Skip to content

chore(uv): bump the uv-dependencies group across 1 directory with 7 updates - #119

Merged
JSChronicles merged 1 commit into
mainfrom
dependabot/uv/uv-dependencies-4988de682d
Oct 2, 2026
Merged

chore(uv): bump the uv-dependencies group across 1 directory with 7 updates#119
JSChronicles merged 1 commit into
mainfrom
dependabot/uv/uv-dependencies-4988de682d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-dependencies group with 7 updates in the / directory:

Package From To
boto3 1.43.95 1.43.101
azure-mgmt-network 32.0.0 33.0.0
azure-mgmt-storage 25.1.0 25.2.0
google-cloud-compute 1.53.0 1.54.0
check-jsonschema 0.38.0 0.38.2
ruff 0.16.7 0.16.8
ty 0.0.81 0.0.84

Updates boto3 from 1.43.95 to 1.43.101

Commits

Updates azure-mgmt-network from 32.0.0 to 33.0.0

Release notes

Sourced from azure-mgmt-network's releases.

azure-mgmt-network_33.0.0

33.0.0 (2026-09-17)

Features Added

  • Client NetworkManagementClient added operation group authentication_policies
  • Model ApplicationGatewayFirewallManifestRuleSet added property display_name
  • Model ApplicationGatewayFirewallRule added property paranoia_level
  • Model ApplicationGatewayFirewallRuleSetPropertiesFormat added property display_name
  • Model ApplicationGatewayPropertiesFormat added property advanced_routing_condition_sets
  • Model ApplicationGatewayPropertiesFormat added property advanced_routing_maps
  • Model ApplicationGatewayPropertiesFormat added property reserved_capacity
  • Model ApplicationGatewayRequestRoutingRulePropertiesFormat added property advanced_routing_map
  • Model ApplicationGatewayRequestRoutingRulePropertiesFormat added property auth_configs
  • Enum ApplicationGatewayRequestRoutingRuleType added member ADVANCED_ROUTING
  • Enum ApplicationGatewaySkuName added member BASIC_V2
  • Enum ApplicationGatewaySkuName added member BASIC_WAF_V2
  • Enum ApplicationGatewayTier added member BASIC_V2
  • Enum ApplicationGatewayTier added member BASIC_WAF_V2
  • Model AzureFirewallPropertiesFormat added property ai_security_add_on
  • Model BastionHost added property identity
  • Model BastionHostPropertiesFormat added property session_recording_configuration
  • Model DefaultRuleSetPropertyFormat added property display_name
  • Model ExpressRouteCircuitPropertiesFormat added property express_route_lag
  • Model ExpressRouteLagPropertiesFormat added property circuits
  • Model IpamPoolProperties added property max_allocation_size
  • Model IpamPoolProperties added property min_allocation_size
  • Model IpamPoolUpdateProperties added property max_allocation_size
  • Model IpamPoolUpdateProperties added property min_allocation_size
  • Model NetworkRule added property destination_geo_locations
  • Model NetworkRule added property source_geo_locations
  • Model PrivateLinkServiceConnectionProperties added property approval_reference
  • Enum VirtualNetworkGatewayMigrationType added member MIGRATE_GATEWAY_FOR_POINT_TO_SITE_PROFILE
  • Enum VirtualNetworkGatewayMigrationType added member UPGRADE_GATEWAY_TO_DUAL_STACK
  • Model WebApplicationFirewallPolicyPropertiesFormat added property tier
  • Added model ApplicationGatewayAdvancedRoutingCondition
  • Added model ApplicationGatewayAdvancedRoutingConditionSet
  • Added model ApplicationGatewayAdvancedRoutingConditionSetPropertiesFormat
  • Added enum ApplicationGatewayAdvancedRoutingConditionType
  • Added model ApplicationGatewayAdvancedRoutingMap
  • Added model ApplicationGatewayAdvancedRoutingMapPropertiesFormat
  • Added model ApplicationGatewayAdvancedRoutingPropertyValueMatcher
  • Added model ApplicationGatewayAdvancedRoutingRule
  • Added model ApplicationGatewayAdvancedRoutingRulePropertiesFormat
  • Added model ApplicationGatewayAuthConfig
  • Added enum ApplicationGatewayWafRuleParanoiaLevel
  • Added model ApprovalReference
  • Added model AuthenticationPolicy
  • Added model AuthenticationPolicyPropertiesFormat
  • Added model AuthenticationPolicyUpdateParameters

... (truncated)

Commits
  • 78e2eba [AutoPR azure-mgmt-network]-generated-from-SDK Generation - Python-6848690 (#...
  • 1f24b99 [AutoPR azure-mgmt-cosmosdb]-generated-from-SDK Generation - Python-6726932 (...
  • db8b470 Howie/release 2.7.0 (#49028)
  • 031b28b [AutoPR azure-mgmt-fabric]-generated-from-SDK Generation - Python-6844785 (#4...
  • e63f922 Increment package version after release of azure-cosmos (#49058)
  • c583c98 Improve AgentServer warm response latency and reduce repeated work (#49000)
  • 3de4aa5 Add deprecation note for Astronomer.Astro deprecation (#49041)
  • b60c708 fix deprecation guidance (#49068)
  • fa46b08 Add Azure Storage to network isolation policy (#49064)
  • 1e7a0ce updated changelog (#49062)
  • Additional commits viewable in compare view

Updates azure-mgmt-storage from 25.1.0 to 25.2.0

Release notes

Sourced from azure-mgmt-storage's releases.

azure-mgmt-storage_25.2.0

25.2.0 (2026-09-22)

Features Added

  • Client StorageManagementClient added operation group context_cache_containers
  • Client StorageManagementClient added operation group context_caches
  • Model SasPolicy added property require_user_bound_user_delegation_sas
  • Model SasPolicy added property require_user_bound_user_delegation_sas_action
  • Model StorageAccountProperties added property allow_cross_tenant_delegation_sas
  • Model StorageAccountPropertiesCreateParameters added property allow_cross_tenant_delegation_sas
  • Model StorageAccountPropertiesUpdateParameters added property allow_cross_tenant_delegation_sas
  • Added enum AiProvider
  • Added model ContextCache
  • Added enum ContextCacheAccountKind
  • Added model ContextCacheContainer
  • Added model ContextCacheContainerProperties
  • Added model ContextCacheContainerPropertiesUpdate
  • Added model ContextCacheContainerUpdate
  • Added model ContextCacheProperties
  • Added model ContextCachePropertiesUpdate
  • Added enum ContextCacheProvisioningState
  • Added model ContextCacheUpdate
  • Added model CustomerManagedKeyEncryption
  • Added enum InfrastructureEncryption
  • Added model KeyEncryptionKeyIdentity
  • Added enum KeyEncryptionKeyIdentityType
  • Added model ManagedServiceIdentity
  • Added enum ManagedServiceIdentityType
  • Added enum PolicyViolationAction
  • Added model StorageAccountEncryption
  • Added operation group ContextCacheContainersOperations
  • Added operation group ContextCachesOperations
Commits
  • 5e61bd8 [AutoPR azure-mgmt-storage]-generated-from-SDK Generation - Python-6868350 (#...
  • 2f500a1 Use structured data and trusted snapshots for management SDK reviews (#49149)
  • c055005 Increment package version after release of azure-ai-evaluation (#49162)
  • a230663 Bump hono from 4.13.2 to 4.13.7 (#49006)
  • 9fb3171 Fix broken documentation links (#49158)
  • 153ba06 [AutoPR azure-mgmt-oracledatabase]-generated-from-SDK Generation - Python-676...
  • bc7f5d6 Support Spark runtimes 3.4 and 3.5 for model monitoring (#49117)
  • 3b4c7a3 [azure-ai-evaluation] Prepare 1.18.6 release (#49157)
  • 998e7bb Sync eng/common directory with azure-sdk-tools for PR 17035 (#49031)
  • 53b8043 [agentserver-core] Release 2.2.0b2 (#49150)
  • Additional commits viewable in compare view

Updates google-cloud-compute from 1.53.0 to 1.54.0

Release notes

Sourced from google-cloud-compute's releases.

google-cloud-compute: v1.54.0

1.54.0 (2026-09-17)

Features

Commits
  • 773373e chore: release main (#18368)
  • 3b3cc6f fix: empty commit to bump v1beta version (#18411)
  • dd24029 fix(spanner): release transaction lock if inline begin fails (#18409)
  • a511b55 chore: migrate pre-release test into nightly GitHub Action (#18387)
  • 91b7ae7 feat(google/cloud/backupdr/v1beta): add google-cloud-backupdr (#18399)
  • 20bdcc8 chore: onboard google-cloud-spanner-dbapi-driver (#18403)
  • 136d4b9 feat(firestore): add BSONInt32 support (#18388)
  • 8df34ce feat(google/cloud/networkservices/v1beta1): add google-cloud-network-services...
  • e9f8e59 feat: update API sources and regenerate (#18396)
  • 0d7d59c fix: disambiguate google-cloud-bigquery to_dataframe usage from `pandas-gbq...
  • Additional commits viewable in compare view

Updates check-jsonschema from 0.38.0 to 0.38.2

Release notes

Sourced from check-jsonschema's releases.

0.38.2

  • Update the version of click declared as a dependency

0.38.1

  • Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
  • check-jsonschema now has a logo. Thanks to Mylah Birdie!
Changelog

Sourced from check-jsonschema's changelog.

0.38.2

  • Update the version of click declared as a dependency

0.38.1

  • Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
  • check-jsonschema now has a logo. Thanks to Mylah Birdie <https://www.instagram.com/mylahbirdie>__!
Commits
  • 0494aa7 Bump version for release
  • 9ef41c1 Merge pull request #720 from sirosen/update-click-deps
  • 91e96dc Update bounds on click
  • 99f2dd3 Bump version for release
  • 7bae1f5 Add logo to readme
  • 44420b0 Merge pull request #718 from sirosen/use-logo
  • cfed2c5 Add the new logo!
  • c538a21 Merge pull request #717 from python-jsonschema/vendor-schemas-auto
  • e594040 [vendor-schemas] automated update
  • 27796f7 Merge pull request #709 from python-jsonschema/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates ty from 0.0.81 to 0.0.84

Release notes

Sourced from ty's releases.

0.0.84

Release Notes

Released on 2026-09-24.

This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.

Bug fixes

  • Fix stale diagnostics from the LSP server after toggling showSyntaxErrors (#28759)

LSP server

  • Complete string keys from dictionary initializers (#28820)
  • Support LSP requests against closed documents (#28595)
  • Select projects for external files using import search paths (#28594)
  • Use workspace editor settings for external files (#28639)

Performance

  • Avoid repeated subtyping checks for materialized recursive protocols (#28774)
  • Skip reading notebooks when discovering scripts (#28781)

Core type checking

  • Avoid incorrect simplification of TypeIs materializations (#28817)
  • Fix disjointness of generic class types (#28787)
  • Fix staticmethod shadowing through generic receivers and unions (#28766)
  • Infer callable signatures from bounded type variables (#28599)
  • Infer constant membership in inline list and set literals (e.g. "foo" in ["foo"] is now inferred as Literal[True]) (#28676)
  • Infer through optional generic containers in the legacy solver (#28791)
  • Preserve call narrowing during cyclic inference (#28708)
  • Preserve intersections of type guard return types (#28796)
  • Use subtyping for constraint-set implication (#28657)

Configuration

  • Disable invalid-legacy-positional-parameter by default (#28834)

Other changes

  • Only consider reachable definitions when determining whether a condition should be exempted from redundant-condition(-strict) due to the condition being defined relative to sys.version_info, sys.platform, os.name or typing.TYPE_CHECKING (#28788)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.84

Released on 2026-09-24.

This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.

Bug fixes

  • Fix stale diagnostics from the LSP server after toggling showSyntaxErrors (#28759)

LSP server

  • Complete string keys from dictionary initializers (#28820)
  • Support LSP requests against closed documents (#28595)
  • Select projects for external files using import search paths (#28594)
  • Use workspace editor settings for external files (#28639)

Performance

  • Avoid repeated subtyping checks for materialized recursive protocols (#28774)
  • Skip reading notebooks when discovering scripts (#28781)

Core type checking

  • Avoid incorrect simplification of TypeIs materializations (#28817)
  • Fix disjointness of generic class types (#28787)
  • Fix staticmethod shadowing through generic receivers and unions (#28766)
  • Infer callable signatures from bounded type variables (#28599)
  • Infer constant membership in inline list and set literals (e.g. "foo" in ["foo"] is now inferred as Literal[True]) (#28676)
  • Infer through optional generic containers in the legacy solver (#28791)
  • Preserve call narrowing during cyclic inference (#28708)
  • Preserve intersections of type guard return types (#28796)
  • Use subtyping for constraint-set implication (#28657)

Configuration

  • Disable invalid-legacy-positional-parameter by default (#28834)

Other changes

  • Only consider reachable definitions when determining whether a condition should be exempted from redundant-condition(-strict) due to the condition being defined relative to sys.version_info, sys.platform, os.name or typing.TYPE_CHECKING (#28788)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(uv): bump the uv-dependencies group across 1 directory with 7 u…
6ddaf94 
…pdates

Bumps the uv-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.95` | `1.43.101` |
| [azure-mgmt-network](https://github.com/Azure/azure-sdk-for-python) | `32.0.0` | `33.0.0` |
| [azure-mgmt-storage](https://github.com/Azure/azure-sdk-for-python) | `25.1.0` | `25.2.0` |
| [google-cloud-compute](https://github.com/googleapis/google-cloud-python) | `1.53.0` | `1.54.0` |
| [check-jsonschema](https://github.com/python-jsonschema/check-jsonschema) | `0.38.0` | `0.38.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.7` | `0.16.8` |
| [ty](https://github.com/astral-sh/ty) | `0.0.81` | `0.0.84` |



Updates `boto3` from 1.43.95 to 1.43.101
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.95...1.43.101)

Updates `azure-mgmt-network` from 32.0.0 to 33.0.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-mgmt-network_32.0.0...azure-mgmt-network_33.0.0)

Updates `azure-mgmt-storage` from 25.1.0 to 25.2.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-mgmt-storage_25.1.0...azure-mgmt-storage_25.2.0)

Updates `google-cloud-compute` from 1.53.0 to 1.54.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-compute-v1.53.0...google-cloud-compute-v1.54.0)

Updates `check-jsonschema` from 0.38.0 to 0.38.2
- [Release notes](https://github.com/python-jsonschema/check-jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/check-jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/check-jsonschema@0.38.0...0.38.2)

Updates `ruff` from 0.16.7 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.7...0.16.8)

Updates `ty` from 0.0.81 to 0.0.84
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.81...0.0.84)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: azure-mgmt-network
  dependency-version: 33.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-dependencies
- dependency-name: azure-mgmt-storage
  dependency-version: 25.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: google-cloud-compute
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: check-jsonschema
  dependency-version: 0.38.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: ty
  dependency-version: 0.0.84
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python, uv. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from JSChronicles as a code owner October 1, 2026 13:29
@JSChronicles
JSChronicles merged commit a111eaf into main Oct 2, 2026
8 checks passed
@JSChronicles
JSChronicles deleted the dependabot/uv/uv-dependencies-4988de682d branch October 2, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JSChronicles JSChronicles Awaiting requested review from JSChronicles JSChronicles is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JSChronicles