Bump the python group across 1 directory with 20 updates by dependabot[bot] · Pull Request #473 · egraphs-good/egglog-python

dependabot · 2026-11-03T16:41:37Z

Bumps the python group with 20 updates in the / directory:

Package	From	To
black	`26.5.1`	`26.10.1`
opentelemetry-api	`1.44.0`	`1.45.2`
array-api-compat	`1.15.0`	`1.16.0`
numba	`0.67.0`	`0.68.1`
llvmlite	`0.49.0`	`0.50.0`
numpy	`2.5.3`	`2.5.4`
ruff	`0.16.8`	`0.17.3`
pre-commit	`4.6.2`	`4.7.0`
mypy	`2.3.1`	`2.4.1`
jupyterlab	`4.6.3`	`4.6.5`
ipykernel	`7.3.0`	`7.4.0`
pytest	`9.1.1`	`9.2.0`
opentelemetry-sdk	`1.44.0`	`1.45.2`
opentelemetry-exporter-otlp-proto-http	`1.44.0`	`1.45.2`
pytest-codspeed	`5.0.3`	`5.0.4`
pydata-sphinx-theme	`0.21.0`	`0.23.0`
sphinx-autodoc-typehints	`3.13.7`	`3.17.4`
nbconvert	`7.17.1`	`7.17.2`
line-profiler	`5.0.2`	`5.1.0`
jupytext	`1.19.5`	`1.19.6`

Updates black from 26.5.1 to 26.10.1

Release notes

Sourced from black's releases.

26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)

Keep repeated lines outside the selected --line-ranges unchanged (#5436)

Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)

Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)

Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)

Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)

Preview style

Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)

Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)

Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)

Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)

Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)

Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)

Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an earlier bracket split exceeds the line length only due to a trailing comment (#5498)

Configuration

Add --cache-dir to configure the cache directory from the command line (#5433)

Don't cache a file as formatted after formatting or checking it with --line-ranges,

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)

Keep repeated lines outside the selected --line-ranges unchanged (#5436)

Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)

Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)

Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)

Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)

Preserve blank lines between imports and unselected statements when using --line-ranges, and ensure a blank line is added between an unselected import and a newly formatted statement (#5493, #5649)

Keep the parentheses around a walrus that is the only item in a set (for example {(x := f())}) when targeting Python 3.9 or older, since Python 3.8 and 3.9.0 can't parse it without them (#5502)

Preview style

Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)

Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)

Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)

Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)

Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)

Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)

... (truncated)

Commits

258e7db Prepare release 26.10.1 (#5511)
ac1f715 Action: validate required-version better (#5510)
fe241cc Avoid splitting trailers when earlier bracket split exceeds length due to com...
4fb2897 Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#5500)
6d0f557 Bump actions/download-artifact from 8.0.1 to 8.0.2 (#5501)
c45f21d Handle PEP 695 type parameter whitespace in whitespace() (#5504)
8ec61a7 Skip UTF-8 BOM when reading .gitignore (#5497)
c9b1148 Fix module docstring last_line_length when docstring ends with newline (#5494)
eb88358 Parenthesize expressions with parameter comments in preview (#3113) (#5442)
939fa93 Keep the parentheses around a right-hand side when a dict value's parentheses...
Additional commits viewable in compare view

Updates opentelemetry-api from 1.44.0 to 1.45.2

Release notes

Sourced from opentelemetry-api's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#5509)

opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#5511)

opentelemetry-sdk: add host.id to the host resource detector (#5653)

opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#5681)

Changed

Enable PIE (flake8-pie) ruff rule and fix all violations (#5150)

The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#5266)

opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#5369)

[BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#5380)

opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#5389)

opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)

opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#5491)

... (truncated)

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal

... (truncated)

Commits

ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
4f0fcfa Prepare release 1.45.0/0.66b0 (#5690)
9406f34 opentelemetry-test-utils: add CapturingSampler for instrumentation tests (#5681)
1fe31a9 fix: update W3CBaggagePropagator to properly handle whitespace (#5680)
Additional commits viewable in compare view

Updates array-api-compat from 1.15.0 to 1.16.0

Changelog

Sourced from array-api-compat's changelog.

1.16.0 (2026-10-25)

New features

New helpers for the mparray library have been added: is_mparray_array and is_mparray_namespace.

New helpers for the dpnp library have been added: is_dpnp_array and is_dpnp_namespace.

torch.reshape now implements copy= arguments.

Pytorch binary functions have been wrapped to accept (array, python scalar) pairs.

Perfomance and other improvements

Performance of numpy.clip has been improved

numpy.reshape uses the native numpy reshape function for numpy >= 2.1

Multiple fft functions avoid an unneccessary copy, which improves performance and memory consumption

py.typed marker is included in the installed package.

The following users contributed to this release:

Raashish Aggarwal, Evgeni Burovski, Lucas Colley, Stanley C, Matt Haberland, Tim Head, Chris Ninham, Laslo Ruhberg.

Commits

f95b0f8 REL: bump the version to 1.16.0
38d5389 DOC: add a 1.16 changelog entry
e449568 Merge pull request #478 from raashish1601/fix/271-torch-binary-scalars
513ef5e TST: torch: add a test that binary_func(scalar, scalar) raises
b8ac264 Merge pull request #482 from ev-br/ci_hashes_not_tags
57f661b CI: use hashes for GH workflows
482d5f9 Merge pull request #479 from data-apis/dependabot/github_actions/actions-85ec...
335e1f3 Bump dawidd6/action-download-artifact from 26 to 27 in the actions group
e049f92 BUG: torch: accept Python scalars in binary elementwise functions
f0ead55 Merge pull request #477 from data-apis/dependabot/github_actions/actions-045d...
Additional commits viewable in compare view

Updates numba from 0.67.0 to 0.68.1

Updates llvmlite from 0.49.0 to 0.50.0

Release notes

Sourced from llvmlite's releases.

0.50.0

Please find the detailed release notes here: https://llvmlite.readthedocs.io/en/v0.50.0/release-notes.html

Commits

de6d534 Merge pull request #1496 from swap357/changelog_0.50_final
c195535 add changelog update PR entry
d12d42b update date and PR list on CHANGE_LOG for 0.50.0 final release
ba6daa3 Merge pull request #1492 from swap357/cherry_pick_win-arm64_fix
b87d436 Merge pull request #1491 from swap357/ci/remove_bootstrap_channels_win-arm64
bb4a247 Merge pull request #1484 from swap357/changelog_0.50
6af5f88 address review: update glibc compatibility highlight
201997a add missing merge commit
78181e3 update changelog for v0.50.0
a3d4140 Merge pull request #1454 from numba/renovate/actions-checkout-7.x
Additional commits viewable in compare view

Updates numpy from 2.5.3 to 2.5.4

Release notes

Sourced from numpy's releases.

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Released on 2026-10-10.

NumPy 2.5.4 is a patch release that fixes bugs discovered after the 2.5.3 release. Highlights are:

Many typing fixes and improvements,

A workaround for the MSVC 19.51 bug, see below.

This release supports Python versions 3.12-3.15.

Improvements

numpy.linalg.svd and numpy.linalg.lstsq now raise for inputs containing infinities instead of returning garbage results.

Fixed hangs in numpy.linalg.svd and numpy.linalg.lstsq for certain inputs containing infinities for recent versions of some LAPACK implementations.

numpy.linalg.cond now handles non-finite inputs more consistently.

(gh-32593)

StringDType hashing with NaN sentinels

StringDType instances with equivalent floating-point NaN sentinels now have equal hashes. Previously, distinct NaN objects could produce equal dtype instances with different hashes, causing dictionary lookups and set deduplication to fail.

(gh-32563)

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

A fill_value copied from a source array is now reset to the default fill_value for the new dtype when it cannot be represented in that dtype. Previously the copied value could be stale: ufuncs that change dtype left the result holding a fill_value typed for the old dtype, which raised a TypeError only when something later validated it (such as .view()), and a floating point fill_value that overflows an integer dtype was kept as an out-of-range value together with a RuntimeWarning. Both now fall back to the default, including when a masked array is passed to MaskedArray with a different dtype. A fill_value given explicitly by the user is still validated and raises as before. This can now raise a ComplexWarning if the fill_value is complex and the new dtype is real.

... (truncated)

Commits

a3d0ef1 Merge pull request #32969 from charris/prepare-2.5.4
087b536 MAINT: Make OpenBLAS version check use 2.5.x branch.
91acd87 REL: Prepare for the NumPy 2.5.4 release.
9cc555b Merge pull request #32956 from charris/backport-typing-1
e04b972 TYP: dtype[void].names: allow setting with list (#32943)
d929969 TYP: timedelta64: datetime.timedelta construction isn't deprecated (#...
839467f TYP: ma.getmaskarray: accept array-likes (#32934)
64b721b TYP: polynomial: accept scalar coef in the poly constructors (#32931)
06b7ad2 TYP: void: accept any dtype: str in constructor calls (#32928)
c7bcd2c TYP: place: widen mask (#32926)
Additional commits viewable in compare view

Updates ruff from 0.16.8 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"
Download ruff 0.17.3

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

0.17.2

Released on 2026-10-22.

Preview features

[complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)

[pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)

[pylint] Avoid false positive on starred elements (PLE0643) (#29483)

[pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)

[pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

Avoid intermediate names in lint name resolution (#29506)

Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)

Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

ba65abf Bump version to 0.17.3 (#29745)
fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
d181287 [ty] Index nominal union alternatives (#29196)
07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
60f104a [ty] Honor @override on overload implementations in stubs (#29470)
207ec3a [ty] Add diagnostic baseline support (#27636)
Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Commits

65bb884 v4.7.0
73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
860d07d don't leak GIT_* env into npm install for language: node
9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
9905e88 use contextlib.chdir
59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
2be1701 remove triple-nested withs for 3.14 coverage
4c8d22a py311+
c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
f49e251 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates mypy from 2.3.1 to 2.4.1

Changelog

Sourced from mypy's changelog.

Mypy 2.4.1

Process overloads as a whole in two-phase type checking (Ivan Levkivskyi, PR 22231)

Skip recursive setup for frame-private nested functions in mypyc (Piotr Sawicki, PR 22187)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

A5rocks

Adam Dangoor

Alex Waygood

Ali Hamdan

Brian Helba

Chad Dombrova

David Foster

dnwpark

Edgar Ramírez Mondragón

Giorgos Michas

Ivan Levkivskyi

Jelle Zijlstra

Jukka Lehtosalo

Marc Mueller

Michael R. Crusoe

NIYONSHUTI Emmanuel

Piotr Sawicki

Shantanu

themylogin

Vaggelis Danias

Willy Bruns

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

... (truncated)

Commits

ad02a35 Skip test for 2.4.1
cad7794 Finalize version to 2.4.1
d9cbcbc Add changelog for Mypy 2.4.1 (#22310)
2860baa Process overloads as a whole in two-phase type-checking (#22231)
9b3e307 [mypyc] Skip recursive setup for frame-private nested functions (#22187)
10ad5f6 Bump ast-serialize to 0.12.1 (#22093)
350052f Bump ast-serialize to 0.12.0 (#22087)
f7d08cf Bump version to 2.4.1+dev
935ba8a Bump version to 2.4.0
334a678 Add link for PR 22066 in mypy 2.4 changelog (#22082)
Additional commits viewable in compare view

Updates jupyterlab from 4.6.3 to 4.6.5

Release notes

Sourced from jupyterlab's releases.

v4.6.5

4.6.5

(Full Changelog)

Bugs fixed

Restrict path suggestions to the file dialog root #20298 (@krassowski)

Fix find in the JSON viewer #20023 (@jtpio)

Fix editor rulers drawn at the wrong columns when the code font loads late #20310 (@krassowski)

Fix "New Python File" appearing twice in the file browser context menu #20305 (@dturaev)

Upgrade @codemirror/view to 6.43.15, fixing text loss when typing with dead keys #20302 (@dturaev)

Fix React toolbar items flickering when they move into the "More commands" menu #20285 (@brichet)

Brighten mirror-editor attribute color in the dark themes #19257 (@nina-mir)

Fix memory leaks affecting common everyday use scenarios #19370 (@krassowski)

Fix settings search for properties nested in object settings #20008 (@irontaek)

Avoid rerendering Markdown preview on tab switch #20289 (@krassowski, @xuezhongyu01)

Fix toolbar items incorrectly wrapping rather than collapsing into Mode commands menu #20191 (@krassowski)

Do not open a second tab on reload for a file open in another view #19996 (@Yash990-bit)

Fix dropped debugger requests when the session connection is reassigned #20153 (@Darshan808)

Debugger: only re-send breakpoints when the cell source changes #20154 (@Darshan808)

Fix layout restoration on reload edge cases #19934 (@krassowski)

Stop Enter and Space on a toolbar button from typing into the newly focused cell #20176 (@chanellebingham)

Fix images in Markdown with URL query/fragment #20184 (@krassowski)

Read the Help menu kernel info from the current widget's connection #20189 (@krassowski, @Yagnik-Trivedi)

Show disabled on default keyboard shortcuts in the JSON Settings Editor #20169 (@paulmromer)

Fix IPython history reset when opening a new view of a notebook #20155 (@faysou)

Fix console tab tooltip showing "Last Execution: undefined" #19965 (@SatyamKumarCS)

Do not display kernel sources once the debugger has stopped #19962 (@pjdoland)

Stabilize the metadata form UI tests #19944 (@pjdoland)

Fix semantic command buttons visibility #19943 (@brichet)

Do not request kernel sources when the debugger is not started #19937 (@pjdoland)

Fix literal metacharacters in inline history completion #19776 (@x0Lazarus)

Maintenance and upkeep improvements

Stabilize notebook execution and memory lifecycle tests #19951 (@MUFFANUJ)

Fix and speedup release-test: do not use conda #20179 (@krassowski)

Bump jest-junit to v17 #20107 (@Yagnik-Trivedi)

Speed up Windows CI by moving temporary files and package caches to the D drive #20061 (@krassowski)

Pin fonts on vega snapshots

Bumps the python group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [black](https://github.com/psf/black) | `26.5.1` | `26.10.1` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [array-api-compat](https://github.com/data-apis/array-api-compat) | `1.15.0` | `1.16.0` | | [numba](https://numba.pydata.org) | `0.67.0` | `0.68.1` | | [llvmlite](https://github.com/numba/llvmlite) | `0.49.0` | `0.50.0` | | [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.17.3` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` | | [mypy](https://github.com/python/mypy) | `2.3.1` | `2.4.1` | | [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.6.3` | `4.6.5` | | [ipykernel](https://github.com/ipython/ipykernel) | `7.3.0` | `7.4.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [pytest-codspeed](https://github.com/CodSpeedHQ/pytest-codspeed) | `5.0.3` | `5.0.4` | | [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.21.0` | `0.23.0` | | [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.13.7` | `3.17.4` | | [nbconvert](https://github.com/jupyter/nbconvert) | `7.17.1` | `7.17.2` | | [line-profiler](https://github.com/pyutils/line_profiler) | `5.0.2` | `5.1.0` | | [jupytext](https://github.com/jupytext/jupytext) | `1.19.5` | `1.19.6` | Updates `black` from 26.5.1 to 26.10.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.5.1...26.10.1) Updates `opentelemetry-api` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `array-api-compat` from 1.15.0 to 1.16.0 - [Release notes](https://github.com/data-apis/array-api-compat/releases) - [Changelog](https://github.com/data-apis/array-api-compat/blob/main/docs/changelog.md) - [Commits](data-apis/array-api-compat@1.15...1.16) Updates `numba` from 0.67.0 to 0.68.1 Updates `llvmlite` from 0.49.0 to 0.50.0 - [Release notes](https://github.com/numba/llvmlite/releases) - [Commits](numba/llvmlite@v0.49.0...v0.50.0) Updates `numpy` from 2.5.3 to 2.5.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.5.3...v2.5.4) Updates `ruff` from 0.16.8 to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.8...0.17.3) Updates `pre-commit` from 4.6.2 to 4.7.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0) Updates `mypy` from 2.3.1 to 2.4.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.1) Updates `jupyterlab` from 4.6.3 to 4.6.5 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.6.3...@jupyterlab/lsp@4.6.5) Updates `ipykernel` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/ipython/ipykernel/releases) - [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md) - [Commits](ipython/ipykernel@v7.3.0...v7.4.0) Updates `pytest` from 9.1.1 to 9.2.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.1...9.2.0) Updates `opentelemetry-sdk` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `opentelemetry-exporter-otlp-proto-http` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `pytest-codspeed` from 5.0.3 to 5.0.4 - [Release notes](https://github.com/CodSpeedHQ/pytest-codspeed/releases) - [Changelog](https://github.com/CodSpeedHQ/pytest-codspeed/blob/master/CHANGELOG.md) - [Commits](CodSpeedHQ/pytest-codspeed@v5.0.3...v5.0.4) Updates `pydata-sphinx-theme` from 0.21.0 to 0.23.0 - [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases) - [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md) - [Commits](pydata/pydata-sphinx-theme@v0.21.0...v0.23.0) Updates `sphinx-autodoc-typehints` from 3.13.7 to 3.17.4 - [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases) - [Changelog](https://github.com/tox-dev/sphinx-autodoc-typehints/blob/main/docs/changelog.rst) - [Commits](tox-dev/sphinx-autodoc-typehints@3.13.7...3.17.4) Updates `nbconvert` from 7.17.1 to 7.17.2 - [Release notes](https://github.com/jupyter/nbconvert/releases) - [Changelog](https://github.com/jupyter/nbconvert/blob/main/CHANGELOG.md) - [Commits](jupyter/nbconvert@v7.17.1...v7.17.2) Updates `line-profiler` from 5.0.2 to 5.1.0 - [Release notes](https://github.com/pyutils/line_profiler/releases) - [Changelog](https://github.com/pyutils/line_profiler/blob/main/CHANGELOG.rst) - [Commits](pyutils/line_profiler@v5.0.2...v5.1.0) Updates `jupytext` from 1.19.5 to 1.19.6 - [Release notes](https://github.com/jupytext/jupytext/releases) - [Changelog](https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md) - [Commits](jupytext/jupytext@v1.19.5...v1.19.6) --- updated-dependencies: - dependency-name: black dependency-version: 26.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-api dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: array-api-compat dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: numba dependency-version: 0.68.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: llvmlite dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: numpy dependency-version: 2.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: ruff dependency-version: 0.17.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pre-commit dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: mypy dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: jupyterlab dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: ipykernel dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pytest dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-sdk dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pytest-codspeed dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: pydata-sphinx-theme dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: sphinx-autodoc-typehints dependency-version: 3.17.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: nbconvert dependency-version: 7.17.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: line-profiler dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: jupytext dependency-version: 1.19.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

codspeed · 2026-11-03T16:50:12Z

Merging this PR will not alter performance

✅ 14 untouched benchmarks

_{Comparing dependabot/uv/python-f0b8a7dbc0 (fa04129) with main (22bfc5a)}

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 3, 2026

Navigation Menu

Repository navigation

Bump the python group across 1 directory with 20 updates - #473

Bump the python group across 1 directory with 20 updates#473
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-f0b8a7dbc0

dependabot Bot commented on behalf of github Nov 3, 2026

Uh oh!

codspeed Bot commented Nov 3, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

Conversation

dependabot Bot commented on behalf of github Nov 3, 2026

26.10.1

Highlights

Stable style

Preview style

Configuration

Version 26.10.1

Highlights

Stable style

Preview style

Version 1.45.2/0.66b2

Added

Fixed

Version 1.45.1/0.66b1

Fixed

Version 1.45.0/0.66b0

Added

Changed

Version 1.45.2/0.66b2 (2026-10-29)

Added

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

1.16.0 (2026-10-25)

New features

Perfomance and other improvements

The following users contributed to this release:

0.50.0

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Improvements

StringDType hashing with NaN sentinels

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

0.17.3

Release Notes

Preview features

Bug fixes

Performance

Documentation

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.3

0.17.3

Preview features

Bug fixes

Performance

Documentation

Contributors

0.17.2

Preview features

Bug fixes

Performance

pre-commit v4.7.0

Fixes

4.7.0 - 2026-10-12

Fixes

Mypy 2.4.1

Acknowledgements

Mypy 2.3

The Upcoming Switch to the New Native Parser

Mypyc Free-threading Memory Safety

v4.6.5

4.6.5

Bugs fixed

Maintenance and upkeep improvements

Uh oh!

codspeed Bot commented Nov 3, 2026

Merging this PR will not alter performance

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

`MaskedArray` resets a fill_value that cannot be represented in a new dtype