Skip to content

Build(deps): bump the minor-patch group across 1 directory with 5 updates - #163

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-patch-9c037f0885
Open

Build(deps): bump the minor-patch group across 1 directory with 5 updates#163
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-patch-9c037f0885

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 5 updates in the / directory:

Package From To
rsmetacheck 0.3.3 0.3.5
ruff 0.15.20 0.16.3
ty 0.0.56 0.0.72
sphinxcontrib-mermaid 2.0.2 2.1.0
wheel 0.47.0 0.48.0

Updates rsmetacheck from 0.3.3 to 0.3.5

Release notes

Sourced from rsmetacheck's releases.

0.3.5 - Pitfalls & Warning Patches IV

  • Patches addressing issue raised by @​dgarijo in #107 . P017 now is flexible and more semantic version aware, W004 does not detect programming languages that their versions are not expected to be stated, and W005 now is more context aware when it comes to cases where the maintainers put a description of the software requirements instead of listing them.
  • Added more test cases to include the new patches.
  • Added a workflow to make sure versions are synced across all the metadata and prevent PyPi update failure.

0.3.4 - SoMEF Version Bump 0.11.2

  • This release bumps SoMEF release from 0.10.3 to 0.11.2, all tests pass.
Commits

Updates ruff from 0.15.20 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates ty from 0.0.56 to 0.0.72

Release notes

Sourced from ty's releases.

0.0.72

Release Notes

Released on 2026-08-14.

Preview features

  • Check PEP 723 scripts in isolation (#27462)

Library support

  • Pydantic: Accept documented boolean and fractional inputs (#27754)
  • Pydantic: Accept enum members for lax string and integer fields (#27751)

Diagnostics

  • Improve assignability hints for protocols and TypedDict types (#27717)

Core type checking

  • Avoid treating augmented assignments as attribute definitions (#27633)
  • Diagnose invalid module-level __getattr__ calls (#27507)
  • Fix overload argument expansion with unpacked positional arguments (#27744)
  • Fix specialization of generic TypedDict aliases (#27760)
  • Ignore generic declaration metadata in staticness checks (#27692)
  • Preserve tuple types containing Never (#27580)
  • Report deprecated unary operations (#27584)
  • Respect variance when inferring structural and callable types (#27707)
  • Support TypeVarTuple in call binding (#26886)
  • Treat generator-expression exceptions as eagerly evaluated (#27735)

Performance

  • Avoid exponential narrowing of gradual string-literal unions (#27742)

Contributors

Install ty 0.0.72

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.72/ty-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.72

Released on 2026-08-14.

Preview features

  • Check PEP 723 scripts in isolation (#27462)

Library support

  • Pydantic: Accept documented boolean and fractional inputs (#27754)
  • Pydantic: Accept enum members for lax string and integer fields (#27751)

Diagnostics

  • Improve assignability hints for protocols and TypedDict types (#27717)

Core type checking

  • Avoid treating augmented assignments as attribute definitions (#27633)
  • Diagnose invalid module-level __getattr__ calls (#27507)
  • Fix overload argument expansion with unpacked positional arguments (#27744)
  • Fix specialization of generic TypedDict aliases (#27760)
  • Ignore generic declaration metadata in staticness checks (#27692)
  • Preserve tuple types containing Never (#27580)
  • Report deprecated unary operations (#27584)
  • Respect variance when inferring structural and callable types (#27707)
  • Support TypeVarTuple in call binding (#26886)
  • Treat generator-expression exceptions as eagerly evaluated (#27735)

Performance

  • Avoid exponential narrowing of gradual string-literal unions (#27742)

Contributors

0.0.71

Released on 2026-08-12.

Library support

  • Respect third-party keyword-only fields before Python 3.10 (#27699)

... (truncated)

Commits

Updates sphinxcontrib-mermaid from 2.0.2 to 2.1.0

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.0 (July 18, 2026)

  • Add mermaid_config option for passing a global Mermaid configuration (#215)
  • Load the ZenUML plugin lazily, only on pages that contain a ZenUML diagram, and confine its injected stylesheet to the diagram subtree so it no longer restyles the host theme (#252)
  • Skip injecting the Mermaid JavaScript when the output format does not support it (#253)
  • Fix d3 zoom on nested SVGs (#179)
  • Fix fullscreen button positioning inconsistency (#225)
  • Fix interactions between the fullscreen, zoom, and lazy-render features (#254)

2.0.3 (July 7, 2026)

  • Capture mmdc error message as string for nicer error display
  • Fix local JS module imports on root-level pages by ensuring a valid relative ES module specifier (#246)
  • Defer rendering of Mermaid diagrams hidden by a parent (e.g. Reveal.js slides, unopened tabs) until they become visible, fixing broken SVGs
Commits
  • 6d7611b Merge pull request #257 from mgaitan/tkp/210
  • c53952b Bump version to 2.1.0
  • c5bfe4a Merge pull request #256 from timkpaine/tkp/escape-generated-javascript
  • 7244a8c Escape generated JavaScript values
  • f4cf3e6 Merge pull request #254 from timkpaine/tkp/recent-integration-fixes
  • e96f80c fix(html): Correct Mermaid feature interactions
  • 2395a38 Merge pull request #225 from yarikoptic/bf-fullscreen
  • e0178bd Merge pull request #253 from timkpaine/tkp/pr-132-skip-static-js
  • c5bafdb test(fullscreen): Cover button positioning
  • c09d852 Fix fullscreen button positioning inconsistency
  • Additional commits viewable in compare view

Updates wheel from 0.47.0 to 0.48.0

Release notes

Sourced from wheel's releases.

0.48.0

  • Added a --local-version option to wheel pack to add, replace, or remove a PEP 440 local version identifier from a wheel (#570)
  • Fixed wheel convert unnecessarily upgrading compatible core metadata versions (#643)
  • Fixed wheel tags producing invalid archives when retagging wheels whose entries use ZIP64, by dropping the central-directory ZIP64 extra field that is not valid in a local file header (#692)
  • Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file write / path traversal) (GHSA-vgq5-9859-3mmw)
Changelog

Sourced from wheel's changelog.

Release Notes

UNRELEASED

  • Fixed the macOS platform-tag warning always using the plural "these files" wording, even when only a single library required a higher deployment target ([#697](https://github.com/pypa/wheel/issues/697) <https://github.com/pypa/wheel/pull/697>_)

0.48.0 (2026-08-12)

  • Added a --local-version option to wheel pack to add, replace, or remove a PEP 440 local version identifier from a wheel ([#570](https://github.com/pypa/wheel/issues/570) <https://github.com/pypa/wheel/issues/570>_)
  • Fixed wheel convert unnecessarily upgrading compatible core metadata versions ([#643](https://github.com/pypa/wheel/issues/643) <https://github.com/pypa/wheel/issues/643>_)
  • Fixed wheel tags producing invalid archives when retagging wheels whose entries use ZIP64, by dropping the central-directory ZIP64 extra field that is not valid in a local file header ([#692](https://github.com/pypa/wheel/issues/692) <https://github.com/pypa/wheel/issues/692>_)
  • Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file write / path traversal) (GHSA-vgq5-9859-3mmw <https://github.com/pypa/wheel/security/advisories/GHSA-vgq5-9859-3mmw>_)

0.47.0 (2026-04-22)

  • Added the wheel info subcommand to display metadata about wheel files without unpacking them ([#639](https://github.com/pypa/wheel/issues/639) <https://github.com/pypa/wheel/issues/639>_)
  • Fixed WheelFile raising Missing RECORD file when the wheel filename contains uppercase characters (e.g. Django-3.2.5.whl) but the .dist-info directory inside uses normalized lowercase naming ([#411](https://github.com/pypa/wheel/issues/411) <https://github.com/pypa/wheel/issues/411>_)

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

... (truncated)

Commits
  • 21c4da4 Fixed the release heading format
  • f06d4db Flit no longer supports --setup-py
  • 1a96c3e Created a new release
  • d7d625d Fixed wheel convert writing outside the target directory on malicious input (...
  • 986a440 Strip ZIP64 extra field when retagging wheels (#692) (#695)
  • 0ca6f24 feat: add --local-version option to wheel pack (#694)
  • 4a63caf Preserve compatible metadata versions in convert (#690)
  • 33650c6 [pre-commit.ci] pre-commit autoupdate (#691)
  • 197012d Increased the upper bound for flit-core as a build requirement
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Build(deps): bump the minor-patch group across 1 directory with 5 upd…
eed2d14 
…ates

Bumps the minor-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rsmetacheck](https://github.com/SoftwareUnderstanding/RsMetaCheck) | `0.3.3` | `0.3.5` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.3` |
| [ty](https://github.com/astral-sh/ty) | `0.0.56` | `0.0.72` |
| [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) | `2.0.2` | `2.1.0` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |



Updates `rsmetacheck` from 0.3.3 to 0.3.5
- [Release notes](https://github.com/SoftwareUnderstanding/RsMetaCheck/releases)
- [Commits](SoftwareUnderstanding/RsMetaCheck@0.3.3...0.3.5)

Updates `ruff` from 0.15.20 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.3)

Updates `ty` from 0.0.56 to 0.0.72
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.56...0.0.72)

Updates `sphinxcontrib-mermaid` from 2.0.2 to 2.1.0
- [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md)
- [Commits](mgaitan/sphinxcontrib-mermaid@2.0.2...2.1.0)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

---
updated-dependencies:
- dependency-name: rsmetacheck
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ty
  dependency-version: 0.0.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: sphinxcontrib-mermaid
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants