Bump the python-minor-and-patch group with 6 updates by dependabot[bot] · Pull Request #22 · finite-sample/winference

dependabot · 2026-10-26T21:49:41Z

Bumps the python-minor-and-patch group with 6 updates:

Package	From	To
ruff	`0.17.0`	`0.17.1`
distlib	`0.4.3`	`0.4.4`
fonttools	`4.66.1`	`4.67.0`
platformdirs	`4.13.0`	`4.13.5`
pluggy	`1.6.0`	`1.7.0`
python-discovery	`1.6.2`	`1.6.4`

Updates ruff from 0.17.0 to 0.17.1

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

Install ruff 0.17.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"
Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

Commits

4683270 Bump version to 0.17.1 (#29420)
3514027 [ty] Update typing conformance suite pin (#29417)
8294556 Update referenced PR security-review workflow (#29237)
d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
83a3afc Fix dedent with multiple leading comments (#29382)
b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
d01678e [ty] Clarify object attribute write-contract rationale (#29384)
355b42a [ty] Avoid writable override contracts from object (#29373)
e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
Additional commits viewable in compare view

Updates distlib from 0.4.3 to 0.4.4

Changelog

Sourced from distlib's changelog.

0.4.4


Released: 2026-10-16


compat

Fixed a missing import. Thanks to Andrej730 for the patch.



markers

Fixed #273: Enforce compatible-release bounds in environment markers.
Thanks to Luochenchen for the patch.



metadata

Fix #194: Add an urls property to expose project and home URLs. Thanks to
Sinkleberg for the patch.



scripts


Raise the correct exception when a launcher can't be written. Thanks to
candygoogy for the patch.


Fix #144: Detect shell-script Python executables in ScriptMaker shebangs.
Thanks to Alex Chen for the patch.




util


Improve performance of export entry search to take linear time. Thanks to
Brian Willows for the patch.


Use tarfile.data_filter rather than tarfile.tar_filter in unarchive()
when extraction filters are available, matching the Python 3.14 default. Path and
link containment checks now use os.path.realpath and no longer fail with
IndexError for members such as . or ./. Thanks to Kobain for the patch.


unarchive() now resolves member paths through symlinks seen earlier in the
same archive, so a chain of individually harmless-looking links cannot be used
to write outside the destination on Pythons without extraction filters. Thanks to
Kobain for the patch.




version


Improve NormalizedVersion by addressing correctness and performance gaps
found by comparison with packaging. Thanks to Damian Shaw for the patch.


Improve SemanticVersion by comparing numeric prerelease identifiers,
including those longer than 8 digits. Thanks to Muneeb Sheikh for the
patch.

Commits

25eed06 Changes for 0.4.4.
8ffee6f Resolve member paths through earlier archive symlinks in unarchive()
ef4a390 Test that data_filter rejects absolute symlinks with check=False
380b6a9 Use data_filter and realpath containment checks in unarchive()
7b7c572 fix: enforce compatible-release bounds in markers (#274)
38811dd Detect shell-script Python executables in ScriptMaker shebangs (#144) (#264)
06ddb5d Compare numeric prerelease identifiers without a digit limit (#270)
e54dd8c Raise the original error when a launcher can't be written (#269)
c6270e3 Fix NormalizedVersion gaps found by comparison with packaging (#271)
5b3092b Search export entries in linear time (#266)
Additional commits viewable in compare view

Updates fonttools from 4.66.1 to 4.67.0

Release notes

Sourced from fonttools's releases.

4.67.0

[varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).

[designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).

[designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).

[designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).

[varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).

[varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).

[varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).

[varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).

[varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).

[varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).

[varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).

[featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).

[ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).

[ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).

[VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).

[VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).

[varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).

[otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).

[ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).

[scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).

[cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or all single-byte codes map to .notdef (#4215). Formats 2 and 4 now reject glyph IDs above 65535 instead of wrapping them (#4226). Split format 14 default UVS ranges longer than 256 codepoints (#4229). Empty format 12 and 13 subtables round-trip (#4246).

[glyf] Use unsigned instruction lengths, so programs of 32768-65535 bytes compile and decompile correctly (#4227). Keep instructions in zero-contour glyphs (#4228).

[pens] Fix cubic off-curve detection in TTGlyphPointPen across contour starts (#4224). Glyph.drawPoints() now raises NotImplementedError for an all-off-curve cubic contour, which the point pen protocol cannot express (#3191, #4225). RoundingPen passes the all-off-curve None sentinel through (#4311, #4312).

[CFF2] Preserve operands when a blend has zero regions (#4240).

[cffLib] Read CFF font names as Latin-1, matching how they are written (#4253). Deleting a CFF dict attribute now actually removes it (#2725, #4264).

[CFF2ToCFF] Fix conversion of fonts with local subroutines (#4258). A CFF2 table with a single FontDict is now converted to a name-keyed CFF font that keeps its glyph names (#3890, #4265).

[subset] Handle a null GDEF variation store (#4230).

[merge] Support merging fonts that both have a MATH table (#3823, #4257).

[feaLib] Reject the same mark class used twice in one anchor list (#3628, #4255). Don't crash on value records whose devices are all NULL (#2396, #4261). Pad a short OS/2 Vendor with spaces (#4259).

[feaLib] Raise FeatureLibError with a location, instead of a bare Python error, for: a BASE script list without a matching tag list (#4263), a UnicodeRange bit outside 0-127 (#4266), a name string that cannot be decoded (#4267), a STAT axis location with no or too many values (#4268), and a non-ASCII OS/2 Vendor (#4269).

[name] Fix the BCP 47 tags of some Mac and Windows language IDs, e.g. es was mapped to Mac Estonian (#3733, #4256). getDebugName prefers the Windows English name over the Mac one (#3969, #4273).

[post] Don't crash on a format 2.0 table with numGlyphs set to 0 (#3060, #4274).

[VDMX] Recompute numRecs and numRatios when compiling (#4293).

[Silf] Fix compiling a Silf table that was decompiled from binary (#4294).

[woff2] Preserve minorVersion when copying flavor data (#4249, #4250).

[ttGlyphSet] Compute glyph width lazily for glyf variable fonts without HVAR, so .width is correct before drawing (#3964, #4260).

[varLib.interpolatable] Respect designspace source layers (#3951, #4275); fix --json output with SciPy (#3870, #4276).

[misc.psLib] Fix tokenizing of escaped parentheses in PostScript strings (#4207).

[svgLib] Raise ValueError instead of IndexError on a truncated path command (#4254).

[misc.transform] Preserve the direction of the remaining axis when decomposing a transform whose first column is zero (#4242).

[misc.textTools] Tag.__ne__ returns NotImplemented for unsupported types (#4305, #4306).

[misc.dictTools] hashdict rejects in-place union (|=) (#4313, #4314).

[misc.xmlReader] Close owned input streams when parsing fails (#4298).

[misc.filesystem] WriteZipFS.close() can be called more than once (#4309, #4310).

[EBDT] Keep EBDT/CBDT glyph metrics after probing a missing attribute (#3806, #4216).

Changelog

Sourced from fonttools's changelog.

4.67.0 (released 2026-10-14)

[varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).

[designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).

[designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).

[designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).

[varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).

[varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).

[varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).

[varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).

[varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).

[varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).

[varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).

[featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).

[ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).

[ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).

[VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).

[VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).

[varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).

[otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).

[ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).

[scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).

[cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or

... (truncated)

Commits

16f88cb Release 4.67.0
5049c83 Update NEWS.rst [skip ci]
fdfd15f Merge pull request #4314 from xiehuanyi/fix/hashdict-inplace-union-20261014
87ee7d3 Merge pull request #4312 from xiehuanyi/fix/roundingpen-offcurve-none-20261014
e6e65d3 [dictTools] Reject in-place union on hashdict
10cfefe Merge pull request #4310 from xiehuanyi/fix/writezipfs-idempotent-close-20261014
06157e4 Merge pull request #4300 from CAOShurong/codex/3751-missing-fvar
2940a2e Merge pull request #4298 from xiehuanyi/fix-xml-reader-failure-cleanup
821805d Merge pull request #4306 from xiehuanyi/fix/tag-notimplemented-comparison-202...
85538d6 [roundingPen] Preserve all-off-curve quadratic sentinel
Additional commits viewable in compare view

Updates platformdirs from 4.13.0 to 4.13.5

Release notes

Sourced from platformdirs's releases.

4.13.5

Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. #631

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.4...4.13.5

4.13.4

Require a complete files path segment when locating Android app directories from sys.path. #621

Keep root directory tests independent of inherited XDG environment variables. #622

Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. #624

Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. #625

Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. #627

Correct the contributor guide to name ty as the type checker used by the type environment. #623

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.3...4.13.4

4.13.3

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.2...4.13.3

4.13.2

Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. #619

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.1...4.13.2

4.13.1

Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. #618

Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.0...4.13.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.13.5 (2026-10-19)

Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. :pr:631

4.13.4 (2026-10-17)

Require a complete files path segment when locating Android app directories from sys.path. :pr:621

Keep root directory tests independent of inherited XDG environment variables. :pr:622

Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. :pr:624

Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. :pr:625

Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. :pr:627

Correct the contributor guide to name ty as the type checker used by the type environment. :pr:623

4.13.3 (2026-10-16)

4.13.2 (2026-10-16)

Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. :pr:619

4.13.1 (2026-10-15)

Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. :pr:618

Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

4.13.0 (2026-10-10)

... (truncated)

Commits

5702904 Release 4.13.5
4b2b6a5 🐛 fix(release): trim GitHub release notes (#631)
6f7e3e2 👷 ci: collect required checks (#628)
caa5626 Release 4.13.4
9b5c0fd fix(windows): raise when no home directory resolves (#627)
da72995 fix: require a complete files segment when finding Android app folders (#621)
da89726 test: isolate root directory checks from inherited XDG settings (#622)
fb0b1a9 fix: keep root directory accessors consistent during isolation (#625)
91f7775 fix(ios): raise when no home directory resolves (#624)
ed9f25f ci: rerun news check on label changes (#626)
Additional commits viewable in compare view

Updates pluggy from 1.6.0 to 1.7.0

Changelog

Sourced from pluggy's changelog.

pluggy 1.7.0 (2026-10-14)

Deprecations and Removals

[#632](https://github.com/pytest-dev/pluggy/issues/632) <https://github.com/pytest-dev/pluggy/issues/632>_: Hookspec methods defined without self as the first parameter now emit a :class:DeprecationWarning. Add self as the first parameter or use @staticmethod.

Features

[#170](https://github.com/pytest-dev/pluggy/issues/170) <https://github.com/pytest-dev/pluggy/issues/170>_: Hookspecs can now declare default values for arguments, using the usual def myhook(myarg="default") syntax. This is mainly a backward compatibility feature, to allow a hookspec to add new parameters to an existing hook without breaking existing callers. See :ref:hookspec_arg_default for details.

[#729](https://github.com/pytest-dev/pluggy/issues/729) <https://github.com/pytest-dev/pluggy/issues/729>_: Tracing now adds detail where str() is ambiguous: empty strings and strings containing whitespace are quoted, and enums and paths show their repr().

A value spanning several lines is now displayed as a block instead of running into the surrounding trace.

Bug Fixes

[#629](https://github.com/pytest-dev/pluggy/issues/629) <https://github.com/pytest-dev/pluggy/issues/629>_: Fix hooks failing to register on Python 3.14+ when type annotations use forward references.

[#315](https://github.com/pytest-dev/pluggy/issues/315) <https://github.com/pytest-dev/pluggy/issues/315>_: Source archives created by git archive (including GitHub's "Source code" downloads) now carry version information, so building pluggy from them no longer fails with a missing version.

[#442](https://github.com/pytest-dev/pluggy/issues/442) <https://github.com/pytest-dev/pluggy/issues/442>_: With the addition of default values for hookspec arguments, we also changed the precedence of default values for hookimpl arguments. Previously, if a hookimpl function declared a default for an argument, it was always used, even if the hook call passed an explicit value. Now the precedence is changed to: hook call passed value > hookspec default value > hookimpl default value. See :ref:hookimpl_arg_defaults.

[#701](https://github.com/pytest-dev/pluggy/issues/701) <https://github.com/pytest-dev/pluggy/issues/701>_: Hookimpls and hookspecs are now discovered via :func:inspect.getattr_static, so properties, cached_property and other descriptors are no longer executed while scanning a plugin. Hooks declared through such a descriptor are not supported.

As a side effect, @hookimpl/@hookspec applied above @classmethod or @staticmethod is now picked up; previously the marker sat on the wrapper where getattr() never saw it. Callables stored directly on a plugin instance -- in its __dict__ or in a __slots__ slot -- keep being called exactly as getattr() returned them, i.e. without an implicit self.

... (truncated)

Commits

4c7f636 Preparing release 1.7.0
21c7e16 Merge pull request #787 from pytest-dev/rm-outdated-doc
628959b docs: remove outdated hookimpl default args paragraph
2edab5e Merge pull request #752 from bluetech/register-none-allow
6995073 Merge pull request #776 from RonnyPfannschmidt/fix/uv-lock-pytest-downgrade
50c1ac9 [pre-commit.ci] pre-commit autoupdate (#781)
6a7e84e Add changelog fragment for #776
d22cfb5 Drop tox from the dev dependency group
74cbfa2 Relock pytest and tox that dependabot downgraded
87f130a Merge pull request #755 from harbinresearcher/codex/entrypoint-plugin-presence
Additional commits viewable in compare view

Updates python-discovery from 1.6.2 to 1.6.4

Release notes

Sourced from python-discovery's releases.

v1.6.4

Improved documentation - 1.6.4

Clarify the executable paths accepted by try_first_with in the standalone usage example. (#150)

PyPI release

Full Changelog: tox-dev/python-discovery@1.6.3...1.6.4

1.6.3

Bug fixes - 1.6.3

Treat specs with dot-only version components, such as python., as literal executable paths instead of raising IndexError - by harbinresearcher. (#147)

Pass PEP 514 ExecutableArguments to registered Windows interpreters when querying them, so a registration that points at a launcher such as py.exe -3.11 reports the interpreter it selects - by blouirts123. (#148)

PyPI release

Full Changelog: tox-dev/python-discovery@1.6.2...1.6.3

Changelog

Sourced from python-discovery's changelog.

Improved documentation - 1.6.4

Clarify the executable paths accepted by try_first_with in the standalone usage example. (:issue:150)

v1.6.3 (2026-10-16)

Bug fixes - 1.6.3

Treat specs with dot-only version components, such as python., as literal executable paths instead of raising IndexError - by :user:harbinresearcher. (:issue:147)

Pass PEP 514 ExecutableArguments to registered Windows interpreters when querying them, so a registration that points at a launcher such as py.exe -3.11 reports the interpreter it selects - by :user:blouirts123. (:issue:148)

v1.6.2 (2026-10-10)

Commits

885805a release 1.6.4
1a6b5cd fix(release): trim GitHub notes (#154)
ac862a4 👷 ci: publish release after PyPI (#153)
4d53c08 build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 in the github-acti...
1701972 👷 ci(release): require changelog entries (#151)
9f051ac docs: use an executable path in the try_first_with example (#150)
3b72b55 test: move argument tests into existing file (#149)
cbb2abd fix: honor PEP 514 executable arguments during discovery (#148)
ab2abc8 fix(spec): handle dot-only version components (#147)
1c9af8e build(deps): bump the github-actions group with 2 updates (#145)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor-and-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.17.0` | `0.17.1` | | [distlib](https://github.com/pypa/distlib) | `0.4.3` | `0.4.4` | | [fonttools](https://github.com/fonttools/fonttools) | `4.66.1` | `4.67.0` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.13.0` | `4.13.5` | | [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.6.2` | `1.6.4` | Updates `ruff` from 0.17.0 to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.17.0...0.17.1) Updates `distlib` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/pypa/distlib/releases) - [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst) - [Commits](pypa/distlib@0.4.3...0.4.4) Updates `fonttools` from 4.66.1 to 4.67.0 - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.66.1...4.67.0) Updates `platformdirs` from 4.13.0 to 4.13.5 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.13.0...4.13.5) Updates `pluggy` from 1.6.0 to 1.7.0 - [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pluggy@1.6.0...1.7.0) Updates `python-discovery` from 1.6.2 to 1.6.4 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](tox-dev/python-discovery@1.6.2...1.6.4) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: distlib dependency-version: 0.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: fonttools dependency-version: 4.67.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: platformdirs dependency-version: 4.13.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: pluggy dependency-version: 1.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: python-discovery dependency-version: 1.6.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 26, 2026

github-actions Bot enabled auto-merge (squash) October 26, 2026 21:49

github-actions Bot merged commit 764e291 into main Oct 26, 2026
12 checks passed

Navigation Menu

Repository navigation

Bump the python-minor-and-patch group with 6 updates - #22

Bump the python-minor-and-patch group with 6 updates#22
github-actions[bot] merged 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-2f620e8a6e

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

0.17.1

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

Install ruff 0.17.1

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.1

0.17.1

Preview features

Bug fixes

Rule changes

Documentation

Contributors

4.67.0

4.67.0 (released 2026-10-14)

4.13.5

4.13.4

4.13.3

4.13.2

4.13.1

pluggy 1.7.0 (2026-10-14)

Deprecations and Removals

Features

Bug Fixes

v1.6.4

Improved documentation - 1.6.4

1.6.3

Bug fixes - 1.6.3

Improved documentation - 1.6.4

Bug fixes - 1.6.3

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants