Skip to content

deps: Bump the python-minor-and-patch group with 5 updates - #44

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-de57d1fddd
Open

deps: Bump the python-minor-and-patch group with 5 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-de57d1fddd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 5 updates:

Package From To
httpx2 2.10.0 2.12.0
boto3 1.43.72 1.43.77
lxml 6.1.1 6.1.2
ruff 0.16.3 0.16.4
ty 0.0.72 0.0.73

Updates httpx2 from 2.10.0 to 2.12.0

Release notes

Sourced from httpx2's releases.

v2.12.0

Highlights

🛡️ Bounded response decompression

httpx2 now decodes gzip, deflate, Brotli, and Zstandard responses incrementally. Each decode step emits at most 1 MiB, so streaming a highly compressed response no longer requires materializing an entire inflated network chunk in memory (pydantic/httpx2#1126).

📦 Shared Zstandard API

Python 3.13 and earlier now use backports.zstd, which provides the same bounded incremental decompression API as compression.zstd on Python 3.14 and later (pydantic/httpx2#1146).

httpx2

Changed

Fixed

httpcore2

No changes since 2.11.0. Version bumped to stay in lockstep with httpx2.

Full Changelog: pydantic/httpx2@v2.11.0...v2.12.0

v2.11.0

Highlights

🌐 Public origin API

httpx2 now includes an immutable and hashable Origin value object, available through URL.origin. It provides normalized scheme, host, and effective port comparisons without including URL paths, queries, fragments, or credentials (pydantic/httpx2#1134).

🛠️ Request compatibility and validation

httpx2

Added

Changed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.12.0 (August 18th, 2026)

Changed

  • Use backports.zstd for Zstandard decoding on Python 3.13 and earlier. (#1146)

Fixed

  • Bound peak memory while streaming compressed responses and close response streams when decoding fails. (#1126)

2.11.0 (August 18th, 2026)

Added

  • Add the public Origin value object and URL.origin property for normalized, hashable origin comparisons. (#1134)

Changed

  • Require Brotli 1.2.0 or later for the brotli extra. (#1141)

Fixed

  • Restore deprecated status code aliases. (#1135)
  • Extract HTTP/2 release notes from changelog headings correctly. (#1136)
  • Respect explicit Transfer-Encoding headers and expose buffered request body lengths to WSGI applications. (#1137)
  • Validate multipart part header names and values before serialization. (#1142)
Commits

Updates boto3 from 1.43.72 to 1.43.77

Commits

Updates lxml from 6.1.1 to 6.1.2

Changelog

Sourced from lxml's changelog.

6.1.2 (2026-08-18)

  • GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

  • Some minor corrections for error handling cases.

Other changes

  • Built with Cython 3.2.9.
Commits
  • f2874e9 Update release date.
  • 687a295 Build: Exclude Py3.8 from windows-arm builds.
  • acadc56 Build: Remove outdated build target.
  • 59f93eb Build: Split old-Linux and other-Py3.8 builds.
  • 923df83 Build: Fix manylinux2014 build.
  • 975cc83 Build: Fix Px3.8 build setup.
  • 09e5d3e Build: Fix cibuildwheel version.
  • 998cf50 Build: Build Py3.8 wheels only once, not in every build job.
  • 5567037 Build: Exclude Py3.15 from 32bit builds.
  • 904db40 Build: Update cibuildwheel to include Py3.15.
  • Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates ty from 0.0.72 to 0.0.73

Release notes

Sourced from ty's releases.

0.0.73

Release Notes

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.73

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: Bump the python-minor-and-patch group with 5 updates
26b949e 
Bumps the python-minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [httpx2](https://github.com/pydantic/httpx2) | `2.10.0` | `2.12.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.72` | `1.43.77` |
| [lxml](https://github.com/lxml/lxml) | `6.1.1` | `6.1.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.3` | `0.16.4` |
| [ty](https://github.com/astral-sh/ty) | `0.0.72` | `0.0.73` |


Updates `httpx2` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.10.0...v2.12.0)

Updates `boto3` from 1.43.72 to 1.43.77
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.72...1.43.77)

Updates `lxml` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `ruff` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.4)

Updates `ty` from 0.0.72 to 0.0.73
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.72...0.0.73)

---
updated-dependencies:
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.77
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.73
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants