Skip to content

Bump the minor-and-patch group across 1 directory with 6 updates#207

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-and-patch-140a9c5aad
Open

Bump the minor-and-patch group across 1 directory with 6 updates#207
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-and-patch-140a9c5aad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 6 updates in the / directory:

Package From To
requests 2.33.1 2.34.2
ruff 0.13.2 0.15.16
tox 4.30.2 4.55.1
tox-uv 1.28.0 1.35.2
types-requests 2.32.4.20250913 2.33.0.20260518
types-deprecated 1.2.15.20250304 1.3.1.20260520

Updates requests from 2.33.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates ruff from 0.13.2 to 0.15.16

Release notes

Sourced from ruff's releases.

0.15.16

Release Notes

Released on 2026-06-04.

Preview features

  • [flake8-async] Implement yield-in-context-manager-in-async-generator (ASYNC119) (#24644)
  • [pylint] Narrow diagnostic range and exclude cases without exception handlers (PLW0717) (#25440)
  • [ruff] Treat yield before break from a terminal loop as terminal (RUF075) (#25447)

Bug fixes

  • [eradicate] Avoid flagging ruff:ignore comments as code (ERA001) (#25537)
  • [eradicate] Fix ERA001/RUF100 conflict when noqa is on commented-out code (#25414)
  • [pyflakes] Avoid removing the format call when it would change behavior (F523) (#25320)
  • [pylint] Avoid syntax errors in invalid character replacements in f-strings before Python 3.12 (PLE2510, PLE2512, PLE2513, PLE2514, PLE2515) (#25544)
  • [pyupgrade] Avoid converting format calls with more kinds of side effects (UP032) (#25484)

Rule changes

  • [flake8-pytest-style] Avoid fixes for ambiguous argnames and argvalues combinations (PT006) (#24776)

Performance

  • Drop excess capacity from statement suites during parsing (#25368)

Documentation

  • [pydocstyle] Improve discoverability of rules enabled for each convention (#24973)
  • [ruff] Restore example code for Python versions before 3.15 (RUF017) (#25439)
  • Fix typo bin/active → bin/activate in tutorial (#25473)

Other changes

  • Shrink additional parser AST collections (#25465)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.16

Released on 2026-06-04.

Preview features

  • [flake8-async] Implement yield-in-context-manager-in-async-generator (ASYNC119) (#24644)
  • [pylint] Narrow diagnostic range and exclude cases without exception handlers (PLW0717) (#25440)
  • [ruff] Treat yield before break from a terminal loop as terminal (RUF075) (#25447)

Bug fixes

  • [eradicate] Avoid flagging ruff:ignore comments as code (ERA001) (#25537)
  • [eradicate] Fix ERA001/RUF100 conflict when noqa is on commented-out code (#25414)
  • [pyflakes] Avoid removing the format call when it would change behavior (F523) (#25320)
  • [pylint] Avoid syntax errors in invalid character replacements in f-strings before Python 3.12 (PLE2510, PLE2512, PLE2513, PLE2514, PLE2515) (#25544)
  • [pyupgrade] Avoid converting format calls with more kinds of side effects (UP032) (#25484)

Rule changes

  • [flake8-pytest-style] Avoid fixes for ambiguous argnames and argvalues combinations (PT006) (#24776)

Performance

  • Drop excess capacity from statement suites during parsing (#25368)

Documentation

  • [pydocstyle] Improve discoverability of rules enabled for each convention (#24973)
  • [ruff] Restore example code for Python versions before 3.15 (RUF017) (#25439)
  • Fix typo bin/active → bin/activate in tutorial (#25473)

Other changes

  • Shrink additional parser AST collections (#25465)

Contributors

0.15.15

... (truncated)

Commits

Updates tox from 4.30.2 to 4.55.1

Release notes

Sourced from tox's releases.

v4.55.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.55.0...4.55.1

v4.55.0

What's Changed

Full Changelog: tox-dev/tox@4.54.0...4.55.0

v4.54.0

What's Changed

Full Changelog: tox-dev/tox@4.53.1...4.54.0

v4.53.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.53.0...4.53.1

v4.53.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.55.1

  • TOX_OVERRIDE (and -x/--override) now propagates through configuration references. Previously, overriding a base value that was later referenced via {[section]key} (ini) or {replace = "ref", of = [...]} (toml) was ignored because reference resolution read the raw file value, bypassing the override system - by :user:tales-aparecida. (:issue:3950) (:issue:3950)

v4.55.0 (2026-05-28)

Features - 4.55.0

  • Automatically pass the TERMINFO environment variable to tox subprocesses if the output is a TTY. This variable is used by Ghostty to communicate terminal capabilities to programs. (:issue:3946)

Bug fixes - 4.55.0

  • When the constraints configuration option is set, constrain_package_deps and use_frozen_constraints are now ignored. Previously, both the user-provided constraints file and the auto-generated constraints file were passed to pip during install_package_deps, which could cause resolver conflicts when the same package appeared in both files - by :user:gaborbernat. (:issue:3945) (:issue:3945)

v4.54.0 (2026-05-12)

Features - 4.54.0

  • Declare the runtime dependencies of the tox.pytest plugin (pytest, devpi-process and pytest-mock) under a new testing extra, so plugin authors can pull them in via tox[testing] - by :user:gaborbernat. (:issue:3938, :issue:3940)

Bug fixes - 4.54.0

  • Extend the generated TOML schema to cover every replace table form (env, ref, posargs, glob, if), including conditional replacements used inside commands. A guard test asserts the schema stays in sync with the loader implementation so future replace types cannot be added without a corresponding schema entry. (:issue:3939)

v4.53.1 (2026-05-02)

Bug fixes - 4.53.1

... (truncated)

Commits

Updates tox-uv from 1.28.0 to 1.35.2

Release notes

Sourced from tox-uv's releases.

1.35.2

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.35.1...1.35.2

1.35.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.35.0...1.35.1

1.35.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.34.0...1.35.0

1.34.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.33.4...1.34.0

1.33.4

What's Changed

... (truncated)

Commits
  • 595721d 🐛 fix(lock): honor --recreate in uv-venv-lock-runner (#338)
  • 1026808 [pre-commit.ci] pre-commit autoupdate (#337)
  • 3f7ea4d [pre-commit.ci] pre-commit autoupdate (#334)
  • f976fc1 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#333)
  • c0fabe3 Honor constraints opt for all packages (#332)
  • d4aa96d [pre-commit.ci] pre-commit autoupdate (#331)
  • ac78519 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#329)
  • 8bab9b8 [pre-commit.ci] pre-commit autoupdate (#328)
  • 8b0497e fix(lock-runner): respect UV_FROZEN env var and --frozen in uv_sync_flags (#327)
  • ad30d57 build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#324)
  • Additional commits viewable in compare view

Updates types-requests from 2.32.4.20250913 to 2.33.0.20260518

Commits

Updates types-deprecated from 1.2.15.20250304 to 1.3.1.20260520

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 18, 2026
@dependabot dependabot Bot requested a review from bh2smith as a code owner June 18, 2026 12:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 18, 2026
@cursor

cursor Bot commented Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
Bumps the core HTTP client (requests 2.34.x with new inline types and behavior fixes) while also upgrading Ruff across minor versions; no app code changed, so risk is mainly resolver/CI and subtle HTTP or typing regressions.

Overview
Dependency-only update: pyproject.toml widens the runtime requests constraint from ~=2.33.0 to >=2.33,<2.35, and uv.lock is refreshed so resolved requests moves 2.33.1 → 2.34.2 along with dev tools (ruff 0.13.2 → 0.15.16, tox 4.30.2 → 4.55.1, tox-uv 1.28.0 → 1.35.2, plus types-requests / types-deprecated stubs). Lockfile churn also reflects transitive updates (e.g. tox dropping chardet, adding tomli-w / python-discovery, tox-uv split into tox-uv + tox-uv-bare).

No library source changes; HTTP still goes through requests in dune_client/api/base.py. Reviewers should rely on CI/tox after the ruff major jump and confirm requests 2.34 typing/runtime behavior with mypy if types are strict.

Reviewed by Cursor Bugbot for commit c9ac9dc. Configure here.

@dependabot dependabot Bot changed the title Bump the minor-and-patch group with 6 updates Bump the minor-and-patch group across 1 directory with 6 updates Jun 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/minor-and-patch-140a9c5aad branch from c9ac9dc to 8847965 Compare June 18, 2026 12:46
@dependabot
Bump the minor-and-patch group across 1 directory with 6 updates
6ee22c2 
Bumps the minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.13.2` | `0.15.16` |
| [tox](https://github.com/tox-dev/tox) | `4.30.2` | `4.55.1` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.28.0` | `1.35.2` |
| [types-requests](https://github.com/python/typeshed) | `2.32.4.20250913` | `2.33.0.20260518` |
| [types-deprecated](https://github.com/python/typeshed) | `1.2.15.20250304` | `1.3.1.20260520` |



Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `ruff` from 0.13.2 to 0.15.16
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.2...0.15.16)

Updates `tox` from 4.30.2 to 4.55.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.30.2...4.55.1)

Updates `tox-uv` from 1.28.0 to 1.35.2
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.28.0...1.35.2)

Updates `types-requests` from 2.32.4.20250913 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-deprecated` from 1.2.15.20250304 to 1.3.1.20260520
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.15.16
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tox
  dependency-version: 4.55.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tox-uv
  dependency-version: 1.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: types-deprecated
  dependency-version: 1.3.1.20260520
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/minor-and-patch-140a9c5aad branch from 8847965 to 6ee22c2 Compare June 18, 2026 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bh2smith bh2smith bh2smith approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bh2smith