Skip to content

Bump the uv-lockfile group with 3 updates - #70

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-lockfile-dbad5eb9cd
Closed

Bump the uv-lockfile group with 3 updates#70
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-lockfile-dbad5eb9cd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the uv-lockfile group with 3 updates: pipdeptree, ruff and sphinxcontrib-mermaid.

Updates pipdeptree from 3.1.1 to 4.1.0

Release notes

Sourced from pipdeptree's releases.

4.0.0

What's Changed

Full Changelog: tox-dev/pipdeptree@3.1.1...4.0.0

Commits
  • 0a1a446 🔖 release: 4.1.0
  • 7c8051e 👷 ci: run tests against Python 3.15 (#626)
  • 10849bb 📦 pkg: ship a free-threaded wheel (#628)
  • 7e3b71b build(deps): bump taiki-e/install-action from 2.82.9 to 2.83.2 (#627)
  • 22ec91a 👷 ci: build dists on every check run (#625)
  • 08480d8 👷 ci(release): enable pypy wheels and disable fail-fast (#624)
  • 47a4906 ✨ feat(rust): replace the Python engine with a Rust extension (#618)
  • bc7c730 ♻️ refactor(deps): move test extra to a dependency group (#622)
  • 9a2c5b7 Replace prettier with mdformat and yamlfmt (#621)
  • cb9d89d build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#620)
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates sphinxcontrib-mermaid from 2.0.3 to 2.1.0

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.0 (July 18, 2026)

  • Add mermaid_config option for passing a global Mermaid configuration (#215)
  • Load the ZenUML plugin lazily, only on pages that contain a ZenUML diagram, and confine its injected stylesheet to the diagram subtree so it no longer restyles the host theme (#252)
  • Skip injecting the Mermaid JavaScript when the output format does not support it (#253)
  • Fix d3 zoom on nested SVGs (#179)
  • Fix fullscreen button positioning inconsistency (#225)
  • Fix interactions between the fullscreen, zoom, and lazy-render features (#254)
Commits
  • 6d7611b Merge pull request #257 from mgaitan/tkp/210
  • c53952b Bump version to 2.1.0
  • c5bfe4a Merge pull request #256 from timkpaine/tkp/escape-generated-javascript
  • 7244a8c Escape generated JavaScript values
  • f4cf3e6 Merge pull request #254 from timkpaine/tkp/recent-integration-fixes
  • e96f80c fix(html): Correct Mermaid feature interactions
  • 2395a38 Merge pull request #225 from yarikoptic/bf-fullscreen
  • e0178bd Merge pull request #253 from timkpaine/tkp/pr-132-skip-static-js
  • c5bafdb test(fullscreen): Cover button positioning
  • c09d852 Fix fullscreen button positioning inconsistency
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the uv-lockfile group with 3 updates
8d6e2a4 
Bumps the uv-lockfile group with 3 updates: [pipdeptree](https://github.com/tox-dev/pipdeptree), [ruff](https://github.com/astral-sh/ruff) and [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid).


Updates `pipdeptree` from 3.1.1 to 4.1.0
- [Release notes](https://github.com/tox-dev/pipdeptree/releases)
- [Commits](tox-dev/pipdeptree@3.1.1...4.1.0)

Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `sphinxcontrib-mermaid` from 2.0.3 to 2.1.0
- [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md)
- [Commits](mgaitan/sphinxcontrib-mermaid@2.0.3...2.1.0)

---
updated-dependencies:
- dependency-name: pipdeptree
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uv-lockfile
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-lockfile
- dependency-name: sphinxcontrib-mermaid
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-lockfile
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 28, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/uv-lockfile-dbad5eb9cd branch July 28, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants