Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 25, 2025

Bumps the pip-dev-dependencies group with 4 updates in the / directory: flake8, flake8-bugbear, mypy and coverage.

Updates flake8 from 5.0.4 to 7.3.0

Commits

Updates flake8-bugbear from 21.11.29 to 24.12.12

Release notes

Sourced from flake8-bugbear's releases.

24.12.12

  • B012 and B025 now also handle try/except* (#500)
  • Skip B028 if warnings.warn is called with *args or **kwargs (#501)
  • Add B911: itertools.batched without strict= (#502)
  • Readme has anchors per check (they do not seem to render on GitHub tho)

24.10.31

  • B041: New dictionary same key AND value check (#496)
  • B037: Fix typo in error message
  • B024: No longer treats assigned class variables as abstract (#471)
  • Bump required attrs version to 22.2.0

24.8.19

  • B910: implement to suggest using Counter() instead of defaultdict(int) (#489)
  • B901: Do not trigger with explicit Generator return type (#481)
  • B008: add some comments, rename b008_extend_immutable_calls (#476)
  • B040: exception with note added not reraised or used (#477)
  • B039, Add ContextVar with mutable literal or function call as default
  • B040: Add Exception with added note not reraised. (#474)
  • Run tests in Python 3.13
  • Type annotated code (#481 + #483)
  • Replace hash with unsafe_hash (#486)

24.4.26

  • B909: Fix false positive affecting containers of mutables (#469)

24.4.21

  • B950: Add pragma comment to line length ignores (#463)
  • B909: Add more cases to detect + more container mutating functions (#460)

24.2.6

  • B902: Remove decorators named validator and root_validator from B902 checks (#459)
  • B038: Change B038 to B909 and make it optional (#456)

24.1.17

  • B038: Restrict rule to mutation functions only (#453)

24.1.16

  • B036: Fix crash on raise statements raising something other than

24.1.15

  • B038: Add check for mutations of loop iterator (#446)
  • B037: Add check for yielding or returning values in init() (#442)
  • B017: make B017 also apply to BaseException (#439)
  • B036: Add check for except BaseException without re-raising (#438)

23.12.2

  • B018: to detect useless-statements at all levels (#434)
  • B018: Add classname to b018 useless-expression output (#433)
  • B018: Include tuples in b018 useless-statement check (#432)

... (truncated)

Commits
  • 3a14037 Update CHANGES + move to version 24.12.12 to release
  • 761dbe2 Make rstcheck pass again sadly ignoring anchor links
  • 7ee1976 README: Add anchors for rules and config options (#491)
  • b960272 add except* support to B012&B025 (#500)
  • 4fed293 Skip B028 if warnings.warn is called with *args or **kwargs (#501)
  • 994f3dd Add B911: itertools.batched without strict= (#502)
  • 108bba4 Fix README format
  • 72f6116 Update CHANGES + move to version 24.10.31 to release
  • 07a5676 Add scentence really explaining B041
  • 95f8791 Add B041: Duplicate key-value pairs in dictionary literals (#496)
  • Additional commits viewable in compare view

Updates mypy from 1.16.1 to 1.17.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.17

We’ve just uploaded mypy 1.17 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Optionally Check That Match Is Exhaustive

Mypy can now optionally generate an error if a match statement does not match exhaustively, without having to use assert_never(...). Enable this by using --enable-error-code exhaustive-match.

Example:

# mypy: enable-error-code=exhaustive-match
import enum
class Color(enum.Enum):
RED = 1
BLUE = 2
def show_color(val: Color) -> None:
# error: Unhandled case for values of type "Literal[Color.BLUE]"
match val:
case Color.RED:
print("red")

This feature was contributed by Donal Burns (PR 19144).

Further Improvements to Attribute Resolution

This release includes additional improvements to how attribute types and kinds are resolved. These fix many bugs and overall improve consistency.

  • Handle corner case: protocol/class variable/descriptor (Ivan Levkivskyi, PR 19277)
  • Fix a few inconsistencies in protocol/type object interactions (Ivan Levkivskyi, PR 19267)
  • Refactor/unify access to static attributes (Ivan Levkivskyi, PR 19254)
  • Remove inconsistencies in operator handling (Ivan Levkivskyi, PR 19250)
  • Make protocol subtyping more consistent (Ivan Levkivskyi, PR 18943)

... (truncated)

Commits
  • 0260991 Update version string
  • 3901aa2 Updates to 1.17 changelog (#19436)
  • 7d13396 Initial changelog for 1.17 release (#19427)
  • a182dec Combine the revealed types of multiple iteration steps in a more robust manne...
  • ab4fd57 Improve the handling of "iteration dependent" errors and notes in finally cla...
  • 09ba1f6 [mypyc] Fix exception swallowing in async try/finally blocks with await (#19353)
  • 5c65e33 [mypyc] Fix AttributeError in async try/finally with mixed return paths (#19361)
  • 934ec50 Lessen dmypy suggest path limitations for Windows machines (#19337)
  • a4801f9 Type ignore comments erroneously marked as unused by dmypy (#15043)
  • c3bfa0d Handle corner case: protocol vs classvar vs descriptor (#19277)
  • Additional commits viewable in compare view

Updates coverage from 7.9.2 to 7.10.0

Changelog

Sourced from coverage's changelog.

Version 7.10.0 — 2025-07-24

  • A new configuration option: ":ref:config_run_patch" specifies named patches to work around some limitations in coverage measurement. These patches are available:

    • patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process. This closes long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.

    • patch = subprocess measures coverage in Python subprocesses created with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of functions. Closes old issue 367_ and duplicate issue 378_.

    • patch = execv adjusts the :func:execv <python:os.execl> family of functions to save coverage data before ending the current program and starting the next. Not available on Windows. Closes issue 43_ after 15 years!

  • The HTML report now dimly colors subsequent lines in multi-line statements. They used to have no color. This gives a better indication of the amount of code missing in the report. Closes issue 1308_.

  • Two new exclusion patterns are part of the defaults: ... is automatically excluded as a line and if TYPE_CHECKING: is excluded as a branch. Closes issue 831_.

  • A new command-line option: --save-signal=USR1 specifies a signal that coverage.py will listen for. When the signal is sent, the coverage data will be saved. This makes it possible to save data from within long-running processes. Thanks, Arkady Gilinsky <pull 1998_>_.

  • A new configuration option: ":ref:config_report_partial_also" is a list of regexes to add as pragmas for partial branches. This parallels the ":ref:config_report_exclude_also" setting for adding line exclusion patterns.

  • A few file path configuration settings didn't allow for tilde expansion: :ref:config_json_output, :ref:config_lcov_output and :ref:config_run_debug_file. This is now fixed.

  • Wheels are included for 3.14 now that 3.14 rc1 is available.

  • We no longer ship a PyPy-specific wheel. PyPy will install the pure-Python wheel. Closes issue 2001_.

  • In the very unusual situation of not having a current frame, coverage no

... (truncated)

Commits
  • ef59be0 build: missed an expected distribution count
  • f49f061 docs: sample HTML for 7.10.0
  • 6a7d5ca docs: prep for 7.10.0
  • 395c8cd build: provide 3.14 wheels
  • 6154fda feat: patch=execv
  • 787e5c4 test: we don't use 'expensive' as a mark now
  • 7e49831 refactor: patch=_exit without a global
  • 4d4ddd8 fix: better ellipsis exclusion regex. #831
  • d578c52 fix: don't assume we have a current frame. #2005
  • ecf53d5 docs: remind myself what the cores are
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…4 updates

Bumps the pip-dev-dependencies group with 4 updates in the / directory: [flake8](https://github.com/pycqa/flake8), [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear), [mypy](https://github.com/python/mypy) and [coverage](https://github.com/nedbat/coveragepy).


Updates `flake8` from 5.0.4 to 7.3.0
- [Commits](PyCQA/flake8@5.0.4...7.3.0)

Updates `flake8-bugbear` from 21.11.29 to 24.12.12
- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases)
- [Commits](PyCQA/flake8-bugbear@21.11.29...24.12.12)

Updates `mypy` from 1.16.1 to 1.17.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.0)

Updates `coverage` from 7.9.2 to 7.10.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.9.2...7.10.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip-dev-dependencies
- dependency-name: flake8-bugbear
  dependency-version: 24.12.12
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip-dev-dependencies
- dependency-name: mypy
  dependency-version: 1.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-dev-dependencies
- dependency-name: coverage
  dependency-version: 7.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 25, 2025

Labels

The following labels could not be found: chore. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 4, 2025
@dependabot dependabot bot deleted the dependabot/pip/pip-dev-dependencies-da33f9a700 branch August 4, 2025 05:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant