Skip to content

chore(deps): bump the uv group with 7 updates - #81

Merged
effigies merged 1 commit into
mainfrom
dependabot/uv/uv-6d27b78747
Jul 1, 2026
Merged

chore(deps): bump the uv group with 7 updates#81
effigies merged 1 commit into
mainfrom
dependabot/uv/uv-6d27b78747

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv group with 7 updates:

Package From To
bidsschematools 1.2.2 1.2.4
orjson 3.11.8 3.11.9
typer 0.25.1 0.26.8
ruff 0.15.12 0.15.20
pytest 9.0.3 9.1.1
datalad 1.4.1 1.6.0
mypy 1.20.2 2.1.0

Updates bidsschematools from 1.2.2 to 1.2.4

Commits
  • f7f2167 chore: Bump schema package to 1.2.4
  • cd39c04 [SCHEMA] Restrict sidecar-keyed MRI rules to .nii/.nii.gz files (#2432)
  • a543787 chore: Bump schema package to 1.2.4-dev
  • 2399133 chore: Bump schema package to 1.2.3
  • c30a615 [SCHEMA][BUG] add error handling for non-existent schema dir (#2415)
  • ff2ceb9 chore(tox): Fix environment to avoid pre-release tests (#2391)
  • 54c272c fix(ci): Call pre-build script correctly
  • 69e2d45 chore: Bump schema package to 1.2.3-dev
  • ddfedee chore: Bump schema package to 1.2.2
  • 6b27d32 fix(bst): Address deprecation warnings (#2361)
  • Additional commits viewable in compare view

Updates orjson from 3.11.8 to 3.11.9

Release notes

Sourced from orjson's releases.

3.11.9

Changed

  • Build now depends on Rust 1.95 or later instead of 1.89.

Fixed

  • Fix building on Rust 1.95.
Changelog

Sourced from orjson's changelog.

3.11.9 - 2026-05-06

Changed

  • Build now depends on Rust 1.95 or later instead of 1.89.

Fixed

  • Fix building on Rust 1.95.
Commits

Updates typer from 0.25.1 to 0.26.8

Release notes

Sourced from typer's releases.

0.26.8

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

0.26.7

Fixes

0.26.6

Fixes

  • 🐛 Ensure that the default of a list argument is used correctly. PR #1821 by @​svlandeg.

Internal

0.26.5

Fixes

  • 🐛 Ensure that hidden commands are not shown when Rich markup is disabled. PR #1812 by @​svlandeg.

Internal

0.26.4

Features

... (truncated)

Changelog

Sourced from typer's changelog.

0.26.8 (2026-06-25)

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

0.26.7 (2026-06-03)

Fixes

0.26.6 (2026-06-02)

Fixes

  • 🐛 Ensure that the default of a list argument is used correctly. PR #1821 by @​svlandeg.

Internal

0.26.5 (2026-06-01)

Fixes

  • 🐛 Ensure that hidden commands are not shown when Rich markup is disabled. PR #1812 by @​svlandeg.

Internal

... (truncated)

Commits
  • b210c0e 🔖 Release version 0.26.8 (#1859)
  • 51ae100 📝 Update release notes
  • 0c15b1b 🐛 Make second column of Rich help output reflect the type consistently, even ...
  • b7cb8c7 📝 Update release notes
  • 5285cd4 👷 Simplify pull request workflow triggers (#1858)
  • b27385b 📝 Update release notes
  • e64958f 👷 Update issue-manager to 0.7.1 (#1857)
  • 1b02fb3 📝 Update release notes
  • e64632c ⬆️ Update issue-manager to 0.7.0 (#1856)
  • 289b6a6 📝 Update release notes
  • Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

  • Allow human-readable names in rule selectors (#25887)
  • Emit a warning instead of an error for unknown rule selectors (#26113)
  • Match noqa shebang handling in ruff:ignore comments (#26286)
  • [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

  • Add versioning sections to custom crate READMEs (#26317)
  • Update ruff_python_parser README for crates.io (#26315)
  • [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

Install ruff 0.15.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"

Download ruff 0.15.20

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

  • Allow human-readable names in rule selectors (#25887)
  • Emit a warning instead of an error for unknown rule selectors (#26113)
  • Match noqa shebang handling in ruff:ignore comments (#26286)
  • [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

  • Add versioning sections to custom crate READMEs (#26317)
  • Update ruff_python_parser README for crates.io (#26315)
  • [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

0.15.19

Released on 2026-06-23.

Preview features

  • Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

  • Fall back to default settings when editor-only settings are invalid (#26244)
  • Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

  • [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

  • Avoid allocating when parsing single string literals (#26200)
  • Avoid reallocating singleton call arguments (#26223)
  • Lazily create source files for lint diagnostics (#26226)
  • Optimize formatter text width and indentation (#26236)
  • Reserve capacity for builtin bindings (#26229)
  • Skip repeated-key checks for singleton dictionaries (#26228)
  • Use ArrayVec for qualified name segments (#26224)

... (truncated)

Commits
  • f82a36b Bump 0.15.20 (#26376)
  • af32943 Improve the summarise-ecosystem-results skill (#26378)
  • 485ebab Remove RUF076 name from schema (#26371)
  • ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
  • 572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
  • f703f21 Allow human-readable names in rule selectors (#25887)
  • 0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
  • dbe6e98 [ty] Infer definite equality comparison results (#26337)
  • e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
  • 6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
  • Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates datalad from 1.4.1 to 1.6.0

Release notes

Sourced from datalad's releases.

1.6.0

🚀 Enhancements and New Features

  • datalad run now wraps command-created commits as merge commits, preserving linear first-parent history while keeping the full provenance record. This works across subdataset hierarchies: each dataset that gained intermediate commits gets its own merge, and merge need propagates bottom-up. A new datalad save --since (since=) parameter makes this independently usable outside of run. [PR #7821](datalad/datalad#7821) (by @​yarikoptic)

  • add submodule URL candidates by URL-rewrite to match parent protocol. [PR #7606](datalad/datalad#7606) (by @​bpinsard)

🧪 Tests

  • Mark test_gin_cloning as xfail (strict=False) on TimeoutError and IncompleteResultsError instead of flaky retries. gin.g-node.org has become too unreliable from CI runners (HTTP 403 from GitHub-hosted IPs, TCP timeouts, slow responses). When gin cooperates the test still reports XPASS; persistent gin failures no longer block CI. [PR #7876](datalad/datalad#7876) (by @​yarikoptic)

1.5.0

🚀 Enhancements and New Features

🐛 Bug Fixes

  • Fix AltConstraints.__or__() and Constraints.__and__() mutating their left-hand operand in place and returning self. This caused silent side effects when constraint objects defined at module level (e.g. reckless_opt) were reused across multiple | or & chains. Both operators now return a new instance, preserving the original. Identified via the constraint system overhaul in datalad-next. Fixes #7164 (by @​yarikoptic)

  • Propagate datalad -c key=value CLI config overrides and DATALAD_* environment variables to subprocesses via Git's native environment-based configuration mechanism (GIT_CONFIG_COUNT / GIT_CONFIG_KEY_N / GIT_CONFIG_VALUE_N). Previously the overrides were only stored in datalad.cfg.overrides and were invisible to

... (truncated)

Changelog

Sourced from datalad's changelog.

1.6.0 (2026-06-09)

🚀 Enhancements and New Features

  • datalad run now wraps command-created commits as merge commits, preserving linear first-parent history while keeping the full provenance record. This works across subdataset hierarchies: each dataset that gained intermediate commits gets its own merge, and merge need propagates bottom-up. A new datalad save --since (since=) parameter makes this independently usable outside of run. [PR #7821](datalad/datalad#7821) (by @​yarikoptic)

  • add submodule URL candidates by URL-rewrite to match parent protocol. [PR #7606](datalad/datalad#7606) (by @​bpinsard)

🧪 Tests

  • Mark test_gin_cloning as xfail (strict=False) on TimeoutError and IncompleteResultsError instead of flaky retries. gin.g-node.org has become too unreliable from CI runners (HTTP 403 from GitHub-hosted IPs, TCP timeouts, slow responses). When gin cooperates the test still reports XPASS; persistent gin failures no longer block CI. [PR #7876](datalad/datalad#7876) (by @​yarikoptic)

1.5.0 (2026-06-04)

This was primarily a bug fix release. But because of having 2 enhancements/new features, automated CI assigned 1.5.0.

🚀 Enhancements and New Features

🐛 Bug Fixes

  • Fix AltConstraints.__or__() and Constraints.__and__() mutating their left-hand operand in place and returning self. This caused silent side effects when constraint objects defined at module level (e.g. reckless_opt) were reused across multiple | or & chains. Both operators now return a new instance, preserving the original. Identified via the constraint system overhaul in datalad-next. Fixes #7164 (by @​yarikoptic)

... (truncated)

Commits
  • 43ace70 [skip ci] Update docs/source/changelog.rst and CITATION.cff
  • 3c2fdfd [skip ci] Update CHANGELOG
  • fbb3a7b Merge pull request #7876 from datalad/enh-merge-maint
  • d516d8e BF(TST): xfail test_gin_cloning - gin.g-node.org too unreliable
  • 840fc23 Add a note about 1.5.0 release which should have been just a patch release
  • eab2e34 Merge tag '1.5.0' into enh-merge-maint
  • f025f55 [skip ci] Update docs/source/changelog.rst and CITATION.cff
  • 08e53fa [skip ci] Update CHANGELOG
  • 1bf2e35 Merge pull request #7868 from yarikoptic/bf-jobs-auto
  • 88e0c76 BF: resolve -J auto for push/drop/remove instead of passing 'auto' to git-annex
  • Additional commits viewable in compare view

Updates mypy from 1.20.2 to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

  • Enable incremental self-compilation (Vaggelis Danias, PR 21369)
  • Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)
  • Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)
  • Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

  • Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)
  • Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the uv group with 7 updates
81d2e61 
Bumps the uv group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [bidsschematools](https://github.com/bids-standard/bids-specification) | `1.2.2` | `1.2.4` |
| [orjson](https://github.com/ijl/orjson) | `3.11.8` | `3.11.9` |
| [typer](https://github.com/fastapi/typer) | `0.25.1` | `0.26.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.12` | `0.15.20` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [datalad](https://github.com/datalad/datalad) | `1.4.1` | `1.6.0` |
| [mypy](https://github.com/python/mypy) | `1.20.2` | `2.1.0` |


Updates `bidsschematools` from 1.2.2 to 1.2.4
- [Release notes](https://github.com/bids-standard/bids-specification/releases)
- [Changelog](https://github.com/bids-standard/bids-specification/blob/master/Release_Protocol.md)
- [Commits](bids-standard/bids-specification@v1.2.2...schema-1.2.4)

Updates `orjson` from 3.11.8 to 3.11.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.8...3.11.9)

Updates `typer` from 0.25.1 to 0.26.8
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.25.1...0.26.8)

Updates `ruff` from 0.15.12 to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.12...0.15.20)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `datalad` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/datalad/datalad/releases)
- [Changelog](https://github.com/datalad/datalad/blob/maint/CHANGELOG.md)
- [Commits](datalad/datalad@1.4.1...1.6.0)

Updates `mypy` from 1.20.2 to 2.1.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.2...v2.1.0)

---
updated-dependencies:
- dependency-name: bidsschematools
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: typer
  dependency-version: 0.26.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: datalad
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: mypy
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 1, 2026
@effigies
effigies merged commit 5a361c4 into main Jul 1, 2026
21 checks passed
@effigies
effigies deleted the dependabot/uv/uv-6d27b78747 branch July 1, 2026 02:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@effigies