Skip to content

Bump the python-packages group with 8 updates#426

Merged
MTSOnGithub merged 1 commit intodevelopfrom
dependabot/uv/python-packages-3a02c80bac
Apr 2, 2026
Merged

Bump the python-packages group with 8 updates#426
MTSOnGithub merged 1 commit intodevelopfrom
dependabot/uv/python-packages-3a02c80bac

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Bumps the python-packages group with 8 updates:

Package From To
python-json-logger 4.0.0 4.1.0
fastapi 0.135.2 0.135.3
faker 40.11.1 40.12.0
deepdiff 8.6.2 9.0.0
ruff 0.15.7 0.15.8
mypy 1.19.1 1.20.0
types-python-dateutil 2.9.0.20260323 2.9.0.20260402
types-jwcrypto 1.5.0.20251102 1.5.0.20260402

Updates python-json-logger from 4.0.0 to 4.1.0

Release notes

Sourced from python-json-logger's releases.

4.1.0

4.1.0 - 2026-03-29

Added

  • Add support for Python 3.14, PyPy 3.11

Removed

  • Remove support for Python 3.8, 3.9 (includes PyPy versions).
Changelog

Sourced from python-json-logger's changelog.

4.1.0 - 2026-03-29

Added

  • Add support for Python 3.14, PyPy 3.11

Removed

  • Remove support for Python 3.8, 3.9 (includes PyPy versions).
Commits
  • d80c68d Release v4.1.0
  • b589b2a [pyproject] Update license table to PEP 639 format
  • 2bb784a Update code unlocked by Python 3.10 minimum version
  • 79599b5 Drop python 3.8, 3.9 support
  • 622650c [docs.contributing] Update unsupported JSON encoders
  • 06165bb [tests.test_formatters] Add non-printable bytes to test_common_types_encoded
  • 61f88a9 [docs.contributing] Clarify which packages have been considered and rejected
  • 0add524 [docs.contributing] Clarify when we will add support for new third-party pack...
  • eee9505 [pylint] Remove old command
  • 8045926 [mypy] Don't ignore orjson
  • Additional commits viewable in compare view

Updates fastapi from 0.135.2 to 0.135.3

Release notes

Sourced from fastapi's releases.

0.135.3

Features

Docs

  • ✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #14946 by @​bysiber.

Internal

Commits

Updates faker from 40.11.1 to 40.12.0

Release notes

Sourced from faker's releases.

Release v40.12.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.12.0 - 2026-03-30

Commits
  • fb98b61 Bump version: 40.11.1 → 40.12.0
  • 00b920f 📝 Update CHANGELOG.md
  • bd75873 Restore parameters stripped out by the AI
  • f4bb94a exclude the scripts directory from the MANIFEST.in file
  • ebfd067 Sort test cases alphabetically
  • a5d09c0 Add address providers for ar_DZ and fr_DZ locales (#2341)
  • See full diff in compare view

Updates deepdiff from 8.6.2 to 9.0.0

Release notes

Sourced from deepdiff's releases.

9.0.0

  • migration note:
    • to_dict() and to_json() now accept a verbose_level parameter and always return a usable text-view dict. When the original view is 'tree', they default to verbose_level=2 for full detail. The old view_override parameter is removed. To get the previous results, you will need to pass the explicit verbose_level to to_json and to_dict if you are using the tree view.
  • Dropping support for Python 3.9
  • Support for python 3.14
  • Added support for callable group_by thanks to echan5
  • Added FlatDeltaDict TypedDict for to_flat_dicts return type
  • Fixed colored view display when all list items are removed thanks to yannrouillard
  • Fixed hasattr() swallowing AttributeError in __slots__ handling for objects with __getattr__ thanks to tpvasconcelos
  • Fixed ignore_order=True missing int-vs-float type changes
  • Always use t1 path for reporting thanks to devin13cox
  • Fixed _convert_oversized_ints failing on NamedTuples
  • Fixed orjson TypeError for integers exceeding 64-bit range
  • Fixed parameter bug in to_flat_dicts where include_action_in_path and report_type_changes were not being passed through
  • Fixed ignore_keys issue in detailed__dict__ thanks to vitalis89
  • Fixed logarithmic similarity type hint thanks to ljames8
Commits

Updates ruff from 0.15.7 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Commits
  • c2a8815 Release 0.15.8 (#24217)
  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
  • d812662 Use the release environment in publish-docs (#24214)
  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
  • 34998be [ty] Fix typo in comment (#24211)
  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
  • Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits
  • 770d3ca Remove +dev from version
  • 4738ffa Changelog updates for 1.20 (#21109)
  • b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
  • 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
  • c482596 --allow-redefinition-new is no longer experimental (#21110)
  • c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
  • b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
  • 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
  • 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
  • bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
  • Additional commits viewable in compare view

Updates types-python-dateutil from 2.9.0.20260323 to 2.9.0.20260402

Commits

Updates types-jwcrypto from 1.5.0.20251102 to 1.5.0.20260402

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-packages group with 8 updates
6641c8e 
Bumps the python-packages group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [python-json-logger](https://github.com/nhairs/python-json-logger) | `4.0.0` | `4.1.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.135.2` | `0.135.3` |
| [faker](https://github.com/joke2k/faker) | `40.11.1` | `40.12.0` |
| [deepdiff](https://github.com/qlustered/deepdiff) | `8.6.2` | `9.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.7` | `0.15.8` |
| [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` |
| [types-python-dateutil](https://github.com/python/typeshed) | `2.9.0.20260323` | `2.9.0.20260402` |
| [types-jwcrypto](https://github.com/python/typeshed) | `1.5.0.20251102` | `1.5.0.20260402` |


Updates `python-json-logger` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/nhairs/python-json-logger/releases)
- [Changelog](https://github.com/nhairs/python-json-logger/blob/main/docs/changelog.md)
- [Commits](nhairs/python-json-logger@v4.0.0...v4.1.0)

Updates `fastapi` from 0.135.2 to 0.135.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.2...0.135.3)

Updates `faker` from 40.11.1 to 40.12.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.11.1...v40.12.0)

Updates `deepdiff` from 8.6.2 to 9.0.0
- [Release notes](https://github.com/qlustered/deepdiff/releases)
- [Changelog](https://github.com/qlustered/deepdiff/blob/master/CHANGELOG.md)
- [Commits](qlustered/deepdiff@8.6.2...9.0.0)

Updates `ruff` from 0.15.7 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.7...0.15.8)

Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v1.20.0)

Updates `types-python-dateutil` from 2.9.0.20260323 to 2.9.0.20260402
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-jwcrypto` from 1.5.0.20251102 to 1.5.0.20260402
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: python-json-logger
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: faker
  dependency-version: 40.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: deepdiff
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mypy
  dependency-version: 1.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20260402
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: types-jwcrypto
  dependency-version: 1.5.0.20260402
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the type:dependency Dependency-related changes label Apr 2, 2026
@MTSOnGithub MTSOnGithub enabled auto-merge (rebase) April 2, 2026 08:42
@MTSOnGithub MTSOnGithub merged commit 7bb91a5 into develop Apr 2, 2026
12 checks passed
@MTSOnGithub MTSOnGithub deleted the dependabot/uv/python-packages-3a02c80bac branch April 2, 2026 08:46
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 2, 2026

Coverage

Coverage Report •
FileStmtsMissBranchBrPartCoverMissing
TOTAL7980984125622187% 
report-only-changed-files is enabled. No files were changed during this commit :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MTSOnGithub MTSOnGithub MTSOnGithub approved these changes

Assignees

No one assigned

Labels

type:dependency Dependency-related changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MTSOnGithub