chore(deps): bump the python group with 178 updates

[dependabot]

Bumps the python group with 178 updates:

Package	From	To
keras	3.15.0	3.15.1
mediapipe	0.10.33	1.0.1
numpy	2.3.4	2.5.2
opencv-contrib-python	4.13.0.92	5.0.0.93
ruff	0.16.0	0.16.5
mypy	2.3.0	2.3.1
absl-py	2.4.0	2.5.0
cffi	2.0.0	2.1.1
matplotlib	3.11.0	3.11.1
ml-dtypes	0.5.4	0.6.0
optree	0.19.1	0.20.0
packaging	26.2	26.3
pillow	12.2.0	12.3.0
pygments	2.20.0	2.21.0
pyobjc	12.2.1	12.2.2
pyobjc-core	12.2.1	12.2.2
pyobjc-framework-accessibility	12.2.1	12.2.2
pyobjc-framework-accounts	12.2.1	12.2.2
pyobjc-framework-addressbook	12.2.1	12.2.2
pyobjc-framework-adservices	12.2.1	12.2.2
pyobjc-framework-adsupport	12.2.1	12.2.2
pyobjc-framework-applescriptkit	12.2.1	12.2.2
pyobjc-framework-applescriptobjc	12.2.1	12.2.2
pyobjc-framework-applicationservices	12.2.1	12.2.2
pyobjc-framework-apptrackingtransparency	12.2.1	12.2.2
pyobjc-framework-arkit	12.2.1	12.2.2
pyobjc-framework-audiovideobridging	12.2.1	12.2.2
pyobjc-framework-authenticationservices	12.2.1	12.2.2
pyobjc-framework-automaticassessmentconfiguration	12.2.1	12.2.2
pyobjc-framework-automator	12.2.1	12.2.2
pyobjc-framework-avfoundation	12.2.1	12.2.2
pyobjc-framework-avkit	12.2.1	12.2.2
pyobjc-framework-avrouting	12.2.1	12.2.2
pyobjc-framework-backgroundassets	12.2.1	12.2.2
pyobjc-framework-browserenginekit	12.2.1	12.2.2
pyobjc-framework-businesschat	12.2.1	12.2.2
pyobjc-framework-calendarstore	12.2.1	12.2.2
pyobjc-framework-callkit	12.2.1	12.2.2
pyobjc-framework-carbon	12.2.1	12.2.2
pyobjc-framework-cfnetwork	12.2.1	12.2.2
pyobjc-framework-cinematic	12.2.1	12.2.2
pyobjc-framework-classkit	12.2.1	12.2.2
pyobjc-framework-cloudkit	12.2.1	12.2.2
pyobjc-framework-cocoa	12.2.1	12.2.2
pyobjc-framework-collaboration	12.2.1	12.2.2
pyobjc-framework-colorsync	12.2.1	12.2.2
pyobjc-framework-compositorservices	12.2.1	12.2.2
pyobjc-framework-contacts	12.2.1	12.2.2
pyobjc-framework-contactsui	12.2.1	12.2.2
pyobjc-framework-coreaudio	12.2.1	12.2.2
pyobjc-framework-coreaudiokit	12.2.1	12.2.2
pyobjc-framework-corebluetooth	12.2.1	12.2.2
pyobjc-framework-coredata	12.2.1	12.2.2
pyobjc-framework-corehaptics	12.2.1	12.2.2
pyobjc-framework-corelocation	12.2.1	12.2.2
pyobjc-framework-coremedia	12.2.1	12.2.2
pyobjc-framework-coremediaio	12.2.1	12.2.2
pyobjc-framework-coremidi	12.2.1	12.2.2
pyobjc-framework-coreml	12.2.1	12.2.2
pyobjc-framework-coremotion	12.2.1	12.2.2
pyobjc-framework-coreservices	12.2.1	12.2.2
pyobjc-framework-corespotlight	12.2.1	12.2.2
pyobjc-framework-coretext	12.2.1	12.2.2
pyobjc-framework-corewlan	12.2.1	12.2.2
pyobjc-framework-cryptotokenkit	12.2.1	12.2.2
pyobjc-framework-datadetection	12.2.1	12.2.2
pyobjc-framework-devicecheck	12.2.1	12.2.2
pyobjc-framework-devicediscoveryextension	12.2.1	12.2.2
pyobjc-framework-dictionaryservices	12.2.1	12.2.2
pyobjc-framework-discrecording	12.2.1	12.2.2
pyobjc-framework-discrecordingui	12.2.1	12.2.2
pyobjc-framework-diskarbitration	12.2.1	12.2.2
pyobjc-framework-dvdplayback	12.2.1	12.2.2
pyobjc-framework-eventkit	12.2.1	12.2.2
pyobjc-framework-exceptionhandling	12.2.1	12.2.2
pyobjc-framework-executionpolicy	12.2.1	12.2.2
pyobjc-framework-extensionkit	12.2.1	12.2.2
pyobjc-framework-externalaccessory	12.2.1	12.2.2
pyobjc-framework-fileprovider	12.2.1	12.2.2
pyobjc-framework-fileproviderui	12.2.1	12.2.2
pyobjc-framework-findersync	12.2.1	12.2.2
pyobjc-framework-fsevents	12.2.1	12.2.2
pyobjc-framework-fskit	12.2.1	12.2.2
pyobjc-framework-gamecenter	12.2.1	12.2.2
pyobjc-framework-gamecontroller	12.2.1	12.2.2
pyobjc-framework-gamekit	12.2.1	12.2.2
pyobjc-framework-gameplaykit	12.2.1	12.2.2
pyobjc-framework-gamesave	12.2.1	12.2.2
pyobjc-framework-healthkit	12.2.1	12.2.2
pyobjc-framework-imagecapturecore	12.2.1	12.2.2
pyobjc-framework-inputmethodkit	12.2.1	12.2.2
pyobjc-framework-installerplugins	12.2.1	12.2.2
pyobjc-framework-instantmessage	12.2.1	12.2.2
pyobjc-framework-intents	12.2.1	12.2.2
pyobjc-framework-intentsui	12.2.1	12.2.2
pyobjc-framework-iobluetooth	12.2.1	12.2.2
pyobjc-framework-iobluetoothui	12.2.1	12.2.2
pyobjc-framework-iosurface	12.2.1	12.2.2
pyobjc-framework-ituneslibrary	12.2.1	12.2.2
pyobjc-framework-kernelmanagement	12.2.1	12.2.2
pyobjc-framework-latentsemanticmapping	12.2.1	12.2.2
pyobjc-framework-launchservices	12.2.1	12.2.2
pyobjc-framework-libdispatch	12.2.1	12.2.2
pyobjc-framework-libxpc	12.2.1	12.2.2
pyobjc-framework-linkpresentation	12.2.1	12.2.2
pyobjc-framework-localauthentication	12.2.1	12.2.2
pyobjc-framework-localauthenticationembeddedui	12.2.1	12.2.2
pyobjc-framework-mailkit	12.2.1	12.2.2
pyobjc-framework-mapkit	12.2.1	12.2.2
pyobjc-framework-mediaaccessibility	12.2.1	12.2.2
pyobjc-framework-mediaextension	12.2.1	12.2.2
pyobjc-framework-medialibrary	12.2.1	12.2.2
pyobjc-framework-mediaplayer	12.2.1	12.2.2
pyobjc-framework-mediatoolbox	12.2.1	12.2.2
pyobjc-framework-metal	12.2.1	12.2.2
pyobjc-framework-metalfx	12.2.1	12.2.2
pyobjc-framework-metalkit	12.2.1	12.2.2
pyobjc-framework-metalperformanceshaders	12.2.1	12.2.2
pyobjc-framework-metalperformanceshadersgraph	12.2.1	12.2.2
pyobjc-framework-metrickit	12.2.1	12.2.2
pyobjc-framework-mlcompute	12.2.1	12.2.2
pyobjc-framework-modelio	12.2.1	12.2.2
pyobjc-framework-multipeerconnectivity	12.2.1	12.2.2
pyobjc-framework-naturallanguage	12.2.1	12.2.2
pyobjc-framework-netfs	12.2.1	12.2.2
pyobjc-framework-network	12.2.1	12.2.2
pyobjc-framework-networkextension	12.2.1	12.2.2
pyobjc-framework-notificationcenter	12.2.1	12.2.2
pyobjc-framework-opendirectory	12.2.1	12.2.2
pyobjc-framework-osakit	12.2.1	12.2.2
pyobjc-framework-oslog	12.2.1	12.2.2
pyobjc-framework-passkit	12.2.1	12.2.2
pyobjc-framework-pencilkit	12.2.1	12.2.2
pyobjc-framework-phase	12.2.1	12.2.2
pyobjc-framework-photos	12.2.1	12.2.2
pyobjc-framework-photosui	12.2.1	12.2.2
pyobjc-framework-preferencepanes	12.2.1	12.2.2
pyobjc-framework-pushkit	12.2.1	12.2.2
pyobjc-framework-quartz	12.2.1	12.2.2
pyobjc-framework-quicklookthumbnailing	12.2.1	12.2.2
pyobjc-framework-replaykit	12.2.1	12.2.2
pyobjc-framework-safariservices	12.2.1	12.2.2
pyobjc-framework-safetykit	12.2.1	12.2.2
pyobjc-framework-scenekit	12.2.1	12.2.2
pyobjc-framework-screencapturekit	12.2.1	12.2.2
pyobjc-framework-screensaver	12.2.1	12.2.2
pyobjc-framework-screentime	12.2.1	12.2.2
pyobjc-framework-scriptingbridge	12.2.1	12.2.2
pyobjc-framework-searchkit	12.2.1	12.2.2
pyobjc-framework-security	12.2.1	12.2.2
pyobjc-framework-securityfoundation	12.2.1	12.2.2
pyobjc-framework-securityinterface	12.2.1	12.2.2
pyobjc-framework-securityui	12.2.1	12.2.2
pyobjc-framework-sensitivecontentanalysis	12.2.1	12.2.2
pyobjc-framework-servicemanagement	12.2.1	12.2.2
pyobjc-framework-sharedwithyou	12.2.1	12.2.2
pyobjc-framework-sharedwithyoucore	12.2.1	12.2.2
pyobjc-framework-shazamkit	12.2.1	12.2.2
pyobjc-framework-social	12.2.1	12.2.2
pyobjc-framework-soundanalysis	12.2.1	12.2.2
pyobjc-framework-speech	12.2.1	12.2.2
pyobjc-framework-spritekit	12.2.1	12.2.2
pyobjc-framework-storekit	12.2.1	12.2.2
pyobjc-framework-symbols	12.2.1	12.2.2
pyobjc-framework-syncservices	12.2.1	12.2.2
pyobjc-framework-systemconfiguration	12.2.1	12.2.2
pyobjc-framework-systemextensions	12.2.1	12.2.2
pyobjc-framework-threadnetwork	12.2.1	12.2.2
pyobjc-framework-uniformtypeidentifiers	12.2.1	12.2.2
pyobjc-framework-usernotifications	12.2.1	12.2.2
pyobjc-framework-usernotificationsui	12.2.1	12.2.2
pyobjc-framework-videosubscriberaccount	12.2.1	12.2.2
pyobjc-framework-videotoolbox	12.2.1	12.2.2
pyobjc-framework-virtualization	12.2.1	12.2.2
pyobjc-framework-vision	12.2.1	12.2.2
pyobjc-framework-webkit	12.2.1	12.2.2
sounddevice	0.5.5	0.5.6
typing-extensions	4.15.0	4.16.0

Updates keras from 3.15.0 to 3.15.1

Release notes

Sourced from keras's releases.

Keras 3.15.1

Release Notes

Keras 3.15.1 is a patch release containing important security hardening, bug fixes, and Python 3.14 compatibility improvements.

Security Fixes

• Restrict unpickling when loading IMDB and Reuters datasets — Prevents insecure deserialization (CWE-502) by replacing bare np.load(allow_pickle=True) with a restricted unpickler that only permits numpy array reconstruction. (#23047) by @​LinZiyuu
• Verify all intermediary H5 groups when navigating H5 files — Manually resolves nested H5 group paths to verify group types at each step, preventing potential path traversal issues. (#23168) by @​hertschuh
• Reject decompression-bomb members on the .keras asset extraction path — Adds per-member decompression-ratio checks before extracting .keras archives to disk, preventing disk-exhaustion attacks via crafted archives. (#23101) by @​LinZiyuu
• Restrict unpickling when loading CIFAR datasets — Replaces bare cPickle.load in CIFAR-10/100 batch loading with the numpy-only RestrictedUnpickler, blocking arbitrary code execution via pickle gadgets. (#23252) by @​SABITHSAHEB

Bug Fixes

• Refactor _load_state to capture weight store while preserving Keras test passing — Improves model loading efficiency by capturing the weight store into a local variable, and enhances nested container detection in legacy files with isolated failure tracking. (#23226) by @​buildwithsuhana
• Fix TraceContext error for NNX backend — Fixes TraceContext errors when using JAX NNX backend with models like T5 that lack a build method. Skips trace-level checks during symbolic shape inference and handles Flax 0.12 API changes. Fixes #23289. (#23326) by @​divyashreepathihalli

Compatibility

• Fixes for Python 3.14 — Resolves NotImplementedError boolean coercion changes in Python 3.14 and fixes dimension filtering in shape utilities. (#23259) by @​hertschuh

---

Contributors

Thank you to all the contributors who made this release possible! 🎉

• @​LinZiyuu — Security hardening for IMDB, Reuters, and .keras asset extraction (#23047, #23101)
• @​hertschuh — H5 group verification, Python 3.14 compatibility (#23168, #23259)
• @​buildwithsuhana — Model loading refactor (#23226)
• @​SABITHSAHEB — CIFAR dataset pickle restriction (#23252)
• @​divyashreepathihalli — NNX backend TraceContext fix (#23326)

---

Full Changelog: keras-team/keras@v3.15.0...v3.15.1

Commits

• 250b421 Bump version to 3.15.1 (#23350)
• See full diff in compare view

Updates mediapipe from 0.10.33 to 1.0.1

Release notes

Sourced from mediapipe's releases.

MediaPipe v1.0.0

Build changes

• Remove MacOS prebuilts
• Replace ITUIOSTestUtil with ITUTestRunEnvironment in iOS tests.

Bazel changes

• Migrate Apple rules dependencies to MODULE.bazel.

Framework and core calculator improvements

• Add Gecko support to MediaPipe Text Embedder Task
• Store wgpu::Instance in WebGpuService.
• Supporting builds with DRISHTI_DISABLE_GL_COMPUTE define.
• Bump MediaPipe version to 0.10.36.
• • Abseil (com_google_absl): Updated from (2023-10-18) to (2025-01-14).
• Add Gecko support to TextEmbedder C API.
• Use standardized enum constants for Running Mode
• Report Mat type in debug logging.
• Add AddAudioHeaderCalculator
• Remove run_llm_inference.sh
• Add webgpu::Instance to WebGpuDeviceAttachmentManager.
• Fix MediaPipe nightly build failure and cleanup Bzlmod warnings.
• Fix null pointer access in Tensor::GetOpenGlTexture2dReadView() for AHWB backed Tensor.
• Adds SpectrogramFloatCalculator and InverseSpectrogramFloatCalculator to support float precision.
• Add support for Embedding Gemma models in TextEmbedder.
• Make wgpu::Instance a member of WebGpuAsyncFuture.
• Enforce namespacing conventions for MediaPipe Tasks C and Python APIs.
• Add methods to create and access Matrix packets using Direct ByteBuffers.
• Ensure AhwbGpuResources destructor cleans up OpenGL/EGL resources and forces AHWB usage completion.
• Update MediaPipe Python build Dockerfiles.
• Update base options and host environment.
• Introducing extra base options and corresponding conversion/get functions.
• Improve error message for option_value problems
• Support models with empty tags
• Add empty image checks to ScaleImageCalculator.
• Add gpu_postprocessing option for TensorsToSegmentationCalculator.
• Add text chunking utility
• Expand LiteRtService to support system runtime on Android.
• Add vImageExtractChannelAndConvertToFloat function.
• Compile with OpenCV 5's features
• Add documentation for LiteRT Inference Calculator accelerators
• Fix data race accessing GlContext::profiling_helper_
• Add a "prefer_ahwb" flag to MemoryManager
• Add Builder v2 and v3 APIs to change the node name
• Add verbose debug logging for buffer pooling
• Updates the manylinux Dockerfile and related build scripts to fix the
• Re-format GraphRunner
• Add EXIF orientation support to MpImageCreateFromFile and the Python Task API

MediaPipe Tasks update

This section should highlight the changes that are done specifically for any platform and don't propagate to other platforms.

... (truncated)

Commits

• See full diff in compare view

Updates numpy from 2.3.4 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Abhijeetsingh Meena +
• Charalampos Stratakis
• Charles Harris
• Chris Ninham +
• David Woods
• Geonho +
• Gopu Yeshwanth Reddy +
• Iason Krommydas
• Ijtihed Kilani
• Jelle Zijlstra +
• Joren Hammudoglu
• Kumar Aditya
• Mike Boyle
• Nathan Goldbaum
• Raghuveer Devulapalli
• Sebastian Berg

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
• ecf599c Merge pull request #32221 from charris/backport-32151
• 3c7ac97 Merge pull request #32220 from charris/backport-32205
• 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
• 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
• c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
• 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
• d8262bc MAINT: Update cibuildwheel to v4.2.0
• 988d94d Merge pull request #32158 from charris/backport-32133
• b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
• Additional commits viewable in compare view

Updates opencv-contrib-python from 4.13.0.92 to 5.0.0.93

Release notes

Sourced from opencv-contrib-python's releases.

5.0.0.93

OpenCV 5.0.0 released!

OpenCV 5.0.0 overview: https://opencv.org/opencv-5 OpenCV 4.x -> 5.x migration guide: https://github.com/opencv/opencv/wiki/OpenCV-4-to-5-migration

Commits

• See full diff in compare view

Updates ruff from 0.16.0 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

0.16.4

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

• 9e4938c Bump 0.16.5 (#28110)
• aad0e90 Allow rules without codes (#28049)
• 5fdab73 Update preview default rules and categories (#27877)
• 29c8e5b Document rule acceptance guidelines (#27910)
• 50a4d7f Document the new category selectors (#27906)
• ada8795 Introduce category selectors (#27666)
• d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
• 2685fde [ty] Narrow functional enum members in == and match (#28103)
• efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
• eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
• Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Updates absl-py from 2.4.0 to 2.5.0

Release notes

Sourced from absl-py's releases.

v2.5.0

Added

• (app) Add support for enabling Python profiling via the ABSL_PYTHON_PROFILE_FILE environment variable.
• (flags) Introduce --only_check_flags built-in flag to validate flag definitions without executing main().
• (flagsaver) Add support for async test functions in @flagsaver.flagsaver.
• (testing) Add record_property and get_recorded_properties methods to absltest.TestCase.

Changed

• (flags) Apply defensive copying in save_flag_values to prevent dictionary mutation flakiness.
• (logging) Update type signatures for absl.logging functions to support standard logging arguments (exc_info, stack_info, stacklevel, extra).
• (cleanup) Expand usage of FlagHolder objects in app and absltest.

Fixed

• (flags) Improve formatting and clarity of DuplicateFlagError message.
• (testing) Fix assertion logic in absltest.TestCase.create_file.
• (typechecking) Fix type annotations and compatibility with MyPy and Pyrefly.

Changelog

Sourced from absl-py's changelog.

2.5.0 (2026-07-03)

Added

• (app) Add support for enabling Python profiling via the ABSL_PYTHON_PROFILE_FILE environment variable.
• (flags) Introduce --only_check_flags built-in flag to validate flag definitions without executing main().
• (flagsaver) Add support for async test functions in @flagsaver.flagsaver.
• (testing) Add record_property and get_recorded_properties methods to absltest.TestCase.

Changed

• (flags) Apply defensive copying in save_flag_values to prevent dictionary mutation flakiness.
• (logging) Update type signatures for absl.logging functions to support standard logging arguments (exc_info, stack_info, stacklevel, extra).
• (cleanup) Expand usage of FlagHolder objects in app and absltest.

Fixed

• (flags) Improve formatting and clarity of DuplicateFlagError message.
• (testing) Fix assertion logic in absltest.TestCase.create_file.
• (typechecking) Fix type annotations and compatibility with MyPy and Pyrefly.

Commits

• a742ec3 Release Abseil-py 2.5.0
• f05ee36 Apply defensive programming in save_flag_values by copying the input.
• 1275a98 Fix a new Mypy issue in absl-py
• b7decb2 Suppressed a few Pyrefly errors
• 97f1f72 Fix typing errors.
• 44da4bd Replace "random" flag with a different one
• 5cd5771 Remove pyrefly suppressions that are not needed anymore.
• 3e729eb Add type annotations for absl.logging functions and fix tests to pass type ch...
• 354ee20 Another batch of Pyrefly-related fixes
• 5889704 Add record_property and get_recorded_properties in absltest.TestCase.
• Additional commits viewable in compare view

Updates cffi from 2.0.0 to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

• Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

v2.1.0

• Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.
• Dropped support for Python 3.9.
• Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.
• Fixed crashes inside __delitem__.
• Fixed "string too big" error under MSVC.
• Fixed mingw builds.
• Added support for arm64 iOS wheels.

Commits

• fd33e77 New release 2.1.1
• 56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
• d9f6f70 New release 2.1.0
• 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
• 1362e5d Move cffi-gen-src release note to 2.1.0 notes
• a797055 Make error message when embedding version test fails more friendly
• f1f40a8 Update changelog
• dc62c93 Delete missed cp39 Windows builds
• a341180 Update version numbers to prepare for v2.1 release
• 9f04d85 Mark test using inet_ntoa as thread-unsafe
• Additional commits viewable in compare view

Updates matplotlib from 3.11.0 to 3.11.1

Release notes

Sourced from matplotlib's releases.

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

• Fix tight layout of multiple subplots with sharey=True
• Fix NoNorm cursor formatting for uint8 images
• Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)
• Fix clipped Axis labels on 3D plots with tight layout
• Fix inverted Axis on 3D plots
• Fix restoring 'auto' aspect in 3D axes after switching from 'equal'
• Fix missing glyphs when subsetting Type 1 fonts in PDF
• Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

Commits

• 3c1757a REL: v3.11.1
• 792c6b5 DOC: Prepare for 3.11.1
• aaff9f6 Merge branch 'v3.11.0-doc' into v3.11.x
• d4f4527 Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...
• 6ad4bcf Merge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...
• 7fb74d3 Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...
• c624aec Backport PR #32038: Fix occasional misalignment in reported mouse position (a...
• 8eda2b7 Backport PR #32037: Bump the actions group with 3 updates
• a0e7ae5 Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...
• 9001323 Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...
• Additional commits viewable in compare view

Updates ml-dtypes from 0.5.4 to 0.6.0

Release notes

Sourced from ml-dtypes's releases.

v0.6.0

• Added new 16-bit complex types: ml_dtypes.complex32 (based on float16) and ml_dtypes.bcomplex32 (based on bfloat16) (#351).
• Added new 1-bit integer types: ml_dtypes.int1 and ml_dtypes.uint1.
• Added __format__ method to custom float, complex, and integer types (#341). Previously, formatting custom scalars (e.g. in f-strings) fell back to string formatting, which could truncate exponents or fail on numeric format specifiers.
• ml_dtypes.finfo and ml_dtypes.iinfo now allow passing an array object to their constructor (#350).
• Fixed equality comparison (==, !=) when comparing custom dtypes against incompatible types like strings or None.
• Dropped support for Python 3.9, which reached end-of-life in October 2025.
• Dropped support for Python 3.13 free-threading, because cibuildwheel dropped support.
• Dropped support for NumPy < 2.0.
• Added support for Python 3.15.
• Switched build system to scikit-build-core and CMake (#361).
• Updated Eigen dependency to v5.0.1.

Changelog

Sourced from ml-dtypes's changelog.

[0.6.0] - 2026-08-13

• Added new 16-bit complex types: ml_dtypes.complex32 (based on float16) and ml_dtypes.bcomplex32 (based on bfloat16) (#351).
• Added new 1-bit integer types: ml_dtypes.int1 and ml_dtypes.uint1.
• Added __format__ method to custom float, complex, and integer types (#341). Previously, formatting custom scalars (e.g. in f-strings) fell back to string formatting, which could truncate exponents or fail on numeric format specifiers.
• ml_dtypes.finfo and ml_dtypes.iinfo now allow passing an array object to their constructor (#350).
• Fixed equality comparison (==, !=) when comparing custom dtypes against incompatible types like strings or None.
• Dropped support for Python 3.9, which reached end-of-life in October 2025.
• Dropped support for Python 3.13 free-threading, because cibuildwheel dropped support.
• Dropped support for NumPy < 2.0.
• Added support for Python 3.15.
• Switched build system to scikit-build-core and CMake (#361).
• Updated Eigen dependency to v5.0.1.

Commits

• 6bc762d Merge pull request #389 from hawkinsp:release
• ce2c7bf Prepare v0.6.0 release.
• 66a7982 Merge pull request #390 from hawkinsp:npy2
• 2c29114 Drop support for NumPy 1.x.
• 3a8d5da Merge pull request #388 from hawkinsp:build
• dec45f7 Merge pull request #387 from hawkinsp:format
• 2e0e13e Clean up scikit-build-core configuration in pyproject.toml.
• 90bebd5 Implement format for custom float, complex, and int dtypes.
• f9c6392 Merge pull request #368 from jax-ml:dependabot/github_actions/actions/downloa...
• 14396b0 Merge pull request #384 from jax-ml:dependabot/github_actions/actions/setup-p...
• Additional commits viewable in compare view

Updates optree from 0.19.1 to 0.20.0

Release notes

Sourced from optree's releases.

optree v0.20.0

Added

• Preserve dict insertion order on unflatten for the Python tree_flatten_one_level path mirroring the C++ path by @​XuehaiPan in #280.
• Add built-in frozendict support for Python 3.15+ (PEP 814), with PyTreeKind.FROZENDICT, optree.treespec_frozendict(), optree.treespec.frozendict(), and opt...

  Description has been truncated