Skip to content

chore(deps-dev): bump the python group with 11 updates#3205

Merged
vpetersson merged 2 commits into
masterfrom
dependabot/uv/python-f43a76c704
Jul 16, 2026
Merged

chore(deps-dev): bump the python group with 11 updates#3205
vpetersson merged 2 commits into
masterfrom
dependabot/uv/python-f43a76c704

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on ansible-lint, django-stubs, mypy, ruff, click, drf-spectacular, sentry-sdk, yt-dlp, playwright, ansible-core and setuptools to permit the latest version.
Updates ansible-lint from 26.4.0 to 26.6.0

Release notes

Sourced from ansible-lint's releases.

v26.6.0

Features

Fixes

Maintenance

Commits
  • 262624c fix: bump cryptography minimum to >=46.0.6 and refresh lock file (#5089)
  • 53b1143 chore: clarify inline env var guidance (#5069)
  • 51644b7 fix: avoid project cache creation in offline mode (#5066)
  • 2a3eefe fix: allow register projections in schema (#5071)
  • 2b4e4fe fix: added setup-uv action version pinning to renovate config (#5021)
  • f478575 fix: detect role roots in namespace subdirectories (#5079) (#5080)
  • 78bec12 fix: preserve module import semantics in args rule (#5070)
  • b17abf1 fix(docs): remove mkdocstrings plugin to unblock docs CI (#5084)
  • 0176bc1 chore: remove previously-synced agent skills (#5078)
  • c593980 chore(deps): update all dependencies (#5074)
  • Additional commits viewable in compare view

Updates django-stubs from 6.0.5 to 6.0.7

Commits

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
  • 24c237d [mypyc] Improve documentation of Final (#21713)
  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
  • cbcb51a Narrow for frozendict membership check (#21709)
  • af2bc0f Sync typeshed (#21707)
  • Additional commits viewable in compare view

Updates ruff from 0.14.10 to 0.15.21

Release notes

Sourced from ruff's releases.

0.15.21

Release Notes

Released on 2026-07-09.

Preview features

  • Add --add-ignore for adding ruff:ignore comments (#26346)
  • [flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
  • Avoid whitespace normalization when formatting comments (#26455)
  • [pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

  • Refine non-empty f-string detection (#26526)
  • Detect syntax errors in individual notebook cells (#26419)
  • [flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

  • [flake8-executable] Mark EXE004 fix as unsafe (#26033)
  • [flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
  • [pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

  • Avoid per-token source index visitor calls (#26506)
  • Cache parenthesized expression boundaries in the formatter (#26344)
  • Improve performance of rendering edits in preview mode (#26565)
  • Inline fits_element in formatter (#26429)
  • Inline formatter printing hot paths (#26504)
  • Lazily create builtin bindings (#26510)
  • Skip empty trivia scans in the source indexer (#26507)
  • Use ICF for macOS release builds (#25780)

Formatter

  • Add --extend-exclude to ruff format (#26372)

Documentation

  • Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
  • Fix Mozilla Firefox repository link in README (#26537)
  • [flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
  • [ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.21

Released on 2026-07-09.

Preview features

  • Add --add-ignore for adding ruff:ignore comments (#26346)
  • [flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
  • Avoid whitespace normalization when formatting comments (#26455)
  • [pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

  • Refine non-empty f-string detection (#26526)
  • Detect syntax errors in individual notebook cells (#26419)
  • [flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

  • [flake8-executable] Mark EXE004 fix as unsafe (#26033)
  • [flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
  • [pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

  • Avoid per-token source index visitor calls (#26506)
  • Cache parenthesized expression boundaries in the formatter (#26344)
  • Improve performance of rendering edits in preview mode (#26565)
  • Inline fits_element in formatter (#26429)
  • Inline formatter printing hot paths (#26504)
  • Lazily create builtin bindings (#26510)
  • Skip empty trivia scans in the source indexer (#26507)
  • Use ICF for macOS release builds (#25780)

Formatter

  • Add --extend-exclude to ruff format (#26372)

Documentation

  • Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
  • Fix Mozilla Firefox repository link in README (#26537)
  • [flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
  • [ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

... (truncated)

Commits

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582
Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates drf-spectacular from 0.29.0 to 0.30.0

Release notes

Sourced from drf-spectacular's releases.

0.30.0

After working through the backlog for several week, we are finally in a comfortable place again. Thank you to all contributors and users that waited patiently for me the catch up. It does not include all the PRs that were opened, but imho the most critical ones.

This release includes many small improvement, a few bug fixes, updates to the test suite and a renovated test matrix. Some minor schema corrections are to be expected, but nothing drastic. It is mostly fixing small inconsistencies and improving corner cases.

What's Changed

New Contributors

Full Changelog: tfranzel/drf-spectacular@0.29.0...0.30.0

Changelog

Sourced from drf-spectacular's changelog.

0.30.0 (2026-07-06)

  • Add OAS 3.2 schema for validation & test
  • Type hint build_bearer_security_scheme_object ([#1509](https://github.com/tfranzel/drf-spectacular/issues/1509) <https://github.com/tfranzel/drf-spectacular/issues/1509>_) [johnthagen]
  • Fix formatted CharField allow_blank handling ([#1511](https://github.com/tfranzel/drf-spectacular/issues/1511) <https://github.com/tfranzel/drf-spectacular/issues/1511>, ([#1499](https://github.com/tfranzel/drf-spectacular/issues/1499) <https://github.com/tfranzel/drf-spectacular/issues/1499>)) [Luciano de la Iglesia]
  • Consider allOf anyOf with nullable on OAS3.1 [#1480](https://github.com/tfranzel/drf-spectacular/issues/1480) <https://github.com/tfranzel/drf-spectacular/issues/1480>_
  • Proper handling for OAS 3.2
  • fix modification of user-provided schematas [#1500](https://github.com/tfranzel/drf-spectacular/issues/1500) <https://github.com/tfranzel/drf-spectacular/issues/1500>_
  • relax contraint on oneOf null case with OAS3.1 [#1480](https://github.com/tfranzel/drf-spectacular/issues/1480) <https://github.com/tfranzel/drf-spectacular/issues/1480>_
  • Add blueprint for django-rest-knox ([#1506](https://github.com/tfranzel/drf-spectacular/issues/1506) <https://github.com/tfranzel/drf-spectacular/issues/1506>_) [johnthagen]
  • Mitigate GeneratedField lost arguments and special case for DecimalField [#1166](https://github.com/tfranzel/drf-spectacular/issues/1166) <https://github.com/tfranzel/drf-spectacular/issues/1166>_
  • Webhook explicit operationId ([#1505](https://github.com/tfranzel/drf-spectacular/issues/1505) <https://github.com/tfranzel/drf-spectacular/issues/1505>_)
  • change conflicting license field for 3.8 ([#1504](https://github.com/tfranzel/drf-spectacular/issues/1504) <https://github.com/tfranzel/drf-spectacular/issues/1504>_)
  • Document django-rest-knox support [johnthagen]
  • add help text to spectacular management command arguments [#1175](https://github.com/tfranzel/drf-spectacular/issues/1175) <https://github.com/tfranzel/drf-spectacular/issues/1175>_ [Jean-Baptiste Braun]
  • Mark FileField as nullable in response when not required [#1493](https://github.com/tfranzel/drf-spectacular/issues/1493) <https://github.com/tfranzel/drf-spectacular/issues/1493>_ [mojtaba sohrabi]
  • Extend Choices hint fix with generated label description [#1486](https://github.com/tfranzel/drf-spectacular/issues/1486) <https://github.com/tfranzel/drf-spectacular/issues/1486>_
  • Suppress py<=3.14 deprecation warning [#1497](https://github.com/tfranzel/drf-spectacular/issues/1497) <https://github.com/tfranzel/drf-spectacular/issues/1497>_
  • Remove ancient DRF3.11 and Django2.2 due to contrib packages failing
  • feat: add support for django 6.0 and and drf 3.17 [Vjeran Grozdanic]
  • Add setting to disable docstring extraction [Phil Starkey]
  • feat: add support for polymorphic built-in drf support [Benedikt Bauer]
  • Clarifies post-processing hooks [Andy Piltser-Cowan]
  • Clarifies customizations step 5 [Andy Piltser-Cowan]
  • Fix dependency definition for Django 5.2 [Ülgen Sarıkavak]
  • Implement x-spec-enum-id for type hint Choices. [Noam Kushinsky]
  • Add Support for unsigned integers uint16, uint32 and uint64 [Nicolas Delaby]
  • Fix regression introduced in [#1450](https://github.com/tfranzel/drf-spectacular/issues/1450) <https://github.com/tfranzel/drf-spectacular/issues/1450>_ ([#1469](https://github.com/tfranzel/drf-spectacular/issues/1469) <https://github.com/tfranzel/drf-spectacular/issues/1469>_) [Oleg Höfling]

Breaking changes / important additions:

  • Many small improvement, bug fixes, updates to the test suite and renovated test matrix. Some minor schema corrections are to be expected, but nothing drastic.
Commits

Updates sentry-sdk from 2.65.0 to 2.66.0

Release notes

Sourced from sentry-sdk's releases.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

Changelog

Sourced from sentry-sdk's changelog.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

Commits
  • 5179f60 update changelog with docs link
  • e4bcb59 release: 2.66.0
  • 5ba869c fix(tracing): Skip child span creation in streaming path when no current span...
  • efddaab fix(tracing): Skip child span creation in streaming path when no current span...
  • b199a9e fix(tracing): Skip child span creation in streaming path when no current span...
  • d695a6e fix(tracing): Skip child span creation in streaming path when no current span...
  • dbf5d03 fix(tracing): Skip child span creation in streaming path when no current span...
  • 5c14034 fix(tracing): Skip child span creation in streaming path when no current span...
  • e0d2c4a feat(tracing): Promote trace_lifecycle and ignore_spans to top-level options ...
  • baa423f test(logging): Fix flaky test_logging_captured_warnings (#6824)
  • Additional commits viewable in compare view

Updates yt-dlp from 2026.6.9 to 2026.7.4

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2026.07.04

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt

Important changes

  • The minimum recommended Python version has been raised to 3.11 - Since Python 3.10 will reach its end-of-life in October 2026, support for it will be dropped soon. Read more
  • The official Windows release binaries will soon require Windows 10 or later. Read more
  • Security: [CVE-2026-55404]

@dependabot
chore(deps-dev): bump the python group with 11 updates
54d6da2 
Updates the requirements on [ansible-lint](https://github.com/ansible/ansible-lint), [django-stubs](https://github.com/typeddjango/django-stubs), [mypy](https://github.com/python/mypy), [ruff](https://github.com/astral-sh/ruff), [click](https://github.com/pallets/click), [drf-spectacular](https://github.com/tfranzel/drf-spectacular), [sentry-sdk](https://github.com/getsentry/sentry-python), [yt-dlp](https://github.com/yt-dlp/yt-dlp), [playwright](https://github.com/microsoft/playwright-python), [ansible-core](https://github.com/ansible/ansible) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `ansible-lint` from 26.4.0 to 26.6.0
- [Release notes](https://github.com/ansible/ansible-lint/releases)
- [Commits](ansible/ansible-lint@v26.4.0...v26.6.0)

Updates `django-stubs` from 6.0.5 to 6.0.7
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.5...6.0.7)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `ruff` from 0.14.10 to 0.15.21
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.10...0.15.21)

Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `drf-spectacular` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.29.0...0.30.0)

Updates `sentry-sdk` from 2.65.0 to 2.66.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.65.0...2.66.0)

Updates `yt-dlp` from 2026.6.9 to 2026.7.4
- [Release notes](https://github.com/yt-dlp/yt-dlp/releases)
- [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md)
- [Commits](yt-dlp/yt-dlp@2026.06.09...2026.07.04)

Updates `playwright` from 1.59.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.59.0...v1.61.0)

Updates `ansible-core` from 2.21.1 to 2.21.2
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](ansible/ansible@v2.21.1...v2.21.2)

Updates `setuptools` to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v68.0.0...v83.0.0)

---
updated-dependencies:
- dependency-name: ansible-lint
  dependency-version: 26.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-stubs
  dependency-version: 6.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.15.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: drf-spectacular
  dependency-version: 0.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sentry-sdk
  dependency-version: 2.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: yt-dlp
  dependency-version: 2026.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: playwright
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ansible-core
  dependency-version: 2.21.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 16, 2026 14:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
@vpetersson vpetersson mentioned this pull request Jul 16, 2026
Merged
@vpetersson @claude
style: reformat lambda bodies for ruff 0.15
fa37c68 
ruff 0.15 parenthesises multi-line lambda bodies, so the 0.14 -> 0.15
bump in this PR made `ruff format --check` fail on tests/test_app.py.
Formatting only — the AST is identical before and after.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@vpetersson

vpetersson commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Reviewed and pushed a fix for the one failing check.

run-python-linter was failing, not flaking: ruff 0.15 parenthesises multi-line lambda bodies, so the 0.14.10 -> 0.15.21 bump in this PR made ruff format --check fail on tests/test_app.py. Reproduced locally, then applied ruff format. Formatting only — I verified the AST is byte-identical before and after, which matters here because the Playwright tests in that file are deselected from the unit run and so nothing in CI actually executes them.

Note that pushing to this branch means Dependabot will stop rebasing the PR.

Checked on the rest of the bump:

  • The lockfile is self-consistent with the manifest (uv lock --check passes on this branch) — the first grouped PR from the new uv ecosystem behaving as intended.
  • mypy 2.1 -> 2.3 and the 11 pins are otherwise clean: ruff check passes, run-mypy and run-python-tests are green.

One thing this PR does not cover, flagged for the record rather than as a blocker: drf-spectacular 0.30 warns of "minor schema corrections", and generate-openapi-schema only uploads an artifact — it never diffs against the committed website/data/openapi.yaml. That file is a manually refreshed dump (last touched in the website migration), so it can drift silently and CI won't notice. Pre-existing, independent of this bump, but worth a separate look at some point.

@sonarqubecloud

sonarqubecloud Bot commented Jul 16, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@vpetersson
vpetersson merged commit 273e40b into master Jul 16, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-f43a76c704 branch July 16, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vpetersson