chore(deps-dev): bump the python group with 11 updates - #3280
Conversation
- django-stubs / django-stubs-ext 6.0.7 -> 6.0.9 - djangorestframework / -stubs 3.17.1 -> 3.18.0 - ruff 0.16.1 -> 0.16.2 - pygit2 1.19.3 -> 1.20.0 - packaging 26.2 -> 26.3 - pytest-django 4.12.0 -> 4.13.0 - time-machine 3.3.0 -> 3.3.1 - types-gunicorn / types-python-dateutil to 2026-08-07 stubs - setuptools build requirement >=83.0.0 -> >=84.0.0 - rename pytest-django's SettingsWrapper to Settings in test_csrf, matching the 4.13.0 rename Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
|
There was a problem hiding this comment.
Pull request overview
Updates the repository’s pinned Python development/runtime dependency set (and lockfile) to the latest compatible versions, while correcting the Dependabot regression that dropped djangorestframework-stubs (breaking mypy_drf_plugin) and aligning CSRF tests with the updated pytest-django fixture typing.
Changes:
- Bump multiple dev and runtime pins (notably
djangorestframework/djangorestframework-stubs,django-stubs/django-stubs-ext,pytest-django,ruff,pygit2,packaging,time-machine, and typeshed stubs) and updateuv.lockaccordingly. - Keep
djangorestframework-stubspresent and bumped (avoids mypy plugin import failure). - Update
tests/test_csrf.pyto usepytest_django.fixtures.Settings(replacing the renamedSettingsWrappertype).
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| uv.lock | Regenerates the uv lockfile to reflect the updated dependency pins across groups. |
| tests/test_csrf.py | Updates the pytest-django settings fixture type annotation/import to match the new Settings name. |
| pyproject.toml | Bumps pinned versions in dependency groups and raises the build-system setuptools minimum. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #3280 +/- ##
=========================================
Coverage ? 90.63%
=========================================
Files ? 76
Lines ? 8467
Branches ? 898
=========================================
Hits ? 7674
Misses ? 571
Partials ? 222 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Issues Fixed
Supersedes and replaces the Dependabot PR #3278, which fails CI on
run-mypy.Dependabot renamed a package instead of bumping it in the
dev-hostgroup:That drops
djangorestframework-stubsout of the resolution entirely. It is the package that shipsmypy_drf_plugin, which[tool.mypy] pluginsstill declares, so mypy aborts before checking anything:Most likely a Dependabot grouping bug —
djangorestframeworkanddjangorestframework-stubswere both pinned at3.17.1, and the group update collapsed the two same-version siblings into one entry.Description
Same 11 bumps as the Dependabot PR, applied on top of current
master, with two corrections:djangorestframework-stubsis bumped to3.18.0rather than being replaced bydjangorestframework, somypy_drf_pluginstays resolvable.pytest-django4.13.0 renamed thesettingsfixture's type fromSettingsWrappertoSettings;tests/test_csrf.pyis updated to match. This is aTYPE_CHECKING-only import underfrom __future__ import annotations, so it is a type-annotation change with no runtime effect. It was a latent second failure the Dependabot PR never reached, because mypy exited on the plugin error first.Bumps: django-stubs / django-stubs-ext 6.0.7 → 6.0.9, djangorestframework / -stubs 3.17.1 → 3.18.0, ruff 0.16.1 → 0.16.2, pygit2 1.19.3 → 1.20.0, packaging 26.2 → 26.3, pytest-django 4.12.0 → 4.13.0, time-machine 3.3.0 → 3.3.1, types-gunicorn and types-python-dateutil to the 2026-08-07 stubs, setuptools build requirement >=83.0.0 → >=84.0.0.
Verified locally:
uv run mypy .clean over 169 source files,ruff checkandruff format --checkclean, and 1568 unit tests pass (-m "not integration";tests/test_host_agent_board_subtype.pyskipped locally only becausenetifaceswill not build on this host — CI runs it in Docker).Checklist
🤖 Generated with Claude Code