Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 7 updates - #283

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/python-dependencies-b6bcac4c75
Open

chore(deps): bump the python-dependencies group across 1 directory with 7 updates#283
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/python-dependencies-b6bcac4c75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 6 updates in the / directory:

Package From To
fsspec 2026.6.0 2026.7.0
typer 0.27.0 0.27.1
coverage 7.15.2 7.15.3
hypothesis 6.160.0 6.165.0
uv 0.11.31 0.12.1
ruff 0.16.0 0.16.1

Updates fsspec from 2026.6.0 to 2026.7.0

Commits

Updates typer from 0.27.0 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates coverage from 7.15.2 to 7.15.3

Release notes

Sourced from coverage's releases.

7.15.3

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits
  • b7470d9 docs: sample HTML for 7.15.3
  • 27e6e80 docs: prep for 7.15.3
  • 396dbbb build: include NOTICE in wheels (#2232)
  • 54dde05 chore: bump the action-dependencies group with 7 updates (#2248)
  • c83a0e0 perf: skip AST parsing without soft keywords (#2240)
  • a57f981 refactor: fix some uncovered lines
  • 0252c34 refactor: move numbits aggregate to numbits
  • 1c4184c docs: maintainer workflow
  • e8a1c87 perf: speed up SQLite numbits aggregation (#2239)
  • 18c2a59 test: conditional use of Hypothesis
  • Additional commits viewable in compare view

Updates hypothesis from 6.160.0 to 6.165.0

Commits
  • a11e4b4 Bump hypothesis version to 6.165.0 and update changelog
  • 2e08ef3 Merge pull request #4831 from Zac-HD/claude/codec-non-round-tripping-chars-hh...
  • 72bfab7 Merge pull request #4838 from Zac-HD/website-fixtures-article
  • 6f1a14c Only enforce 100% combined coverage when the python tests actually ran
  • 9153fd1 Warn rather than raise for non-round-tripping characters
  • 1815cab Write pytest consistently, and fix code block rendering
  • cbcd1cc Update the pytest-fixtures article for the function-scoped health check
  • ce7ef4a Merge pull request #4840 from Zac-HD/website-preview-pr-lookup
  • 8a4c803 Fix PR lookup in the website preview workflow
  • f94aae1 Merge pull request #4836 from Zac-HD/claude/pr-build-live-preview-15crof
  • Additional commits viewable in compare view

Updates uv from 0.11.31 to 0.12.1

Release notes

Sourced from uv's releases.

0.12.1

Release Notes

Released on 2026-07-31.

Enhancements

  • Add package-specific pre-release policies with --prerelease-package (#20837)
  • Support local HTML files as flat indexes (#20802)
  • Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
  • Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

  • Add automatic fixes to uv check with --fix (#20793)
  • Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
  • Honor direct URL constraints when validating metadata-free lockfiles (#20796)
  • Ignore malformed PEP 723 scripts discovered during project checks (#20784)
  • Use ty's native script exclusion in uv check (#20742)

Performance

  • Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
  • Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

  • Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
  • Make workspace-root dependency groups available to commands run from workspace members (#20840)
  • Resolve --find-links paths in requirements files relative to the containing file (#20832)
  • Respect configured indexes in uv tool list --outdated (#20770)

Documentation

  • Document Astral GPU indexes in the PyTorch guide (#20785)
  • Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

Install uv 0.12.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.1/uv-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.1

Released on 2026-07-31.

Enhancements

  • Add package-specific pre-release policies with --prerelease-package (#20837)
  • Support local HTML files as flat indexes (#20802)
  • Add Xonsh virtual environment activation scripts (activate.xsh) (#19740)
  • Preserve filesystem paths passed to uv add --index when updating pyproject.toml (#20817)

Preview features

  • Add automatic fixes to uv check with --fix (#20793)
  • Avoid rejecting unchanged metadata-free lockfiles when workspace dependencies share direct sources (#20847)
  • Honor direct URL constraints when validating metadata-free lockfiles (#20796)
  • Ignore malformed PEP 723 scripts discovered during project checks (#20784)
  • Use ty's native script exclusion in uv check (#20742)

Performance

  • Parse canonical uv lockfiles directly, with a fallback for other valid TOML syntax (#20648)
  • Accelerate SHA-256 hashing on non-Windows ARM64 platforms (#20805)

Bug fixes

  • Flush shell startup file updates before uv tool update-shell and uv python update-shell exit (#20842)
  • Make workspace-root dependency groups available to commands run from workspace members (#20840)
  • Resolve --find-links paths in requirements files relative to the containing file (#20832)
  • Respect configured indexes in uv tool list --outdated (#20770)

Documentation

  • Document Astral GPU indexes in the PyTorch guide (#20785)
  • Use consistent dependency-group argument descriptions throughout the CLI documentation (#20823)

0.12.0

Released on 2026-07-28.

Since we released uv 0.11.0 in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution.

We expect most users to be able to upgrade without making changes.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.12, e.g., uv_build>=0.11.32,<0.13.

Breaking changes

  • Define build systems by default with uv init (#19197)

... (truncated)

Commits

Updates s3fs from 2026.6.0 to 2026.7.0

Commits

Updates ruff from 0.16.0 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits
  • 80790b3 Bump 0.16.1 (#27330)
  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
  • 0d80497 Lint TOML files in the LSP (#26862)
  • d91586b Update prek dependencies (#27293)
  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
  • 7c3e2db [ty] Fix enum class container assignability (#27318)
  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

d-v-b and others added 2 commits August 11, 2026 18:34
@d-v-b
fix: byte-order handling for structured dtypes in the bytes codec (#220)
d59b495 
* fix: byte-order handling for structured dtypes in the bytes codec

The bytes codec neither byte-swapped structured-dtype fields to its
configured endian on encode (numpy reports byteorder '|' for void
dtypes, so the top-level byteorder comparison never detected a
mismatch) nor honored its endian when decoding, silently corrupting
any structured data whose field byte order differed from the stored
one (e.g. virtual references to external big-endian data).

Encode now detects byte-order mismatches by comparing full dtypes via
newbyteorder, and decode reinterprets raw bytes in the stored byte
order before converting to the data type's declared byte order, so the
stored layout (codec state) and the in-memory layout (array data type)
are independent.

Closes zarr-developers#4141

Assisted-by: ClaudeCode:claude-fable-5

* test: fold structured byte-order cases into existing bytes codec tests

Extend test_endian's parametrization with structured dtypes and
test_bytes_codec_sync_roundtrip with endian/dtype parametrization plus
stored-layout and decoded-dtype assertions, instead of adding parallel
test functions for the same properties.

Assisted-by: ClaudeCode:claude-fable-5

* refactor: rename stored_dtype to view_dtype in BytesCodec decode

The variable is the dtype used to view the raw chunk bytes (byte order
from the codec's endian configuration), not a property of the stored
data or of the returned buffer, which always carries the array's
declared dtype.

Assisted-by: ClaudeCode:claude-fable-5

* docs: note that the decode-side byte-order conversion copies the chunk

Assisted-by: ClaudeCode:claude-fable-5
@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
f4af979 
…th 7 updates

Bumps the python-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fsspec](https://github.com/fsspec/filesystem_spec) | `2026.6.0` | `2026.7.0` |
| [typer](https://github.com/fastapi/typer) | `0.27.0` | `0.27.1` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.2` | `7.15.3` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.160.0` | `6.165.0` |
| [uv](https://github.com/astral-sh/uv) | `0.11.31` | `0.12.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.0` | `0.16.1` |



Updates `fsspec` from 2026.6.0 to 2026.7.0
- [Commits](fsspec/filesystem_spec@2026.6.0...2026.7.0)

Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.0...0.27.1)

Updates `coverage` from 7.15.2 to 7.15.3
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.2...7.15.3)

Updates `hypothesis` from 6.160.0 to 6.165.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.160.0...v6.165.0)

Updates `uv` from 0.11.31 to 0.12.1
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.31...0.12.1)

Updates `s3fs` from 2026.6.0 to 2026.7.0
- [Changelog](https://github.com/fsspec/s3fs/blob/main/release-procedure.md)
- [Commits](https://github.com/fsspec/s3fs/commits/2026.7.0)

Updates `ruff` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.0...0.16.1)

---
updated-dependencies:
- dependency-name: fsspec
  dependency-version: 2026.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: typer
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.15.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.165.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: uv
  dependency-version: 0.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: s3fs
  dependency-version: 2026.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@d-v-b