Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 6 updates - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-6b1ac5bce7
Open

chore(deps): bump the python-dependencies group across 1 directory with 6 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-6b1ac5bce7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-dependencies group with 6 updates in the / directory:

Package From To
pydantic 2.13.4 2.13.5
python-dotenv 1.2.2 1.2.3
anthropic 0.116.0 1.4.0
unidiff 0.7.5 1.0.0
ruff 0.15.21 0.16.6
mypy 2.3.0 2.3.1

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates anthropic from 0.116.0 to 1.4.0

Release notes

Sourced from anthropic's releases.

v1.4.0

1.4.0 (2026-09-04)

Full Changelog: v1.3.0...v1.4.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (9fce1e4)
  • api: add named types for organization compliance settings state (1de1957)
  • api: add support for sending a workspace ID on more endpoints (d1d2c01)

Bug Fixes

  • client: raise a clear error when an httpx object is passed instead of an httpx2 one (9447099)
  • repair custom-code merge in messages resources (#580) (85454ca)

Chores

  • examples: refresh platform model IDs (#499) (182abb5)
  • internal: bundle the mock server spec and update dev tooling (f9b0cf2)
  • internal: clean up code comments (#578) (d202327)
  • internal: fix mypy unreachable error in detect-breaking-changes script (07834f6)
  • internal: narrower codeowners scope (daca8f1)
  • internal: revert codeowners change (41aa767)
  • tests: remove stale warning filters (ba9bf35)
  • tests: reword the skip reason on the path-level query param tests (6b5046a)

Documentation

  • api: update a few doc strings (26c509d)

v1.3.0

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.4.0 (2026-09-04)

Full Changelog: v1.3.0...v1.4.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (9fce1e4)
  • api: add named types for organization compliance settings state (1de1957)
  • api: add support for sending a workspace ID on more endpoints (d1d2c01)

Bug Fixes

  • client: raise a clear error when an httpx object is passed instead of an httpx2 one (9447099)
  • repair custom-code merge in messages resources (#580) (85454ca)

Chores

  • examples: refresh platform model IDs (#499) (182abb5)
  • internal: bundle the mock server spec and update dev tooling (f9b0cf2)
  • internal: clean up code comments (#578) (d202327)
  • internal: fix mypy unreachable error in detect-breaking-changes script (07834f6)
  • internal: narrower codeowners scope (daca8f1)
  • internal: revert codeowners change (41aa767)
  • tests: remove stale warning filters (ba9bf35)
  • tests: reword the skip reason on the path-level query param tests (6b5046a)

Documentation

  • api: update a few doc strings (26c509d)

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)
  • ci: don't hard-wrap detect-breaking-changes output (b5be779)
  • client: derive multipart filename for file tuples passed without one (a9f3fb4)

... (truncated)

Commits
  • 62de60b Merge pull request #1905 from anthropics/release-please--branches--main--chan...
  • 3be44ac release: 1.4.0
  • 1de1957 feat(api): add named types for organization compliance settings state
  • 6b5046a chore(tests): reword the skip reason on the path-level query param tests
  • 182abb5 chore(examples): refresh platform model IDs (#499)
  • 07834f6 chore(internal): fix mypy unreachable error in detect-breaking-changes script
  • ba9bf35 chore(tests): remove stale warning filters
  • 9fce1e4 feat(api): add Claude Tag category and user breakdowns to usage reports
  • ea8a347 Build SDK
  • f9b0cf2 chore(internal): bundle the mock server spec and update dev tooling
  • Additional commits viewable in compare view

Updates unidiff from 0.7.5 to 1.0.0

Release notes

Sourced from unidiff's releases.

v1.0.0

Major modernization: Python 2 is dropped, the code is fully type-annotated, packaging moves to pyproject.toml, and several long-standing parser issues are fixed.

⚠️ Breaking

  • Minimum supported Python is now 3.9 (Python 2 dropped).
  • PatchedFile.path now also strips git mnemonic prefixes (c/ i/ o/ w/ and 1/ 2/), so git diff --cached paths resolve to the plain filename (c/README.md → README.md). Standard a//b/ diffs are unaffected. (#81, #27)

Highlights

  • File modes via source_mode/target_mode + an is_symlink property. (#125)
  • PatchedFile.diff_line_no to locate hunkless/binary entries. (#122)
  • Accept bytes input directly (decoded with the given encoding, default UTF-8). (#43)
  • Real PEP 484 type annotations + generics (typed iteration) and a py.typed marker. (#117)
  • Parse difflib empty-filename output (#115) and fix a trailing-newline error on hunkless git format-patch files (#73, #74); includes the quoted-filename fix missing from 0.7.5 (#113).
  • from_filename/from_string gain metadata_only; python -m unidiff works; packaging on pyproject.toml with GitHub Actions CI.

Thanks to @​danwald, @​cpina, @​tovrstra and @​huichen-cs.

Full changelog: matiasb/python-unidiff@v0.7.5...v1.0.0

Changelog

Sourced from unidiff's changelog.

1.0.0 - 2026-07-25

  • Dropped Python 2 support; the minimum supported version is now Python 3.9.
  • Converted to real PEP 484 type annotations and generic containers, and shipped a py.typed marker (#117).
  • Migrated packaging to pyproject.toml; the sdist now includes the tests (#99), and the unidiff command is also runnable as python -m unidiff.
  • Replaced Travis CI with GitHub Actions (tests + mypy).
  • Exposed git file modes via PatchedFile.source_mode / target_mode and an is_symlink property (#125).
  • Added support for git mnemonic source/target prefixes (i/ w/ c/ o/ and 1/ 2/), which also fixes git diff --cached paths (#81, #27).
  • Exposed PatchedFile.diff_line_no to locate hunkless (e.g. binary) file entries in the diff (#122).
  • PatchSet and PatchSet.from_string now accept bytes input directly, decoding with the given encoding (default UTF-8) (#43).
  • PatchSet.from_filename and PatchSet.from_string now accept the metadata_only argument.
  • Parse diffs with empty filenames, e.g. difflib.unified_diff output (#115).
  • Fixed a trailing-newline parse error on hunkless files in git format-patch output (#73, #74).
  • Documented parsing of content with embedded carriage returns / control characters (#120).
  • Rewrote the README in Markdown.
Commits
  • 5ff054b Merge pull request #139 from matiasb/release-1.0.0
  • 3182e41 Preparing 1.0.0 release
  • d08ddd2 Merge pull request #141 from matiasb/readme-markdown
  • b13996f Convert README from reStructuredText to Markdown
  • ff053b8 Merge pull request #140 from matiasb/metadata-only-and-examples
  • f7f4b3e Update README
  • b5d4cbc Merge pull request #138 from matiasb/review/13-hunkless-newline
  • 21400e2 Fix trailing newline error on hunkless files (#73, #74)
  • 6638235 Merge pull request #137 from matiasb/review/12-bytes-input
  • dea6675 Accept bytes input directly (#43)
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Commits

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from kyletser as a code owner September 1, 2026 05:39
@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
f899c8b 
…th 6 updates

Bumps the python-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.116.0` | `1.4.0` |
| [unidiff](https://github.com/matiasb/python-unidiff) | `0.7.5` | `1.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.16.6` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `anthropic` from 0.116.0 to 1.4.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.116.0...v1.4.0)

Updates `unidiff` from 0.7.5 to 1.0.0
- [Release notes](https://github.com/matiasb/python-unidiff/releases)
- [Changelog](https://github.com/matiasb/python-unidiff/blob/main/HISTORY)
- [Commits](matiasb/python-unidiff@v0.7.5...v1.0.0)

Updates `ruff` from 0.15.21 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.6)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: anthropic
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: unidiff
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-6b1ac5bce7 branch from beef308 to f899c8b Compare September 9, 2026 06:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kyletser kyletser Awaiting requested review from kyletser kyletser is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants