Skip to content

build(deps-dev): bump the dependencies group across 1 directory with 5 updates - #347

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-7c32a49128
Open

build(deps-dev): bump the dependencies group across 1 directory with 5 updates#347
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-7c32a49128

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates in the / directory:

Package From To
black 26.5.1 26.10.0
pyrefly 1.2.0 1.3.2
ruff 0.16.4 0.16.10
tox 4.60.1 4.64.9
tox-uv 1.36.0 1.36.1

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)
  • Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits
  • 4f1883b Prepare release 26.10.0 (#5478)
  • 93e5c82 Do not split a docstring on non-newline characters (#5461)
  • 2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
  • d078e8e Refactor release process to be more automated and use immutable releases (#5296)
  • 6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
  • cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
  • 9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
  • e1c4783 Fix --force-exclude for paths containing .. (#5471)
  • 34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
  • 5fe7881 Fix preview blank lines after a stub method (#5439)
  • Additional commits viewable in compare view

Updates pyrefly from 1.2.0 to 1.3.2

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.2

Release date: September 28, 2026

Pyrefly v1.3.2 is a patch release that fixes regressions in how Pyrefly infers the type of a variable after it is assigned a value of type Any.

🐛 Bug fixes

  • #4846: Fixed several regressions from v1.3.0 in type inference after a variable is reassigned to Any:
    • Assigning an implicit Any (a value with no known type, such as the result of an unannotated function or an unresolved import) to an annotated variable once again produces Unknown. It no longer turns into an explicit Any.
    • When a variable annotated as Optional[T] or T | None is narrowed to None and then reassigned inside that branch, Pyrefly no longer adds the annotation's None back after the branch. For example, x: Any | None followed by if x is None: x = get_any() now gives Any instead of Any | None.
    • When a variable's annotation is a union that contains Any, assigning Any to it now narrows the variable to Any. For example, x: Any | None followed by x = x or get_any() now gives Any instead of Any | None, so later attribute access no longer reports a false missing-attribute error on None.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.

📦 Upgrade

pip install --upgrade pyrefly==1.3.2

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

  1. pyrefly check --suppress-errors
  2. Run your code formatter of choice
  3. pyrefly check --remove-unused-ignores
  4. Repeat until you achieve a clean formatting run and a clean type check.

This will add # pyrefly: ignore comments to your code, enabling you to silence errors and return to fix them later. This can make the process of upgrading a large codebase much more manageable.

Read more about error suppressions in the Pyrefly documentation.

Pyrefly v1.3.1

Release date: September 14, 2026

Pyrefly v1.3.1 is a patch release with a single bug fix.

🐛 Bug fixes

  • #4909: Fixed a critical issue where Pyrefly would immediately crash on startup with a thread panic when empty or relative base paths were encountered during configuration. The server now safely resolves these paths against the working directory, preventing the crash and allowing normal operation.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.

... (truncated)

Commits
  • e46f4f2 cut 1.3.2
  • a1020bf release notes for v1.3.2
  • b4d1cd4 Allow assignment to Any when a name is annotated as Any | ...
  • 03eff73 Merge AnnotationStyle::ForwardedInitial and Forwarded
  • 1a0ac5f Keep a name's annotated type only when it is still active
  • fc131f8 Allow an expression to overwrite a name's AnyStyle
  • 4b261cd Move tests for assignment to Any to their own file
  • 3e3177d cut 1.3.1
  • 3445714 release notes for v1.3.1
  • c1be891 fix pyrefly instantly dies with with thread panic #4909 (#4925)
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

0.16.9

Released on 2026-09-24.

Preview features

  • [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

  • [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
  • [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

  • Update LibCST-based fixes for Python 3.15 (#28616)

... (truncated)

Commits
  • 3265ed1 Bump version to 0.16.10 (#29055)
  • e786964 Authorize shared PR security-review workflow to publish findings (#29052)
  • a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
  • b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
  • 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
  • 317e0a3 [ty] Bound nested callable signature display (#29049)
  • 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
  • 56180bc [ty] Specialize instance members once (#29043)
  • aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
  • 2d25346 [ty] Improve unresolved-import documentation (#29039)
  • Additional commits viewable in compare view

Updates tox from 4.60.1 to 4.64.9

Release notes

Sourced from tox's releases.

v4.64.9

What's Changed

Full Changelog: tox-dev/tox@4.64.8...4.64.9

v4.64.8

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.64.7...4.64.8

v4.64.7

What's Changed

Full Changelog: tox-dev/tox@4.64.6...4.64.7

v4.64.6

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.64.5...4.64.6

v4.64.5

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.64.9

  • Resolve substitutions and file| entries in :ref:set_env overrides passed through -x or TOX_OVERRIDE. Appended blocks replace inherited values while preserving explicit keys in the same or later overrides. Preserve these rules through section references, including native TOML arrays with extend = true. Resolve env-file selectors and values in the consuming environment. Prevent included values from overriding tox's own variables - by :user:Rodrigo-Palma. (:issue:4116)

v4.64.8 (2026-10-03)

Bug fixes - 4.64.8

  • tox combines --no-binary and --only-binary across the lines of deps and of requirements files the way pip does, where the last line used to replace the earlier ones. With --only-binary :all: and a --no-binary exception, tox passes --only-binary to pip first, so pip keeps the exception. tox config shows the merged values tox passes to pip - by :user:SulimanAbdulrazzaq. (:issue:4110)
  • tox config shows deps with every global option merged the way tox passes it to pip, a later -i replacing an earlier one and repeated flags shown once, and reports the error tox run would raise for invalid deps. constraints shows the configured files instead of the path of tox.ini, and a comment line in constraints no longer fails the run. deps that give pip nothing to install no longer conflict with pylock. set_env includes PIP_USER, TOX_ENV_DIR, TOX_ENV_NAME, TOX_WORK_DIR and VIRTUAL_ENV, the values tox sets for commands - by :user:gaborbernat. (:issue:4111)
  • A TOML ref to another environment's deps, constraints or commands works in tox config and tox run. It used to fail with 'PythonDeps' object is not iterable or Command(args=[...]) is not list - by :user:gaborbernat. (:issue:4112)
  • In INI commands, commands_pre and commands_post, a reference such as pip install {[testenv:x]deps} that shares its line with other text joins the referenced lines into that one command as arguments, as in tox 3. tox used to run each referenced line after the first as a separate command. A reference alone on its line still expands to one command per referenced line. This changes echo {[testenv:x]commands}, which now runs one echo with every referenced command as its arguments - by :user:gaborbernat. (:issue:4113)
  • The JSON schema described :ref:requires with the text of :ref:provision_tox_env, so editors showed the wrong hover for it - by :user:gaborbernat. (:issue:4115)

Improved documentation - 4.64.8

  • The configuration reference listed wrong defaults for :ref:args_are_paths (True), :ref:pkg_dir ({env_dir}/dist), :ref:skip_missing_interpreters (False), :ref:min_version (unset) and :ref:requires (tox) - by :user:Rodrigo-Palma. (:issue:4114)

v4.64.7 (2026-10-01)

Bug fixes - 4.64.7

... (truncated)

Commits
  • 7fb5ac1 release 4.64.9
  • 09e8ee8 🐛 fix(config): substitute inside set_env override values (#4116)
  • e2b0ccb release 4.64.8
  • 1df83f1 🐛 fix(config): show deps, constraints and set_env as tox run uses them (#4111)
  • 7ed4d2a 📝 docs(config): fix five wrong defaults in the reference (#4114)
  • 4f6fbe2 🐛 fix(config): describe requires in the JSON schema (#4115)
  • 7b877e6 🐛 fix(config): keep in-line INI references one command (#4113)
  • 3cb3208 🐛 fix(config): let TOML ref read deps and commands (#4112)
  • 21b212b 🐛 fix(pip): combine --no-binary and --only-binary across requirement lines (#...
  • a45f1fa release 4.64.7
  • Additional commits viewable in compare view

Updates tox-uv from 1.36.0 to 1.36.1

Commits
  • 0cfb305 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-acti...
  • 64ca6b5 [pre-commit.ci] pre-commit autoupdate (#378)
  • 8f4da88 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
  • 5f772db 🐛 fix(venv): honor VIRTUALENV_SYSTEM_SITE_PACKAGES for the system_site_packag...
  • b1dddaf [pre-commit.ci] pre-commit autoupdate (#375)
  • 915d957 [pre-commit.ci] pre-commit autoupdate (#374)
  • 7aa6b73 [pre-commit.ci] pre-commit autoupdate (#373)
  • 1fcf959 [pre-commit.ci] pre-commit autoupdate (#372)
  • 7a9c42e [pre-commit.ci] pre-commit autoupdate (#371)
  • b5c62e4 🔧 chore: batch dependency updates weekly on Tuesday (#370)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the dependencies group across 1 directory with …
405a134 
…5 updates

Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `26.5.1` | `26.10.0` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.2.0` | `1.3.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.10` |
| [tox](https://github.com/tox-dev/tox) | `4.60.1` | `4.64.9` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.36.0` | `1.36.1` |



Updates `black` from 26.5.1 to 26.10.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.5.1...26.10.0)

Updates `pyrefly` from 1.2.0 to 1.3.2
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.2.0...1.3.2)

Updates `ruff` from 0.16.4 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.16.10/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.10)

Updates `tox` from 4.60.1 to 4.64.9
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.60.1...4.64.9)

Updates `tox-uv` from 1.36.0 to 1.36.1
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.36.0...1.36.1)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 26.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pyrefly
  dependency-version: 1.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tox
  dependency-version: 4.64.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tox-uv
  dependency-version: 1.36.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants