Skip to content

chore(deps): bump the dependencies group with 6 updates - #8

Merged
HYP3R00T merged 1 commit into
mainfrom
dependabot/uv/dependencies-bc1222f6c6
May 9, 2026
Merged

chore(deps): bump the dependencies group with 6 updates#8
HYP3R00T merged 1 commit into
mainfrom
dependabot/uv/dependencies-bc1222f6c6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 6 updates:

Package From To
prek 0.3.9 0.3.11
ruff 0.15.11 0.15.12
ty 0.0.31 0.0.34
zensical 0.0.33 0.0.39
click 8.3.2 8.3.3
packaging 26.1 26.2

Updates prek from 0.3.9 to 0.3.11

Release notes

Sourced from prek's releases.

0.3.11

Release Notes

Released on 2026-04-27.

Highlights

Hook entries now have an explicit shell option for shell snippets. Set shell: sh, bash, pwsh, powershell, or cmd when an entry should be evaluated by that shell; leaving it unset keeps prek's direct argv execution.

prek auto-update can now filter tag candidates before choosing an update. Both options take glob patterns: use --include-tag to only consider matching tag names, and --exclude-tag to skip matching tags such as moving tags or prereleases.

Enhancements

  • Add auto-update --exclude-repo <repo> to skip repos (#1983)
  • Add auto-update --exit-code to exit with non-zero on updates (#2002)
  • Add auto-update --include-tag <pattern>/--exclude-tag <pattern> to filter tags (#1984)
  • Adds an explicit shell hook option for entries that should run as shell source (#2004)
  • Make --hook-dir optional for hook-impl (#1989)
  • Skip shim warning when --script-version is missing (#1990)

Bug fixes

  • Install Ruby executable in gem bin (#2017)
  • Use dedicated Android npm package (#1982)
  • Use stable repo keys without breaking cached clones (#1995)

Documentation

  • Explain prek name (#1980)
  • Clarify pass_filenames concurrency docs (#1999)
  • Reorganize documentation references (#2005)
  • Clarify hook author manifest env docs (#1991)
  • docs: add Sentry to users list (#1981)

Contributors

Install prek 0.3.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.11/prek-installer.sh | sh

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.11

Released on 2026-04-27.

Highlights

Hook entries now have an explicit shell option for shell snippets. Set shell: sh, bash, pwsh, powershell, or cmd when an entry should be evaluated by that shell; leaving it unset keeps prek's direct argv execution.

prek auto-update can now filter tag candidates before choosing an update. Both options take glob patterns: use --include-tag to only consider matching tag names, and --exclude-tag to skip matching tags such as moving tags or prereleases.

Enhancements

  • Add auto-update --exclude-repo <repo> to skip repos (#1983)
  • Add auto-update --exit-code to exit with non-zero on updates (#2002)
  • Add auto-update --include-tag <pattern>/--exclude-tag <pattern> to filter tags (#1984)
  • Adds an explicit shell hook option for entries that should run as shell source (#2004)
  • Make --hook-dir optional for hook-impl (#1989)
  • Skip shim warning when --script-version is missing (#1990)

Bug fixes

  • Install Ruby executable in gem bin (#2017)
  • Use dedicated Android npm package (#1982)
  • Use stable repo keys without breaking cached clones (#1995)

Documentation

  • Explain prek name (#1980)
  • Clarify pass_filenames concurrency docs (#1999)
  • Reorganize documentation references (#2005)
  • Clarify hook author manifest env docs (#1991)
  • docs: add Sentry to users list (#1981)

Contributors

0.3.10

Released on 2026-04-21.

Enhancements

  • Disallow rev for non-remote repos in schema (#1964)
  • Hide up-to-date output in non-verbose mode (#1942)

... (truncated)

Commits

Updates ruff from 0.15.11 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Commits
  • 66f93cf Bump 0.15.12 (#24815)
  • 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
  • ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
  • e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
  • 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
  • 0fbf2bc Drop deprecated license classifier (#24808)
  • 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
  • 4f449ae [ty] Add error context for intersection types (#24772)
  • 5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
  • e7cc762 [ty] Add error context for TypedDict assignments (#24790)
  • Additional commits viewable in compare view

Updates ty from 0.0.31 to 0.0.34

Release notes

Sourced from ty's releases.

0.0.34

Release Notes

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.34

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Commits

Updates zensical from 0.0.33 to 0.0.39

Release notes

Sourced from zensical's releases.

0.0.39

Summary

This version fixes several bugs related to link validation and lightbox configuration.

Changelog

Bug fixes

  • fe42fc4 compat – shim for MkDocs validation syntax overrides Zensical's (#607)
  • acc2620 zensical – validation doesn't correctly map percent-encoded links (#598)
  • da317bf compat – add $...$ and $$...$$ blocks to exclusions for link validation (#599)
  • 94f0d29 zensical – anchor not extracted from combined anchor-text-fragment
  • 273dd23 compat – auto-themed gallery takes precedence over explicit grouping
  • c050add compat – error when setting caption_position on glightbox extension (#604)
  • 699d3be zensical – add Python backtrace on Markdown rendering error

Refactorings

  • 3e27d69 compat – move glightbox config options to dataclass

0.0.38

Summary

This version adds link and footnote validation and strict mode – two of the most frequently requested features. Zensical now checks all internal references at build time and reports issues with precise source locations, so broken links don't make it into your published documentation. Unlike MkDocs, which only validates final rendered links, Zensical also checks for unresolved references, as well as unused and shadowed definitions – covering the full lifecycle of a reference from definition to use.

Validation

Zensical scans every Markdown file in your project and resolves all internal references against each other: inline links, reference-style links, footnotes, link definitions, and anchor targets. Every check is individually configurable and enabled by default.

$ zensical build
...
Warning: page does not exist
   ╭─[ index.md:3:14 ]
   │
 3 │ [id]: non-existent.md
   │       ───────┬───────
   │              ╰───────── page does not exist
───╯

The following checks for links and footnotes are now available:

... (truncated)

Commits
  • 0291ad5 chore: release v0.0.39
  • fe42fc4 fix: shim for MkDocs validation syntax overrides Zensical's (#607)
  • 89d99ba Merge pull request #597 from zensical/fix/validation-text-fragment
  • 273dd23 fix: auto-themed gallery takes precedence over explicit grouping
  • b693a2f Fix glightbox captions (#605)
  • dfc74bf chore: fix ty warning
  • 3e27d69 refactor: move glightbox config options to dataclass
  • 8ed3903 chore: disable ruff's N802 globally
  • c050add fix: error when setting caption_position on glightbox extension (#604)
  • 699d3be fix: add Python backtrace on Markdown rendering error
  • Additional commits viewable in compare view

Updates click from 8.3.2 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177
  • Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239
  • Mark make_default_short_help as private API. #3189 #3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248
Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177
  • Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239
  • Mark make_default_short_help as private API. :issue:3189 :pr:3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248
Commits
  • c06d2d0 Release 8.3.3
  • f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
  • bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
  • 4a35225 Reduce blast-radius of UNSET in default_map (#3240)
  • c07bb93 Merge branch 'stable' into unset-in-default-map
  • c7e1ba8 Reorder ParameterSource (#3248)
  • 76552ff Show default string in prompt (#3328)
  • ac5cec5 Reorder ParameterSource from most to least explicit
  • 8c452e0 Merge branch 'stable' into show-default-string-in-prompt
  • 8c95c73 Reconcile default value passing and default activation (#3239)
  • Additional commits viewable in compare view

Updates packaging from 26.1 to 26.2

Release notes

Sourced from packaging's releases.

26.2

What's Changed

Fixes:

Documentation:

Internal:

New Contributors

Full Changelog: pypa/packaging@26.1...26.2

Changelog

Sourced from packaging's changelog.

26.2 - 2026-04-24


Fixes:

    

  • Fix incorrect sysconfig var name for pyemscripten in (:pull:1160)
    • 

  • Make Version, Specifier, SpecifierSet, Tag, Marker, and Requirement pickle-safe
    
and backward-compatible with pickles created in 25.0-26.1 (including references to the removed
    
packaging._structures module) (:pull:1163, :pull:1168, :pull:1170, :pull:1171)
    • 

  • Re-export ExceptionGroup in metadata for now in (:pull:1164)
    • 



Documentation:


    

  • Add errors section and fix missing details in (:pull:1159)
    • 

  • Document our property-based test suite in (:pull:1167)
    • 

  • Fix a DirectUrl typo in (:pull:1167)
    • 

  • Add example of is_unsatisfiable in (:pull:1166)
    • 



Internal:


    

  • Enable the auditor persona on zizmor in (:pull:1158)
    • 

  • Test new pickle guarantees in (:pull:1174)
    • 

  • Use new native ReadTheDocs uv integration in (:pull:1175)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group with 6 updates
54f5441 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [prek](https://github.com/j178/prek) | `0.3.9` | `0.3.11` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.11` | `0.15.12` |
| [ty](https://github.com/astral-sh/ty) | `0.0.31` | `0.0.34` |
| [zensical](https://github.com/zensical/zensical) | `0.0.33` | `0.0.39` |
| [click](https://github.com/pallets/click) | `8.3.2` | `8.3.3` |
| [packaging](https://github.com/pypa/packaging) | `26.1` | `26.2` |


Updates `prek` from 0.3.9 to 0.3.11
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.9...v0.3.11)

Updates `ruff` from 0.15.11 to 0.15.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.11...0.15.12)

Updates `ty` from 0.0.31 to 0.0.34
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.31...0.0.34)

Updates `zensical` from 0.0.33 to 0.0.39
- [Release notes](https://github.com/zensical/zensical/releases)
- [Commits](zensical/zensical@v0.0.33...v0.0.39)

Updates `click` from 8.3.2 to 8.3.3
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.2...8.3.3)

Updates `packaging` from 26.1 to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.1...26.2)

---
updated-dependencies:
- dependency-name: prek
  dependency-version: 0.3.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ty
  dependency-version: 0.0.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: zensical
  dependency-version: 0.0.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: click
  dependency-version: 8.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from HYP3R00T as a code owner May 4, 2026 03:17
@HYP3R00T
HYP3R00T merged commit 5ae7752 into main May 9, 2026
1 check failed
@dependabot
dependabot Bot deleted the dependabot/uv/dependencies-bc1222f6c6 branch May 9, 2026 07:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@HYP3R00T HYP3R00T Awaiting requested review from HYP3R00T HYP3R00T is a code owner

Assignees

@HYP3R00T HYP3R00T

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@HYP3R00T