Merge pull request #4555 from HypothesisWorks/create-pull-request/patch

Update pinned dependencies

Author: Liam-DeVoe

.github/workflows/main.yml

@@ -266,7 +266,7 @@ jobs:
       NODE_VERSION: 22
       # Note that the versions below are updated by `update_pyodide_versions()` in our weekly cronjob.
       # The versions of pyodide-build and the Pyodide runtime may differ.
-      PYODIDE_VERSION: 0.28.2
+      PYODIDE_VERSION: 0.28.3
       PYODIDE_BUILD_VERSION: 0.30.7
       PYTHON_VERSION: 3.13.2
     steps:

hypothesis-python/pyproject.toml

@@ -111,7 +111,7 @@ pandas = ["pandas>=1.1"]
 pytest = ["pytest>=4.6"]
 dpcontracts = ["dpcontracts>=0.4"]
 redis = ["redis>=3.0.0"]
-crosshair = ["hypothesis-crosshair>=0.0.25", "crosshair-tool>=0.0.95"]
+crosshair = ["hypothesis-crosshair>=0.0.25", "crosshair-tool>=0.0.97"]
 # zoneinfo is an odd one: every dependency is platform-conditional.
 zoneinfo = ["tzdata>=2025.2; sys_platform == 'win32' or sys_platform == 'emscripten'"]
 # We only support Django versions with upstream support - see
@@ -121,7 +121,7 @@ zoneinfo = ["tzdata>=2025.2; sys_platform == 'win32' or sys_platform == 'emscrip
 django = ["django>=4.2"]
 watchdog = ["watchdog>=4.0.0"]
 # Avoid changing this by hand. This is automatically updated by update_changelog_and_version
-all = ["black>=20.8b0", "click>=7.0", "crosshair-tool>=0.0.95", "django>=4.2", "dpcontracts>=0.4", "hypothesis-crosshair>=0.0.25", "lark>=0.10.1", "libcst>=0.3.16", "numpy>=1.19.3", "pandas>=1.1", "pytest>=4.6", "python-dateutil>=1.4", "pytz>=2014.1", "redis>=3.0.0", "rich>=9.0.0", "tzdata>=2025.2; sys_platform == 'win32' or sys_platform == 'emscripten'", "watchdog>=4.0.0"]
+all = ["black>=20.8b0", "click>=7.0", "crosshair-tool>=0.0.97", "django>=4.2", "dpcontracts>=0.4", "hypothesis-crosshair>=0.0.25", "lark>=0.10.1", "libcst>=0.3.16", "numpy>=1.19.3", "pandas>=1.1", "pytest>=4.6", "python-dateutil>=1.4", "pytz>=2014.1", "redis>=3.0.0", "rich>=9.0.0", "tzdata>=2025.2; sys_platform == 'win32' or sys_platform == 'emscripten'", "watchdog>=4.0.0"]
 
 [tool.setuptools.dynamic]
 version = {attr = "hypothesis.version.__version__"}

hypothesis-python/tox.ini

@@ -196,10 +196,10 @@ setenv=
     nocontrib: DJANGO_SETTINGS_MODULE=tests.django.toys.settings.settings_no_contrib
 deps=
     -r../requirements/test.txt
-    django42: django==4.2.24
-    django51: django==5.1.12
-    django52: django==5.2.6
-    django-nocontrib: django==5.2.6
+    django42: django==4.2.25
+    django51: django==5.1.13
+    django52: django==5.2.7
+    django-nocontrib: django==5.2.7
 commands =
     python -bb -X dev -m tests.django.manage test tests.django {posargs}
 

requirements/coverage.txt

@@ -16,7 +16,7 @@ click==8.3.0
     # via
     #   -r requirements/coverage.in
     #   black
-coverage[toml]==7.10.6
+coverage[toml]==7.10.7
     # via pytest-cov
 dpcontracts==0.6.0
     # via -r requirements/coverage.in
@@ -26,13 +26,13 @@ exceptiongroup==1.3.0 ; python_version < "3.11"
     #   pytest
 execnet==2.1.1
     # via pytest-xdist
-fakeredis==2.31.1
+fakeredis==2.31.3
     # via -r requirements/coverage.in
 iniconfig==2.1.0
     # via pytest
-lark==1.2.2
+lark==1.3.0
     # via -r requirements/coverage.in
-libcst==1.8.4
+libcst==1.8.5
     # via -r requirements/coverage.in
 mypy-extensions==1.1.0
     # via black
@@ -44,7 +44,7 @@ packaging==25.0
     # via
     #   black
     #   pytest
-pandas==2.3.2
+pandas==2.3.3
     # via -r requirements/coverage.in
 pathspec==0.12.1
     # via black
@@ -81,7 +81,7 @@ pytz==2025.2
     # via
     #   -r requirements/coverage.in
     #   pandas
-pyyaml==6.0.2
+pyyaml==6.0.3
     # via libcst
 redis==6.4.0
     # via fakeredis

requirements/crosshair.txt

@@ -14,7 +14,7 @@ cattrs==25.2.0
     # via
     #   lsprotocol
     #   pygls
-crosshair-tool==0.0.95
+crosshair-tool==0.0.97
     # via
     #   -r requirements/crosshair.in
     #   hypothesis-crosshair
@@ -26,7 +26,7 @@ exceptiongroup==1.3.0 ; python_version < "3.11"
     #   pytest
 execnet==2.1.1
     # via pytest-xdist
-hypothesis==6.139.2
+hypothesis==6.140.3
     # via hypothesis-crosshair
 hypothesis-crosshair==0.0.25
     # via -r requirements/crosshair.in

requirements/fuzzing.txt

@@ -6,7 +6,7 @@
 #
 annotated-types==0.7.0
     # via -r requirements/coverage.in
-anyio==4.10.0
+anyio==4.11.0
     # via starlette
 async-timeout==5.0.1
     # via redis
@@ -26,7 +26,7 @@ click==8.3.0
     #   -r requirements/coverage.in
     #   black
     #   hypothesis
-coverage[toml]==7.10.6
+coverage[toml]==7.10.7
     # via
     #   hypofuzz
     #   pytest-cov
@@ -43,7 +43,7 @@ exceptiongroup==1.3.0 ; python_version < "3.11"
     #   trio
 execnet==2.1.1
     # via pytest-xdist
-fakeredis==2.31.1
+fakeredis==2.31.3
     # via -r requirements/coverage.in
 h11==0.16.0
     # via
@@ -57,19 +57,19 @@ hypercorn==0.17.3
     # via hypofuzz
 hyperframe==6.1.0
     # via h2
-hypofuzz==25.9.1
+hypofuzz==25.9.2
     # via -r requirements/fuzzing.in
-hypothesis[cli,watchdog]==6.139.2
+hypothesis[cli,watchdog]==6.140.3
     # via hypofuzz
 idna==3.10
     # via
     #   anyio
     #   trio
 iniconfig==2.1.0
     # via pytest
-lark==1.2.2
+lark==1.3.0
     # via -r requirements/coverage.in
-libcst==1.8.4
+libcst==1.8.5
     # via
     #   -r requirements/coverage.in
     #   hypofuzz
@@ -89,7 +89,7 @@ packaging==25.0
     # via
     #   black
     #   pytest
-pandas==2.3.2
+pandas==2.3.3
     # via -r requirements/coverage.in
 pathspec==0.12.1
     # via black
@@ -133,7 +133,7 @@ pytz==2025.2
     # via
     #   -r requirements/coverage.in
     #   pandas
-pyyaml==6.0.2
+pyyaml==6.0.3
     # via libcst
 redis==6.4.0
     # via fakeredis

requirements/tools.txt

@@ -8,9 +8,9 @@ accessible-pygments==0.0.5
     # via furo
 alabaster==1.0.0
     # via sphinx
-anyio==4.10.0
+anyio==4.11.0
     # via watchfiles
-asgiref==3.9.1
+asgiref==3.9.2
     # via django
 asttokens==3.0.0
     # via stack-data
@@ -22,7 +22,7 @@ babel==2.17.0
     # via sphinx
 backports-tarfile==1.2.0
     # via jaraco-context
-beautifulsoup4==4.13.5
+beautifulsoup4==4.14.2
     # via
     #   furo
     #   sphinx-codeautolink
@@ -54,9 +54,9 @@ colorama==0.4.6
     # via tox
 com2ann==0.3.0
     # via shed
-coverage==7.10.6
+coverage==7.10.7
     # via -r requirements/tools.in
-cryptography==46.0.1
+cryptography==46.0.2
     # via
     #   secretstorage
     #   types-pyopenssl
@@ -65,7 +65,7 @@ decorator==5.2.1
     # via ipython
 distlib==0.4.0
     # via virtualenv
-django==5.2.6
+django==5.2.7
     # via -r requirements/tools.in
 docutils==0.21.2
     # via
@@ -92,7 +92,7 @@ filelock==3.19.1
     # via
     #   tox
     #   virtualenv
-furo==2025.7.19
+furo==2025.9.25
     # via -r requirements/tools.in
 id==1.5.0
     # via twine
@@ -108,7 +108,7 @@ iniconfig==2.1.0
     # via pytest
 ipython==8.37.0
     # via -r requirements/tools.in
-isort==6.0.1
+isort==6.1.0
     # via shed
 jaraco-classes==3.4.0
     # via keyring
@@ -130,17 +130,17 @@ jsonpointer==3.0.0
     # via sphinx-jsonschema
 keyring==25.6.0
     # via twine
-lark==1.2.2
+lark==1.3.0
     # via -r requirements/tools.in
-libcst==1.8.4
+libcst==1.8.5
     # via
     #   -r requirements/tools.in
     #   shed
 markdown==3.9
     # via pelican
 markdown-it-py==4.0.0
     # via rich
-markupsafe==3.0.2
+markupsafe==3.0.3
     # via jinja2
 matplotlib-inline==0.1.7
     # via ipython
@@ -185,7 +185,7 @@ pexpect==4.9.0
     # via
     #   -r requirements/test.in
     #   ipython
-pip-tools==7.5.0
+pip-tools==7.5.1
     # via -r requirements/tools.in
 platformdirs==4.4.0
     # via
@@ -222,7 +222,7 @@ pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-pyright==1.1.405
+pyright==1.1.406
     # via -r requirements/tools.in
 pytest==8.4.2
     # via
@@ -238,7 +238,7 @@ pytokens==0.1.10
     # via black
 pyupgrade==3.20.0
     # via shed
-pyyaml==6.0.2
+pyyaml==6.0.3
     # via
     #   libcst
     #   sphinx-jsonschema
@@ -262,7 +262,7 @@ rich==14.1.0
     # via
     #   pelican
     #   twine
-ruff==0.13.1
+ruff==0.13.3
     # via -r requirements/tools.in
 secretstorage==3.4.0
     # via keyring
@@ -325,7 +325,7 @@ tomli==2.2.1
     #   pytest
     #   sphinx
     #   tox
-tox==4.30.2
+tox==4.30.3
     # via -r requirements/tools.in
 traitlets==5.14.3
     # via
@@ -372,7 +372,7 @@ watchdog==6.0.0
     # via -r requirements/tools.in
 watchfiles==1.1.0
     # via pelican
-wcwidth==0.2.13
+wcwidth==0.2.14
     # via prompt-toolkit
 wheel==0.45.1
     # via pip-tools

tooling/src/hypothesistooling/__main__.py

@@ -360,9 +360,9 @@ def update_python_versions():
 
 
 DJANGO_VERSIONS = {
-    "4.2": "4.2.24",
-    "5.1": "5.1.12",
-    "5.2": "5.2.6",
+    "4.2": "4.2.25",
+    "5.1": "5.1.13",
+    "5.2": "5.2.7",
 }