chore(deps): bump the uv group with 4 updates by dependabot[bot] · Pull Request #8 · astral-sh/sigstore-models

dependabot · 2025-11-26T18:11:03Z

Bumps the uv group with 4 updates: typing-extensions, pytest, ruff and ty.

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Commits

9d1637e Prepare release 4.15.0 (#658)
4bd67c5 Coverage: exclude some noise (#656)
e589a26 Coverage: add detailed report to job summary (#655)
67d37fe Coverage: Implement fail_under (#654)
e9ae26f Don't delete previous coverage comment (#653)
ac80bb7 Add Coverage workflow (#623)
abaaafd Prepare release 4.15.0rc1 (#650)
9810405 Add @disjoint_base (PEP 800) (#634)
7ee9e05 Backport type_params fix from CPython (#646)
1e8eb9c Do not refer to PEP 705 as being experimental (#648)
Additional commits viewable in compare view

Updates pytest from 8.4.1 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

9.0.0

pytest 9.0.0 (2025-11-05)

New features
#1367: Support for subtests has been added.

subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

Example:
def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)

... (truncated)

Commits

d1b64aa Prepare release version 9.0.1
0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
Additional commits viewable in compare view

Updates ruff from 0.12.4 to 0.14.5

Release notes

Sourced from ruff's releases.

0.14.5

Release Notes

Released on 2025-11-13.

Preview features

[flake8-simplify] Apply SIM113 when index variable is of type int (#21395)

[pydoclint] Fix false positive when Sphinx directives follow a "Raises" section (DOC502) (#20535)

[pydoclint] Support NumPy-style comma-separated parameters (DOC102) (#20972)

[refurb] Auto-fix annotated assignments (FURB101) (#21278)

[ruff] Ignore str() when not used for simple conversion (RUF065) (#21330)

Bug fixes

Fix syntax error false positive on alternative match patterns (#21362)

[flake8-simplify] Fix false positive for iterable initializers with generator arguments (SIM222) (#21187)

[pyupgrade] Fix false positive on relative imports from local .builtins module (UP029) (#21309)

[pyupgrade] Consistently set the deprecated tag (UP035) (#21396)

Rule changes

[refurb] Detect empty f-strings (FURB105) (#21348)

CLI

Add option to provide a reason to --add-noqa (#21294)

Add upstream linter URL to ruff linter --output-format=json (#21316)

Add color to --help (#21337)

Documentation

Add a new "Opening a PR" section to the contribution guide (#21298)

Added the PyScripter IDE to the list of "Who is using Ruff?" (#21402)

Update PyCharm setup instructions (#21409)

[flake8-annotations] Add link to allow-star-arg-any option (ANN401) (#21326)

Other changes

[configuration] Improve error message when line-length exceeds u16::MAX (#21329)

Contributors

@njhearp

@11happy

@hugovk

@Gankra

@ntBre

@pyscripter

@danparizher

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.5

Released on 2025-11-13.

Preview features

[flake8-simplify] Apply SIM113 when index variable is of type int (#21395)

[pydoclint] Fix false positive when Sphinx directives follow a "Raises" section (DOC502) (#20535)

[pydoclint] Support NumPy-style comma-separated parameters (DOC102) (#20972)

[refurb] Auto-fix annotated assignments (FURB101) (#21278)

[ruff] Ignore str() when not used for simple conversion (RUF065) (#21330)

Bug fixes

Fix syntax error false positive on alternative match patterns (#21362)

[flake8-simplify] Fix false positive for iterable initializers with generator arguments (SIM222) (#21187)

[pyupgrade] Fix false positive on relative imports from local .builtins module (UP029) (#21309)

[pyupgrade] Consistently set the deprecated tag (UP035) (#21396)

Rule changes

[refurb] Detect empty f-strings (FURB105) (#21348)

CLI

Add option to provide a reason to --add-noqa (#21294)

Add upstream linter URL to ruff linter --output-format=json (#21316)

Add color to --help (#21337)

Documentation

Add a new "Opening a PR" section to the contribution guide (#21298)

Added the PyScripter IDE to the list of "Who is using Ruff?" (#21402)

Update PyCharm setup instructions (#21409)

[flake8-annotations] Add link to allow-star-arg-any option (ANN401) (#21326)

Other changes

[configuration] Improve error message when line-length exceeds u16::MAX (#21329)

Contributors

@njhearp

@11happy

@hugovk

@Gankra

@ntBre

@pyscripter

@danparizher

@MichaReiser

... (truncated)

Commits

87dafb8 Bump 0.14.5 (#21435)
9e80e5a [ty] Support type[…] and Type[…] in implicit type aliases (#21421)
f9cc26a [ty] Respect notebook cell boundaries when adding an auto import (#21322)
d49c326 Update PyCharm setup instructions (#21409)
e70fccb [ty] Improve LSP test server logging (#21432)
90b32f3 [ty] Ensure annotation/type expressions in stub files are always deferred (#2...
99694b6 Use profiling profile for cargo test(linux, release) (#21429)
67e54ff [ty] Fix panic for cyclic star imports (#21428)
a01b0d7 [ty] Press 'enter' to rerun all mdtests (#21427)
04ab917 [ty] Further improve subscript assignment diagnostics (#21411)
Additional commits viewable in compare view

Updates ty from 0.0.1a15 to 0.0.1a27

Release notes

Sourced from ty's releases.

0.0.1-alpha.27

Release Notes

Released on 2025-11-18.

Bug fixes

Fix panic for cyclic star imports (#21428)

Fix crashes when using a homebrew Python install (#21405)

Fix incorrect inference of enum.auto() for enums with non-int mixins, and imprecise inference of enum.auto() for single-member enums (#20541)

Fix global symbol lookup from eagerly executed scopes such as comprehensions and classes (#21317)

Fix false positive for instance attributes that are declared as Final in the class body but have their value assigned in the class's __init__ method (#21158)

Use the return type of __get__ for descriptor lookups even when __get__ is called with incorrect arguments (#21424)

Consider parameters being declared global a syntax error (#21312)

Type inference

Support typing.NewType (#21157)

Support Callable in implicit type aliases (#21496)

Support typing.Union in implicit type aliases (#21363)

Precise inference for generator expressions (#21437)

Support storing attributes in comprehension scopes (#20856)

Support isinstance() and issubclass() narrowing when the second argument is a typing.py stdlib alias (#21391)

Support type[…] and Type[…] in implicit type aliases (#21421)

Support attribute-expression TYPE_CHECKING conditionals (#21449)

Support class-arguments for dataclass transformers (#21457)

Support legacy typing special forms in implicit type aliases (#21433)

Support stringified annotations in value-position Annotated instances (#21447)

Support all parameters of dataclass transforms (#21474)

Support __hash__ semantics and unsafe_hash for dataclasses (#21470)

Improve handling of version-specific features of dataclasses (#21453)

Correctly infer the specialization of a non-invariant PEP-695 generic class that has an annotated self parameter in its __init__ method (#21325)

Improve use of type context when inferring the result of a generic constructor call (#20933, #21442)

Improve use of type context when inferring the result of a generic call expression (#21210)

Improve heuristics used to decide when it is appropriate to "promote" a Literal type such as Literal[42] to its instance supertype (in this case, int) when solving type variables (#21439)

Improve use of type context to infer conditional expressions (#21443)

Make __getattr__ available for ModuleType instances (#21450)

Introduce implicit local variables for from imports of submodules in __init__.py(i) (#21173)

Make implicit submodule locals only occur in global scope of an __init__.py(i) (#21370)

Make implicit submodule locals also occur for absolute from imports in __init__.py(i) files (#21372)

Consider from thispackage import y a re-export of y in __init__.pyi (#21387)

Allow PEP-604 unions in stubs and TYPE_CHECKING blocks prior to 3.10 (#21379)

Ensure annotation/type expressions in stub files are always deferred (#21401, #21456)

Silence false-positive diagnostics when using typing.Dict or typing.Callable as the second argument to isinstance() (#21386)

Sync vendored typeshed stubs (#21466). Typeshed diff

LSP server

Support for notebooks in VS Code (#21175)

Fix goto-definition for float and complex in type annotation positions (#21388)

... (truncated)

Changelog

Sourced from ty's changelog.

Changelog

0.0.1-alpha.28

Released on 2025-11-25.

Bug fixes

Fix panic for unclosed string literal in type annotation position (#21592)

LSP server

Improve go-to-definition and add go-to-definition for inlay hints (#21545, #21546, #21544, #21616, #21548)

Implement go-to-type for inlay type hints (#21533)

Add "remove unused ignore comment" code action (#21582)

Don't suggest completions that aren't subclasses of BaseException after raise (#21571)

Implement double click to insert inlay hint (#21600)

Fix edge cases for autocomplete suppressions in variable bindings (#21576)

Implement docstring rendering to markdown (#21550)

Support string annotations (#21577)

Improve import detection for completions and support from ...<CURSOR> completions (#21547)

Improve handling of hover/goto on imports (#21572)

Don't allow edits of some more invalid syntax types in inlay hints (#21621)

Resolve applicable overloads for hover on an overloaded function call (#21417)

Consistently add the DEFINITION modifier when computing semantic tokens (#21521)

Suppress autocomplete suggestions during variable binding (#21549)

CLI

Exit with code 2 if there's any IO error (#21508)

Other changes

Add hint about resolved Python version when a user attempts to import a member added on a newer version (#21615)

Attach subdiagnostics to unresolved-import errors for relative imports as well as absolute imports (#21554)

Avoid expression re-inference for diagnostics (#21267)

Check method definitions on subclasses for Liskov violations (#21436)

Eagerly evaluate types.UnionType elements as type expressions (#21531)

Extend Liskov checks to also cover classmethods and staticmethods (#21598)

Fix rendering of unused suppression diagnostic (#21580)

Implement typing.override (#21627)

Improve concise diagnostics for invalid exceptions when a user catches a tuple of objects (#21578)

Improve debug messages when imports fail (#21555)

Improve diagnostics when NotImplemented is called (#21523)

Improve diagnostics when a submodule is not available as an attribute on a module-literal type (#21561)

... (truncated)

Commits

26d7b68 Bump version to 0.0.1a27 (#1586)
18761f5 Update pre-commit dependencies (#1574)
c1ce1b4 Update astral-sh/setup-uv action to v7.1.3 (#1573)
cb76a5e Add PyCharm setup instructions to editors documentation (#1533)
fdc05df Add documentation about Zed binary path (#1518)
b225fd8 Bump version to 0.0.1a26 (#1517)
09c637d Update docker/metadata-action action to v5.9.0 (#1509)
5c14430 Update pre-commit dependencies (#1508)
258cb20 Update pre-commit dependencies (#1466)
3abd4c9 Release 0.0.1-alpha.25 (#1453)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv group with 4 updates: [typing-extensions](https://github.com/python/typing_extensions), [pytest](https://github.com/pytest-dev/pytest), [ruff](https://github.com/astral-sh/ruff) and [ty](https://github.com/astral-sh/ty). Updates `typing-extensions` from 4.14.1 to 4.15.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.1...4.15.0) Updates `pytest` from 8.4.1 to 9.0.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.1...9.0.1) Updates `ruff` from 0.12.4 to 0.14.5 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.4...0.14.5) Updates `ty` from 0.0.1a15 to 0.0.1a27 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.1-alpha.15...0.0.1-alpha.27) --- updated-dependencies: - dependency-name: typing-extensions dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv - dependency-name: pytest dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv - dependency-name: ruff dependency-version: 0.14.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv - dependency-name: ty dependency-version: 0.0.1a27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 26, 2025

dependabot bot force-pushed the dependabot/uv/uv-e4e7e6881b branch 4 times, most recently from dd6cfa3 to 3f00701 Compare November 26, 2025 19:06

dependabot bot force-pushed the dependabot/uv/uv-e4e7e6881b branch from 3f00701 to 0e75445 Compare November 26, 2025 19:18

woodruffw merged commit bd879bc into main Nov 26, 2025
7 checks passed

woodruffw deleted the dependabot/uv/uv-e4e7e6881b branch November 26, 2025 19:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the uv group with 4 updates#8

chore(deps): bump the uv group with 4 updates#8
woodruffw merged 1 commit intomainfrom
dependabot/uv/uv-e4e7e6881b

dependabot bot commented on behalf of github Nov 26, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Nov 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.15.0

4.15.0rc1

Release 4.15.0 (August 25, 2025)

Release 4.15.0rc1 (August 18, 2025)

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

9.0.0

pytest 9.0.0 (2025-11-05)

New features

0.14.5

Release Notes

Preview features

Bug fixes

Rule changes

CLI

Documentation

Other changes

Contributors

0.14.5

Preview features

Bug fixes

Rule changes

CLI

Documentation

Other changes

Contributors

0.0.1-alpha.27

Release Notes

Bug fixes

Type inference

LSP server

Changelog

0.0.1-alpha.28

Bug fixes

LSP server

CLI

Other changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 26, 2025 •

edited

Loading