Skip to content

chore(deps-dev)(deps-dev): bump the dev group with 3 updates - #109

Merged
ShoGinn merged 1 commit into
mainfrom
dependabot/uv/dev-dccac3b141
Sep 5, 2026
Merged

chore(deps-dev)(deps-dev): bump the dev group with 3 updates#109
ShoGinn merged 1 commit into
mainfrom
dependabot/uv/dev-dccac3b141

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev group with 3 updates: httpx2, ruff and ty.

Updates httpx2 from 2.10.0 to 2.12.0

Release notes

Sourced from httpx2's releases.

v2.12.0

Highlights

🛡️ Bounded response decompression

httpx2 now decodes gzip, deflate, Brotli, and Zstandard responses incrementally. Each decode step emits at most 1 MiB, so streaming a highly compressed response no longer requires materializing an entire inflated network chunk in memory (pydantic/httpx2#1126).

📦 Shared Zstandard API

Python 3.13 and earlier now use backports.zstd, which provides the same bounded incremental decompression API as compression.zstd on Python 3.14 and later (pydantic/httpx2#1146).

httpx2

Changed

Fixed

httpcore2

No changes since 2.11.0. Version bumped to stay in lockstep with httpx2.

Full Changelog: pydantic/httpx2@v2.11.0...v2.12.0

v2.11.0

Highlights

🌐 Public origin API

httpx2 now includes an immutable and hashable Origin value object, available through URL.origin. It provides normalized scheme, host, and effective port comparisons without including URL paths, queries, fragments, or credentials (pydantic/httpx2#1134).

🛠️ Request compatibility and validation

httpx2

Added

Changed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.12.0 (August 18th, 2026)

Changed

  • Use backports.zstd for Zstandard decoding on Python 3.13 and earlier. (#1146)

Fixed

  • Bound peak memory while streaming compressed responses and close response streams when decoding fails. (#1126)

2.11.0 (August 18th, 2026)

Added

  • Add the public Origin value object and URL.origin property for normalized, hashable origin comparisons. (#1134)

Changed

  • Require Brotli 1.2.0 or later for the brotli extra. (#1141)

Fixed

  • Restore deprecated status code aliases. (#1135)
  • Extract HTTP/2 release notes from changelog headings correctly. (#1136)
  • Respect explicit Transfer-Encoding headers and expose buffered request body lengths to WSGI applications. (#1137)
  • Validate multipart part header names and values before serialization. (#1142)
Commits

Updates ruff from 0.16.2 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates ty from 0.0.69 to 0.0.77

Release notes

Sourced from ty's releases.

0.0.77

Release Notes

Released on 2026-08-31.

Bug fixes

  • Bound recursive protocol traversal in generic intersections (#28215)
  • Preserve recursion guards across nested type operations (#28150)
  • Preserve syntax and comments when removing redundant casts (#28145)
  • Stabilize recursive receiver inference (#28042)
  • Stabilize condition truthiness during cyclic inference (#28212)

Core type checking

  • Preserve generic receivers in implicit __init_subclass__ calls (#28138)
  • Preserve specialization for inherited TypedDict methods (#28111)
  • Propagate deletions through nested loop headers (#28044)

Performance

  • Avoid repeated inference for literal union call results (#28196)

Contributors

Install ty 0.0.77

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.77/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.77/ty-installer.ps1 | iex"

Download ty 0.0.77

File Platform Checksum
ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ty-x86_64-apple-darwin.tar.gz Intel macOS checksum
ty-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ty-i686-pc-windows-msvc.zip x86 Windows checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.77

Released on 2026-08-31.

Bug fixes

  • Bound recursive protocol traversal in generic intersections (#28215)
  • Preserve recursion guards across nested type operations (#28150)
  • Preserve syntax and comments when removing redundant casts (#28145)
  • Stabilize recursive receiver inference (#28042)
  • Stabilize condition truthiness during cyclic inference (#28212)

Core type checking

  • Preserve generic receivers in implicit __init_subclass__ calls (#28138)
  • Preserve specialization for inherited TypedDict methods (#28111)
  • Propagate deletions through nested loop headers (#28044)

Performance

  • Avoid repeated inference for literal union call results (#28196)

Contributors

0.0.76

Released on 2026-08-31.

Preview features

  • Add a missing-direct-dependency rule (#28001)
  • Cancel superseded queued uv requests (#28108)
  • Check direct dependencies in PEP 723 scripts (#28136)
  • Fix Goto definition in script dependencies (#27747)
  • Move script environment initialization to the CLI and LSP (#28038)
  • Refresh uv project metadata in the background (#27933)
  • Synchronize PEP 723 script environments in the language server (#27619)
  • Warn when uv metadata cannot support dependency checks (#28133)

Bug fixes

  • Avoid panics on incomplete protocol type parameter lists (#28088)
  • Fix auto-completion panic involving bare declarations (#28191)
  • Guard recursive meta-type expansion (#28143)
  • Preserve parentheses when removing redundant casts (#28092)

LSP server

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 3 updates: [httpx2](https://github.com/pydantic/httpx2), [ruff](https://github.com/astral-sh/ruff) and [ty](https://github.com/astral-sh/ty).


Updates `httpx2` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.10.0...v2.12.0)

Updates `ruff` from 0.16.2 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.5)

Updates `ty` from 0.0.69 to 0.0.77
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.69...0.0.77)

---
updated-dependencies:
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: ty
  dependency-version: 0.0.77
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 5, 2026
@railway-app

railway-app Bot commented Sep 5, 2026

Copy link
Copy Markdown

🚅 Deployed to the tax-tracker-pr-109 environment in endearing-eagerness

Service Status Web Updated
tax-tracker ✅ Success (View Logs) Web Sep 5, 2026 at 3:18 pm UTC

@railway-app
railway-app Bot temporarily deployed to endearing-eagerness / tax-tracker-pr-109 September 5, 2026 15:16 Destroyed
@ShoGinn
ShoGinn enabled auto-merge (squash) September 5, 2026 15:18
@ShoGinn
ShoGinn merged commit 3538b39 into main Sep 5, 2026
12 checks passed
@ShoGinn
ShoGinn deleted the dependabot/uv/dev-dccac3b141 branch September 5, 2026 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant