Skip to content

build(deps): bump the python-dependencies group across 1 directory with 10 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b55fc699d5
Open

build(deps): bump the python-dependencies group across 1 directory with 10 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b55fc699d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 10 updates in the / directory:

Package From To
build 1.5.0 1.6.1
git-cliff 2.13.1 2.14.2
hatchling 1.31.0 1.33.0
lizard 1.23.0 1.24.3
pre-commit 4.6.1 4.6.2
ruff 0.16.1 0.17.3
tox 4.58.0 4.65.0
tox-uv 1.36.0 1.36.1
pytest 9.1.1 9.2.0
pyrefly 1.2.0 1.4.0

Updates build from 1.5.0 to 1.6.1

Release notes

Sourced from build's releases.

1.6.1

What's Changed

Full Changelog: pypa/build@1.6.0...1.6.1

1.6.0

What's Changed

New Contributors

Full Changelog: pypa/build@1.5.1...1.6.0

1.5.1

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.6.1 (2026-09-10) ####################

Bugfixes

  • Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:henryiii (:issue:1175) (:issue:1175)

Documentation

  • Fix doubled backslashes in the Windows pip config path (%APPDATA%\pip\pip.ini) in the docs - by :user:aroh3006 (:issue:1149)

Miscellaneous

  • :issue:1168, :issue:1170, :issue:1178

#################### 1.6.0 (2026-08-27) ####################

Features

  • Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
  • The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
  • The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
  • Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
  • Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
    • by :user:gaborbernat (:issue:655)
  • Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
  • On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

Bugfixes

... (truncated)

Commits
  • 89cccef chore: prepare for 1.6.1
  • a6f707a ci: support releases from v* branches (#1178)
  • 7785161 docs: fix doubled backslashes in Windows pip config path (#1149)
  • 244b250 fix: always use copies for the isolated venv on Windows (#1176)
  • c93ca6f build(deps): bump re-actors/alls-green from 1.2.2 to 1.3.0 in the github-acti...
  • e02ffd3 pre-commit: bump repositories (#1173)
  • aad39a8 docs: fix changelog page heading levels and sidebar (#1171)
  • 5c3fd46 docs: use PyPI ref directly (#1172)
  • 1c5bd6c 🐛 fix(release): format generated changelog (#1170)
  • 7f0cc7e 🔧 build(type): replace mypy with pyrefly (#1168)
  • Additional commits viewable in compare view

Updates git-cliff from 2.13.1 to 2.14.2

Release notes

Sourced from git-cliff's releases.

Release v2.14.2

animation

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

Release v2.14.1

animation

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)

... (truncated)

Changelog

Sourced from git-cliff's changelog.

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)
  • (context) Add pr_numbers field to RemoteContributor (#1546) - (48fd98f)
  • (examples) Add GitLab built-in changelog templates (#1561) - (c92bd16)
  • (git) Support limiting processed tags (#1493) - (d13a61c)
  • (git) Ignore commits listed in .git-blame-ignore-revs (#1585) - (89247f4)
  • (remote) [breaking] Expose the pull request author as commit.remote.pr_author (#1613) - (017e10b)
  • (remote) Add configurable HTTP timeout for metadata requests (#1580) - (c559920)
  • (template) Add group_by_scope filter (#1547) - (dd5f305)
  • (template) Add commit_groups filter for ordered group rendering (#1518) - (8a2a331)

... (truncated)

Commits

Updates hatchling from 1.31.0 to 1.33.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.33.0

Added:

  • Officially support Python 3.15.

Hatchling v1.32.4

Fixed:

  • Revert the extra type parameter added to BuildHookInterface in 1.32.3, which broke plugins that subscripted the interface with a single argument (e.g. BuildHookInterface[MyConfig]) by raising TypeError at import time. BuilderConfig is likewise no longer generic, restoring the pre-1.32.3 plugin interface.
  • Strip spaces around version metadata when using original input for CalVer to keep leading zeroes.

Hatchling v1.32.3

Fixed:

  • Preserve the version string exactly as written in core metadata, so stylized versions such as CalVer 2026.08.10 are no longer stripped of leading zeros. Distribution file names and .dist-info directories continue to use the PEP 440 normalized form.

Hatchling v1.32.0

Changed:

  • Bump default core metadata version to 2.5

  • Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

  • The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

  • Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.

  • Reject project.readme paths that are absolute or resolve outside of the project directory.

Commits
  • c93b542 release Hatch v1.18.2
  • b69f97a release Hatchling v1.33.0
  • e7495de Prepare for release for hatch 1.18.2 and hatchling 1.32.5 (#2477)
  • ad6d66e Use --python instead of --python-version for uv commands (#2473)
  • 6744e60 Fix hatch test crashing or silently doing nothing when filters match no env...
  • 52de770 match exclude key exactly when detecting injection (#2444)
  • 7bbe763 Fix require-runtime-dependencies being ignored for build hooks (#2257)
  • ac9c0c9 Add 3.15 support (#2468)
  • 7c26ebe Fix hatch.cli.application.Application.ensure_plugin_dependencies PyApp Comp...
  • c4abc45 release Hatchling v1.32.4 (#2441)
  • Additional commits viewable in compare view

Updates lizard from 1.23.0 to 1.24.3

Release notes

Sourced from lizard's releases.

1.24.3

Bug Fixes

  • TypeScript: preserve function boundaries and NLOC after return type annotations, including adjacent annotated functions (issue #521)
  • JavaScript, TypeScript, JSX, and TSX: use balanced scanning for nested template literals so deeper nesting, quoted delimiters, escapes, and comments do not swallow following functions (issue #521)
  • TypeScript and TSX: keep ternary colons in conditional expressions from being mistaken for type annotations, preventing crashes in conditional style arrays (issue #523)
  • Go: give anonymous function literals stable anonymous__<n> names while preserving names for literals assigned to variables; do not report variadic function types or receive-only channels of functions as function literals (PR #522)
  • Running python lizard.py with an extension that extends the core analyzer, such as -END, no longer fails with an AttributeError; it now matches the installed lizard command

Improvements

  • The core analyzer now lives in the internal lizard_core package, one module per responsibility; lizard still exposes every name it did before, and lizard_core module paths are not a supported import surface

Full changelog: terryyin/lizard@1.24.2...1.24.3

1.24.2

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: count each ?? and ??= as +1 CCN; existing scores may decrease (issue #507)
  • JavaScript, TypeScript, JSX, and TSX: count each default parameter and destructuring initializer as +1 CCN, including nested defaults; existing scores and threshold warnings may increase (issue #509)
  • TypeScript and Swift: stop counting optional chaining as a ternary operator; preserve JavaScript and TypeScript nullish coalescing and ternary metrics (PR #518)
  • Swift: stop .init(, self.init(, .get(), .set(, variables named set, and argument labels such as init: from starting phantom functions that swallowed the following functions
  • Swift: recognize argument labels such as init: and for: when a newline or comment separates them from ( or ,
  • Swift: tokenize #Preview, #expect, #available and other macros so their braces count; compiler directives stay whole lines
  • Swift: scan raw, multi-line, and interpolated string literals and nested block comments as single tokens, so braces inside them no longer shift function boundaries
  • Swift: do not treat type (.type, type(of:)) as a Go-style type declaration
  • Python: preserve parameter counts when defaults or annotations contain nested brackets, commas, lambdas, or f-strings (PR #501)
  • Python: parse floor division as an operator and preserve NLOC for triple-quoted string operands and expressions inside f-strings (PR #500)
  • Rust: count let-else toward cyclomatic complexity
  • Fortran: preserve procedure boundaries around modern language constructs
  • Go: distinguish function literals from function types, preserve following declarations, and retain declared variable names for typed function literals (PR #512)
  • C++: preserve operator names and whitelist matching, and stop using declarations from swallowing following functions (PR #511)
  • Parallel analysis: close worker pools after completion, failure, or cancellation, and preserve serial fallback when multiprocessing is unavailable (PR #513)
  • HTML reports: return a non-zero exit status when functions exceed warning thresholds

Improvements

  • Discover .hh files as C/C++ headers (PR #510)

Documentation

  • Clarify README installation, examples, and warning limits

Full changelog: terryyin/lizard@1.24.1...1.24.2

1.24.1

New Features

  • Cognitive Complexity (-Ecognitive) — per-function Cognitive Complexity following SonarSource's specification (structural, hybrid, fundamental and nesting increments; switch and logical operator sequences count once; lambdas nest; direct recursion counts), with a CogC column, a --CogC threshold and a cognitive_complexity field for -s/-T. Implemented as an extension that leaves the language readers and all existing metrics untouched (issue #432)

Bug Fixes

  • Python: preserve function names and signatures for PEP 695 generic functions, including nested type parameter bounds (PR #492)
  • Kotlin: correctly finish expression-bodied functions and accessors, including bodies containing when expressions (issue #493)
  • Rust: count match arms toward cyclomatic complexity and handle nested match expressions (issue #494)
  • PHP: end trait methods at their closing brace instead of extending them to the end of the trait (issue #498)
  • TypeScript and TSX: preserve function boundaries after regex arguments and template interpolations containing quoted backticks (issue #497)

... (truncated)

Changelog

Sourced from lizard's changelog.

1.24.3

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: preserve callback boundaries and CCN when call arguments or object values contain subscripts, including e(r[0]) and return {w: [m[n - 1]]} (issue #524)
  • JavaScript, TypeScript, JSX, and TSX: end expression-bodied arrows at their enclosing argument, array, or object comma so following object members retain their own functions and metrics (issue #524)
  • TypeScript: preserve function boundaries and NLOC after return type annotations, including adjacent annotated functions (issue #521)
  • JavaScript, TypeScript, JSX, and TSX: use balanced scanning for nested template literals so deeper nesting, quoted delimiters, escapes, and comments do not swallow following functions (issue #521)
  • TypeScript and TSX: keep ternary colons in conditional expressions from being mistaken for type annotations, preventing crashes in conditional style arrays (issue #523)
  • Go: give anonymous function literals stable anonymous__<n> names while preserving names for literals assigned to variables; do not report variadic function types or receive-only channels of functions as function literals (PR #522)
  • Running python lizard.py with an extension that extends the core analyzer, such as -END, no longer fails with an AttributeError; it now matches the installed lizard command

Improvements

  • The core analyzer now lives in the internal lizard_core package, one module per responsibility; lizard still exposes every name it did before, and lizard_core module paths are not a supported import surface

1.24.2

Bug Fixes

  • JavaScript, TypeScript, JSX, and TSX: count each ?? and ??= as +1 CCN; existing scores may decrease (issue #507)
  • JavaScript, TypeScript, JSX, and TSX: count each default parameter and destructuring initializer as +1 CCN, including nested defaults; existing scores and threshold warnings may increase (issue #509)
  • TypeScript and Swift: stop counting optional chaining as a ternary operator; preserve JavaScript and TypeScript nullish coalescing and ternary metrics (PR #518)
  • Swift: stop .init(, self.init(, .get(), .set(, variables named set, and argument labels such as init: from starting phantom functions that swallowed the following functions
  • Swift: recognize argument labels such as init: and for: when a newline or comment separates them from ( or ,
  • Swift: tokenize #Preview, #expect, #available and other macros so their braces count; compiler directives stay whole lines
  • Swift: scan raw, multi-line, and interpolated string literals and nested block comments as single tokens, so braces inside them no longer shift function boundaries
  • Swift: do not treat type (.type, type(of:)) as a Go-style type declaration
  • Python: preserve parameter counts when defaults or annotations contain nested brackets, commas, lambdas, or f-strings (PR #501)
  • Python: parse floor division as an operator and preserve NLOC for triple-quoted string operands and expressions inside f-strings (PR #500)
  • Rust: count let-else toward cyclomatic complexity
  • Fortran: preserve procedure boundaries around modern language constructs
  • Go: distinguish function literals from function types, preserve following declarations, and retain declared variable names for typed function literals (PR #512)
  • C++: preserve operator names and whitelist matching, and stop using declarations from swallowing following functions (PR #511)
  • Parallel analysis: close worker pools after completion, failure, or cancellation, and preserve serial fallback when multiprocessing is unavailable (PR #513)
  • HTML reports: return a non-zero exit status when functions exceed warning thresholds

Improvements

  • Discover .hh files as C/C++ headers (PR #510)

Documentation

  • Clarify README installation, examples, and warning limits

1.24.1

New Features

  • Cognitive Complexity (-Ecognitive) — per-function Cognitive Complexity following SonarSource's specification (structural, hybrid, fundamental and nesting increments; switch and logical operator sequences count once; lambdas nest; direct recursion counts), with a CogC column, a --CogC threshold and a cognitive_complexity field for -s/-T. Implemented as an extension that leaves the language readers and all existing metrics untouched (issue #432)

Bug Fixes

  • Python: preserve function names and signatures for PEP 695 generic functions, including nested type parameter bounds (PR #492)
  • Kotlin: correctly finish expression-bodied functions and accessors, including bodies containing when expressions (issue #493)
  • Rust: count match arms toward cyclomatic complexity and handle nested match expressions (issue #494)
  • PHP: end trait methods at their closing brace instead of extending them to the end of the trait (issue #498)

... (truncated)

Commits
  • ba94d59 Release 1.24.3
  • 0012ca4 Close balanced template scanning repair
  • 8c6d0c0 End JavaScript template line comments at each line terminator
  • efcbdd7 Restore balanced JavaScript template scanning
  • 37caa7f Admit accepted work: SEED-009#balanced-template-scanning
  • 55c9c39 Close SEED-008#review-issue-521
  • 123f6f3 Admit accepted work: SEED-008#review-issue-521
  • 8149f77 Close SEED-007#js-ts-function-boundaries
  • e17cb81 Fix JS/TS function boundaries after return annotations and nested templates
  • fca7b1a Pin CI Linux runner to Ubuntu 24.04 for Python 3.8
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates ruff from 0.16.1 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

0.17.2

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

Updates tox from 4.58.0 to 4.65.0

Release notes

Sourced from tox's releases.

v4.65.0

Features

  • Bump the default maximum CPython minor version to 3.15 in generative environment lists. (#4136)

Bug fixes

  • --result-json and tox config -o create the missing parent directory of the output file instead of crashing by @​SulimanAbdulrazzaq. (#4126)
  • A set_env env file that is a directory or not UTF-8 fails the environment with a configuration error instead of a traceback, and a leading UTF-8 byte order mark no longer ends up in the first key by @​SulimanAbdulrazzaq. (#4127)
  • A reused environment with commands = [] clears env_log_dir at the start of the run instead of keeping logs from the previous run by @​glaziermag. (#4130)

Documentation

  • Drop @impl from the tox_append_version_info plugin doc examples, since it made tox skip the inline plugin by @​Rodrigo-Palma. (#4135)

🐍 PyPI release

📜 Full Changelog

v4.64.10

Bug fixes

  • Report an invalid configuration value as a one-line error naming the environment and key instead of a traceback, including -x overrides and values set by plugins by @​hfycium. (#4118)
  • A command prefixed with ! that exits with 0 now fails the environment with exit code 1; before, tox reported it as a success by @​feiiiiii5. (#4119)
  • Recreating an environment or clearing its temporary and log directories removes symlinks to directories, leaving their targets intact by @​gaborbernat. (#4121)
  • A command prefixed with ! that cannot start, such as a missing executable, now fails the environment instead of passing by @​feiiiiii5. (#4125)

New Contributors

🐍 PyPI release

📜 Full Changelog

v4.64.9

Bug fixes

  • Resolve substitutions and file| entries in set_env overrides passed through -x or TOX_OVERRIDE. Appended blocks replace inherited values while preserving explicit keys in the same or later overrides. Preserve these rules through section references, including native TOML arrays with extend = true. Resolve env-file selectors and values in the consuming environment. Prevent included values from overriding tox's own variables by

@dependabot
build(deps): bump the python-dependencies group across 1 directory wi…
ffba680 
…th 10 updates

Bumps the python-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [build](https://github.com/pypa/build) | `1.5.0` | `1.6.1` |
| [git-cliff](https://github.com/orhun/git-cliff) | `2.13.1` | `2.14.2` |
| [hatchling](https://github.com/pypa/hatch) | `1.31.0` | `1.33.0` |
| [lizard](https://github.com/terryyin/lizard) | `1.23.0` | `1.24.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.17.3` |
| [tox](https://github.com/tox-dev/tox) | `4.58.0` | `4.65.0` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.36.0` | `1.36.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.2.0` | `1.4.0` |



Updates `build` from 1.5.0 to 1.6.1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.0...1.6.1)

Updates `git-cliff` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/orhun/git-cliff/releases)
- [Changelog](https://github.com/orhun/git-cliff/blob/main/CHANGELOG.md)
- [Commits](orhun/git-cliff@v2.13.1...v2.14.2)

Updates `hatchling` from 1.31.0 to 1.33.0
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.31.0...hatchling-v1.33.0)

Updates `lizard` from 1.23.0 to 1.24.3
- [Release notes](https://github.com/terryyin/lizard/releases)
- [Changelog](https://github.com/terryyin/lizard/blob/master/CHANGELOG.md)
- [Commits](terryyin/lizard@1.23.0...1.24.3)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `ruff` from 0.16.1 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.17.3)

Updates `tox` from 4.58.0 to 4.65.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.58.0...4.65.0)

Updates `tox-uv` from 1.36.0 to 1.36.1
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Changelog](https://github.com/tox-dev/tox-uv/blob/main/CHANGELOG.md)
- [Commits](tox-dev/tox-uv@1.36.0...1.36.1)

Updates `pytest` from 9.1.1 to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.1...9.2.0)

Updates `pyrefly` from 1.2.0 to 1.4.0
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](meta/pyrefly@1.2.0...1.4.0)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: git-cliff
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hatchling
  dependency-version: 1.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lizard
  dependency-version: 1.24.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tox
  dependency-version: 4.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tox-uv
  dependency-version: 1.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyrefly
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants