Skip to content

chore: bump the python group across 1 directory with 6 updates - #1761

Merged
FBumann merged 3 commits into
mainfrom
dependabot/pip/python-f1be7caba5
Sep 25, 2026
Merged

FBumann merged 3 commits into
mainfrom
dependabot/pip/python-f1be7caba5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the python group with 6 updates in the / directory:

Package From To
zensical 0.0.62 0.0.64
pymdown-extensions 11.0.1 12.0.1
pygments 2.20.0 2.21.0
ruff 0.16.1 0.16.8
pyrefly 1.2.0 1.3.1
pre-commit 4.6.1 4.6.2

Updates zensical from 0.0.62 to 0.0.64

Release notes

Sourced from zensical's releases.

0.0.64

Summary

Many of you have been waiting for this one: Zensical now includes native blog support. As a direct port of the Material for MkDocs blog plugin, it preserves the familiar configuration, metadata, URLs, archives, categories, authors, pagination, and more. We're happy to finally put it into your hands, with more flexible blogging functionality planned for the future.

Changelog

Features

  • 5825381 zensical, compat, ui – add blog plugin replacement

Bug fixes

  • a85875e ui – update ui to v0.0.32

0.0.63

Summary

This version ensures pages containing snippets rebuild when source files change during local preview and excludes hidden files and directories from the generated site. It also fixes preview-site root redirects and returns proper 404 responses while preserving custom error pages.

Additionally, the user interface is updated to v0.0.31, fixing empty submenus for sections containing only an index page and improving task list checkbox sizing and alignment in the modern theme. It also updates dependencies and adds 60 new icons across Lucide, Octicons, and Simple Icons.

Changelog

Bug fixes

  • a771962 ui – update ui to v0.0.31
  • dfe8f94 zensical – rebuild pages containing snippets on source changes (#950)
  • d6cd5d5 zensical, zensical-serve – append trailing slash to preview site root (#944)
  • 2070bf1 zensical, compat – don't add dotfiles to final site (#945)
Commits
  • 7cac628 chore: release v0.0.64
  • 5825381 feature: add blog plugin replacement
  • a85875e fix: update ui to v0.0.32
  • 1d03851 chore: release v0.0.63
  • a771962 fix: update ui to v0.0.31
  • 51b3d3d chore: update pull request guide
  • 39cc42b chore: upgrade dependencies
  • dfe8f94 fix: rebuild pages containing snippets on source changes (#950)
  • d6cd5d5 fix: append trailing slash to preview site root (#944)
  • 2070bf1 fix: don't add dotfiles to final site (#945)
  • Additional commits viewable in compare view

Updates pymdown-extensions from 11.0.1 to 12.0.1

Release notes

Sourced from pymdown-extensions's releases.

12.0.1

  • FIX: BetterEm: fix a case with new logic.

12.0

  • BREAK: BetterEm: Complete rewrite. There may be some subtle differences between legacy behavior and new CommonMark behavior.

    • * and _ emphasis are handled at the same time to provide more natural nesting.
    • More performant.
    • CommonMark compliant.
  • BREAK: Tilde, Caret, Mark: Rewritten and now built upon the latest BetterEm logic.

    • When used with BetterEm, Tilde, Caret, and Mark will be added to the same delimiter processor under the hood and will be parsed at the same time as emphasis, allowing for better nesting logic.
    • More performant. Performance issues reported by (@​lexdotdev).
    • Tilde, Caret, Mark: Allow deletion, insertions, and marking mid-word by default. Set smart_delete, smart_insert, or smart_mark, respectively, to enable previous behavior, which prevented mid-word deletion.
    • Tilde, Caret: Add new option no_space to control whether the Pandoc style requirement of "no unescaped spaces" is enabled for subscript and superscript, respectively. no_space is enabled by default.
  • NEW: Details, Blocks.Details, Blocks.Admonitions: Allow and handle headers specially in titles.

  • NEW: Quotes: Allow and handle headers specially in callout titles.

  • NEW: BracketSpan: New extension that allows for the creation of spans using a Pandoc style bracket notation.

  • NEW: Arithmatex: Remove deprecated inline_mathjax_preview_format, inline_mathjax_format, and inline_generic_format. Use arithmatex_inline_format instead.

  • NEW: Arithmatex: Remove deprecated fence_mathjax_preview_format, fence_mathjax_format, and fence_generic_format. Use arithmatex_fenced_format instead.

  • NEW: Emoji: Remove undocumented and deprecated "old style" custom emoji index logic.

  • NEW: Slugs: Remove deprecated uslugify, uslugify_encoded, uslugify_cased, uslugify_cased_encoded, gfm, and gfm_encoded. Use the documented slugify method with appropriate arguments instead.

11.0.2

  • FIX: InlineHilite: Improve performance of inline code matching.
  • FIX: Keys: Fix regex pattern inefficiencies.
  • FIX: Blocks.HTML: Fix backtracking in HTML extension.
Commits

Updates pygments from 2.20.0 to 2.21.0

Release notes

Sourced from pygments's releases.

2.21.0

  • New lexers:

  • Updated lexers:

    • Bash: Fix coloured keyword at the beginning of a name (#2926)
    • Boogie: Add missing Boogie and Civl Verifier keywords (#3156)
    • C#:
      • Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)
      • Support dollar-prefixed and multi-quote raw strings (#3129, #2897)
      • Recognize union (#3182)
    • C/C++:
      • Add C23/C++26 attributes (#3084)
      • Add more C2Y keywords (#3092)
      • Highlight a function following a namespace body (#2928)
      • Fix C/C++ lexer support for multiline pre-processor comments (#3051)
      • Add .ipp as a file extension (#3141, #1008)
    • Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)
    • Csound: Add missing opcode parameter type letter (#3161)
    • CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)
    • D: Allow non-ASCII (Unicode) identifiers (#1088)
    • Fish: Fix single quote backslash escape (#3138, #2821)
    • Go: Various lexer improvements (#3199)
    • GoogleSQL: Require a word break after SET (#3167)
    • Hexdump: Only match valid digits (#3200, #2847)
    • JavaScript: Highlight the arguments object (#3146)
    • Jsonnet: Recognize colons in array slice expressions (#2828)
    • JSX: Allow apostrophes in element text (#2816)
    • Julia: Fix rstrings backslash (#3140, #2537)
    • Kotlin: Support companion objects without an explicit name (#2525)
    • Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)
    • Kusto: Recognize member-access dots in dynamic objects (#2779)
    • Lua: Various improvements (#3143)
    • Macaulay2: Update symbols to 1.26.05 (#3120)
    • Markdown:
      • Highlight bold-italics (***...*** and ___...___) (#3067)
      • Fix mention regex to support hyphens in usernames (#3139, #3135)
    • Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for embedded code blocks (#3133)
    • Mathematica: Recognize \[Name] named-character escapes such as \[Nu] instead of emitting an Error token (#3097)

... (truncated)

Changelog

Sourced from pygments's changelog.

Version 2.21.0

(released August 17th, 2026)

  • New lexers:

  • Updated lexers:

    • Bash: Fix coloured keyword at the beginning of a name (#2926)
    • Boogie: Add missing Boogie and Civl Verifier keywords (#3156)
    • C#:
      • Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)
      • Support dollar-prefixed and multi-quote raw strings (#3129, #2897)
      • Recognize union (#3182)
    • C/C++:
      • Add C23/C++26 attributes (#3084)
      • Add more C2Y keywords (#3092)
      • Highlight a function following a namespace body (#2928)
      • Fix C/C++ lexer support for multiline pre-processor comments (#3051)
      • Add .ipp as a file extension (#3141, #1008)
    • Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)
    • Csound: Add missing opcode parameter type letter (#3161)
    • CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)
    • D: Allow non-ASCII (Unicode) identifiers (#1088)
    • Fish: Fix single quote backslash escape (#3138, #2821)
    • Go: Various lexer improvements (#3199)
    • GoogleSQL: Require a word break after SET (#3167)
    • Hexdump: Only match valid digits (#3200, #2847)
    • JavaScript: Highlight the arguments object (#3146)
    • Jsonnet: Recognize colons in array slice expressions (#2828)
    • JSX: Allow apostrophes in element text (#2816)
    • Julia: Fix rstrings backslash (#3140, #2537)
    • Kotlin: Support companion objects without an explicit name (#2525)
    • Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)
    • Kusto: Recognize member-access dots in dynamic objects (#2779)
    • Lua: Various improvements (#3143)
    • Macaulay2: Update symbols to 1.26.05 (#3120)
    • Markdown:
      • Highlight bold-italics (***...*** and ___...___) (#3067)
      • Fix mention regex to support hyphens in usernames (#3139, #3135)
    • Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for

... (truncated)

Commits
  • a43b45d Get ready for the 2.21.0 release.
  • d8f14cb Fix version_added for Purescript.
  • 19c5817 Remove superfluous parentheses from PostgresExplainLexer (#3232)
  • 9992e09 Merge pull request #3191 from jvoisin/dupes
  • bd22577 Fix regexlint warnings after latest update.
  • 6a62df1 Release preparation: Update the changelog.
  • aabba32 Merge pull request #3221 from jvoisin/alter
  • d3441d0 Merge pull request #3225 from jvoisin/caddy
  • c593f3f Add a lexer for Caddy
  • 0644b53 Simplify single-character regex alternations to character classes
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates pyrefly from 1.2.0 to 1.3.1

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.1

Release date: September 14, 2026

Pyrefly v1.3.1 is a patch release with a single bug fix.


🐛 Bug fixes

  • #4909: Fixed a critical issue where Pyrefly would immediately crash on startup with a thread panic when empty or relative base paths were encountered during configuration. The server now safely resolves these paths against the working directory, preventing the crash and allowing normal operation.

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here.


📦 Upgrade

pip install --upgrade pyrefly==1.3.1

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

  1. pyrefly check --suppress-errors
  2. Run your code formatter of choice
  3. pyrefly check --remove-unused-ignores
  4. Repeat until you achieve a clean formatting run and a clean type check.

This will add # pyrefly: ignore comments to your code, enabling you to silence errors and return to fix them later. This can make the process of upgrading a large codebase much more manageable.

Read more about error suppressions in the Pyrefly documentation.

Pyrefly v1.3.0

Release date: September 10, 2026

Pyrefly v1.3.0 bundles 934 commits from 71 contributors.


🔍Release Highlights

Type Checking

  • New diagnostics and more accurate type inference. Pyrefly now catches invalid literal regular expressions, invalid mock.patch targets, unsupported dataclass_transform arguments, incompatible Protocol.__call__ overrides, and unimplemented abstract methods. Pattern-match exhaustiveness, overload resolution, narrowing, and generic inference are also more accurate.
  • Better support for major Python frameworks. Pyrefly understands same-file Django reverse relationships, checks SQLAlchemy updates against model fields, and recognizes attributes registered on PyTorch modules.

Language Server

... (truncated)

Commits

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

@dependabot dependabot Bot added the dependencies Dependabot version bumps label Sep 25, 2026
@read-the-docs-community

read-the-docs-community Bot commented Sep 25, 2026 •

Copy link
Copy Markdown

@codspeed

codspeed Bot commented Sep 25, 2026 •

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 24 untouched benchmarks
⏩ 82 skipped benchmarks1


Comparing dependabot/pip/python-f1be7caba5 (05c6bf1) with main (8c783ca)2

Open in CodSpeed

Footnotes

  1. 82 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

  2. No successful run was found on main (300fc71) during the generation of this report, so 8c783ca was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

@dependabot dependabot Bot changed the title chore: bump the python group with 6 updates chore: bump the python group across 1 directory with 6 updates Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-f1be7caba5 branch from a25ca03 to 1e5b030 Compare September 25, 2026 11:51
Bumps the python group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [zensical](https://github.com/zensical/zensical) | `0.0.62` | `0.0.64` |
| [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `11.0.1` | `12.0.1` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.8` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.2.0` | `1.3.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |



Updates `zensical` from 0.0.62 to 0.0.64
- [Release notes](https://github.com/zensical/zensical/releases)
- [Commits](zensical/zensical@v0.0.62...v0.0.64)

Updates `pymdown-extensions` from 11.0.1 to 12.0.1
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@11.0.1...12.0.1)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.20.0...2.21.0)

Updates `ruff` from 0.16.1 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.8)

Updates `pyrefly` from 1.2.0 to 1.3.1
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.2.0...1.3.1)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pymdown-extensions
  dependency-version: 12.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: pyrefly
  dependency-version: 1.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: zensical
  dependency-version: 0.0.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-f1be7caba5 branch from 1e5b030 to 357fe20 Compare September 25, 2026 16:33
… ruff hook matches the pinned 0.16.8

pyrefly 1.3.1 refuses to unpack an inferred dict into Result, no longer
narrows an isinstance against a class read off sys.modules, and finds
the implicit-any-lambda pragma in assembly.py unused. The two Result
call sites name their keywords, frames.py imports pandas only once it
is already loaded and narrows on the real class, and the pragma goes.
The ruff-pre-commit rev moves with the dev pin so
tests/test_tooling_pins.py holds, and uv.lock follows the six bumps.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G62CnFXqNPbaeycnP7p1kp

FBumann commented Sep 25, 2026

Copy link
Copy Markdown
Collaborator

Prompt: fix #1761

Note

The following content was generated by AI.

Two gates refused the bump: tests/test_tooling_pins.py, because the pre-commit hook still pinned ruff 0.16.1, and pixi run typecheck, because pyrefly 1.3.1 reads three things differently. The pushed commit merges main in and fixes both; no runtime behaviour changes.

What pyrefly 1.3.1 refused, and the fix
  • api.py: an inferred dict is now an open TypedDict, so **carried into Result(...) is refused. Both call sites name the four keywords directly.
  • frames.py: an isinstance against a class read off sys.modules no longer narrows, so the pd.Series and pd.DataFrame branches saw the whole Source union. pandas is now imported inside the function once it is already in sys.modules (the same guard as before, so a bare install still never imports it), and _series_to_frame takes a bare pd.Series, which is what narrowing a union against the class yields.
  • assembly.py: the implicit-any-lambda pragma is now unused, so it goes.
  • .pre-commit-config.yaml moves to v0.16.8 with the dev pin; uv.lock follows the six bumps. chore: bump https://github.com/astral-sh/ruff-pre-commit from v0.16.1 to 0.16.8 in the hooks group #1759 makes the same pin change from the other side.
Verified

In a uv environment on Python 3.12 with the dev group and the gurobi and xpress extras:

  • ruff check . and ruff format --check . under 0.16.8: clean.
  • pyrefly check under 1.3.1, package and linopy references: 0 errors.
  • pytest -q -n auto: 4040 passed, 320 skipped, 1 xfailed.
  • pytest bench/test_harness.py -q: 149 passed, 6 skipped.
  • Not run here: the docs job (zensical and pymdown-extensions bumps); it was green on this PR's earlier head.

Generated by Claude Code

@FBumann
FBumann merged commit 68234d2 into main Sep 25, 2026
13 checks passed
@FBumann
FBumann deleted the dependabot/pip/python-f1be7caba5 branch September 25, 2026 17:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependabot version bumps

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants