build(deps-dev): bump the uv-dependencies group with 4 updates

[dependabot]

Bumps the uv-dependencies group with 4 updates: poethepoet, pyinstaller, pytest and ruff.

Updates poethepoet from 0.38.0 to 0.42.1

Release notes

Sourced from poethepoet's releases.

0.42.1

Enhancements

• Add exact option for uv executor by @​charlesbmi in nat-n/poethepoet#365

Completion script fixes

• Isolate zsh completion task options from global options by @​nat-n in nat-n/poethepoet#364
• Fix completion script edge case handling by @​nat-n in nat-n/poethepoet#366

[!IMPORTANT] You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the completion script fixes

New Contributors

• @​charlesbmi made their first contribution in nat-n/poethepoet#365

Full Changelog: nat-n/poethepoet@v0.42.0...v0.42.1

0.42.0

Enhancements

• Better zsh completion caaching with max hits per cache and proper TTL before refresh by @​nat-n in nat-n/poethepoet#360
• Officially Support Python 3.14 by @​gruebel in nat-n/poethepoet#362
• Add completion script for PowerShell by @​NSPC911 in nat-n/poethepoet#358

[!IMPORTANT] You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the enhancements for zsh or PowerShell

New Contributors

• @​gruebel made their first contribution in nat-n/poethepoet#362
• @​NSPC911 made their first contribution in nat-n/poethepoet#358

Full Changelog: nat-n/poethepoet@v0.41.0...v0.42.0

0.41.0

Enhancements

• Full shell completions for global and task arguments in zsh and bash by @​nat-n in nat-n/poethepoet#355

Full Changelog: nat-n/poethepoet@v0.40.0...v0.41.0

[!IMPORTANT] You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the revamped tab completion covering task arguments.

0.40.0

Enhancements

• Allow optional envfiles without warnings by @​cnaples79 in nat-n/poethepoet#337
• Add support for the capture_output option in ref tasks by @​kzrnm in nat-n/poethepoet#343
• Set uv to quiet mode during shell completion to avoid console spam by @​nat-n in nat-n/poethepoet#338
• Support ignore_fail on execution task types and ref tasks by @​nat-n in nat-n/poethepoet#347
• Add choices option to constrain named arguments by @​nat-n in nat-n/poethepoet#348

... (truncated)

Commits

• 4979272 Bump version to 0.42.1
• 1f40807 fix: completion script edge case handling (#366)
• c67a858 feat(uv): add exact option for uv executor (#365)
• 8f4d5c4 fix: isolate zsh completion task options from global options (#364)
• b1589da Bump version to 0.42.0
• 0646d44 feat: powershell completions (#358)
• 56293a4 chore: support Python 3.14 (#362)
• 804c675 Add cache TTL and max hits to zsh completion caching (#360)
• b15e96e feat: Full shell completions for global and task argument in zsh and bash (#355)
• 58aaa8b docs: correct invalid docs for uv executor options
• Additional commits viewable in compare view

Updates pyinstaller from 6.16.0 to 6.19.0

Release notes

Sourced from pyinstaller's releases.

v6.19.0

Please see the v6.19.0 section of the changelog for a list of the changes since v6.18.0.

v6.18.0

Please see the v6.18.0 section of the changelog for a list of the changes since v6.17.0.

v6.17.0

Please see the v6.17.0 section of the changelog for a list of the changes since v6.16.0.

Changelog

Sourced from pyinstaller's changelog.

6.19.0 (2026-02-14)

Bugfix

* (Windows) Fix collection of ``numpy`` DLLs when ``numpy`` PyPI wheel is
  installed using ``uv`` instead of ``pip``. (:issue:`9360`)
* Extend suppression of missing ``api-ms-win-*.dll`` warnings to Windows Server
  (formerly Windows 10 and 11). (:issue:`9355`)
* (Conda) Fix error during initialization of the `conda` hook utility module in
  Anaconda environments where the metadata for packages with no dependencies
  omit their *dependencies* key. (:issue:`9345`)
Hooks

* (Windows) Fix installer check in ``numpy`` hook to enable explicit collection
  of DLLs from ``numpy.libs`` directory when ``numpy`` PyPI wheels are installed
  through an installer other than ``pip`` - for example, ``uv``. (:issue:`9365`)
* (Windows) Update the ``pandas`` hook to explicitly collect the DLLs
  from ``pandas.libs`` directory that has been used in Windows PyPI wheels
  since ``pandas`` 2.1.0. (:issue:`9365`)
6.18.0 (2026-01-13)
Features

</code></pre>

<ul>

<li>Implement support for Tcl/Tk 9 in splash screen. (:issue:<code>9313</code>)</li>

</ul>

<p>Bugfix</p>

<pre><code>

(macOS) Improve the .framework bundle fix-up code to remove file entries

that would be placed under restored symlinked directories. This fixes

file-already-exists errors at build time (onedir) or run-time (onefile)

when user or a hook tries to collect (all) files from a package that

ships a .framework bundle with symlinks mangled into hard-copies

(for example, due to lack of symlink support in PyPI wheels). (:issue:9335)
Have hook for stdlib platform module exclude the _ios_support

module when sys.platform != 'ios'. This prevents unnecessary

collection of ctypes-imported libobjc shared library if the

latter happens to be available on the build system. (:issue:9333)

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/9ae6e2afa4e55c3a784ec88ac74a71688a2a37c8&quot;&gt;&lt;code&gt;9ae6e2a&lt;/code&gt;&lt;/a> Release v6.19.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/50eebf41d1b9309000b4ca6a74c0cc3c3f9b6a73&quot;&gt;&lt;code&gt;50eebf4&lt;/code&gt;&lt;/a> ci: cygwin: add the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a09778bb289fc24fb34dc675a9e71d3f09794a0a&quot;&gt;&lt;code&gt;a09778b&lt;/code&gt;&lt;/a> ci: extend the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a7f87e58c2023ff699610b6af47f4fe4b3a12313&quot;&gt;&lt;code&gt;a7f87e5&lt;/code&gt;&lt;/a> tests: port remaining metadata tests to importlib.metadata</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/2e751ba399ccf10f0aeb843cbb2f183c22509a6b&quot;&gt;&lt;code&gt;2e751ba&lt;/code&gt;&lt;/a> tests: add missing importorskip('pkg_resources') decorators</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/611f658dae8881eab3f2264bb90aac136a2152aa&quot;&gt;&lt;code&gt;611f658&lt;/code&gt;&lt;/a> tests: update setuptools to 82.0.0</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/38ae78854b07bd33359929c6d1a9df52c4544085&quot;&gt;&lt;code&gt;38ae788&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 06 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9369&quot;&gt;#9369&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/e937d76ea5e2177f295488bcaaa6d641adc328cf&quot;&gt;&lt;code&gt;e937d76&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 05 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9366&quot;&gt;#9366&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/ce6d02ce7ac3d19a6b5a4ef57775d589bc125b4d&quot;&gt;&lt;code&gt;ce6d02c&lt;/code&gt;&lt;/a> hooks: pandas: use delvewheel hook utility function to collect DLLs</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/f0ee7305a607969fee6c02b76e387669df0e0ad7&quot;&gt;&lt;code&gt;f0ee730&lt;/code&gt;&lt;/a> hooks: numpy: relax installer-type check for delvewheel codepath</li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.16.0...v6.19.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates pytest from 9.0.1 to 9.0.2

Release notes
Sourced from pytest's releases.

9.0.2
pytest 9.0.2 (2025-12-06)
Bug fixes


#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.
You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.
Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.


#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.


#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0.
Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim.
It will be deprecated in pytest 9.1 and removed in pytest 10.


#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.


Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.




Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view




Updates ruff from 0.14.6 to 0.15.8

Release notes
Sourced from ruff's releases.

0.15.8
Release Notes
Released on 2026-03-26.
Preview features

[ruff] New rule unnecessary-if (RUF050) (#24114)
[ruff] New rule useless-finally (RUF072) (#24165)
[ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
[pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

[flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
[flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
[pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
Fix %foo? parsing in IPython assignment expressions (#24152)
analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

[eradicate] ignore ty: ignore comments in ERA001 (#24192)
[flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
[flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
[pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
[refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

Speed up diagnostic rendering (#24146)

Server

Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

Clarify extend-ignore and extend-select settings documentation (#24064)
Mention AI policy in PR template (#24198)

Other changes

Use trusted publishing for NPM packages (#24171)

Contributors

@​bitloi
@​Sim-hu



... (truncated)


Changelog
Sourced from ruff's changelog.

0.15.8
Released on 2026-03-26.
Preview features

[ruff] New rule unnecessary-if (RUF050) (#24114)
[ruff] New rule useless-finally (RUF072) (#24165)
[ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
[pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

[flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
[flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
[pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
Fix %foo? parsing in IPython assignment expressions (#24152)
analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

[eradicate] ignore ty: ignore comments in ERA001 (#24192)
[flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
[flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
[pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
[refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

Speed up diagnostic rendering (#24146)

Server

Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

Clarify extend-ignore and extend-select settings documentation (#24064)
Mention AI policy in PR template (#24198)

Other changes

Use trusted publishing for NPM packages (#24171)

Contributors

@​bitloi
@​Sim-hu
@​mvanhorn



... (truncated)


Commits

c2a8815 Release 0.15.8 (#24217)
d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
9622285 [ty] Autocomplete arguments if in arguments node (#24167)
d812662 Use the release environment in publish-docs (#24214)
eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
34998be [ty] Fix typo in comment (#24211)
560aca0 [ty] Minor simplifications to some benchmark code (#24209)
683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
Additional commits viewable in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions