Skip to content

chore: bump the python group across 1 directory with 5 updates#76

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-780bcd32d2
Closed

chore: bump the python group across 1 directory with 5 updates#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-780bcd32d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 5 updates in the / directory:

Package From To
commitizen 4.13.9 4.16.3
hypothesis 6.151.9 6.155.1
poethepoet 0.42.1 0.46.0
pre-commit 4.5.1 4.6.0
sqlfluff 4.1.0 4.2.1

Updates commitizen from 4.13.9 to 4.16.3

Release notes

Sourced from commitizen's releases.

v4.16.3 (2026-05-30)

Fix

  • check: expand env vars in --rev-range (#2005)

v4.16.2 (2026-05-15)

Fix

  • tags: widen prerelease and devrelease tag regexes for SemVer2 (#1972)

v4.16.1 (2026-05-15)

Fix

  • cz_customize: derive bump_map_major_version_zero from bump_map (#1977)

v4.16.0 (2026-05-12)

Feat

  • hooks: support interactive hooks scripts

v4.15.1 (2026-05-06)

Fix

  • security: prevent command injection via shell=True (CWE-78) (#1941)

v4.15.0 (2026-05-03)

Feat

  • version: add MANUAL_VERSION, --next and --patch to version command (#1724)

v4.14.0 (2026-05-03)

Feat

  • add --allow-no-commit to changelog command (#1868)
Commits
  • 286da54 bump: version 4.16.2 → 4.16.3
  • 8f5b496 fix(check): expand env vars in --rev-range (#2005)
  • df8f6a0 docs(cli/screenshots): update CLI screenshots
  • 2b4707c test: normalize argparse choice snapshots (#2000)
  • c806e26 docs(cli/screenshots): update CLI screenshots
  • effd5dd ci(deps): bump uv from 0.11.6 to 0.11.15 (#2004)
  • a523e55 docs(cli/screenshots): update CLI screenshots
  • 93b74c9 ci(deps): bump pymdown-extensions from 10.21.2 to 10.21.3 (#1995)
  • 98f1777 docs(cli/screenshots): update CLI screenshots
  • c3f6797 ci(deps): bump peter-evans/create-or-update-comment from 4 to 5 (#1998)
  • Additional commits viewable in compare view

Updates hypothesis from 6.151.9 to 6.155.1

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.9

This release substantially improves our internal distribution for generating integers. This release has the most visible effect on "integers()", but may incidentally improve other strategies which draw integers internally.

Our integers distribution had two problems. First, it had jagged discontinuities at certain values where we switched sampling approaches. Second, it used a different distribution for bounded and unbounded ranges, which resulted in "st.integers()" and "st.integers(-264, 264)" producing very different distributions despite being semantically similar.

We now use a smooth distribution for both "st.integers()" and "st.integers(a, b)", which fixes both of these issues. This should substantially improve our testing power in certain cases.

The only way this release should be user-visible is that it finds more bugs! If this release is user-visible in other ways - for example, because it is slower, or produces a worse distribution in some cases - please open an issue.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.6

This patch adds a shrinking pass that tries natural text

... (truncated)

Commits
  • 4afeada Bump hypothesis version to 6.155.1 and update changelog
  • 1dafffb Merge pull request #4755 from Zac-HD/claude/nice-bardeen-xS6yA
  • 78b2a01 Address review feedback on the overrun-repair branch
  • ba3a206 Merge pull request #4757 from Zac-HD/cleanups
  • 4f72f64 deflake tests?
  • 4411487 crosshair tests cleanup
  • b19b02e Bump hypothesis version to 6.155.0 and update changelog
  • 05a605b Merge pull request #4756 from Zac-HD/claude/hopeful-einstein-zhwDO
  • 5690ba9 Bump hypothesis version to 6.154.2 and update changelog
  • 7e91ba0 Merge pull request #4751 from Zac-HD/claude/amazing-brahmagupta-6XQsP
  • Additional commits viewable in compare view

Updates poethepoet from 0.42.1 to 0.46.0

Release notes

Sourced from poethepoet's releases.

0.46.0

Enhancements

Fixes

Experimental agent skill

This release ships an experimental agent skill that gives AI coding agents contextual knowledge of poe's task API when working in projects that use it. It works with any agent that supports the skills convention and aims to improve agent abilities when it comes to leveraging and authoring poe tasks.

Please try it out and provide feedback!

Two install methods:

  1. Via a built in poe task (similar to how shell completions are installed):
poe _install_skill                          # auto-detects .claude/.codex/.pi/.agents and prompts
poe _install_skill ~/.claude/skills         # explicit path (substitute your agent's dir)
poe _install_skill <skills-dir> --upgrade   # non-interactive upgrade (skips if same/newer)
  1. From github via npx skills
npx skills add https://github.com/nat-n/poethepoet/tree/v0.46.0/poethepoet/skills/poethepoet

Full Changelog: nat-n/poethepoet@v0.45.0...v0.46.0

0.45.0

Enhancements

Fixes

New Contributors

Full Changelog: nat-n/poethepoet@v0.44.0...v0.45.0

0.44.0

Enhancements

... (truncated)

Commits
  • 23a4c1a feat: experimental Claude Code skill and bump-version task (#387)
  • a04a215 refactor: use AST for $POE_EXTRA_ARGS detection and cache parsed content (#388)
  • 61d2e34 refactor: use AST parser for all templating (#386)
  • 1bfad47 fix: make uv and poetry executors check for bat files (#385)
  • 35e4a1b fix: Strip underscore prefix in documentation for private positional args (#383)
  • 244cf0b Bump version to 0.45.0
  • 3a6c09a feat: support forwarding free arguments via $POE_EXTRA_ARGS (#380)
  • a1edcda fix: preserve quotes in :+/:- operator arguments (#333) (#377)
  • 3e60a85 fix: handle cancelled asyncio tasks correctly (#378)
  • bbdd435 fix: handle ctrl+c attempt on windows if running bat/cmd scripts (#382)
  • Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

Commits
  • f35134b v4.6.0
  • 2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
  • d7dee32 make --hook-dir optional for hook-impl
  • 965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
  • 2eacc06 --hook-type is required for hook-impl
  • f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
  • 054cc5b [pre-commit.ci] pre-commit autoupdate
  • 5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
  • a5d9114 [pre-commit.ci] pre-commit autoupdate
  • 129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
  • Additional commits viewable in compare view

Updates sqlfluff from 4.1.0 to 4.2.1

Release notes

Sourced from sqlfluff's releases.

[4.2.1] - 2026-05-14

Highlights

This is a bugfix release primarily to change the configuration of how rust wheels are distributed for sqlfluffrs. From this release onwards, rust wheels use ABI3 so that a single wheel can be reused across multiple python versions, and the number of platforms which we distribute pre-compiled wheels for has been reduced. This is to ensure we remain with the storage limits set by pypi.

In addition to this we see two TSQL fixes, including the first contribution by @​simondennis9 to the project. Thanks for your contributions! 🏆

What’s Changed

New Contributors

[4.2.0] - 2026-05-13

Highlights

This minor release contains four particular changes of note:

  • The default render_variant_limit is now 5 instead of 1, so SQLFluff may report new linting violations from templated branches that were previously not inspected in Jinja and dbt projects. Documentation for the feature is now also available in Template Variant Rendering.
  • This release drops support for Python 3.9, which reached end of life at the end of October 2025.
  • Security improvements that protect against resource exhaustion through malicious queries by limiting total parsed nodes. Users can configure the new max_parse_nodes config setting to enable parsing of larger files in their project if necessary.
  • A new AL10 rule requires aliases on FROM subqueries, because omitting them causes parse errors in most major dialects.

Beyond that, there are parser improvements for T-SQL, PostgreSQL, Snowflake, BigQuery, DuckDB, ClickHouse, Oracle, Hive/SparkSQL, Databricks, DB2, Athena, Trino, MariaDB/MySQL, StarRocks, Teradata, and Greenplum. There are also rule fixes for ST06, ST11, LT02, and LT09, better handling for placeholder and dbt/Jinja rendering edge cases, and a new option to fail when files are skipped for size.

This release also includes first-time contributions from twenty new contributors. Thank you all for your contributions. 🏆

What’s Changed

... (truncated)

Changelog

Sourced from sqlfluff's changelog.

[4.2.1] - 2026-05-14

Highlights

This is a bugfix release primarily to change the configuration of how rust wheels are distributed for sqlfluffrs. From this release onwards, rust wheels use ABI3 so that a single wheel can be reused across multiple python versions, and the number of platforms which we distribute pre-compiled wheels for has been reduced. This is to ensure we remain with the storage limits set by pypi.

In addition to this we see two TSQL fixes, including the first contribution by @​simondennis9 to the project. Thanks for your contributions! 🏆

What’s Changed

New Contributors

[4.2.0] - 2026-05-13

Highlights

This minor release contains four particular changes of note:

  • The default render_variant_limit is now 5 instead of 1, so SQLFluff may report new linting violations from templated branches that were previously not inspected in Jinja and dbt projects. Documentation for the feature is now also available in Template Variant Rendering.
  • This release drops support for Python 3.9, which reached end of life at the end of October 2025.
  • Security improvements that protect against resource exhaustion through malicious queries by limiting total parsed nodes. Users can configure the new max_parse_nodes config setting to enable parsing of larger files in their project if necessary.
  • A new AL10 rule requires aliases on FROM subqueries, because omitting them causes parse errors in most major dialects.

Beyond that, there are parser improvements for T-SQL, PostgreSQL, Snowflake, BigQuery, DuckDB, ClickHouse, Oracle, Hive/SparkSQL, Databricks, DB2, Athena, Trino, MariaDB/MySQL, StarRocks, Teradata, and Greenplum. There are also rule fixes for ST06, ST11, LT02, and LT09, better handling for placeholder and dbt/Jinja rendering edge cases, and a new option to fail when files are skipped for size.

... (truncated)

Commits
  • 22c57db Prep version 4.2.1 (#7856)
  • eaa3b28 build(deps): bump axios from 1.13.6 to 1.16.1 in /docsv (#7846)
  • d14ecb5 TSQL: enable parameters in CONTAINSTABLE (#7843)
  • 77e6b5e Cut back the rust wheels distributed and use ABI3 (#7844)
  • 5ee7277 fix(tsql): RuntimeError parsing grant alter/create statements (#7835)
  • 406f9ef Prep version 4.2.0 (#7838)
  • ce634cd fix(postgres): support CORRELATION in CREATE STATISTICS and IF EXISTS in ALTE...
  • 72f1654 TSQL: allow set expressions in DECLARE ... CURSOR FOR (#7812)
  • 048591f fix: Ensure pool.join() is called in ParallelRunner (#7686)
  • a276af1 fix(clickhouse): allow WHERE/PREWHERE after ARRAY JOIN (#7837)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the python group across 1 directory with 5 updates
21fa282 
Bumps the python group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [commitizen](https://github.com/commitizen-tools/commitizen) | `4.13.9` | `4.16.3` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.9` | `6.155.1` |
| [poethepoet](https://github.com/nat-n/poethepoet) | `0.42.1` | `0.46.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` |
| [sqlfluff](https://github.com/sqlfluff/sqlfluff) | `4.1.0` | `4.2.1` |



Updates `commitizen` from 4.13.9 to 4.16.3
- [Release notes](https://github.com/commitizen-tools/commitizen/releases)
- [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md)
- [Commits](commitizen-tools/commitizen@v4.13.9...v4.16.3)

Updates `hypothesis` from 6.151.9 to 6.155.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.9...v6.155.1)

Updates `poethepoet` from 0.42.1 to 0.46.0
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.42.1...v0.46.0)

Updates `pre-commit` from 4.5.1 to 4.6.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0)

Updates `sqlfluff` from 4.1.0 to 4.2.1
- [Release notes](https://github.com/sqlfluff/sqlfluff/releases)
- [Changelog](https://github.com/sqlfluff/sqlfluff/blob/main/CHANGELOG.md)
- [Commits](sqlfluff/sqlfluff@4.1.0...4.2.1)

---
updated-dependencies:
- dependency-name: commitizen
  dependency-version: 4.16.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: hypothesis
  dependency-version: 6.155.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: poethepoet
  dependency-version: 0.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sqlfluff
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from vagmcs as a code owner June 2, 2026 13:49
@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 1, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-780bcd32d2 branch July 1, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vagmcs vagmcs Awaiting requested review from vagmcs vagmcs is a code owner

Assignees

No one assigned

Labels

internal skip changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants