Skip to content

Bump the actions group with 4 updates#473

Merged
jorenham merged 1 commit into
masterfrom
dependabot/uv/actions-d6a8a4c2d2
Oct 27, 2025
Merged

Bump the actions group with 4 updates#473
jorenham merged 1 commit into
masterfrom
dependabot/uv/actions-d6a8a4c2d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates: ruff, beartype, basedpyright and pyrefly.

Updates ruff from 0.14.1 to 0.14.2

Release notes

Sourced from ruff's releases.

0.14.2

Release Notes

Released on 2025-10-23.

Preview features

  • [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

  • Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
  • Catch syntax errors in nested interpolations before Python 3.12 (#20949)
  • [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
  • [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
  • [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
  • [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
  • [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

  • [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
  • [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

  • Improve JSON output from ruff rule (#20168)

Documentation

  • Add source to testimonial (#20971)
  • Document when a rule was added (#21035)

Other changes

  • [syntax-errors] Name is parameter and global (#20426)
  • [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

Install ruff 0.14.2

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.2

Released on 2025-10-23.

Preview features

  • [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

  • Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
  • Catch syntax errors in nested interpolations before Python 3.12 (#20949)
  • [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
  • [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
  • [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
  • [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
  • [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

  • [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
  • [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

  • Improve JSON output from ruff rule (#20168)

Documentation

  • Add source to testimonial (#20971)
  • Document when a rule was added (#21035)

Other changes

  • [syntax-errors] Name is parameter and global (#20426)
  • [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

Commits

Updates beartype from 0.22.2 to 0.22.4

Release notes

Sourced from beartype's releases.

Beartype 0.22.4: Now Less Hated by Poetry

@​beartype 0.22.4 catastrophically explodes all over your monitor. An oily black residue redolent of snail mucus slides off the screen, dripping with a maddening cadence into the crevices of your trusty mechanical keyboard:

# Via "pip", the once-great venerable master packager now fallen on hard times:
$ pip install --upgrade beartype        # <-- you go, pipe-smoking pip
Via "uv", the plucky upstart spiky-haired kid wielding a sword larger than its body:
$ uv lock --upgrade-package beartype    # <-- you do what you need to do, ultraviolet radiation

@​beartype 0.22.4 never gets tired of bug-eyed dudes punching squinty-eyed dudes. Childhood memories do not fade.

Left: @​beartype 0.22.4. Right: Poetry and pipenv together as one dude.

@​beartype 0.22.4 is helping @​leycec and his beautiful science wife to eat food. Thanks entirely to...

GitHub Sponsors: Befriend the Bear and Get a Bear for Life

This release comes courtesy these proud GitHub Sponsors, without whom everyone in the @​leycec family would currently be eating grasshoppers in the abandoned back lot again:

If you represent a security-conscious corporate, government, or non-profit, the best way bar none for you to support @​beartype and secure your own workflow is by subscribing to [Tidelift][] through [SonarQube Advanced Security][]. Security giant [Sonar][] recently acquired [Tidelift][], guaranteeing the economic viability of the Tidelift model for billions of future open-source projects that have yet to be born. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.

Thanks so much, masters of fintech and lifted tides.

The Masters of Fintech and Lifted Tides. That's who.

Gods Not Another Patch Release. What's Wrong with You, @​beartype?

@​beartype 0.22.4 is a patch release that guarantees compatibility with both Poetry and pipenv. Previously, @​beartype just assumed that Poetry and pipenv liked @​beartype. What's not to like about @​beartype, guys? Huh!? Apparently...

Everything. @​beartype 0.22.3 broke the assumption that everybody likes @​beartype. Our prior release shipped a pyproject.toml file with a PEP 440-compliant version string:

requires-python = ">=3.10,!=3.14rc1,!=3.14rc2"

That syntax is valid. But Poetry and pipenv didn't care. They do what they want! And they didn't want to have anything to do with @​beartype 0.22.3. We disagree, but that's fair enough. Everyone has bad opinions.

@​beartype 0.22.4 resolves these trivial incompatibilities with popular devtooling. @​beartype 0.22.4 also promises this will never happen again. A new integration test in the @​beartype test suite guarantees Poetry and pipenv compatibility, safeguarding both your QA stack and sanity against midnight regressions at 4:52AM.

... (truncated)

Commits
  • d543d7c Beartype 0.22.4: Now Less Hated by Poetry
  • b25aa9b Poetry compatibility x 2.
  • 65f2d2d Poetry compatibility x 1.
  • 67dc586 Beartype 0.22.4 started.
  • 97022c9 Beartype 0.22.3: Yo Dawg We Heard You Like Redis
  • ed3092b gemini-cli x 3.
  • 89a5c54 gemini-cli x 2.
  • 991addc Bluesky social links.
  • b33685c Bump actions/upload-pages-artifact in the github-actions group (#566)
  • d44915b @dataclasses.dataclass + redis.Redis.
  • Additional commits viewable in compare view

Updates basedpyright from 1.31.7 to 1.32.1

Commits
  • dc463b5 1.32.1
  • d1c4fee fix an accidental breaking change to dataclass_transform that was introduce...
  • 53d9bb2 1.32.0
  • 4c539aa update expected error message in unrecognized config tests
  • 1b9d628 delete the newly added unknown config detection from upstream because mine is...
  • 8ac5a72 update newTypeClassNotAllowed russian translation with suggestion from @​dec...
  • ac5db4e Merge tag '1.1.407' into merge-1.1.407
  • 276448f Fixed package-lock files
  • 783ee67 Published 1.1.407
  • f9fc2aa Updated typeshed stubs to the latest version (#11051)
  • Additional commits viewable in compare view

Updates pyrefly from 0.38.0 to 0.39.0

Commits
  • 7a82eae Update pyrefly version]
  • fd39880 Record xrefs for symbols __all__
  • 6698c93 Adding test with all
  • 46ffedb fix Feature: inheritance checks for typed dictionaries (#1346)
  • 98f7611 Use ty, not w for the answer
  • 697b0ae Don't complain if non-callable __bool__ is the last entry in a boolop
  • 1563b7a Track behavior of not-boolable types in boolean operators
  • 4b71397 Distribute __bool__ checks across unions in check_dunder_bool_is_callable
  • 78fd600 Rename some vars
  • dd9258b Add tests for a bug in Pyrefly union handling
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@jorenham

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps the actions group with 4 updates: [ruff](https://github.com/astral-sh/ruff), [beartype](https://github.com/beartype/beartype), [basedpyright](https://github.com/detachhead/basedpyright) and [pyrefly](https://github.com/facebook/pyrefly).


Updates `ruff` from 0.14.1 to 0.14.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.1...0.14.2)

Updates `beartype` from 0.22.2 to 0.22.4
- [Release notes](https://github.com/beartype/beartype/releases)
- [Changelog](https://github.com/beartype/beartype/blob/main/doc/RELEASE.rst)
- [Commits](beartype/beartype@v0.22.2...v0.22.4)

Updates `basedpyright` from 1.31.7 to 1.32.1
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.31.7...v1.32.1)

Updates `pyrefly` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@0.38.0...0.39.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: beartype
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: basedpyright
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: pyrefly
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/uv/actions-d6a8a4c2d2 branch from aaf114b to 61ee0bf Compare October 27, 2025 20:01
@jorenham jorenham merged commit 24db38b into master Oct 27, 2025
20 checks passed
@dependabot dependabot Bot deleted the dependabot/uv/actions-d6a8a4c2d2 branch October 27, 2025 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant