build(deps): bump the safe group across 1 directory with 10 updates #69

dependabot · 2025-12-08T21:24:11Z

Bumps the safe group with 10 updates in the / directory:

Package	From	To
anyio	`4.11.0`	`4.12.0`
python-injection	`0.24.0`	`0.25.5`
hatch	`1.15.1`	`1.16.2`
mypy	`1.18.2`	`1.19.0`
ruff	`0.14.6`	`0.14.8`
fastapi	`0.121.3`	`0.124.0`
msgspec	`0.19.0`	`0.20.0`
pydantic	`2.12.4`	`2.12.5`
pytest	`9.0.1`	`9.0.2`
hatchling	`1.27.0`	`1.28.0`

Updates anyio from 4.11.0 to 4.12.0

Release notes

Sourced from anyio's releases.

4.12.0

Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)

Added an asynchronous implementation of the functools module (#1001)

Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @Vizonex)

Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)

Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)

Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)

Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @northisup)

Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)

Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @gschaffner)

Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @gschaffner)

Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @gschaffner)

Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @saper)

Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)

Commits

bc021b6 Fixed the download-artifact settings to retain the expected behavior
c6000aa Corrected the format of the version in the changelog
9d1bfe0 Bumped up the version
77f7ce2 Fixed RuntimeError while shutting down the asyncio process pool (#1039)
aecc666 [pre-commit.ci] pre-commit autoupdate (#1036)
e5569ad Bump actions/checkout from 5 to 6 in the github-actions group (#1037)
dde3ab8 Moved a changelog entry to its correct position
250d4f1 Restore compatibility with pytest<=6.1.2 (#1030)
3708e22 Fixed a typo in the documentation (#1035)
9adbe08 Add new params to Path.glob & Path.rglob introduced since 3.12 (#1034)
Additional commits viewable in compare view

Updates python-injection from 0.24.0 to 0.25.5

Release notes

Sourced from python-injection's releases.

0.25.5

What's Changed

Remove some type: ignore by @remimd in 100nm/python-injection#306

feat: No longer instantiate a dependency if it has been explicitly passed by @remimd in 100nm/python-injection#307

Full Changelog: 100nm/python-injection@0.25.4...0.25.5

0.25.4

What's Changed

feat: Improved typing for static type checkers by @remimd in 100nm/python-injection#305

Full Changelog: 100nm/python-injection@0.25.3...0.25.4

0.25.3

What's Changed

fix: A scoped slot injectable no longer locks the module by @remimd in 100nm/python-injection#302

Full Changelog: 100nm/python-injection@0.25.2...0.25.3

0.25.2

What's Changed

refactor: Update type annotations for reserve_scoped_slot method by @remimd in 100nm/python-injection#300

refactor: Internal logic about constants by @remimd in 100nm/python-injection#301

Full Changelog: 100nm/python-injection@0.25.1...0.25.2

0.25.1

What's Changed

reverse: Bidirectional links between modules create inconsistent behavior by @remimd in 100nm/python-injection#298

refactor: Instantiation depends on the module requesting the instance by @remimd in 100nm/python-injection#299

Full Changelog: 100nm/python-injection@0.25.0...0.25.1

0.25.0

What's Changed

refactor: Update ScopedInjectable to use SlotKey for caching logic by @remimd in 100nm/python-injection#294

feat: Bidirectional link possible between modules by @remimd in 100nm/python-injection#295

feat: Expose TEST_PROFILE_NAME for testing module accessibility by @remimd in 100nm/python-injection#296

refactor: Now analyze the types at the module level by @remimd in 100nm/python-injection#297

Full Changelog: 100nm/python-injection@0.24.0...0.25.0

Commits

7af0fdd feat: No longer instantiate a dependency if it has been explicitly passed
e6737cf Remove some type: ignore
246ed45 feat: Improved typing for static type checkers
42f2e5c fix: A scoped slot injectable no longer locks the module
d764c39 refactor: Internal logic about constants
5130b19 refactor: Update type annotations for reserve_scoped_slot method
1f1e8d8 refactor: Instantiation depends on the module requesting the instance
2d699e4 reverse: Bidirectional links between modules create inconsistent behavior
ccf7e85 refactor: Now analyze the types at the module level
3218cc5 feat: Expose TEST_PROFILE_NAME for testing module accessibility
Additional commits viewable in compare view

Updates hatch from 1.15.1 to 1.16.2

Release notes

Sourced from hatch's releases.

Hatch v1.16.2

Fixed:

Properly send informational output to stderr instead of stdout

Implement documented support for sbom-files as build data for the wheel build target

Fix regression where environments no longer acknowledged the project.optional-dependencies field

Hatchling v1.16.1

Fixed:

Fix determining the built executable path for the app build target option when using a local copy of PyApp when there is an explicit target triple set

Hatch v1.16.1

Fixed:

Handle special characters correctly in path for editable installs.

Fix multiple calls to install on sync_dependencies to become a single call.

Fix context variable formatting in project dependencies to prevent crashes when using variables like {root:parent:uri} in the [project] section.

Fix environment overrides for dependency-groups field to properly support matrix and conditional configurations.

Hatchling v1.16.0

Added:

Add app build target option to build using a local copy of the PyApp repository

Hatch v1.16.0

Changed:

Drop support for 3.9

Environment type plugins are now no longer expected to support a pseudo-build environment as any environment now may be used for building. The following methods have been removed: build_environment, build_environment_exists, run_builder, construct_build_command

Added:

Support for workspaces inspired by Cargo Workspaces

Dependency group support.

The version and project metadata commands now support projects that do not use Hatchling as the build backend

The version command accepts a --force option, allowing for downgrades when an explicit version number is given.

Build environments can now be configured, the default build environment is hatch-build

The environment interface now has the following methods and properties in order to better support builds on remote machines: project_root, sep, pathsep, fs_context

Bump the minimum supported version of packaging to 24.2

Upgrade Ruff to 0.13.2

Fixed:

All HTTP requests now set an identifiable User-Agent header.

Fix issue where terminal output would be out of sync during build.

Fix for Click Sentinel value when using run command

Commits

e966480 release Hatch v1.16.2 (#2132)
860fecc Fix self referential env dependencies being ignored (#2127)
e08014e fix(docs): correct syntax for group inclusion in advanced configuration (#2124)
843f916 add support for sbom file from build data (#2109)
e6b01c8 fix(hatch): incorrect content sent to stdout (#2119)
d96983f release Hatch v1.16.1 (#2116)
3fff194 Bug fixes v1.16 (#2115)
8e1a709 hatch-v1.16.x (#2106)
9d25ed0 Add User-Agent header with Hatch, Python and HTTPX versions (#1827)
8866ef0 Fix workspace option overrides (#2104)
Additional commits viewable in compare view

Updates mypy from 1.18.2 to 1.19.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy no longer supports running with Python 3.9, which has reached end-of-life. When running mypy with Python 3.10+, it is still possible to type check code that needs to support Python 3.9 with the --python-version 3.9 argument. Support for this will be dropped in the first half of 2026!

Contributed by Marc Mueller (PR 20156).

Mypy 1.19

We’ve just uploaded mypy 1.19.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Python 3.9 Support Ending Soon

This is the last mypy feature release that supports Python 3.9, which reached end of life in October 2025.

Performance Improvements

Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR 20053)

Speed up type aliases (Ivan Levkivskyi, PR 19810)

Fixed‑Format Cache Improvements

Mypy uses a cache by default to speed up incremental runs by reusing partial results from earlier runs. Mypy 1.18 added a new binary fixed-format cache representation as an experimental feature. The feature is no longer experimental, and we are planning to enable it by default in a future mypy release (possibly 1.20), since it's faster and uses less space than the original, JSON-based cache format. Use --fixed-format-cache to enable the fixed-format cache.

Mypy now has an extra dependency on the librt PyPI package, as it's needed for cache serialization and deserialization.

Mypy ships with a tool to convert fixed-format cache files to the old JSON format. Example of how to use this:
$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff

... (truncated)

Commits

0f068c9 Remove +dev
6d5cf52 Various updates to 1.19 changelog (#20304)
3c81308 Add draft version of 1.19 release notes (#20296)
1999a20 [mypyc] librt base64: use existing SIMD CPU dispatch by customizing build fla...
1b94fbb [mypyc] Fix vtable pointer with inherited dunder new (#20302)
13369cb [mypyc] Fix crash on super in generator (#20291)
a087a58 Update import map when new modules added (#20271)
35e843c [mypyc] Add efficient librt.base64.b64decode (#20263)
094f66d [mypyc] Add repr to AssignmentTarget subclasses (#20258)
0738db3 Do not push partial types to the binder (#20202)
Additional commits viewable in compare view

Updates ruff from 0.14.6 to 0.14.8

Release notes

Sourced from ruff's releases.

0.14.8

Release Notes

Released on 2025-12-04.

Preview features

[flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)

[flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

Fix syntax error false positives for await outside functions (#21763)

[flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

Suggest using --output-file option in GitLab integration (#21706)

Other changes

[syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

@kieran-ryan

@11happy

@danparizher

@ntBre

Install ruff 0.14.8

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.ps1 | iex"
Download ruff 0.14.8

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.8

Released on 2025-12-04.

Preview features

[flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)

[flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

Fix syntax error false positives for await outside functions (#21763)

[flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

Suggest using --output-file option in GitLab integration (#21706)

Other changes

[syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

@kieran-ryan

@11happy

@danparizher

@ntBre

0.14.7

Released on 2025-11-28.

Preview features

[flake8-bandit] Handle string literal bindings in suspicious-url-open-usage (S310) (#21469)

[pylint] Fix PLR1708 false positives on nested functions (#21177)

[pylint] Fix suppression for empty dict without tuple key annotation (PLE1141) (#21290)

[ruff] Add rule RUF066 to detect unnecessary class properties (#21535)

[ruff] Catch more dummy variable uses (RUF052) (#19799)

Bug fixes

[server] Set severity for non-rule diagnostics (#21559)

[flake8-implicit-str-concat] Avoid invalid fix in (ISC003) (#21517)

[parser] Fix panic when parsing IPython escape command expressions (#21480)

CLI

Show partial fixability indicator in statistics output (#21513)

... (truncated)

Commits

9d4f1c6 Bump 0.14.8 (#21791)
326025d [ty] Always register rename provider if client doesn't support dynamic regist...
3aefe85 [ty] Ensure rename CursorTest calls can_rename before renaming (#21790)
b8ecc83 Fix clippy errors on main (#21788)
6491932 [ty] Fix crash when hovering an unknown string annotation (#21782)
a9f2bb4 [ty] Don't send publish diagnostics for clients supporting pull diagnostics (...
e2b72fb [ty] cleanup test path (#21781)
14fce0d [ty] Improve the display of various special-form types (#21775)
8ebecb2 [ty] Add subdiagnostic hint if the user wrote X = Any rather than X: Any ...
45ac30a [ty] Teach ty the meaning of desperation (try ancestor pyproject.tomls as...
Additional commits viewable in compare view

Updates fastapi from 0.121.3 to 0.124.0

Release notes

Sourced from fastapi's releases.

0.124.0

Features

🚸 Improve tracebacks by adding endpoint metadata. PR #14306 by @savannahostrowski.

Internal

✏️ Fix typo in scripts/mkdocs_hooks.py. PR #14457 by @yujiteshima.

0.123.10

Fixes

🐛 Fix using class (not instance) dependency that has __call__ method. PR #14458 by @YuriiMotov.

🐛 Fix separate_input_output_schemas=False with computed_field. PR #14453 by @YuriiMotov.

0.123.9

Fixes

🐛 Fix OAuth2 scopes in OpenAPI in extra corner cases, parent dependency with scopes, sub-dependency security scheme without scopes. PR #14459 by @tiangolo.

0.123.8

Fixes

🐛 Fix OpenAPI security scheme OAuth2 scopes declaration, deduplicate security schemes with different scopes. PR #14455 by @tiangolo.

0.123.7

Fixes

🐛 Fix evaluating stringified annotations in Python 3.10. PR #11355 by @chaen.

0.123.6

Fixes

🐛 Fix support for functools wraps and partial combined, for async and regular functions and classes in path operations and dependencies. PR #14448 by @tiangolo.

0.123.5

Features

✨ Allow using dependables with functools.partial(). PR #9753 by @lieryan.

✨ Add support for wrapped functions (e.g. @functools.wraps()) used with forward references. PR #5077 by @lucaswiman.

✨ Handle wrapped dependencies. PR #9555 by @phy1729.

Fixes

🐛 Fix optional sequence handling with new union syntax from Python 3.10. PR #14430 by @Viicos.

Refactors

🔥 Remove dangling extra condiitonal no longer needed. PR #14435 by @tiangolo.

♻️ Refactor internals, update is_coroutine check to reuse internal supported variants (unwrap, check class). PR #14434 by @tiangolo.

... (truncated)

Commits

b5ca132 🔖 Release version 0.124.0
a2cef70 📝 Update release notes
5b62456 ✏️ Fix typo in scripts/mkdocs_hooks.py (#14457)
dbd34f1 📝 Update release notes
e1117f7 🚸 Improve tracebacks by adding endpoint metadata (#14306)
08b09e5 🔖 Release version 0.123.10
e7d7038 📝 Update release notes
da0ffab 🐛 Fix using class (not instance) dependency that has __call__ method (#14458)
5161694 📝 Update release notes
812a192 🐛 Fix separate_input_output_schemas=False with computed_field (#14453)
Additional commits viewable in compare view

Updates msgspec from 0.19.0 to 0.20.0

Release notes

Sourced from msgspec's releases.

Version 0.20.0

Support Python 3.14, including freethreaded mode (#852, #877).

Expose the StructMeta metaclass (#890, #927, #928, #940, #945).

Add msgspec.inspect.is_struct and msgspec.inspect.is_struct_type functions for checking whether an object is a msgspec.Struct-like instance or class (#950).

Support Windows arm64 builds (#943).

Enable ThinLTO on macOS aarch64 builds (#937).

Fix leaks of re.Pattern objects when using pattern constraints of msgspec.Meta (#899).

Fixed memoryview support for msgspec.msgpack (#836).

Fix crash when typing.TypedDict contains incorrect metadata (#853, #947).

Add setuptools-scm as a build dependency instead of vendoring versioneer (#905).

Remove support for legacy packaging builds (#907).

Improved the developer experience by adding the just command runner and Dev Container support (#918).

Changelog

Sourced from msgspec's changelog.

Version 0.20.0 (2025-11-23)

Support Python 3.14, including freethreaded mode ({pr}852, {pr}877).

Expose the StructMeta metaclass ({pr}890, {pr}927, {pr}928, {pr}940, {pr}945).

Add msgspec.inspect.is_struct and msgspec.inspect.is_struct_type functions for checking whether an object is a msgspec.Struct-like instance or class ({pr}950).

Support Windows arm64 builds ({pr}943).

Enable ThinLTO on macOS aarch64 builds ({pr}937).

Fix leaks of re.Pattern objects when using pattern constraints of msgspec.Meta ({pr}899).

Fixed memoryview support for msgspec.msgpack ({pr}836).

Fix crash when typing.TypedDict contains incorrect metadata ({pr}853, {pr}947).

Add setuptools-scm as a build dependency instead of vendoring versioneer ({pr}905).

Remove support for legacy packaging builds ({pr}907).

Improved the developer experience by adding the just command runner and Dev Container support ({pr}918).

Commits

a46a2c6 Make GitHub action resilient to release runs (#953)
a235d0c Prepare GitHub release (#952)
27afa70 Fix typos (#951)
40b62da [docs] fix two typos in benchmarks & structs section (#802)
f78a1e7 Add utilities for Struct-like checks (#950)
cda7e24 Update changelog (#949)
233d916 Fix refcount leak to re.Pattern when using Meta(pattern=...) (#899)
2eafc17 Standardize format of the downstream user docs (#948)
eff6a7c Add Meltano to "Used By" in the docs (#914)
242ec07 Add django-modern-rest to "Used by" docs section (#913)
Additional commits viewable in compare view

Updates pydantic from 2.12.4 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
See full diff in compare view

Updates pytest from 9.0.1 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view

Updates hatchling from 1.27.0 to 1.28.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.28.0

Changed:

Drop support for Python 3.9

Added:

Add sbom-files option and sbom_files build data to the wheel build target for including Software Bill of Materials files.

Commits

8e1a709 hatch-v1.16.x (#2106)
9d25ed0 Add User-Agent header with Hatch, Python and HTTPX versions (#1827)
8866ef0 Fix workspace option overrides (#2104)
4d8b5d5 Blog and doc updates for release of 1.16 (#2103)
61e342f Use zstandard implementation from stdlib (PEP-784) (#2034)
8695db4 Add SBOM support - PEP770 (#2098)
b0609b3 GitHub Actions: macOS 13 runner image is closing down (#2070)
ff4b404 Code clean up. (#2097)
c6189fc Hatch environments support PEP735 dependency-groups (#1922)
09b2007 Simplify and update workspace environment docs. (#2095)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the safe group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.12.0` | | [python-injection](https://github.com/100nm/python-injection) | `0.24.0` | `0.25.5` | | [hatch](https://github.com/pypa/hatch) | `1.15.1` | `1.16.2` | | [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.6` | `0.14.8` | | [fastapi](https://github.com/fastapi/fastapi) | `0.121.3` | `0.124.0` | | [msgspec](https://github.com/jcrist/msgspec) | `0.19.0` | `0.20.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.4` | `2.12.5` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.1` | `9.0.2` | | [hatchling](https://github.com/pypa/hatch) | `1.27.0` | `1.28.0` | Updates `anyio` from 4.11.0 to 4.12.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.11.0...4.12.0) Updates `python-injection` from 0.24.0 to 0.25.5 - [Release notes](https://github.com/100nm/python-injection/releases) - [Commits](100nm/python-injection@0.24.0...0.25.5) Updates `hatch` from 1.15.1 to 1.16.2 - [Release notes](https://github.com/pypa/hatch/releases) - [Commits](pypa/hatch@hatch-v1.15.1...hatch-v1.16.2) Updates `mypy` from 1.18.2 to 1.19.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.18.2...v1.19.0) Updates `ruff` from 0.14.6 to 0.14.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.6...0.14.8) Updates `fastapi` from 0.121.3 to 0.124.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.121.3...0.124.0) Updates `msgspec` from 0.19.0 to 0.20.0 - [Release notes](https://github.com/jcrist/msgspec/releases) - [Changelog](https://github.com/jcrist/msgspec/blob/main/docs/changelog.md) - [Commits](jcrist/msgspec@0.19.0...0.20.0) Updates `pydantic` from 2.12.4 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.4...v2.12.5) Updates `pytest` from 9.0.1 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.1...9.0.2) Updates `hatchling` from 1.27.0 to 1.28.0 - [Release notes](https://github.com/pypa/hatch/releases) - [Commits](pypa/hatch@hatchling-v1.27.0...hatchling-v1.28.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: python-injection dependency-version: 0.25.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: hatch dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: mypy dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: ruff dependency-version: 0.14.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: fastapi dependency-version: 0.124.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: msgspec dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe - dependency-name: hatchling dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-12-10T10:30:18Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 8, 2025

dependabot bot closed this Dec 10, 2025

dependabot bot deleted the dependabot/uv/dev/safe-533e9b7d9f branch December 10, 2025 10:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): bump the safe group across 1 directory with 10 updates #69

build(deps): bump the safe group across 1 directory with 10 updates #69

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 10, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum

Uh oh!

build(deps): bump the safe group across 1 directory with 10 updates #69

build(deps): bump the safe group across 1 directory with 10 updates #69

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.12.0

0.25.5

What's Changed

0.25.4

What's Changed

0.25.3

What's Changed

0.25.2

What's Changed

0.25.1

What's Changed

0.25.0

What's Changed

Hatch v1.16.2

Hatchling v1.16.1

Hatch v1.16.1

Hatchling v1.16.0

Hatch v1.16.0

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy 1.19

Python 3.9 Support Ending Soon

Performance Improvements

Fixed‑Format Cache Improvements

0.14.8

Release Notes

Preview features

Bug fixes

Documentation

Other changes

Contributors

Install ruff 0.14.8

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.14.8

0.14.8

Preview features

Bug fixes

Documentation

Other changes

Contributors

0.14.7

Preview features

Bug fixes

CLI

0.124.0

Features

Internal

0.123.10

Fixes

0.123.9

Fixes

0.123.8

Fixes

0.123.7

Fixes

0.123.6

Fixes

0.123.5

Features

Fixes

Refactors

Version 0.20.0

Version 0.20.0 (2025-11-23)

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.5 (2025-11-26)

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

Hatchling v1.28.0

dependabot bot commented on behalf of github Dec 8, 2025 •

edited

Loading