​AlexWaygood
• @​woodruffw
• @​avasis-ai
• @​Dev-iL
• @​denyszhak
• @​ShipItAndPray
• @​anishgirianish
• @​augustelalande
• @​amyreese
• @​majiayu000

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

• Implement #ruff:file-ignore file-level suppressions (#23599)
• Implement #ruff:ignore logical-line suppressions (#23404)
• Revert preview changes to displayed diagnostic severity in LSP (#24789)
• [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
• [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
• [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

• [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

• Respect default Unix permissions for cache files (#24794)

Documentation

• [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
• [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
• Improve rules table accessibility (#24711)

Contributors

• @​dylwil3
• @​AlexWaygood
• @​woodruffw
• @​avasis-ai
• @​Dev-iL
• @​denyszhak
• @​ShipItAndPray
• @​anishgirianish
• @​augustelalande
• @​amyreese
• @​majiayu000

0.15.11

Released on 2026-04-16.

Preview features

• [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
• [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
• [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits

• 66f93cf Bump 0.15.12 (#24815)
• 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
• ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
• Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.