build: bump the weekly-batch group across 1 directory with 3 updates

[dependabot]

Bumps the weekly-batch group with 3 updates in the / directory: uv, mypy and prek.

Updates uv from 0.12.1 to 0.12.5

Release notes

Sourced from uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"

Download uv 0.12.5

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.5

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits

• 210d1f6 Bump version to 0.12.5 (#21140)
• 802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
• a6904bb Order equal-priority Python installations by key (#21134)
• 728a70d Improve automated fixes for related bug manifestations (#21102)
• b82b038 Include hashes in cyclonedx exports (#21131)
• 8011778 Simplify editable requirement errors and hints (#21130)
• dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
• 3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
• 7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
• 298dda4 Fix relative indexes in PEP 723 scripts (#21097)
• Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Updates prek from 0.4.11 to 0.4.13

Release notes

Sourced from prek's releases.

0.4.13

Release Notes

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

Bug fixes

... (truncated)

Commits

• 6204a68 Bump version to 0.4.13 (#2543)
• f1c73c5 Add mise language support (#2540)
• 3f08ed4 Match file regexes against path bytes (#2541)
• 6bc5f06 Update Rust crate serde-saphyr to v1 (#2539)
• b8c5c69 Update Rust crate fancy-regex to 0.19.0 (#2537)
• 2557af9 Update prek hooks (#2528)
• a958731 Update Rust crate http to v1.5.0 (#2538)
• fc8b9a4 Update Rust crate clap to v4.6.5 (#2531)
• 3bacaa1 Update dependency uv to v0.12.1 (#2536)
• 222fc00 Update Rust crate toml to v1.1.4 (#2535)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions