Skip to content

[uv](deps): Bump the dependencies group across 1 directory with 3 updates - #637

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-bcae9e730c
Open

[uv](deps): Bump the dependencies group across 1 directory with 3 updates#637
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-bcae9e730c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 3 updates in the / directory: prometheus-client, pygit2 and ruff.

Updates prometheus-client from 0.25.0 to 0.26.0

Release notes

Sourced from prometheus-client's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: prometheus/client_python@v0.25.0...v0.26.0

Commits
  • 9b6b971 Release v0.26.0
  • fb072c2 Fix operator precedence allowing exemplars on any metric type (#1188)
  • 6e22fb5 Remove nameless collectors from the registry on unregister (#1191)
  • 5b09479 Parse the native histogram sum as a float (#1192)
  • 769b415 fix: make test suite pass on Windows and Python 3.12+ (#1185)
  • d0b497f Update common Prometheus files (#1195)
  • 75603d7 Update common Prometheus files (#1194)
  • fb2351f Do not emit a leading zero in floatToGoString exponents >= 10 (#1190)
  • a39a697 Validate Enum arguments before registering the collector (#1189)
  • a96f6f4 Add TLS version parameters for start_wsgi_server (#1178)
  • Additional commits viewable in compare view

Updates pygit2 from 1.19.3 to 1.20.0

Release notes

Sourced from pygit2's releases.

1.20.0 (2026-08-08)

  • New RemoteCallbacks.custom_headers() #1465

  • New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

  • Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

  • Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

  • Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

  • Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

  • Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

  • Add riscv64 wheels #1463

Breaking changes:

  • Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

  • Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

  • Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

  • Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

  • Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Changelog

Sourced from pygit2's changelog.

1.20.0 (2026-08-08)

  • New RemoteCallbacks.custom_headers() #1465

  • New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

  • Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

  • Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

  • Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

  • Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

  • Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

  • Add riscv64 wheels #1463

Breaking changes:

  • Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

  • Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

  • Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

  • Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

  • Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Commits
  • ba21cf5 Release 1.20.0
  • 28be4b8 Fix refcount test failing under pytest assertion rewriting
  • 007c562 Fix NULL dereference in refdb backend exists callback
  • 5878864 Fix ownership and lifetime bugs in refdb backend callbacks
  • 2efb706 Update wheels to OpenSSL 3.5.7
  • cc48ea6 Fix ownership and error handling bugs in refdb backend callbacks
  • 997c65b Fix the refdb backend rename callback
  • eb512d2 Fix refcounting bugs in the refdb backend write callback
  • 258bf55 chore(CI): bump actions/setup-python from 6 to 7 in the actions group
  • b7fdcd6 encoding: drop public to_str, rename internal helper to path_to_str
  • Additional commits viewable in compare view

Updates ruff from 0.15.22 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

Install ruff 0.16.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"

Download ruff 0.16.2

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

... (truncated)

Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the dependencies group with 3 updates in the / directory: [prometheus-client](https://github.com/prometheus/client_python), [pygit2](https://github.com/libgit2/pygit2) and [ruff](https://github.com/astral-sh/ruff).


Updates `prometheus-client` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.25.0...v0.26.0)

Updates `pygit2` from 1.19.3 to 1.20.0
- [Release notes](https://github.com/libgit2/pygit2/releases)
- [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md)
- [Commits](libgit2/pygit2@v1.19.3...v1.20.0)

Updates `ruff` from 0.15.22 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.16.2)

---
updated-dependencies:
- dependency-name: prometheus-client
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pygit2
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.16.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 11, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 11, 2026 18:36
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants