Skip to content

build(deps): bump the python-minor-patch group across 1 directory with 15 updates - #42

Merged
Cybernetic-Ransomware merged 1 commit into
mainfrom
dependabot/uv/python-minor-patch-4592516268
Sep 13, 2026
Merged

build(deps): bump the python-minor-patch group across 1 directory with 15 updates#42
Cybernetic-Ransomware merged 1 commit into
mainfrom
dependabot/uv/python-minor-patch-4592516268

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 15 updates in the / directory:

Package From To
redis 7.4.0 7.4.1
flower 2.0.1 2.1.0
cffi 2.0.0 2.1.1
django-timezone-field 7.2.1 7.2.2
tzdata 2026.2 2026.3
gunicorn 26.0.0 26.2.0
pyturso 0.6.1 0.7.2
pre-commit 4.6.0 4.6.2
ruff 0.15.14 0.16.6
ty 0.0.39 0.0.80
codespell 2.4.2 2.4.3
pytest 9.0.3 9.1.1
pytest-django 4.12.0 4.14.0
commitizen 4.16.3 4.18.0
django-stubs 6.0.5 6.1.0

Updates redis from 7.4.0 to 7.4.1

Release notes

Sourced from redis's releases.

7.4.1

Changes

🐛 Bug Fixes

  • Preserve explicit None for client metadata config (#4081)

🧰 Maintenance

  • Updating PyJWT dependency. (#4100)
  • Addressing dependency vulnerabilities and flaky test fixes (source diff)

We'd like to thank all the contributors who worked on this release! @​elena-kolevska @​vladvildanov @​petyaslavova

Commits
  • f93955c Updating PyJWT dependency. (#4100)
  • 582cc35 Backporting flaky test fixes and dependency vulnerabilities related changes
  • 680abe9 Updating lib version to 7.4.1 and supported Redis server versions in README.md
  • 7c3188b Preserve explicit None for client metadata config (#4081)
  • See full diff in compare view

Updates flower from 2.0.1 to 2.1.0

Release notes

Sourced from flower's releases.

v2.1.0

Features

  • Added read-only mode for the UI and API by @​MrEarle #1468
  • Updated the UI with a responsive design
  • Added persistent dark mode with light and system theme options
  • Added a browser favicon by @​rolfws #1502
  • Improved task search with boolean operators and field filters
  • Preserved task-table preferences across visits by @​fretman92 #1333
  • Added TLS support for Redis Sentinel by @​cyberjunk #1327
  • Added AMQPS support for RabbitMQ connections by @​borland667
  • Updated and auto-provisioned the Grafana dashboard

Performance and reliability

  • Moved blocking broker and control operations off the I/O loop
  • Made Redis queue inspection asynchronous and pipelined
  • Prevented duplicate worker inspections
  • Fixed broker connection leaks #1490
  • Purged stale offline-worker Prometheus metrics #1128
  • Persisted dashboard counters across restarts #787
  • Improved handling of missing custom configuration files

Bug fixes

  • Fixed Redis SSL configurations #1177
  • Fixed percent-encoded IPv6 broker addresses #1220
  • Stopped exposing broker alternate URLs in worker statistics #1512
  • Fixed broker page rendering when queue inspection fails by @​alexei #1501
  • Fixed autoscaling response interpolation by @​funkyrailroad #1427
  • Improved GitHub OAuth errors when email access is unavailable by @​bysiber #1486
  • Prevented authentication failures while rendering error pages #1268, #1499
  • Fixed task search for non-string values #1401
  • Fixed task state filters to require the state prefix by @​AleksaMCode #1516
  • Fixed worker names in timeout and rate-limit error responses by @​phanky1 #1506
  • Fixed startup banner output when using a dynamic port #1449
  • Fixed worker active-task totals when counts are null by @​M4RC0Sx #1511
  • Fixed undefined worker pool grow and shrink values by @​daydaychen #1324

Documentation

... (truncated)

Changelog

Sourced from flower's changelog.

Flower 2.1.0

Features

  • Added read-only mode for the UI and API #1468 by @​MrEarle.
  • Updated the UI with a responsive design.
  • Added persistent dark mode with light and system theme options.
  • Added a browser favicon #1502 by @​rolfws.
  • Improved task search with boolean operators and field filters.
  • Preserved task-table preferences across visits #1333 by @​fretman92.
  • Added TLS support for Redis Sentinel #1327 by @​cyberjunk.
  • Added AMQPS support for RabbitMQ connections by @​borland667.
  • Updated and auto-provisioned the Grafana dashboard.
  • Enabled API access in the Docker Compose demo.

Performance and reliability

  • Moved blocking broker and control operations off the I/O loop.
  • Made Redis queue inspection asynchronous and pipelined.
  • Prevented duplicate worker inspections.
  • Fixed broker connection leaks #1490.
  • Purged stale offline-worker Prometheus metrics #1128.
  • Persisted dashboard counters across restarts #787.
  • Improved handling of missing custom configuration files.
  • Fixed startup banner output when using a dynamic port #1449.
  • Fixed worker active-task totals when counts are null #1511 by @​M4RC0Sx.
  • Fixed undefined worker pool grow and shrink values #1324 by @​daydaychen.

Bug fixes

  • Fixed Redis SSL configurations #1177.
  • Fixed percent-encoded IPv6 broker addresses #1220.
  • Stopped exposing broker alternate URLs in worker statistics #1512.
  • Fixed broker page rendering when queue inspection fails #1501 by @​alexei.
  • Fixed autoscaling response interpolation #1427 by @​funkyrailroad.
  • Improved GitHub OAuth errors when email access is unavailable #1486 by @​bysiber.
  • Prevented authentication failures while rendering error pages #1268, #1499.
  • Fixed task search for non-string values #1401.
  • Fixed task state filters to require the state prefix #1516 by @​AleksaMCode.
  • Fixed worker names in timeout and rate-limit error responses #1506 by @​phanky1.

Documentation

... (truncated)

Commits
  • 3597bd1 Set release version
  • d083f73 Update documentation for 2.1.0
  • b58869b Merge remote-tracking branch 'origin/master' into 2.0
  • e6cf8ef Add Python 3.13 and 3.14 support
  • 8ecede9 Document custom authentication providers
  • 00d310b Persist dashboard counters across restarts
  • 0a51160 Purge offline workers from metrics
  • 72a09c8 Prevent duplicate worker inspections
  • 17ead90 Make Redis queue inspection non-blocking
  • b11ddcb Update blocking operation handling
  • Additional commits viewable in compare view

Updates cffi from 2.0.0 to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

v2.1.0

  • Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.
  • Dropped support for Python 3.9.
  • Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.
  • Fixed crashes inside __delitem__.
  • Fixed "string too big" error under MSVC.
  • Fixed mingw builds.
  • Added support for arm64 iOS wheels.
Commits
  • fd33e77 New release 2.1.1
  • 56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
  • d9f6f70 New release 2.1.0
  • 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
  • 1362e5d Move cffi-gen-src release note to 2.1.0 notes
  • a797055 Make error message when embedding version test fails more friendly
  • f1f40a8 Update changelog
  • dc62c93 Delete missed cp39 Windows builds
  • a341180 Update version numbers to prepare for v2.1 release
  • 9f04d85 Mark test using inet_ntoa as thread-unsafe
  • Additional commits viewable in compare view

Updates django-timezone-field from 7.2.1 to 7.2.2

Commits

Updates tzdata from 2026.2 to 2026.3

Release notes

Sourced from tzdata's releases.

2026.3: Release of upstream tzdata 2026c

Version 2026.3

Upstream version 2026c released 2026-07-08T17:23:58+00:00

Briefly:

Alberta moved to permanent -06 on 2026-06-18. Morocco moves to permanent +00 on 2026-09-20. More integer overflow bugs have been fixed in zic.

Changes to future timestamps

Alberta’s 2026-03-08 spring forward was its last foreseeable clock change, as it moved to permanent -06 thereafter. (Thanks to Roozbeh Pournader and others.) Model this with its traditional abbreviation CST. Although the change to permanent -06 legally took place on 2026-06-18, temporarily model the change to occur on 2026-11-01 at 02:00 instead, for the same reason we introduced a similarly temporary hack for British Columbia in 2026b.

Although another TZDB release will likely be needed soon because Northwest Territories will likely follow Alberta, the legal formalities have not yet taken place.

Morocco plans to move back to permanent UTC, without daylight saving time transitions, on 2026-09-20 at 02:00. This also affects Western Sahara.

Changes to commentary

Northwest Territories is expected to move to permanent -06 prior to 2026-11-01 02:00, when clocks would otherwise fall back. (Thanks to Tim Parenti and James Bellaire.) Model this with its traditional abbreviation CST. Unfortunately the change is not yet official, so it is currently present only as comments that can be uncommented as needed.

Changelog

Sourced from tzdata's changelog.

Version 2026.3

Upstream version 2026c released 2026-07-08T17:23:58+00:00

Briefly:

Alberta moved to permanent -06 on 2026-06-18. Morocco moves to permanent +00 on 2026-09-20. More integer overflow bugs have been fixed in zic.

Changes to future timestamps

Alberta’s 2026-03-08 spring forward was its last foreseeable clock change, as it moved to permanent -06 thereafter. (Thanks to Roozbeh Pournader and others.) Model this with its traditional abbreviation CST. Although the change to permanent -06 legally took place on 2026-06-18, temporarily model the change to occur on 2026-11-01 at 02:00 instead, for the same reason we introduced a similarly temporary hack for British Columbia in 2026b.

Although another TZDB release will likely be needed soon because Northwest Territories will likely follow Alberta, the legal formalities have not yet taken place.

Morocco plans to move back to permanent UTC, without daylight saving time transitions, on 2026-09-20 at 02:00. This also affects Western Sahara.

Changes to commentary

Northwest Territories is expected to move to permanent -06 prior to 2026-11-01 02:00, when clocks would otherwise fall back. (Thanks to Tim Parenti and James Bellaire.) Model this with its traditional abbreviation CST. Unfortunately the change is not yet official, so it is currently present only as comments that can be uncommented as needed.

Commits
  • a442794 Update tzdata to version 2026c (#145)
  • 8f35937 Use the release environment for TestPyPI publishes (#146)
  • ba0b891 Few fixes to the maintaining doc
  • 9a7e6a0 Add Stan Ulbrych to license
  • 1cab5e2 Bump actions/checkout from 6.0.2 to 7.0.0 (#144)
  • e71cff9 Bump hynek/build-and-inspect-python-package action (#143)
  • 14b2953 Make open PR check stricter (#141)
  • 68d4d51 Isolate package build and publish (#137)
  • 5bb6232 Fix punctuation in README.
  • e313d95 Raise with an informative message when release is missing from NEWS file
  • Additional commits viewable in compare view

Updates gunicorn from 26.0.0 to 26.2.0

Release notes

Sourced from gunicorn's releases.

gunicorn 26.2.0

Cleartext HTTP/2 lands, and an HTTP/2 security fix.

Cleartext HTTP/2 (h2c)

http2_cleartext accepts prior-knowledge, upgrade, both or off (the default). Prior knowledge serves a connection that opens with the HTTP/2 preface; upgrade honours an HTTP/1.1 Upgrade: h2c request. Both work on the gthread, gevent and asgi workers.

This is for deployments where TLS is terminated by a proxy that speaks HTTP/2 upstream, so the hop into gunicorn no longer drops to HTTP/1.1. Only peers in forwarded_allow_ips are considered; everyone else is served HTTP/1.x exactly as if the setting were off. Each mechanism is enabled separately, so turning one on does not turn the other on.

Do not expose a cleartext HTTP/2 port to the internet.

Security

HTTP2Request built its headers straight from the stream, so nothing the HTTP/1 path enforces applied over HTTP/2: the underscore and header_map policy, duplicate Host and Content-Type, control characters in values, and the forwarded_allow_ips trust gate. An untrusted client could set SCRIPT_NAME and forge HTTP_* entries in the WSGI environ, and decide wsgi.url_scheme through :scheme. Both request classes now share one policy mixin, and the scheme comes from the transport.

If you serve HTTP/2, this is the reason to upgrade.

Other HTTP/2 fixes

WSGI responses were buffered whole before anything was sent; they stream now. HEAD, 204 and 304 no longer carry a body. Events read while blocked on a flow-control window were discarded, losing requests and body data outright. sendfile() is refused on HTTP/2 responses rather than bypassing framing.

Request bodies dropped on Upgrade requests

On the ASGI worker with the fast parser, any request carrying an Upgrade header reached the application with an empty body, whatever the header's value and with HTTP/2 switched off entirely. Fixed in gunicorn_h1c 0.6.9, which the fast extra now requires.

Full changelog: https://gunicorn.org/news/

gunicorn 26.1.0

New Features

  • Glob patterns in reload_extra_files: entries containing *, ? or [

... (truncated)

Commits
  • 36f2a3c gunicorn 26.2.0
  • cbba350 test: cover the h2c edge paths that had none
  • 9885411 Merge pull request #3703 from cormier/fix-inconsistency-in-control-socket-docs
  • 86f0919 Merge pull request #3704 from methane/doc-wsgi-h1c
  • 5853551 Merge pull request #3712 from Rotzbua/patch-1
  • 7bce87e Merge pull request #3700 from benoitc/fix/sponsor-logo-path
  • 972dfb0 Merge pull request #3690 from melbinjp/docs/contributing-settings-path
  • 7b3f16b Merge pull request #3711 from benoitc/docs/http2-changelog
  • 5bf237c http2: require gunicorn_h1c 0.6.9 and drop the upgrade body workaround
  • 7cf0338 test: skip the fast-parser cases when gunicorn_h1c is absent
  • Additional commits viewable in compare view

Updates pyturso from 0.6.1 to 0.7.2

Release notes

Sourced from pyturso's releases.

v0.7.2

Install turso_cli 0.7.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.2/turso_cli-installer.ps1 | iex"

Download turso_cli 0.7.2

File Platform Checksum
turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
turso_cli-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.7.2-pre.6

Install turso_cli 0.7.2-pre.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.2-pre.6/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

</tr></table>

... (truncated)

Changelog

Sourced from pyturso's changelog.

Changelogq

0.7.0 -- 2026-07-13

Added

  • core/mvcc: add passive checkpoint (Pere Diaz Bou)
  • dotnet: support NativeAOT static native linking (Marc-André Moreau)
  • core/alloc: add stable push_within_capacity helper (Pedro Muniz)
  • core/storage: add savepoint rollback consistency intent (Pekka Enberg)
  • Add some testing guidance for agents (Pekka Enberg)
  • Add Aristo WAL verification (Sushant Dinesh)
  • add artificial wait for sticky disk to have latest snapshot (Pedro Muniz)
  • sync/engine: add missing fsync() (Nikita Sivukhin)
  • Add Windows ARM64 CLI release support (Marc-André Moreau)
  • Add .NET remote transactions and batches (Marc-André Moreau)
  • Add .NET remote Hrana execution (Marc-André Moreau)
  • Add Turso EF Core SQLite provider (Marc-André Moreau)
  • mvcc: Add fallible MVCC row payload allocation sites (Pedro Muniz)
  • Add mobile NuGet native targets (Marc-André Moreau)
  • core: register additional virtual tables into the catalog (Glauber Costa)
  • alloc: add specialization in nightly for Vec (Pedro Muniz)
  • core/alloc: Add allocation site annotations and out-of-memory fault injector (Pedro Muniz)
  • mvcc: lazily resolve shadow in new IndexShadowFinger (Preston Thorpe)
  • mvcc: add allocator generic to mv store (Pedro Muniz)
  • Add SQL-standard scalar functions and PG-compatible aliases (Glauber Costa)
  • Add shared buffer views for serialization callbacks (Pedro Muniz)
  • Reject ALTER TABLE ADD COLUM when generated-columns flag is off (Vartan Babayan)
  • add win tests for db/sync on js (Nikita Sivukhin)
  • Add .NET NuGet package publishing workflow (Marc-André Moreau)
  • mvcc: add sequence_watermark function and track sequence allocations (Preston Thorpe)
  • Refactor memory benchmark into library + add CodSpeed CI tracking (Pedro Muniz)
  • core/skiplist: use TursoAllocator for node allocation and add fallible inserts (Pedro Muniz)
  • serverless/javascript: add option for custom request headers (Nikita Sivukhin)
  • add yielding IO back-end for turso-stress to test async re-entrancy (Preston Thorpe)
  • python: enable Tantivy FTS and add tests (Pekka Enberg)
  • feat: add PostgreSQL-style sequences and MVCC-safe AUTOINCREMENT (Glauber Costa)
  • core/storage: Only mark WAL initialized after a successful header sync (Pekka Enberg)
  • core/mvcc: avoid SeekingToLast with MVCC in newrowid (Pere Diaz Bou)
  • Window functions plumbing 1: add stubs for builtins, refactor row_number() to use VDBE aggregate machinery (Jussi Saurio)
  • core/translate: support FILTER in window clauses (Jussi Saurio)
  • Add mvcc recovery benchmark (Mikaël Francoeur)
  • core: Add WITHIN GROUP ordered-set aggregates (Glauber Costa)
  • Add recovery-heavy profile to Whopper (Mikaël Francoeur)
  • Introduce portable logical log metadata for turso sync (Preston Thorpe)
  • Add regression test for incorrect OR expression handling (Pavan Nambi)
  • core/io: add runtime-registrable Rust IO backend (Robert Sturla)
  • extensions: add macro for context-scalar functions (Preston Thorpe)
  • Add core custom collation support (Marc-André Moreau)
  • Add managed aggregate callback support (Marc-André Moreau)

... (truncated)

Commits
  • 046e9cb Turso 0.7.2
  • 8ee137b Turso 0.7.2-pre.6
  • 8a929b3 Merge 'sync: auto-detect the remote pull protocol' from Preston Thorpe
  • 2cc44a8 Merge 'sync/engine: temporarily use truncate checkpoint only in mvcc mode' fr...
  • a303869 Turso 0.7.2-pre.5
  • fbcb6e5 ci: pin Ruff lint version
  • 4755d65 sync/engine: fix test build against v0.7 Database::open_file signature
  • 458214a Turso 0.7.2-pre.4
  • 1bf2045 Merge 'bindings/javascript: pin playwright to 1.61.0 to match container image...
  • 20576a1 Turso 0.7.2-pre.3
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

pre-commit v4.6.1

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

4.6.1 - 2026-07-21

Fixes

Commits
  • 9767b6c v4.6.2
  • 42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
  • 3056619 fix language: node for hooks with build scripts and npm 11.x
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • Additional commits viewable in compare view

Updates ruff from 0.15.14 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Commits

Updates ty from 0.0.39 to 0.0.80

Release notes

Sourced from ty's releases.

0.0.80

Release Notes

Released on 2026-09-09.

Bug fixes

  • Fix --force-exclude for directories with an excluded ancestor (#28451)
  • Preserve metaclass candidates after conflicts (#28461)

LSP server

  • Give existing autofixes descriptive titles (#28456)
  • Prevent LSP hangs during inlay hint bursts (#28390)

Diagnostic improvements

  • Preserve redundant-condition diagnostics with unreachable operands (#28374)

Core type checking

  • Check captured receivers when calling wrapped classmethods (#28467)
  • Fix cached classmethods on generic classes (#28207)
  • Fix disjointness of type guards and boolean literals (#28363)
  • Infer tuple variance from the full tuple spec (#28446)
  • Infer tuple variance more precisely (#28426)
  • Preserve callable identity across specialized types (#28409)
  • Preserve callback type context through ParamSpec forwarding (#28439)
  • Preserve wrapped functions in precise functools.partial relations (#28460)
  • Respect descriptor protocol for __set__ itself (#28408)
  • Respect type-variable bounds in argument context (#28448)
  • Unwrap union alternatives in overload implementations (#28468)

Performance

  • Distribute len inference over unions (#28470)
  • Fast-path concrete literal intersections (#28348)

Memory usage improvements

  • Avoid excess capacity in multi-binding tables (#28412)
  • Share equivalent place tables within a file (#28319)
  • Share names in synthesized constructor parameters (#28398)

Contributors

... (truncated)

...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 13, 2026
@Cybernetic-Ransomware

Cybernetic-Ransomware commented Sep 13, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-4592516268 branch from fcf65e8 to c88c38f Compare September 13, 2026 15:51
@Cybernetic-Ransomware

Cybernetic-Ransomware commented Sep 13, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
build(deps): bump the python-minor-patch group across 1 directory wit…
b3b9d07 
…h 15 updates

Bumps the python-minor-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [redis](https://github.com/redis/redis-py) | `7.4.0` | `7.4.1` |
| [flower](https://github.com/mher/flower) | `2.0.1` | `2.1.0` |
| [cffi](https://github.com/python-cffi/cffi) | `2.0.0` | `2.1.1` |
| [django-timezone-field](https://github.com/mfogel/django-timezone-field) | `7.2.1` | `7.2.2` |
| [tzdata](https://github.com/python/tzdata) | `2026.2` | `2026.3` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` |
| [pyturso](https://github.com/tursodatabase/turso) | `0.6.1` | `0.7.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.14` | `0.16.6` |
| [ty](https://github.com/astral-sh/ty) | `0.0.39` | `0.0.80` |
| [codespell](https://github.com/codespell-project/codespell) | `2.4.2` | `2.4.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.12.0` | `4.14.0` |
| [commitizen](https://github.com/commitizen-tools/commitizen) | `4.16.3` | `4.18.0` |
| [django-stubs](https://github.com/typeddjango/django-stubs) | `6.0.5` | `6.1.0` |



Updates `redis` from 7.4.0 to 7.4.1
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.4.0...v7.4.1)

Updates `flower` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/mher/flower/releases)
- [Changelog](https://github.com/mher/flower/blob/v2.1.0/CHANGELOG.md)
- [Commits](mher/flower@v2.0.1...v2.1.0)

Updates `cffi` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.1)

Updates `django-timezone-field` from 7.2.1 to 7.2.2
- [Commits](mfogel/django-timezone-field@7.2.1...7.2.2)

Updates `tzdata` from 2026.2 to 2026.3
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.2...2026.3)

Updates `gunicorn` from 26.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@26.0.0...26.2.0)

Updates `pyturso` from 0.6.1 to 0.7.2
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.6.1...v0.7.2)

Updates `pre-commit` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.2)

Updates `ruff` from 0.15.14 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.14...0.16.6)

Updates `ty` from 0.0.39 to 0.0.80
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.39...0.0.80)

Updates `codespell` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.4.2...v2.4.3)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pytest-django` from 4.12.0 to 4.14.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.12.0...v4.14.0)

Updates `commitizen` from 4.16.3 to 4.18.0
- [Release notes](https://github.com/commitizen-tools/commitizen/releases)
- [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md)
- [Commits](commitizen-tools/commitizen@v4.16.3...v4.18.0)

Updates `django-stubs` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.5...6.1.0)

---
updated-dependencies:
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: codespell
  dependency-version: 2.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: commitizen
  dependency-version: 4.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: django-stubs
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: django-timezone-field
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: flower
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytest-django
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pyturso
  dependency-version: 0.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: redis
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: ty
  dependency-version: 0.0.80
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: tzdata
  dependency-version: '2026.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-4592516268 branch from c88c38f to b3b9d07 Compare September 13, 2026 16:09
@Cybernetic-Ransomware
Cybernetic-Ransomware merged commit e662115 into main Sep 13, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-4592516268 branch September 13, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Cybernetic-Ransomware