Skip to content

build(deps): bump the uv-dependencies group with 7 updates#4

Merged
amannocci merged 1 commit intomainfrom
dependabot/uv/uv-dependencies-25593e5bf7
Mar 26, 2026
Merged

build(deps): bump the uv-dependencies group with 7 updates#4
amannocci merged 1 commit intomainfrom
dependabot/uv/uv-dependencies-25593e5bf7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps the uv-dependencies group with 7 updates:

Package From To
jsonschema 4.25.1 4.26.0
pyserde 0.27.0 0.31.1
rich 14.2.0 14.3.3
pyinstaller 6.17.0 6.19.0
basedpyright 1.38.3 1.38.4
poethepoet 0.38.0 0.42.1
ruff 0.14.9 0.15.8

Updates jsonschema from 4.25.1 to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).
Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates pyserde from 0.27.0 to 0.31.1

Release notes

Sourced from pyserde's releases.

v0.31.1

What's Changed

Bug fixes

Full Changelog: yukinarit/pyserde@v0.31.0...v0.31.1

v0.31.0

What's Changed

Style fixes

Build

Other changes

Full Changelog: yukinarit/pyserde@v0.30.1...v0.31.0

v0.30.1

What's Changed

Bug fixes

Build

Documentation

Other changes

New Contributors

Full Changelog: yukinarit/pyserde@v0.30.0...v0.30.1

... (truncated)

Commits

Updates rich from 14.2.0 to 14.3.3

Release notes

Sourced from rich's releases.

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

The ZWJy release

A fix for cell_len edge cases

[14.3.2] - 2026-02-01

Fixed

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

Added

Changed

... (truncated)

Changelog

Sourced from rich's changelog.

[14.3.3] - 2026-02-19

Fixed

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Commits

Updates pyinstaller from 6.17.0 to 6.19.0

Release notes

Sourced from pyinstaller's releases.

v6.19.0

Please see the v6.19.0 section of the changelog for a list of the changes since v6.18.0.

v6.18.0

Please see the v6.18.0 section of the changelog for a list of the changes since v6.17.0.

Changelog

Sourced from pyinstaller's changelog.

6.19.0 (2026-02-14)

Bugfix


* (Windows) Fix collection of ``numpy`` DLLs when ``numpy`` PyPI wheel is
  installed using ``uv`` instead of ``pip``. (:issue:`9360`)
* Extend suppression of missing ``api-ms-win-*.dll`` warnings to Windows Server
  (formerly Windows 10 and 11). (:issue:`9355`)
* (Conda) Fix error during initialization of the `conda` hook utility module in
  Anaconda environments where the metadata for packages with no dependencies
  omit their *dependencies* key. (:issue:`9345`)

Hooks



* (Windows) Fix installer check in ``numpy`` hook to enable explicit collection
  of DLLs from ``numpy.libs`` directory when ``numpy`` PyPI wheels are installed
  through an installer other than ``pip`` - for example, ``uv``. (:issue:`9365`)
* (Windows) Update the ``pandas`` hook to explicitly collect the DLLs
  from ``pandas.libs`` directory that has been used in Windows PyPI wheels
  since ``pandas`` 2.1.0. (:issue:`9365`)

6.18.0 (2026-01-13)


Features

</code></pre>

<ul>

<li>Implement support for Tcl/Tk 9 in splash screen. (:issue:<code>9313</code>)</li>

</ul>

<p>Bugfix</p>

<pre><code>


    

  • (macOS) Improve the .framework bundle fix-up code to remove file entries
    
that would be placed under restored symlinked directories. This fixes
    
file-already-exists errors at build time (onedir) or run-time (onefile)
    
when user or a hook tries to collect (all) files from a package that
    
ships a .framework bundle with symlinks mangled into hard-copies
    
(for example, due to lack of symlink support in PyPI wheels). (:issue:9335)
    • 

  • Have hook for stdlib platform module exclude the _ios_support
    
module when sys.platform != 'ios'. This prevents unnecessary
    
collection of ctypes-imported libobjc shared library if the
    
latter happens to be available on the build system. (:issue:9333)
    • 



&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/9ae6e2afa4e55c3a784ec88ac74a71688a2a37c8&quot;&gt;&lt;code&gt;9ae6e2a&lt;/code&gt;&lt;/a> Release v6.19.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/50eebf41d1b9309000b4ca6a74c0cc3c3f9b6a73&quot;&gt;&lt;code&gt;50eebf4&lt;/code&gt;&lt;/a> ci: cygwin: add the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a09778bb289fc24fb34dc675a9e71d3f09794a0a&quot;&gt;&lt;code&gt;a09778b&lt;/code&gt;&lt;/a> ci: extend the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a7f87e58c2023ff699610b6af47f4fe4b3a12313&quot;&gt;&lt;code&gt;a7f87e5&lt;/code&gt;&lt;/a> tests: port remaining metadata tests to importlib.metadata</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/2e751ba399ccf10f0aeb843cbb2f183c22509a6b&quot;&gt;&lt;code&gt;2e751ba&lt;/code&gt;&lt;/a> tests: add missing importorskip('pkg_resources') decorators</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/611f658dae8881eab3f2264bb90aac136a2152aa&quot;&gt;&lt;code&gt;611f658&lt;/code&gt;&lt;/a> tests: update setuptools to 82.0.0</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/38ae78854b07bd33359929c6d1a9df52c4544085&quot;&gt;&lt;code&gt;38ae788&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 06 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9369&quot;&gt;#9369&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/e937d76ea5e2177f295488bcaaa6d641adc328cf&quot;&gt;&lt;code&gt;e937d76&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 05 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9366&quot;&gt;#9366&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/ce6d02ce7ac3d19a6b5a4ef57775d589bc125b4d&quot;&gt;&lt;code&gt;ce6d02c&lt;/code&gt;&lt;/a> hooks: pandas: use delvewheel hook utility function to collect DLLs</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/f0ee7305a607969fee6c02b76e387669df0e0ad7&quot;&gt;&lt;code&gt;f0ee730&lt;/code&gt;&lt;/a> hooks: numpy: relax installer-type check for delvewheel codepath</li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.17.0...v6.19.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates basedpyright from 1.38.3 to 1.38.4



Commits

    

  • 2455efb 1.38.4
    • 

  • 78db0e0 i hate node i hate webpack i hate all this shit
    • 

  • 1cc918a use @​core-js/pure to polyfill newer ecmascript features now that it has prope...
    • 

  • b31ffd9 remove unused ignoreErrors function that was added to the Promise prototy...
    • 

  • 389d7e5 update typescript work properly vscode settings
    • 

  • e8b2663 format markdown files with ruff since it can now format markdown codeblocks
    • 

  • 17587e3 bump python dependencies
    • 

  • 98e9774 fix "Received redundant open text document command" error when viewing previo...
    • 

  • c777e52 fix typing_extensions auto-import
    • 

  • See full diff in compare view
    • 







Updates poethepoet from 0.38.0 to 0.42.1



Release notes

Sourced from poethepoet's releases.




0.42.1


Enhancements



Completion script fixes





[!IMPORTANT]
You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the completion script fixes




New Contributors



Full Changelog: https://github.com/nat-n/poethepoet/compare/v0.42.0...v0.42.1


0.42.0


Enhancements





[!IMPORTANT]
You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the enhancements for zsh or PowerShell




New Contributors



Full Changelog: https://github.com/nat-n/poethepoet/compare/v0.41.0...v0.42.0


0.41.0


Enhancements



Full Changelog: https://github.com/nat-n/poethepoet/compare/v0.40.0...v0.41.0




[!IMPORTANT]
You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the revamped tab completion covering task arguments.




0.40.0


Enhancements






... (truncated)





Commits

    

  • 4979272 Bump version to 0.42.1
    • 

  • 1f40807 fix: completion script edge case handling (#366)
    • 

  • c67a858 feat(uv): add exact option for uv executor (#365)
    • 

  • 8f4d5c4 fix: isolate zsh completion task options from global options (#364)
    • 

  • b1589da Bump version to 0.42.0
    • 

  • 0646d44 feat: powershell completions (#358)
    • 

  • 56293a4 chore: support Python 3.14 (#362)
    • 

  • 804c675 Add cache TTL and max hits to zsh completion caching (#360)
    • 

  • b15e96e feat: Full shell completions for global and task argument in zsh and bash (#355)
    • 

  • 58aaa8b docs: correct invalid docs for uv executor options
    • 

  • Additional commits viewable in compare view
    • 







Updates ruff from 0.14.9 to 0.15.8



Release notes

Sourced from ruff's releases.




0.15.8


Release Notes


Released on 2026-03-26.


Preview features


    

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
    • 

  • [ruff] New rule useless-finally (RUF072) (#24165)
    • 

  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
    • 

  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)
    • 



Bug fixes


    

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
    • 

  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
    • 

  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
    • 

  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
    • 

  • Fix %foo? parsing in IPython assignment expressions (#24152)
    • 

  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)
    • 



Rule changes


    

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
    • 

  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
    • 

  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
    • 

  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
    • 

  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)
    • 



Performance


    

  • Speed up diagnostic rendering (#24146)
    • 



Server


    

  • Warn when Markdown files are skipped due to preview being disabled (#24150)
    • 



Documentation


    

  • Clarify extend-ignore and extend-select settings documentation (#24064)
    • 

  • Mention AI policy in PR template (#24198)
    • 



Other changes


    

  • Use trusted publishing for NPM packages (#24171)
    • 



Contributors






... (truncated)





Changelog

Sourced from ruff's changelog.




0.15.8


Released on 2026-03-26.


Preview features


    

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
    • 

  • [ruff] New rule useless-finally (RUF072) (#24165)
    • 

  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
    • 

  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)
    • 



Bug fixes


    

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
    • 

  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
    • 

  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
    • 

  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
    • 

  • Fix %foo? parsing in IPython assignment expressions (#24152)
    • 

  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)
    • 



Rule changes


    

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
    • 

  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
    • 

  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
    • 

  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
    • 

  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)
    • 



Performance


    

  • Speed up diagnostic rendering (#24146)
    • 



Server


    

  • Warn when Markdown files are skipped due to preview being disabled (#24150)
    • 



Documentation


    

  • Clarify extend-ignore and extend-select settings documentation (#24064)
    • 

  • Mention AI policy in PR template (#24198)
    • 



Other changes


    

  • Use trusted publishing for NPM packages (#24171)
    • 



Contributors






... (truncated)





Commits

    

  • c2a8815 Release 0.15.8 (#24217)
    • 

  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
    • 

  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
    • 

  • d812662 Use the release environment in publish-docs (#24214)
    • 

  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
    • 

  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
    • 

  • 34998be [ty] Fix typo in comment (#24211)
    • 

  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
    • 

  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
    • 

  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
    • 

  • Additional commits viewable in compare view
    • 







Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    •

@dependabot
build(deps): bump the uv-dependencies group with 7 updates
a56c90c 
Bumps the uv-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.1` | `4.26.0` |
| [pyserde](https://github.com/yukinarit/pyserde) | `0.27.0` | `0.31.1` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `14.3.3` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.17.0` | `6.19.0` |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.38.3` | `1.38.4` |
| [poethepoet](https://github.com/nat-n/poethepoet) | `0.38.0` | `0.42.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.9` | `0.15.8` |


Updates `jsonschema` from 4.25.1 to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.1...v4.26.0)

Updates `pyserde` from 0.27.0 to 0.31.1
- [Release notes](https://github.com/yukinarit/pyserde/releases)
- [Commits](yukinarit/pyserde@v0.27.0...v0.31.1)

Updates `rich` from 14.2.0 to 14.3.3
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.2.0...v14.3.3)

Updates `pyinstaller` from 6.17.0 to 6.19.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.17.0...v6.19.0)

Updates `basedpyright` from 1.38.3 to 1.38.4
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.38.3...v1.38.4)

Updates `poethepoet` from 0.38.0 to 0.42.1
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.38.0...v0.42.1)

Updates `ruff` from 0.14.9 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.9...0.15.8)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: pyserde
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: rich
  dependency-version: 14.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: pyinstaller
  dependency-version: 6.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: basedpyright
  dependency-version: 1.38.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: poethepoet
  dependency-version: 0.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 26, 2026
@dependabot dependabot bot requested a review from amannocci as a code owner March 26, 2026 22:15
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 26, 2026
@amannocci amannocci self-assigned this Mar 26, 2026
@amannocci amannocci merged commit b6591aa into main Mar 26, 2026
5 checks passed
@amannocci amannocci deleted the dependabot/uv/uv-dependencies-25593e5bf7 branch March 26, 2026 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@amannocci amannocci amannocci approved these changes

Assignees

@amannocci amannocci

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@amannocci