Skip to content

Bump the dev-dependencies group across 1 directory with 4 updates - #74

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/dev-dependencies-149402d01b
Closed

Bump the dev-dependencies group across 1 directory with 4 updates#74
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/dev-dependencies-149402d01b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates in the / directory: syrupy, faker, pyrefly and mutmut.

Updates syrupy from 6.0.0 to 6.1.1

Release notes

Sourced from syrupy's releases.

v6.1.1

Note: 6.1.0 was skipped due to a CI issue. Use 6.1.1.

Experimental --snapshot-file-lock for pytest-xdist

--snapshot-update under pytest-xdist can race when multiple workers rewrite the same multi-entry amber (.ambr) file, silently dropping snapshots (#1237).

This release adds an experimental opt-in:

  • --snapshot-file-lock — exclusive file lock + atomic replace around amber writes
  • --snapshot-file-lock-timeout — max wait for the lock (default 60s)

Same-machine workers only; not reliable across remote workers / NFS. See #1239.

Callout for pytest-xdist users: please try --snapshot-file-lock with --snapshot-update and open an issue if you hit problems. Locking is expected to become the default in a future minor release.

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.1

Changelog

Sourced from syrupy's changelog.

v6.1.1 (2026-09-13)

What's Changed

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.1

v6.1.0 (2026-09-13)

What's Changed

New Contributors

Full Changelog: syrupy-project/syrupy@v6.0.0...v6.1.0

Commits
  • 2d251e7 chore(release): 6.1.1 [skip ci]
  • 9b64ec0 chore(release): 6.1.0 [skip ci]
  • 5b4256e fix: opt-in file lock for concurrent amber writes under xdist (#1239)
  • d4cb151 chore(deps): update dependency hypothesis to v6.168.0 (#1238)
  • 16c4cb5 test: add coverage for read_snapshot_data_from_location returning None (#1236)
  • 2e1d3ba chore(deps): update dependency ruff to v0.16.6 (#1235)
  • fcc929d chore(deps): update actions/deploy-pages action to v5.0.1 (#1234)
  • 4f1bad7 chore(deps): update dependency hypothesis to v6.167.1 (#1232)
  • 24eda28 chore(deps): update dependency hypothesis to v6.167.0 (#1231)
  • 0d7e46f chore(deps): update dependency hypothesis to v6.166.0 (#1230)
  • Additional commits viewable in compare view

Updates faker from 40.37.0 to 40.39.0

Release notes

Sourced from faker's releases.

Release v40.39.0

See CHANGELOG.md.

Release v40.38.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.39.0 - 2026-09-14

  • Fix: compute Norwegian MOD11 check digit so no_NO iban() passes stdnum validation (#2415). Thanks @​CedricConday.

v40.38.0 - 2026-09-01

Commits
  • 328b648 Bump version: 40.38.0 → 40.39.0
  • eb2db2d 📝 Update CHANGELOG.md
  • 3648583 fix(no_NO): compute Norwegian MOD11 check digit so iban() passes stdnum valid...
  • 59a6872 Bump version: 40.37.0 → 40.38.0
  • 2407c71 📝 Update CHANGELOG.md
  • f6a8427 💄 Format code
  • ce50bde Add step to check for existing issues or PRs
  • 4ca9116 Add si_LK (Sinhala, Sri Lanka) person provider (#2430)
  • c5a0093 mention pull request template in contributing doc
  • See full diff in compare view

Updates pyrefly from 1.2.0 to 1.3.1

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.1

Release date: September 14, 2026

Pyrefly v1.3.1 is a patch release with a single bug fix.

🐛 Bug fixes

  • #4909: Fixed a critical issue where Pyrefly would immediately crash on startup with a thread panic when empty or relative base paths were encountered during configuration. The server now safely resolves these paths against the working directory, preventing the crash and allowing normal operation.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.

📦 Upgrade

pip install --upgrade pyrefly==1.3.1

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

  1. pyrefly check --suppress-errors
  2. Run your code formatter of choice
  3. pyrefly check --remove-unused-ignores
  4. Repeat until you achieve a clean formatting run and a clean type check.

This will add # pyrefly: ignore comments to your code, enabling you to silence errors and return to fix them later. This can make the process of upgrading a large codebase much more manageable.

Read more about error suppressions in the Pyrefly documentation.

Pyrefly v1.3.0

Release date: September 10, 2026

Pyrefly v1.3.0 bundles 934 commits from 71 contributors.

🔍Release Highlights

Type Checking

  • New diagnostics and more accurate type inference. Pyrefly now catches invalid literal regular expressions, invalid mock.patch targets, unsupported dataclass_transform arguments, incompatible Protocol.__call__ overrides, and unimplemented abstract methods. Pattern-match exhaustiveness, overload resolution, narrowing, and generic inference are also more accurate.
  • Better support for major Python frameworks. Pyrefly understands same-file Django reverse relationships, checks SQLAlchemy updates against model fields, and recognizes attributes registered on PyTorch modules.

Language Server

... (truncated)

Commits

Updates mutmut from 3.7.0 to 3.8.0

Release notes

Sourced from mutmut's releases.

3.8.0

What's Changed

New Contributors

Full Changelog: boxed/mutmut@3.7.0...3.8.0

Changelog

Sourced from mutmut's changelog.

3.8.0


* Fix obsolete test names never being removed from ``mutants/mutmut-stats.json`` (`[#564](https://github.com/boxed/mutmut/issues/564)`)

    

  • 

    Fix # pragma: no mutate block being silently ignored when placed on an else, except, except* or finally header, and on the try line of a try/except* ([#559](https://github.com/boxed/mutmut/issues/559))
    

    • 

  • 

    Fix # pragma: no mutate being silently ignored on match and case headers ([#554](https://github.com/boxed/mutmut/issues/554))
    

    • 

  • 

    Fix mutants being reported as survived when a test uses patch.dict(os.environ, ..., clear=True) ([#511](https://github.com/boxed/mutmut/issues/511), [#552](https://github.com/boxed/mutmut/issues/552))
    

    • 

  • 

    Fix mutate_only_covered_lines mutating code that coverage.py excludes from measurement (# pragma: no cover, exclude_lines, exclude_also) ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix mutations that delete ignored code. Dropping a case from a match, or an argument from a call, is a mutation of the enclosing node, so it used to be made even when the removed lines were themselves ignored ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix methods of decorated classes (for example @dataclass) not being mutated ([#480](https://github.com/boxed/mutmut/issues/480), [#539](https://github.com/boxed/mutmut/issues/539))
    

    • 

  • 

    Fix time measurement including test setup/teardown instead of only the main test run ([#544](https://github.com/boxed/mutmut/issues/544))
    

    • 

  • 

    Fix mutants stopped by the CPU-time limit being reported as killed instead of timed out ([#565](https://github.com/boxed/mutmut/issues/565))
    

    • 

  • 

    Fix mutate_only_covered_lines breaking when the test suite imports a dependency that cannot be initialized twice in one process, which raised for numpy and libyaml, produced misleading type errors for cryptography, and segfaulted for asyncpg. Coverage is now gathered in a separate process, so the modules the coverage run imports are no longer unloaded and re-imported in the main process ([#528](https://github.com/boxed/mutmut/issues/528), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Mutate the condition of ternary expressions ([#196](https://github.com/boxed/mutmut/issues/196), [#546](https://github.com/boxed/mutmut/issues/546))
    

    • 

  • 

    Add a process_isolation config for choosing which process mutant workers are forked from. The new forkserver strategy keeps mutmut's main process free of pytest and your conftest.py, routing every fork through a dedicated fork server process, for test setups that are not fork-safe (gevent, grpc, torch). Tune what it preloads with forkserver_warmup ([#578](https://github.com/boxed/mutmut/issues/578), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Add a badge command that writes a shields.io endpoint file, for publishing the mutation score ([#549](https://github.com/boxed/mutmut/issues/549))
    

    • 

  • 

    Support python3.15 ([#551](https://github.com/boxed/mutmut/issues/551))

Commits
  • 14a7230 Release 3.8.0 (#581)
  • 4ff5d9e Fix obsolete test names never being removed from the stats file (#569)
  • c3a8f4b feat: process isolation and fork-safe test runners (#566)
  • 7f8ba00 misc: update history (#576)
  • 301df52 Fix pragma: no mutate on match/case headers being silently ignored
  • 630e846 fix: delete twice "-24" param and up ruff for tests it
  • b1d1270 ci: pre-commit workflow (#567)
  • 748bfc0 refac: main decomposition (#561)
  • 2f39c84 Honour 'pragma: no mutate block' on else/except/finally arms (#559)
  • e450cfc chore: up mypy to 2.3.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 4 updates
f4d2a1b 
Bumps the dev-dependencies group with 4 updates in the / directory: [syrupy](https://github.com/syrupy-project/syrupy), [faker](https://github.com/joke2k/faker), [pyrefly](https://github.com/facebook/pyrefly) and [mutmut](https://github.com/boxed/mutmut).


Updates `syrupy` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/syrupy-project/syrupy/releases)
- [Changelog](https://github.com/syrupy-project/syrupy/blob/main/CHANGELOG.md)
- [Commits](syrupy-project/syrupy@v6.0.0...v6.1.1)

Updates `faker` from 40.37.0 to 40.39.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.37.0...v40.39.0)

Updates `pyrefly` from 1.2.0 to 1.3.1
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.2.0...1.3.1)

Updates `mutmut` from 3.7.0 to 3.8.0
- [Release notes](https://github.com/boxed/mutmut/releases)
- [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst)
- [Commits](boxed/mutmut@3.7.0...3.8.0)

---
updated-dependencies:
- dependency-name: syrupy
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: faker
  dependency-version: 40.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: pyrefly
  dependency-version: 1.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: mutmut
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 20, 2026
@coderabbitai

coderabbitai Bot commented Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: LabAutomationAndScreening/pyalab/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d5928b95-e901-41fa-bbcc-6d156c6f103e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 4, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/dev-dependencies-149402d01b branch October 4, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants