Skip to content

build(deps): bump the python-dependencies group with 3 updates - #50

Merged
radusuciu merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-3697a20682
Sep 27, 2026
Merged

build(deps): bump the python-dependencies group with 3 updates#50
radusuciu merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-3697a20682

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 3 updates: beets, git-cliff and ty.

Updates beets from 2.14.0 to 2.14.1

Release notes

Sourced from beets's releases.

Release v2.14.1

Bug fixes

  • Discogs Plugin: Read the release month and day from the API's released field instead of only the year. Fix Discogs match overwriting month and day tags on import.
  • import command Fix interactive importer ignoring candidates from manual search (e) and manual ID (i) entry. 🐛 (#7000)
  • Lyrics Plugin: Support 3-decimal millisecond timestamps (e.g. [mm:ss.xxx]) in LRC parsing, fixing an issue where synced lyrics with millisecond precision were erroneously rejected and fell back to plain lyrics. 🐛 (#7001)
  • Add a configurable tempfile_prefix for temporary files created during cross-filesystem moves, avoiding hidden-file behavior on Windows and Samba shares caused by a hard-coded leading dot ('.'). 🐛 (#7033)
  • Empty leading path-format fields (e.g. from missing metadata) combined with a custom Replace Plugin configuration no longer produce an absolute destination path that escapes the library or Convert Plugin destination directory; leading path separators are now stripped from the rendered path. 🐛 (#4889)
  • Skip archive importer tests (TestImport7z and TestImportRar) when their optional dependencies (py7zr or rarfile / unrar) are not available. 🐛 (#7002)

Other changes

  • Duplicates Plugin: Improve the documentation of the checksum option: explain how the external command is run, remove the broken md5sum {file} example and show how to use such commands through a wrapper script. 🐛 (#3979)
  • Use bytes instead of memoryview for SQLite path storage and query parameters.
Changelog

Sourced from beets's changelog.

2.14.1 (September 17, 2026)

.. New features ~~~~~~~~~~~~

Bug fixes


- :doc:`plugins/lyrics`: Support 3-decimal millisecond timestamps (e.g.
  ``[mm:ss.xxx]``) in LRC parsing, fixing an issue where synced lyrics with
  millisecond precision were erroneously rejected and fell back to plain lyrics.
  :bug:`7001`
- Skip archive importer tests (``TestImport7z`` and ``TestImportRar``) when
  their optional dependencies (``py7zr`` or ``rarfile`` / ``unrar``) are not
  available. :bug:`7002`
- :doc:`plugins/discogs`: Read the release month and day from the API's
  ``released`` field instead of only the year. Fix Discogs match overwriting
  month and day tags on import.
- Empty leading path-format fields (e.g. from missing metadata) combined with a
  custom ``replace`` configuration no longer produce an absolute destination
  path that escapes the library or :doc:`plugins/convert` destination directory;
  leading path separators are now stripped from the rendered path. :bug:`4889`
- Add a configurable ``tempfile_prefix`` for temporary files created during
  cross-filesystem moves, avoiding hidden-file behavior on Windows and Samba
  shares caused by a hard-coded leading dot ('.'). :bug:`7033`
- :ref:`import-cmd` Fix interactive importer ignoring candidates from manual
  search (``e``) and manual ID (``i``) entry. :bug:`7000`

..
For plugin developers
~~~~~~~~~~~~~~~~~~~~~


Other changes

  • :doc:plugins/duplicates: Improve the documentation of the checksum option: explain how the external command is run, remove the broken md5sum {file} example and show how to use such commands through a wrapper script. :bug:3979
  • Use bytes instead of memoryview for SQLite path storage and query parameters.
Commits
  • 00724b7 Increment version to 2.14.1
  • d91df40 importer: restore candidate update from manual search and ID prompts (#7005)
  • 32bc460 Fix changelog
  • fddd693 Merge branch 'master' into fix-manual-candidates-regression
  • 998f5c5 Use beetbox-release-bot to commit version bump during release (#7035)
  • 2d722b5 Replace memoryview with bytes in path storage (#6957)
  • 81232dd Replace memoryview with bytes
  • f267e16 Use beetbox-release-bot to commit version bump
  • 3a5f140 Document MusicBrainz album duplicate keys (#7028)
  • df5afda Add YAML highlighting to duplicate-key example
  • Additional commits viewable in compare view

Updates git-cliff from 2.13.1 to 2.14.2

Release notes

Sourced from git-cliff's releases.

Release v2.14.2

animation

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

Release v2.14.1

animation

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)

... (truncated)

Changelog

Sourced from git-cliff's changelog.

2.14.2 - 2026-09-18

⛰️ Features

  • (parser) Allow commits to be parsed by multiple parsers (#1611) - (4644e5f)

🐛 Bug Fixes

  • (args) Resolve --workdir to a repo-relative include path (#1369) (#1627) - (094593f)
  • (parser) Require all commit parser fields to match (#1616) - (91143b2)

📚 Documentation

🧪 Testing

  • (args) Cover configuration file resolution (#1617) - (8fc0aef)
  • (git) Disable tag signing when running tests (#1641) - (28c8bab)

⚙️ Miscellaneous Tasks

❤️ New Contributors

2.14.1 - 2026-09-01

⛰️ Features

  • (args) [breaking] Discover config when --config is omitted (#1584) - (b367384)
  • (args) Add default value for --prepend option (#1549) - (03a9c80)
  • (bump) Add no_increment_regex config (#1522) - (61c5e4c)
  • (changelog) Support opt-in Markdown formatting (#1610) - (286ea93)
  • (cli) Support user-defined templates for --init (#1583) - (b7c25f8)
  • (cli) Add --body-file for changelog templates (#1574) - (7437023)
  • (context) Add pr_numbers field to RemoteContributor (#1546) - (48fd98f)
  • (examples) Add GitLab built-in changelog templates (#1561) - (c92bd16)
  • (git) Support limiting processed tags (#1493) - (d13a61c)
  • (git) Ignore commits listed in .git-blame-ignore-revs (#1585) - (89247f4)
  • (remote) [breaking] Expose the pull request author as commit.remote.pr_author (#1613) - (017e10b)
  • (remote) Add configurable HTTP timeout for metadata requests (#1580) - (c559920)
  • (template) Add group_by_scope filter (#1547) - (dd5f305)
  • (template) Add commit_groups filter for ordered group rendering (#1518) - (8a2a331)

... (truncated)

Commits

Updates ty from 0.0.81 to 0.0.83

Release notes

Sourced from ty's releases.

0.0.83

Release Notes

Released on 2026-09-21.

Bug fixes

  • Fix hangs from repeated partial application (#28754)
  • Preserve PEP 695 bindings across nested classes (#28723)

LSP server

  • Include required imports in every inlay hint (#28724)
  • Preserve fast name filtering for normalized Unicode source (#28701)
  • Refresh diagnostics after workspace configuration changes (#28755)

Diagnostic improvements

  • Expand unreachable-code annotations for redundant conditions (#28674)
  • Improve diagnostics for async generator stubs (#28692)
  • Improve primary diagnostic annotations for redundant-condition(-strict) diagnostics (#28666)
  • Point misplaced tuple ellipsis diagnostics at each ellipsis (#28709)

Other changes

  • Add rules that detect suspicious uses of Callable, Iterable, Iterator or Generator types in a boolean context (#28554)
  • Allow slots to override abstract properties (#28698)
  • Avoid leaking Unknown from unconstrained collection use-sites (#28659)
  • Diagnose unguarded cycles in implicit and PEP 613 aliases (#28704)
  • Eagerly bind unused Self receivers (#28662)
  • Generalize receiver binding for wrapped callables (#28725)
  • More faithful representation of bound methods (#28410)
  • Only classify evidence bounds for constrained type variables (#28700)
  • Preserve inferred bindings during annotation cycles (#28717)
  • Preserve quoted aliases during cycle recovery (#28710)
  • Reject class-scoped type variables in init receivers (#28706)
  • Reject unsafe TypedDict updates from hidden fields (#28711)
  • Respect fixed caller type variables when selecting constraints (#28652)
  • Reuse cached type alias inference for diagnostics (#28696)
  • Simplify unions of disjoint exclusions (#28684)
  • Update typing conformance suite (#28718)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.83

Released on 2026-09-21.

Bug fixes

  • Fix hangs from repeated partial application (#28754)
  • Preserve PEP 695 bindings across nested classes (#28723)

LSP server

  • Include required imports in every inlay hint (#28724)
  • Preserve fast name filtering for normalized Unicode source (#28701)
  • Refresh diagnostics after workspace configuration changes (#28755)

Diagnostic improvements

  • Expand unreachable-code annotations for redundant conditions (#28674)
  • Improve diagnostics for async generator stubs (#28692)
  • Improve primary diagnostic annotations for redundant-condition(-strict) diagnostics (#28666)
  • Point misplaced tuple ellipsis diagnostics at each ellipsis (#28709)

Other changes

  • Add rules that detect suspicious uses of Callable, Iterable, Iterator or Generator types in a boolean context (#28554)
  • Allow slots to override abstract properties (#28698)
  • Avoid leaking Unknown from unconstrained collection use-sites (#28659)
  • Diagnose unguarded cycles in implicit and PEP 613 aliases (#28704)
  • Eagerly bind unused Self receivers (#28662)
  • Generalize receiver binding for wrapped callables (#28725)
  • More faithful representation of bound methods (#28410)
  • Only classify evidence bounds for constrained type variables (#28700)
  • Preserve inferred bindings during annotation cycles (#28717)
  • Preserve quoted aliases during cycle recovery (#28710)
  • Reject class-scoped type variables in init receivers (#28706)
  • Reject unsafe TypedDict updates from hidden fields (#28711)
  • Respect fixed caller type variables when selecting constraints (#28652)
  • Reuse cached type alias inference for diagnostics (#28696)
  • Simplify unions of disjoint exclusions (#28684)
  • Update typing conformance suite (#28718)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the python-dependencies group with 3 updates
160d839 
Bumps the python-dependencies group with 3 updates: [beets](https://github.com/beetbox/beets), [git-cliff](https://github.com/orhun/git-cliff) and [ty](https://github.com/astral-sh/ty).


Updates `beets` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/beetbox/beets/releases)
- [Changelog](https://github.com/beetbox/beets/blob/master/docs/changelog.rst)
- [Commits](beetbox/beets@v2.14.0...v2.14.1)

Updates `git-cliff` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/orhun/git-cliff/releases)
- [Changelog](https://github.com/orhun/git-cliff/blob/main/CHANGELOG.md)
- [Commits](orhun/git-cliff@v2.13.1...v2.14.2)

Updates `ty` from 0.0.81 to 0.0.83
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.81...0.0.83)

---
updated-dependencies:
- dependency-name: beets
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: git-cliff
  dependency-version: 2.14.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.83
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 27, 2026
@radusuciu
radusuciu merged commit 3a9e083 into main Sep 27, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-3697a20682 branch September 27, 2026 02:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@radusuciu