Bump the pip group with 6 updates by dependabot[bot] · Pull Request #183 · community-of-python/stompman

dependabot · 2026-04-01T03:54:39Z

Bumps the pip group with 6 updates:

Package	From	To
anyio	`4.12.1`	`4.13.0`
faker	`40.5.1`	`40.12.0`
hypothesis	`6.151.9`	`6.151.10`
mypy	`1.19.1`	`1.20.0`
pytest-cov	`7.0.0`	`7.1.0`
ruff	`0.15.4`	`0.15.8`

Updates anyio from 4.12.1 to 4.13.0

Release notes

Sourced from anyio's releases.

4.13.0

Dropped support for Python 3.9

Added a ttl parameter to the anyio.functools.lru_cache wrapper (#1073; PR by @Graeme22)

Widened the type annotations of file I/O streams to accept IO[bytes] instead of just BinaryIO (#1078)

Fixed anyio.Path not being compatible with Python 3.15 due to the removal of pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__() (#1061; PR by @veeceey)

Fixed the BrokenResourceError raised by the asyncio SocketStream not having the original exception as its cause (#1055; PR by @veeceey)

Fixed the TypeError raised when using "func" as a parameter name in pytest.mark.parametrize when using the pytest plugin (#1068; PR by @JohnnyDeuss)

Fixed the pytest plugin not running tests that had the anyio marker added programmatically via pytest_collection_modifyitems (#422; PR by @chbndrhnns)

Fixed cancellation exceptions leaking from a CancelScope on asyncio when they are contained in an exception group alongside non-cancellation exceptions (#1091; PR by @gschaffner)

Fixed Condition.wait() not passing on a notification when the task is cancelled but already received a notification

Fixed inverted condition in the process pool shutdown phase which would cause still-running pooled processes not to be terminated (#1074; PR by @bysiber)

Commits

afbe93c Bumped up the version
33bdf2e Rearranged the changelog entries
19e09e2 Fixed inverted condition in _forcibly_shutdown_process_pool_on_exit (#1074)
9369d80 Fixed Condition.wait() not handing over notification when cancelled
6f122ab Fixed cancellation exceptions leaking from a CancelScope on asyncio when th...
beaa45a [pre-commit.ci] pre-commit autoupdate (#1097)
602f660 Widened type annotations to accept IO[bytes] in file streams
b5dcd45 Added note about erasing the template
d68670b [pre-commit.ci] pre-commit autoupdate (#1090)
fc17a22 tweak to_thread docs about abandon_on_cancel (#1088)
Additional commits viewable in compare view

Updates faker from 40.5.1 to 40.12.0

Release notes

Sourced from faker's releases.

Release v40.12.0

See CHANGELOG.md.

Release v40.11.1

See CHANGELOG.md.

Release v40.11.0

See CHANGELOG.md.

Release v40.10.0

See CHANGELOG.md.

Release v40.9.0

See CHANGELOG.md.

Release v40.8.1

See CHANGELOG.md.

Release v40.8.0

See CHANGELOG.md.

Release v40.7.0

See CHANGELOG.md.

Release v40.6.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.12.0 - 2026-03-30

Add address providers for ar_DZ and fr_DZ locales (#2341). Thanks @othmane099.

v40.11.1 - 2026-03-23

Fix: rebind deepcopy proxies to copied Faker instances. Thanks @SunS1eep1ng.

v40.11.0 - 2026-03-13

Add major Swiss banks to de_CH bank provider. Thanks @raphael-s.

v40.10.0 - 2026-03-13

Fix: mixed-gender names in es_MX locale. Thanks @rodrigobnogueira.

v40.9.0 - 2026-03-13

Fix pt_PT postalcode format in address provider. Thanks @filipemattar.

v40.8.1 - 2026-03-13

Fix mutable default providers. Thanks @Dhi13man.

v40.8.0 - 2026-03-04

Add free email domains to hu_HU locale. Thanks @majorzoltan80.

v40.7.0 - 2026-03-04

Improve Polish address grammar: categorize street types and prefixes. Thanks @Francooo2221.

v40.6.0 - 2026-03-04

Add country names to he_IL locale. Thanks @Moo64c.

Commits

fb98b61 Bump version: 40.11.1 → 40.12.0
00b920f 📝 Update CHANGELOG.md
bd75873 Restore parameters stripped out by the AI
f4bb94a exclude the scripts directory from the MANIFEST.in file
ebfd067 Sort test cases alphabetically
a5d09c0 Add address providers for ar_DZ and fr_DZ locales (#2341)
db42f64 Bump version: 40.11.0 → 40.11.1
a5b9f98 📝 Update CHANGELOG.md
01cb8d0 fix: rebind deepcopy proxies to copied Faker instances (#2340)
53314fc Bump version: 40.10.0 → 40.11.0
Additional commits viewable in compare view

Updates hypothesis from 6.151.9 to 6.151.10

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.151.10

When shrinking takes more than five minutes, Hypothesis now prints the "@seed" decorator alongside the slow-shrinking warning so you can reproduce the failure.

Thanks to Ian Hunt-Isaak for this contribution!

The canonical version of these notes (with links) is on readthedocs.

