Skip to content

Bump the python group across 1 directory with 3 updates#191

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-40ccf4f5da
Closed

Bump the python group across 1 directory with 3 updates#191
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-40ccf4f5da

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Bumps the python group with 3 updates in the / directory: typer, ty and tox.

Updates typer from 0.25.0 to 0.25.1

Release notes

Sourced from typer's releases.

0.25.1

Features

Internal

Changelog

Sourced from typer's changelog.

0.25.1 (2026-04-30)

Features

Internal

Commits

Updates ty from 0.0.32 to 0.0.34

Release notes

Sourced from ty's releases.

0.0.34

Release Notes

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.34

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Commits

Updates tox from 4.53.0 to 4.53.1

Release notes

Sourced from tox's releases.

v4.53.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.53.0...4.53.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.53.1

  • Hardening pass on user-facing logging and config parsing:

    • Mask secret-looking --key=value flag values in command logs (terminal warnings, .tox/<env>/log/*.log, and Outcome __repr__) using the same keyword regex previously applied to environment variable values.
    • Resolve PEP 723 script paths and reject any that escape tox_root; cap the script read at 5 MiB so a symlink to /dev/zero cannot exhaust memory.
    • Replace eval() of a constructed Literal[...] string in the CLI parser with a direct Literal[tuple(action.choices)] subscript.
    • Pass timeout=30 to urlopen when fetching a remote requirements file so a slow or unresponsive mirror cannot hang tox indefinitely. (:issue:3924)

  • Allow the generated TOML schema to validate array values for deps. (:issue:3929)

  • Correct type annotations for ArgumentParser.parse_args and parse_known_args overrides following typeshed PR [#15613](https://github.com/tox-dev/tox/issues/15613) <https://github.com/python/typeshed/pull/15613>_, which widened the args parameter from Sequence[str] to Iterable[str]. The narrower type in tox's overrides violated the Liskov substitution principle and caused invalid-method-override errors with ty 0.0.33. Also correct the option_spec annotation in docs/tox_conf.py to ClassVar[dict[str, Callable[[str], Any]]] matching the docutils stubs type. (:issue:3932)

v4.53.0 (2026-04-14)

Commits
  • 2b17791 release 4.53.1
  • 86234dd fix: allow deps arrays in TOML schema (#3931)
  • dd305fe 🐛 fix(type): correct argparse override signatures for ty 0.0.33 (#3932)
  • 3aa3cd5 [pre-commit.ci] pre-commit autoupdate
  • 59b6cd2 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#3928)
  • 3765fcd [pre-commit.ci] pre-commit autoupdate (#3927)
  • b76c383 build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#3926)
  • 7b0ad94 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3925)
  • 4dcde44 🐛 fix(security): harden user-facing logs and untrusted inputs (#3924)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python group across 1 directory with 3 updates
b606a78 
Bumps the python group with 3 updates in the / directory: [typer](https://github.com/fastapi/typer), [ty](https://github.com/astral-sh/ty) and [tox](https://github.com/tox-dev/tox).


Updates `typer` from 0.25.0 to 0.25.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.25.0...0.25.1)

Updates `ty` from 0.0.32 to 0.0.34
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.32...0.0.34)

Updates `tox` from 4.53.0 to 4.53.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.53.0...4.53.1)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ty
  dependency-version: 0.0.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: tox
  dependency-version: 4.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 4, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 5, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 5, 2026
@dependabot dependabot Bot deleted the dependabot/uv/python-40ccf4f5da branch May 5, 2026 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants