deps(deps): bump the all-dependencies group with 4 updates #207

dependabot · 2025-11-10T09:17:29Z

Bumps the all-dependencies group with 4 updates: pydantic, pre-commit, pytest and ruff.

Updates pydantic from 2.12.3 to 2.12.4

Release notes

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

Changelog

Sourced from pydantic's changelog.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Commits

5c842df Prepare release v2.12.4
c678a71 Bump pydantic-core to v2.41.5
a7cd292 Bump cloudpickle to v3.1.2
21f6278 Bump actions/setup-node from 5 to 6
8d6be8f Bump astral-sh/setup-uv from 6 to 7
17865ea Bump actions/upload-artifact from 4 to 5
90ad0af Bump actions/download-artifact from 5 to 6
18e6672 Drop testing under PyPy 3.9
650215b Document workaround for MongoDsn default port
e326790 Fix example of for bytes_invalid_encoding validation error
Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.4.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.4.0

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Commits

17cf886 v4.4.0
cb63a5c Merge pull request #3535 from br-rhrbacek/fix-cgroups
f80801d Fix docker-in-docker detection for cgroups v2
9143fc3 Merge pull request #3577 from pre-commit/language-unsupported
725acc9 rename system and script languages to unsupported / unsupported_script
3815e2e Merge pull request #3576 from pre-commit/fix-stages-config-error
aa2961c fix missing context in error for stages
46297f7 Merge pull request #3575 from pre-commit/rm-python3-hooks-repo
95eec75 rm python3_hooks_repo
5e4b354 Merge pull request #3574 from pre-commit/rm-hook-with-spaces-test
Additional commits viewable in compare view

Updates pytest from 8.4.2 to 9.0.0

Release notes

Sourced from pytest's releases.

9.0.0

pytest 9.0.0 (2025-11-05)

New features
#1367: Support for subtests has been added.

subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

Example:
def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)
Each assert failure or error is caught by the context manager and reported individually, giving a clear picture of all files that are missing a docstring.

In addition, unittest.TestCase.subTest is now also supported.

This feature was originally implemented as a separate plugin in pytest-subtests, but since then has been merged into the core.

[!NOTE] This feature is experimental and will likely evolve in future releases. By that we mean that we might change how subtests are reported on failure, but the functionality and how to use it are stable.
#13743: Added support for native TOML configuration files.

While pytest, since version 6, supports configuration in pyproject.toml files under [tool.pytest.ini_options], it does so in an "INI compatibility mode", where all configuration values are treated as strings or list of strings. Now, pytest supports the native TOML data model.

In pyproject.toml, the native TOML configuration is under the [tool.pytest] table.
# pyproject.toml
[tool.pytest]
minversion = "9.0"
addopts = ["-ra", "-q"]
testpaths = [
    "tests",
    "integration",
]

... (truncated)

Commits

f4b0fd2 Prepare release version 9.0.0
52d8e68 Merge pull request #13889 from bluetech/regendoc-restore
d6d3e4a doc: fixes for regendoc
7cb3974 doc: restore missing "# content of pytest.toml" regendoc commands
5ae9e47 build(deps): Bump django in /testing/plugins_integration (#13881)
adb3658 Merge pull request #13864 from bluetech/config-cleanups-2
a28c08e Merge pull request #13875 from bluetech/ci-tweaks
a250954 ci: split publish-to-pypi and push-tag jobs
ebc152f ci: update setup python's from 3.11 or 3.* to 3.13
dfd796f ci: move running update-plugin-list script to tox
Additional commits viewable in compare view

Updates ruff from 0.14.2 to 0.14.4

Release notes

Sourced from ruff's releases.

0.14.4

Release Notes

Released on 2025-11-06.

Preview features

[formatter] Allow newlines after function headers without docstrings (#21110)

[formatter] Avoid extra parentheses for long match patterns with as captures (#21176)

[refurb] Expand fix safety for keyword arguments and Decimals (FURB164) (#21259)

[refurb] Preserve argument ordering in autofix (FURB103) (#20790)

Bug fixes

[server] Fix missing diagnostics for notebooks (#21156)

[flake8-bugbear] Ignore non-NFKC attribute names in B009 and B010 (#21131)

[refurb] Fix false negative for underscores before sign in Decimal constructor (FURB157) (#21190)

[ruff] Fix false positives on starred arguments (RUF057) (#21256)

Rule changes

[airflow] extend deprecated argument concurrency in airflow..DAG (AIR301) (#21220)

Documentation

Improve extend docs (#21135)

[flake8-comprehensions] Fix typo in C416 documentation (#21184)

Revise Ruff setup instructions for Zed editor (#20935)

Other changes

Make ruff analyze graph work with jupyter notebooks (#21161)

Contributors

@chirizxc

@Lee-W

@musicinmybrain

@MichaReiser

@tjkuson

@danparizher

@renovate

@ntBre

@gauthsvenkat

@LoicRiegel

Install ruff 0.14.4

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.4

Released on 2025-11-06.

Preview features

[formatter] Allow newlines after function headers without docstrings (#21110)

[formatter] Avoid extra parentheses for long match patterns with as captures (#21176)

[refurb] Expand fix safety for keyword arguments and Decimals (FURB164) (#21259)

[refurb] Preserve argument ordering in autofix (FURB103) (#20790)

Bug fixes

[server] Fix missing diagnostics for notebooks (#21156)

[flake8-bugbear] Ignore non-NFKC attribute names in B009 and B010 (#21131)

[refurb] Fix false negative for underscores before sign in Decimal constructor (FURB157) (#21190)

[ruff] Fix false positives on starred arguments (RUF057) (#21256)

Rule changes

[airflow] extend deprecated argument concurrency in airflow..DAG (AIR301) (#21220)

Documentation

Improve extend docs (#21135)

[flake8-comprehensions] Fix typo in C416 documentation (#21184)

Revise Ruff setup instructions for Zed editor (#20935)

Other changes

Make ruff analyze graph work with jupyter notebooks (#21161)

Contributors

@chirizxc

@Lee-W

@musicinmybrain

@MichaReiser

@tjkuson

@danparizher

@renovate

@ntBre

@gauthsvenkat

@LoicRiegel

0.14.3

Released on 2025-10-30.

Preview features

... (truncated)

Commits

c7ff982 Bump 0.14.4 (#21306)
35640dd Fix main by using infer_expression (#21299)
cb2e277 [ty] Understand legacy and PEP 695 ParamSpec (#21139)
132d10f [ty] Discover site-packages from the environment that ty is installed in (#21...
f189aad [ty] Make special cases for UnionType slightly narrower (#21276)
5517c99 Require ignore 0.4.24 in Cargo.toml (#21292)
b5ff965 [ty] Favour imported symbols over builtin symbols (#21285)
c6573b1 docs: revise Ruff setup instructions for Zed editor (#20935)
76127e5 [ty] Update salsa (#21281)
cddc0fe [syntax-error]: no binding for nonlocal PLE0117 as a semantic syntax error (...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 4 updates: [pydantic](https://github.com/pydantic/pydantic), [pre-commit](https://github.com/pre-commit/pre-commit), [pytest](https://github.com/pytest-dev/pytest) and [ruff](https://github.com/astral-sh/ruff). Updates `pydantic` from 2.12.3 to 2.12.4 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.12.4/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.3...v2.12.4) Updates `pre-commit` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.3.0...v4.4.0) Updates `pytest` from 8.4.2 to 9.0.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.0) Updates `ruff` from 0.14.2 to 0.14.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.2...0.14.4) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pre-commit dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: ruff dependency-version: 0.14.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 10, 2025

dependabot bot requested a review from frangiz as a code owner November 10, 2025 09:17

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 10, 2025

frangiz merged commit 7759408 into master Nov 21, 2025
6 checks passed

dependabot bot deleted the dependabot/pip/all-dependencies-7a6c6afd00 branch November 21, 2025 07:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(deps): bump the all-dependencies group with 4 updates #207

deps(deps): bump the all-dependencies group with 4 updates #207

Uh oh!

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps(deps): bump the all-dependencies group with 4 updates #207

deps(deps): bump the all-dependencies group with 4 updates #207

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.4 (2025-11-05)

pre-commit v4.4.0

Features

Fixes

4.4.0 - 2025-11-08

Features

Fixes

9.0.0

pytest 9.0.0 (2025-11-05)

New features

0.14.4

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Other changes

Contributors

Install ruff 0.14.4

Install prebuilt binaries via shell script

0.14.4

Preview features

Bug fixes

Rule changes

Documentation

Other changes

Contributors

0.14.3

Preview features

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading