Skip to content

Bump the 3-3-uv-dependency-updates group in /dev/breeze with 8 updates - #70608

Open
dependabot[bot] wants to merge 1 commit into
v3-3-testfrom
dependabot/uv/dev/breeze/v3-3-test/3-3-uv-dependency-updates-d4c3fcd2d5
Open

Bump the 3-3-uv-dependency-updates group in /dev/breeze with 8 updates#70608
dependabot[bot] wants to merge 1 commit into
v3-3-testfrom
dependabot/uv/dev/breeze/v3-3-test/3-3-uv-dependency-updates-d4c3fcd2d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the 3-3-uv-dependency-updates group in /dev/breeze with 8 updates:

Package From To
click 8.4.1 8.4.2
filelock 3.29.4 3.32.0
google-api-python-client 2.197.0 2.198.0
gitpython 3.1.50 3.1.55
hatch 1.17.0 1.17.1
prek 0.4.5 0.4.10
tqdm 4.68.3 4.69.0
boto3 1.43.34 1.43.55

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582
Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates filelock from 3.29.4 to 3.32.0

Release notes

Sourced from filelock's releases.

3.32.0

What's Changed

Full Changelog: tox-dev/filelock@3.31.2...3.32.0

3.31.2

What's Changed

Full Changelog: tox-dev/filelock@3.31.1...3.31.2

3.31.1

What's Changed

Full Changelog: tox-dev/filelock@3.31.0...3.31.1

3.31.0

What's Changed

Full Changelog: tox-dev/filelock@3.30.3...3.31.0

3.30.3

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.30.2...3.30.3

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.1 (2026-07-26)

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

3.32.0 (2026-07-21)

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685
  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685

3.31.2 (2026-07-21)

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their behavior. :pr:681

3.31.1 (2026-07-20)

  • A SoftFileLease acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:680

3.31.0 (2026-07-18)

  • Support Termux/Android, whose CPython ships without os.link and reports sys.platform == "android". import filelock and both FileLock and SoftFileLock now work there, StrictSoftFileLock reports its missing hard-link support only when acquired, and process liveness reads /proc on Android instead of PID-only checks. :pr:678
  • StrictSoftFileLock no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no

... (truncated)

Commits
  • 76525e6 Release 3.32.0
  • 9824d15 🐛 fix(packaging): let an unpacked sdist run the test suite (#685)
  • f6c41e9 👷 ci: add Python 3.15 to the test matrix (#683)
  • caeb1c9 Release 3.31.2
  • 60eda0f 🐛 fix(strict): tolerate an errno without ENOTSUP (#681)
  • c1b2e6f Release 3.31.1
  • 9fd7de5 scope a lease's claim to the context that acquired it (#680)
  • 2b3ad2c ♻️ refactor(coverage): key exclusions on probed capability (#679)
  • 3b66fdc Release 3.31.0
  • 166b2b5 ✨ feat(platform): support Termux/Android (#678)
  • Additional commits viewable in compare view

Updates google-api-python-client from 2.197.0 to 2.198.0

Release notes

Sourced from google-api-python-client's releases.

v2.198.0

2.198.0 (2026-06-23)

Features

... (truncated)

Commits

Updates gitpython from 3.1.50 to 3.1.55

Release notes

Sourced from gitpython's releases.

3.1.55 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

3.1.54 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

3.1.52 Security

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

3.1.51 - Security

What's Changed

... (truncated)

Commits
  • 681c82c prepare release
  • e227e01 Merge pull request #2181 from gitpython-developers/fix-env-var-exfiltration
  • 8634174 fix: prevent environment expansion in remote URLs
  • e59d9ba prepare next release
  • a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
  • 1d51b89 fix: guard diff output options
  • ffcb535 fix: reject unsafe clone templates
  • e8d0fbf fix: validate split short-option values
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • Additional commits viewable in compare view

Updates hatch from 1.17.0 to 1.17.1

Release notes

Sourced from hatch's releases.

Hatchling v1.17.1

Fixed:

  • Fix dev mode when the project has symlinks and file inclusion is defined with the packages or only-include options
  • Change the name of generated PTH files for dev mode so they come first lexicographically and therefore load first

Hatch v1.17.1

Fixed

  • Use TemporaryDirectory and pylock*.toml for temporary lock files.
  • Skip injection of ruff extend if a key already exists in ruff.toml.
  • Pass --no-header to uv pip compile in the uv locker so that generated lockfiles are deterministic.
  • Fix env-dependency extras being dropped when a metadata hook is configured and resolve workspace-member extras from the member's own metadata.
Commits
  • 5dae059 release Hatch v1.17.1
  • 4b3fd7d release Hatchling v1.31.0
  • 19ced89 Fix env-dependency extras being dropped when a metadata hook is configured (#...
  • 3b45c75 Prepare hatchling for release 1.31.0 (#2330)
  • e3d9b95 Addresses bug where blank lines are dropped when there is no shebang (#2328)
  • 9bc573c Prepare for 1.17.1 hatch release (#2329)
  • bbb12bb Pass --no-header to uv pip compile for deterministic lockfiles (#2327)
  • 8c06373 Fix uv lock check header comparison (#2317)
  • 5cfbb54 fix: skip extend injection if already present in ruff config (#2305)
  • cf85971 fix: use TemporaryDirectory + pylock*.toml for temp lock files (#2303)
  • Additional commits viewable in compare view

Updates prek from 0.4.5 to 0.4.10

Release notes

Sourced from prek's releases.

0.4.10

Release Notes

Released on 2026-07-16.

Enhancements

  • Add PHP language support (#2314)
  • Add freeze option to update settings (#2323)
  • Add tag filters to update configuration (#2354)
  • Identify 'mts' and 'cts' as TypeScript files (#2209)
  • Publish Alpine Docker images (#2352)
  • Support builtin and meta in try-repo (#2350)

Bug fixes

  • Fix Python discovery order (#2348)
  • Fix Windows progress rendering (#2328)
  • Preserve configured repo values for updates (#2324)
  • Scope synthetic GIT_WORK_TREE to git commands (#2356)

Documentation

  • Expand common workflows guide (#2351)

Contributors

Install prek 0.4.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.10

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.10

Released on 2026-07-16.

Enhancements

  • Add PHP language support (#2314)
  • Add freeze option to update settings (#2323)
  • Add tag filters to update configuration (#2354)
  • Identify 'mts' and 'cts' as TypeScript files (#2209)
  • Publish Alpine Docker images (#2352)
  • Support builtin and meta in try-repo (#2350)

Bug fixes

  • Fix Python discovery order (#2348)
  • Fix Windows progress rendering (#2328)
  • Preserve configured repo values for updates (#2324)
  • Scope synthetic GIT_WORK_TREE to git commands (#2356)

Documentation

  • Expand common workflows guide (#2351)

Contributors

0.4.9

Released on 2026-07-11.

Note: This release changes the repository identity schema stored in cached hook environments. Existing hook environments will be invalidated, and prek will reinstall them automatically when needed.

Enhancements

  • Preserve additional dependency order (#2311)
  • Remove parallel Ruby gem installation (#2307)
  • Warn for missing update repositories (#2316)

Bug fixes

  • Fix mixed workspace selectors (#2306)
  • Fix try-repo local path resolution (#2310)
  • Use resolved gem executable (#2308)
  • Validate complete XML documents in check-xml (#2312)

Contributors

... (truncated)

Commits

Updates tqdm from 4.68.3 to 4.69.0

Release notes

Sourced from tqdm's releases.

tqdm v4.69.0 stable

  • add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
  • misc minor framework updates
    • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

Commits
  • 6ab24dc bump version, workflow actions, pre-commit hooks
  • 99615b9 asyncio: add gather(return_exceptions=False) (#1776)
  • 53d096e bump version, merge pull request #1768 from its-Sohan/fix/write-stdout-none
  • 74ff992 fix: prevent tqdm.write from crashing when sys.stdout is none
  • 3757d0d Merge pull requests #1717 and #1767 (fixes #1658)
  • 55156ce fix: apply disp_trim to all format_meter return paths (#1658)
  • See full diff in compare view

Updates boto3 from 1.43.34 to 1.43.55

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the 3-3-uv-dependency-updates group in /dev/breeze with 8 updates
fa73407 
Bumps the 3-3-uv-dependency-updates group in /dev/breeze with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [click](https://github.com/pallets/click) | `8.4.1` | `8.4.2` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.4` | `3.32.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.197.0` | `2.198.0` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.50` | `3.1.55` |
| [hatch](https://github.com/pypa/hatch) | `1.17.0` | `1.17.1` |
| [prek](https://github.com/j178/prek) | `0.4.5` | `0.4.10` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.3` | `4.69.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.34` | `1.43.55` |


Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `filelock` from 3.29.4 to 3.32.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.4...3.32.0)

Updates `google-api-python-client` from 2.197.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.197.0...v2.198.0)

Updates `gitpython` from 3.1.50 to 3.1.55
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.55)

Updates `hatch` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatch-v1.17.0...hatch-v1.17.1)

Updates `prek` from 0.4.5 to 0.4.10
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.5...v0.4.10)

Updates `tqdm` from 4.68.3 to 4.69.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.3...v4.69.0)

Updates `boto3` from 1.43.34 to 1.43.55
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.34...1.43.55)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: filelock
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: google-api-python-client
  dependency-version: 2.198.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: gitpython
  dependency-version: 3.1.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: hatch
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: prek
  dependency-version: 0.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: tqdm
  dependency-version: 4.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: 3-3-uv-dependency-updates
- dependency-name: boto3
  dependency-version: 1.43.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: 3-3-uv-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 28, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 28, 2026
@dependabot dependabot Bot added the python:uv Pull requests that update python:uv code label Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@potiuk potiuk Awaiting requested review from potiuk potiuk is a code owner
@ashb ashb Awaiting requested review from ashb ashb is a code owner
@gopidesupavan gopidesupavan Awaiting requested review from gopidesupavan gopidesupavan is a code owner
@amoghrajesh amoghrajesh Awaiting requested review from amoghrajesh amoghrajesh is a code owner
@jscheffl jscheffl Awaiting requested review from jscheffl jscheffl is a code owner
@bugraoz93 bugraoz93 Awaiting requested review from bugraoz93 bugraoz93 is a code owner
@jason810496 jason810496 Awaiting requested review from jason810496 jason810496 is a code owner
@jedcunningham jedcunningham Awaiting requested review from jedcunningham jedcunningham is a code owner
@ephraimbuddy ephraimbuddy Awaiting requested review from ephraimbuddy ephraimbuddy is a code owner
@choo121600 choo121600 Awaiting requested review from choo121600 choo121600 is a code owner
@vatsrahul1001 vatsrahul1001 Awaiting requested review from vatsrahul1001 vatsrahul1001 is a code owner

Assignees

No one assigned

Labels

area:dev-tools dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants