Skip to content

chore(deps): bump the test-deps group across 1 directory with 6 updates - #599

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/test-deps-bf5485cf55
Open

chore(deps): bump the test-deps group across 1 directory with 6 updates#599
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/test-deps-bf5485cf55

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on codespell, ruff, coverage, pyright, pytest and pydantic to permit the latest version.
Updates codespell from 2.3.0 to 2.4.3

Release notes

Sourced from codespell's releases.

v2.4.3

What's Changed

... (truncated)

Commits
  • 57b2140 Read only [tool.codespell] from TOML config (#3975)
  • 23b8d94 [pre-commit.ci] pre-commit autoupdate
  • 926c4d6 [pre-commit.ci] pre-commit autoupdate
  • 820a301 Merge pull request #3967 from codespell-project/peternewman-patch-1
  • 9fe42c9 Add common misspellings for reseeve->reserve to dictionary
  • 725173c [pre-commit.ci] pre-commit autoupdate
  • 86c13ee [pre-commit.ci] pre-commit autoupdate
  • 7b9f36c Bump actions/checkout from 6 to 7
  • bcc1b80 Add spelling corrections for simpe and variants.
  • 89584cc [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates ruff from 0.11.0 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    

    • 






... (truncated)





Commits

    

  • a2635fd Bump 0.16.0 (#27136)
    • 

  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
    • 

  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
    • 

  • 17ef711 Stabilize --add-ignore (#27125)
    • 

  • ef912bb Add newly stabilized rules to defaults (#27055)
    • 

  • b30f040 Stabilize new default rules (#27035)
    • 

  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
    • 

  • 87e51e2 Fix format --check spans for syntax errors (#27045)
    • 

  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
    • 

  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
    • 

  • Additional commits viewable in compare view
    • 







Updates coverage from 7.6.1 to 7.15.2



Release notes

Sourced from coverage's releases.




7.15.2


Version 7.15.2 — 2026-07-15


    

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.
    • 



➡️  PyPI page: coverage 7.15.2.
:arrow_right:  To install: python3 -m pip install coverage==7.15.2


7.15.1


Version 7.15.1 — 2026-07-12


    

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
    • 

  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.
    • 



➡️  PyPI page: coverage 7.15.1.
:arrow_right:  To install: python3 -m pip install coverage==7.15.1


7.15.0


Version 7.15.0 — 2026-07-02


    

  • Since 7.14.0, reporting commands implicitly combine parallel data files. Now those commands have a new option --keep-combined to retain the data files after combining them instead of the default, which is to delete them. Finishes issue 2198.
    • 

  • Fix: the LCOV report would incorrectly count excluded functions as uncovered, as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen.
    • 

  • When running your program, coverage now correctly sets yourmodule.__spec__.loader as strongly recommended, avoiding the deprecation warning described in issue 2208. Thanks, A5rocks.
    • 

  • Fix: with Python 3.10, running with the -I (isolated mode) option didn’t correctly omit the current directory from the module search path, as described in issue 2103. That is now fixed thanks to Ilia Sorokin.
    • 



➡️  PyPI page: coverage 7.15.0.
:arrow_right:  To install: python3 -m pip install coverage==7.15.0


7.14.3


Version 7.14.3 — 2026-06-22


    

  • Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang.
    • 

  • Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can’t import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade.
    • 



➡️  PyPI page: coverage 7.14.3.
:arrow_right:  To install: python3 -m pip install coverage==7.14.3


7.14.2


Version 7.14.2 — 2026-06-20


    

  • Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197.
    • 

  • Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd.
    • 

  • Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don’t really make sense, so now we search for a usable one instead. Fixes issue 2187.
    • 

  • Following the advice of cibuildwheel, we no longer distribute wheels for Python 3.13 free-threaded.
    • 



➡️  PyPI page: coverage 7.14.2.
:arrow_right:  To install: python3 -m pip install coverage==7.14.2


7.14.1


Version 7.14.1 — 2026-05-26





... (truncated)





Changelog

Sourced from coverage's changelog.




Version 7.15.2 — 2026-07-15


    

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically
increased memory use during reporting for large projects. Now we use a
different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.
    • 



.. _issue 2229:  coveragepy/coveragepy#2229


.. _changes_7-15-1:


Version 7.15.1 — 2026-07-12


    

  • 

    Fix: in the HTML report with show_contexts enabled, a context label
containing </script> (for example a parametrized pytest node id) could
close the inline <script> element in a file page early, injecting markup.
Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.
    

    • 

  • 

    A number of performance improvements thanks to Paul Kehrer, in pull requests
2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pull 2221_>_.
    

    • 



.. _pull 2213: coveragepy/coveragepy#2213
.. _pull 2214: coveragepy/coveragepy#2214
.. _pull 2215: coveragepy/coveragepy#2215
.. _pull 2216: coveragepy/coveragepy#2216
.. _pull 2218: coveragepy/coveragepy#2218
.. _pull 2220: coveragepy/coveragepy#2220
.. _pull 2221: coveragepy/coveragepy#2221
.. _pull 2224: coveragepy/coveragepy#2224


.. _changes_7-15-0:


Version 7.15.0 — 2026-07-02


    

  • 

    Since 7.14.0, reporting commands implicitly combine parallel data files. Now
those commands have a new option --keep-combined to retain the data files
after combining them instead of the default, which is to delete them.
Finishes issue 2198_.
    

    • 

  • 

    Fix: the LCOV report would incorrectly count excluded functions as uncovered,
as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen <pull 2206_>.
    

    • 

  • 

    When running your program, coverage now correctly sets
    

    • 






... (truncated)





Commits

    

  • 50d8659 docs: sample HTML for 7.15.2
    • 

  • b5eed20 docs: prep for 7.15.2
    • 

  • 78cab6e fix: reduce memory use during reporting. #2229 (#2231)
    • 

  • b4c1fda build: bump version to 7.15.2
    • 

  • da63bed docs: sample HTML for 7.15.1
    • 

  • bc35e64 docs: prep for 7.15.1
    • 

  • 182b010 perf: resolve sysmon branch events lazily, one pair at a time (#2221)
    • 

  • ee271ee perf: compute multiline maps cheaply in the sysmon core (#2220)
    • 

  • 1441b96 chore: bump the action-dependencies group with 6 updates (#2225)
    • 

  • dd80635 fix: escape context labels in html report inline script block (#2224)
    • 

  • Additional commits viewable in compare view
    • 







Updates pyright from 1.1.408 to 1.1.411



Commits






Updates pytest from 9.0.3 to 9.1.1



Release notes

Sourced from pytest's releases.




9.1.1


pytest 9.1.1 (2026-06-19)


Bug fixes


    

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
    • 

  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
    • 

  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
    • 

  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments.
This could cause certain hooks (like pytest_addoption) in these files to not fire.
    • 



9.1.0


pytest 9.1.0 (2026-06-13)


Removals and backward incompatible breaking changes


    

  • 

    #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.
    

    If this is undesirable, move the fixture definition to a conftest.py file if possible.
    

    Technical explanation for those interested:
When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration).
Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module.
This means that both need to register the fixtures independently.
    

    • 



Deprecations (removal in next major release)


    

  • 

    #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.
    

    See 10819 and 14011.
    

    • 

  • 

    #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.
    

    See dynamic-fixture-request-during-teardown for details.
    

    • 

  • 

    #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.
    

    These iterables get exhausted after the first iteration,
leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times,
using class-level parametrize decorators,
or collecting tests multiple times.
    

    See parametrize-iterators for details and suggestions.
    

    • 

  • 

    #13946: The private config.inicfg attribute is now deprecated.
Use config.getini() <pytest.Config.getini> to access configuration values instead.
    

    See config-inicfg for more details.
    

    • 

  • 

    #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.
    

    • 






... (truncated)





Commits

    

  • cf470ec Prepare release version 9.1.1
    • 

  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
    • 

  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
    • 

  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
    • 

  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
    • 

  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
    • 

  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
    • 

  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
    • 

  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
    • 

  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
    • 

  • Additional commits viewable in compare view
    • 







Updates pydantic to 2.13.4



Release notes

Sourced from pydantic's releases.




v2.13.4 2026-05-06


v2.13.4 (2026-05-06)


What's Changed


Packaging



Fixes



Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4







Changelog

Sourced from pydantic's changelog.




v2.13.4 (2026-05-06)


GitHub release


What's Changed


Packaging



Fixes



v2.13.3 (2026-04-20)


GitHub release


What's Changed


Fixes



v2.13.2 (2026-04-17)


GitHub release


What's Changed


Fixes


    

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084
    • 



v2.13.1 (2026-04-15)


GitHub release


What's Changed


Fixes



v2.13.0 (2026-04-13)


GitHub release


The highlights of the v2.13 release are available in the blog post.





... (truncated)





Commits

    

  • cf67d4b Fix linting
    • 

  • f0d8a21 Prepare release v2.13.4
    • 

  • 5e3fe1d Check for pydantic tag pattern in CI
    • 

  • 7f9edcc Document tagging conventions
    • 

  • b46a0c9 Adapt pydantic-core linker flags on macOS
    • 

  • 50629c8 Update to PyPy 7.3.22
    • 

  • 8522ebb Preserve RootModel core metadata
    • 

  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
    • 

  • 909259a Remove Logfire example in documentation
    • 

  • 2c4174c Bump libc from 0.2.155 to 0.2.185
    • 

  • Additional commits viewable in compare view
    • 






    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



          added
  the 
  dependencies

  Issue/PR created by dependabot
 label


      Jul 17, 2026

    

  



  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

              requested a review
  from a team
    as a code owner


        July 17, 2026 07:43        
        
      

    





  
    

    

      
    

    


      


          @dependabot
dependabot
Bot



          added
  the 
  dependencies

  Issue/PR created by dependabot
 label


      Jul 17, 2026

    

  








      

  
      



  

  @james-garner-canonical






  



    

      

  

    

      
          
      

      
            james-garner-canonical
    

      

      

      commented


        Jul 20, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Collaborator


        

    

  





      


        



  
    

      
          
This one is going to take some figuring out. Bumping these dependencies has been broken for a while. It seems like it will actually be quite painful to bump them, as each separately owned library may need to be reformatted when we bump (e.g.) ruff. Additionally, I expect we'll also see a bunch of trivial failures from bumping pytest since lockfiles will require updates.


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



        changed the title
chore(deps): bump the test-deps group with 6 updates

chore(deps): bump the test-deps group across 1 directory with 6 updates


      Jul 24, 2026

    

  



  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/pip/test-deps-bf5485cf55


    
 branch
    from
    33501e3    to
    fbd8f27      
    Compare
  



        July 24, 2026 01:02        
        
      

    










      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the test-deps group across 1 directory with 6 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          1f35bcc
        
      

    

  

    

      
Updates the requirements on [codespell](https://github.com/codespell-project/codespell), [ruff](https://github.com/astral-sh/ruff), [coverage](https://github.com/coveragepy/coveragepy), [pyright](https://github.com/RobertCraigie/pyright-python), [pytest](https://github.com/pytest-dev/pytest) and [pydantic](https://github.com/pydantic/pydantic) to permit the latest version.

Updates `codespell` from 2.3.0 to 2.4.3
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.3.0...v2.4.3)

Updates `ruff` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.0...0.16.0)

Updates `coverage` from 7.6.1 to 7.15.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.6.1...7.15.2)

Updates `pyright` from 1.1.408 to 1.1.411
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.408...v1.1.411)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pydantic` to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.0...v2.13.4)

---
updated-dependencies:
- dependency-name: codespell
  dependency-version: 2.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: test-deps
- dependency-name: coverage
  dependency-version: 7.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-deps
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  dependency-group: test-deps
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-deps
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-deps
- dependency-name: ruff
  dependency-version: 0.15.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: test-deps
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/pip/test-deps-bf5485cf55


    
 branch
    from
    fbd8f27    to
    1f35bcc      
    Compare
  



        August 1, 2026 17:17        
        
      

    










      

  
        





      

  
          
  









  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    


      

          


  
      @james-garner-canonical
  
    james-garner-canonical


          Awaiting requested review from james-garner-canonical


      



        

      At least 1 approving review is required to merge this pull request.
  









  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

      
    dependencies

  Issue/PR created by dependabot








  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      1 participant
    

    

        
          @james-garner-canonical