Bump the python-dependencies group with 3 updates

[dependabot]

Bumps the python-dependencies group with 3 updates: filelock, uv-build and faker.

Updates filelock from 3.31.0 to 3.31.1

Release notes

Sourced from filelock's releases.

3.31.1

What's Changed

• ♻️ refactor(coverage): key exclusions on probed capability by @​gaborbernat in tox-dev/filelock#679
• scope a lease's claim to the context that acquired it by @​dxbjavid in tox-dev/filelock#680

Full Changelog: tox-dev/filelock@3.31.0...3.31.1

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

3.31.1 (2026-07-20)

---

• A SoftFileLease acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:680

---

3.31.0 (2026-07-18)

---

• Support Termux/Android, whose CPython ships without os.link and reports sys.platform == "android". import filelock and both FileLock and SoftFileLock now work there, StrictSoftFileLock reports its missing hard-link support only when acquired, and process liveness reads /proc on Android instead of PID-only checks. :pr:678
• StrictSoftFileLock no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an intent and a held claim. :pr:678

---

3.30.3 (2026-07-17)

---

• AsyncFileLock and AsyncSoftFileLock no longer raise a deadlock RuntimeError when a different asyncio task waits for a lock they hold; the check now scopes holders to the owning task, so only a same-task reacquire is refused. :pr:676
• Keep both tables of contents on screen at any browser font size. The widened body column sized itself in em against the reader's font size while the breakpoints that fold the layout resolve em against a fixed 16px, so a reader whose default font is larger than 16px had the right-hand table of contents clipped off the edge. The body column now flexes instead, and the right-hand table of contents hides only at the mobile breakpoint. :pr:673
• Color the mermaid diagrams from whichever theme is active. They previously carried a light palette baked into each diagram's source, which stayed light on a dark page. :pr:674

---

3.30.2 (2026-07-16)

---

• Stop :class:~filelock.SoftFileLease deleting a live marker whose mode it does not implement. An unrecognized mode now names its owner instead of reading as malformed, so a record written by a newer filelock survives the grace window rather than being evicted after two seconds. :pr:672
• Stop :class:~filelock.StrictSoftFileLock and :class:~filelock.AsyncStrictSoftFileLock calling themselves a native OS lock when they warn that they ignore lifetime; they now say a strict claim is only ever cleared by force_break(). :pr:672
• Cover every lock type in the tutorials and how-to guides, with examples drawn from projects that use filelock, and color the mermaid diagrams. Correct the claims that StrictSoftFileLock exposes owner, that :class:~filelock.SoftFileLock evicts a strict sentinel, that :class:~filelock.ReadWriteLock requires a .db extension, and that every log record is DEBUG. :pr:672

---

3.30.1 (2026-07-16)

---

• StrictSoftFileLock and AsyncStrictSoftFileLock no longer abort acquisition when a peer's claim vanishes as an

... (truncated)

Commits

• c1b2e6f Release 3.31.1
• 9fd7de5 scope a lease's claim to the context that acquired it (#680)
• 2b3ad2c ♻️ refactor(coverage): key exclusions on probed capability (#679)
• See full diff in compare view

Updates uv-build from 0.11.29 to 0.11.30

Release notes

Sourced from uv-build's releases.

0.11.30

Release Notes

Released on 2026-07-20.

Python

• Add CPython 3.15.0b4 (#20519)

Preview features

• Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
• Reuse centralized project environments when workspaces are accessed through symlinks (#20436)

Performance

• Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
• Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
• Accelerate lockfile serialization with toml_writer (#20450)
• Compact cached Simple API distribution metadata and hashes (#20463, #20483)
• Decode stale cache entries in a single blocking task (#20486)
• Decode cached payloads outside resolver workers (#20464)
• Cache resolver Python requirement markers (#20461)
• Reuse resolver fork markers while recording preferences (#20462)

Bug fixes

• Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall (#20429)
• Preserve literal extends-environment paths in pyvenv.cfg on Unix (#20466)

Documentation

• Add a contribution guide (#20511, #20552)

Install uv 0.11.30

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.ps1 | iex"

Download uv 0.11.30

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.11.30

Released on 2026-07-20.

Python

• Add CPython 3.15.0b4 (#20519)

Preview features

• Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
• Reuse centralized project environments when workspaces are accessed through symlinks (#20436)

Performance

• Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
• Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
• Accelerate lockfile serialization with toml_writer (#20450)
• Compact cached Simple API distribution metadata and hashes (#20463, #20483)
• Decode stale cache entries in a single blocking task (#20486)
• Decode cached payloads outside resolver workers (#20464)
• Cache resolver Python requirement markers (#20461)
• Reuse resolver fork markers while recording preferences (#20462)

Bug fixes

• Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall (#20429)
• Preserve literal extends-environment paths in pyvenv.cfg on Unix (#20466)

Documentation

• Add a contribution guide (#20511, #20552)

Commits

• 4cb3d03 Bump version to 0.11.30 (#20540)
• fdb2b8b Update dependency astral-sh/uv to v0.11.29 (#20527)
• 25f2019 docs: Move contributing to references (#20552)
• 4fe595f Fix JSON schema validation with fastjsonschema (#20550)
• 685f63b Remove the stdin metadata from uv check (#20501)
• d43d18e Add python interpreter info to uv workspace metadata (#20502)
• 2df4584 Bump Hawk to 0.1.8 (#20548)
• 08ceef9 Make the TMP filter more precise (#20489)
• afb3807 Fix validate-pyproject-schema-store 2026.07.20 regression (#20547)
• 3b55df1 Use astral-automations-bot for prepare-release (#20543)
• Additional commits viewable in compare view

Updates faker from 40.31.0 to 40.32.0

Release notes

Sourced from faker's releases.

Release v40.32.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.32.0 - 2026-07-20

• Add allowed_path_traversal_elements option to file_path() (#2397). Thanks @​Ayushmann13479.
• Fix Windows file_path depth=3 test regex. Thanks @​fcurella.

Commits

• 2a7e65e Bump version: 40.31.0 → 40.32.0
• 64f4381 📝 Update CHANGELOG.md
• 512e060 💄 Lint code
• e4b5a1c Fix Windows file_path depth=3 test regex
• b72215c Fix #2370: Add allowed_path_traversal_elements option to file_path() (#2397)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.97%. Comparing base (f6abc94) to head (e9303fa).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #117   +/-   ##
=======================================
  Coverage   97.97%   97.97%           
=======================================
  Files           6        6           
  Lines         396      396           
=======================================
  Hits          388      388           
  Misses          8        8           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.