chore(deps): bump the all-dependencies group with 6 updates by dependabot[bot] · Pull Request #729 · gijzelaerr/python-snap7

dependabot · 2026-05-19T01:46:48Z

Bumps the all-dependencies group with 6 updates:

Package	From	To
hypothesis	`6.152.6`	`6.152.8`
types-setuptools	`82.0.0.20260508`	`82.0.0.20260518`
ruff	`0.15.12`	`0.15.13`
tox	`4.53.1`	`4.54.0`
uv	`0.11.13`	`0.11.15`
click	`8.3.3`	`8.4.0`

Updates hypothesis from 6.152.6 to 6.152.8

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Commits

ec394ec Bump hypothesis-python version to 6.152.8 and update changelog
70a31fa Merge pull request #4709 from HypothesisWorks/create-pull-request/patch
ab53fc1 drop end-of-life Django 4.2
0f3d80e sort PYTHONS dict in autoupdate output
3cdf0c8 format
b5f5975 address typing changes for mypy 2.0
14f3bd4 Update pinned dependencies
adc8d2d Bump hypothesis-python version to 6.152.7 and update changelog
d66ce67 Merge pull request #4672 from CharString/annotate-filter
df88957 Merge pull request #4727 from hettlage/patch-1
Additional commits viewable in compare view

Updates types-setuptools from 82.0.0.20260508 to 82.0.0.20260518

Commits

See full diff in compare view

Updates ruff from 0.15.12 to 0.15.13

Release notes

Sourced from ruff's releases.

0.15.13

Release Notes

Released on 2026-05-14.

Preview features

Add a rule to flag lazy imports that are eagerly evaluated (#25016)

[pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

Fix F811 false positive for class methods (#24933)

Fix setting selection for multi-folder workspace (#24819)

[eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)

[flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

Always include panic payload in panic diagnostic message (#24873)

Restrict PYI034 for in-place operations to enclosing class (#24511)

Improve error message for parameters that are declared global (#24902)

Update known stdlib (#25103)

Performance

[isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

Add TOML examples to --config help text (#25013)

Colorize ruff check 'All checks passed' (#25085)

Configuration

Increase max allowed value of line-length setting (#24962)

Documentation

Add D203 to rules that conflict with the formatter (#25044)

Clarify COM819 and formatter interaction (#25045)

Clarify that NotImplemented is a value, not an exception (F901) (#25054)

Update number of lint rules supported (#24942)

Other changes

Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.13

Released on 2026-05-14.

Preview features

Add a rule to flag lazy imports that are eagerly evaluated (#25016)

[pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

Fix F811 false positive for class methods (#24933)

Fix setting selection for multi-folder workspace (#24819)

[eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)

[flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

Always include panic payload in panic diagnostic message (#24873)

Restrict PYI034 for in-place operations to enclosing class (#24511)

Improve error message for parameters that are declared global (#24902)

Update known stdlib (#25103)

Performance

[isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

Add TOML examples to --config help text (#25013)

Colorize ruff check 'All checks passed' (#25085)

Configuration

Increase max allowed value of line-length setting (#24962)

Documentation

Add D203 to rules that conflict with the formatter (#25044)

Clarify COM819 and formatter interaction (#25045)

Clarify that NotImplemented is a value, not an exception (F901) (#25054)

Update number of lint rules supported (#24942)

Other changes

Simplify the playground's markdown template (#24924)

Contributors

@MichaReiser

... (truncated)

Commits

2afb467 Bump 0.15.13 (#25157)
3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
2522549 Remove shellcheck from prek (#25154)
7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
828cdb7 [ty] Isolate file-watching test environment (#25151)
89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
Additional commits viewable in compare view

Updates tox from 4.53.1 to 4.54.0

Release notes

Sourced from tox's releases.

v4.54.0

What's Changed

🧪 test(conftest): strip broken nspkg.pth files under py3.15 by @gaborbernat in tox-dev/tox#3937

✨ feat(packaging): declare tox.pytest deps via a testing extra by @gaborbernat in tox-dev/tox#3940

🐛 fix(schema): cover every replace form in the TOML schema by @gaborbernat in tox-dev/tox#3941

Full Changelog: tox-dev/tox@4.53.1...4.54.0

Changelog

Sourced from tox's changelog.

Features - 4.54.0

Declare the runtime dependencies of the tox.pytest plugin (pytest, devpi-process and pytest-mock) under a new testing extra, so plugin authors can pull them in via tox[testing] - by :user:gaborbernat. (:issue:3938, :issue:3940)

Bug fixes - 4.54.0

Extend the generated TOML schema to cover every replace table form (env, ref, posargs, glob, if), including conditional replacements used inside commands. A guard test asserts the schema stays in sync with the loader implementation so future replace types cannot be added without a corresponding schema entry. (:issue:3939)

v4.53.1 (2026-05-02)

Commits

1f1fcc7 release 4.54.0
b35c8ee 🐛 fix(schema): cover every replace form in the TOML schema (#3941)
6eb5c4f ✨ feat(packaging): declare tox.pytest deps via a testing extra (#3940)
1ad47dd 🧪 test(conftest): strip broken nspkg.pth files under py3.15 (#3937)
dfba966 [pre-commit.ci] pre-commit autoupdate (#3936)
21069af [pre-commit.ci] pre-commit autoupdate (#3933)
See full diff in compare view

Updates uv from 0.11.13 to 0.11.15

Release notes

Sourced from uv's releases.

0.11.15

Release Notes

Released on 2026-05-18.

Security

Fix a TAR parser differential, see GHSA-3cv2-h65g-fgmm (#19463)

Enforce that entry points cannot escape in the scripts directory, see GHSA-4gg8-gxpx-9rph (#19464)

Enhancements

Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)

Add support for Azure request signing (#19421)

Apply stricter validation to all wheel filename segments (#19364)

Reject empty strings as an invalid package name (#19435)

Use structured errors for signing authentication failures (#19422)

Preview

uv audit: Add JSON output (#19305)

Configuration

Respect required-environments in uv pip compile (#19378)

Performance

Avoid parsing JSON manifest when local Python is available (#19398)

Avoid walking nested directories in linker conflict registration (#19382)

Optimize async wheel ZIP writing (#19383)

Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)

Skip empty directories in uv build outputs (#19437)

Fix Git submodule handling when using relative paths (#12156)

Fix line number reporting in netrc parsing (#19452)

Documentation

Move Bazel auth helper setup into integration guide (#19392)

Install uv 0.11.15

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.15/uv-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.15

Released on 2026-05-18.

Security

Fix a TAR parser differential, see GHSA-3cv2-h65g-fgmm (#19463)

Enforce that entry points cannot escape in the scripts directory, see GHSA-4gg8-gxpx-9rph (#19464)

Enhancements

Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)

Add support for Azure request signing (#19421)

Apply stricter validation to all wheel filename segments (#19364)

Reject empty strings as an invalid package name (#19435)

Use structured errors for signing authentication failures (#19422)

Preview

uv audit: Add JSON output (#19305)

Configuration

Respect required-environments in uv pip compile (#19378)

Performance

Avoid parsing JSON manifest when local Python is available (#19398)

Avoid walking nested directories in linker conflict registration (#19382)

Optimize async wheel ZIP writing (#19383)

Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)

Skip empty directories in uv build outputs (#19437)

Fix Git submodule handling when using relative paths (#12156)

Fix line number reporting in netrc parsing (#19452)

Documentation

Move Bazel auth helper setup into integration guide (#19392)

0.11.14

Released on 2026-05-12.

Enhancements

Add Astral mirror URL override (#19206)

... (truncated)

Commits

3cffe97 Fix crates.io publish script lockfile (#19473)
de16a7b Bump version to 0.11.15 (#19472)
cf826cc Disable test_simultaneous_create_set_then_move on Linux (#19469)
2d566bc Allow retry of custom-publish-crates separately from announce (#19470)
0588b8f Run release builds on maturin version bumps in CI (#19466)
9a65753 Enforce that entry points cannot escape in the scripts directory (#19464)
d77d849 Revert "Update maturin to v1.13.2 (#19445)" (#19465)
5373e96 Update Rust crate rustls to v0.23.40 (#19250)
fb8d3d4 Update Rust crate rustls-pki-types to v1.14.1 (#19251)
078480d Configure maturin and uv so uv run can be used to work on uv itself (#19461)
Additional commits viewable in compare view

Updates click from 8.3.3 to 8.4.0

Release notes

Sourced from click's releases.

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

ParamType typing improvements. #3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

Parameter typing improvements. #2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. #2745 #3364

Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. #2012 #3363

The error hint now uses Command.get_help_option_names to pick non-shadowed help option names, so Try '... -h' no longer points to a subcommand option that shadows -h. All surviving names are shown (-h/--help). #2790 #3208

Fix readline functionality on non-Windows platforms. Prompt text is now passed directly to readline instead of being printed separately, allowing proper backspace, line editing, and line wrapping behavior. #2968

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.0

Released 2026-05-17

:class:ParamType typing improvements. :pr:3371

:class:ParamType is now a generic abstract base class, parameterized by its converted value type.

:meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).

:meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].

:class:CompositeParamType and the number-range base are now generic with abstract methods.

Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

:class:Parameter typing improvements. :pr:2805

:class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.

:attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.

The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

The error hint now uses :meth:Command.get_help_option_names to pick non-shadowed help option names, so Try '... -h' no longer points to a subcommand option that shadows -h. All surviving names are shown (-h/--help). :issue:2790 :pr:3208

Fix readline functionality on non-Windows platforms. Prompt text is now passed directly to readline instead of being printed separately, allowing proper backspace, line editing, and line wrapping behavior. :issue:2968 :pr:2969

Use :func:os.startfile on Windows to open URLs in :func:open_url, replacing the start built-in which cannot be invoked without shell=True. :issue:3164 :pr:3186

Fix Fish shell completion errors when option help text contains newlines. :issue:3043 :pr:3126

... (truncated)

Commits

41f410f Release 8.4.0
e3e69e3 Add type annotations for instance attributes in utils (#3422)
3bb230d WIP: Fix HelpFormatter.write_usage producing spurious characters (#3434)
63274a7 click.get_pager_file: add tests (#1572 followup) (#3405)
0551bf5 Fix HelpFormatter.write_usage producing spurious characters
fc41aa1 Apply class-body annotations to KeepOpenFile for consistency
b761eda Skip some tests on Windows
98302ac Check PAGER usage, color preservation and edge-cases
dbdae17 Fix documentation
1aa2d53 Redesigned tests and get_pager_file branching to be more clear and not set color
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.152.6` | `6.152.8` | | [types-setuptools](https://github.com/python/typeshed) | `82.0.0.20260508` | `82.0.0.20260518` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.12` | `0.15.13` | | [tox](https://github.com/tox-dev/tox) | `4.53.1` | `4.54.0` | | [uv](https://github.com/astral-sh/uv) | `0.11.13` | `0.11.15` | | [click](https://github.com/pallets/click) | `8.3.3` | `8.4.0` | Updates `hypothesis` from 6.152.6 to 6.152.8 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.152.6...hypothesis-python-6.152.8) Updates `types-setuptools` from 82.0.0.20260508 to 82.0.0.20260518 - [Commits](https://github.com/python/typeshed/commits) Updates `ruff` from 0.15.12 to 0.15.13 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.12...0.15.13) Updates `tox` from 4.53.1 to 4.54.0 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.53.1...4.54.0) Updates `uv` from 0.11.13 to 0.11.15 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.11.13...0.11.15) Updates `click` from 8.3.3 to 8.4.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.3...8.4.0) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.152.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: types-setuptools dependency-version: 82.0.0.20260518 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: ruff dependency-version: 0.15.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: tox dependency-version: 4.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: uv dependency-version: 0.11.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: click dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 19, 2026

github-actions Bot enabled auto-merge (squash) May 19, 2026 01:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-dependencies group with 6 updates#729

chore(deps): bump the all-dependencies group with 6 updates#729
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/all-dependencies-0df6254fd5

dependabot Bot commented on behalf of github May 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 19, 2026

Hypothesis for Python - version 6.152.8

Hypothesis for Python - version 6.152.7

previously: SearchStrategy[object]

now: SearchStrategy[str]

0.15.13

Release Notes

Preview features

Bug fixes

Rule changes

Performance

CLI

Configuration

Documentation

Other changes

Contributors

0.15.13

Preview features

Bug fixes

Rule changes

Performance

CLI

Configuration

Documentation

Other changes

Contributors

v4.54.0

What's Changed

Features - 4.54.0

Bug fixes - 4.54.0

0.11.15

Release Notes

Security

Enhancements

Preview

Configuration

Performance

Bug fixes

Documentation

Install uv 0.11.15

Install prebuilt binaries via shell script

0.11.15

Security

Enhancements

Preview

Configuration

Performance

Bug fixes

Documentation

0.11.14

Enhancements

8.4.0

Version 8.4.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants