Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 7 updates - #150

Merged
gadomski merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-c2f8ac2acc
Sep 2, 2026
Merged

gadomski merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-c2f8ac2acc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 7 updates in the / directory:

Package From To
pystac 1.15.1 1.15.2
mypy 2.3.0 2.3.1
ruff 0.15.22 0.16.3
cql2 0.5.6 0.6.0
rasterio 1.5.0 1.5.1
mkdocs-material 9.7.6 9.7.7
jupyterlab 4.6.2 4.6.3

Updates pystac from 1.15.1 to 1.15.2

Changelog

Sourced from pystac's changelog.

1.15.2 (2026-07-27)

Bug Fixes

Commits
  • af10871 chore(main): release 1.15.2 (#1775)
  • 1f8d728 build(deps): bump actions/checkout in the actions-deps group (#1778)
  • 70a6405 build(deps): bump setuptools from 82.0.1 to 83.0.0 (#1776)
  • 6ec1e30 build(deps): bump soupsieve from 2.8.3 to 2.8.4 (#1766)
  • 57b8d50 build(deps): bump mistune from 3.2.1 to 3.3.0 (#1767)
  • c171db2 build(deps): bump jupyter-server from 2.18.0 to 2.20.0 (#1770)
  • c82570e fix: circular imports for extensions (#1764)
  • f0c30cc build(deps): bump cryptography from 46.0.7 to 48.0.1 (#1774)
  • a448ffc build(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#1773)
  • bb1d200 build(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#1771)
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Updates ruff from 0.15.22 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates cql2 from 0.5.6 to 0.6.0

Changelog

Sourced from cql2's changelog.

0.6.0 - 2026-08-12

Other

  • Fix/sql operator precedence (#256)
  • (deps) bump the production-dependencies group with 5 updates (#257)
  • update readme so the version doesn't go out of date (#225)
  • (deps) bump the production-dependencies group with 4 updates (#253)

Every item marked Breaking changes the result of code that compiles unchanged.

Changed

  • Breaking: to_text emits the minimum parentheses needed rather than wrapping every operation. ((a = 1) AND ((b = 2) OR (c = 3))) is now a = 1 AND (b = 2 OR c = 3). The expressions are equivalent, but any consumer comparing to_text output as a string will see different results
  • Breaking: to_sql and to_ducksql output changes wherever grouping, a timestamp literal, or a date bound is involved. See the corresponding entries under Fixed
  • Breaking: Error is now #[non_exhaustive], so adding a variant will no longer be a breaking change
  • Breaking: sqlparser 0.58 → 0.62. This is a public dependency — ToSqlAst::to_sql_ast returns sqlparser::ast::Expr — so anything naming that type must move too
  • Breaking: the TEMPORALOPS and ARRAYOPS constants carry the spelling the JSON schema defines, so TEMPORALOPS.contains(&"t_metby") is now false; use "t_metBy". temporal_op accepts either spelling
  • Breaking: deserializing an Expr normalizes it, so cql2-json no longer round-trips byte for byte: and/or chains flatten, operator names take the schema's spelling, and timestamps are canonicalized. Expressions that used to compare unequal may now compare equal. This is Expr's Deserialize impl rather than any one entry point, so parse_json, Expr::try_from(Value), serde_json::from_str::<Expr>, an Expr field on a #[derive(Deserialize)] struct and the bindings' mapping constructors all agree
  • Breaking: eq is no longer accepted as an alias for =. CQL2 defines no such operator and the grammar never had one, so eq(a, b) is a user-defined function call and is now preserved as written. != remains an accepted spelling of <>, because the grammar does define it

Fixed

  • Security: to_sql and to_ducksql could be made to emit a string literal that terminates early, letting a crafted property value inject arbitrary SQL. textfield = 'x\'' OR 1=1 --' generated a predicate matching every row. Quotes in a literal are now escaped before the value reaches the SQL printer
  • BETWEEN no longer discards the rest of the expression. a BETWEEN 1 AND 2 AND b = 3 and b = 3 AND a BETWEEN 1 AND 2 each silently parsed to just the BETWEEN. It is now a grammar production over scalar operands, so the AND delimiting its bounds is not confused with the boolean connective (#255)
  • to_sql and to_ducksql parenthesize sub-expressions that bind more loosely than their parent, so A AND (B OR C) is no longer rendered as the inequivalent A AND B OR C (#255)
  • to_text no longer drops grouping in arithmetic: (a + b) * c was rendered as a + b * c, which parses back as a different expression
  • Input the grammar cannot consume in full is a parse error. Previously the parse ended at the last complete atom and the remainder was discarded, so a filter quietly meant something narrower than what was written
  • A property name beginning with a keyword is no longer misread. notes = 1 parsed as NOT (es = 1) and passed validation; null_count, true_color and false_positive were truncated to the keyword
  • s_intersects(geom, BBOX(...)) and the other spatial predicates evaluate against a bounding box. A geometry and a bbox were treated as incomparable operand kinds, so the predicate never folded and every row was rejected without error
  • INTERVAL('..', t) and INTERVAL(t, '..') evaluate. The specification admits .. for an unbounded bound, and two of the shipped examples use it; the predicate silently matched nothing and the SQL rendering was rejected by the database
  • A date means the whole day in the SQL backends as it always has in the evaluator, so the two no longer disagree at a day boundary. A bare literal compared against a date still asks whether the two name the same day
  • t_overlaps and t_overlappedBy require the earlier range to begin first. Their first conjunct compared one range's start to the other's end, which is implied by the rest of the condition, so they also matched ranges that are wholly contained in one another
  • A one-element array survives to_text. a_overlaps(x, ['a']) rendered as a_overlaps(x, ('a')), which re-parsed as a scalar and then matched nothing
  • Geometries no longer lose their third ordinate, in either direction, and a three-dimensional GEOMETRYCOLLECTION renders to text that parses back. Evaluating one previously aborted the process
  • A string literal containing an apostrophe round-trips, and a quoted identifier may contain a quote. O'Brien rendered as 'O''Brien', which the grammar then rejected
  • A leap second is no longer rewritten to a different instant during timestamp canonicalization
  • reduce returns errors instead of panicking on malformed input: wrong operand counts for isNull, not, casei, accenti and between, and and/or over two geometry-bearing operands, all aborted the process
  • Malformed expressions return errors instead of panicking across to_text and to_sql, including wrong operand counts for every operator and exponent-form numbers such as 1e5, which previously reached an unreachable!
  • cql2 --filter fails on an evaluation error instead of silently dropping the row it happened on
  • The function spelling in(a, 1, 2) produces the same expression as the infix a IN (1, 2); it previously produced a flat argument list from which the renderers kept only the first item
  • The function spelling isNull(a) produces the same operator name as the postfix a IS NULL
  • a OR b OR c parses to one n-ary or, matching the cql2-json encoding and the existing handling of and
  • Timestamp literals are canonical, so TIMESTAMP('2012-08-10T05:30:00.000000Z') and TIMESTAMP('2012-08-10T05:30:00Z') produce equal expressions
  • Operator names parsed from cql2-text carry the spelling the JSON encoding requires, so T_METBY(..) yields t_metBy. Names CQL2 does not define are function names and keep the case the author wrote, in both to_text and to_sql
  • to_text quotes a function name only where the cql2-text grammar requires it, rather than applying PostgreSQL's rule
  • String literals render in cql2-text form rather than PostgreSQL's E'...' escape-string syntax, which cql2-text cannot read back
  • NOT LIKE and NOT IN no longer depend on there being exactly one space between the words
  • \r counts as whitespace, so a CRLF-terminated expression parses
  • div is preserved as the integer-division operator CQL2 defines

... (truncated)

Commits
  • 78a8760 chore: release v0.5.8 (#254)
  • c1eab5a Fix/sql operator precedence (#256)
  • 2fa4b36 chore(deps): bump the production-dependencies group with 5 updates (#257)
  • 093c07b docs: update readme so the version doesn't go out of date (#225)
  • 281a605 chore(deps): bump the production-dependencies group with 4 updates (#253)
  • 0889467 chore: release v0.5.7 (#227)
  • 91e6549 chore(deps): bump the production-dependencies group across 1 directory with 1...
  • dce87e6 chore(deps): bump the github-actions group across 1 directory with 3 updates ...
  • bd0f96f ci: fix libduckdb download w/ cache (#252)
  • 6ea0085 fix: parse bbox into expr (#246)
  • Additional commits viewable in compare view

Updates rasterio from 1.5.0 to 1.5.1

Release notes

Sourced from rasterio's releases.

1.5.1

Version 1.5.1 fixes a number of bugs and unblocks the release of affine 3.0.0.

Thanks for being patient, folks! It's a weird time in the open source software world.

Bug fixes

  • DatasetBase.__dealloc__ has been removed and replaced by a __del__ method modeled after that of io.IOBase. This eliminates cryptic partial error messages from being printed as rio-calc finishes and finalizes (gh-3612).
  • The "bbox" attribute of GeoJSON data is no longer used by features.bounds() when optional parameters (transform and/or north_up=False) are provided. An unreported bug where transformation matrices were not applied to feature and geometry collections has also been fixed (gh-3609).
  • The size guard in sieve() was defective for 3D sources and has been fixed (gh-3606). As a side benefit, the dimensionality of output has been made consistent with the read() method of datasets: 3D output is no longer automatically squeezed to 2D. The previous behavior was a bug.
  • A test of subdataset support is skipped for GDAL versions >= 3.13.0 (gh-3534). The most recent versions of GDAL have a netCDF filename parsing defect.
  • Acknowledge new runtime warnings about invalid type casting using numpy (gh-3599).
  • Acknowledge the Python deprecation warnings from using "fork" start mode in testing warp error propagation (gh-3600).
  • Eliminate numpy deprecation warnings by reshaping views instead of setting their shape attributes (gh-3592).
  • Require pyparsing version >= 3.0 to eliminate a deprecation warning for use of parseString (gh-3551).
  • Remove a dependency on unmainted cligj by bringing some CLI options back into Rasterio (gh-3550).
  • Avoid a ValueError in reproject() when using a "==" comparison between array masks and np.ma.nomasked (gh-3531).

Documentation

  • Note that PROJ transformation grids and the PROJ_NETWORK environment variable are required to apply vertical (datum) shifts when reprojecting or transforming (gh-2929).

Dependencies

  • Rasterio 1.5.1 is compatible with affine versions 3.0rc1 and newer.

Packaging:

  • Wheels include GDAL 3.12.4, netCDF 4.10.1, cURL 8.20.0, and PROJ 9.8.1. Python 3.15 is supported for the first time.
Changelog

Sourced from rasterio's changelog.

1.5.1 (2026-08-07)

Bug fixes:

  • DatasetBase.dealloc has been removed and replaced by a del method modeled after that of io.IOBase. This eliminates cryptic partial error messages from being printed as rio-calc finishes and finalizes (gh-3612).
  • The "bbox" attribute of GeoJSON data is no longer used by features.bounds() when optional parameters (transform and/or north_up=False) are provided. An unreported bug where transformation matrices were not applied to feature and geometry collections has also been fixed (gh-3609).
  • The size guard in sieve() was defective for 3D sources and has been fixed (gh-3606). As a side benefit, the dimensionality of output has been made consistent with the read() method of datasets: 3D output is no longer automatically squeezed to 2D. The previous behavior was a bug.
  • A test of subdataset support is skipped for GDAL versions >= 3.13.0 (gh-3534). The most recent versions of GDAL have a NetCDF filename parsing defect.
  • Acknowledge new runtime warnings about invalid type casting using numpy (gh-3599).
  • Acknowledge the Python deprecation warnings from using "fork" start mode in testing warp error propagation (gh-3600).
  • Eliminate numpy deprecation warnings by reshaping views instead of setting their shape attributes (gh-3592).
  • Require pyparsing version >= 3.0 to eliminate a deprecation warning for use of parseString (gh-3551).
  • Remove a dependency on unmaintained cligj by bringing some CLI options back into Rasterio (gh-3550).
  • Avoid a ValueError in reproject() when using a "==" comparison between array masks and np.ma.nomasked (gh-3531).

Documentation:

  • Note that PROJ transformation grids and the PROJ_NETWORK environment variable are required to apply vertical (datum) shifts when reprojecting or transforming (gh-2929).

Dependencies:

  • Rasterio 1.5.1 is compatible with affine versions 3.0rc1 and newer.

Packaging:

  • Wheels include GDAL 3.12.4, netCDF 4.10.1, cURL 8.20.0, and PROJ 9.8.1.
Commits

Updates mkdocs-material from 9.7.6 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates. After this date, the project will remain available on PyPI and GitHub, but no further maintenance is planned except in exceptional circumstances.

For users looking for a long-term, actively developed successor, we're building Zensical – a next-generation static site generator designed for technical documentation. If you're planning a new documentation project or evaluating your long-term options, we invite you to take a look.

Organizations requiring support beyond this date are welcome to get in touch to discuss available options.

Read the full announcement on our blog

Changes

  • Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

  • Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

Updates jupyterlab from 4.6.2 to 4.6.3

Release notes

Sourced from jupyterlab's releases.

v4.6.3

4.6.3

(Full Changelog)

Bugs fixed

  • Fix Shift-click cell selection after editor text selection #19243 (@​MUFFANUJ)
  • Fix active cell prompt and source blink in notebook tools & prevent a memory leak #19168 (@​MUFFANUJ)
  • Update the item positions when an item is removed from reactive toolbar #19227 (@​brichet)
  • Fix variable inspection, document autocomplete and variable inspect/render #19234 (@​krassowski)
  • Show "starting" rather than "idle" status when changing kernel via SessionContext.changeKernel() #19166 (@​Zsailer)

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​brichet (activity) | @​jtpio (activity) | @​krassowski (activity) | @​MUFFANUJ (activity) | @​Zsailer (activity)

Commits
  • e7255a9 [ci skip] Publish 4.6.3
  • 08c20a1 Backport PR #19243 on branch 4.6.x (Fix Shift-click cell selection after edit...
  • 4e08e0d Backport PR #19168 on branch 4.6.x (Fix active cell prompt and source blink i...
  • 9653490 Backport PR #19227 on branch 4.6.x (Update the item positions when an item is...
  • 243ee01 Backport PR #19234 on branch 4.6.x (Fix variable inspection, document autocom...
  • 9b7efed Backport PR #19166 on branch 4.6.x (Show "starting" rather than "idle" status...
  • edc8390 Backport PR #19212 on branch 4.6.x (Update JEP 91 link to the new MyST docs U...
  • 4cffbed Backport PR #19204 on branch 4.6.x (Update Altair snapshot) (#19205)
  • 7d0f5b6 Backport PR #19193 on branch 4.6.x (Switch pre-commit to language: system) ...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the python-dependencies group with 7 updates chore(deps): bump the python-dependencies group across 1 directory with 7 updates Sep 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-c2f8ac2acc branch from d6095b5 to 849502e Compare September 2, 2026 22:07
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-c2f8ac2acc branch from 849502e to 674c456 Compare September 2, 2026 22:15
…th 7 updates

Bumps the python-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pystac](https://github.com/stac-utils/pystac) | `1.15.1` | `1.15.2` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.3` |
| [cql2](https://github.com/developmentseed/cql2-rs) | `0.5.6` | `0.6.0` |
| [rasterio](https://github.com/rasterio/rasterio) | `1.5.0` | `1.5.1` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.6` | `9.7.7` |
| [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.6.2` | `4.6.3` |



Updates `pystac` from 1.15.1 to 1.15.2
- [Release notes](https://github.com/stac-utils/pystac/releases)
- [Changelog](https://github.com/stac-utils/pystac/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac@v1.15.1...v1.15.2)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

Updates `ruff` from 0.15.22 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.16.3)

Updates `cql2` from 0.5.6 to 0.6.0
- [Release notes](https://github.com/developmentseed/cql2-rs/releases)
- [Changelog](https://github.com/developmentseed/cql2-rs/blob/main/CHANGELOG.md)
- [Commits](developmentseed/cql2-rs@cql2-v0.5.6...cql2-v0.6.0)

Updates `rasterio` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/rasterio/rasterio/releases)
- [Changelog](https://github.com/rasterio/rasterio/blob/main/CHANGES.txt)
- [Commits](rasterio/rasterio@1.5.0...1.5.1)

Updates `mkdocs-material` from 9.7.6 to 9.7.7
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.6...9.7.7)

Updates `jupyterlab` from 4.6.2 to 4.6.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.6.2...@jupyterlab/lsp@4.6.3)

---
updated-dependencies:
- dependency-name: cql2
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: jupyterlab
  dependency-version: 4.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pystac
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: rasterio
  dependency-version: 1.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-c2f8ac2acc branch from 674c456 to 35b2405 Compare September 2, 2026 22:23
@gadomski
gadomski merged commit 3257f1a into main Sep 2, 2026
2 checks passed
@gadomski
gadomski deleted the dependabot/uv/python-dependencies-c2f8ac2acc branch September 2, 2026 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant