Skip to content

build(deps): bump the python-minor-patch group across 1 directory with 3 updates - #78

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-877bd4be3b
Closed

build(deps): bump the python-minor-patch group across 1 directory with 3 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-877bd4be3b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-minor-patch group with 3 updates in the / directory: boto3, ruff and simpleeval.

Updates boto3 from 1.43.92 to 1.43.97

Commits
  • ed7de96 Merge branch 'release-1.43.97'
  • 275709c Bumping version to 1.43.97
  • a5c0088 Add changelog entries from botocore
  • 2be9967 Merge branch 'release-1.43.96'
  • bc62489 Merge branch 'release-1.43.96' into develop
  • 6e1774a Bumping version to 1.43.96
  • ef6f957 Add changelog entries from botocore
  • 238d6ec Update PyPI package summary to add Boto3 (#4846)
  • 2d18ca8 Add root workspace folder to gitignore (#4847)
  • 3061d22 Merge branch 'release-1.43.95'
  • Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates simpleeval from 1.0.7 to 1.0.8

Release notes

Sourced from simpleeval's releases.

1.0.8

What's Changed

3 Security improvements:

fixed in: danthedeckie/simpleeval#199

This highlights again the need to switch to allow-lists rather than deny-lists for security on simpleeval. So the next phase is a 1.1.x stream where it's backwards compatible, BUT with deprecation warnings about any use of the system without opt in to allow-lists, and then a 2.x release where it's required.

A few other process improvements that were helpful in getting those fixes in:

Full Changelog: danthedeckie/simpleeval@1.0.7...1.0.8

Commits
  • e4466b7 Merge pull request #199 from danthedeckie/security-bump
  • 71df7dd Bump version number
  • d237e4e Add set/frozenset to tested types for names
  • 408f0aa Fix escapes via operator module functions
  • 5fe0705 Block more os module dangerous functions
  • 9587cbe Merge pull request #198 from danthedeckie/tox
  • 9cf76e1 Add tox to dev for easy testing all supported python versions locally
  • ea3d6d0 Merge pull request #194 from danthedeckie/lint-upgrades
  • 1a0e8c3 pyproject.toml doesn't need to mention test_simpleeval.py either
  • 0410a2c README should mention the tests/ not test_simpleeval.py
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 25, 2026
@dependabot
dependabot Bot requested a review from MSKazemi as a code owner September 25, 2026 09:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 25, 2026
@dependabot
build(deps): bump the python-minor-patch group across 1 directory wit…
6202153 
…h 3 updates

Bumps the python-minor-patch group with 3 updates in the / directory: [boto3](https://github.com/boto/boto3), [ruff](https://github.com/astral-sh/ruff) and [simpleeval](https://github.com/danthedeckie/simpleeval).


Updates `boto3` from 1.43.92 to 1.43.97
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.92...1.43.97)

Updates `ruff` from 0.16.7 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.7...0.16.8)

Updates `simpleeval` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/danthedeckie/simpleeval/releases)
- [Commits](danthedeckie/simpleeval@1.0.7...1.0.8)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: simpleeval
  dependency-version: 1.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-877bd4be3b branch from e2b4ca8 to 6202153 Compare September 25, 2026 10:50
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-877bd4be3b branch September 28, 2026 06:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MSKazemi MSKazemi Awaiting requested review from MSKazemi MSKazemi is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants