Skip to content

build(deps-dev): bump the python-dependencies group across 1 directory with 15 updates - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-1fd87c6d21
Open

build(deps-dev): bump the python-dependencies group across 1 directory with 15 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-1fd87c6d21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on build, hatchling, lizard, pre-commit, pip-audit, ruff, tox, tox-uv, pytest, pyrefly, furo, myst-parser, sphinx, sphinx-autodoc-typehints and sphinx-copybutton to permit the latest version.
Updates build to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

Features

  • Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes

  • Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous

  • :issue:1033

#################### 1.4.4 (2026-04-22) ####################

Bugfixes

  • Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
  • Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
  • Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
  • Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous

  • :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

Features

... (truncated)

Commits

Updates hatchling to 1.31.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.31.0

Fixed

  • Only rewrite the shebang of a shared script when a Python shebang is present on the first line, preserving binary files and other content verbatim instead of dropping leading bytes.
Commits
  • 4b3fd7d release Hatchling v1.31.0
  • 19ced89 Fix env-dependency extras being dropped when a metadata hook is configured (#...
  • 3b45c75 Prepare hatchling for release 1.31.0 (#2330)
  • e3d9b95 Addresses bug where blank lines are dropped when there is no shebang (#2328)
  • 9bc573c Prepare for 1.17.1 hatch release (#2329)
  • bbb12bb Pass --no-header to uv pip compile for deterministic lockfiles (#2327)
  • 8c06373 Fix uv lock check header comparison (#2317)
  • 5cfbb54 fix: skip extend injection if already present in ruff config (#2305)
  • cf85971 fix: use TemporaryDirectory + pylock*.toml for temp lock files (#2303)
  • 40c471c Docs: Add hatch-calver to version scheme plugins (#1725)
  • Additional commits viewable in compare view

Updates lizard to 1.23.0

Release notes

Sourced from lizard's releases.

1.23.0

New Features

  • Python — structural pattern matching (match/case, PEP 634, Python 3.10+) is now counted correctly for cyclomatic complexity (including --modified mode)

Bug Fixes

  • C/C++: stop raw string literals (R"(…)") from swallowing following code in the tokenizer (issue #478, PR #479)

Published to PyPI via GitHub Actions (release.yml).

Changelog

Sourced from lizard's changelog.

1.23.0

New Features

  • Python — structural pattern matching (match/case, PEP 634, Python 3.10+) is now counted correctly:
    • Each case arm adds +1 to cyclomatic complexity (like an if/elif branch)
    • case guards (case x if cond:) count the if as a normal condition
    • case and match used as plain variable names (assignments, attribute access, function calls, subscripts, tuple unpacking, annotated assignments) are not counted — soft-keyword disambiguation via lookahead in preprocess
    • --modified: an entire match/case block counts as 1, consistent with switch/case in C-family languages

Bug Fixes

  • C/C++: stop raw string literals (R"(…)") from swallowing following code in the tokenizer (issue #478, PR #479)

1.22.2

Bug Fixes

  • TypeScript: handle function stack correctly when starting a new function (avoids incorrect nesting / metrics)
  • Duplicate finder: avoid double-counting overlapping duplicate code ranges (PR #474)

Security

  • Demo Flask app (index.py): enable debug only when FLASK_DEBUG is set, not by default (PR #475)

1.22.1

Bug Fixes

  • TypeScript: prevent IndexError when parsing nested template literals (issue #471, PR #472)

1.22.0

Improvements

  • TypeScript, TSX, and JSX — parsing and metrics are much closer to real code (PRs #467, #468):
    • TSX/JSX use the same TypeScriptStates path as .ts (tokenizer-only layer for JSX), so class methods and CCN are no longer wrong or double-counted.
    • Skips that reduce false functions: interface { … } method signatures, type … = value types, abstract method declarations without bodies; ES2022 private names #foo in tokenization; smarter parameters (type keyword noise, commas inside Map<…>, etc.).
    • Class field arrows (handleClick = () => {}) are reported under the field name instead of (anonymous); better call vs definition and class-body cases (typed fields, static / async fields, LWC-style async x => fields, field = CONST.PROP;, JSX attribute expressions).

1.21.7

Bug Fixes

  • Java: treat record as a contextual keyword (field and method name record are no longer parsed as a record class); track brace depth for field array/object initializers so = { } does not end the class body before a static block (issue #470)

1.21.6

Improvements

  • Release workflow: clarify how PyPI matches trusted publishers (repository owner id, workflow file, environment); add optional PYPI_API_TOKEN secret for token-based upload when OIDC is not used

1.21.5

Improvements

  • Release workflow: publish to PyPI without a GitHub Environment so trusted publishing matches PyPI’s default GitHub publisher settings (owner, repository, release.yml, empty environment name)

1.21.4

... (truncated)

Commits
  • 06284ec Release 1.23.0
  • 414f806 fix(clike): improve handling of C++ raw string literals in tokenizer
  • 6c3ea38 Merge pull request #479 from StressTestor/fix/478-cpp-raw-string-overmatch
  • bfaa1b1 fix(clike): stop C++ raw string literals from swallowing following code
  • 82c8e7a Merge pull request #477 from ixnes/fix/python_match_case
  • 0d22cc7 added support for python match-case statements for normal and modified cyclom...
  • bd261a1 Release 1.22.2
  • 147b163 fix: handle function stack correctly when starting a new function in TypeScri...
  • a1d1cac Merge pull request #475 from tomaioo/fix/security/flask-debug-mode-enabled-in...
  • 142c7c5 fix(security): 2 improvements across 1 files
  • Additional commits viewable in compare view

Updates pre-commit to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

... (truncated)

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates pip-audit to 2.10.1

Release notes

Sourced from pip-audit's releases.

v2.10.1

Fixed

  • Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)
Changelog

Sourced from pip-audit's changelog.

[2.10.1]

Fixed

  • Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)

[2.10.0]

Added

  • pip-audit now supports the --osv-url URL flag, which can be used to retrieve vulnerabilities from a custom OSV service. This is useful for organizations that host their own mirror of the OSV database, or that have custom OSV records (#810)

  • pip-audit now supports the Ecosyste.ms vulnerability service with --vulnerability-service=esms (#903).

Changed

  • The minimum version of Python is now 3.10 (#905)

Fixed

  • Fixed a bug where pip-audit would fail to parse pyproject.toml files containing TOML 1.0.0 features (#910)

  • CycloneDX JSON/XML output now correctly links vulnerabilities to their affected components via the affects field (#980)

[2.9.0]

Added

  • pip-audit now supports PEP 751 lockfiles. These lockfiles can be audited in "project" mode by passing --locked to pip-audit (#888)

[2.8.0]

Added

... (truncated)

Commits
  • 8894eb8 Merge pull request #1056 from pypa/copilot/release-2101
  • 1c625b7 Update version in README.md to 2.10.1
  • fd2094b Prep 2.10.1 release
  • 58d2488 build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 (#1052)
  • 8df9420 build(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 (#1044)
  • 3f618d3 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1053)
  • 4849132 Restrict OIDC token to publish job (#1050)
  • c1eb69a Fix KeyError when OSV affected entry omits optional ranges field (#1046)
  • 68de07f Merge pull request #1054 from pypa/fix/1047
  • ef31c9e Formatting fixes
  • Additional commits viewable in compare view

Updates ruff to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

... (truncated)

Commits
  • a2635fd Bump 0.16.0 (#27136)
  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
  • 17ef711 Stabilize --add-ignore (#27125)
  • ef912bb Add newly stabilized rules to defaults (#27055)
  • b30f040 Stabilize new default rules (#27035)
  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
  • 87e51e2 Fix format --check spans for syntax errors (#27045)
  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
  • Additional commits viewable in compare view

Updates tox to 4.58.0

Release notes

Sourced from tox's releases.

v4.58.0

What's Changed

Full Changelog: tox-dev/tox@4.57.2...4.58.0

Changelog

Sourced from tox's changelog.

Miscellaneous internal changes - 4.58.0

  • Test against Python 3.15 (beta) in CI and declare its classifier - by :user:gaborbernat. (:issue:4001)

v4.57.2 (2026-07-21)

Bug fixes - 4.57.2

  • Fix package environment creation failures being misreported:

    • discard the partially registered configuration on failure, so the real error surfaces instead of a spurious duplicate configuration definition;
    • report the first creation failure in definition order, not a hash-random one;
    • build the PEP 517 frontend lazily, so tox c and tox l work when pyproject.toml cannot be read. (:issue:3987)

  • Fix state corruption in the environment creation machinery:

    • a failed run environment build no longer removes shared package environments other run environments still use;
    • a run environment registers with its package environment once, not twice with triple-counted usage;
    • circular depends reports the cycle as an error instead of a raw traceback;
    • Skip raised by a plugin for a package environment marks the run environment package-skipped instead of crashing with UnboundLocalError. (:issue:3991)

  • Fix two packaging regressions:

    • package = editable on a build backend without PEP-660 support now falls back to editable-legacy with a warning instead of crashing, also when the project metadata is static;
    • editable and wheel environments running after an sdist-wheel environment build from the project sources again, instead of a stale temporary copy that made source edits invisible. (:issue:3992)

  • An environment serving as both a run environment and a package environment now behaves predictably:

    • one defined through a [testenv:...]-style section and referenced by package_env inherits from pkgenv/env_pkg_base as documented, instead of silently keeping run environment defaults;
    • one listed in env_list while referenced as a package environment is reported as a configuration conflict up front, instead of failing late with cannot run packaging environment or silently disappearing from tox l. (:issue:3993)

  • pylock.toml installs now match the lock file:

    • a package locked once per Python range installs only the version matching the environment's interpreter;
    • packages locked to a local directory, VCS repository, or archive install from that source instead of resolving the name against the package index;
    • locked hashes are verified when every entry carries one;
    • changing a pip environment variable such as PIP_INDEX_URL reinstalls, as it already did for deps.

... (truncated)

Commits
  • 69e1bdc release 4.58.0
  • ea8734e 👷 ci: run the test matrix against Python 3.15 (#4001)
  • 2d8d5ae release 4.57.2
  • b74d78b 🐛 fix(ux): four run-edge polish fixes (#4000)
  • 09dad3d 🐛 fix(cli): honor tox c -o, clean devenv ALL error, correct provision pin (#3...
  • fa6ec2b 🐛 fix(run): honor the fail-fast contract, resilient teardown (#3999)
  • b1b0159 🐛 fix(pep723): honor metadata behind a BOM, fail cleanly on bad blocks (#3997)
  • a111ec6 🐛 fix(pip): stable rendering of set options in install cache (#3995)
  • e969723 🐛 fix(config): rebuild loader chains per config set (#3993)
  • 6a9b6a5 🐛 fix(cache): self-heal wrong-shape tox-info content (#3996)
  • Additional commits viewable in compare view

Updates tox-uv to 1.36.0

Release notes

Sourced from tox-uv's releases.

1.36.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.35.2...1.36.0

Commits
  • 6268ef9 👷 ci: add Python 3.15 to the test matrix (#358)
  • 12edb70 [pre-commit.ci] pre-commit autoupdate (#357)
  • a6d24f8 Replace prettier with mdformat and yamlfmt (#356)
  • 8bab275 build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#355)
  • 75c7409 build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#354)
  • a4ef4f2 [pre-commit.ci] pre-commit autoupdate (#353)
  • 16203a1 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#352)
  • af040e7 [pre-commit.ci] pre-commit autoupdate (#351)
  • 1a09434 💰 Surface GitHub Sponsors + thanks.dev
  • 9781bb7 [pre-commit.ci] pre-commit autoupdate (#350)
  • Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.
Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates pyrefly to 1.1.1

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.1.1

Release date: June 18, 2026

Pyrefly v1.1.1 is a patch release with a single bug fix.

🐛 Bug fixes

  • #3867: Fixed a regression introduced in 1.1.0 where isinstance() narrowing of a union variable silently stopped working when an earlier sibling branch in the same if/elif/else chain narrowed a different variable with isinstance() and returned. The later narrowing left the union untouched, producing false missing-attribute errors on code that checked correctly in 1.0.0.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.

📦 Upgrade

pip install --upgrade pyrefly==1.1.1

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

  1. pyrefly check --suppress-errors
  2. Run your code formatter of choice
  3. pyrefly check --remove-unused-ignores
  4. Repeat until you achieve a clean formatting run and a clean type check.

This will add # pyrefly: ignore comments to your code, enabling you to silence errors and return to fix them later. This can make the process of upgrading a large codebase much more manageable.

Read more about error suppressions in the Pyrefly documentation.

Commits
  • b87de05 cut 1.1.1
  • a297847 release notes for v1.1.1
  • 4be8673 Fix isinstance narrowing silently breaking after a sibling branch narrows ano...
  • 67a11d4 cut 1.1.0
  • 6eb38a7 Handle empty name invalid syntax
  • 54f61bc Resolve type-alias refs against their own module, not typing
  • fc495dc add test for resolving type alias references
  • 33de466 Resolve real source locations by reusing the query transaction (#3829)
  • 3fd550d Teach the type converter to resolve export locations
  • 86f0da7 Lazy materialize implicit builtins
  • Additional commits viewable in compare view

Updates furo to 2025.12.19

Release notes

Sourced from furo's releases.

2025.12.19

  • Bump the supported Sphinx version range

Full Changelog: pradyunsg/furo@2025.09.25...2025.12.19

Changelog

Sourced from furo's changelog.

2025.12.19 -- Harmonious Honeydew

  • ✨ Add support for Sphinx 9.
  • Drop support for Sphinx 6.

2025.09.25 -- Gleaming Green

  • Change the dark mode code back to native.

2025.07.19 -- Frozen Flame

  • ✨ Switch to accessible-pygments themes
  • ✨ Prefetch the sidebar logos
  • ✨ Fix flickering header drop shadow on Safari
  • Add rel=edit attribute to "Edit this page" link/icon
  • Bump NodeJS and npm dependency versions
  • Bump Saas & Webpack major versions
  • Improve current page detection to be resilient to sticky elements above header
  • Modernise Sass and use @use + @forward
  • Remove top of code border-radius with captions
  • Remove "debug printf" for headerTop value
  • Use distinct images for light and dark mode in the documentation
  • Use the modern Saas Modules

2024.08.06 -- Energetic Eminence

  • ✨ Add support for Sphinx 8
  • ✨ Add smoother transitions between breakpoints
  • Increase specificity of table-wrapper selector
  • Avoid page breaks inside paragraphs

2024.07.18 -- Dull Denim

  • Improve how icons are handled and aligned.
  • Improve scroll event handler.
  • Hide the copybutton by default.
  • Fix source_view_link configuration handling.
  • Fix close tag on pencil icon.

2024.05.06 -- Cheerful Cerulean

  • ✨ Add new custom icons for auto mode, reflecting the currently active theme.
  • ✨ Add a view this page button.
  • ✨ Add colours and highlighting to "version modified" API helpers.
  • ✨ Add release information to various customisation knobs.
  • Make all icons bigger and use a thinner stroke with them.

2024.04.27 -- Bold Burgundy

  • Add a skip to content link.

... (truncated)

Commits

Updates myst-parser to 4.0.1

Release notes

Sourced from myst-parser's releases.

v4.0.1

What's Changed

New Contributors

Full Changelog: executablebooks/MyST-Parser@v4.0.0...v4.0.1

Changelog

Sourced from myst-parser's changelog.

4.0.1 - 2025-02-12

🔧 Minor fix for Sphinx 8.2 compatibility (in gh-pr:1013)

4.0.0 - 2024-08-05

This release bumps the supported versions of:

  • Python to 3.10 and greater
  • Sphinx to >=7,<9
  • Docutils to >=0.19,<0.22

Additionally, footnotes are now parsed similar to the correspondin...

Description has been truncated

@dependabot
build(deps-dev): bump the python-dependencies group across 1 director…
5f8b327 
…y with 15 updates

Updates the requirements on [build](https://github.com/pypa/build), [hatchling](https://github.com/pypa/hatch), [lizard](https://github.com/terryyin/lizard), [pre-commit](https://github.com/pre-commit/pre-commit), [pip-audit](https://github.com/pypa/pip-audit), [ruff](https://github.com/astral-sh/ruff), [tox](https://github.com/tox-dev/tox), [tox-uv](https://github.com/tox-dev/tox-uv), [pytest](https://github.com/pytest-dev/pytest), [pyrefly](https://github.com/facebook/pyrefly), [furo](https://github.com/pradyunsg/furo), [myst-parser](https://github.com/executablebooks/MyST-Parser), [sphinx](https://github.com/sphinx-doc/sphinx), [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) and [sphinx-copybutton](https://github.com/executablebooks/sphinx-copybutton) to permit the latest version.

Updates `build` to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.3.0...1.5.0)

Updates `hatchling` to 1.31.0
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.29.0...hatchling-v1.31.0)

Updates `lizard` to 1.23.0
- [Release notes](https://github.com/terryyin/lizard/releases)
- [Changelog](https://github.com/terryyin/lizard/blob/master/CHANGELOG.md)
- [Commits](terryyin/lizard@1.22.1...1.23.0)

Updates `pre-commit` to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

Updates `pip-audit` to 2.10.1
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](pypa/pip-audit@v2.9.0...v2.10.1)

Updates `ruff` to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.13...0.16.0)

Updates `tox` to 4.58.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.54.0...4.58.0)

Updates `tox-uv` to 1.36.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.15.0...1.36.0)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pyrefly` to 1.1.1
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.0.0...1.1.1)

Updates `furo` to 2025.12.19
- [Release notes](https://github.com/pradyunsg/furo/releases)
- [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md)
- [Commits](pradyunsg/furo@2024.08.06...2025.12.19)

Updates `myst-parser` to 4.0.1
- [Release notes](https://github.com/executablebooks/MyST-Parser/releases)
- [Changelog](https://github.com/executablebooks/MyST-Parser/blob/master/CHANGELOG.md)
- [Commits](executablebooks/MyST-Parser@v3.0.0...v4.0.1)

Updates `sphinx` to 8.1.3
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v8.1.3/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v7.4.0...v8.1.3)

Updates `sphinx-autodoc-typehints` to 3.0.1
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@2.2.0...3.0.1)

Updates `sphinx-copybutton` to 0.5.2
- [Release notes](https://github.com/executablebooks/sphinx-copybutton/releases)
- [Changelog](https://github.com/executablebooks/sphinx-copybutton/blob/master/CHANGELOG.md)
- [Commits](executablebooks/sphinx-copybutton@v0.5.0...v0.5.2)

---
updated-dependencies:
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: hatchling
  dependency-version: 1.31.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: lizard
  dependency-version: 1.23.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pip-audit
  dependency-version: 2.10.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: tox
  dependency-version: 4.58.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: tox-uv
  dependency-version: 1.36.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: pyrefly
  dependency-version: 1.1.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: furo
  dependency-version: 2025.12.19
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: myst-parser
  dependency-version: 4.0.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: sphinx
  dependency-version: 8.1.3
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.0.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: sphinx-copybutton
  dependency-version: 0.5.2
  dependency-type: direct:development
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants