Repository navigation
Python: build(deps-dev): bump the basics group in /python/packages/lab with 2 updates - #9273
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the basics group in /python/packages/lab with 2 updates: [uv](https://github.com/astral-sh/uv) and [prek](https://github.com/j178/prek). Updates `uv` from 0.12.22 to 0.12.23 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/0.12.23/CHANGELOG.md) - [Commits](astral-sh/uv@0.12.22...0.12.23) Updates `prek` from 0.5.4 to 0.5.5 - [Release notes](https://github.com/j178/prek/releases) - [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md) - [Commits](j178/prek@v0.5.4...v0.5.5) --- updated-dependencies: - dependency-name: uv dependency-version: 0.12.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: basics - dependency-name: prek dependency-version: 0.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: basics ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
dependabot
Bot
requested review from
SergeyMenshykh,
Eduard van Valkenburg (eavanvalkenburg),
Roger Barreto (rogerbarreto) and
westey (westey-m)
as code owners
October 12, 2026 08:14
dependabot
Bot
requested review from
Tao Chen (TaoChenOSU),
Giles Odigwe (giles17),
Jose Alvarez (jpalvarezl),
Evan Mattson (moonbox3) and
sophia-ramsey
as code owners
October 12, 2026 08:14
github-actions
Bot
changed the title
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The dependency declarations and lockfile entries are valid and consistent.
0 open findings
What changed in this PR
Updates Lab’s pinned development tooling dependencies.
Changes:
- Bumps
uvfrom 0.12.22 to 0.12.23. - Bumps
prekfrom 0.5.4 to 0.5.5. - Regenerates the Lab lockfile with normalized platform markers.
| File | Description |
|---|---|
python/packages/lab/pyproject.toml |
Updates development dependency pins. |
python/packages/lab/uv.lock |
Records updated packages, artifacts, hashes, and normalized markers. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.
Member
|
Superseded by #9292, which consolidated this dependency update and has now merged. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/uv/python/packages/lab/basics-77e85d618e
branch
October 12, 2026 12:39
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the basics group in /python/packages/lab with 2 updates: uv and prek.
Updates
uvfrom 0.12.22 to 0.12.23Release notes
Sourced from uv's releases.
... (truncated)
Changelog
Sourced from uv's changelog.
Commits
46b84fdBump version to 0.12.23 (#22165)798650aValidate project interpreters by construction (#22086)2118b61Sync latest Python releases (#22164)ba5833fMake metadata constructors infallible (#22160)a3eb76fSupport frozen sync without workspace manifests (#22018)acc5ee2Reject alternate sources for workspace members across forks (#22153)89e0ee5Support workspace metadata without workspace manifests (#22017)d58db1aSupport frozen trees without workspace manifests (#22016)9914833Support frozen exports without workspace manifests (#22007)1f8d2b7Use macOS 15 runners for tests (#22157)Updates
prekfrom 0.5.4 to 0.5.5Release notes
Sourced from prek's releases.
... (truncated)
Changelog
Sourced from prek's changelog.
Commits
77cca67Bump version to 0.5.5 (#2839)f4e2695Update Rust crate jsonc-parser to 0.34.0 (#2838)399e9d1Update GitHub Actions (#2837)19e77d1Update prek hooks (#2771)e261e0cUpdate dependency uv to v0.12.19 (#2835)bc53e2cUpdate Rust crate thiserror to v2.0.21 (#2836)4a981d2Default missing core.fileMode in shebang checks (#2832)e031022Preserve empty trailing-whitespace character sets (#2830)0b1871aNormalize explicit paths in shebang index checks (#2831)9d4aedeMatch protected branch patterns from the start (#2829)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions