chore(deps-dev): Bump the dev-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #90 · IvanAnishchuk/ak820ctl

dependabot · 2026-08-10T06:14:44Z

Bumps the dev-dependencies group with 10 updates in the / directory:

Package	From	To
ruff	`0.15.18`	`0.16.1`
ty	`0.0.51`	`0.0.69`
pre-commit	`4.6.0`	`4.6.1`
zensical	`0.0.46`	`0.0.53`
meson	`1.11.1`	`1.11.2`
mypy	`2.1.0`	`2.3.0`
basedpyright	`1.39.8`	`1.39.9`
mutmut	`3.6.0`	`3.7.0`
hypothesis	`6.155.7`	`6.165.2`
diff-cover	`10.3.0`	`10.4.2`

Updates ruff from 0.15.18 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

@MichaReiser

... (truncated)

Commits

80790b3 Bump 0.16.1 (#27330)
63830f3 [ty] Borrow from constraint set storage less often (#27328)
f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
0d80497 Lint TOML files in the LSP (#26862)
d91586b Update prek dependencies (#27293)
7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
b20daf7 [ty] refactor: add helper function to send partial results (#27249)
4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
7c3e2db [ty] Fix enum class container assignability (#27318)
d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
Additional commits viewable in compare view

Updates ty from 0.0.51 to 0.0.69

Release notes

Sourced from ty's releases.

0.0.69

Release Notes

Released on 2026-08-06.

Core type checking
isinstance narrowing for generic classes is now more gradual by default (#27308)

This new behavior is more similar to what other major type checkers do. For example:
def f(xs: object):
    if isinstance(xs, list):
        reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`
Note: you might consider enabling analysis.strict-generic-narrowing if you prefer the strictly correct behavior.
Contributors

@sharkdp

Install ty 0.0.69

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.ps1 | iex"
Download ty 0.0.69

File Platform Checksum

ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ty-x86_64-apple-darwin.tar.gz Intel macOS checksum

ty-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ty-i686-pc-windows-msvc.zip x86 Windows checksum

ty-x86_64-pc-windows-msvc.zip x64 Windows checksum

ty-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ty-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

ty-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.69

Released on 2026-08-06.

Core type checking
isinstance narrowing for generic classes is now more gradual by default (#27308)

This new behavior is more similar to what other major type checkers do. For example:
def f(xs: object):
    if isinstance(xs, list):
        reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`
Note: you might consider enabling analysis.strict-generic-narrowing if you prefer the strictly correct behavior.
Contributors

@sharkdp

0.0.68

Released on 2026-08-05.

Diagnostics

Preserve property getter call errors (#27509)

Simplify numeric tower displays (e.g., float over int | float) (#27406)

Suggest closing open TypedDict types for Mapping compatibility (#27512)

Core type checking

Avoid double inference of Unpack operands in Union (#27525)

Fix panic from mismatched OR-pattern bindings (#27533)

Contributors

@AlexWaygood

@charliermarsh

@carljm

0.0.67

Released on 2026-08-05.

LSP server

... (truncated)

Commits

1dca844 Bump version to 0.0.69 (#4202)
557a078 Link to actual docs page rather than README in issue creation menu "Documenta...
23a6000 Bump version to 0.0.68 (#4199)
dc3b7af Update typing FAQ for numeric tower displays (#4198)
261fd8f Bump version to 0.0.67 (#4192)
91ded4e release: use self-repo references (#4190)
83bd8c8 Update bug report issue template (#4189)
7ce0eee Update prek dependencies (#4178)
6320327 Update dependency prek to v0.4.11 (#4177)
c572fd5 Update docker/login-action action to v4.5.2 (#4179)
Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Commits

242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
1d811d9 Return an error for invalid --repo
374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
1e7994f set JULIA_DEPOT_PATH
b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
Additional commits viewable in compare view

Updates zensical from 0.0.46 to 0.0.53

Release notes

Sourced from zensical's releases.

0.0.53

Summary

This version adds support for enabling strict mode directly in mkdocs.yml or zensical.toml, allowing warnings to fail builds consistently without the --strict command-line option. It also reduces memory usage by sharing cross-reference data between navigation clones.

Additionally, the user interface is updated to v0.0.24, improving search rendering for right-to-left languages and adding four new Lucide icons. The generated zensical.toml now uses TOML 1.1 syntax, and pymdownx is updated to version 11.0 to address a vulnerability.

Changelog

Features

6227f4e zensical, compat – support strict configuration option (#840)

Bug fixes

9f93533 ui – update ui to v0.0.24

71c5ed5 – update pymdownx to 11.0 to fix vulnerability

Performance improvements

b36f50a zensical – wrap autorefs in Arc to reduce memory usage (#838)

Refactorings

94ceb07 compat – update zensical.toml to TOML 1.1 syntax

0.0.52

Summary

This version adds search support for CJK languages: Chinese, Japanese, and Korean. Search needs to segment text into individual words before it can index and match them. While many languages separate words with spaces, this is not consistently the case for CJK text, particularly Chinese and Japanese. Search now uses locale-aware segmentation to identify meaningful word boundaries, ensuring that content and queries are indexed and matched correctly.

Set the site language to zh, zh-Hant, zh-TW, ja, or ko to enable segmentation.

The search modal is also larger, showing more results and context at once. Additionally, keyboard keys inside admonitions now use the correct background color in the modern theme.

Dependencies and development tooling were updated, including TypeScript 7. The build scripts now use tsx instead of ts-node, and npm-run-all2 replaces the unmaintained npm-run-all. Updated icon packages add 56 new icons: 23 Font Awesome icons, 21 Lucide icons, 8 Octicons, and 4 Simple Icons.

Changelog

Features

f2d9ef8 zensical – add CJK language support for search

72f24bf ui – update ui to v0.0.23

0.0.51

Summary

This version improves cached rebuilds by persisting objects.inv and autorefs data, fixes stale builds after removing files, and upgrades soupsieve to address vulnerabilities.

Changelog

... (truncated)

Commits

21824d2 chore: release v0.0.53
9f93533 fix: update ui to v0.0.24
94ceb07 refactor: update zensical.toml to TOML 1.1 syntax
e4212f8 chore: update uv.lock
6227f4e feature: support strict configuration option (#840)
71c5ed5 fix: update pymdownx to 11.0 to fix vulnerability
b36f50a performance: wrap autorefs in Arc to reduce memory usage (#838)
bf07314 chore: release v0.0.52
f2d9ef8 feature: add CJK language support for search
72f24bf feature: update ui to v0.0.23
Additional commits viewable in compare view

Updates meson from 1.11.1 to 1.11.2

Commits

ff84a1a Bump versions to 1.11.2 for release
6070a3b ci: Disable git repository ownership checks
47ccc28 MacOS Qt 6 private dir fix from Carlo Cabrera.
a0efa28 Update used Qt version in macOS.
8b7d80f Update default Qt version to 6.
be89674 tests: skip importstd with gcc on Windows
03bfaca mconf: fix crash printing list-valued option augments
5727f24 platform: implement path_has_root() on OS/2
5388b7d symbolextractor: check the validity of stderr output on OS/2
aa5f7ae codegen: do not use Programs.for_machine
Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels #119](mypyc/mypy_mypyc-wheels#119)

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)

Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)

Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)

Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)

Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits

8aabf84 Drop +dev from version
4d8ad2a Update changelog for 2.3 release (#21728)
2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
24c237d [mypyc] Improve documentation of Final (#21713)
b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
cbcb51a Narrow for frozendict membership check (#21709)
af2bc0f Sync typeshed (#21707)
Additional commits viewable in compare view

Updates basedpyright from 1.39.8 to 1.39.9

Commits

2802042 fix pnpm view command and simplify the outcome check
f6e62d3 fix crash during publish
816614e 1.39.9
c79697f remove more webpack remnants
2921109 microsoft/vscode-vsce#421
5812074 fix new test from upstream. that representation of a paramspec is wrong, espe...
eaaaf62 prettier ignore new files from upstream
8baf13e switch to pnpm because npm is the worst package manager ever made.
f228a80 fixes from merge
2170274 Merge tag '1.1.411' into merge-1.1.411
Additional commits viewable in compare view

Updates mutmut from 3.6.0 to 3.7.0

Changelog

Sourced from mutmut's changelog.

3.7.0


* Fix the trampoline dropping a generator's return value, so ``yield from`` on a mutated generator no longer yields ``None`` instead of its result


Fix async generators, so that aclose()/athrow() are handled by the except/finally blocks of the mutated function instead of being swallowed by the trampoline


Fix max_stack_depth when a test changes the working directory (for example via a tmpdir fixture)


Fix type_check_command reporting type errors in copied files that have no mutants


Per-function source hashing for incremental cache invalidation — only re-test mutants in functions that changed


Cross-call dependency tracking — invalidate mutants in callers when a called function changes


Use git to detect non-Python dependency file changes; falls back to a curated file list when git is unavailable


Add cache_invalidation_exclude config to suppress noisy files from change detection


Add use_git_change_detection config (default true) to opt out of git-based detection


Add uv.lock, poetry.lock, Pipfile.lock, and pdm.lock to the list of files copied by default


Invalidate cached results automatically when result-affecting config fields change


Make mutmut browse, show and apply much faster and use far less memory, by storing where each mutant is in the mutated file instead of parsing the whole file to find it

Commits

4f12080 Release 3.7.0
f5156fd Updated authors
0092be2 fix: forward generator return value through the trampoline (#542)
9e4af73 Read mutants from a line span index instead of parsing the mutated file (#543)
32f0b42 chore(readme): fix typo (#537)
523a19c update changelog
70b26ff lockfiles
1d11c1b misc: update authors (#532)
8799708 fix(#525): implement full async-gen wrapper (#530)
c01561b fix record_trampoline_hit when tmpdir changed working directory
Additional commits viewable in compare view

Updates hypothesis from 6.155.7 to 6.165.2

Commits

deb4d49 Bump hypothesis version to 6.165.2 and update changelog
a9eff28 Merge pull request #4842 from HypothesisWorks/claude/invert-everything
c555e58 Cover the remaining _invert error paths in tests
f9882a3 Apply review feedback: type ValueHole.value as object, polish docs and tests
8dca9e1 Restructure timezones() so its draws can be re-encoded
7e309df Invert dictionaries, unique lists with tuple_suffixes, and fixed_dictionaries
77ca292 Implement _invert for most remaining strategy combinators
5b20755 Bump hypothesis version to 6.165.1 and update changelog
b4f2e92 Merge pull request #4806 from HypothesisWorks/claude/widening-shrinks
9431e20 Apply suggestions from code review
Additional commits viewable in compare view

Updates diff-cover from 10.3.0 to 10.4.2

Release notes

Sourced from diff-cover's releases.

Version 10.4.2

What's Changed

fix(config): honor format option from config file by @Sanjays2402 in Bachmann1234/diff_cover#612

fix(plugins): accept reports/options in diff_cover_report_quality hookspec by @Sanjays2402 in Bachmann1234/diff_cover#613

New Contributors

@Sanjays2402 made their first contribution in Bachmann1234/diff_cover#612

Dependencies

Bump github/codeql-action from 4 to 4.37.3 by @dependabot[bot] in Bachmann1234/diff_cover#616

Bump ruff from 0.15.20 to 0.16.0 by @dependabot[bot] in Bachmann1234/diff_cover#615

Bump actions/setup-python from 6 to 7 by @dependabot[bot] in Bachmann1234/diff_cover#614

Full Changelog: Bachmann1234/diff_cover@v10.4.1...v10.4.2

Version 10.4.1

What's Changed

Handle low confidence chardet detection for undeclared encodings by @Bachmann1234 in Bachmann1234/diff_cover#611

Dependencies

Bump setuptools from 80.9.0 to 83.0.0 by @dependabot[bot] in Bachmann1234/diff_cover#609

Full Changelog: Bachmann1234/diff_cover@v10.4.0...v10.4.1

Version 10.4.0

What's Changed

Add --branch-coverage flag to respect partial branch coverage by @mofr in Bachmann1234/diff_cover#608

Dependency bumps

Bump ruff from 0.15.12 to 0.15.15 by @dependabot[bot] in Bachmann1234/diff_cover#602

Bump black from 26.3.1 to 26.5.1 by @dependabot[bot] in Bachmann1234/diff_cover#603

Bump actions/cache from 5 to 6 by @dependabot[bot] in Bachmann1234/diff_cover#604

Bump actions/checkout from 6 to 7 by @dependabot[bot] in Bachmann1234/diff_cover#605

Bump ruff from 0.15.15 to 0.15.20 by @dependabot[bot] in Bachmann1234/diff_cover#606

Bump pylint from 4.0.5 to 4.0.6 by @dependabot[bot] in Bachmann1234/diff_cover#607

New Contributors

@mofr made their first contribution in Bachmann1234/diff_cover#608

Full Changelog: Bachmann1234/diff_cover@v10.3.0...v10.4.0

Changelog

Sourced from diff-cover's changelog.

8/08/2026 v10.5.0

Support PHPUnit clover reports (PR 617)[https://redirect.github.com/Support PHPUnit clover reports (silently reported as zero coverage) Bachmann1234/diff_cover#617] Thanks @Eljees

8/06/2026 v10.4.2

Honor format option from config file- (PR 612)[https://redirect.github.com/fix(config): honor format option from config file Bachmann1234/diff_cover#612] Thanks @Sanjays2402

Accept reports/options in diff_cover_report_quality hookspec- (PR 613)[https://redirect.github.com/fix(plugins): accept reports/options in diff_cover_report_quality hookspec Bachmann1234/diff_cover#613] Thanks @Sanjays2402

7/23/2026 v10.4.1

Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 (PR 611)[https://redirect.github.com/Handle low confidence chardet detection for undeclared encodings Bachmann1234/diff_cover#611] (bachmann1234)

7/21/2026 v10.4.0

Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @mofr

05/30/2026 v10.3.0

Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @duxiaocheng

Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

Fix --help hiding most CLI options in diff-cover/diff-quality PR 599 Thanks @duxiaocheng

01/08/2026 v10.2.0

Fixes issue where diff quality could not be run from subfolders PR 574 Issue 573 Thanks @eacherkan-via

12/30/2025 v10.1.0

Add support for floating-point total percentage in reports PR 565 thanks @tilaven

12/09/2025 v10.0.0

Remove python 3.9 support

Add python 3.14 support

Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

Fix file path issue on windows. Thanks @amos-chen PR 553

09/25/2025 v9.7.1

... (truncated)

Commits

f6a43b7 Version 10.4.2
3fdbf40 fix(plugins): accept reports/options in diff_cover_report_quality hookspec (#...
4c44508 fix(config): honor format option from config file (#612)
b490adc Bump actions/setup-python from 6 to 7 (#614)
19da277 Bump ruff from 0.15.20 to 0.16.0 (#615)
8f80569 Bump github/codeql-action from 4 to 4.37.3 (#616)
8111a37 Version 10.4.1
291ee94 Handle low confidence chardet detection for undeclared encodings (#611)
147b410 Bump setuptools from 80.9.0 to 83.0.0 (#609)
8881685 Version 10.4.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 10 updates Bumps the dev-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.15.18` | `0.16.1` | | [ty](https://github.com/astral-sh/ty) | `0.0.51` | `0.0.69` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` | | [zensical](https://github.com/zensical/zensical) | `0.0.46` | `0.0.53` | | [meson](https://github.com/mesonbuild/meson) | `1.11.1` | `1.11.2` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` | | [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.8` | `1.39.9` | | [mutmut](https://github.com/boxed/mutmut) | `3.6.0` | `3.7.0` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.155.7` | `6.165.2` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.3.0` | `10.4.2` | Updates `ruff` from 0.15.18 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.18...0.16.1) Updates `ty` from 0.0.51 to 0.0.69 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.51...0.0.69) Updates `pre-commit` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `zensical` from 0.0.46 to 0.0.53 - [Release notes](https://github.com/zensical/zensical/releases) - [Commits](zensical/zensical@v0.0.46...v0.0.53) Updates `meson` from 1.11.1 to 1.11.2 - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](mesonbuild/meson@1.11.1...1.11.2) Updates `mypy` from 2.1.0 to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.3.0) Updates `basedpyright` from 1.39.8 to 1.39.9 - [Release notes](https://github.com/detachhead/basedpyright/releases) - [Commits](DetachHead/basedpyright@v1.39.8...v1.39.9) Updates `mutmut` from 3.6.0 to 3.7.0 - [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst) - [Commits](boxed/mutmut@3.6.0...3.7.0) Updates `hypothesis` from 6.155.7 to 6.165.2 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.155.7...v6.165.2) Updates `diff-cover` from 10.3.0 to 10.4.2 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v10.3.0...v10.4.2) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: ty dependency-version: 0.0.69 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: zensical dependency-version: 0.0.53 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: meson dependency-version: 1.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: basedpyright dependency-version: 1.39.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: mutmut dependency-version: 3.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: hypothesis dependency-version: 6.165.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: diff-cover dependency-version: 10.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-10T06:15:17Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
❌ 1 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
✅ 0 package(s) with unknown licenses.

See the Details below.

License Issues

uv.lock

Package	Version	License	Issue Type
mypy	2.3.0	MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause	Incompatible License

Allowed Licenses:
0BSD, CC0-1.0, Unlicense, WTFPL, MIT, ISC, Apache-2.0, BSD-2-Clause, BSD-3-Clause, PSF-2.0, Python-2.0, Artistic-2.0, Zlib, MPL-2.0, CC-BY-4.0, CC-BY-SA-4.0, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, MIT-CMU

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

pip/ast-serialize

0.8.0

Unknown

pip/basedpyright

1.39.9

Unknown

pip/diff-cover

10.4.2

Unknown

pip/hypothesis

6.165.2

Unknown

pip/librt

0.15.0

Unknown

pip/meson

1.11.2

Unknown

pip/mutmut

3.7.0

Unknown

pip/mypy

2.3.0

Unknown

pip/pre-commit

4.6.1

🟢 4.7

Details

Check	Score	Reason
Maintained	🟢 10	19 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 2	Found 2/10 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	🟢 10	security policy file detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

pip/pymdown-extensions

11.0.1

Unknown

pip/ruff

0.16.1

Unknown

pip/ty

0.0.69

Unknown

pip/zensical

0.0.53

Unknown

Scanned Files

uv.lock

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

Navigation Menu

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 10 updates - #90

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 10 updates#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dev-dependencies-0643ef955e

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

github-actions Bot commented Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ty-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ty-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ty-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ty-i686-pc-windows-msvc.zip	x86 Windows	checksum
ty-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ty-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ty-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ty-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

0.16.1

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.16.1

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.0.69

Release Notes

Core type checking

Contributors

Install ty 0.0.69

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ty 0.0.69

0.0.69

Core type checking

Contributors

0.0.68

Diagnostics

Core type checking

Contributors

0.0.67

LSP server

pre-commit v4.6.1

Fixes

4.6.1 - 2026-07-21

Fixes

0.0.53

Summary

Changelog

Features

Bug fixes

Performance improvements

Refactorings

0.0.52

Summary

Changelog

Features

0.0.51

Summary

Changelog

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

The Upcoming Switch to the New Native Parser

Mypyc Free-threading Memory Safety

Version 10.4.2

What's Changed

New Contributors

Dependencies

Version 10.4.1

What's Changed

Dependencies

Version 10.4.0

What's Changed

Dependency bumps

New Contributors

Uh oh!

github-actions Bot commented Aug 10, 2026

Dependency Review

License Issues

uv.lock

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers