chore(deps): bump the safe-patch-updates group across 1 directory with 4 updates

[dependabot]

Bumps the safe-patch-updates group with 4 updates in the / directory: prek, ty, zensical and coverage.

Updates prek from 0.4.8 to 0.4.11

Release notes

Sourced from prek's releases.

0.4.11

Release Notes

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  [[repos]]
  repo = "builtin"
  hooks = [
  { id = "check-json", priority = "checks" },
  { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#2359)
• Support --glob patterns in prek run (#2381)
• Support reusable aliases for hook priorities (#2331)
• Implement requirements-txt-fixer as a builtin hook (#2390)
• Improve user-facing warnings and errors (#2380)
• Install Node hooks through git url (#2394)

Performance

• Reduce blocking-pool overhead in file hooks (#2384)
• Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.11

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  [[repos]]
  repo = "builtin"
  hooks = [
  { id = "check-json", priority = "checks" },
  { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#2359)
• Support --glob patterns in prek run (#2381)
• Support reusable aliases for hook priorities (#2331)
• Implement requirements-txt-fixer as a builtin hook (#2390)
• Improve user-facing warnings and errors (#2380)
• Install Node hooks through git url (#2394)

Performance

• Reduce blocking-pool overhead in file hooks (#2384)
• Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Commits

• 92ba6c8 Bump version to 0.4.11 (#2402)
• f575e42 Bump quinn-proto from 0.11.14 to 0.11.16 (#2401)
• c0ed56d Preserve system download policy when applying metadata (#2395)
• 3b8b5c5 Install Node hooks through git url (#2394)
• ff11cbb Implement requirements-txt-fixer as a builtin hook (#2390)
• c7dfc32 Match identify tags across filename parts (#2399)
• 928dc5c Speed up mixed-line-ending scans with memchr2 (#2391)
• 6c89849 Honor filenames in builtin hook entry and args (#2389)
• 28bc3f0 Add description for no-commit-to-branch (#2388)
• 1d9addd Reduce blocking-pool overhead in file hooks (#2384)
• Additional commits viewable in compare view

Updates ty from 0.0.56 to 0.0.63

Release notes

Sourced from ty's releases.

0.0.63

Release Notes

Released on 2026-07-23.

Core type checking

• Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
• Allow equality narrowing across non-final classes (#27031)
• Allow interpolated string literals to be promoted to str (#27104)
• Fix double specialization of generic type aliases (#27058)
• Fix intersections of type and TypeForm (#27099)
• When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)

Library support

• Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
• Pydantic: Support special underscore parameters in BaseSettings models (#27098)

Performance

• Avoid exponential narrowing of optional dynamic match subjects (#27100)
• Avoid normalizing cached absolute file paths (#26998)

Contributors

• @​sharkdp
• @​charliermarsh
• @​ibraheemdev
• @​carljm

Install ty 0.0.63

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.ps1 | iex"

Download ty 0.0.63

File	Platform	Checksum
ty-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.63

Released on 2026-07-23.

Core type checking

• Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
• Allow equality narrowing across non-final classes (#27031)
• Allow interpolated string literals to be promoted to str (#27104)
• Fix double specialization of generic type aliases (#27058)
• Fix intersections of type and TypeForm (#27099)
• When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)

Library support

• Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
• Pydantic: Support special underscore parameters in BaseSettings models (#27098)

Performance

• Avoid exponential narrowing of optional dynamic match subjects (#27100)
• Avoid normalizing cached absolute file paths (#26998)

Contributors

• @​sharkdp
• @​charliermarsh
• @​ibraheemdev
• @​carljm

0.0.62

Released on 2026-07-21.

Bug fixes

• Guard recursive Protocol and TypedDict relations (#26990)
• Prevent stack overflows in recursive type relation checks (#26503)
• Recover from cancelled file indexing (#26876)

Diagnostics

• Avoid editing ignore comments with trailing reasons (#26939)
• Prefer innermost inline suppressions (#26940)
• Remove unused own-line ignore comments (#27013)
• Reuse applicable own-line suppressions in --add-ignore (#26925)

Configuration

• Respect rules and analysis in PEP 723 script metadata configurations (#26671)

... (truncated)

Commits

• 46f4915 Bump version to 0.0.63 (#4071)
• df75992 Bump version to 0.0.62 (#4057)
• 48dd1fd Update prek dependencies (#4059)
• f53a95e Update astral-sh/setup-uv action to v9 (#4060)
• 17d1791 Update dependency prek to v0.4.9 (#4058)
• eb7e7ba Update documentation on mypy/pyright --strict parity, and achieving maximum...
• 56b2c24 Update changelog for 0.0.61 (#4028)
• 4c865c8 Bump version to 0.0.61 (#4027)
• ae554ec Bump version to 0.0.60 (#4008)
• 4f78ec5 Update astral-sh/setup-uv action to v8.3.2 (#3997)
• Additional commits viewable in compare view

Updates zensical from 0.0.47 to 0.0.51

Release notes

Sourced from zensical's releases.

0.0.51

Summary

This version improves cached rebuilds by persisting objects.inv and autorefs data, fixes stale builds after removing files, and upgrades soupsieve to address vulnerabilities.

Changelog

Bug fixes

• ec69acc zensical, compat – cache objects.inv to persist it across cached rebuilds (#815)
• 7e6940f zensical – cache autorefs data for cross-ref resolution across rebuilds (#805)

0.0.50

Summary

This version fixes a regression introduced in 0.0.48 which broke search.

Changelog

Bug fixes

• 46d9f29 ui – update ui to v0.0.22

0.0.48

Summary

This version updates the user interface to v0.0.21, bringing the latest fixes for Pyodide-powered code execution, search, and ANSI color rendering.

It also improves configuration parsing, and fixes relative and scoped cross-references for mkdocstrings-python.

Changelog

Bug fixes

• 15f138a ui – update ui to v0.0.21
• 63c9dd3 compat – avoid registering same extension twice (as plugin and extension)
• 25ba4c7 compat – enable autorefs when mkdocstrings extension is enabled
• 781305a compat – support theme being just a string
• c33d65b compat – support enabled option in autorefs, glightbox and macros extensions
• 81596c1 compat – fix relative/scoped cross-refs support for mkdocstrings-python (#796)

Refactorings

• 71c976c compat – allow configuring mkdocstrings as a Markdown extension

Commits

• 362bf5d chore: release v0.0.51
• 7989a55 Update dependencies
• ec69acc fix: cache objects.inv to persist it across cached rebuilds (#815)
• 7e6940f fix: cache autorefs data for cross-ref resolution across rebuilds (#805)
• 428d0d8 chore: release v0.0.50
• e30d7e5 chore: release v0.0.49
• 46d9f29 fix: update ui to v0.0.22
• 346cba7 chore: release v0.0.48
• 1f21412 chore: ignore error on buildx cache write
• cc68851 chore: release v0.0.48
• Additional commits viewable in compare view

Updates coverage from 7.15.0 to 7.15.2

Release notes

Sourced from coverage's releases.

7.15.2

Version 7.15.2 — 2026-07-15

• Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

• Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
• A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.

➡️  PyPI page: coverage 7.15.1. :arrow_right:  To install: python3 -m pip install coverage==7.15.1

Changelog

Sourced from coverage's changelog.

Version 7.15.2 — 2026-07-15

• Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.

.. _issue 2229: coveragepy/coveragepy#2229

.. _changes_7-15-1:

Version 7.15.1 — 2026-07-12

• Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.

• A number of performance improvements thanks to Paul Kehrer, in pull requests 2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pull 2221_>_.

.. _pull 2213: coveragepy/coveragepy#2213 .. _pull 2214: coveragepy/coveragepy#2214 .. _pull 2215: coveragepy/coveragepy#2215 .. _pull 2216: coveragepy/coveragepy#2216 .. _pull 2218: coveragepy/coveragepy#2218 .. _pull 2220: coveragepy/coveragepy#2220 .. _pull 2221: coveragepy/coveragepy#2221 .. _pull 2224: coveragepy/coveragepy#2224

.. _changes_7-15-0:

Commits

• 50d8659 docs: sample HTML for 7.15.2
• b5eed20 docs: prep for 7.15.2
• 78cab6e fix: reduce memory use during reporting. #2229 (#2231)
• b4c1fda build: bump version to 7.15.2
• da63bed docs: sample HTML for 7.15.1
• bc35e64 docs: prep for 7.15.1
• 182b010 perf: resolve sysmon branch events lazily, one pair at a time (#2221)
• ee271ee perf: compute multiline maps cheaply in the sysmon core (#2220)
• 1441b96 chore: bump the action-dependencies group with 6 updates (#2225)
• dd80635 fix: escape context labels in html report inline script block (#2224)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are no longer a dependency, so this is no longer needed.