Skip to content

Bump the python-dependencies group with 3 updates#121

Merged
nkaaf merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-b246f62b13
Jul 23, 2026
Merged

Bump the python-dependencies group with 3 updates#121
nkaaf merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-b246f62b13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 3 updates: uv-build, faker and ty.

Updates uv-build from 0.11.30 to 0.11.31

Release notes

Sourced from uv-build's releases.

0.11.31

Release Notes

Released on 2026-07-21.

Enhancements

  • Allow workspace sources to reference members in another workspace by path (#18401)
  • Support .venv files containing paths to centralized project environments (#20022)
  • Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

  • Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

  • Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

  • Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

  • Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
  • Reject source distributions and wheels with mismatched package names (#20432)
  • Avoid retrying TLS certificate verification failures (#16245)
  • Avoid warnings about uv_build settings for in-tree build backends (#20153)

Install uv 0.11.31

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex"

Download uv 0.11.31

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.11.31

Released on 2026-07-21.

Enhancements

  • Allow workspace sources to reference members in another workspace by path (#18401)
  • Support .venv files containing paths to centralized project environments (#20022)
  • Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

  • Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

  • Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

  • Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

  • Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
  • Reject source distributions and wheels with mismatched package names (#20432)
  • Avoid retrying TLS certificate verification failures (#16245)
  • Avoid warnings about uv_build settings for in-tree build backends (#20153)
Commits

Updates faker from 40.32.0 to 40.35.0

Release notes

Sourced from faker's releases.

Release v40.35.0

See CHANGELOG.md.

Release v40.34.0

See CHANGELOG.md.

Release v40.33.2

See CHANGELOG.md.

Release v40.33.1

See CHANGELOG.md.

Release v40.33.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.35.0 - 2026-07-22

  • Fix: add correct bban_format so ru_RU iban() generates valid Russian IBANs (#2416). Thanks @​CedricConday.

v40.34.0 - 2026-07-22

  • Fix: correct BBAN length so da_DK iban() generates valid Danish IBANs (#2409). Thanks @​CedricConday.

v40.33.2 - 2026-07-22

  • Validate positive=True against a non-positive max_value in pydecimal (#2428). Thanks @​Sreekant13.

v40.33.1 - 2026-07-22

  • Make uuid1() and uuid7() reproducible under a fixed seed (#2427). Thanks @​vidigoat.

v40.33.0 - 2026-07-22

  • Add alphanumeric CNPJ support for pt_BR via flag (#2402). Thanks @​moohbr.
Commits
  • 2e83f45 Bump version: 40.34.0 → 40.35.0
  • b1caba1 📝 Update CHANGELOG.md
  • 706aaca 💄 Lint code
  • 6f8f18f fix(ru_RU): add correct bban_format so iban() is valid (#2416)
  • b92cf24 Bump version: 40.33.2 → 40.34.0
  • db5e23c 📝 Update CHANGELOG.md
  • 7659c7f fix(da_DK): correct BBAN length so iban() generates valid Danish IBANs (#2409)
  • d20ef7c Bump version: 40.33.1 → 40.33.2
  • 40bd28b 📝 Update CHANGELOG.md
  • fdf861d Validate positive=True against a non-positive max_value in pydecimal (#2428)
  • Additional commits viewable in compare view

Updates ty from 0.0.61 to 0.0.62

Release notes

Sourced from ty's releases.

0.0.62

Release Notes

Released on 2026-07-21.

Bug fixes

  • Guard recursive Protocol and TypedDict relations (#26990)
  • Prevent stack overflows in recursive type relation checks (#26503)
  • Recover from cancelled file indexing (#26876)

Diagnostics

  • Avoid editing ignore comments with trailing reasons (#26939)
  • Prefer innermost inline suppressions (#26940)
  • Remove unused own-line ignore comments (#27013)
  • Reuse applicable own-line suppressions in --add-ignore (#26925)

Configuration

  • Respect rules and analysis in PEP 723 script metadata configurations (#26671)

Core type checking

  • Accept gradual constrained TypeVar solutions (#26965)
  • Avoid recursive TypeVarTuple alias expansion (#27032)
  • Check inherited method conflicts via the MRO (#27019)
  • Contextually infer custom __setattr__ assignments (#27015)
  • Fix Callable isinstance reachability (#26970)
  • Fix Just[float] protocol matching (#27053)
  • Fix Self binding for classmethod __new__ constructors (#27030)
  • Fix nested short-circuit flow snapshots (#26956)
  • Gate TypedDict PEP 728 parameters by Python version (#26968)
  • Improve match reachability inference around value-pattern branches (#26979)
  • Make membership and equality narrowing consistent (#26982)
  • Preserve constrained TypeVar equality narrowing (#26988)
  • Preserve constrained TypeVar inequality narrowing (#26995)
  • Preserve unsatisfiable generic call constraints (#26964)
  • Respect bounded typevars in union inference (#27023)
  • Respect metaclass __setattr__ for class attributes (#27000)

Performance

  • Cache non-terminal-call reachability prefixes (#26810)
  • Cache protocol Self binding (#26997)
  • Cache sparse reachability checkpoints (#26811)
  • Defer statement-call narrowing gates (#26793)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.62

Released on 2026-07-21.

Bug fixes

  • Guard recursive Protocol and TypedDict relations (#26990)
  • Prevent stack overflows in recursive type relation checks (#26503)
  • Recover from cancelled file indexing (#26876)

Diagnostics

  • Avoid editing ignore comments with trailing reasons (#26939)
  • Prefer innermost inline suppressions (#26940)
  • Remove unused own-line ignore comments (#27013)
  • Reuse applicable own-line suppressions in --add-ignore (#26925)

Configuration

  • Respect rules and analysis in PEP 723 script metadata configurations (#26671)

Core type checking

  • Accept gradual constrained TypeVar solutions (#26965)
  • Avoid recursive TypeVarTuple alias expansion (#27032)
  • Check inherited method conflicts via the MRO (#27019)
  • Contextually infer custom __setattr__ assignments (#27015)
  • Fix Callable isinstance reachability (#26970)
  • Fix Just[float] protocol matching (#27053)
  • Fix Self binding for classmethod __new__ constructors (#27030)
  • Fix nested short-circuit flow snapshots (#26956)
  • Gate TypedDict PEP 728 parameters by Python version (#26968)
  • Improve match reachability inference around value-pattern branches (#26979)
  • Make membership and equality narrowing consistent (#26982)
  • Preserve constrained TypeVar equality narrowing (#26988)
  • Preserve constrained TypeVar inequality narrowing (#26995)
  • Preserve unsatisfiable generic call constraints (#26964)
  • Respect bounded typevars in union inference (#27023)
  • Respect metaclass __setattr__ for class attributes (#27000)

Performance

  • Cache non-terminal-call reachability prefixes (#26810)
  • Cache protocol Self binding (#26997)
  • Cache sparse reachability checkpoints (#26811)
  • Defer statement-call narrowing gates (#26793)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 3 updates: [uv-build](https://github.com/astral-sh/uv), [faker](https://github.com/joke2k/faker) and [ty](https://github.com/astral-sh/ty).


Updates `uv-build` from 0.11.30 to 0.11.31
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.30...0.11.31)

Updates `faker` from 40.32.0 to 40.35.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.32.0...v40.35.0)

Updates `ty` from 0.0.61 to 0.0.62
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.61...0.0.62)

---
updated-dependencies:
- dependency-name: uv-build
  dependency-version: 0.11.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: faker
  dependency-version: 40.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.62
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 23, 2026
@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@84eed32). Learn more about missing BASE report.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #121   +/-   ##
=======================================
  Coverage        ?   97.97%           
=======================================
  Files           ?        6           
  Lines           ?      396           
  Branches        ?        0           
=======================================
  Hits            ?      388           
  Misses          ?        8           
  Partials        ?        0           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@nkaaf
nkaaf merged commit 5c14914 into main Jul 23, 2026
13 of 14 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-b246f62b13 branch July 23, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant