Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 11 updates - #4538

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f54d6c2ac1
Open

chore(deps): bump the python-dependencies group across 1 directory with 11 updates#4538
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f54d6c2ac1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the python-dependencies group with 11 updates in the / directory:

Package From To
numpy 2.5.3 2.5.4
typer 0.27.2 0.27.3
hypothesis 6.168.3 6.169.0
uv 0.12.21 0.13.0
moto[s3,server] 5.2.3 5.2.4
mkdocstrings 1.0.6 1.0.7
markdown-exec[ansi] 1.12.3 1.12.4
griffe-inherited-docstrings 1.1.3 1.1.4
ruff 0.16.9 0.17.0
astroid 4.3.3 4.3.4
mypy 2.3.1 2.4.0

Updates numpy from 2.5.3 to 2.5.4

Release notes

Sourced from numpy's releases.

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Released on 2026-10-10.

NumPy 2.5.4 is a patch release that fixes bugs discovered after the 2.5.3 release. Highlights are:

  • Many typing fixes and improvements,
  • A workaround for the MSVC 19.51 bug, see below.

This release supports Python versions 3.12-3.15.

Improvements

  • numpy.linalg.svd and numpy.linalg.lstsq now raise for inputs containing infinities instead of returning garbage results.

  • Fixed hangs in numpy.linalg.svd and numpy.linalg.lstsq for certain inputs containing infinities for recent versions of some LAPACK implementations.

  • numpy.linalg.cond now handles non-finite inputs more consistently.

(gh-32593)

StringDType hashing with NaN sentinels

StringDType instances with equivalent floating-point NaN sentinels now have equal hashes. Previously, distinct NaN objects could produce equal dtype instances with different hashes, causing dictionary lookups and set deduplication to fail.

(gh-32563)

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

A fill_value copied from a source array is now reset to the default fill_value for the new dtype when it cannot be represented in that dtype. Previously the copied value could be stale: ufuncs that change dtype left the result holding a fill_value typed for the old dtype, which raised a TypeError only when something later validated it (such as .view()), and a floating point fill_value that overflows an integer dtype was kept as an out-of-range value together with a RuntimeWarning. Both now fall back to the default, including when a masked array is passed to MaskedArray with a different dtype. A fill_value given explicitly by the user is still validated and raises as before. This can now raise a ComplexWarning if the fill_value is complex and the new dtype is real.

... (truncated)

Commits
  • a3d0ef1 Merge pull request #32969 from charris/prepare-2.5.4
  • 087b536 MAINT: Make OpenBLAS version check use 2.5.x branch.
  • 91acd87 REL: Prepare for the NumPy 2.5.4 release.
  • 9cc555b Merge pull request #32956 from charris/backport-typing-1
  • e04b972 TYP: dtype[void].names: allow setting with list (#32943)
  • d929969 TYP: timedelta64: datetime.timedelta construction isn't deprecated (#...
  • 839467f TYP: ma.getmaskarray: accept array-likes (#32934)
  • 64b721b TYP: polynomial: accept scalar coef in the poly constructors (#32931)
  • 06b7ad2 TYP: void: accept any dtype: str in constructor calls (#32928)
  • c7bcd2c TYP: place: widen mask (#32926)
  • Additional commits viewable in compare view

Updates typer from 0.27.2 to 0.27.3

Release notes

Sourced from typer's releases.

0.27.3

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

Changelog

Sourced from typer's changelog.

0.27.3 (2026-10-06)

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

Commits

Updates hypothesis from 6.168.3 to 6.169.0

Commits
  • 82fa40a Bump hypothesis version to 6.169.0 and update changelog
  • 0116655 Merge pull request #4899 from Arjun-Aravind/fix/uv-download-metadata-url
  • 4f7ef96 claude: exclude rarely-hit realize branch from coverage
  • 4d42db9 Update uv download-metadata URL
  • 1484f6d Merge pull request #4896 from Liam-DeVoe/drop-python-3.10
  • ca2a4c6 Bump hypothesis version to 6.168.5 and update changelog
  • c1c9957 Merge pull request #4894 from MarcoGorelli/django-from-field-return-type
  • e3e5fea claude: address review comments
  • 7c22da6 claude: simplify add_note fallback
  • f6a8067 claude: check ghostwriter golden outputs on 3.11 instead of 3.10
  • Additional commits viewable in compare view

Updates uv from 0.12.21 to 0.13.0

Release notes

Sourced from uv's releases.

0.13.0

Release Notes

Released on 2026-10-09.

uv 0.13.0 makes Python 3.15 the default stable Python version. We've also included several breaking changes to improve correctness, performance, and compatibility, described below.

We expect most users to be able to upgrade without making changes.

While not a breaking change, this release also updates the format of many of uv's cache entries to improve performance. uv may download or rebuild dependencies after upgrading, because some cached entries from earlier versions cannot be reused. Multiple versions of uv can still safely share the same cache directory.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.13, e.g., uv_build>=0.13.0,<0.14.

Breaking changes

  • Use Python 3.15 as the default stable version

    The default stable Python version has changed from 3.14 to 3.15. This affects Python downloads when no version is requested or pinned, e.g., when running uv python install.

    uv continues to use compatible Python installations that are already present. For example, uv venv can still use an installed Python 3.14. If no suitable interpreter is installed and automatic downloads are enabled, commands such as uv venv and uvx python can now download Python 3.15.

    You can opt out of this behavior by requesting Python 3.14 explicitly, e.g., uv venv --python 3.14. For projects, use uv python pin 3.14 to record the version in .python-version.

  • Honor --require-hashes in included constraints files (#22275)

    Previously, uv ignored --require-hashes in constraints files included with -c from a requirements file. Now, uv honors the directive and requires hashes for all requirements in the installation. Installs that previously succeeded can now fail if a requirement is missing a hash.

    You cannot opt out while the directive is present. Add the missing hashes to your requirements, or remove the --require-hashes directive from the included constraints file if hash checking is not intended.

  • Prefer native Python on Windows ARM64 (#22100)

    Previously, ARM64 builds of uv preferred emulated x86_64 Python installations because native wheel support was limited. Now, uv prefers native ARM64 (aarch64) interpreters across Python versions.

    This follows similar changes in CPython, the official Windows Python install manager, and GitHub's actions/setup-python.

    When a native interpreter is unavailable, uv continues to fall back to x86_64, then 32-bit x86.

    You can opt out of this behavior by setting UV_PYTHON_ARCH=x86_64 or requesting an explicit architecture, e.g., cpython-3.14-windows-x86_64. If you are using setup-uv, you can set python-arch: x86_64 instead.

  • Reject editable requirements in included constraints files (#22282)

    Previously, uv silently ignored editable (-e) requirements in constraints files included with -c from a requirements file. Now, uv rejects these requirements with an error, matching pip's behavior.

    You cannot opt out of this behavior. Move editable requirements to a requirements file passed with -r, or pass them directly with --editable, instead of including them in a constraints file.

  • Omit the distutils startup patch on Python 3.10 and later (#22096)

    Previously, uv installed _virtualenv.py and _virtualenv.pth into every new virtual environment to prevent distutils configuration from changing installation paths. Now, like virtualenv 21.6.0, uv omits these files on Python 3.10 and later, which already ignore the affected configuration keys. This reduces Python startup overhead. Python 3.9 and earlier retain the patch.

    You cannot opt out of this behavior. Existing virtual environments are not modified automatically. Recreate an environment with Python 3.10 or later to remove the patch.

... (truncated)

Changelog

Sourced from uv's changelog.

0.13.0

Released on 2026-10-09.

uv 0.13.0 makes Python 3.15 the default stable Python version. We've also included several breaking changes to improve correctness, performance, and compatibility, described below.

We expect most users to be able to upgrade without making changes.

While not a breaking change, this release also updates the format of many of uv's cache entries to improve performance. uv may download or rebuild dependencies after upgrading, because some cached entries from earlier versions cannot be reused. Multiple versions of uv can still safely share the same cache directory.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.13, e.g., uv_build>=0.13.0,<0.14.

Breaking changes

  • Use Python 3.15 as the default stable version

    The default stable Python version has changed from 3.14 to 3.15. This affects Python downloads when no version is requested or pinned, e.g., when running uv python install.

    uv continues to use compatible Python installations that are already present. For example, uv venv can still use an installed Python 3.14. If no suitable interpreter is installed and automatic downloads are enabled, commands such as uv venv and uvx python can now download Python 3.15.

    You can opt out of this behavior by requesting Python 3.14 explicitly, e.g., uv venv --python 3.14. For projects, use uv python pin 3.14 to record the version in .python-version.

  • Honor --require-hashes in included constraints files (#22275)

    Previously, uv ignored --require-hashes in constraints files included with -c from a requirements file. Now, uv honors the directive and requires hashes for all requirements in the installation. Installs that previously succeeded can now fail if a requirement is missing a hash.

    You cannot opt out while the directive is present. Add the missing hashes to your requirements, or remove the --require-hashes directive from the included constraints file if hash checking is not intended.

