Skip to content

⬆ Bump the python-packages group across 1 directory with 7 updates - #648

Merged
YuriiMotov merged 2 commits into
mainfrom
dependabot/uv/python-packages-5aaaa297d1
Aug 5, 2026
Merged

⬆ Bump the python-packages group across 1 directory with 7 updates#648
YuriiMotov merged 2 commits into
mainfrom
dependabot/uv/python-packages-5aaaa297d1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 7 updates in the / directory:

Package From To
typer 0.26.8 0.27.0
zensical 0.0.47 0.0.51
mypy 2.1.0 2.3.0
ruff 0.15.20 0.16.0
ty 0.0.56 0.0.64
prek 0.4.8 0.4.11
zizmor 1.26.1 1.28.0

Updates typer from 0.26.8 to 0.27.0

Release notes

Sourced from typer's releases.

0.27.0

Breaking Changes

Internal

Changelog

Sourced from typer's changelog.

0.27.0 (2026-07-15)

Breaking Changes

Internal

Commits

Updates zensical from 0.0.47 to 0.0.51

Release notes

Sourced from zensical's releases.

0.0.51

Summary

This version improves cached rebuilds by persisting objects.inv and autorefs data, fixes stale builds after removing files, and upgrades soupsieve to address vulnerabilities.

Changelog

Bug fixes

  • ec69acc zensical, compat – cache objects.inv to persist it across cached rebuilds (#815)
  • 7e6940f zensical – cache autorefs data for cross-ref resolution across rebuilds (#805)

0.0.50

Summary

This version fixes a regression introduced in 0.0.48 which broke search.

Changelog

Bug fixes

  • 46d9f29 ui – update ui to v0.0.22

0.0.48

Summary

This version updates the user interface to v0.0.21, bringing the latest fixes for Pyodide-powered code execution, search, and ANSI color rendering.

It also improves configuration parsing, and fixes relative and scoped cross-references for mkdocstrings-python.

Changelog

Bug fixes

  • 15f138a ui – update ui to v0.0.21
  • 63c9dd3 compat – avoid registering same extension twice (as plugin and extension)
  • 25ba4c7 compat – enable autorefs when mkdocstrings extension is enabled
  • 781305a compat – support theme being just a string
  • c33d65b compat – support enabled option in autorefs, glightbox and macros extensions
  • 81596c1 compat – fix relative/scoped cross-refs support for mkdocstrings-python (#796)

Refactorings

  • 71c976c compat – allow configuring mkdocstrings as a Markdown extension
Commits
  • 362bf5d chore: release v0.0.51
  • 7989a55 Update dependencies
  • ec69acc fix: cache objects.inv to persist it across cached rebuilds (#815)
  • 7e6940f fix: cache autorefs data for cross-ref resolution across rebuilds (#805)
  • 428d0d8 chore: release v0.0.50
  • e30d7e5 chore: release v0.0.49
  • 46d9f29 fix: update ui to v0.0.22
  • 346cba7 chore: release v0.0.48
  • 1f21412 chore: ignore error on buildx cache write
  • cc68851 chore: release v0.0.48
  • Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
  • 24c237d [mypyc] Improve documentation of Final (#21713)
  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
  • cbcb51a Narrow for frozendict membership check (#21709)
  • af2bc0f Sync typeshed (#21707)
  • Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    

    • 






... (truncated)





Commits

    

  • a2635fd Bump 0.16.0 (#27136)
    • 

  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
    • 

  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
    • 

  • 17ef711 Stabilize --add-ignore (#27125)
    • 

  • ef912bb Add newly stabilized rules to defaults (#27055)
    • 

  • b30f040 Stabilize new default rules (#27035)
    • 

  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
    • 

  • 87e51e2 Fix format --check spans for syntax errors (#27045)
    • 

  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
    • 

  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
    • 

  • Additional commits viewable in compare view
    • 







Updates ty from 0.0.56 to 0.0.64



Release notes

Sourced from ty's releases.




0.0.64


Release Notes


Released on 2026-07-27.


Bug fixes


    

  • Fix identity narrowing for NewTypes (#26439)
    • 

  • Make reachability analysis idempotent (#27163)
    • 



LSP server


    

  • Fix ParamSpec declaration hover and type navigation (#27183)
    • 

  • Implement LSP textDocument/implementation request (#25410)
    • 

  • Introduce shared primitives for parsing backticks in docstrings (#26928)
    • 

  • Render NumPy docstrings as structured Markdown (#25925)
    • 



CLI


    

  • Add --exclude-scripts and --include-scripts (#27169)
    • 

  • Discover uv workspace roots (#25551)
    • 



Diagnostics


    

  • Add a lint rule for combined abstract and final decorators (#26932)
    • 

  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
    • 

  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
    • 

  • Reuse full call diagnostics for implicit setter calls (#27115)
    • 



Configuration


    

  • Allow unresolved unused venv home paths (#27162)
    • 

  • Simplify script metadata query (#27121)
    • 



Core type checking


    

  • Decorate only overload implementation signatures (#27147)
    • 

  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
    • 

  • Improve identity comparison inference for singleton types (#27126)
    • 

  • Improve tuple membership and rich comparison inference (#27164)
    • 

  • Model walrus bindings from comprehensions (#26466)
    • 

  • Narrow tagged unions using identity comparisons (#27130)
    • 

  • Preserve Self in __new__ calls (#27003)
    • 

  • Preserve receiver constraints when binding overloaded methods (#27038)
    • 

  • Support generic manual PEP 695 type aliases (#27083)
    • 

  • Treat bivariance as covariant (#24319)
    • 



Performance


    

  • Avoid cycles when resolving ModuleType globals (#27182)
    • 






... (truncated)





Changelog

Sourced from ty's changelog.




0.0.64


Released on 2026-07-27.


Bug fixes


    

  • Fix identity narrowing for NewTypes (#26439)
    • 

  • Make reachability analysis idempotent (#27163)
    • 



LSP server


    

  • Fix ParamSpec declaration hover and type navigation (#27183)
    • 

  • Implement LSP textDocument/implementation request (#25410)
    • 

  • Introduce shared primitives for parsing backticks in docstrings (#26928)
    • 

  • Render NumPy docstrings as structured Markdown (#25925)
    • 



CLI


    

  • Add --exclude-scripts and --include-scripts (#27169)
    • 

  • Discover uv workspace roots (#25551)
    • 



Diagnostics


    

  • Add a lint rule for combined abstract and final decorators (#26932)
    • 

  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
    • 

  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
    • 

  • Reuse full call diagnostics for implicit setter calls (#27115)
    • 



Configuration


    

  • Allow unresolved unused venv home paths (#27162)
    • 

  • Simplify script metadata query (#27121)
    • 



Core type checking


    

  • Decorate only overload implementation signatures (#27147)
    • 

  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
    • 

  • Improve identity comparison inference for singleton types (#27126)
    • 

  • Improve tuple membership and rich comparison inference (#27164)
    • 

  • Model walrus bindings from comprehensions (#26466)
    • 

  • Narrow tagged unions using identity comparisons (#27130)
    • 

  • Preserve Self in __new__ calls (#27003)
    • 

  • Preserve receiver constraints when binding overloaded methods (#27038)
    • 

  • Support generic manual PEP 695 type aliases (#27083)
    • 

  • Treat bivariance as covariant (#24319)
    • 



Performance


    

  • Avoid cycles when resolving ModuleType globals (#27182)
    • 

  • Avoid expanding optional enum comparisons (#27105)
    • 






... (truncated)





Commits






Updates prek from 0.4.8 to 0.4.11



Release notes

Sourced from prek's releases.




0.4.11


Release Notes


Released on 2026-07-25.


Highlights


    

  • 

    This release adds two new builtin hooks, deny-pattern and require-pattern,
as native alternatives for pygrep use cases. deny-pattern fails when a
configured pattern is found, while require-pattern ensures every selected
file contains a match. By matching natively without spawning a Python
subprocess, they run over 4x faster than pygrep in benchmarks. Note that
they use Rust regex syntax, which does
not support look-around features such as negative lookbehind.
    

    • 

  • 

    prek run now supports --glob <PATTERN> to run hooks on tracked files
matching a glob. It can be repeated or combined with --files and
--directory.
    

    • 

  • 

    Hook priorities now support reusable aliases:
    

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]
    

    This makes parallel scheduling easier to read and maintain.
    

    • 



Enhancements


    

  • Add deny-pattern and require-pattern builtin hooks (#2359)
    • 

  • Support --glob patterns in prek run (#2381)
    • 

  • Support reusable aliases for hook priorities (#2331)
    • 

  • Implement requirements-txt-fixer as a builtin hook (#2390)
    • 

  • Improve user-facing warnings and errors (#2380)
    • 

  • Install Node hooks through git url (#2394)
    • 



Performance


    

  • Reduce blocking-pool overhead in file hooks (#2384)
    • 

  • Speed up mixed-line-ending scans with memchr2 (#2391)
    • 



Bug fixes





... (truncated)





Changelog

Sourced from prek's changelog.




0.4.11


Released on 2026-07-25.


Highlights


    

  • 

    This release adds two new builtin hooks, deny-pattern and require-pattern,
as native alternatives for pygrep use cases. deny-pattern fails when a
configured pattern is found, while require-pattern ensures every selected
file contains a match. By matching natively without spawning a Python
subprocess, they run over 4x faster than pygrep in benchmarks. Note that
they use
Rust regex syntax, which does
not support look-around features such as negative lookbehind.
    

    • 

  • 

    prek run now supports --glob <PATTERN> to run hooks on tracked files
matching a glob. It can be repeated or combined with --files and
--directory.
    

    • 

  • 

    Hook priorities now support reusable aliases:
    

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]
    

    This makes parallel scheduling easier to read and maintain.
    

    • 



Enhancements


    

  • Add deny-pattern and require-pattern builtin hooks (#2359)
    • 

  • Support --glob patterns in prek run (#2381)
    • 

  • Support reusable aliases for hook priorities (#2331)
    • 

  • Implement requirements-txt-fixer as a builtin hook (#2390)
    • 

  • Improve user-facing warnings and errors (#2380)
    • 

  • Install Node hooks through git url (#2394)
    • 



Performance


    

  • Reduce blocking-pool overhead in file hooks (#2384)
    • 

  • Speed up mixed-line-ending scans with memchr2 (#2391)
    • 



Bug fixes





... (truncated)





Commits






Updates zizmor from 1.26.1 to 1.28.0



Release notes

Sourced from zizmor's releases.




v1.28.0


Security 🔒🔗


    

  • 

    v1.27.0 contained a logging defect that would print any configured GitHub credentials as part of zizmor's cleartext logging. No versions other than v1.27.0 were affected. See GHSA-f42p-wjw5-97qh for full information.
    

    Many thanks to @​shaanmajid for finding and reporting this vulnerability.
    

    • 



Enhancements 🌱🔗


    

  • 

    The JSON (v1) output format now includes metadata for each finding's fixes, if the finding has fixes (#2186)
    

    • 

  • 

    The dependabot-cooldown audit is now aware of GitHub's new three-day default cooldown (#2193)
    

    • 

  • 

    sbt is now recognized as a package-ecosystem in dependabot.yml (#2211)
    

    • 



Bug Fixes 🐛🔗


    

  • 

    Fixed a bug where the template-injection audit would incorrectly flag steps.*.outcome and steps.*.conclusion as injection risks in the default persona (#2199)
    

    • 

  • 

    Fixed a bug where the github-env audit would incorrectly flag some printf calls as exploitable (#2201)
    

    • 

  • 

    Fixed a bug where zizmor would produce a misleading and confusing error message when asked to audit an ambiguous remote input (#2205)
    

    • 



v1.27.0


New Features 🌈🔗


    

  • 

    zizmor now has experimental support for workflows that specify parallel steps. See Usage - Parallel steps for more information (#2153)
Enhancements 🌱🔗
    

    • 

  • 

    zizmor's handling of paths is now more consistent, particularly when run on Windows (#2163)
    

    • 

  • 

    zizmor now emits a helpful warning when being run in implicit offline mode (#2180)
    

    • 



Bug Fixes 🐛🔗


    

  • 

    Fixed a bug where the secrets-outside-env audit would not honor ignore comments within the same job scope (#2157)
    

    • 

  • 

    Fixed a bug where the ref-version-mismatch audit would not honor ignore comments within the same steps scope (#2177)
    

    • 

  • 

    Fixed a bug where --collect=[MODE] was not correctly handled when auditing remote inputs (#2185)
    

    • 








Changelog

Sourced from zizmor's changelog.




1.28.0


Security 🔒


    

  • 

    v1.27.0 contained a logging defect that would print any configured GitHub
credentials as part of zizmor's cleartext logging. No versions other than
v1.27.0 were affected. See [GHSA-f42p-wjw5-97qh] for full information.
    

    Many thanks to @​shaanmajid for finding and reporting this vulnerability.
    

    • 



Enhancements 🌱


    

  • 

    The JSON (v1) output format now includes metadata for each finding's fixes,
if the finding has fixes (#2186)
    

    • 

  • 

    The [dependabot-cooldown] audit is now aware of GitHub's new three-day default
cooldown (#2193)
    

    • 

  • 

    sbt is now recognized as a package-ecosystem in dependabot.yml (#2211)
    

    • 



Bug Fixes 🐛


    

  • 

    Fixed a bug where the [template-injection] audit would incorrectly flag
steps.*.outcome and steps.*.conclusion as injection risks in the default persona
(#2199)
    

    • 

  • 

    Fixed a bug where the [github-env] audit would incorrectly flag some printf
calls as exploitable (#2201)
    

    • 

  • 

    Fixed a bug where zizmor would produce a misleading and confusing error
message when asked to audit an ambiguous remote input (#2205)
    

    • 



1.27.0


New Features 🌈


    

  • zizmor now has experimental support for workflows that
specify parallel steps. See Usage - Parallel steps
for more information (#2153)
    • 



Enhancements 🌱


    

  • 

    zizmor's handling of paths is now more consistent, particularly
when run on Windows (#2163)
    

    • 

  • 

    zizmor now emits a helpful warning when being run in implicit offline mode (#2180)
    

    • 



Bug Fixes 🐛


    

  • Fixed a bug where the [secrets-outside-env] audit would not honor
    • 






... (truncated)





Commits





    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  python:uv

  Pull requests that update python:uv code

  labels


      Aug 1, 2026

    

  



    

    

      
    

    


      


          @github-actions
github-actions
Bot



          added
  the 

  internal

  Internal changes
 label


      Aug 1, 2026

    

  








      

  
      



  

  @github-actions






  



    

      

  

    

      
          
      

      
            github-actions
    Bot

      

      

      commented


        Aug 1, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

    

  





      


        



  
    

      
          
📝 Docs preview


Last commit 9c0325b at: https://295ff25e.asyncer.pages.dev


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
    

        

              @YuriiMotov


        

      

            YuriiMotov


            marked this pull request as draft

        August 3, 2026 19:56        
        
      

    










      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          ⬆ Bump the python-packages group across 1 directory with 7 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          bcc36b9
        
      

    

  

    

      
Bumps the python-packages group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [typer](https://github.com/fastapi/typer) | `0.26.8` | `0.27.0` |
| [zensical](https://github.com/zensical/zensical) | `0.0.47` | `0.0.51` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.56` | `0.0.64` |
| [prek](https://github.com/j178/prek) | `0.4.8` | `0.4.11` |
| [zizmor](https://github.com/zizmorcore/zizmor) | `1.26.1` | `1.28.0` |



Updates `typer` from 0.26.8 to 0.27.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.0)

Updates `zensical` from 0.0.47 to 0.0.51
- [Release notes](https://github.com/zensical/zensical/releases)
- [Commits](zensical/zensical@v0.0.47...v0.0.51)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `ruff` from 0.15.20 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.0)

Updates `ty` from 0.0.56 to 0.0.64
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.56...0.0.64)

Updates `prek` from 0.4.8 to 0.4.11
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.8...v0.4.11)

Updates `zizmor` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.26.1...v1.28.0)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: prek
  dependency-version: 0.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ty
  dependency-version: 0.0.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: zensical
  dependency-version: 0.0.51
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: zizmor
  dependency-version: 1.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



        changed the title
⬆ Bump the python-packages group with 7 updates

⬆ Bump the python-packages group across 1 directory with 7 updates


      Aug 3, 2026

    

  



  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/uv/python-packages-5aaaa297d1


    
 branch
    from
    38e808a    to
    bcc36b9      
    Compare
  



        August 3, 2026 20:02        
        
      

    





  

  
  

  
    

        

              @YuriiMotov


        

      

            YuriiMotov


            marked this pull request as ready for review

        August 5, 2026 20:56        
        
      

    










      

  
        





      

  
          
 
  

    
  

  


        
    

        

              @YuriiMotov


        

      

              YuriiMotov



            merged commit afd5478
          into

          
  
    main
  


        Aug 5, 2026

          

            29 checks passed
          

      

    


      

        
  
          
  
    
    


  
      

  







  

  
  

  
    

        

              @YuriiMotov


        

      

            YuriiMotov


        
    deleted the
    
      
        dependabot/uv/python-packages-5aaaa297d1
    
    branch

        August 5, 2026 20:59        
        
      

    














  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews







    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    internal

  Internal changes
  

    python:uv

  Pull requests that update python:uv code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      2 participants
    

    

        
          @tiangolo 
        
          @YuriiMotov