Skip to content

build(deps): bump the python group with 6 updates#417

Merged
RonnyPfannschmidt merged 1 commit into
masterfrom
dependabot/uv/python-df60b87b0c
Jul 22, 2026
Merged

build(deps): bump the python group with 6 updates#417
RonnyPfannschmidt merged 1 commit into
masterfrom
dependabot/uv/python-df60b87b0c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the python group with 6 updates:

Package From To
pre-commit 4.2.0 4.6.1
pytest 8.3.5 9.1.1
tox 4.26.0 4.58.0
hatch 1.14.1 1.17.1
uv 0.7.8 0.11.31
gevent 25.5.1 26.5.0

Updates pre-commit from 4.2.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

... (truncated)

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

... (truncated)

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates pytest from 8.3.5 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates tox from 4.26.0 to 4.58.0

Release notes

Sourced from tox's releases.

v4.58.0

What's Changed

Full Changelog: tox-dev/tox@4.57.2...4.58.0

v4.57.2

What's Changed

Full Changelog: tox-dev/tox@4.57.1...4.57.2

v4.57.1

What's Changed

Full Changelog: tox-dev/tox@4.57.0...4.57.1

v4.57.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.56.4...4.57.0

... (truncated)

Changelog

Sourced from tox's changelog.

Miscellaneous internal changes - 4.58.0

  • Test against Python 3.15 (beta) in CI and declare its classifier - by :user:gaborbernat. (:issue:4001)

v4.57.2 (2026-07-21)


Bug fixes - 4.57.2

  • Fix package environment creation failures being misreported:

    • discard the partially registered configuration on failure, so the real error surfaces instead of a spurious duplicate configuration definition;
    • report the first creation failure in definition order, not a hash-random one;
    • build the PEP 517 frontend lazily, so tox c and tox l work when pyproject.toml cannot be read. (:issue:3987)
  • Fix state corruption in the environment creation machinery:

    • a failed run environment build no longer removes shared package environments other run environments still use;
    • a run environment registers with its package environment once, not twice with triple-counted usage;
    • circular depends reports the cycle as an error instead of a raw traceback;
    • Skip raised by a plugin for a package environment marks the run environment package-skipped instead of crashing with UnboundLocalError. (:issue:3991)
  • Fix two packaging regressions:

    • package = editable on a build backend without PEP-660 support now falls back to editable-legacy with a warning instead of crashing, also when the project metadata is static;
    • editable and wheel environments running after an sdist-wheel environment build from the project sources again, instead of a stale temporary copy that made source edits invisible. (:issue:3992)
  • An environment serving as both a run environment and a package environment now behaves predictably:

    • one defined through a [testenv:...]-style section and referenced by package_env inherits from pkgenv/env_pkg_base as documented, instead of silently keeping run environment defaults;
    • one listed in env_list while referenced as a package environment is reported as a configuration conflict up front, instead of failing late with cannot run packaging environment or silently disappearing from tox l. (:issue:3993)
  • pylock.toml installs now match the lock file:

    • a package locked once per Python range installs only the version matching the environment's interpreter;
    • packages locked to a local directory, VCS repository, or archive install from that source instead of resolving the name against the package index;
    • locked hashes are verified when every entry carries one;
    • changing a pip environment variable such as PIP_INDEX_URL reinstalls, as it already did for deps.

... (truncated)

Commits
  • 69e1bdc release 4.58.0
  • ea8734e 👷 ci: run the test matrix against Python 3.15 (#4001)
  • 2d8d5ae release 4.57.2
  • b74d78b 🐛 fix(ux): four run-edge polish fixes (#4000)
  • 09dad3d 🐛 fix(cli): honor tox c -o, clean devenv ALL error, correct provision pin (#3...
  • fa6ec2b 🐛 fix(run): honor the fail-fast contract, resilient teardown (#3999)
  • b1b0159 🐛 fix(pep723): honor metadata behind a BOM, fail cleanly on bad blocks (#3997)
  • a111ec6 🐛 fix(pip): stable rendering of set options in install cache (#3995)
  • e969723 🐛 fix(config): rebuild loader chains per config set (#3993)
  • 6a9b6a5 🐛 fix(cache): self-heal wrong-shape tox-info content (#3996)
  • Additional commits viewable in compare view

Updates hatch from 1.14.1 to 1.17.1

Release notes

Sourced from hatch's releases.

Hatchling v1.17.1

Fixed:

  • Fix dev mode when the project has symlinks and file inclusion is defined with the packages or only-include options
  • Change the name of generated PTH files for dev mode so they come first lexicographically and therefore load first

Hatch v1.17.1

Fixed

  • Use TemporaryDirectory and pylock*.toml for temporary lock files.
  • Skip injection of ruff extend if a key already exists in ruff.toml.
  • Pass --no-header to uv pip compile in the uv locker so that generated lockfiles are deterministic.
  • Fix env-dependency extras being dropped when a metadata hook is configured and resolve workspace-member extras from the member's own metadata.

Hatchling v1.17.0

Added:

  • The app build target now embeds the project version in the name of binaries

Hatch v1.17.0

Changed:

  • The hatch fmt command is now deprecated in favor of the new hatch check command group
  • Migrate HTTP client from httpx to httpx2

Added:

  • Add hatch check command group with subcommands for check code (linting), check fmt (formatting), and check types (type checking)
  • Add hatch check types command for type checking using Pyrefly, with --summarize and --cover flags
  • Add hatch env lock command to generate PEP 751 compliant lockfiles (pylock.toml) for environments
  • Add hatch dep lock and hatch lock commands as shortcuts for locking the active environment
  • Add hatch dep sync command for syncing dependencies from a lockfile
  • Add pluggable dependency locker interface with built-in UV and pip implementations
  • Add --cover-xml and --cover-xml-output flags to the hatch test command for generating XML coverage reports
  • Add linehaul telemetry data to User-Agent header for PyPI download statistics
  • Auto-create environment when locking if it doesn't exist

Fixed:

  • Fix help output formatting for the run command

Hatch v1.16.5

Fixed:

  • Handle a breaking change in virtualenv by only supporting the latest version and adding python-discovery as a dependency.

Hatch v1.16.4

Fixed:

  • Fixes hatch shell type error for keep_env.

... (truncated)

Commits
  • 5dae059 release Hatch v1.17.1
  • 4b3fd7d release Hatchling v1.31.0
  • 19ced89 Fix env-dependency extras being dropped when a metadata hook is configured (#...
  • 3b45c75 Prepare hatchling for release 1.31.0 (#2330)
  • e3d9b95 Addresses bug where blank lines are dropped when there is no shebang (#2328)
  • 9bc573c Prepare for 1.17.1 hatch release (#2329)
  • bbb12bb Pass --no-header to uv pip compile for deterministic lockfiles (#2327)
  • 8c06373 Fix uv lock check header comparison (#2317)
  • 5cfbb54 fix: skip extend injection if already present in ruff config (#2305)
  • cf85971 fix: use TemporaryDirectory + pylock*.toml for temp lock files (#2303)
  • Additional commits viewable in compare view

Updates uv from 0.7.8 to 0.11.31

Release notes

Sourced from uv's releases.

0.11.31

Release Notes

Released on 2026-07-21.

Enhancements

  • Allow workspace sources to reference members in another workspace by path (#18401)
  • Support .venv files containing paths to centralized project environments (#20022)
  • Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

  • Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

  • Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

  • Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

  • Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
  • Reject source distributions and wheels with mismatched package names (#20432)
  • Avoid retrying TLS certificate verification failures (#16245)
  • Avoid warnings about uv_build settings for in-tree build backends (#20153)

Install uv 0.11.31

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex"

Download uv 0.11.31

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.31

Released on 2026-07-21.

Enhancements

  • Allow workspace sources to reference members in another workspace by path (#18401)
  • Support .venv files containing paths to centralized project environments (#20022)
  • Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

  • Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

  • Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

  • Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

  • Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
  • Reject source distributions and wheels with mismatched package names (#20432)
  • Avoid retrying TLS certificate verification failures (#16245)
  • Avoid warnings about uv_build settings for in-tree build backends (#20153)

0.11.30

Released on 2026-07-20.

Python

  • Add CPython 3.15.0b4 (#20519)

Preview features

  • Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
  • Reuse centralized project environments when workspaces are accessed through symlinks (#20436)

Performance

  • Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
  • Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
  • Accelerate lockfile serialization with toml_writer (#20450)
  • Compact cached Simple API distribution metadata and hashes (#20463, #20483)
  • Decode stale cache entries in a single blocking task (#20486)
  • Decode cached payloads outside resolver workers (#20464)

... (truncated)

Commits

Updates gevent from 25.5.1 to 26.5.0

Commits
  • 33c560c Preparing release 26.5.0
  • 7cebc52 ci.yml: add comments about likely problem with macOS 15/26
  • 6a9192e Add 315 to make-manylinux.
  • 65561dc Add change note.
  • a651598 test__threading is apparently initializing the hub on 3.15b1/ubuntu-latest/GH...
  • c2cda32 Disable some linux-specific pidfd tests because we don't use that.
  • 53371df We can't do coverage on 3.15b1, it doesn't have the binary tracer needed for ...
  • ed9160a Initial support for Python 3.15
  • 36e8203 Remove the CI badges from README.rst.
  • 21bf47d Disable appveyor, the windows github action runners were successful.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.6.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.5` | `9.1.1` |
| [tox](https://github.com/tox-dev/tox) | `4.26.0` | `4.58.0` |
| [hatch](https://github.com/pypa/hatch) | `1.14.1` | `1.17.1` |
| [uv](https://github.com/astral-sh/uv) | `0.7.8` | `0.11.31` |
| [gevent](https://github.com/gevent/gevent) | `25.5.1` | `26.5.0` |


Updates `pre-commit` from 4.2.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.6.1)

Updates `pytest` from 8.3.5 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...9.1.1)

Updates `tox` from 4.26.0 to 4.58.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.26.0...4.58.0)

Updates `hatch` from 1.14.1 to 1.17.1
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatch-v1.14.1...hatch-v1.17.1)

Updates `uv` from 0.7.8 to 0.11.31
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.7.8...0.11.31)

Updates `gevent` from 25.5.1 to 26.5.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@25.5.1...26.5.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: tox
  dependency-version: 4.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: hatch
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uv
  dependency-version: 0.11.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: gevent
  dependency-version: 26.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 22, 2026
@RonnyPfannschmidt
RonnyPfannschmidt merged commit 1e1e4cd into master Jul 22, 2026
15 checks passed
@RonnyPfannschmidt
RonnyPfannschmidt deleted the dependabot/uv/python-df60b87b0c branch July 22, 2026 06:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant