Skip to content

Build(deps): bump the python-dependencies group with 11 updates - #5740

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-8c9ae4fe8d
Open

Build(deps): bump the python-dependencies group with 11 updates#5740
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-8c9ae4fe8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 11 updates:

Package From To
pre-commit 4.6.1 4.6.2
pybind11 3.0.4 3.1.0
posthog 7.37.3 7.44.0
platformdirs 4.11.0 4.11.4
ipykernel 7.2.0 7.3.0
ipywidgets 8.1.8 8.1.9
sphinx-docsearch 0.3.0 0.3.1
ruff 0.15.15 0.16.4
nox 2026.4.10 2026.8.17
hypothesis 6.155.1 6.165.10
pytest-benchmark 5.2.3 5.3.0

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates pybind11 from 3.0.4 to 3.1.0

Release notes

Sourced from pybind11's releases.

Version 3.1.0

New Features:

  • Support for Python 3.8 was removed. The minimum supported version is now Python 3.9. #6110

  • Support for MSVC 2017 has been dropped. #6110

  • Changed strict-mode numeric conversions for PEP 484 compatibility: float now accepts int, and complex now accepts int and float. #5879

  • Small extra features added to the pybind11 command line tool based on python-config. #4272

  • Added subinterpreter_thread_state, an RAII wrapper that owns a reusable PyThreadState for a sub-interpreter, together with a subinterpreter_scoped_activate overload that activates it. This lets an OS thread re-enter one or more sub-interpreters without creating and destroying a PyThreadState on every activation. #6073

  • Add py::mod_gil_used() as replacement spelling to py::mod_gil_not_used(false). #5797

Bug fixes:

  • Fixed a crash in py::subinterpreter::create() when called without a current PyThreadState, which its documentation explicitly allows — for example from an embedder that ended initialization with PyEval_SaveThread(), or from a worker thread that has never touched Python. error_scope is now constructed after a thread state has been attached instead of before. #6127

  • Make py::print delegate to the current frame/interpreter built-ins print entry, fixing handling of sys.stdout = None, following the active runtime's stream, keyword, and error semantics, and remaining a no-op if the entry is unavailable during teardown. #6121

  • Include the builtin complex type in the input annotation of the std::complex<T> type caster. #6113

  • String views (e.g. std::string_view) are now kept alive only when loaded from a transient source (such as a generator), fixing both a use-after-free and a regression where casting a view from a durable object outside a bound function would throw. #6096

  • Drop Python 2 prepend to evaluated source, causing errors to be off by one. #6089

  • Fix data race on last_storage_ptr_ cache in gil_safe_call_once_and_store. #6087

  • Allow user defined __str__ on enum_. #6078

  • Fix generated Callable type annotations for Python callbacks passed into C++ by inverting the callback's argument/return I/O context relative to the enclosing function signature. #6055

  • Correct __delitem__ for negative-step slices and re-enable contiguous erase fast path. #6088

  • Do not pass -fno-fat-lto-objects to GCC on macOS, which made all LTO probes fail and silently disabled LTO. #6114

  • Fixed cross-compilation to Emscripten/Pyodide with CMake ≥ 4.1 by no longer overriding an explicitly set PYBIND11_USE_CROSSCOMPILING when CMAKE_CROSSCOMPILING_EMULATOR is defined. #6094

  • Unset stale PYTHON_MODULE_DEBUG_POSTFIX and correct USE_PYTHON_INCLUDE_DIR variable. #6086

  • Apply -undefined dynamic_lookup to all Apple platforms. #6075

Internal:

  • Improved py::enum_ operator performance by restoring type-specific implementations. #5887

  • Optimized internal std::unordered_map/std::unordered_set hashing paths with noexcept. #5960

CI:

... (truncated)

Changelog

Sourced from pybind11's changelog.

Version 3.1.0 (August 6, 2026)

New Features:

  • Support for Python 3.8 was removed. The minimum supported version is now Python 3.9. #6110

  • Support for MSVC 2017 has been dropped. #6110

  • Changed strict-mode numeric conversions for PEP 484 compatibility: float now accepts int, and complex now accepts int and float. #5879

  • Small extra features added to the pybind11 command line tool based on python-config. #4272

  • Added subinterpreter_thread_state, an RAII wrapper that owns a reusable PyThreadState for a sub-interpreter, together with a subinterpreter_scoped_activate overload that activates it. This lets an OS thread re-enter one or more sub-interpreters without creating and destroying a PyThreadState on every activation. #6073

  • Add py::mod_gil_used() as replacement spelling to py::mod_gil_not_used(false). #5797

Bug fixes:

  • Fixed a crash in py::subinterpreter::create() when called without a current PyThreadState, which its documentation explicitly allows — for example from an embedder that ended initialization with PyEval_SaveThread(), or from a worker thread that has never touched Python. error_scope is now constructed after a thread state has been attached instead of before. #6127

  • Make py::print delegate to the current frame/interpreter built-ins print entry, fixing handling of sys.stdout = None, following the active runtime's stream, keyword, and error semantics, and remaining a no-op if the entry is unavailable during teardown. #6121

  • Include the builtin complex type in the input annotation of the std::complex<T> type caster. #6113

  • String views (e.g. std::string_view) are now kept alive only when loaded from a transient source (such as a generator), fixing both a use-after-free and a regression where casting a view from a durable object outside a bound function would throw. #6096

  • Drop Python 2 prepend to evaluated source, causing errors to be off by one. #6089

  • Fix data race on last_storage_ptr_ cache in gil_safe_call_once_and_store. #6087

... (truncated)

Commits
  • 97bf890 chore: prepare 3.1.0 release (#6125)
  • 05f6e6f fix(subinterpreter): don't touch the thread state before create() attaches on...
  • 6dd1756 chore(deps): update pre-commit hooks (#6126)
  • 5956509 Delegate py::print to Python's native print (#6121)
  • 63d627c feat!: drop support for Python 3.8, MSVC 2017 (#6110)
  • 695a7a4 chore(deps): bump the actions group with 3 updates (#6119)
  • ea9e6e6 feat: small command line helpers for quick tests (#4272)
  • 652c694 fix: add py::mod_gil_used() spelling, support pedantic tests (#5797)
  • 2f85cc8 chore(ci): bump NVHPC to 26.5 (#6117)
  • 5540f96 fix: only add string_view life support for transient sources (#6096)
  • Additional commits viewable in compare view

Updates posthog from 7.37.3 to 7.44.0

Release notes

Sourced from posthog's releases.

posthog-v7.44.0

Minor changes

  • 9a1d137 Add an opt-in capture_trace_context client option. When enabled, and a valid OpenTelemetry span is active at capture time, its trace and span IDs are attached to events captured with capture() and capture_ai() as $trace_id and $span_id, so they can be correlated with backend traces. Disabled by default, and explicit $trace_id/$span_id properties take precedence. — Thanks @​DanielVisca!

posthog-v7.43.1

Patch changes

  • 8046114 Return an empty feature flag snapshot without evaluation when feature flag keys are explicitly empty. — Thanks @​marandaneto!

posthog-v7.43.0

Minor changes

  • 35220f3 Fall back to remote evaluation when a requested flag is missing from local definitions. This changes the previous behavior where the key was omitted without a request. — Thanks @​marandaneto!

posthog-v7.42.1

Patch changes

  • c55c9b2 MCP analytics now surfaces the previously-silent case where the stateless session mint middleware (PostHogMcpStatelessSessionMiddleware) never attached — the trap where an ASGI app is built or mounted before instrument() runs, so autowiring can't retrofit it and every session falls back to a fragmented per-process id. instrument() warns when streamable_http_app() was already called before it ran, and a one-time warning fires the first time a tool call arrives over streamable HTTP and the session still has to come from process memory. Both go to the posthog.mcp standard-library logger as well as the MCPAnalyticsOptions(logger=...) sink, so they are visible without opting in — silence them with logging.getLogger("posthog.mcp").setLevel(logging.ERROR). Neither fires for stdio, a correctly-wired server, a conversation-anchored session, or the SSE transport (which the mint cannot fix). Documented in the new posthog/mcp/README.md. — Thanks @​posthog[bot]!

posthog-v7.42.0

Minor changes

  • f483bab feat(mcp): capture $mcp_client_user_agent and $mcp_vendor_client so MCP usage can be attributed to a product surface. clientInfo.name only says which client library is calling — Anthropic reports claude-code from the CLI, the Agent SDK, the VS Code extension and the desktop app alike — so $mcp_client_name collapses every surface into one bucket and the harness breakdown reads 100% "Other" for Python-backed servers. The distinguishing detail lives in the User-Agent parenthetical (claude-code/2.1.0 (cli) vs (sdk-ts)) and in vendor headers like x-anthropic-client. Both are captured raw and classified at query time, so labels can improve without an SDK release. HTTP transports only: stdio and in-memory servers carry no headers and their events are unchanged. Custom dispatchers pass their own via new client_user_agent / vendor_client arguments on every PostHogMCP.capture_* method. Parity with @posthog/mcp. — Thanks @​gesh!

posthog-v7.41.0

Minor changes

  • 2863909 feat(mcp): emit $mcp_error_message and $mcp_error_type on failed MCP events. The reason a tool call failed previously lived only on the sibling $exception event, so PostHog's failures view — which reads the scalars off the primary event — showed empty error rows for every Python-backed MCP server, and switching off enable_exception_autocapture removed the reason entirely. Both values are read from the same $exception_list the sibling carries, so the two surfaces can never disagree, and the message inherits the existing 2048-character cap. PostHogMCP.capture_tool_call() and capture_tools_list() take a new optional error_type for custom dispatchers that want a coarse category ("validation", "timeout") instead of the thrown class name. Exception messages are also redacted before they leave — previously nothing sanitized the error payload, so the $exception sibling had been shipping them raw. Credential-looking words go through the SDK's own detector (entropy, known key formats, PEM markers), per word, so a message like auth failed for sk-... keeps its diagnostic text and loses only the key. Parity with @posthog/mcp, which sanitizes exception values the same way. — Thanks @​gesh!

posthog-v7.40.0

Minor changes

  • b0ab12c feat(mcp): support MCP Python SDK v2 and bring posthog.mcp to parity with the TypeScript SDK (@posthog/mcp). Most of this reaches SDK 1.x servers too — the parity work is not v2-only.

    MCP SDK v2 / spec 2026-07-28. instrument() now wraps mcp.server.mcpserver.MCPServer (the renamed FastMCP) and the v2 low-level Server (constructor-injected handlers, string-keyed registry, late add_request_handler registrations included), capturing tool calls, tools/list, errors, intent, client identity, and $mcp_protocol_version on both protocol eras — the legacy handshake and the stateless 2026-07-28 envelope, decided per request. Previously instrument() raised ImportError on mcp>=2 and took the host application down with it; it now degrades to a logged no-op on any unsupported or unrecognized SDK.

    Cross-SDK parity (SDK 1.x and 2.x alike). Conversation-anchored sessions land as the cross-pod correlation the stateless era needs: with enable_conversation_id, $session_id derives deterministically from the agent-echoed conversation_id (new export derive_session_id_from_conversation, byte-compatible with @posthog/mcp). Only a handle the SDK could have minted (a uuidv7) anchors a session, so two callers inventing the same id can no longer be merged. The handle is delivered over both channels a tool result has — a content text block carrying it as plain JSON data on the minting response (an imperative server sentence inside a tool result is prompt-injection-shaped, and a client that strips it silently breaks the feature), and an _mcp_instructions key declared on the tool's output schema and mirrored into structuredContent on every response. That second channel is what makes the feature work at all for tools with structured output: clients that read structuredContent never render content, so the agent had no handle to echo (0% echo rate measured against Claude Code before the mirror). The prompt-back now rides errored results too, so a failure on a conversation's first call doesn't split the retry into a new session. The session is resolved only once the handle's fate is known, so the call that mints a handle joins the same session as the calls that echo it — while a handle that could not be delivered anchors nothing, rather than stranding events in a conversation nobody holds. Host callbacks (identify, intent_fallback, event_properties) receive the SDK's own per-request context as extra["ctx"] identically on both majors, with a new exported get_request_headers(extra) to read HTTP headers off it — the underlying shape differs per major, and a hand-rolled read that works on one silently returns nothing on the other, sending every event out anonymous.

    Fixes affecting existing SDK 1.x users. Analytics could break a tool call in three ways, each now fixed and regression-tested: the SDK's tool cache is rebuilt from an internal listing pass we skipped injecting on, so after any call to an unlisted tool name a strict schema rejected either the analytics parameters we advertise (Input validation error) or the conversation key we write (Output validation error); the conversation handle was written into the caller's result object in place, so a tool returning a shared or cached result served one conversation's handle to every later caller; and on jlowin's FastMCP the advertised schema marked context required while the adapter strips it before validation, failing every call under strict_input_validation=True. Two behavioural changes come with the parity work: an invented (non-uuidv7) conversation_id echo is replaced with a fresh handle rather than trusted, and minted prompt-backs are now appended to errored results. — Thanks @​gesh!

posthog-v7.39.2

Patch changes

posthog-v7.39.1

Patch changes

  • 6fc55b6 Normalize SDK event timestamps to UTC, including datetime values and parseable ISO timestamp strings, and correct UTC serialization for exception frame timestamps — Thanks @​marandaneto!

... (truncated)

Commits
  • 2ab1fe5 chore: Release v7.44.0 [skip ci]
  • 9a1d137 chore: add changeset for capture_trace_context (#896)
  • 550f5b5 feat: opt-in OTel trace/span IDs on regular capture() via capture_trace_conte...
  • b72fed3 Update generated references
  • 3f2f4be chore: Release v7.43.1 [skip ci]
  • 8046114 fix(flags): handle empty evaluation key scopes (#895)
  • 02fd926 refactor(openai): share resource and embedding policy (#889)
  • 3f40b6b refactor(mcp): share instrumentation lifecycles (#888)
  • 183ec06 refactor(ai): share processor privacy and capture policy (#884)
  • ecf7fbc refactor(openai): share streaming state processors (#887)
  • Additional commits viewable in compare view

Updates platformdirs from 4.11.0 to 4.11.4

Release notes

Sourced from platformdirs's releases.

4.11.4

What's Changed

Full Changelog: tox-dev/platformdirs@4.11.3...4.11.4

4.11.3

What's Changed

Full Changelog: tox-dev/platformdirs@4.11.2...4.11.3

4.11.2

What's Changed

Full Changelog: tox-dev/platformdirs@4.11.1...4.11.2

4.11.1

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.11.0...4.11.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start


4.11.7 (2026-09-01)



4.11.6 (2026-09-01)


  • Give :func:~platformdirs.user_bin_dir and :func:~platformdirs.user_bin_path the use_site_for_root argument. They took none, so neither could reach the Unix redirect of root to :func:~platformdirs.site_bin_dir. :pr:537

4.11.5 (2026-08-27)


  • Give :func:~platformdirs.user_preference_dir and :func:~platformdirs.user_preference_path the same arguments as :func:~platformdirs.user_config_dir. Added without arguments in :pr:491, they could only return the unscoped base directory even though the property they wrap appends the app name and version. :pr:531
  • Make :func:~platformdirs.site_applications_path return the first entry when multipath=True, matching :func:~platformdirs.site_data_path. On Unix and macOS it passed the whole $XDG_DATA_DIRS list to :class:~pathlib.Path, giving one unusable path such as /first/applications:/second/applications. :pr:532
  • Give :func:~platformdirs.user_applications_dir, :func:~platformdirs.user_applications_path, :func:~platformdirs.site_applications_dir and :func:~platformdirs.site_applications_path the app arguments. Android scopes both applications directories to the app, so without them the functions could only return the unscoped base directory there. On the two site functions they are keyword-only, keeping multipath first positional as it has been since 4.9.0; the two user functions take their boolean options keyword-only. :pr:534
  • Correct the ordering note on the iterator methods. use_site_for_root drops the user directory entirely, so the iterators are documented as yielding the most specific directory first rather than always yielding the user one. :pr:533

4.11.4 (2026-08-24)


  • Stop the iter_*_dirs methods yielding the same directory twice when a site directory resolves to its user equivalent - :pr:520 covered only Unix with use_site_for_root. It also hit :meth:~platformdirs.PlatformDirs.iter_runtime_dirs on Unix with $XDG_RUNTIME_DIR set, on Windows and macOS, and all six iterators on Android. :pr:524
  • Fix the config merging example in the how-to guide. iter_config_paths yields the user directory first, so the config.update loop let the site defaults override the user's config instead of the other way round. :pr:529

... (truncated)

Commits
  • e5fd9ea Release 4.11.4
  • 4bf9228 docs: fix merge order in the config how-to (#529)
  • c653668 fix: stop iter_*_dirs yielding the same directory twice (#524)
  • f18ebaf 🔧 chore: batch dependency updates weekly on Tuesday (#528)
  • b2f29d8 build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 in the all group (...
  • 272f340 build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 in the all group (#...
  • d3cf61c [pre-commit.ci] pre-commit autoupdate (#525)
  • 7f3960a Release 4.11.3
  • c8af984 fix: don't crash when an XDG dirs variable holds only separators (#523)
  • 6d2105a 📄 docs: publish llms.txt from the docs build (#522)
  • Additional commits viewable in compare view

Updates ipykernel from 7.2.0 to 7.3.0

Release notes

Sourced from ipykernel's releases.

v7.3.0

7.3.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Other merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

... (truncated)

Changelog

Sourced from ipykernel's changelog.

7.3.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Other merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​adityawasudeo (activity) | @​Carreau (activity) | @​erawn (activity) | @​goelakash (activity) | @​ianthomas23 (activity) | @​JohanMabille (activity) | @​krassowski (activity) | @​minrk (activity) | @​P4X-ng (activity) | @​pelson (activity) | @​rgbkrk (activity)

... (truncated)

Commits
  • 5dbd5ce Publish 7.3.0
  • 28e9cf8 chore: update pre-commit hooks (#1508)
  • 4e4f82c Support ZMQ Curve for transport encryption (#1515)
  • b64f597 Merge branch 'main' into curve-encryption
  • 6fc8b58 Fix broken IPython Reference URL in help_links (#1526)
  • cd6f460 Fix typing due to new jupyter_client version
  • b0678ba Update pyproject.toml to depend on jupyter_client 8.9.0 rather than branch
  • 2157ae7 Update tests to reflact rename to "auto"
  • 336971e build docs on latest python (#1525)
  • 7ecb521 Fix tests
  • Additional commits viewable in compare view

Updates ipywidgets from 8.1.8 to 8.1.9

Release notes

Sourced from ipywidgets's releases.

Release 8.1.9

What's Changed

New Contributors

Full Changelog: jupyter-widgets/ipywidgets@8.1.8...8.1.9

Commits

Updates sphinx-docsearch from 0.3.0 to 0.3.1

Release notes

Sourced from sphinx-docsearch's releases.

0.3.1

What's Changed

Full Changelog: algolia/sphinx-docsearch@0.3.0...0.3.1

Commits
  • 6462139 chore: bump version
  • 9669c56 fix: agent studio example (#144)
  • 2c975c6 chore(deps): bump soupsieve from 2.8.3 to 2.8.4 (#142)
  • 46ee48e chore(deps): bump actions/checkout from 6 to 7 (#141)
  • 9025653 chore(deps): bump starlette from 1.0.1 to 1.3.1 (#140)
  • 811f286 chore(deps): bump tornado from 6.5.6 to 6.5.7 (#139)
  • c659540 chore(deps): bump starlette from 0.49.3 to 1.0.1 (#138)
  • 9e16574 chore(deps): bump idna from 3.11 to 3.15 (#137)
  • e4e0fce fix: no assert for some reason
  • b6b0e29 chore: update package and pyright -> ty
  • Additional commits viewable in compare view

Updates ruff from 0.15.15 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)
  • <...

    Description has been truncated

Bumps the python-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [pybind11](https://github.com/pybind/pybind11) | `3.0.4` | `3.1.0` |
| [posthog](https://github.com/posthog/posthog-python) | `7.37.3` | `7.44.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.0` | `4.11.4` |
| [ipykernel](https://github.com/ipython/ipykernel) | `7.2.0` | `7.3.0` |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.8` | `8.1.9` |
| [sphinx-docsearch](https://github.com/algolia/sphinx-docsearch) | `0.3.0` | `0.3.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.15` | `0.16.4` |
| [nox](https://github.com/wntrblm/nox) | `2026.4.10` | `2026.8.17` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.155.1` | `6.165.10` |
| [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.2.3` | `5.3.0` |


Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `pybind11` from 3.0.4 to 3.1.0
- [Release notes](https://github.com/pybind/pybind11/releases)
- [Changelog](https://github.com/pybind/pybind11/blob/master/docs/changelog.md)
- [Commits](pybind/pybind11@v3.0.4...v3.1.0)

Updates `posthog` from 7.37.3 to 7.44.0
- [Release notes](https://github.com/posthog/posthog-python/releases)
- [Changelog](https://github.com/PostHog/posthog-python/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-python@posthog-v7.37.3...posthog-v7.44.0)

Updates `platformdirs` from 4.11.0 to 4.11.4
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.0...4.11.4)

Updates `ipykernel` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/ipython/ipykernel/releases)
- [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md)
- [Commits](ipython/ipykernel@v7.2.0...v7.3.0)

Updates `ipywidgets` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.8...8.1.9)

Updates `sphinx-docsearch` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/algolia/sphinx-docsearch/releases)
- [Commits](algolia/sphinx-docsearch@0.3.0...0.3.1)

Updates `ruff` from 0.15.15 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.15...0.16.4)

Updates `nox` from 2026.4.10 to 2026.8.17
- [Release notes](https://github.com/wntrblm/nox/releases)
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md)
- [Commits](wntrblm/nox@2026.04.10...2026.08.17)

Updates `hypothesis` from 6.155.1 to 6.165.10
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.155.1...v6.165.10)

Updates `pytest-benchmark` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/ionelmc/pytest-benchmark/releases)
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v5.2.3...v5.3.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pybind11
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: posthog
  dependency-version: 7.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: platformdirs
  dependency-version: 4.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ipykernel
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ipywidgets
  dependency-version: 8.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: sphinx-docsearch
  dependency-version: 0.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: nox
  dependency-version: 2026.8.17
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.165.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-benchmark
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 20:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
@codecov

codecov Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.12%. Comparing base (78fe10a) to head (23358d6).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5740      +/-   ##
==========================================
- Coverage   98.21%   98.12%   -0.09%     
==========================================
  Files         340      340              
  Lines       32743    32743              
==========================================
- Hits        32157    32128      -29     
- Misses        586      615      +29     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants