chore(deps): bump the dev-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #268 · peak-solution/odsbox

dependabot · 2026-07-08T20:46:46Z

Bumps the dev-dependencies group with 5 updates in the / directory:

Package	From	To
mypy	`2.1.0`	`2.2.0`
pip-audit	`2.10.0`	`2.10.1`
pytest	`9.0.3`	`9.1.1`
python-semantic-release	`10.5.3`	`10.6.1`
ruff	`0.15.16`	`0.15.20`

Updates mypy from 2.1.0 to 2.2.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:
HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
Closed TypedDicts enable more precise type checking because the type checker knows exactly which keys are present. This is particularly useful when working with TypedDict unions or when you want to ensure that a TypedDict conforms to an exact shape.

The closed keyword also enables safe type narrowing with in checks:
Book = TypedDict('Book', {'book': str}, closed=True)
DVD = TypedDict('DVD', {'dvd': str}, closed=True)
type Inventory = Book | DVD
def print_type(inventory: Inventory) -> None:
if "book" in inventory:
# Type is narrowed to Book here - safe because DVD is closed
print(inventory["book"])
else:
# Type is narrowed to DVD here
print(inventory["dvd"])
</tr></table>

... (truncated)

Commits

b3c4a5b Mark release
396f508 [Chore] Update changelog for 2.2 (#21691)
9592a9e Upload wasm wheels to PyPI (#21671)
1dc6962 Bump ast-serialize to 0.6.0 (#21664)
96a7913 Bump librt to 0.12.0 (#21663)
5ef0902 Fix the exportjson tool (.ff cache to .json conversion) (#21628)
8d621ad Support --shadow-file with --native-parser (#21623)
74ecdd8 Sync typeshed (#21612)
0cd1541 [mypyc] Make function wrappers thread-safe on free-threaded builds (#21620)
22a9cfd [mypyc] Make list remove and index thread-safe on free-threaded builds (#21614)
Additional commits viewable in compare view

Updates pip-audit from 2.10.0 to 2.10.1

Release notes

Sourced from pip-audit's releases.

v2.10.1

Fixed

Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)

Changelog

Sourced from pip-audit's changelog.

[2.10.1]

Fixed

Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)

Commits

8894eb8 Merge pull request #1056 from pypa/copilot/release-2101
1c625b7 Update version in README.md to 2.10.1
fd2094b Prep 2.10.1 release
58d2488 build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 (#1052)
8df9420 build(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 (#1044)
3f618d3 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1053)
4849132 Restrict OIDC token to publish job (#1050)
c1eb69a Fix KeyError when OSV affected entry omits optional ranges field (#1046)
68de07f Merge pull request #1054 from pypa/fix/1047
ef31c9e Formatting fixes
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates python-semantic-release from 10.5.3 to 10.6.1

Release notes

Sourced from python-semantic-release's releases.

v10.6.1 (2026-07-06)

This release is published under the MIT License.

🪲 Bug Fixes

changelog: Fix handling of whitespace commit bodies in changelog template filter (PR#1457, d95e46e)

cmd-version: Fix non-styled error msg when strict & no new version (PR#1437, 5e8f94c)

config: Eliminate .git/ in parent dir warnings for monorepos configured with .. (PR#1444, 7a1f822)

📖 Documentation

CHANGELOG: Add v9.21.2 changelog details for website (a4115cf)

configuration: Document repo_dir config option (PR#1444, 7a1f822)

⚙️ Build System

deps: Expand python-gitlab dependency range to include v8.0.0+ (PR#1451, a4b9a43)

deps: Expand tomlkit dependency range to include v0.14.0+ & v0.15.0+ (028d539)

deps: Extend click dependency range to include v8.2+ (01707ea)

✅ Resolved Issues

#1418: Extrenous "Found .git/ in higher parent directory" warning in monorepo setup

#1423: Misformated error message

Detailed Changes: v10.6.0...v10.6.1

Installable artifacts are available from:

PyPi Registry

GitHub Release Assets

v10.6.0 (2026-07-04)

This release is published under the MIT License.

✨ Features

... (truncated)

Changelog

Sourced from python-semantic-release's changelog.

v10.6.1 (2026-07-06)

🪲 Bug Fixes

changelog: Fix handling of whitespace commit bodies in changelog template filter (PR#1457, d95e46e)

cmd-version: Fix non-styled error msg when strict & no new version, closes [#1423](https://github.com/python-semantic-release/python-semantic-release/issues/1423)_ (PR#1437, 5e8f94c)

config: Eliminate .git/ in parent dir warnings for monorepos configured with .., closes [#1418](https://github.com/python-semantic-release/python-semantic-release/issues/1418)_ (PR#1444, 7a1f822)

📖 Documentation

CHANGELOG: Add v9.21.2 changelog details for website (a4115cf_)

configuration: Document repo_dir config option (PR#1444, 7a1f822)

⚙️ Build System

deps: Expand python-gitlab dependency range to include v8.0.0+ (PR#1451, a4b9a43)

deps: Expand tomlkit dependency range to include v0.14.0+ & v0.15.0+ (028d539_)

deps: Extend click dependency range to include v8.2+ (01707ea_)

.. _#1418: python-semantic-release/python-semantic-release#1418 .. _#1423: python-semantic-release/python-semantic-release#1423 .. _01707ea: python-semantic-release/python-semantic-release@01707ea .. _028d539: python-semantic-release/python-semantic-release@028d539 .. _5e8f94c: python-semantic-release/python-semantic-release@5e8f94c .. _7a1f822: python-semantic-release/python-semantic-release@7a1f822 .. _a4115cf: python-semantic-release/python-semantic-release@a4115cf .. _a4b9a43: python-semantic-release/python-semantic-release@a4b9a43 .. _d95e46e: python-semantic-release/python-semantic-release@d95e46e .. _PR#1437: python-semantic-release/python-semantic-release#1437 .. _PR#1444: python-semantic-release/python-semantic-release#1444 .. _PR#1451: python-semantic-release/python-semantic-release#1451 .. _PR#1457: python-semantic-release/python-semantic-release#1457

.. _changelog-v10.6.0:

v10.6.0 (2026-07-04)

... (truncated)

Commits

39dd205 chore: release v10.6.1
7a1f822 fix(config): eliminate .git/ in parent dir warnings for monorepos configure...
5fa2df5 style: fix configuration docs with alphabetical options
be11d3f style: adjust formatting for clearer test implementations
5e8f94c fix(cmd-version): fix non-styled error msg when strict & no new version (#1437)
81527c6 style: adjust implementation & tests to suppress warnings & type errors
45f0f27 test: adjust style to match expected pytest environment & type-checker
0ef2d0c build(deps-dev): expand pytest dependency range to include v9.0.0
ceb4e97 style(mypy-config): remove specified 3.8 compiler from config - defaults to a...
725e16b ci(validate): adjust lint job to use Python 3.8 instead
Additional commits viewable in compare view

Updates ruff from 0.15.16 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

Allow human-readable names in rule selectors (#25887)

Emit a warning instead of an error for unknown rule selectors (#26113)

Match noqa shebang handling in ruff:ignore comments (#26286)

[ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

Add versioning sections to custom crate READMEs (#26317)

Update ruff_python_parser README for crates.io (#26315)

[perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

@dhruvmanila

@MichaReiser

@ntBre

@trilamsr

Install ruff 0.15.20

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"
Download ruff 0.15.20

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ruff-i686-pc-windows-msvc.zip x86 Windows checksum

ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

Allow human-readable names in rule selectors (#25887)

Emit a warning instead of an error for unknown rule selectors (#26113)

Match noqa shebang handling in ruff:ignore comments (#26286)

[ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

Add versioning sections to custom crate READMEs (#26317)

Update ruff_python_parser README for crates.io (#26315)

[perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

@dhruvmanila

@MichaReiser

@ntBre

@trilamsr

0.15.19

Released on 2026-06-23.

Preview features

Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

Fall back to default settings when editor-only settings are invalid (#26244)

Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

[pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

Avoid allocating when parsing single string literals (#26200)

Avoid reallocating singleton call arguments (#26223)

Lazily create source files for lint diagnostics (#26226)

Optimize formatter text width and indentation (#26236)

Reserve capacity for builtin bindings (#26229)

Skip repeated-key checks for singleton dictionaries (#26228)

Use ArrayVec for qualified name segments (#26224)

... (truncated)

Commits

f82a36b Bump 0.15.20 (#26376)
af32943 Improve the summarise-ecosystem-results skill (#26378)
485ebab Remove RUF076 name from schema (#26371)
ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
f703f21 Allow human-readable names in rule selectors (#25887)
0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
dbe6e98 [ty] Infer definite equality comparison results (#26337)
e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates Bumps the dev-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.2.0` | | [pip-audit](https://github.com/pypa/pip-audit) | `2.10.0` | `2.10.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `10.5.3` | `10.6.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.16` | `0.15.20` | Updates `mypy` from 2.1.0 to 2.2.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.2.0) Updates `pip-audit` from 2.10.0 to 2.10.1 - [Release notes](https://github.com/pypa/pip-audit/releases) - [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md) - [Commits](pypa/pip-audit@v2.10.0...v2.10.1) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `python-semantic-release` from 10.5.3 to 10.6.1 - [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases) - [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst) - [Commits](python-semantic-release/python-semantic-release@v10.5.3...v10.6.1) Updates `ruff` from 0.15.16 to 0.15.20 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.16...0.15.20) --- updated-dependencies: - dependency-name: mypy dependency-version: 2.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pip-audit dependency-version: 2.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: python-semantic-release dependency-version: 10.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: ruff dependency-version: 0.15.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dev-dependencies group across 1 directory with 5 updates#268

chore(deps): bump the dev-dependencies group across 1 directory with 5 updates#268
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/dev-dependencies-9876e901d9

dependabot Bot commented on behalf of github Jul 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026

Mypy Release Notes

Next Release

Mypy 2.2

Support for Closed TypedDicts (PEP 728)

v2.10.1

Fixed

[2.10.1]

Fixed

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

v10.6.1 (2026-07-06)

🪲 Bug Fixes

📖 Documentation

⚙️ Build System

✅ Resolved Issues

v10.6.0 (2026-07-04)

✨ Features

v10.6.1 (2026-07-06)

🪲 Bug Fixes

📖 Documentation

⚙️ Build System

0.15.20

Release Notes

Preview features

Documentation

Contributors

Install ruff 0.15.20

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.15.20

0.15.20

Preview features

Documentation

Contributors

0.15.19

Preview features

Bug fixes

Rule changes

Performance

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants