Skip to content

chore(deps): bump the python-dependencies group with 5 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-1f90a09a98
Open

chore(deps): bump the python-dependencies group with 5 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-1f90a09a98

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 5 updates:

Package From To
python-dotenv 1.2.2 1.2.3
anthropic 0.116.0 1.0.0
unidiff 0.7.5 1.0.0
ruff 0.15.21 0.16.4
mypy 2.3.0 2.3.1

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates anthropic from 0.116.0 to 1.0.0

Release notes

Sourced from anthropic's releases.

v1.0.0

1.0.0 (2026-08-20)

Full Changelog: v0.125.0...v1.0.0

⚠ BREAKING CHANGES

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details

Features

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details (33e2967)

Bug Fixes

  • beta: stop warning about output_format= on the parse/stream/tool_runner helpers (59bf261)

Chores

  • streaming: restore the original event imports in lib/streaming/_types.py (87e9e01)

Documentation

  • examples: use adaptive thinking in thinking examples (b5870af)

v0.125.0

0.125.0 (2026-08-19)

Full Changelog: v0.124.0...v0.125.0

Features

  • api: managed agents web search config and self hosted sandbox memory (b75afd6)

v0.124.0

0.124.0 (2026-08-19)

Full Changelog: v0.123.0...v0.124.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (9a09e84)

v0.123.0

0.123.0 (2026-08-18)

Full Changelog: v0.122.0...v0.123.0

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.0.0 (2026-08-20)

Full Changelog: v0.125.0...v1.0.0

⚠ BREAKING CHANGES

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details

Features

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details (33e2967)

Bug Fixes

  • beta: stop warning about output_format= on the parse/stream/tool_runner helpers (59bf261)

Chores

  • streaming: restore the original event imports in lib/streaming/_types.py (87e9e01)

Documentation

  • examples: use adaptive thinking in thinking examples (b5870af)

0.125.0 (2026-08-19)

Full Changelog: v0.124.0...v0.125.0

Features

  • api: managed agents web search config and self hosted sandbox memory (b75afd6)

0.124.0 (2026-08-19)

Full Changelog: v0.123.0...v0.124.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (9a09e84)

0.123.0 (2026-08-18)

Full Changelog: v0.122.0...v0.123.0

Features

  • api: additions to files and memory stores (09ce187)

... (truncated)

Commits
  • 23cf458 release: 1.0.0
  • f0e51d6 codegen metadata
  • bc70186 fix(beta): stop warning about output_format= on the parse/stream/tool_runne...
  • 482220c chore(streaming): restore the original event imports in lib/streaming/_types.py
  • 9782e88 feat(client)!: upgrade to httpx2 and some minor breaking changes. See MIGRATI...
  • 5df83ba docs(examples): use adaptive thinking in thinking examples
  • d8d8ee6 release: 0.125.0
  • 04a5b5d feat(api): managed agents web search config and self hosted sandbox memory
  • 781ce5e release: 0.124.0
  • f51102c feat(api): Files and Skills APIs are now GA; add computer use and browser use...
  • Additional commits viewable in compare view

Updates unidiff from 0.7.5 to 1.0.0

Release notes

Sourced from unidiff's releases.

v1.0.0

Major modernization: Python 2 is dropped, the code is fully type-annotated, packaging moves to pyproject.toml, and several long-standing parser issues are fixed.

⚠️ Breaking

  • Minimum supported Python is now 3.9 (Python 2 dropped).
  • PatchedFile.path now also strips git mnemonic prefixes (c/ i/ o/ w/ and 1/ 2/), so git diff --cached paths resolve to the plain filename (c/README.md → README.md). Standard a//b/ diffs are unaffected. (#81, #27)

Highlights

  • File modes via source_mode/target_mode + an is_symlink property. (#125)
  • PatchedFile.diff_line_no to locate hunkless/binary entries. (#122)
  • Accept bytes input directly (decoded with the given encoding, default UTF-8). (#43)
  • Real PEP 484 type annotations + generics (typed iteration) and a py.typed marker. (#117)
  • Parse difflib empty-filename output (#115) and fix a trailing-newline error on hunkless git format-patch files (#73, #74); includes the quoted-filename fix missing from 0.7.5 (#113).
  • from_filename/from_string gain metadata_only; python -m unidiff works; packaging on pyproject.toml with GitHub Actions CI.

Thanks to @​danwald, @​cpina, @​tovrstra and @​huichen-cs.

Full changelog: matiasb/python-unidiff@v0.7.5...v1.0.0

Changelog

Sourced from unidiff's changelog.

1.0.0 - 2026-07-25

  • Dropped Python 2 support; the minimum supported version is now Python 3.9.
  • Converted to real PEP 484 type annotations and generic containers, and shipped a py.typed marker (#117).
  • Migrated packaging to pyproject.toml; the sdist now includes the tests (#99), and the unidiff command is also runnable as python -m unidiff.
  • Replaced Travis CI with GitHub Actions (tests + mypy).
  • Exposed git file modes via PatchedFile.source_mode / target_mode and an is_symlink property (#125).
  • Added support for git mnemonic source/target prefixes (i/ w/ c/ o/ and 1/ 2/), which also fixes git diff --cached paths (#81, #27).
  • Exposed PatchedFile.diff_line_no to locate hunkless (e.g. binary) file entries in the diff (#122).
  • PatchSet and PatchSet.from_string now accept bytes input directly, decoding with the given encoding (default UTF-8) (#43).
  • PatchSet.from_filename and PatchSet.from_string now accept the metadata_only argument.
  • Parse diffs with empty filenames, e.g. difflib.unified_diff output (#115).
  • Fixed a trailing-newline parse error on hunkless files in git format-patch output (#73, #74).
  • Documented parsing of content with embedded carriage returns / control characters (#120).
  • Rewrote the README in Markdown.
Commits
  • 5ff054b Merge pull request #139 from matiasb/release-1.0.0
  • 3182e41 Preparing 1.0.0 release
  • d08ddd2 Merge pull request #141 from matiasb/readme-markdown
  • b13996f Convert README from reStructuredText to Markdown
  • ff053b8 Merge pull request #140 from matiasb/metadata-only-and-examples
  • f7f4b3e Update README
  • b5d4cbc Merge pull request #138 from matiasb/review/13-hunkless-newline
  • 21400e2 Fix trailing newline error on hunkless files (#73, #74)
  • 6638235 Merge pull request #137 from matiasb/review/12-bytes-input
  • dea6675 Accept bytes input directly (#43)
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dependencies group with 5 updates
f3b3acc 
Bumps the python-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.116.0` | `1.0.0` |
| [unidiff](https://github.com/matiasb/python-unidiff) | `0.7.5` | `1.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.16.4` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |


Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `anthropic` from 0.116.0 to 1.0.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.116.0...v1.0.0)

Updates `unidiff` from 0.7.5 to 1.0.0
- [Release notes](https://github.com/matiasb/python-unidiff/releases)
- [Changelog](https://github.com/matiasb/python-unidiff/blob/main/HISTORY)
- [Commits](matiasb/python-unidiff@v0.7.5...v1.0.0)

Updates `ruff` from 0.15.21 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.4)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: unidiff
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from kyletser as a code owner August 27, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kyletser kyletser Awaiting requested review from kyletser kyletser is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants