Bump the 3-3-uv-dependency-updates group in /dev/breeze with 4 updates

[dependabot]

Bumps the 3-3-uv-dependency-updates group in /dev/breeze with 4 updates: gitpython, prek, tqdm and boto3.

Updates gitpython from 3.1.55 to 3.1.57

Release notes

Sourced from gitpython's releases.

3.1.57 - Security and Fixes

What's Changed

• Merge gitdb and smmap into the GitPython repository by @​Byron in gitpython-developers/GitPython#2179
• build(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in gitpython-developers/GitPython#2185
• build(deps): bump the pre-commit group with 2 updates by @​dependabot[bot] in gitpython-developers/GitPython#2186
• Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @​dependabot[bot] in gitpython-developers/GitPython#2124
• Render protected Traversable methods in the reference by @​pick7 in gitpython-developers/GitPython#2192
• Use standard prefixes for parsed patch diffs by @​pick7 in gitpython-developers/GitPython#2191
• Honor kill_after_timeout with output streams by @​pick7 in gitpython-developers/GitPython#2189
• Redact Authorization extra headers from command errors by @​pick7 in gitpython-developers/GitPython#2188
• Improve RemoteProgress parse return typing by @​pick7 in gitpython-developers/GitPython#2187
• Adopt basedpyright with a legacy baseline by @​Byron in gitpython-developers/GitPython#2194
• Block unsafe Git file and URL options by @​Byron in gitpython-developers/GitPython#2193

New Contributors

• @​pick7 made their first contribution in gitpython-developers/GitPython#2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

3.1.56 - SECURITY

What's Changed

• Add support for Python 3.15 by @​hugovk in gitpython-developers/GitPython#2183
• fix: reject unsafe output options in Commit.count by @​Byron in gitpython-developers/GitPython#2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

Commits

• ccbd573 prepare for new release
• d1a631d Merge pull request #2193 from gitpython-developers/more-unsafe-options
• ab33e33 Merge pull request #2194 from gitpython-developers/fix-basedpyright
• 52199b3 address review comments
• 60dec71 Adopt basedpyright with a legacy baseline
• 7a4f5dc Block unsafe archive additions and bundle URI
• 3af0c25 Block unsafe checkout-index and tag file options
• fb5d584 Merge pull request #2187 from pick7/codex/remote-progress-return-type
• 951cc44 Merge pull request #2188 from pick7/codex/redact-http-extraheader
• 2e5b13f Merge pull request #2189 from pick7/codex/output-stream-timeout
• Additional commits viewable in compare view

Updates prek from 0.4.10 to 0.4.11

Release notes

Sourced from prek's releases.

0.4.11

Release Notes

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  [[repos]]
  repo = "builtin"
  hooks = [
  { id = "check-json", priority = "checks" },
  { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#2359)
• Support --glob patterns in prek run (#2381)
• Support reusable aliases for hook priorities (#2331)
• Implement requirements-txt-fixer as a builtin hook (#2390)
• Improve user-facing warnings and errors (#2380)
• Install Node hooks through git url (#2394)

Performance

• Reduce blocking-pool overhead in file hooks (#2384)
• Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.11

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  [[repos]]
  repo = "builtin"
  hooks = [
  { id = "check-json", priority = "checks" },
  { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#2359)
• Support --glob patterns in prek run (#2381)
• Support reusable aliases for hook priorities (#2331)
• Implement requirements-txt-fixer as a builtin hook (#2390)
• Improve user-facing warnings and errors (#2380)
• Install Node hooks through git url (#2394)

Performance

• Reduce blocking-pool overhead in file hooks (#2384)
• Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Commits

• 92ba6c8 Bump version to 0.4.11 (#2402)
• f575e42 Bump quinn-proto from 0.11.14 to 0.11.16 (#2401)
• c0ed56d Preserve system download policy when applying metadata (#2395)
• 3b8b5c5 Install Node hooks through git url (#2394)
• ff11cbb Implement requirements-txt-fixer as a builtin hook (#2390)
• c7dfc32 Match identify tags across filename parts (#2399)
• 928dc5c Speed up mixed-line-ending scans with memchr2 (#2391)
• 6c89849 Honor filenames in builtin hook entry and args (#2389)
• 28bc3f0 Add description for no-commit-to-branch (#2388)
• 1d9addd Reduce blocking-pool overhead in file hooks (#2384)
• Additional commits viewable in compare view

Updates tqdm from 4.69.0 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

• contrib.concurrent: major improvements
  • support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)
  • fix total based on shortest iterable length (#1473)
  • use default max_workers (#1543 <- #1530, #1518)
  • support timeout, buffersize (#1576)
  • improve ETA (#1708 <- #1161)
  • update as_completed (#1709 <- #1565)
  • add tqdm.concurrent.intepreter_map (#1777)
• asyncio: support iterables with only __aiter__ (#1714 <- #1686)
• support reset(float("inf")) (#1783 <- #1781, #651)
• framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

• contrib.logging: preserve filters (#1775 <- #1581)
• rich: misc fixes (#1773)
  • support generators (without len) (#1391)
  • fix potential AttributeError on exit (#1674)
• fix total=float('inf') (#1781 <- #651)
• fix potential AttributeError on exit (#1778 <- #1668, #1537, #261)
• fix minor docs typos (#1780, #1746)

Commits

• 96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
• c27393e misc tidy
• 061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
• 9fc160b Update how we check for interpreter_map support in the tests
• b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
• 16d5486 Add support for nested progress bars
• 9f5890f Add initial implementation for interpreter_map
• 321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
• 4664b57 minor tidy
• 426a098 Treat inf total as unknown in reset() too
• Additional commits viewable in compare view

Updates boto3 from 1.43.55 to 1.43.56

Commits

• 72a153d Merge branch 'release-1.43.56'
• b1b9ff3 Bumping version to 1.43.56
• c7d2f6e Add changelog entries from botocore
• cad396b Merge branch 'release-1.43.55' into develop
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions