Skip to content

build(deps): bump the python-dependencies group across 1 directory with 10 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b55fc699d5
Open

build(deps): bump the python-dependencies group across 1 directory with 10 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b55fc699d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 10 updates in the / directory:

Package From To
build 1.5.0 1.6.1
git-cliff 2.13.1 2.14.2
hatchling 1.31.0 1.33.0
lizard 1.23.0 1.25.0
pre-commit 4.6.1 4.6.2
ruff 0.16.1 0.17.4
tox 4.58.0 4.65.0
tox-uv 1.36.0 1.36.1
pytest 9.1.1 9.2.0
pyrefly 1.2.0 1.4.1

Updates build from 1.5.0 to 1.6.1

Release notes

Sourced from build's releases.

1.6.1

What's Changed

Full Changelog: pypa/build@1.6.0...1.6.1

1.6.0

What's Changed

New Contributors

Full Changelog: pypa/build@1.5.1...1.6.0

1.5.1

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.6.1 (2026-09-10) ####################

Bugfixes

  • Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:henryiii (:issue:1175) (:issue:1175)

Documentation

  • Fix doubled backslashes in the Windows pip config path (%APPDATA%\pip\pip.ini) in the docs - by :user:aroh3006 (:issue:1149)

Miscellaneous

  • :issue:1168, :issue:1170, :issue:1178

#################### 1.6.0 (2026-08-27) ####################

Features

  • Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
  • The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
  • The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
  • Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
  • Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
    • by :user:gaborbernat (:issue:655)
  • Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
  • On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

Bugfixes

... (truncated)

Commits
  • 89cccef chore: prepare for 1.6.1
  • a6f707a ci: support releases from v* branches (#1178)
  • 7785161 docs: fix doubled backslashes in Windows pip config path (#1149)
  • 244b250 fix: always use copies for the isolated venv on Windows (#1176)
  • c93ca6f build(deps): bump re-actors/alls-green from 1.2.2 to 1.3.0 in the github-acti...
  • e02ffd3 pre-commit: bump repositories (#1173)
  • aad39a8 docs: fix changelog page heading levels and sidebar (#1171)
  • 5c3fd46 docs: use PyPI ref directly (#1172)
  • 1c5bd6c 🐛 fix(release): format generated changelog (#1170)
  • 7f0cc7e 🔧 build(type): replace mypy with pyrefly (#1168)
  • Additional commits viewable in compare view

Updates git-cliff from 2.13.1 to 2.14.2

Release notes

Sourced from git-cliff's releases.

Release v2.14.2

animation

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

Release v2.14.1

animation

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)

... (truncated)

Changelog

Sourced from git-cliff's changelog.

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)
  • (context) Add pr_numbers field to RemoteContributor (#1546) - (48fd98f)
  • (examples) Add GitLab built-in changelog templates (#1561) - (c92bd16)
  • (git) Support limiting processed tags (#1493) - (d13a61c)
  • (git) Ignore commits listed in .git-blame-ignore-revs (#1585) - (89247f4)
  • (remote) [breaking] Expose the pull request author as commit.remote.pr_author (#1613) - (017e10b)
  • (remote) Add configurable HTTP timeout for metadata requests (#1580) - (c559920)
  • (template) Add group_by_scope filter (#1547) - (dd5f305)
  • (template) Add commit_groups filter for ordered group rendering (#1518) - (8a2a331)

... (truncated)

Commits

Updates hatchling from 1.31.0 to 1.33.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.33.0

Added:

  • Officially support Python 3.15.

Hatchling v1.32.4

Fixed:

  • Revert the extra type parameter added to BuildHookInterface in 1.32.3, which broke plugins that subscripted the interface with a single argument (e.g. BuildHookInterface[MyConfig]) by raising TypeError at import time. BuilderConfig is likewise no longer generic, restoring the pre-1.32.3 plugin interface.
  • Strip spaces around version metadata when using original input for CalVer to keep leading zeroes.

Hatchling v1.32.3

Fixed:

  • Preserve the version string exactly as written in core metadata, so stylized versions such as CalVer 2026.08.10 are no longer stripped of leading zeros. Distribution file names and .dist-info directories continue to use the PEP 440 normalized form.

Hatchling v1.32.0

Changed:

  • Bump default core metadata version to 2.5

  • Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

  • The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

  • Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.

  • Reject project.readme paths that are absolute or resolve outside of the project directory.

Commits
  • c93b542 release Hatch v1.18.2
  • b69f97a release Hatchling v1.33.0
  • e7495de Prepare for release for hatch 1.18.2 and hatchling 1.32.5 (#2477)
  • ad6d66e Use --python instead of --python-version for uv commands (#2473)
  • 6744e60 Fix hatch test crashing or silently doing nothing when filters match no env...
  • 52de770 match exclude key exactly when detecting injection (#2444)
  • 7bbe763 Fix require-runtime-dependencies being ignored for build hooks (#2257)
  • ac9c0c9 Add 3.15 support (#2468)
  • 7c26ebe Fix hatch.cli.application.Application.ensure_plugin_dependencies PyApp Comp...
  • c4abc45 release Hatchling v1.32.4 (#2441)
  • Additional commits viewable in compare view

Updates lizard from 1.23.0 to 1.25.0

Release notes

Sourced from lizard's releases.

1.25.0

New Features

  • Dart — discover .dart files and analyze functions, methods, getters, setters, and constructors with bodies, including expression bodies and async/generator modifiers; handle raw and triple-quoted strings, null-safety operators, exception clauses, and switch-expression arms
  • COBOL — discover .cbl, .cob, and .cobol files in fixed format, report Procedure Division paragraphs as functions, and count core conditional, loop, and selection decisions

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: preserve callback boundaries and CCN when call arguments or object values contain subscripts, including e(r[0]) and return {w: [m[n - 1]]} (issue #524, PR #525)
  • JavaScript, TypeScript, JSX, and TSX: end expression-bodied arrows at their enclosing argument, array, or object comma so following object members retain their own functions and metrics (issue #524, PR #525)
  • JavaScript, TypeScript, JSX, and TSX: preserve runtime functions across object bodies, ternary branches, multiline expressions, and immediately invoked functions (PRs #531, #533, #534)
  • JavaScript and TypeScript: distinguish runtime labeled blocks from type annotations; keep nested type brackets, function-type fields, assertions, and enclosing runtime delimiters from swallowing or inventing functions (issue #524, PR #548)
  • JavaScript and TypeScript: preserve arrow and callback parameters, including names containing _ or $, type-keyword names, and empty destructuring slots; exclude TypeScript's this receiver from the parameter count and use the same count in text, CSV, HTML, and Checkstyle output (PRs #532, #535, #536, #537)
  • JavaScript, TypeScript, JSX, and TSX: count conditions inside nested template interpolations and unspaced ternaries, while keeping optional parameter/member markers and keyword-named properties from adding false decisions (PRs #545, #546, #547)
  • JavaScript and TypeScript: distinguish regex literals from division after keywords and arrows, and end line comments at the newline even after a trailing backslash (PRs #528, #544)
  • Vue: preserve original source line numbers when filtering script blocks, and recognize TypeScript annotations in typed script blocks
  • Python -ENS: count nested control structures by indentation, including async statements and match, without treating comprehensions or conditional expressions as nested statements (PR #527)

Improvements

  • Verify Python 3.8 through 3.14 on Linux and Windows in CI and update the supported-version documentation and package classifiers

1.24.3

Bug Fixes

  • TypeScript: preserve function boundaries and NLOC after return type annotations, including adjacent annotated functions (issue #521)
  • JavaScript, TypeScript, JSX, and TSX: use balanced scanning for nested template literals so deeper nesting, quoted delimiters, escapes, and comments do not swallow following functions (issue #521)
  • TypeScript and TSX: keep ternary colons in conditional expressions from being mistaken for type annotations, preventing crashes in conditional style arrays (issue #523)
  • Go: give anonymous function literals stable anonymous__<n> names while preserving names for literals assigned to variables; do not report variadic function types or receive-only channels of functions as function literals (PR #522)
  • Running python lizard.py with an extension that extends the core analyzer, such as -END, no longer fails with an AttributeError; it now matches the installed lizard command

Improvements

  • The core analyzer now lives in the internal lizard_core package, one module per responsibility; lizard still exposes every name it did before, and lizard_core module paths are not a supported import surface

Full changelog: terryyin/lizard@1.24.2...1.24.3

1.24.2

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: count each ?? and ??= as +1 CCN; existing scores may decrease (issue #507)
  • JavaScript, TypeScript, JSX, and TSX: count each default parameter and destructuring initializer as +1 CCN, including nested defaults; existing scores and threshold warnings may increase (issue #509)
  • TypeScript and Swift: stop counting optional chaining as a ternary operator; preserve JavaScript and TypeScript nullish coalescing and ternary metrics (PR #518)
  • Swift: stop .init(, self.init(, .get(), .set(, variables named set, and argument labels such as init: from starting phantom functions that swallowed the following functions
  • Swift: recognize argument labels such as init: and for: when a newline or comment separates them from ( or ,
  • Swift: tokenize #Preview, #expect, #available and other macros so their braces count; compiler directives stay whole lines
  • Swift: scan raw, multi-line, and interpolated string literals and nested block comments as single tokens, so braces inside them no longer shift function boundaries
  • Swift: do not treat type (.type, type(of:)) as a Go-style type declaration
  • Python: preserve parameter counts when defaults or annotations contain nested brackets, commas, lambdas, or f-strings (PR #501)
  • Python: parse floor division as an operator and preserve NLOC for triple-quoted string operands and expressions inside f-strings (PR #500)
  • Rust: count let-else toward cyclomatic complexity
  • Fortran: preserve procedure boundaries around modern language constructs
  • Go: distinguish function literals from function types, preserve following declarations, and retain declared variable names for typed function literals (PR #512)
  • C++: preserve operator names and whitelist matching, and stop using declarations from swallowing following functions (PR #511)
  • Parallel analysis: close worker pools after completion, failure, or cancellation, and preserve serial fallback when multiprocessing is unavailable (PR #513)
  • HTML reports: return a non-zero exit status when functions exceed warning thresholds

... (truncated)

Changelog

Sourced from lizard's changelog.

1.25.0

New Features

  • Dart — discover .dart files and analyze functions, methods, getters, setters, and constructors with bodies, including expression bodies and async/generator modifiers; handle raw and triple-quoted strings, null-safety operators, exception clauses, and switch-expression arms
  • COBOL — discover .cbl, .cob, and .cobol files in fixed format, report Procedure Division paragraphs as functions, and count core conditional, loop, and selection decisions

Bug Fixes

  • Swift: mask keyword argument labels that have a separate local name (e.g. func f(for value: Int)), so they are not counted as control flow (PR #555)
  • JavaScript, TypeScript, JSX, and TSX: preserve callback boundaries and CCN when call arguments or object values contain subscripts, including e(r[0]) and return {w: [m[n - 1]]} (issue #524, PR #525)
  • JavaScript, TypeScript, JSX, and TSX: end expression-bodied arrows at their enclosing argument, array, or object comma so following object members retain their own functions and metrics (issue #524, PR #525)
  • JavaScript, TypeScript, JSX, and TSX: preserve runtime functions across object bodies, ternary branches, multiline expressions, and immediately invoked functions (PRs #531, #533, #534)
  • JavaScript and TypeScript: distinguish runtime labeled blocks from type annotations; keep nested type brackets, function-type fields, assertions, and enclosing runtime delimiters from swallowing or inventing functions (issue #524, PR #548)
  • JavaScript and TypeScript: preserve arrow and callback parameters, including names containing _ or $, type-keyword names, and empty destructuring slots; exclude TypeScript's this receiver from the parameter count and use the same count in text, CSV, HTML, and Checkstyle output (PRs #532, #535, #536, #537)
  • JavaScript, TypeScript, JSX, and TSX: count conditions inside nested template interpolations and unspaced ternaries, while keeping optional parameter/member markers and keyword-named properties from adding false decisions (PRs #545, #546, #547)
  • JavaScript and TypeScript: distinguish regex literals from division after keywords and arrows, and end line comments at the newline even after a trailing backslash (PRs #528, #544)
  • Vue: preserve original source line numbers when filtering script blocks, and recognize TypeScript annotations in typed script blocks
  • Python -ENS: count nested control structures by indentation, including async statements and match, without treating comprehensions or conditional expressions as nested statements (PR #527)

Improvements

  • Verify Python 3.8 through 3.14 on Linux and Windows in CI and update the supported-version documentation and package classifiers

1.24.3

Bug Fixes

  • TypeScript: preserve function boundaries and NLOC after return type annotations, including adjacent annotated functions (issue #521)
  • JavaScript, TypeScript, JSX, and TSX: use balanced scanning for nested template literals so deeper nesting, quoted delimiters, escapes, and comments do not swallow following functions (issue #521)
  • TypeScript and TSX: keep ternary colons in conditional expressions from being mistaken for type annotations, preventing crashes in conditional style arrays (issue #523)
  • Go: give anonymous function literals stable anonymous__<n> names while preserving names for literals assigned to variables; do not report variadic function types or receive-only channels of functions as function literals (PR #522)
  • Running python lizard.py with an extension that extends the core analyzer, such as -END, no longer fails with an AttributeError; it now matches the installed lizard command

Improvements

  • The core analyzer now lives in the internal lizard_core package, one module per responsibility; lizard still exposes every name it did before, and lizard_core module paths are not a supported import surface

1.24.2

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: count each ?? and ??= as +1 CCN; existing scores may decrease (issue #507)
  • JavaScript, TypeScript, JSX, and TSX: count each default parameter and destructuring initializer as +1 CCN, including nested defaults; existing scores and threshold warnings may increase (issue #509)
  • TypeScript and Swift: stop counting optional chaining as a ternary operator; preserve JavaScript and TypeScript nullish coalescing and ternary metrics (PR #518)
  • Swift: stop .init(, self.init(, .get(), .set(, variables named set, and argument labels such as init: from starting phantom functions that swallowed the following functions
  • Swift: recognize argument labels such as init: and for: when a newline or comment separates them from ( or ,
  • Swift: tokenize #Preview, #expect, #available and other macros so their braces count; compiler directives stay whole lines
  • Swift: scan raw, multi-line, and interpolated string literals and nested block comments as single tokens, so braces inside them no longer shift function boundaries
  • Swift: do not treat type (.type, type(of:)) as a Go-style type declaration
  • Python: preserve parameter counts when defaults or annotations contain nested brackets, commas, lambdas, or f-strings (PR #501)
  • Python: parse floor division as an operator and preserve NLOC for triple-quoted string operands and expressions inside f-strings (PR #500)
  • Rust: count let-else toward cyclomatic complexity
  • Fortran: preserve procedure boundaries around modern language constructs
  • Go: distinguish function literals from function types, preserve following declarations, and retain declared variable names for typed function literals (PR #512)
  • C++: preserve operator names and whitelist matching, and stop using declarations from swallowing following functions (PR #511)

... (truncated)

Commits
  • edbb09b Release 1.25.0
  • b2bacfa Admit accepted work: SEED-027#release125
  • 565142e Close completed issue 524 supersession review with PR 519 retained
  • 7b7e802 Review open PRs against the completed issue 524 fixes
  • 616774e Admit accepted work: SEED-026#close-superseded-issue524-prs
  • 99e793f Close completed issue 524 work and preserve qualification history
  • 72d0e8c Complete issue 524 execution with recoverable qualification evidence
  • 61e23de Record verified PR 548 merge and issue 524 closure
  • 2416c37 Merge pull request #548 from terryyin/codex/resolve-issue524-label-types
  • 7fac94f Preserve runtime labels and TypeScript annotation boundaries
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates ruff from 0.16.1 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Co...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-b55fc699d5 branch from ffba680 to fd82538 Compare November 5, 2026 09:52
@sbgaia sbgaia mentioned this pull request Nov 8, 2026
Open
@dependabot
build(deps): bump the python-dependencies group across 1 directory wi…
ffa395a 
…th 10 updates

Bumps the python-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [build](https://github.com/pypa/build) | `1.5.0` | `1.6.1` |
| [git-cliff](https://github.com/orhun/git-cliff) | `2.13.1` | `2.14.2` |
| [hatchling](https://github.com/pypa/hatch) | `1.31.0` | `1.33.0` |
| [lizard](https://github.com/terryyin/lizard) | `1.23.0` | `1.25.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.17.4` |
| [tox](https://github.com/tox-dev/tox) | `4.58.0` | `4.65.0` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.36.0` | `1.36.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.2.0` | `1.4.1` |



Updates `build` from 1.5.0 to 1.6.1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.0...1.6.1)

Updates `git-cliff` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/orhun/git-cliff/releases)
- [Changelog](https://github.com/orhun/git-cliff/blob/main/CHANGELOG.md)
- [Commits](orhun/git-cliff@v2.13.1...v2.14.2)

Updates `hatchling` from 1.31.0 to 1.33.0
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.31.0...hatchling-v1.33.0)

Updates `lizard` from 1.23.0 to 1.25.0
- [Release notes](https://github.com/terryyin/lizard/releases)
- [Changelog](https://github.com/terryyin/lizard/blob/master/CHANGELOG.md)
- [Commits](terryyin/lizard@1.23.0...1.25.0)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `ruff` from 0.16.1 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.17.4)

Updates `tox` from 4.58.0 to 4.65.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.58.0...4.65.0)

Updates `tox-uv` from 1.36.0 to 1.36.1
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Changelog](https://github.com/tox-dev/tox-uv/blob/main/CHANGELOG.md)
- [Commits](tox-dev/tox-uv@1.36.0...1.36.1)

Updates `pytest` from 9.1.1 to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.1...9.2.0)

Updates `pyrefly` from 1.2.0 to 1.4.1
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](meta/pyrefly@1.2.0...1.4.1)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: git-cliff
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hatchling
  dependency-version: 1.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lizard
  dependency-version: 1.24.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyrefly
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tox
  dependency-version: 4.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tox-uv
  dependency-version: 1.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-b55fc699d5 branch from fd82538 to ffa395a Compare November 9, 2026 05:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants