deps(dev): bump the development-dependencies group with 7 updates by dependabot[bot] · Pull Request #158 · MaxG87/ButterBackup

dependabot · 2026-10-01T07:40:13Z

Bumps the development-dependencies group with 7 updates:

Package	From	To
hypothesis	`6.163.0`	`6.168.3`
mypy	`2.1.0`	`2.3.1`
pydantic	`2.13.4`	`2.13.5`
pytest	`9.0.3`	`9.1.1`
pytest-mock	`3.15.1`	`3.16.0`
ruff	`0.15.16`	`0.16.9`
types-pyyaml	`6.0.12.20260518`	`6.0.12.20260906`

Updates hypothesis from 6.163.0 to 6.168.3

Commits

44b82b2 Bump hypothesis version to 6.168.3 and update changelog
aeaafb5 Merge pull request #4888 from gpacix/fix-quadratic-statistics
f3f4a29 wording, remove hardcoded test
7fabb94 Add RELEASE.rst and AUTHORS.rst changes
0ab4e38 Summarize statistics events in linear time
32ebeb2 Bump hypothesis version to 6.168.2 and update changelog
ff7e800 Merge pull request #4886 from pschanely/atomic-constants-cache
e57fd12 Isolate the constants cache test from existing cache files
c8981a0 Write the local constants cache atomically
9c55f97 Merge pull request #4877 from HypothesisWorks/create-pull-request/patch
Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)

Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)

Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)

Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

Agriya Khetarpal

Ethan Sarp

Ivan Levkivskyi

Jingchen Ye

Jukka Lehtosalo

Piotr Sawicki

Shantanu

Tom Bannink

Viktor Szépe

ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:
HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

d642c44 Bump version to 2.3.1
a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
6dfa06d Fix crash when unpacking return value from overload (#21830)
a385746 Bump version to 2.3.1+dev
8aabf84 Drop +dev from version
4d8ad2a Update changelog for 2.3 release (#21728)
2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Commits

001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
558379f Bump twine to v7.0.0
2cfd5d3 Do not check for docs build
a735bee Fix more Clippy lints
7eed4a1 Fix Clippy 0.1.95 warnings
b353bbb Prepare release v2.13.5
63d2ccc Count validated model fields once in smart unions
a53ec2e Speed up PyPy CI tests
d65e0f9 Workaround circular import error in Mypy
47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest-mock from 3.15.1 to 3.16.0

Release notes

Sourced from pytest-mock's releases.

v3.16.0

2026-09-27

#604: Fixed duplicate_iterators=True for async functions spied with mocker.spy.

#611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.

#606: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.

#547: Added SpyType for annotating mocker.spy results.

Dropped support for EOL Python 3.9.

#147: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.

Added support for Python 3.15.

Changelog

Sourced from pytest-mock's changelog.

3.16.0

2026-09-27

[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixed duplicate_iterators=True for async functions spied with mocker.spy.

[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.

[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.

[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: Added SpyType for annotating mocker.spy results.

Dropped support for EOL Python 3.9.

[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.

Added support for Python 3.15.

Commits

f3b531f Release 3.16.0
71ed673 Fix duplicate_iterators for async spies (#604)
0797e3d Fix async assertion argument introspection (#611)
e24c334 docs: import os in the opening usage example (#612)
9e7eb7b [pre-commit.ci] pre-commit autoupdate (#613)
445fd4d [pre-commit.ci] pre-commit autoupdate (#610)
a8bd0b1 Honour resetall() arguments for non-callable mocks (#606)
6559fdf [pre-commit.ci] pre-commit autoupdate (#608)
466d026 [pre-commit.ci] pre-commit autoupdate (#605)
164defe [pre-commit.ci] pre-commit autoupdate (#603)
Additional commits viewable in compare view

Updates ruff from 0.15.16 to 0.16.9

Release notes

Sourced from ruff's releases.

0.16.9

Release Notes

Released on 2026-09-24.

Preview features

[ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

[flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)

[flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

Update LibCST-based fixes for Python 3.15 (#28616)

[flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

Fix horizontal overflow on the rules documentation page (#28699)

Update rules table with category information (#28651)

[flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)

[flake8-bugbear] Document type-checker interaction (B010) (#28509)

[flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)

[ruff] Mention related isort settings (RUF022) (#28719)

Contributors

@qinpei-dev

@sanjayrohith

@ntBre

@webdevsamran

@zaniebot

@ewdurbin

@MichaReiser

@spaceone

@IbrahimKhan12

@devtechedge

@GruffElixir

Install ruff 0.16.9

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.9

Released on 2026-09-24.

Preview features

[ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

[flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)

[flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

Update LibCST-based fixes for Python 3.15 (#28616)

[flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

Fix horizontal overflow on the rules documentation page (#28699)

Update rules table with category information (#28651)

[flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)

[flake8-bugbear] Document type-checker interaction (B010) (#28509)

[flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)

[ruff] Mention related isort settings (RUF022) (#28719)

Contributors

@qinpei-dev

@sanjayrohith

@ntBre

@webdevsamran

@zaniebot

@ewdurbin

@MichaReiser

@spaceone

@IbrahimKhan12

@devtechedge

@GruffElixir

0.16.8

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

... (truncated)

Commits

0be08a2 Bump version to 0.16.9 (#28882)
b4920b7 Rename ruff_cli to ruff_command_line (#28881)
47c751b Update dependency astral-sh/uv to v0.12.18 (#28880)
8c244e5 [flake8-comprehensions] Document map/generator exception behavior (C417...
5edf5a1 Use target form in rooster.version_files (#28876)
915bb2b [ty] Prefer existing @ paths over response files in Ruff and ty (#28877)
4710e1a ci(github): update version number in placeholder of issue template (#28871)
eedfc62 [ty] Propagate outer type context through cast calls (#28855)
ceaa6a0 [ty] Contain rendered code within Markdown fences (#28869)
dba0f30 authorize ruff-pre-commit dispatch via OIDC (#28867)
Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20260518 to 6.0.12.20260906

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.163.0` | `6.168.3` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.1` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.15.1` | `3.16.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.16` | `0.16.9` | | [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260518` | `6.0.12.20260906` | Updates `hypothesis` from 6.163.0 to 6.168.3 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.163.0...v6.168.3) Updates `mypy` from 2.1.0 to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.3.1) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.13.5) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `pytest-mock` from 3.15.1 to 3.16.0 - [Release notes](https://github.com/pytest-dev/pytest-mock/releases) - [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-mock@v3.15.1...v3.16.0) Updates `ruff` from 0.15.16 to 0.16.9 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.16...0.16.9) Updates `types-pyyaml` from 6.0.12.20260518 to 6.0.12.20260906 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.168.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: pytest-mock dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: ruff dependency-version: 0.16.9 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: types-pyyaml dependency-version: 6.0.12.20260906 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 1, 2026

github-actions Bot enabled auto-merge (squash) October 1, 2026 07:40

MaxG87 and others added 2 commits October 1, 2026 12:31

lint: Replace sorted()[-1] with max

9b14ead

MaxG87 force-pushed the dependabot/uv/development-dependencies-0e493a904c branch from a7196e8 to 2343f67 Compare October 1, 2026 10:31

github-actions Bot merged commit ab3af11 into main Oct 1, 2026
17 checks passed

dependabot Bot deleted the dependabot/uv/development-dependencies-0e493a904c branch October 1, 2026 10:32

Navigation Menu

deps(dev): bump the development-dependencies group with 7 updates - #158

deps(dev): bump the development-dependencies group with 7 updates#158
github-actions[bot] merged 2 commits into
mainfrom
dependabot/uv/development-dependencies-0e493a904c

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

Mypy 2.3.1

Acknowledgements

Mypy 2.2

Support for Closed TypedDicts (PEP 728)

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.5 (2026-08-28)

What's Changed

Fixes

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

v3.16.0

3.16.0

0.16.9

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

Install ruff 0.16.9

Install prebuilt binaries via shell script

0.16.9

Preview features

Bug fixes

Rule changes

Documentation

Contributors

0.16.8

Bug fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant