deps: bump the python-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #30 · shrijayan/opencode-python-sdk

dependabot · 2026-11-04T13:09:41Z

Bumps the python-minor-patch group with 6 updates in the / directory:

Package	From	To
anyio	`4.15.1`	`4.16.0`
pydantic	`2.14.1`	`2.14.2`
mypy	`2.4.0`	`2.4.1`
pytest	`9.1.1`	`9.2.0`
ruff	`0.17.1`	`0.17.3`
trio	`0.34.0`	`0.35.0`

Updates anyio from 4.15.1 to 4.16.0

Release notes

Sourced from anyio's releases.

4.16.0

New features

Added BlockingPortal.call_async() for asynchronously calling into an event loop with optional abandonment on cancellation (#1342; PR by @davidbrochart)

Added SOCK_SEQPACKET support to connect_unix() and create_unix_listener() (#1349; PR by @theunkn0wn1)

Other changes

Changed UDP sockets on the asyncio backend to make send() wait until the datagram has been passed to the operating system (#1294; PR by @graingert)

Bug fixes

Fixed documentation implying that use_uvloop=True falls back to the standard event loop when uvloop (winloop on Windows) is not installed, and showed how to skip the corresponding pytest backend variant when the dependency is missing (#645; PR by @GruffElixir)

Fixed get_current_task() on the asyncio backend raising an opaque TypeError: cannot create weak reference to 'NoneType' object instead of a clear error when called from a callback scheduled via loop.call_soon_threadsafe() (e.g. from within from_thread.run_sync()), where asyncio.current_task() is legitimately None (#773; PR by @AmirF194)

Fixed CancelScope on the asyncio backend swallowing a native Task.cancel() that was delivered in the same event loop iteration as the scope's own cancellation (such as a move_on_after() deadline expiring), which left the host task with a pending cancellation request that never raised CancelledError (#1214)

Fixed UDP socket closing hanging if a datagram send was still in flight (#1237; PR by @graingert)

Fixed concurrent aclose_forcefully() calls on asyncio socket streams returning before the underlying socket was closed (#1273; PR by @graingert)

Fixed aclose() on sockets not checkpointing, and thus failing to raise a cancellation exception when called inside a cancelled scope (affected UNIX socket streams and UNIX datagram sockets on asyncio, and all sockets on Trio) (#1288; PR by @graingert)

Fixed aclose() on asyncio TCP socket listeners not checkpointing, and leaking the listening socket if cancelled while another task was waiting in accept() (#1289; PR by @graingert)

Fixed accept() on asyncio UNIX socket listeners hanging forever, and leaving the listening socket registered with the event loop, when the listener was closed by another task (#1289; PR by @graingert)

Fixed send() on asyncio TCP and UDP sockets returning normally, despite the data being discarded, when the socket was closed by another task (or, for TCP, the connection was lost) while send() was waiting for the operating system to accept the data (#1289; PR by @graingert)

Fixed SocketStream.send() on the asyncio backend handing its data to a paused transport after a previous send() was cancelled (#1299; PR by @graingert)

Fixed sleep() treating a negative delay (including -inf) inconsistently across backends (asyncio returned immediately; Trio raised ValueError) by raising ValueError on all backends (#1306; PR by @BetterAndBetterII)

Fixed create_tcp_listener() occasionally failing with a message like Could not create 2 listeners with a consistent port when an ephemeral port is requested and IPv6 is enabled and the dual-stack path is not available or a specific local host name was given (#1313)

Fixed AsyncFile not shielding against cancellation while closing (#1314)

Fixed TemporaryDirectory.cleanup() reacting to cancellation prematurely when the host task was already cancelled, causing the actual cleanup operation to be skipped (#1316; PR by @Yasser-Ameur)

Fixed a NaN deadline being accepted on asyncio while Trio raised ValueError, which silently disabled the timeout (fail_after(math.nan) returned instead of raising TimeoutError); CancelScope now rejects it on both backends (#1317; PR by @dylanpulver)

Fixed FileReadStream and FileWriteStream leaving files open when cancelled during context manager exit, including unflushed writes (#1318; PR by @Kuang-xianxin)

Fixed Condition.notify() and Condition.notify_all() failing when the underlying lock was acquired directly rather than through the condition (#1319; PR by @GruffElixir)

Fixed importing AnyIO with loaders that do not provide __file__, such as PyOxidizer, raising TypeError instead of falling back to eager imports (#1322; PR by @skulitom)

Fixed text receive streams silently discarding incomplete characters at end-of-file instead of applying the configured decoding error handler (#1339; PR by @Aurelucien)

Fixed Semaphore(fast_acquire=True) losing its fast-acquire behavior when instantiated outside a running event loop (#1348; PR by @feiiiiii5)

Fixed BlockingPortalProvider permanently failing with an AttributeError on every subsequent use if the first attempt to start its blocking portal failed (#1350; PR by @Yasser-Ameur)

Fixed create_udp_socket() silently ignoring the local_port argument when local_host was omitted, making the socket bind to a random ephemeral port instead of the requested one (#1351; PR by @januththedev)

Fixed worker threads on the asyncio backend never returning to the idle pool (and thus never being reused or pruned) when a to_thread.run_sync() call was cancelled after it had been queued for the worker but before the worker thread had picked it up (#1352; PR by @Zac-HD)

Fixed pytest plugin running Hypothesis async tests only on the first parametrized backend instead of each backend (#1353; PR by @DYNOSuprovo)

Fixed TypeError when subclassing an existing TypedAttributeSet subclass, and this subclass contains type annotations (#1358; PR by @pasmud)

Fixed Lock.locked() (and Condition.locked()) raising NoEventLoopError when the lock was created outside a running event loop (#1362; PR by @00200200)

Fixed connect_tcp() leaking a connected socket when an enclosing cancel scope was cancelled before the connection attempt task group exited (#1364; PR by @charan-rathore)

Fixed create_connected_udp_socket() silently ignoring local_port when local_host was not given: the local address was left unset, so the OS picked an ephemeral port instead of the requested one (#1365; PR by @feiiiiii5)

Fixed BlockingPortalProvider not passing the exception raised in its with block on to the start_blocking_portal() context manager it wraps (#1366; PR by @feiiiiii5)

Fixed anyio.itertools.islice() not consuming the first start items when stop <= start (#1372; PR by @Rodrigo-Palma)

Fixed BufferedByteReceiveStream.receive_exactly() and receive_until() returning buffered data after explicit closure instead of raising ClosedResourceError (#1378; PR by @kokotatan)

Fixed a TLS stream sending records the peer could no longer decrypt after a cancelled send() lost an already-encrypted record; the stream now raises BrokenResourceError on further use instead (#1385; PR by @Kayvan-Zahiri)

Fixed close() on memory object streams not waking up tasks blocked in send() or receive() on the same stream (#1391)

Fixed anyio.itertools.product() acquiring and consuming unused input iterables when repeat=0 (#1394; PR by @sricharanreddycheruku)

Fixed SpooledTemporaryFile rolling over to disk on writes when max_size is zero (the default) (#1397; PR by @fhgffy)

Fixed Trio UDP sockets remaining open when initialization failed or was cancelled (#1400; PR by @adenzhou1350)

Fixed SpooledTemporaryFile.rollover() moving the current file position to the end of the file (#1401; PR by @fhgffy)

Fixed cancellation during temporary directory creation leaving the directory behind while its context manager is retained (#1403; PR by @adenzhou1350)

... (truncated)

Commits

0ddd02d Released version 4.16.0
576892e Fixed certain pending tasks not woken up by the closing of memory object stre...
02ff4f8 Added BlockingPortal.call_async() (#1343)
1af29a4 Moved documentation code snippets into separate, checked files (#1445)
f01c041 [pre-commit.ci] pre-commit autoupdate (#1448)
95a0143 Test with blockbuster and uvloop on Python 3.15 too
4d51154 Modernized the memory object stream tests
1e4b448 Fixed the as_connectable() example in the networking docs (#1442)
cd21b36 Fixed TypedAttributeSet not collecting annotations from superclasses (#1358)
b7f8c68 [pre-commit.ci] pre-commit autoupdate (#1431)
Additional commits viewable in compare view

Updates pydantic from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic's releases.

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @Viicos in #14003

Bump speedate to v0.18.0 by @Viicos in #14007

Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @Viicos in #14083

Performance

Avoid Python tuple allocation during model fields validation by @Viicos in #13955

Lazily call repr of values during nested union serialization by @Viicos in #14082

Skip decorator field checks when no field decorators exist by @alexmojaki in #14111

Avoid heap allocation for small JSON model field buffers by @alexmojaki in #14113

Fixes
Make JSON validation by iteration consistent with Python approach by @davidhewitt in #13275.

JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:
from pydantic import BaseModel, ConfigDict
from pydantic.alias_generators import to_camel
class Page(BaseModel):
model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
page_size: int = 10

Page.model_validate_json('{"page_size": 50}')
Before: Page(page_size=10)
After: ValidationError (extra_forbidden)
See the pull request for the full list of behavior changes. This change addresses GHSA-qpmf-fgh3-ff25.
Ignore extra data matching a field name in TypedDict and dataclasses with extra=allow by @Viicos in #14090. Addresses GHSA-3r8g-cqwr-jr29.

Fix unpickling of generic classes defined in separate module by @Viicos in #13994

Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @Viicos in #13997

Fix mypy plugin crash on deferred empty model by @ilevkivskyi in #14027

Fix infinite recursion when validating an invalid default with PydanticUseDefault by @Viicos in #14028

Implement recursion guard for validate_strings() by @Viicos in #14029

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.2 (2026-10-29)

GitHub release

What's Changed

Packaging

Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @Viicos in #14003

Bump speedate to v0.18.0 by @Viicos in #14007

Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @Viicos in #14083

Performance

Avoid Python tuple allocation during model fields validation by @Viicos in #13955

Lazily call repr of values during nested union serialization by @Viicos in #14082

Skip decorator field checks when no field decorators exist by @alexmojaki in #14111

Avoid heap allocation for small JSON model field buffers by @alexmojaki in #14113

Fixes
Make JSON validation by iteration consistent with Python approach by @davidhewitt in #13275.

JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:
from pydantic import BaseModel, ConfigDict
from pydantic.alias_generators import to_camel
class Page(BaseModel):
model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
page_size: int = 10

Page.model_validate_json('{"page_size": 50}')
Before: Page(page_size=10)
After: ValidationError (extra_forbidden)
See the pull request for the full list of behavior changes.
Fix unpickling of generic classes defined in separate module by @Viicos in #13994

Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @Viicos in #13997

Fix mypy plugin crash on deferred empty model by @ilevkivskyi in #14027

Fix infinite recursion when validating an invalid default with PydanticUseDefault by @Viicos in #14028

Implement recursion guard for validate_strings() by @Viicos in #14029

Support named tuples in Sequence serialization by @Viicos in #14033

... (truncated)

Commits

aa540ac Update changelog for v2.14.2
6cde12f Update changelog for v2.14.2
2db7c25 Fix deep copy of self-referential models
d783154 Update changelog for v2.14.2
df49b6c Avoid heap allocation for small JSON model field buffers
cd93e69 Skip decorator field checks when no field decorators exist
2771e57 Make JSON validation by iteration consistent with Python approach
8102e3f Avoid Python tuple allocation during model fields validation
dd139b5 Bump pydantic.v1 namespace to v1.10.27
66155f9 Prepare release v2.14.2
Additional commits viewable in compare view

Updates mypy from 2.4.0 to 2.4.1

Changelog

Sourced from mypy's changelog.

Mypy 2.4.1

Process overloads as a whole in two-phase type checking (Ivan Levkivskyi, PR 22231)

Skip recursive setup for frame-private nested functions in mypyc (Piotr Sawicki, PR 22187)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

A5rocks

Adam Dangoor

Alex Waygood

Ali Hamdan

Brian Helba

Chad Dombrova

David Foster

dnwpark

Edgar Ramírez Mondragón

Giorgos Michas

Ivan Levkivskyi

Jelle Zijlstra

Jukka Lehtosalo

Marc Mueller

Michael R. Crusoe

NIYONSHUTI Emmanuel

Piotr Sawicki

Shantanu

themylogin

Vaggelis Danias

Willy Bruns

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

... (truncated)

Commits

ad02a35 Skip test for 2.4.1
cad7794 Finalize version to 2.4.1
d9cbcbc Add changelog for Mypy 2.4.1 (#22310)
2860baa Process overloads as a whole in two-phase type-checking (#22231)
9b3e307 [mypyc] Skip recursive setup for frame-private nested functions (#22187)
10ad5f6 Bump ast-serialize to 0.12.1 (#22093)
350052f Bump ast-serialize to 0.12.0 (#22087)
f7d08cf Bump version to 2.4.1+dev
See full diff in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

#14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

#8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

#993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;

a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

#14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

#14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

#14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

#14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

#7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

#14743: Full diff: now contains a legend explaining the + & - symbols in diff output.

#2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.

#6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

#10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits

ae1d0ff Prepare release version 9.2.0
143ce31 pre-commit: exclude codespell on generated release announcements
532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
679d09c [pre-commit.ci] pre-commit autoupdate (#15266)
41d12cd docs: clarify typing for yield fixtures
b9022ba Merge pull request #15182 from 1871698/docs/improve-getting-started-description
16f87a7 docs: improve getting-started.rst test execution description
082ed70 Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6
ae37a01 Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4
Additional commits viewable in compare view

Updates ruff from 0.17.1 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"
Download ruff 0.17.3

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

0.17.2

Released on 2026-10-22.

Preview features

[complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)

[pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)

[pylint] Avoid false positive on starred elements (PLE0643) (#29483)

[pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)

[pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

Avoid intermediate names in lint name resolution (#29506)

Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)

Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

ba65abf Bump version to 0.17.3 (#29745)
fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
d181287 [ty] Index nominal union alternatives (#29196)
07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
60f104a [ty] Honor @override on overload implementations in stubs (#29470)
207ec3a [ty] Add diagnostic baseline support (#27636)
Additional commits viewable in compare view

Updates trio from 0.34.0 to 0.35.0

Release notes

Sourced from trio's releases.

v0.35.0

Full Changelog: python-trio/trio@v0.34.0...v0.35.0

Features

Mark that Trio supports 3.15. (python-trio/trio#3563)

Bugfixes

Ensure that Trio consistently encodes all hostnames using IDNA 2008. (python-trio/trio#11)

Avoid erroring when running in a CPython built for an Android API version less than 24. (python-trio/trio#3493)

Ensure trio.lowlevel.notify_closing works even on events that have been deleted, e.g. because they were registered as one shot events. (python-trio/trio#3502)

trio.Process no longer emits an EncodingWarning on Linux when Python runs with -X warn_default_encoding (or PYTHONWARNDEFAULTENCODING=1). (python-trio/trio#3555)

Miscellaneous internal changes

The typing for async-file-objects is now consistent about what it exposes based on what is exposed by the underlying object. (python-trio/trio#3542)

Commits

3b280b0 Bump version to 0.35.0
023d1e3 Merge pull request #3566 from A5rocks/idna-consistently
b0265fd Merge pull request #3567 from EmmanuelNiyonshuti/remove-stale-py314-beta-skipif
9dc2007 remove stale py314-beta skipif on test_static_sees_all_symbols test
f71cbda Merge branch 'main' into idna-consistently
9f2df4e Merge pull request #3563 from A5rocks/py3.15
0d50d81 Use 3.15 in CI
b5ed232 Encode hostnames consistently
354708e Bump dependencies from commit 009bc2 (#3559)
009bc2d Update AsyncFileWrapper for consistency between what we need/what we declare ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the python-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.15.1` | `4.16.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.14.1` | `2.14.2` | | [mypy](https://github.com/python/mypy) | `2.4.0` | `2.4.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.17.1` | `0.17.3` | | [trio](https://github.com/python-trio/trio) | `0.34.0` | `0.35.0` | Updates `anyio` from 4.15.1 to 4.16.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.15.1...4.16.0) Updates `pydantic` from 2.14.1 to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md) - [Commits](pydantic/pydantic@v2.14.1...v2.14.2) Updates `mypy` from 2.4.0 to 2.4.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.4.0...v2.4.1) Updates `pytest` from 9.1.1 to 9.2.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.1...9.2.0) Updates `ruff` from 0.17.1 to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.17.1...0.17.3) Updates `trio` from 0.34.0 to 0.35.0 - [Release notes](https://github.com/python-trio/trio/releases) - [Commits](python-trio/trio@v0.34.0...v0.35.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pydantic dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: mypy dependency-version: 2.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: pytest dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.17.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: trio dependency-version: 0.35.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from shrijayan as a code owner November 4, 2026 13:09

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 4, 2026

Navigation Menu

Repository navigation

deps: bump the python-minor-patch group across 1 directory with 6 updates - #30

deps: bump the python-minor-patch group across 1 directory with 6 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-d6a255bd95

dependabot Bot commented on behalf of github Nov 4, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

Conversation

dependabot Bot commented on behalf of github Nov 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.16.0

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

Packaging

Performance

Fixes

v2.14.2 (2026-10-29)

What's Changed

Packaging

Performance

Fixes

Mypy 2.4.1

Acknowledgements

Mypy 2.3

The Upcoming Switch to the New Native Parser

Mypyc Free-threading Memory Safety

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

New features

Improvements in existing functionality

0.17.3

Release Notes

Preview features

Bug fixes

Performance

Documentation

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.3

0.17.3

Preview features

Bug fixes

Performance

Documentation

Contributors

0.17.2

Preview features

Bug fixes

Performance

v0.35.0

Features

Bugfixes

Miscellaneous internal changes

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 4, 2026 •

edited

Loading