  • Prefer native Python on Windows ARM64 (#22100)

    Previously, ARM64 builds of uv preferred emulated x86_64 Python installations because native wheel support was limited. Now, uv prefers native ARM64 (aarch64) interpreters across Python versions.

    This follows similar changes in CPython, the official Windows Python install manager, and GitHub's actions/setup-python.

    When a native interpreter is unavailable, uv continues to fall back to x86_64, then 32-bit x86.

    You can opt out of this behavior by setting UV_PYTHON_ARCH=x86_64 or requesting an explicit architecture, e.g., cpython-3.14-windows-x86_64. If you are using setup-uv, you can set python-arch: x86_64 instead.

  • Reject editable requirements in included constraints files (#22282)

    Previously, uv silently ignored editable (-e) requirements in constraints files included with -c from a requirements file. Now, uv rejects these requirements with an error, matching pip's behavior.

    You cannot opt out of this behavior. Move editable requirements to a requirements file passed with -r, or pass them directly with --editable, instead of including them in a constraints file.

  • Omit the distutils startup patch on Python 3.10 and later (#22096)

    Previously, uv installed _virtualenv.py and _virtualenv.pth into every new virtual environment to prevent distutils configuration from changing installation paths. Now, like virtualenv 21.6.0, uv omits these files on Python 3.10 and later, which already ignore the affected configuration keys. This reduces Python startup overhead. Python 3.9 and earlier retain the patch.

    You cannot opt out of this behavior. Existing virtual environments are not modified automatically. Recreate an environment with Python 3.10 or later to remove the patch.

    This stabilizes the no-distutils-patch preview feature.

  • Treat requirement-file option values as single paths (#22290)

    Previously, uv split values passed to --constraint, --override, --exclude, and --build-constraint on spaces, even when quoted. Now, each value is treated as a single path, allowing file paths containing spaces.

... (truncated)

Commits

Updates moto[s3,server] from 5.2.3 to 5.2.4

Changelog

Sourced from moto[s3,server]'s changelog.

5.2.4

Docker Digest for 5.2.4: sha256:120b1589c6df7e35d2092935f6ff724486bb2c4189d0e36ce795baba1400ffd2

General:
    * The `aws-xray-sdk` dependency now has a lower limit of 2.10.0, allowing us to drop the `setuptools` dependency

New Services:


* Bedrock AgentCore:
    * create_event()
    * delete_event()
    * get_event()
    * list_events()



New Methods:
* CloudFront:
* create_function()
* delete_function()
* describe_function()
* get_function()
* list_functions()
* create_key_value_store()
* delete_key_value_store()
* describe_key_value_store()
* list_key_value_stores()
* update_key_value_store()


* CodePipeline:
    * get_pipeline_execution()
    * list_pipeline_executions()
    * start_pipeline_execution()

    

  • 

    DMS:
    

      

    • modify_replication_instance()
      • 

    

    • 

  • 

    EC2:
    

      

    • create_traffic_mirror_session()
      • 

    • delete_traffic_mirror_session()
      • 

    • describe_traffic_mirror_sessions()
      • 

    • disable_image()
      • 

    • enable_image()
      • 

    • modify_traffic_mirror_session()
      • 

    

    • 

  • 

    ElastiCache:
    

      

    • modify_replication_group()
      • 

    

    • 

  • 

    ECR:
    

      

    • batch_check_layer_availability()
      • 

    • complete_layer_upload()

... (truncated)

Commits

Updates mkdocstrings from 1.0.6 to 1.0.7

Release notes

Sourced from mkdocstrings's releases.

1.0.7

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Changelog

Sourced from mkdocstrings's changelog.

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Commits

Updates markdown-exec[ansi] from 1.12.3 to 1.12.4

Release notes

Sourced from markdown-exec[ansi]'s releases.

1.12.4

1.12.4 - 2026-10-06

Compare with 1.12.3

Build

  • Drop support for Python 3.10 (9bfb0c7 by Timothée Mazzucotelli).

Bug Fixes

  • Don't propagate Zensical's preview extension, which requires its zrelpath processor (c2f3e0b by Timothée Mazzucotelli).
  • Declare markupsafe as a dependency (a8f4330 by Kayvan Zahiri). Issue-94, PR-102
  • Prevent mutating original registered extensions list (3866f5e by Timothée Mazzucotelli).
Changelog

Sourced from markdown-exec[ansi]'s changelog.

1.12.4 - 2026-10-06

Compare with 1.12.3

Build

  • Drop support for Python 3.10 (9bfb0c7 by Timothée Mazzucotelli).

Bug Fixes

  • Don't propagate Zensical's preview extension, which requires its zrelpath processor (c2f3e0b by Timothée Mazzucotelli).
  • Declare markupsafe as a dependency (a8f4330 by Kayvan Zahiri). Issue-94, PR-102
  • Prevent mutating original registered extensions list (3866f5e by Timothée Mazzucotelli).
Commits
  • 846cf2c chore: Prepare release 1.12.4
  • 9e3360d chore: Template upgrade
  • 9bfb0c7 build: Drop support for Python 3.10
  • 9fe8b66 chore: Lint
  • c2f3e0b fix: Don't propagate Zensical's preview extension, which requires its zrelpat...
  • 3750362 docs: Fix matplotlib snippet
  • 89b3c85 chore: Template upgrade
  • a8f4330 fix: Declare markupsafe as a dependency
  • 3866f5e fix: Prevent mutating original registered extensions list
  • 39a6f68 chore: Add TODO comment
  • Additional commits viewable in compare view

Updates griffe-inherited-docstrings from 1.1.3 to 1.1.4

Release notes

Sourced from griffe-inherited-docstrings's releases.

1.1.4

1.1.4 - 2026-10-06

Compare with 1.1.3

Build

  • Drop support for Python 3.10 (c8da8dc by Timothée Mazzucotelli).
Changelog

Sourced from griffe-inherited-docstrings's changelog.

1.1.4 - 2026-10-06

Compare with 1.1.3

Build

  • Drop support for Python 3.10 (c8da8dc by Timothée Mazzucotelli).
Commits

Updates ruff from 0.16.9 to 0.17.0

Release notes

Sourced from ruff's releases.

0.17.0

Release Notes

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

  • Update the default and latest Python versions for 3.15 (#28792)

    Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

  • Update the default rule set (#28786)

    Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

  • Update Rust crate quick-junit to 0.8.0 (#27295)

    JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

  • [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

  • Support Unicode dummy variable names (#28722)

    The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

  • Update to Unicode 17 (#21229, #28784)

    Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

  • Always show unsafe and display-only fixes in the CLI (#27810)

    The default full output format now shows unsafe fixes and suggestions requiring manual review, regardless of the unsafe-fixes setting. Actually applying unsafe fixes still requires explicit opt-in.

  • Remove the Python dependency from conda-forge builds (conda-forge/ruff-feedstock#361)

    The conda-forge build no longer depends on Python, now supports linux-riscv64, win-arm64, and linux-ppc64le platforms, and now includes shell completions. However, no longer depending on Python means that python -m ruff and import ruff will no longer work. Use ruff directly from PATH instead. PyPI installations and those from the standalone installer are unaffected.

  • Remove support for ruff-lsp (#28750)

    Support for ruff-lsp, the legacy Python language server deprecated in Ruff v0.9.5, has been removed. The Ruff VS Code extension now always uses the native language server; ruff.nativeServer is deprecated and ignored. See the migration guide.

Stabilization

The following rules have been stabilized and are no longer in preview:

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

  • Update the default and latest Python versions for 3.15 (#28792)

    Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

  • Update the default rule set (#28786)

    Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

  • Update Rust crate quick-junit to 0.8.0 (#27295)

    JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

  • [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

  • Support Unicode dummy variable names (#28722)

    The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

  • Update to Unicode 17 (#21229, #28784)

    Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

  • Always show unsafe and display-only fixes in the CLI (#27810)

... (truncated)

Commits
  • 5b27c1c Bump version to 0.17.0 (#29259)
  • 8f362bf Integrate vendored Unicode names into Ruff
  • 88a50d6 Revert upstream Unicode loose matching
  • 276832a Revert upstream Unicode alias normalization
  • 26911ca Vendor unicode_names2 from upstream
  • 27e3797 [ruff] Stabilize os-path-commonprefix (RUF071) (#28764)
  • bbb52c1 [flake8-tidy-imports] Stabilize lazy-import-immediately-resolved (`TID255...
  • 5aa9cbd [flake8-tidy-imports] Stabilize lazy-import-mismatch (TID254) (#28760)
  • dba1bc8 [flake8-import-conventions] Add datetime as dt as a conventional alias (`...
  • ef23c9c Update default and latest Python versions for 3.15 (#28792)
  • Additional commits viewable in compare view

Updates astroid from 4.3.3 to 4.3.4

Release notes

Sourced from astroid's releases.

v4.3.4

What's new in astroid 4.3.4?

Release date: 2026-10-08

Bug Fixes

  • Fix a RecursionError when building a module from a live object that holds a container containing itself.

    Closes #2974 Closes pylint-dev/pylint#10459

  • Arguments.default_value() no longer raises IndexError when a keyword-only argument repeats the name of *args or **kwargs, as in def f(x, *y, y).

    Closes #3259

  • Fix an infinite loop when introspecting a live class that exposes itself, or a sibling class, as one of its own attributes.

    Closes #3284

  • Fix a TypeError crash when inferring random.sample() on a sequence whose elements are inferred as Instance.

    Closes #3310

  • Catch ValueError during comparison inference (such as invalid byte values in bytes membership checks) and return Uninferable instead of raising an uncaught exception.

    Closes #3333

  • A function whose body is only ... is now inferred to return Uninferable instead of None, the same as a function whose body is only pass. This is the astroid part of the fix for a false positive not-callable in pylint when calling a ... property stub, such as the sqlalchemy.func helpers.

    Refs #3347 Refs pylint-dev/pylint#8138

Commits
  • be377c4 Bump astroid to 4.3.4, update changelog
  • e8a40ad Require an astroid reference first in news fragments
  • 9e952fe Put the astroid issue first in the RecursionError fragment
  • ecfa879 [Backport maintenance/4.3.x] Infer an ellipsis-only function body as Uninfera...
  • 8e0b850 [Backport maintenance/4.3.x] Do not let raw building close a parent cycle (#3...
  • 05e7e40 [Backport maintenance/4.3.x] Do not crash on an argument that repeats the nam...
  • 980bfd2 [Backport maintenance/4.3.x] Fix crash inferring random.sample() when an elem...
  • 4e59872 [Backport maintenance/4.3.x] Fix RecursionError on live containers that conta...
  • d41afd8 [Backport maintenance/4.3.x] Handle ValueError during comparison inference (#...
  • See full diff in compare view

Updates mypy from 2.3.1 to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip i...

Description has been truncated

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
7feb599 
…th 11 updates

Bumps the python-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` |
| [typer](https://github.com/fastapi/typer) | `0.27.2` | `0.27.3` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.168.3` | `6.169.0` |
| [uv](https://github.com/astral-sh/uv) | `0.12.21` | `0.13.0` |
| [moto[s3,server]](https://github.com/getmoto/moto) | `5.2.3` | `5.2.4` |
| [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) | `1.0.6` | `1.0.7` |
| [markdown-exec[ansi]](https://github.com/pawamoy/markdown-exec) | `1.12.3` | `1.12.4` |
| [griffe-inherited-docstrings](https://github.com/mkdocstrings/griffe-inherited-docstrings) | `1.1.3` | `1.1.4` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.17.0` |
| [astroid](https://github.com/pylint-dev/astroid) | `4.3.3` | `4.3.4` |
| [mypy](https://github.com/python/mypy) | `2.3.1` | `2.4.0` |



Updates `numpy` from 2.5.3 to 2.5.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.3...v2.5.4)

Updates `typer` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.2...0.27.3)

Updates `hypothesis` from 6.168.3 to 6.169.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.168.3...v6.169.0)

Updates `uv` from 0.12.21 to 0.13.0
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.21...0.13.0)

Updates `moto[s3,server]` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.3...5.2.4)

Updates `mkdocstrings` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)
- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/mkdocstrings@1.0.6...1.0.7)

Updates `markdown-exec[ansi]` from 1.12.3 to 1.12.4
- [Release notes](https://github.com/pawamoy/markdown-exec/releases)
- [Changelog](https://github.com/pawamoy/markdown-exec/blob/main/CHANGELOG.md)
- [Commits](pawamoy/markdown-exec@1.12.3...1.12.4)

Updates `griffe-inherited-docstrings` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/mkdocstrings/griffe-inherited-docstrings/releases)
- [Changelog](https://github.com/mkdocstrings/griffe-inherited-docstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/griffe-inherited-docstrings@1.1.3...1.1.4)

Updates `ruff` from 0.16.9 to 0.17.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.17.0)

Updates `astroid` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v4.3.3...v4.3.4)

Updates `mypy` from 2.3.1 to 2.4.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.1...v2.4.0)

---
updated-dependencies:
- dependency-name: numpy
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: typer
  dependency-version: 0.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.169.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: uv
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: moto[s3,server]
  dependency-version: 5.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mkdocstrings
  dependency-version: 1.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: markdown-exec[ansi]
  dependency-version: 1.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: griffe-inherited-docstrings
  dependency-version: 1.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: astroid
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 20, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@d-v-b d-v-b d-v-b approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@d-v-b