Commits

dd619a8 Bump hypothesis-python version to 6.151.10 and update changelog
47bf92e Merge pull request #4685 from HypothesisWorks/create-pull-request/patch
e87b8ba Update pinned dependencies
d2a9a59 Merge pull request #4677 from ianhi/slow-shrink-seed
1d6046a format
36c2cae refactor and reword
3d54cdc Merge remote-tracking branch 'upstream/master' into slow-shrink-seed
c1d70b8 Merge pull request #4679 from HypothesisWorks/create-pull-request/patch
e1e0ba1 Update pinned dependencies
9fe714d Merge pull request #4678 from HypothesisWorks/create-pull-request/patch
Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):
local_partial_types = True
For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits

770d3ca Remove +dev from version
4738ffa Changelog updates for 1.20 (#21109)
b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
c482596 --allow-redefinition-new is no longer experimental (#21110)
c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
Additional commits viewable in compare view

Updates pytest-cov from 7.0.0 to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

Improve handling of ResourceWarning from sqlite3.

The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

With this fix one can suppress ResourceWarning from sqlite3 from command line::

pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

Commits

66c8a52 Bump version: 7.0.0 → 7.1.0
f707662 Make the examples use pypy 3.11.
6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
8ebf20b Update changelog.
861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
78c9c4e Only run the 3.9 on older deps.
4849a92 Punctuation.
197c35e Update changelog and hopefully I don't forget to publish release again :))
14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
Additional commits viewable in compare view

Updates ruff from 0.15.4 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

[ruff] New rule unnecessary-if (RUF050) (#24114)

[ruff] New rule useless-finally (RUF072) (#24165)

[ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)

[pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

[flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)

[flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)

[pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)

E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)

Fix %foo? parsing in IPython assignment expressions (#24152)

analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

[eradicate] ignore ty: ignore comments in ERA001 (#24192)

[flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)

[flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)

[pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)

[refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

Speed up diagnostic rendering (#24146)

Server

Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

Clarify extend-ignore and extend-select settings documentation (#24064)

Mention AI policy in PR template (#24198)

Other changes

Use trusted publishing for NPM packages (#24171)

Contributors

@bitloi

@Sim-hu

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

[ruff] New rule unnecessary-if (RUF050) (#24114)

[ruff] New rule useless-finally (RUF072) (#24165)

[ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)

[pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

[flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)

[flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)

[pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)

E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)

Fix %foo? parsing in IPython assignment expressions (#24152)

analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

[eradicate] ignore ty: ignore comments in ERA001 (#24192)

[flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)

[flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)

[pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)

[refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

Speed up diagnostic rendering (#24146)

Server

Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

Clarify extend-ignore and extend-select settings documentation (#24064)

Mention AI policy in PR template (#24198)

Other changes

Use trusted publishing for NPM packages (#24171)

Contributors

@bitloi

@Sim-hu

@mvanhorn

... (truncated)

Commits

c2a8815 Release 0.15.8 (#24217)
d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
9622285 [ty] Autocomplete arguments if in arguments node (#24167)
d812662 Use the release environment in publish-docs (#24214)
eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
34998be [ty] Fix typo in comment (#24211)
560aca0 [ty] Minor simplifications to some benchmark code (#24209)
683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 6 updates: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.13.0` | | [faker](https://github.com/joke2k/faker) | `40.5.1` | `40.12.0` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.9` | `6.151.10` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.8` | Updates `anyio` from 4.12.1 to 4.13.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.12.1...4.13.0) Updates `faker` from 40.5.1 to 40.12.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v40.5.1...v40.12.0) Updates `hypothesis` from 6.151.9 to 6.151.10 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.9...hypothesis-python-6.151.10) Updates `mypy` from 1.19.1 to 1.20.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v1.20.0) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `ruff` from 0.15.4 to 0.15.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.4...0.15.8) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: faker dependency-version: 40.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: hypothesis dependency-version: 6.151.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip - dependency-name: mypy dependency-version: 1.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: ruff dependency-version: 0.15.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 1, 2026

vrslev merged commit 81a2047 into main Apr 1, 2026
4 of 6 checks passed

vrslev deleted the dependabot/pip/pip-d12c6f2b3a branch April 1, 2026 07:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group with 6 updates#183

Bump the pip group with 6 updates#183
vrslev merged 1 commit intomainfrom
dependabot/pip/pip-d12c6f2b3a

dependabot Bot commented on behalf of github Apr 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 1, 2026

4.13.0

Release v40.12.0

Release v40.11.1

Release v40.11.0

Release v40.10.0

Release v40.9.0

Release v40.8.1

Release v40.8.0

Release v40.7.0

Release v40.6.0

Hypothesis for Python - version 6.151.10

Mypy Release Notes

Next Release

Mypy 1.20

Planned Changes to Defaults and Flags in Mypy 2.0

Better Type Narrowing

7.1.0 (2026-03-21)

0.15.8

Release Notes

Preview features

Bug fixes

Rule changes

Performance

Server

Documentation

Other changes

Contributors

0.15.8

Preview features

Bug fixes

Rule changes

Performance

Server

Documentation

Other changes

Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant