Skip to content

chore(deps-dev): bump the deps group with 3 updates - #88

Merged
zobweyt merged 1 commit into
mainfrom
dependabot/uv/main/deps-5da0935fb2
Sep 5, 2026
Merged

zobweyt merged 1 commit into
mainfrom
dependabot/uv/main/deps-5da0935fb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the deps group with 3 updates: pydantic, ruff and ty.

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Commits

Updates ty from 0.0.74 to 0.0.77

Release notes

Sourced from ty's releases.

0.0.77

Release Notes

Released on 2026-08-31.

Bug fixes

  • Bound recursive protocol traversal in generic intersections (#28215)
  • Preserve recursion guards across nested type operations (#28150)
  • Preserve syntax and comments when removing redundant casts (#28145)
  • Stabilize recursive receiver inference (#28042)
  • Stabilize condition truthiness during cyclic inference (#28212)

Core type checking

  • Preserve generic receivers in implicit __init_subclass__ calls (#28138)
  • Preserve specialization for inherited TypedDict methods (#28111)
  • Propagate deletions through nested loop headers (#28044)

Performance

  • Avoid repeated inference for literal union call results (#28196)

Contributors

Install ty 0.0.77

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.77/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.77/ty-installer.ps1 | iex"

Download ty 0.0.77

File Platform Checksum
ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ty-x86_64-apple-darwin.tar.gz Intel macOS checksum
ty-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ty-i686-pc-windows-msvc.zip x86 Windows checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.77

Released on 2026-08-31.

Bug fixes

  • Bound recursive protocol traversal in generic intersections (#28215)
  • Preserve recursion guards across nested type operations (#28150)
  • Preserve syntax and comments when removing redundant casts (#28145)
  • Stabilize recursive receiver inference (#28042)
  • Stabilize condition truthiness during cyclic inference (#28212)

Core type checking

  • Preserve generic receivers in implicit __init_subclass__ calls (#28138)
  • Preserve specialization for inherited TypedDict methods (#28111)
  • Propagate deletions through nested loop headers (#28044)

Performance

  • Avoid repeated inference for literal union call results (#28196)

Contributors

0.0.76

Released on 2026-08-31.

Preview features

  • Add a missing-direct-dependency rule (#28001)
  • Cancel superseded queued uv requests (#28108)
  • Check direct dependencies in PEP 723 scripts (#28136)
  • Fix Goto definition in script dependencies (#27747)
  • Move script environment initialization to the CLI and LSP (#28038)
  • Refresh uv project metadata in the background (#27933)
  • Synchronize PEP 723 script environments in the language server (#27619)
  • Warn when uv metadata cannot support dependency checks (#28133)

Bug fixes

  • Avoid panics on incomplete protocol type parameter lists (#28088)
  • Fix auto-completion panic involving bare declarations (#28191)
  • Guard recursive meta-type expansion (#28143)
  • Preserve parentheses when removing redundant casts (#28092)

LSP server

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group with 3 updates: [pydantic](https://github.com/pydantic/pydantic), [ruff](https://github.com/astral-sh/ruff) and [ty](https://github.com/astral-sh/ty).


Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `ruff` from 0.16.4 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.5)

Updates `ty` from 0.0.74 to 0.0.77
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.74...0.0.77)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: ty
  dependency-version: 0.0.77
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies: uv Dependabot alerts for uv priority: medium The work is medium prioritized labels Sep 5, 2026
@dependabot
dependabot Bot requested a review from zobweyt as a code owner September 5, 2026 03:04
@dependabot dependabot Bot added status: review needed The work is pending review type: chore Maintenance tasks that don't affect production code or fix bugs priority: medium The work is medium prioritized dependencies: uv Dependabot alerts for uv labels Sep 5, 2026
@github-actions

github-actions Bot commented Sep 5, 2026 •

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-09-05 05:36 UTC

@zobweyt
zobweyt merged commit 164588c into main Sep 5, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/main/deps-5da0935fb2 branch September 5, 2026 05:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies: uv Dependabot alerts for uv priority: medium The work is medium prioritized status: review needed The work is pending review type: chore Maintenance tasks that don't affect production code or fix bugs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant