Skip to content

chore(deps): bump the python-minor-patch group across 1 directory with 2 updates - #360

Merged
lelia merged 2 commits into
mainfrom
dependabot/uv/python-minor-patch-a163f074bc
Sep 22, 2026
Merged

chore(deps): bump the python-minor-patch group across 1 directory with 2 updates#360
lelia merged 2 commits into
mainfrom
dependabot/uv/python-minor-patch-a163f074bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 2 updates in the / directory: ruff and uv.

Updates ruff from 0.16.6 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates uv from 0.12.9 to 0.12.15

Release notes

Sourced from uv's releases.

0.12.15

Release Notes

Released on 2026-09-15.

Performance

  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

  • Fix regressions in 0.12.14 when installing to symlinked destinations or using uv pip install --target . (#21699)

Install uv 0.12.15

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.15/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.15/uv-installer.ps1 | iex"

Download uv 0.12.15

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
uv-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
uv-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
uv-riscv64gc-unknown-linux-musl.tar.gz RISCV MUSL Linux checksum
uv-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
uv-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
uv-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.15

Released on 2026-09-15.

Performance

  • Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

  • Fix regressions in 0.12.14 when installing to symlinked destinations or using uv pip install --target . (#21699)

0.12.14

Released on 2026-09-15.

Enhancements

  • Resume interrupted downloads with HTTP Range requests when supported (#21570)
  • Use a consistent format for error rendering (#17110)
  • Render error and warning causes with compact cause: labels (#21599, #21603)
  • Show underlying causes and hints in user warnings (#21565)
  • Show resolver hints for failed uv tool upgrade operations (#21566)

Preview features

  • Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#21618)

Performance

  • Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#21619)
  • Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#21593)
  • Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#21621)

Bug fixes

  • Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#21672)
  • Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#21625)
  • Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#21639)
  • Redact credentials and signatures from missing-path-segment URL errors (#21616)
  • Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#21640)
  • Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#21559)
  • Classify package-operation exit codes by their underlying cause: return 1 for expected failures and 2 for recognized operational and internal failures (#17110)
  • Suppress managed-Python fallback warnings under --quiet (#21565)
  • Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#21566)

0.12.13

Released on 2026-09-10.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 18, 2026 00:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 18, 2026
@socket-security

socket-security Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedpypi/​uv@​0.12.9 ⏵ 0.12.15100100100100100
Updatedpypi/​ruff@​0.16.6 ⏵ 0.16.7100 +1100100100100

View full report

@socket-security-staging

socket-security-staging Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedpypi/​uv@​0.12.9 ⏵ 0.12.15100100100100100
Updatedpypi/​ruff@​0.16.6 ⏵ 0.16.7100 +1100100100100

View full report

@dependabot dependabot Bot changed the title chore(deps): bump the python-minor-patch group with 2 updates chore(deps): bump the python-minor-patch group across 1 directory with 2 updates Sep 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-a163f074bc branch from 79c4c49 to dc92671 Compare September 18, 2026 13:05
@lelia lelia mentioned this pull request Sep 21, 2026
Merged
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-a163f074bc branch from dc92671 to 1afab37 Compare September 21, 2026 16:35
@dependabot
chore(deps): bump the python-minor-patch group across 1 directory wit…
afd26a8 
…h 2 updates

Bumps the python-minor-patch group with 2 updates in the / directory: [ruff](https://github.com/astral-sh/ruff) and [uv](https://github.com/astral-sh/uv).


Updates `ruff` from 0.16.6 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.7)

Updates `uv` from 0.12.9 to 0.12.15
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.9...0.12.15)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: uv
  dependency-version: 0.12.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-a163f074bc branch from 1afab37 to afd26a8 Compare September 22, 2026 13:43
@lelia
lelia merged commit ce388c8 into main Sep 22, 2026
32 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-a163f074bc branch September 22, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lelia lelia lelia approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lelia